Privacy Policy

This policy explains what personal information we collect through luigisrestaurant.org, why we collect it, how long we keep it, who else sees it and what your rights are. It is written to meet UK data protection law (the UK GDPR and the Data Protection Act 2018, with PECR for cookies and email marketing). We keep it short and plain on purpose.

1. Who we are

We are the “controller”: the business that decides why and how your information is used.

• Legal name of the business: Desianos Limited (registered in England and Wales, company number 08562820)
• Trading as: Luigi’s Italian Restaurant
• Registered address: 3 The Quay, Sandwich, Kent, CT13 9EN
• Restaurant: 3 The Quay, Sandwich, Kent, CT13 9EN
• Telephone: 01304 615 297
• Email for privacy questions: [email protected], or use the contact form

The website is built and run for us by Mediant Partners Ltd, which acts as our “processor”: it handles your information only on our instructions, on our behalf, and not for any purpose of its own. Section 3 lists the other providers we use.

2. What we collect, why, and how long we keep it

We do not sell, rent or trade your personal information. This table covers everything we collect through the website. If we ask you for something that is not here, it is because we need it to answer you, and we will say so.

We may also share information where the law requires it, for example to answer a court order or a request from a regulator or the police. We do not use your information for automated decisions that affect you.

3. Who else handles your information

• Cloudflare: hosts the website and holds the database for the email list and form protection.
• Postmark: delivers our emails, including the messages you send us through the forms, our automatic replies, confirmation emails and newsletters.
• Mediant Partners Ltd: builds and runs the website, and administers the Cloudflare and Postmark accounts, on our behalf and on our instructions.
• Google: provides the restaurant’s email inbox and, if you do not press Reject, Google Analytics.
• Microsoft: provides Clarity, only if you press Accept.
• Zenchef: runs the table-booking window.
• Google Maps: provides the map, only if you press “Show the map”.

Cloudflare, Postmark, Mediant Partners, Google (inbox and Analytics) and Microsoft (Clarity) act as our processors. Zenchef runs its own service under their own privacy policies.

4. Sending information outside the UK

Some of these providers handle information outside the UK. Postmark (United States), Cloudflare (a United States company, with servers around the world), Google (United States) and Microsoft (United States) may all process your information in the US. Where they do, they rely on a safeguard UK law allows: an adequacy arrangement such as the UK extension to the EU–US Data Privacy Framework, or the UK’s standard contract terms. Each provider’s privacy information explains the one it uses.

5. Your rights

You have the right to:

• Be informed about how we use your information, which is what this policy is for.
• Access the personal data we hold about you and get a copy of it.
• Rectification: have anything inaccurate or incomplete corrected.
• Erasure: have your data deleted where there is no good reason for us to keep it.
• Restriction: ask us to stop using your data, other than keeping it, while a complaint or correction is looked at.
• Portability: receive the data you gave us, where we use it on the basis of your consent or a contract, in a form you can reuse or pass to someone else.
• Object to our use of your data where we rely on legitimate interests, and to any use for direct marketing. A marketing objection is always upheld.
• Withdraw your consent at any time, for example by using the unsubscribe link in any email from us, pressing Reject in “Cookie settings”, or telling us. Withdrawing does not affect what we did while you consented.

To use any of these, contact us or call 01304 615 297. We will usually answer within one month. We may need to check who you are first. There is no charge unless a request is clearly unreasonable.

6. Complaining

Please tell us first, so we can put things right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint, telephone 0303 123 1113.

7. Data security

We have put measures in place to protect your information from accidental loss and from unauthorised access, use, alteration and disclosure. The website is served over an encrypted connection, the email list is kept behind a password-protected admin area, and only the people who need it can see what you send us.

8. Changes to this policy

We post any changes on this page and change the date at the bottom. If a change affects how we use your information in a way you would not expect, we will tell you directly.

9. Our email list and replies to your messages

If you join our email list, we collect your email address, your first name if you give it, the date and the page you signed up on, and the wording you agreed to. We use them to send you news, menus, special evenings and booking announcements from Luigi’s. We rely on your consent to do this.

• We use a confirmation email (double opt-in): you are only added once you click the link in it.
• Every newsletter and welcome email has an unsubscribe link that works in one click. The confirmation email and the automatic reply to a form message are one-off service emails and do not. When you unsubscribe we keep a suppression record (your address, its status and the wording you agreed to) so that we never email you again by mistake. You can ask us to delete it completely, but then we could not stop a later accidental sign-up.
• We do not sell or share the list. Your details are handled for us by our website host and database (Cloudflare), our email delivery service (Postmark) and our developer (Mediant Partners), who act on our instructions.
• We do not use tracking pixels or link tracking in the newsletters, confirmation emails or automatic replies we send you.
• If you use the contact or careers form, we email you an automatic acknowledgement and send your message to the restaurant. If you tick the box to join the email list, we send the confirmation email described above.
• If you asked in person to join the list, the owner may add you; they record a note of how you agreed, and you can unsubscribe in the same way.
• You can ask us to see, correct or delete what we hold about you at any time, using the contact details in section 1.

10. Other services this website uses

• Map. The map in the Find Us section is not loaded until you press “Show the map”. It then comes from Google Maps, which receives your IP address and browser details and may set its own cookies under Google’s privacy policy.
• Booking. The booking window is provided by Zenchef. It is not loaded until you press a Book button or open a link to our booking window (such as the Book a table link in our emails), and what you enter there is handled by Zenchef under its own privacy policy.
• Email. Our emails are sent through Postmark. They process the address and message only to deliver it.
• Links away. Directions, reviews, ordering and vouchers link to other sites, which have their own policies.

11. Cookies and tracking

A small banner offers Reject and Accept. It doesn’t block the page. You can change your mind at any time with “Cookie settings” in the footer. Your answer is kept in your browser so the site doesn’t ask again. Besides that answer, the site remembers, in your browser only, that you have closed the sign-up box, so it does not keep showing it. No cookies are used for that.

• Google Analytics 4 counts visits and shows which pages are read, from what kind of device, and from which country. It is used only to improve this site, and it runs unless you press Reject or your browser sends Do Not Track or Global Privacy Control. It sets the cookies _ga and _ga_*, which last up to 2 years. We have switched off Google signals, ad personalisation and Google’s own use of this data, and we don’t use it for advertising. It runs on our legitimate interest in understanding how the site is used, and you can object at any time with Reject.
• Microsoft Clarity shows us heatmaps and recordings of how pages are used, such as where people click and scroll. It runs only if you press Accept, which you can withdraw at any time. It sets the cookies _clck (up to 1 year) and _clsk (1 day). The contact, careers and sign-up forms are masked, so what you type is never recorded.

Reject removes both tools’ cookies and stops them. Google (Google Analytics) and Microsoft (Clarity) process this data for us. Both providers process data in the US as well as elsewhere, under the safeguards UK law allows (see section 4). Read Google’s privacy policy and Microsoft’s. We keep Google Analytics data for 14 months at most.

Date: last updated 19 October 2026. This replaces the version dated 18 April 2024.