Last updated 14 September 2026
The short version. To deliver a pizza we need your name, a phone number and — for delivery — your address. We keep that to fulfil the order and to handle any problem with it. We do not sell it, we do not track you around the internet, and this website sets no cookies at all.
This website is operated by Rocce Woodstone Pizza Ltd, trading as Rocce, of 50 Broad Street, Chesham, Buckinghamshire, HP5 3DX. Registered in England and Wales, company number 15268266.
For the purposes of UK data protection law we are the data controller for the information described below — we decide what is collected and why.
Questions about this policy, or about your information, go to info@rocce.co.uk or 01494 794 100.
Every purpose below has a lawful basis under Article 6 of the UK GDPR. We have named it so you can see exactly why we hold each thing.
| What | Why | Lawful basis |
|---|---|---|
| Your name, phone number and email address | To take an order, tell you when it is ready or on its way, and reach you if something goes wrong with it | Performance of a contract |
| Your delivery address | To deliver the food, and to work out whether you are inside our delivery area and what the charge is | Performance of a contract |
| What you ordered, and what it cost | To make it, take payment, handle refunds and disputes, and meet our tax and accounting obligations | Performance of a contract, and legal obligation |
| Any note you add to an order | To follow your instructions — allergy information, buzzer codes, where to leave it | Performance of a contract |
| Your email or mobile, for offers | Only if you ticked the box to receive them | Consent — which you can withdraw at any time |
We never see your card details. Payment is taken by Stripe, and the card number goes from your browser straight to them. It does not pass through this website or our till, and we could not store it if we wanted to. We see only the last four digits and whether the payment succeeded.
We use a small number of suppliers to run the shop. Each acts on our instructions as a processor, under a contract, and none of them may use your information for their own purposes.
We will also disclose information where the law requires it — to the police, a court, or a regulator such as environmental health — and, if the business is ever sold, to the buyer.
Some of these suppliers process data outside the UK. Where they do, the transfer is covered by UK adequacy regulations or by the International Data Transfer Agreement, which are the mechanisms UK law provides for it.
We do not operate CCTV.
After that we delete it, or anonymise it so it can no longer identify you.
Under UK data protection law you may ask us to:
Write to info@rocce.co.uk. We will answer within one month. There is no charge.
The site and the ordering system are served over HTTPS. Access to customer records is limited to the people who need it to run the shop, and each has their own login. No system is perfectly secure, but we take this seriously and would tell you, and the ICO, if something went wrong in a way that put you at risk.
This is not a service aimed at children and we do not knowingly collect information about them. If you believe a child has given us their details, tell us and we will remove them.
This website sets no cookies. The detail is on the cookie policy.
If we change this policy we will change the date at the top. Where the change is significant we will say so on the website.
Come to us first — most things are quicker to fix that way. If you are not satisfied, you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113. You can go to the ICO without coming to us first.
