Privacy

This policy explains what WLP COMPANY collects when you use Super Pizza, why, how long we keep it, and what you can ask us to do about it. It covers this marketing site and the websites we publish for customer restaurants. We are a French company, so the EU General Data Protection Regulation (GDPR) governs how we handle personal data, wherever you are. The section on US state privacy laws below explains how they relate to us.

Who is responsible

WLP COMPANY, 147 rue Sainte-Rose, 73000 Chambéry, France, is the data controller (the business that decides why and how the data is used). Contact: [email protected].

What we hold

Your location, if you allow it

The search box on the home page finds your restaurant on Google. To put the nearest matches first it needs a rough idea of where you are, so it asks your browser. If you allow it, that point is sent to Google with that search and used for nothing else. If you decline, or your browser has no location to give, we estimate it from your IP address instead, which lands somewhere in your town. Neither is stored, and declining costs you nothing but the order of a list.

Cookies

This site sets only the cookies it needs to work: your session and your language preference. There are no advertising cookies and no third-party analytics, which is why you are not asked to consent to any. We do not track you across other websites, so there is no cross-site tracking for a Global Privacy Control or “Do Not Track” signal to switch off.

Who else sees it

Authorized staff at WLP COMPANY, and our hosting provider, which acts on our instructions for the purposes above. The data we process is hosted in, and not transferred outside, the European Economic Area.

Premium subscriptions are paid directly to Stripe, on Stripe’s own pages. Your card details are entered there, and we never see or store them. We pass Stripe only the restaurant’s name and the account’s email address, and keep on our side only the state of the subscription (active, canceled, renewal date). Stripe processes this data under its own responsibility, according to its privacy policy, including in the United States, under the safeguards the GDPR provides for international transfers.

Your rights

Wherever you live, you can ask us for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Write to [email protected] and we will answer within one month. We will not treat you differently, or charge you more, for exercising any of these rights.

If you are not satisfied, you can complain to the French data protection authority, the CNIL, which supervises us because we are established in France: cnil.fr.

US state privacy laws

Several US states have consumer privacy laws, starting with California’s CCPA as amended by the CPRA. They apply to a business only above set thresholds. The CCPA applies to a for-profit business doing business in California that has annual gross revenue above $26,625,000 (the 2025 adjusted figure), or buys, sells or shares the personal information of 100,000 or more California consumers or households a year, or earns half or more of its revenue from selling or sharing personal information. Most other state laws, such as those of Virginia, Colorado and Connecticut, use similar tests based on the number of state residents whose data a business handles, and some, such as Texas, exempt small businesses.

WLP COMPANY is a small company that sells to restaurants, does not sell or share personal data, and to our knowledge meets none of these thresholds, so we do not believe these laws currently apply to us. We say so plainly rather than copy a compliance notice that doesn’t fit. The rights above are the ones we honor, and they already cover what those laws would give you: to know, to access, to correct, to delete, and not to be discriminated against for asking. If our situation changes, this page will change with it.

Orders placed with a restaurant

When a customer orders through a restaurant’s site published with Super Pizza, the restaurant decides what happens with that order’s data and WLP COMPANYprocesses it only on the restaurant’s behalf (as its processor under article 28 GDPR, or its service provider in the language of US state laws). Requests about an order should go to the restaurant; we pass on any that reach us.

Offers sent by a restaurant

Whatever its plan, a restaurant can keep a list of the customers who agreed to receive its offers — by signing up on its site, or by giving the restaurant their consent, which the restaurant declares when it adds them. On Premium, it can email its offers to them. For this list and these emails the restaurant is in charge of the data and WLP COMPANY processes it only on its behalf (as its processor under article 28 GDPR, or its service provider in the language of US state laws).

On its behalf we keep the email address, the name and phone number where given, and the proof of consent: its date, where it came from and, for a signup on the site, an irreversible fingerprint of the IP address — never the address itself. A signup on the site only takes effect once the confirmation link sent by email is clicked; without that click it is erased after 30 days. The data is kept until the person unsubscribes or the restaurant deletes it, and is erased with the restaurant’s account.

Every email carries an unsubscribe link that works at once. An address that unsubscribes, bounces or marks a message as spam receives nothing more, and the restaurant cannot put it back on the list. Emails are delivered by Brevo (Sendinblue SAS, France), which hosts the data in the European Union and measures delivery, opens and clicks for each message; the restaurant sees the totals per campaign. To exercise your rights, contact the restaurant; we pass on any request that reaches us.

Children

Super Pizza is a service for businesses. It is not directed to children under 13, and we do not knowingly collect their personal information.

Last updated: 2026-10-27