Privacy
This policy sets out what WLP COMPANY collects when you use Super Pizza, why, how long it is kept and what you can ask us to do about it. It covers this marketing site and the sites we publish for customer venues.
Who is responsible
WLP COMPANY, 147 rue Sainte-Rose, 73000 Chambéry, France, is the data controller. Contact: [email protected].
What we hold
| Data | Why | Lawful basis | Kept for |
|---|---|---|---|
| Email address | To create your account and send you service messages | Performance of a contract | While the account is open, then 3 years |
| Venue details (name, address, hours, menu, photos) | To publish your site | Performance of a contract | While the account is open, then 30 days |
| Billing details | To charge the Premium subscription | Contract and legal obligation | 10 years (accounting law) |
| Technical logs (IP address, pages, timestamps) | Security and fault diagnosis | Legitimate interests | 12 months |
| Orders placed on a customer venue’s site | To pass the order to the venue | Contract between the diner and the venue | 13 months |
Where you are, when you let us
The search box on the home page finds your restaurant on Google. To put the nearest matches first it needs a rough idea of where you are, so it asks your browser. If you allow it, that point is sent to Google with that search and used for nothing else. If you refuse — or your browser has no location to give — we approximate from your IP address instead, which lands somewhere in your town. Neither is written down, and refusing costs you nothing but the ordering of a list.
Cookies
This site sets only the cookies it needs to work — session and language preference. There is no advertising cookie and no third-party analytics, which is why you are not asked to consent to any.
Who else sees it
Authorised staff at WLP COMPANY, and our hosting provider, which acts on our instructions for the purposes above. The data we process is not transferred outside the European Economic Area.
Premium subscriptions are paid directly to Stripe, on Stripe's own pages: your card details are entered there, and we never see or store them. We pass Stripe only the venue's name and the account's email address, and keep on our side only the state of the subscription (active, cancelled, renewal date). Stripe processes this data under its own responsibility, according to its privacy policy, and may transfer it outside the European Economic Area under the safeguards provided by the GDPR.
Your rights
You can ask for a copy of your data, ask us to correct or erase it, object to or restrict how we use it, and ask for it in a portable format. Write to [email protected] and we will answer within one month.
If you are not satisfied, you can complain to a supervisory authority. Because the controller is established in France, that is the CNIL — cnil.fr. If you are in the United Kingdom you may instead complain to the Information Commissioner's Office — ico.org.uk.
Orders placed with a venue
When a diner orders through a pizzeria's site published with Super Pizza, the venue is the controller for that order and WLP COMPANY is its processor under article 28 UK GDPR / GDPR. Requests about an order should go to the venue; we pass on any that reach us.
Offers sent by a restaurant
Whatever its plan, a restaurant can keep a list of the customers who agreed to receive its offers — by signing up on its site, or by giving the restaurant their consent, which the restaurant declares when it adds them. On Premium, it can email its offers to them. For this list and these emails the restaurant is in charge of the data and WLP COMPANY processes it only on its behalf (as its processor under article 28 of the GDPR).
On its behalf we keep the email address, the name and phone number where given, and the proof of consent: its date, where it came from and, for a signup on the site, an irreversible fingerprint of the IP address — never the address itself. A signup on the site only takes effect once the confirmation link sent by email is clicked; without that click it is erased after 30 days. The data is kept until the person unsubscribes or the restaurant deletes it, and is erased with the restaurant’s account.
Every email carries an unsubscribe link that works at once. An address that unsubscribes, bounces or marks a message as spam receives nothing more, and the restaurant cannot put it back on the list. Emails are delivered by Brevo (Sendinblue SAS, France), which hosts the data in the European Union and measures delivery, opens and clicks for each message; the restaurant sees the totals per campaign. To exercise your rights, contact the restaurant; we pass on any request that reaches us.
Last updated: 2026-10-27