Privacy notice

Last updated: 3 October 2026

Who we are

Ivano's Italiano is a takeaway at 11 Whitesands, Dumfries DG1 2RR. It's a trading name of New Age Endeavour Ltd, registered in Scotland, company number SC761264, registered office 18 Bellevue Street, Dumfries DG1 3EJ. We're responsible for your personal information (the "controller"). Contact us about anything on this page at support@ivanos.uk or on .

We are registering with the Information Commissioner’s Office (the data protection fee) before we reopen. Our registration number will be shown here as soon as we have it.

What we collect

When you order online: your name, mobile number, email address, delivery address (for deliveries), what you ordered, the total, any discount code, and whether you'd like offers from us.
Notes for the kitchen: anything you write in the optional notes box at checkout, including any allergy information. We use it only to prepare that order, and it is kept with the order record (it is printed on the order’s tickets and staff can see it with the order).
When you order by phone: the same details you give us on the call (email only if you want the confirmation emailed).
If you create an account (you don’t have to: you can order as a guest): your name, email address, mobile number and address, so your next order is quicker; your past orders; and whether you’d like offers. If you set a password, we store it scrambled and can never read it. If you use Continue with Google, Google tells us your Google account’s identifier, your email address and your first and last name, and nothing else; we never see your Google password.
Payment: card payments are handled by Stripe. We never see or store your card number. We keep Stripe's reference for the payment and whether it was paid or refunded.
Emails we send you: a record that an email was sent, which kind it was, when, and the part of your address after the @ (for example gmail.com). Not the email itself.
Technical: your IP address, kept for up to 24 hours to stop abuse such as someone trying stolen cards.
Visit statistics: we use Clicky (Roxr Software Ltd) to count visits to our websites, ivanos.uk and ivanositaliano.co.uk, and see which pages are popular. It works without cookies and is never used for advertising. It sees the page you visit, the website that sent you, your device and browser, and your rough location, worked out from your IP address, which Clicky shortens so it no longer points to you. We don’t use it on the checkout, order-tracking or account pages.
Your basket is kept in your own browser (not on our server) until you order or clear it.

Why we use it, and our legal basis

To take, make and deliver your order, take payment, and send you the order emails (we’ve got your order, order confirmed, declined, not confirmed in time, refund). Basis: our contract with you.
To keep accounts and tax records. Basis: legal obligation.
To keep a customer record (your details, past orders and any notes, such as a problem we put right), so repeat orders are quicker and we can help if something goes wrong; and to prevent fraud and misuse. Basis: our legitimate interests.
To run your account if you make one: to keep you signed in, show you your past orders, let you order the same again, and send you a link if you forget your password. Basis: our contract with you.
To count visits to our websites and see which pages are popular, so we can improve them. Basis: our legitimate interests. You can switch it off at any time, for ivanos.uk and for ivanositaliano.co.uk, and it stays off if your browser sends “Global Privacy Control” or “Do Not Track”.
To send you offers and discount codes by email, only if you ticked the box at checkout or switched offers on in your account. Basis: your consent. You can stop them at any time: switch them off in your account, use the link in any offer, or email us. It is one switch, so changing it in one place changes it everywhere.

Order emails are service messages: they never contain offers or discount codes.

Who we share it with

Stripe (card payments and fraud checks). Stripe also uses some information as a controller in its own right: see Stripe's privacy policy.
Cloudflare (our website and our database run on Cloudflare, and our order emails are sent through Cloudflare’s email service).
Google, only if you choose “Continue with Google” to sign in. Google then knows you signed in to us. We never tell Google what you ordered.
Clicky (Roxr Software Ltd), which counts visits to our websites for us.
postcodes.io (only your postcode, to work out the delivery distance and charge).
Our delivery drivers (your name, address and number, to deliver your order).
Our accountant, and authorities such as HMRC when the law requires it.

We don't sell your information. If you order through a delivery app (such as Just Eat, Uber Eats or Deliveroo), that app's privacy notice covers the details you give it.

Outside the UK: Stripe, Cloudflare and Clicky may process information in the United States. Those transfers are protected by the UK Extension to the EU-US Data Privacy Framework and the UK's approved contract clauses.

How long we keep it

Order records (what was bought and what was paid): 6 years. We have to keep them: HMRC requires businesses to keep their accounting and VAT records that long.
Checkouts that were never paid: your contact details are deleted straight away (at the latest 2 hours after you started).
Orders we declined or couldn't confirm: contact details deleted after 120 days.
Your customer record and your account (your name, contact details, address and any notes): 3 years after your last order, or sooner if you ask us to delete them. After that, only the order records above are left, with your details taken out of them.
IP addresses kept to stop abuse: up to 24 hours.
Our email provider’s logs: up to 30 days.
If you delete your account: your account and your customer record are emptied there and then, and your finished orders stop being linked to you. An order we are still cooking keeps its details until it is done, then it is emptied too.

Cookies

We don’t use advertising or tracking cookies. Your basket is saved in your browser, so it’s still there when you come back. If you sign in, one cookie keeps you signed in for up to 90 days, or until you sign out. Stripe’s payment form uses its own cookies to keep payments secure and spot fraud; these are needed for paying by card.

What our staff can see

Staff use our till system in the shop, behind a PIN. On it they can see your order, your name, your number, your delivery address, what you have ordered before, what you have spent with us, and any note they have added (for example that we replaced a missing item). They can refund an order. They cannot see your card number, which never reaches us, and they cannot see your password.

Your rights

You can ask us for a copy of your information, to correct it, to delete it, to limit how we use it or to object to it, and to have it sent to you or someone else. You can withdraw consent to offers at any time. Email support@ivanos.uk; we’ll reply within one month.

Deleting your details. If you have an account, open your account and choose “Delete my account”: it happens straight away. If you ordered as a guest, email support@ivanos.uk and we’ll do it for you. Either way, the order records the law makes us keep stay, with your details taken out of them.

If you're unhappy with how we've handled your information, please tell us first. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint or 0303 123 1113.

Changes

We'll update this page if anything changes, and change the date at the top.