Privacy policy
Last updated: 9 September 2026
Bigoli Fresh Pasta is a fresh pasta counter at 123 City Road, London EC1V 1JB. This website is our shop window. You cannot order or pay on this website. There is no basket, no checkout and no customer account. Orders happen at the counter, over the phone on 020 3838 2015, by email for catering, or through Deliveroo and Uber Eats, who are separate companies with their own privacy policies.
This policy explains what personal information we collect through this website and when you contact us, what we do with it, and what you can ask us to do about it. The data controller is Pasta Bigoli Limited, 123 City Road, London EC1V 1JB, United Kingdom.
Personal information we collect
What we collect depends on how you use the site and whether you get in touch. It is a short list, because the site does very little.
- Information you give us directly. If you send us a catering enquiry or email us, we collect your name, email address, phone number if you give one, and whatever you write in your message, including any details about your event.
- Device and usage information. Your IP address, your device, browser and language, and which pages you looked at. This is collected automatically, and only in the way described under Cookies and tracking below.
- Communications with us. What you say to us by email, by phone or on social media, and our replies.
We do not collect payment details on this website. There is no payment page and no card form here. If you pay us, you pay at the counter, or by bank transfer or invoice for catering, and your card details never reach this site. We do not operate customer accounts, so we hold no usernames or passwords.
Cookies and tracking
A few small files and tags run in your browser while you are on this site. Here is exactly what they are, whose they are, what leaves your browser, and how to turn them off.
What runs on this site
| What | Whose it is | What it does | What leaves your browser, and where it goes |
|---|---|---|---|
| Google Analytics 4 (G-QT1SBS34VV) | Google Ireland Limited and Google LLC | Counts visits and shows us which pages people actually read, so we can make the site better | The pages you looked at, a random visitor number stored in a cookie, your approximate location worked out from your IP address, and your device, browser and language. Sent to Google. |
| Google Ads (AW-17352966363) | Google Ireland Limited and Google LLC | Tells us whether a Google advert brought someone here, and lets us show adverts to people who have visited | The pages you looked at, an advert click identifier, and a random number stored in a cookie. Sent to Google. |
| Google tag (GT-P8QDT8PF) | The container that loads the two above. It does nothing on its own | Nothing by itself | |
| Meta Pixel (1303496311759965) | Meta Platforms Ireland Limited and Meta Platforms, Inc. | Records that a page was viewed, so we can measure and target adverts on Facebook and Instagram | The page you looked at and a random number stored in a cookie. Sent to Meta. |
| Shopify | Shopify International Limited | Runs the website itself, keeps it secure, and remembers the cookie choice you make here | Handled by Shopify under our agreement with them, and described in the rest of this policy |
Shopify's own essential cookies keep the site working and remember what you chose. Those cannot be switched off, because without them the site does not function and we could not remember that you had said no.
Why we are allowed to run them
Adverts — Google Ads and the Meta Pixel. We rely on your consent. These do not run at all until you press Accept on the cookie banner. If you decline, or ignore the banner, they stay off. You can withdraw that consent at any time, and it is as easy to withdraw as it was to give.
Measuring the site — Google Analytics. We rely on your consent for this too. It does not run until you press Accept.
How long we keep it
| Google Analytics cookies (_ga, _ga_QT1SBS34VV) in your browser | Up to 2 years from your last visit |
| Google Ads cookie (_gcl_au) in your browser | Up to 90 days |
| Meta Pixel cookie (_fbp) in your browser | Up to 90 days |
| The information itself, held by Google Analytics | Up to 14 months |
| The information itself, held by Google Ads and by Meta | Kept by Google and by Meta under their own policies, linked below |
Your cookie choice is remembered for up to 12 months, then we ask again.
Where it goes
Google and Meta are American companies, so this information leaves the UK. When it does, we rely on the UK Extension to the EU–US Data Privacy Framework where the company is certified under it, and on the UK's International Data Transfer Addendum to the standard contractual clauses where it is not. Both are transfer routes recognised in UK law.
How to change your mind
Click "Cookie preferences" at the bottom of any page on this site. It opens the same panel as the banner, and you can turn anything on or off there, at any time, free of charge. Nothing you change there affects your ability to use the site, or to buy pasta from us.
You can also go straight to the companies:
- Google, for adverts: https://myadcenter.google.com
- Google, to opt out of Google Analytics on every website you visit: https://tools.google.com/dlpage/gaoptout
- Google's privacy policy: https://policies.google.com/privacy
- Meta, for adverts: https://accountscenter.facebook.com/ad_preferences
- Meta's privacy policy: https://www.facebook.com/privacy/policy
Most browsers also let you block or delete cookies in their own settings.
How we use your personal information, and why we are allowed to
| What we do with it | Our lawful basis under UK GDPR |
|---|---|
| Answering you. Replying to your catering enquiry, quoting for an event, answering a question, sorting out a problem with an order. | Our legitimate interests in running the business and responding to people who contact us. Where the enquiry leads to a booking, performance of a contract with you. |
| Running and improving this website. Keeping it working and secure, and understanding which pages people read. | Our legitimate interests in a working, secure website. For the analytics part, your consent — see Cookies and tracking above. |
| Advertising. Measuring whether an advert brought someone here, and showing adverts on Google, Facebook and Instagram. | Your consent. |
| Keeping records and meeting our legal duties. Accounting and tax records, food safety records, and responding to lawful requests. | Compliance with a legal obligation, and our legitimate interests in defending the business. |
We do not sell your personal information, and we do not send marketing emails from this website. There is no mailing list to join here.
Who we share it with
- Shopify, who host this website. See "Shopify" below.
- Google and Meta, in the specific and limited ways set out under Cookies and tracking above, and only if you have pressed Accept.
- Our email provider, which carries messages you send us.
- Our accountants and professional advisers, where they need it.
- The authorities, where the law requires it, or to establish or defend legal claims.
Deliveroo and Uber Eats are not covered by this policy. If you order through them, you are their customer for that order and their own privacy policies apply. We only receive what they pass to us so we can cook and hand over your food.
Shopify
This website is hosted by Shopify, which collects and processes information about your visit in order to provide and secure the site. That information is transmitted to Shopify and may be processed outside the UK. For those purposes Shopify is responsible for the processing, including for responding to requests you make about it. You can read the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal.
Links to other websites
This site links to other websites, including Deliveroo, Uber Eats, Google Maps and our social media pages. We are not responsible for their content, their privacy practices or their security. Read their policies before giving them your information.
Children
This website is not aimed at children and we do not knowingly collect personal information about children. If you are a parent or guardian and believe your child has given us their information, contact us using the details below and we will delete it.
How long we keep your information
| Catering enquiries that do not lead to a booking | 12 months |
| Catering bookings and the correspondence around them | 7 years, because they are accounting records |
| General emails and messages | 24 months |
| Cookies and tracking data | As set out in the table under Cookies and tracking above |
No security measures are perfect. Information you send us over the internet may not be secure while it is in transit, so please do not use email to send us anything confidential or sensitive.
Your rights
Under UK data protection law you have the right to:
- Ask what we hold about you, and get a copy of it.
- Have it corrected if it is wrong.
- Have it deleted, in certain circumstances.
- Ask us to restrict what we do with it, or object to it, in certain circumstances — including objecting to processing based on our legitimate interests.
- Receive it in a portable form, in certain circumstances.
- Withdraw your consent at any time, where we rely on consent. Withdrawing it does not make what we did before unlawful. For cookies, click "Cookie preferences" at the bottom of any page.
These rights are not absolute and in some cases we may be allowed to decline. To exercise any of them, use the contact details below. We will not treat you any differently for asking. We may need to check who you are first, and we will answer within the time the law allows, which is normally one month. It is free.
Complaints
If you are unhappy with how we have handled your personal information, please tell us first using the details below and we will try to sort it out. You also have the right to complain to the UK's regulator:
Information Commissioner's Office
https://ico.org.uk/make-a-complaint
Telephone 0303 123 1113
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Information leaving the UK
Some of the companies we use are outside the UK, as set out above. Where your personal information leaves the UK we rely on a transfer mechanism recognised in UK law — an adequacy decision where one applies, the UK Extension to the EU–US Data Privacy Framework where the company is certified under it, or the International Data Transfer Addendum to the standard contractual clauses.
Changes to this policy
We may update this policy, for example if we change what runs on the site. We will post the new version here and change the "Last updated" date at the top. If the change is significant we will say so on the site.
Contact us
Pasta Bigoli Limited
123 City Road, London EC1V 1JB, United Kingdom
Telephone 020 3838 2015
Email info@bigoli.com
We are the data controller of your personal information for the purposes of UK data protection law.