Data Protection & GDPR Compliance
Last Updated: 1.1.2025
At Pizza for the Soul™, we believe that privacy is an act of care. Just like every personalised book we create, we handle your data with intention, respect, and clarity.
This page outlines how we protect your personal information, comply with the EU and UK General Data Protection Regulations (GDPR), and honour your rights.
1. Who We Are
Sealed Book LTD is the legal entity responsible for the brand Pizza for the Soul™ and serves as the data controller for all personal data processed through this website. The company is registered in the European Union and is committed to full compliance with GDPR and other applicable data protection regulations.
2. Why and How We Process Your Data
We collect only what we need – nothing more. We process personal data in order to:
- Fulfil your order and create your book
- Communicate with you about your gift
- Comply with legal and accounting requirements
- Improve your customer experience (only with your permission)
3. What We Collect
- First name of giver and recipient
- Email address and country
- Custom content (texts, photos, videos)
- Preferences (tone, pronouns, language variant)
- Payment details (processed securely by Stripe or PayPal)
We do not collect full names, physical addresses, or sensitive data unless legally required or necessary for order fulfilment.
4. Legal Grounds for Processing
Our processing relies on one or more of the following bases:
- Your consent
- Fulfilment of a contract (e.g. your order)
- Legal compliance (tax, security, dispute resolution)
5. Your Rights Under GDPR
As a data subject, you have the right to:
- Access your data
- Correct any errors
- Request deletion (“right to be forgotten”)
- Object to processing
- Restrict processing
- Receive your data in portable format (where applicable)
To exercise any of these rights, email us at hello@pizzaforthesoul.com. We respond promptly and respectfully.
6. Data Retention
We store your data only as long as needed to:
- Complete your book and ensure delivery
- Provide post-order support (within 7 days)
- Fulfil legal or regulatory obligations
After that, all personal content – photos, videos, messages – is permanently deleted from our systems.
7. Children’s Data & Parental Consent
If your book includes a child (under 13 in the US or under 16 in the EU/UK), you confirm that you are the parent/legal guardian or have obtained consent from one.
We treat such content with extra care and process it only to create your book. It is deleted after the project is fulfilled.
8. Data Transfers Outside the EU/UK
If your data is transferred outside the European Economic Area (EEA), we ensure that:
- Transfers are lawful under GDPR (e.g. Standard Contractual Clauses)
- Data is stored securely on trusted servers
- Access is strictly limited to authorised partners only
9. Security Measures
We take data protection seriously and use:
- SSL encryption and secure connections
- Pseudonymisation and data minimisation
- Controlled access with audits
- Regular reviews and system updates
10. Third-Party Processors
We work only with GDPR-compliant partners, including:
- Payment providers: Stripe, PayPal
- Cloud and storage platforms for content handling
- Secure video hosts for streaming content via QR codes
All third parties are contractually bound to respect your data and process it solely on our instructions.
11. In Case of Data Breach
In the unlikely event of a data breach involving your personal information:
- You will be notified within 72 hours
- We will inform the appropriate regulatory bodies
- We will explain what happened and how we’re addressing it
12. Complaints and Contact
If you have questions or concerns, please contact us:
Email: hello@pizzaforthesoul.com
Post: Sealed Book LTD, 5 Stefan Botev Street, Plovdiv, Bulgaria
If you’re based in the EU or UK, you also have the right to contact your national data protection authority or the UK’s Information Commissioner’s Office (ICO).
We believe that protecting your data is part of honouring your trust. And trust – just like your story – deserves to be held with care.
