We treat your information very carefully and we have written this document to help you understand what information we collect, who has access to it and for what purposes. If you are in the process of creating an account with or have already done so, you should read this document in connection with our agreement with you. This document is not part of the agreement and is not binding on you (it is for information only).
You can ask us to stop processing your information at any time by emailing us at firstname.lastname@example.org (although, as some types of information processing and sharing are essential to the provision of our services or certain aspects of those services, if you do ask us to stop processing your information we may not be able to provide some of the services or continue to provide the services in the same way). You can also stop us processing your information by closing your account on our website and our app, unfollowing our social media accounts or by emailing email@example.com. However, even if you do ask us to stop, we may have other lawful grounds for processing your information (for example, to comply with our statutory or regulatory duties or the orders of a court).
This Privacy Notice applies to all personal data we process as a controller in respect of our users, customers and other business partners. It does not apply to the extent we process personal data in the role of a processor or service provider on behalf of our customers or partners.
We encourage you to read the remainder of this Privacy Notice to understand more about how we process your data.
How do we collect information about you?
We collect information about you when you use our website, register to open an account with us, use our apps or services, interact with us on social media, make transactions and when you contact us.
We might also receive information about you from someone else (for instance, from your bank or social media accounts or from your employer where you represent one of our customers or business partners). We will let you know if this happens and we are not already processing information about you.
What information do we collect?
We may process the following types of information about you:
What do we use your information for?
We will only use your personal data when we are allowed to and only where:
We use your information to provide/improve our services. This might include:
We may analyse the personal data we hold about you to recommend merchants and products that we think you might be interested in. We may also analyse the personal data in order to detect and prevent fraud and financial crime.
Your contact list is accessed with your permission in order to facilitate the issue of gift cards, the app retains the contact number of the recipient to facilitate the sending of gifts.
How do we protect your information?
We hold personal data about you at our own premises and with the assistance of third party service providers. We use third party service providers to perform a number of functions on our behalf including to host our platform, to send messaging on our behalf, to provide support services to you (including to provide translations to and from the English language) and to process transactions for the purchase of goods and services and to process invoicing for or by our customers or business partners.
Your personal data may be processed outside the European Economic Area (EEA) by our staff or the staff of our service providers. This might be in Brazil, Mauritius, Singapore, South Africa or the USA. Where we do this, we will ensure that one of the following safeguards are in place:
Whenever we share your personal data with third parties, we will take reasonable steps to ensure that your privacy rights continue to be protected under the applicable data protection legislation. By sharing your personal data with us and interacting with the services, you consent to the storing, processing and/or transfer described in this part of the Privacy Notice.
If data is transferred to a country where appropriate safeguards need to be put in place, we would be happy to provide information pertaining to such safeguards on request. You can contact us for this information by emailing firstname.lastname@example.org.
We take reasonable measures, including administrative, technical and physical safeguards, to protect your personal data from loss, theft, misuse and unauthorised access, disclosure, alteration and destruction.
Who do we share your personal data with and why?
Transfers to other data controllers
Where we do share your information in this way, the recipient will become a new data controller of your information and will contact you to let you know about this and how they use and protect your information.
The information we share might include:
As a fraud prevention measure, we send your full name and postcode to payment service providers when you link a payment instrument to your account. We do this to ensure that your personal details match with the cardholder details and that you are the legitimate cardholder.
Where you make payments using our services, we share your data with a payment service provider (PSP) and they process your transactions. The PSP may share your information with third parties including regulators, your bank and the operators of the card schemes. Where the PSP shares your information with Mastercard, it will process your information under the Mastercard Binding Corporate Rules (as amended from time to time and currently available here. You have the right to enforce these rules as a third party beneficiary.
Where you have placed orders via our services for delivery, collection or pay at table, we will share the details of your order with the merchant you have placed the order with. These details may include your first name, the details of your order, and your delivery address.
Unique Identifier Number. When you register with us, we create a UID linked to your account and transaction history. This may be sent to third parties who provide payment services to our customers or business partners to enable them and us to match incoming funds to you and the transactions you initiate. This may be sent to third parties who provide payment:
Other uses. We may share your information with third parties, including law enforcement agencies for any of the following:
We may also share your information with:
How long do we process your information for?
In most cases we will process your information only for as long as required to provide the services or until you close your account or ask us to stop processing your information.
You can ask us to stop processing your information or change the way in which we use it by emailing email@example.com.
There are some exceptions to this, however. We may have other lawful grounds for processing your information (for example, to comply with our statutory or regulatory duties or the orders of a court). For example, we might be required to retain your personal data for a longer period (usually up to six years after you close your account or tell us to stop but this may vary depending on the territory in which you use the service) in order to comply with applicable law, tax obligations or regulatory requirements and for the establishment, exercise and defence of legal claims. This might apply to information about the transactions you make, when and where you make transactions and the information we hold about you for fraud and other crime prevention purposes. If we do retain your information in this way, we will cease other forms of processing and we will continue to keep your information secure.
You can request a copy of the personal data we hold about you, its origin and any recipients of it as well as the purpose of any data processing carried out. For further information, please contact us by emailing firstname.lastname@example.org with the subject “Data subject access request”.
You can correct, restrict, object to our use of or ask us to delete your personal data at any time by emailing email@example.com with the subject “Data subject change request”. If the processing is based on the legal grounds of consent or fulfilment of contract, you have the right to portability. This means that you can receive the personal data that you have provided to us in a structured, commonly used and machine-readable format, and have the right to transfer this data to another data controller.
You have an absolute right to object to the processing of your personal data for direct marketing. You also have the right to recall your prior given consent. The withdrawal of your consent does not affect the lawfulness of the processing based on the consent before its withdrawal and we may continue processing your personal data based on other legal grounds.
If you have any questions about this document or in relation to how we use your personal data, please contact us by firstname.lastname@example.org.
If you wish to make a complaint about how we process your information, please contact us by emailing email@example.com.
Updating our privacy notice
We may update this Privacy Notice from time to time. When we do so, we will post the new version on our website and we will inform you about ask you to accept the new version when you next use our app.