Storefront Privacy Policy
This Privacy Policy (“Privacy Policy”) describes the key principles and practices of the processing of your personal data while ordering online from the merchant offering its products or services through the website or online store you are currently using (“Company”).
Company provides online ordering services to provide information, ordering services, and delivery services regarding products offered by Company (“Service”). This Privacy Policy describes the information we collect, how we use it, and when and with whom we share it. Except as explicitly provided herein, this Privacy Policy applies only to information that we collect and use about you when you access or use the Service.
1. DATA CONTROLLERS
Online ordering from the Company is offered to you using the Wolt Storefront ordering platform. The personal data processed in the context of your order is controlled by the Company.
2. INFORMATION WE COLLECT ABOUT YOU
When you use the Service, we may collect or receive information about you to provide the Service and operate our business. The types of information that we may collect about you are:
Information You Provide to Us Directly
We may collect information that you provide directly to us:
When you use our Service, e.g. when you place an order;
When you subscribe to newsletters;
When you request customer support and/or technical assistance;
When you participate in surveys or fill out forms;
When you otherwise communicate with us through the Service, for example by registering for promotions, or otherwise transmitting user content to us.
The information you provide directly to us may concern you or others and may include, but is not limited to:
Name and contact information, such as phone number, address, and email address;
Order details;
Payment information; and
Information provided via surveys and/or other marketing research efforts.
You are not required to provide us with such information, but certain features of the Service may not be accessible or available, absent the provision of the requested information.
Information Collected Automatically
We also may receive and store certain information about you and your device(s) automatically when you access or use the Service. This information may include:
Technical Information – We may collect technical information associated with your activity on the Service and may include information related to your browser and operating system, IP address (the Internet address of your computer) unique device identifiers, and other information such as your device type. We use such information for diagnostic and statistical purposes and to administer the Service.
Site Usage Information – We may collect information to better understand customer traffic patterns usage of the Service. This may include the webpage that you were visiting before accessing the Service, the pages or features of the Service that you browsed to inform us which part of the Service you visit and how much time you spend there. This information is used to analyze and improve the Service and to provide our customers with a better user experience.
Site Preferences – We collect information about your preferences to make your use of the Service more productive through the use of cookies.
Location Information – We may collect and store general location information (such as IP address).
Information From Third Parties
We may collect information about you or others from third parties. For example, to the extent permitted by law, we may collect information from publicly-available sources. We may combine information that we collect from you through the Service with information that we obtain from such third parties and information derived from other products or services we provide. If you log into the Service using third-party social media credentials, for example, that third party may also provide us with information, depending on the privacy policy of that third party.
3. USE OF YOUR INFORMATION
We use your information in a variety of ways, as described below, and only if we have a valid reason to do so.
To Provide You with the Service: We use your information to provide you the Service. For example, we use credit card information to complete a transaction. Your information may be available or provided to third-party service providers that are contractually obligated to protect your information as disclosed in this Privacy Policy.
To Maintain, Improve, and Personalize the Service: We may use your information for our everyday business operations such as auditing and administration of the Service. Your information may also be used to improve the content and/or functionality of the Service. We may use your information to help us improve our offerings, such as using order history and trends to understand the popularity of menu items. We may also use your information to personalize your experience and our recommendations to you.
To Communicate with You: We use your information to communicate with you. For example, we may contact you about the status of your orders. We may also contact you with promotional offerings or other communications that may be of interest to you. In the event you contact us, we use certain information to respond to your questions and assist you with any issues that may arise in your use of the Service.
For Account and Network Security Purposes: We care about keeping you secure and safe while using the Service. Keeping you safe requires us to process your information, such as your device information, activity information and other relevant information. We use such information to combat spam, malware, malicious activity or security risks; improve and enforce our security measures; and to monitor and verify your identity so that unauthorized users do not gain access to your information.
To Maintain Legal and Regulatory Compliance: The Service is subject to certain laws and regulations which may require us to process your information. For example, we process your information to pay our taxes and to fulfill our business obligations.
To Enforce Compliance with Our Terms and Conditions and Policies: When you access or use the Service, you are bound to our Terms and Conditions of our service provider, DoorDash. We may process your information to prevent and mitigate any alleged or actual prohibited, illicit or illegal activities on the Service.
To Protect You, Others, and Our Business: We may use your information to protect you, others, and our business, including, without limitation, using information for fraud prevention, for enforcement of our Terms and Conditions, to comply with the law, and to protect against security risks.
4. OPTION TO LOG IN WITH THIRD-PARTY CREDENTIALS
You may log into the Service using your credentials from other third party services like Facebook, Google, and/or Wolt. If you log in using a third party service like Facebook and Google, Company may collect certain information necessary to enable Company to access that service and your information contained within that service. If you use the Service, we will also receive the information the third party service provides to the Company.
5. MARKETING AND ADVERTISING
If you have placed an order with us or signed up to the Service, we may use your information to send you marketing communications by post, email, mobile messaging, and by phone, as well as to show you advertising online.
We use your account, device and usage information, order details and how you have paid, your preferences and demographic information to send you personalised offers and updates and to show you advertising about great restaurants, shops, products and services we think you would like.
Through our marketing communications we want to keep you up-to-date about the products, services and initiatives that we believe may interest you. This includes our latest offers and updates about the Service that are most relevant to you based on your information as mentioned above.
You can opt-out or change your marketing preferences at any time:
Online: Visit Profile, click on Settings, then Communication preferences.
Email: Click on the ‘unsubscribe’ link at the bottom of our marketing emails.
You may also opt-in on our Service (for example, at order check out) to receive marketing communications directly from us.
When you opt-out of our marketing communications, we will still send you service communications, such as updates of our terms and conditions, information of service interruptions and safety information about your delivery or communications that you have specifically asked to receive, such as a notification about the Service becoming available in a certain area.
We and our Advertising Partners may create aggregated statistics and reports (which do not contain your information) to help measure your interactions with, and the effectiveness of these ads.
6. RETENTION OF YOUR INFORMATION
We will only retain your information for as long as reasonably necessary to fulfil the purposes we collected it for, and for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. In the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you, we may retain your information for a longer period.
When determining the appropriate retention periods, we take into account factors including:
the amount, nature and sensitivity of the information;
the potential risk of harm from unauthorised use or disclosure of your information;
the purposes for which we process your information and whether we can achieve those purposes through other means;
our contractual obligations and rights in relation to the information involved;
legal obligation(s) under applicable law to retain information for a certain period of time;
applicable regulatory, tax, accounting or other requirements;
statute of limitations under applicable law(s);
our legitimate interests for retaining the information (to learn more, check the “Use of your information” section above);
whether there is an actual or potential dispute; and
guidelines issued by relevant data protection authorities.
Otherwise, we securely erase your information where we no longer require it for the purposes we collected it for.
7. SHARING YOUR INFORMATION
We may share your information in the following ways:
Service Providers: We may share your information with our third-party service providers for certain business purposes. This information is provided in order for them to provide us services such as payment processing, customer support and other services. These third-party service providers have access to your information only for the purpose of performing services on our behalf and are expressly obligated not to disclose or use your information for any other purpose.
When Required by Law: We may share your information with third parties where required to protect and defend our legal rights, protect the safety and security of users of the Service, prevent fraud, comply with the law, respond to legal process, or a request for cooperation by a government entity
Corporate Transactions: In the event of sale, transfer, merger, reorganization, dissolution, or similar event we may transfer your information to one or more third parties as part of that transaction, including during the negotiation of an actual or contemplated transaction.
With Your Consent: We also may share or disclose your information with your consent or at your direction.
8. SECURITY
We adopt robust technologies and policies to protect your information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your information to those couriers, third party providers and employees who have a business need-to-know.
For example, we protect your information when we share it, including through encryption, we test and evaluate our systems regularly and conduct security assessments of our third party providers we engage to ensure they meet our rigorous security standards.
Although we take steps to keep your information secure when it is with us, transmitting data over the internet is never fully secure, so any information you send to the Service is done at your own risk.
When you create an account in the Service you may create a password, or other secure login method and also provide payment card details. You must use a unique password and keep any password you create or other secure login method secret in order to help prevent others from accessing your account.
9. YOUR RIGHTS
In certain circumstances, under local data protection law, you may have rights in relation to the information we hold about you. We will handle a request to exercise these rights in line with the applicable law. This may include the right to:
Be informed. This is why we're providing you with the information in this privacy policy.
Access your information. You may ask us for a copy of the information we hold about you and to check whether we are processing it lawfully. In sharing with you a copy of your information, we use a third party secure method of transfer.
Change or update your information. You may ask us to make changes to any information we hold about you if it is incorrect or outdated, but we may need to verify the accuracy of the new information before updating it.
Delete your information. In certain circumstances, you may have the right to request the deletion or removal of certain information that we hold about you where there is no good reason for us continuing to process it.
Restrict our use of your information. In certain circumstances, you may ask us to suspend our handling of your information if you have a specific reason for doing so.
Have your information ported to a third party. You may ask us for a copy of your information in a structured, commonly used and machine-readable format and, if we can, to send this to a third party. This right only applies to information that you have provided to us, which you initially provided consent for us to use or where we used the information to perform a contract with you.
Withdraw your consent. Where we rely on consent to use your information, you may have the right to withdraw that consent at any time. Withdrawing consent will not, however, make unlawful our use of your information before you withdraw your consent. If you withdraw your consent we may not be able to provide certain services to you. object to processing. You can object to us using your information if we have no legitimate reasons to do so.
How to exercise your rights
The abovementioned rights may be exercised by contacting the Company or Wolt. We may request the provision of additional information necessary to confirm your identity. We may reject or charge requests that are unreasonably repetitive, excessive or manifestly unfounded. If you are unhappy with how we have handled your information you can contact (depending on applicable data protection law) your local data protection authority.
10. CHANGES TO OUR PRIVACY POLICY
We may update this policy from time to time, so remember to check back in every so often, in case anything has changed. Where appropriate, we may notify you of changes, for example by email or in-app notification.