User Research Privacy Policy

Roofoods Ltd ("we", "our", “us” or "Deliveroo") is committed to protecting your privacy and personal data when you participate in any of our user research projects, as described in the User Research Briefing or in the Online Survey (“User Research Project”). Personal information means information that identifies you personally such as your name, photo or contact details or data that can be linked with such information, such as the answers you give in a research session or survey which are identifiable as yours (“information”). 

Please read the following Privacy Policy that explains how our User Research team use and protect your information. We'll be the "data controller" of the information you provide to us.

Contact Details

If you have any queries or requests concerning this Privacy Policy or how we handle your data more generally, please get in touch with us using the following details. 

  • By contacting our User Research team at: research@deliveroo.co.uk
  • By contacting our Data Protection Officer: dpo@deliveroo.com

How Do We Collect Your Info and What Do We Collect?

The information we collect from you depends on what research participant category you fall into. This is generally where you are either a Deliveroo customer, rider, employee, customer support agent or an employee/representative of a Deliveroo partner restaurant, or alternatively you may be a non-Deliveroo participant.  We generally collect information from you in the process of recruiting you as a participant for a User Research Project and when you participate in any User Research Project. However, if you already have an existing relationship with Deliveroo, some of the information we hold about you for the purposes of User Research are collected from separate interactions with us as described under other Deliveroo privacy policies. More details are described below. 

How Do We Use Your Information and Why?

We will only process the data we collect about you if there is a reason for doing so, and if that reason is permitted under data protection law. We will have a lawful basis for processing your information: where we have your consent or we have a justifiable reason for processing your data. 

Retention Of Your Information

Information that we collect will be retained for as long as needed to fulfil the purposes outlined in the “How do we use your information and why” section above, in line with our legitimate interest or for a period specifically required by applicable regulations or laws, such as retaining the information for regulatory reporting purposes.

Disclosure Of Your Information

We share your information in limited circumstances with the members of our group, government authorities, our suppliers and other trusted third parties. Where shared, we take steps to ensure your information will only be used for the purposes outlined in this Privacy Policy.

International Transfers Of Your Information

The personal data you provide to us will be transferred to and stored on our servers in Ireland.

We may use the personal data that you provide to us if we are under a duty to disclose or share your personal data to third parties in or outside Hong Kong in order to comply with (and/or where we believe we are under a duty to comply with) any legal or regulatory obligations that arise in or outside Hong Kong; or in order to enforce the Terms of Use of the Website and any other agreements; or to protect the rights of Deliveroo, Partner Restaurants or others. This includes exchanging your personal data with other companies and other organisations for the purposes of fraud protection and prevention.

User Research Communications

Where you have given your consent or where we have a legitimate interest in doing so (and are permitted to do so by law) we will use your information to let you know about future User Research opportunities related to our products and services that may be of interest to you and we may contact you to do so by email or phone. You always have the option to unsubscribe from these communications.

Security

We adopt robust technologies and policies to ensure the personal information we hold about you is suitably protected.

We take steps to protect your information from unauthorised access and against unlawful processing, accidental loss, destruction and damage.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will take steps to protect your information, we cannot guarantee the security of your data transmitted to us; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Your Rights

Under data protection law, you have a number of rights concerning the data we hold about you. If you wish to exercise any of these rights, please contact our Data Protection Officer using the contact details set out above. For additional information on your rights please contact your data protection authority (see below).

Changes to our privacy policy

Where appropriate, we will notify you of any changes to this privacy policy, for example by email or push notification.

This privacy policy was last updated: 1 April 2019.

Complaints

If you’re not satisfied with the way we process your personal data, please contact our DPO in the first instance (see Contact Details). 

If you’re not happy with our response to any complaint or believe our processing of your information does not comply with data protection law, you can make a complaint to the Information Commissioner’s Office (ICO) using the following details:

Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Telephone number: 0303 123 1113

Website: www.ico.org.uk

Roofoods Limited, The River Building, 1 Cousin Lane, London, EC4R 3TE, United Kingdom