Privacy Policy - CONSUMER

Introduction

At Orogo Limited (“Orogo”) we are committed to building the world’s greatest food community, and that begins with protecting the privacy of everyone in our community. This means that we’ll protect the personal information of all visitors who access our websites or services through any mobile application, platform or device (collectively, the “Services”).

This privacy policy (“Privacy Policy”) explains how Orogo share and use your personal information. You’ll also find information about how you can exercise your privacy rights. By using our Services you agree to Orogo using your personal information as described in this Privacy Policy. The terms “we”, “us” or “our” are each intended as reference to Orogo Limited and any terms not defined in this Privacy Policy are defined in our Terms.

Summary

We’ve summarised the key points of our Privacy Policy below. If you want more information on a particular section, just click on the Learn more links below to jump to that section.

1   Information we collect from you and why

Here are the broad categories of personal information that we may collect about you and the reasons why:

(a)   Information that you provide voluntarily:

(b)   Information that we collect automatically

(c)   Information that we obtain from third-party sources

We process information that you provide voluntarily, information that we collect automatically and information that we obtain from third party sources in order to constantly improve our Services. Using this, we can make it even easier for you to find the food you want when you want it, no matter what device you choose to use or where you are in the world. learn more

2   Who we share personal information with?

We may share your personal information with the following recipients (and whenever we do, we will ensure that we have appropriate security and contractual safeguards in place to protect it):

(a)   Restaurants that you have placed an Order with for processing and delivery;

(b)   Orogo companies within our group;

(c)   Third parties who support our Services (e.g. partners for marketing or promotions in the food, drink and leisure sectors based on your preferences);

(d)   Any law enforcement or regulatory body, government agency, court or other third party where we believe disclosure is necessary under applicable law or regulations;

(e)   New owners or re-organised entities in the event of a business restructuring, sale, purchase or joint venture affecting our business.

(f)   Any other person provided that you have given your consent. We will never sell, distribute or otherwise share your personal information unless we have your permission.

learn more

3   Legal basis for processing personal information

Orogo will always make sure we have a legal basis to collect and use your personal information. The legal basis we rely on will change depending on the type of information and the context in which we collect it.

Our main reason for collecting and using your personal information is to perform our contract with you (i.e. to make sure you get your Order when and where you want it), but we may also process it where it is in our legitimate business interests to do so. learn more

4   International data transfers

We may transfer your personal information to countries outside the one in which you are resident to other countries where Orogo or our service providers have operations. The data protection laws of these countries may differ from the laws of your country but Orogo takes care to implement appropriate safeguards to protect your personal information in those countries in accordance with this Privacy Policy. learn more

5   Security

Orogo places great importance on protecting your information from and against unauthorised access and against unlawful processing, accidental loss, destruction and damage. We implement appropriate technical and organisational measures to safeguard such information. learn more

6   Data retention

Orogo will retain your personal information for no longer than is necessary to fulfil the purposes described in this Privacy Policy. We may also retain certain elements of your personal information for a period after you delete or deactivate your account for our legitimate operations such as record keeping and to comply with our legal obligations. Whenever we retain your information we will do so in compliance with applicable laws. learn more

7   Your data protection rights

You can access your account at any time to review and update your personal information. You can also contact us to ask us to delete your personal information, restrict its processing or request that it be ported to a third party. You also have the right to unsubscribe from the marketing communications we send you by using the unsubscribe functionality in any marketing communication you receive from us or by amending your profile accordingly. learn more

8   Links to third-party sites

Our websites may, from time to time, contain links to and from third-party websites (for example, those of our partner networks, advertisers and affiliates). If you follow these links, please be aware that Orogo is not responsible or liable for these third-party websites which will have their own privacy policies. learn more

9   Updates to this Privacy Policy

We may update this Privacy Policy from time to time in response to changing legal, technical or business developments. We encourage you to periodically review this page for the latest information on our privacy practices. learn more

10   How to contact us

If you have any questions or concerns about this Privacy Policy, please contact us.

Contact details

More information

1   Information we collect from you and why

The personal information that we may collect about you broadly falls into the following categories:

(a)   Information that you provide voluntarily

Certain parts of our Services may ask you to provide personal information voluntarily.

For instance:

(b)   Information that we collect automatically

When you access our Services, we may collect certain information automatically from your device. In some countries, including countries in Europe, this information may be considered personal information under applicable data protection laws.

For instance:

For further information about the types of cookies and similar technologies we use, why, and how you can control such technologies, see our Cookies Policy.

(c)   Information that we obtain from third party sources

From time to time, we may receive personal information from third party sources, including advertising networks but only where we have checked that these third parties either have your consent to process the information or are otherwise legally permitted or required to share your personal information with us. This information may include your likely demographic group.

For instance:

Our use of collected information

Examples of how we may use this information include:

(a)   Information that you provide voluntarily

(b)   Information that we collect automatically

When you access our Services, we may collect certain information automatically from your device such as your IP address, MAC address or device ID. In some countries, including in Europe, this information may be considered personal information under applicable data protection laws.

(c)   Information that we obtain from third party sources

2   Who we share personal information with

In delivering the Services to you, depending on the circumstances, we may share your personal information with the following entities:

(a)   Restaurants you place Orders with so that the Restaurant can process and deliver it to you.

(b)   Companies within the Orogo group of companies (which means our subsidiaries and affiliates, our ultimate holding company and its subsidiaries and affiliates either now or at any time in the future) - these companies act for us and process your personal information for the purposes set out in this Privacy Policy.

(c)   Third parties who undertake various activities to promote and support our Services. This includes offshore customer support agents, website and application support and hosting providers, marketing service providers, eCRM partners like Salesforce who manage our marketing emails and push notifications, companies like Twilio who send you text messages when your Order is on its way, delivery companies who deliver your Order to you, market research companies and payment processing providers which process payment card transactions - any of these third parties might be inside or outside your country of residence.

(d)   As mentioned in section 2 above, we may also share information with third parties (for example, in the food, drink and entertainment sectors) so that they can contact you about goods or services which may interest you. We will only share your information with these third parties where you have given your consent. If you don’t want us to use your personal information in this way or generally change your mind about receiving any form of marketing communications, you can unsubscribe at any time using the unsubscribe functionality in the communication you receive or by amending your profile accordingly. If you choose to unsubscribe from our marketing, we will keep a record of your preferences so that we don’t bother you with unwanted marketing in future.

(e)   If any part of our business enters into a joint venture, purchases another business or is sold to or merged with another business entity, your information may be disclosed or transferred to the target company, or new business partners or owners or their agents and advisors. In these circumstances we will always inform the relevant entities that they must only use your personal information for the purposes disclosed in this Privacy Policy.

(f)   Any law enforcement or regulatory body, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person.

(g)   Any other person provided that you have given your consent to the disclosure. We will not sell, distribute or lease your personal information unless we have your permission or are required by law to do so.

3   Legal basis for processing personal information

Our legal basis for collecting and using your personal information as described above will depend on the specific context in which we collect it.

Our main reason for collecting and using your personal information is to perform our contract with you (i.e. to make sure you get your Order when you want it). However we will also use your personal information where it is in our legitimate business interests to do so (but only if our interests are not overridden by your data protection interests or your fundamental legal rights and freedoms). In some cases, we may have a legal obligation to collect personal information from you (e.g. in the event of legal proceedings) or we might need to process it or share it with others to “protect your vital interests” (this is legal speak for saving your life) or those of another person (e.g. in a case where another person’s life is in danger).

If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (and we’ll also explain the possible consequences of you not providing it).

Similarly, if we collect and use your personal information in reliance on our legitimate interests (or those of any third party), we will make clear to you at the relevant time what those legitimate interests are.

If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the How to contact us below.

4   International data transfers

We may transfer your personal information to countries other than the country in which you are resident. Orogo’s website servers are mainly located in the United Kingdom, however our group companies and third party service providers and partners operate in a number of countries, including Australia, Brazil, Bulgaria Canada, Colombia, Denmark, France, Ireland, Italy, Mauritius, Mexico, Norway, New Zealand, the Philippines, Spain, Switzerland, Ukraine and United Kingdom. This means that when we collect your personal information we may process it in any of these countries.

Whilst these countries may have data protection laws that are different to the laws of your country, you can rest assured that Orogo takes care to implement appropriate safeguards to protect your personal information in those countries in accordance with this Privacy Policy. Some of the safeguards we rely on include, where appropriate, using the European Commission’s approved standard contractual clauses with our suppliers, intra-group transfer agreements (so that we can safely transfer your data between the Orogo group of companies all over the world) and contracting with Privacy Shield certified companies in the United States, where this is appropriate.

5   Security

We place great importance on keeping your personal information safe and secure. As such, we put in place appropriate technical and organisational measures / industry standard technology to protect it from unauthorised access and unlawful processing, accidental loss, destruction and damage.

The security measures we use are designed to provide a level of protection security appropriate to the risk of processing your personal information. Where you have chosen a password which allows you to access certain parts of the Services, you are responsible for keeping this password confidential. We advise you not to share your password with anyone and to use a unique password for our Services. We will not be liable for any unauthorised transactions entered into using your name and password.

6   Data retention

Orogo will retain your personal information where we have an ongoing legitimate business need to do so (for example, while you hold an account with us or to enable us to meet our legal, tax or accounting obligations).

If you object to us processing certain categories of your personal information (including in relation to receiving marketing communications from us), we will retain a record of your objection to the processing of your information so that we can continue to respect your wishes.

We will destroy or permanently anonymise your personal information at the point that we no longer need to process it for our ongoing legitimate business needs or for any legal reason. If this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store it and isolate it from any further processing until deletion is possible.

7   Your data protection rights

Orogo respects your privacy and data protection rights. Below is a summary of your rights in respect of the personal information of yours which Orogo handles:

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

8   Links to third-party sites

Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates or to any number of websites that may offer useful information to our visitors. We provide these links to you only as a convenience and the inclusion of any link does not imply endorsement of the relevant website by Just Eat. If you follow a link to any of these websites, please note that they have their own privacy policies and that we do not accept any responsibility or liability for these policies or those linked websites. Please check these policies before you submit any personal information to such websites.

9   Updates to this Privacy Policy

We may update this Privacy Policy from time to time in response to changing legal, technical or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Policy changes if and where this is required by applicable data protection laws.

We encourage you to periodically review this page for the latest information on our privacy practices.

10   How to contact us

By email at: hello@orogo.com

By writing to us at:

Orogo Limited

107 Hammersmith Road

London W14 0QH

UK

The controller of your personal information is the Orogo entity in the country in which you use our Services.