Privacy Policy

Last Updated: March 4, 2020

Devo Technologies Ltd (“Devo,” “we,” “us,” or “our”) values your privacy and is committed to protecting your personal data. This privacy notice explains the types of information we collect about you when you visit our website, mobile apps, networks and downloadable software provided by us (collectively, our “Platform”) and use our services or which we otherwise obtain directly from you or from a third party, how we use that information, and the instances in which we share your information. This privacy notice may change from time to time so please check this policy regularly. We'll be the "data controller" of the information you provide to us.

1. Contact Information

If you have any questions or request about this privacy policy or how we handle your personal data please contact us using the following details;

• By contacting our general customer services team at: support@devo.co.uk
• By contacting our Data Protection Officer: dpo@devo.co.uk

2. How We Collect Your Information

We collect your personal information when you interact with us or use our services, such as when you use our Platform to place an order. We also look at how visitors use our Platform, to help us improve our services and optimise customer experience.
We collect information:

• when you create an account with us or you change your account settings;
• when you place an order with us and during the order process (including for payment and order delivery);
• when you contact us directly via email, phone, post, message or via our chat function; and
• when you browse and use our Platform (before and after you create an account with us).
• we also collect information from third party sites, such as advertising platforms and our fraud detection provider.

3. Information We Collect From You

As part of our commitment to the privacy of our customers and visitors to our Platform, it’s important to us that you understand what personal information we collect about you. We collect your personal information in the following ways:

• Visiting our Platform. When you visit our Platform, you are asked to provide information about yourself including your name, contact details, delivery address, order details and payment information such as credit or debit card information.
• Using our Platform. We collect information about your usage of the Platform and information about you from any messages you post to the Platform or when you contact us or provide us with feedback, including via email, letter, phone or chat function.
• Automated technologies or interactions. We collect technical information from your mobile device or computer, such as its operating system, the device and connection type, carrier, location data and performance data such as mobile payment methods, interaction with other retail technology such as use of NFC Tags, QR Codes and/or use of mobile vouchers, and the IP address from which you are accessing our Platform.
• Health information. We process health information about you only where you volunteer and consent to this, for example if you specify any food allergies.

4. Use of Your Information

We'll only use your personal information when the law allows us to. Most commonly, we'll use your personal information in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into with you.
• Where it's necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal or regulatory obligation.

We’ve set out below, in a table format, a description of the ways we plan to use your personal information, the category of information it comes under and the legal basis or bases which we rely on to process it, including where we’re relying on our legitimate interests and identifying what those interests are. There may be more than one lawful basis on which we process your personal information depending on the specific purposes for which we’re using the information. Where we rely on legitimate interests we’re always careful to balance your privacy rights with those interests. Please note that these are examples of the kinds of personal information we collect and of the uses we make of it. We may from time to time collect other types of personal information including and not limited to information you voluntarily give us.
Please contact us if you need more information at support@devo.co.uk

5. Cookies

We use cookies, or similar technology (“Cookies”) to collect information and personalize your experience on our Platform. Cookies are small text files that include a unique reference code that a website transfers to your device to store and sometimes track information about you. A number of Cookies we use last only for the duration of your web session and expire when you close your browser. Other Cookies are used to remember you when you return to the Platform and will last for longer. For more information about the Cookies we use, please see our Cookies Policy devo.co.uk/legal/cookies

6. Marketing

We strive to provide you with the choices regarding certain personal information use, particularly around marketing and advertising.
We may use your identity, contact, technical, usage and profile data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you.
You will receive marketing communications from us if you have requested information from us or purchased products or services from us or if you provided us with your details when you entered a competition or registered for a promotion and, in each case, you have not opted out of receiving marketing.

7. Retention of Your Information

We'll only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period of your personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
We securely erase your information where we no longer require your information for the purposes collected.

8. Disclosure of Your Information

Most of the information we collect about you will be processed in the UK, in some cases the personal information we collect from you might be processed outside the European Economic Area (“EEA”), such as the United States. These countries may not have the same protections for your personal information as the EEA has. However, we are obliged to ensure that the personal data that is processed by us and our suppliers outside of the EEA is protected in the same ways as it would be if it was processed within the EEA. There are therefore certain safeguards in place when your personal information is processed outside of the EEA
Sharing your information with third parties:

We share your information with third party service providers. The type of third party service providers that we share your personal information with includes:

• Payment providers (including online payment providers and fraud detection providers): for the purpose of providing services to us;
• IT service providers (including cloud providers): for the purpose of data storage and analysis;
• Partner Stores: so that they can fulfil your order, resolve issues, or improve their services;
• Partner Couriers: so that they can deliver your order;
• Marketing and advertising partners: so that they can ensure that you see advertising which is more relevant to you and send you content on our behalf.

We’ll take all the necessary reasonable steps in order to ensure that your personal information is treated securely and in accordance with this privacy policy when it is transferred to third parties.

If our business enters into a joint venture with, purchases or is sold to or merged with another business entity, your information may be disclosed or transferred to the target company, our new business partners or owners or their advisors.

We may also share your information:
if we are under a duty to disclose or share your information in order to comply with (and/or where we believe we are under a duty to comply with) any legal obligation or regulatory requirement. This includes exchanging information with other companies and other organisations for the purposes of fraud protection and prevention;
in order to enforce our contractual terms with you and any other agreement;
to protect the rights of Devo, Partner Stores, Partner Couriers, or others, including to prevent fraud; and
with such third parties as we reasonably consider necessary in order to prevent crime, e.g. the police.

9. Security

We're committed to protecting our users personal information. We adopt technical and organizational measures to help protect the security of your personal information; however, it is important to know that transmission of information via the internet is not ever completely secure. Although we take steps to protect your information from unauthorised access, against accidental loss, unlawful processing, damage and destruction, we cannot guarantee the security of your data transmitted to our Platform; any transmission is at your own risk.
Your password protects your user account, so we encourage you to use a strong and unique password, and not to share your password with anyone.

10. Your Rights

Under certain circumstances, you have the following rights under data protection laws in relation to your personal data:

The right to be informed. The right to be provided with transparent, clear and easily understandable information about how we use your information and your rights.

The right to access your personal data. The right to request and obtain access (if we’re processing it) to the personal data we process about you.

The right to update your personal data. The right to request that we amend or update your personal data where it is inaccurate or incomplete.

The right to erase your personal data. The right to request that we delete your personal data.

The right to restrict the use of your personal data. The right to request that we temporarily or permanently stop processing all or some of your personal data. When processing is restricted, we can still store your information, but will not use it further.

The right to object to the use of your personal data. The right to object to us processing your personal data where we no longer have a legitimate or legal need to process it.

The right to port your personal data. The right to request a copy of your personal data in an accessible and transferable format and the right to transmit that personal data for use in another party’s service.

The right to lodge a complaint. The right to lodge a complaint about how we handle or process your information with the data protection supervisory authority.

The right to withdraw consent. The right to withdraw consent to anything we do with your information at any time. WIthdrawing consent will not however make unlawful our use of your information while consent has been apparent.

The right to object to processing. The right to object to certain types of processing, including processing for profiling and direct marketing purposes.

11. Revisions to Our Privacy Policy

We may change this privacy policy from time to time. Sometimes, we'll let you know by revising the "Last Updated" date at the top of this privacy policy. Other times, we may provide you with additional notice through the Platform, by email, or other communication.

12. Complaints

If you have a complaint about how we use your personal information, please contact us through the Platform or send an email to support@devo.co.uk and we'll do our best to fix the problem.
If you are still not happy, you can make a complaint with the UK data protection supervisory authority, the Information Commissioner's Office (ICO). For more details, you can visit their website at ico.org.uk