Last Updated: March 4, 2020
Devo Technologies Ltd (“Devo,” “we,” “us,” or “our”) values your privacy and is committed to protecting your personal data. This privacy notice explains the types of information we collect about you when you visit our website, mobile apps, networks and downloadable software provided by us (collectively, our “Platform”) and use our services or which we otherwise obtain directly from you or from a third party, how we use that information, and the instances in which we share your information. This privacy notice may change from time to time so please check this policy regularly. We'll be the "data controller" of the information you provide to us.
We collect your personal information when you interact with us or use our services, such as when you use our Platform to place an order. We also look at how visitors use our Platform, to help us improve our services and optimise customer experience.
We collect information:
As part of our commitment to the privacy of our customers and visitors to our Platform, it’s important to us that you understand what personal information we collect about you. We collect your personal information in the following ways:
We'll only use your personal information when the law allows us to. Most commonly, we'll use your personal information in the following circumstances:
We’ve set out below, in a table format, a description of the ways we plan to use your personal information, the category of information it comes under and the legal basis or bases which we rely on to process it, including where we’re relying on our legitimate interests and identifying what those interests are. There may be more than one lawful basis on which we process your personal information depending on the specific purposes for which we’re using the information. Where we rely on legitimate interests we’re always careful to balance your privacy rights with those interests. Please note that these are examples of the kinds of personal information we collect and of the uses we make of it. We may from time to time collect other types of personal information including and not limited to information you voluntarily give us.
Please contact us if you need more information at firstname.lastname@example.org
Type of data
Lawful basis for processing
|To register a new user||Identity, contact, technical||Necessary for the performance of our contract with you; in our legitimate interests in operating our Services to analyse how our Services are being used and develop these further.|
|To identify you as a User when you sign in to your account||Identity, technical data||Necessary for the performance of our contract with you; in our legitimate interests in operating our Services to analyse how our Services are being used and develop these further.|
|To process and deliver a order request from a User||Identity, contact, profile data, assessment data, location data, technical data, transaction data, operational data||Necessary for the performance of our contract with you; in our legitimate interests in operating our Services to analyse how our Services are being used and develop these further.|
|Managing collection of payment for products purchased by Users on behalf of our Partner Stores||Identity, contact, financial data, transaction data, operational data||Necessary for performance of the contract with Users and Partner Stores.|
|Assisting Users with problems and queries in live chats on site||Technical data, operational data, identity, contact||Necessary for the performance of the contract with our Users;, in our legitimate interests to resolve problems to ensure our Platform run as smoothly as possible to increase User satisfaction.|
|To administer and protect the Platform (including troubleshooting, data analysis, testing and system review)||Identity, contact, technical data||In our legitimate interests to run our Platform, manage administration and IT services and safeguard network security.|
|To manage our relationship with Users by sending emails to confirm orders or cancellations of orders||Identity, contact, technical data, transaction data||Necessary for the performance of a contract with the User; in our legitimate interests in maintaining and improving the running of the Platform.|
|Asking Users to complete ratings reviews and feedback surveys on Partner Stores and Partner Couriers||Identity, contact, usage, profile data||In our legitimate interests to understand how Users use, enjoy and rate the Platform to ensure high standards are maintained.|
|Inviting Users to take part in any promotions, events or competitions||Identity, contact, usage data, marketing and communications data||With consent where required by law in or where Users have not objected; in the legitimate interests of the business to encourage Users to use the Platform.|
|To make recommendations and suggestions to Users||Identity, contact data, usage data, profile data, marketing and communications data, aggregated data||In the legitimate interests of the business to develop and grow.|
|To advertise and market our Platform to Users||Usage data, marketing and communications data, aggregated data||With consent where required by law in or where Users have not objected the case of direct marketing email communications; in the case of analysis and evaluation of our Platform and campaigns in the legitimate interests of the business to develop and grow.|
|To send Users information about products or services, special offers or promotions, events from us or our Partner Stores.||Identity, contact, usage, profile, marketing and communications, aggregated data||With consent as required by law, in the legitimate interests of the business to encourage Users to use our Platform.|
|To notify Users about any changes to our Platform||Identity data, contact data||Necessary for the performance of a contract with the User and in the legitimate interests of the business in the smooth running of the Platform.|
|To maintain a blacklist/fraud identity system||Identity data, contact data, financial data||In the legitimate interests of the business to protect the business from fraud.|
|To record delivery notes which are used to provide information to Partner Couriers to deliver orders||Information provided by users which may include access information||In our legitimate interests to provide services that are as efficient and smooth running as possible. This information is provided voluntarily.|
|To gather location data on Users in order to inform the Partner Courier of the location in which to deliver the order||Identity data, contact data, Location data||Necessary to fulfil the contract for services for the User, in our legitimate interests to provide services that are as efficient and smooth running as possible. If this is collected automatically through your device, you will be asked if you permit us access to your location. We need your location in order to inform the Partner Courier where the order needs to be deliveerd.|
|To provide mediation between User, Partner Stores and Partner Couriers in the event of a User complaint of unsatisfactory service.||Identity, contact, assessment, financial data||Necessary to fulfil the contract for services for the User, in our legitimate interests to provide services.|
We strive to provide you with the choices regarding certain personal information use, particularly around marketing and advertising.
We may use your identity, contact, technical, usage and profile data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you.
You will receive marketing communications from us if you have requested information from us or purchased products or services from us or if you provided us with your details when you entered a competition or registered for a promotion and, in each case, you have not opted out of receiving marketing.
We'll only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period of your personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
We securely erase your information where we no longer require your information for the purposes collected.
Most of the information we collect about you will be processed in the UK, in some cases the personal information we collect from you might be processed outside the European Economic Area (“EEA”), such as the United States. These countries may not have the same protections for your personal information as the EEA has. However, we are obliged to ensure that the personal data that is processed by us and our suppliers outside of the EEA is protected in the same ways as it would be if it was processed within the EEA. There are therefore certain safeguards in place when your personal information is processed outside of the EEA
Sharing your information with third parties:
We share your information with third party service providers. The type of third party service providers that we share your personal information with includes:
If our business enters into a joint venture with, purchases or is sold to or merged with another business entity, your information may be disclosed or transferred to the target company, our new business partners or owners or their advisors.
We may also share your information:
if we are under a duty to disclose or share your information in order to comply with (and/or where we believe we are under a duty to comply with) any legal obligation or regulatory requirement. This includes exchanging information with other companies and other organisations for the purposes of fraud protection and prevention;
in order to enforce our contractual terms with you and any other agreement;
to protect the rights of Devo, Partner Stores, Partner Couriers, or others, including to prevent fraud; and
with such third parties as we reasonably consider necessary in order to prevent crime, e.g. the police.
We're committed to protecting our users personal information. We adopt technical and organizational measures to help protect the security of your personal information; however, it is important to know that transmission of information via the internet is not ever completely secure. Although we take steps to protect your information from unauthorised access, against accidental loss, unlawful processing, damage and destruction, we cannot guarantee the security of your data transmitted to our Platform; any transmission is at your own risk.
Your password protects your user account, so we encourage you to use a strong and unique password, and not to share your password with anyone.
Under certain circumstances, you have the following rights under data protection laws in relation to your personal data:
The right to be informed. The right to be provided with transparent, clear and easily understandable information about how we use your information and your rights.
The right to access your personal data. The right to request and obtain access (if we’re processing it) to the personal data we process about you.
The right to update your personal data. The right to request that we amend or update your personal data where it is inaccurate or incomplete.
The right to erase your personal data. The right to request that we delete your personal data.
The right to restrict the use of your personal data. The right to request that we temporarily or permanently stop processing all or some of your personal data. When processing is restricted, we can still store your information, but will not use it further.
The right to object to the use of your personal data. The right to object to us processing your personal data where we no longer have a legitimate or legal need to process it.
The right to port your personal data. The right to request a copy of your personal data in an accessible and transferable format and the right to transmit that personal data for use in another party’s service.
The right to lodge a complaint. The right to lodge a complaint about how we handle or process your information with the data protection supervisory authority.
The right to withdraw consent. The right to withdraw consent to anything we do with your information at any time. WIthdrawing consent will not however make unlawful our use of your information while consent has been apparent.
The right to object to processing. The right to object to certain types of processing, including processing for profiling and direct marketing purposes.
If you have a complaint about how we use your personal information, please contact us through the Platform or send an email to email@example.com and we'll do our best to fix the problem.
If you are still not happy, you can make a complaint with the UK data protection supervisory authority, the Information Commissioner's Office (ICO). For more details, you can visit their website at ico.org.uk