Devo Logo

Privacy Policy

Last Updated: March 4, 2020

Devo Technologies Ltd (“Devo,” “we,” “us,” or “our”) values your privacy and is committed to protecting your personal data. This privacy notice explains the types of information we collect about you when you visit our website, mobile apps, networks and downloadable software provided by us (collectively, our “Platform”) and use our services or which we otherwise obtain directly from you or from a third party, how we use that information, and the instances in which we share your information. This privacy notice may change from time to time so please check this policy regularly. We'll be the "data controller" of the information you provide to us.

1. Contact Information

If you have any questions or request about this privacy policy or how we handle your personal data please contact us using the following details;

2. How We Collect Your Information

We collect your personal information when you interact with us or use our services, such as when you use our Platform to place an order. We also look at how visitors use our Platform, to help us improve our services and optimise customer experience.
We collect information:

  • when you create an account with us or you change your account settings;
  • when you place an order with us and during the order process (including for payment and order delivery);
  • when you contact us directly via email, phone, post, message or via our chat function; and
  • when you browse and use our Platform (before and after you create an account with us).
  • we also collect information from third party sites, such as advertising platforms and our fraud detection provider.

3. Information We Collect From You

As part of our commitment to the privacy of our customers and visitors to our Platform, it’s important to us that you understand what personal information we collect about you. We collect your personal information in the following ways:

  • Visiting our Platform. When you visit our Platform, you are asked to provide information about yourself including your name, contact details, delivery address, order details and payment information such as credit or debit card information.
  • Using our Platform. We collect information about your usage of the Platform and information about you from any messages you post to the Platform or when you contact us or provide us with feedback, including via email, letter, phone or chat function.
  • Automated technologies or interactions. We collect technical information from your mobile device or computer, such as its operating system, the device and connection type, carrier, location data and performance data such as mobile payment methods, interaction with other retail technology such as use of NFC Tags, QR Codes and/or use of mobile vouchers, and the IP address from which you are accessing our Platform.
  • Health information. We process health information about you only where you volunteer and consent to this, for example if you specify any food allergies.

4. Use of Your Information

We'll only use your personal information when the law allows us to. Most commonly, we'll use your personal information in the following circumstances:

  • Where we need to perform the contract we are about to enter into or have entered into with you.
  • Where it's necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
  • Where we need to comply with a legal or regulatory obligation.

We’ve set out below, in a table format, a description of the ways we plan to use your personal information, the category of information it comes under and the legal basis or bases which we rely on to process it, including where we’re relying on our legitimate interests and identifying what those interests are. There may be more than one lawful basis on which we process your personal information depending on the specific purposes for which we’re using the information. Where we rely on legitimate interests we’re always careful to balance your privacy rights with those interests. Please note that these are examples of the kinds of personal information we collect and of the uses we make of it. We may from time to time collect other types of personal information including and not limited to information you voluntarily give us.
Please contact us if you need more information at support@devo.co.uk

Purpose

Type of data

Lawful basis for processing

To register a new userIdentity, contact, technicalNecessary for the performance of our contract with you; in our legitimate interests in operating our Services to analyse how our Services are being used and develop these further.
To identify you as a User when you sign in to your accountIdentity, technical dataNecessary for the performance of our contract with you; in our legitimate interests in operating our Services to analyse how our Services are being used and develop these further.
To process and deliver a order request from a UserIdentity, contact, profile data, assessment data, location data, technical data, transaction data, operational dataNecessary for the performance of our contract with you; in our legitimate interests in operating our Services to analyse how our Services are being used and develop these further.
Managing collection of payment for products purchased by Users on behalf of our Partner StoresIdentity, contact, financial data, transaction data, operational dataNecessary for performance of the contract with Users and Partner Stores.
Assisting Users with problems and queries in live chats on siteTechnical data, operational data, identity, contactNecessary for the performance of the contract with our Users;, in our legitimate interests to resolve problems to ensure our Platform run as smoothly as possible to increase User satisfaction.
To administer and protect the Platform (including troubleshooting, data analysis, testing and system review)Identity, contact, technical dataIn our legitimate interests to run our Platform, manage administration and IT services and safeguard network security.
To manage our relationship with Users by sending emails to confirm orders or cancellations of ordersIdentity, contact, technical data, transaction dataNecessary for the performance of a contract with the User; in our legitimate interests in maintaining and improving the running of the Platform.
Asking Users to complete ratings reviews and feedback surveys on Partner Stores and Partner CouriersIdentity, contact, usage, profile dataIn our legitimate interests to understand how Users use, enjoy and rate the Platform to ensure high standards are maintained.
Inviting Users to take part in any promotions, events or competitionsIdentity, contact, usage data, marketing and communications dataWith consent where required by law in or where Users have not objected; in the legitimate interests of the business to encourage Users to use the Platform.
To make recommendations and suggestions to UsersIdentity, contact data, usage data, profile data, marketing and communications data, aggregated dataIn the legitimate interests of the business to develop and grow.
To advertise and market our Platform to UsersUsage data, marketing and communications data, aggregated dataWith consent where required by law in or where Users have not objected the case of direct marketing email communications; in the case of analysis and evaluation of our Platform and campaigns in the legitimate interests of the business to develop and grow.
To send Users information about products or services, special offers or promotions, events from us or our Partner Stores.Identity, contact, usage, profile, marketing and communications, aggregated dataWith consent as required by law, in the legitimate interests of the business to encourage Users to use our Platform.
To notify Users about any changes to our PlatformIdentity data, contact dataNecessary for the performance of a contract with the User and in the legitimate interests of the business in the smooth running of the Platform.
To notify Users of any changes to the Privacy Policy or changes to our Terms and ConditionsIdentity data, contact dataCompliance with a legal obligation.
To maintain a blacklist/fraud identity systemIdentity data, contact data, financial dataIn the legitimate interests of the business to protect the business from fraud.
To record delivery notes which are used to provide information to Partner Couriers to deliver ordersInformation provided by users which may include access informationIn our legitimate interests to provide services that are as efficient and smooth running as possible. This information is provided voluntarily.
To gather location data on Users in order to inform the Partner Courier of the location in which to deliver the orderIdentity data, contact data, Location dataNecessary to fulfil the contract for services for the User, in our legitimate interests to provide services that are as efficient and smooth running as possible. If this is collected automatically through your device, you will be asked if you permit us access to your location. We need your location in order to inform the Partner Courier where the order needs to be deliveerd.
To provide mediation between User, Partner Stores and Partner Couriers in the event of a User complaint of unsatisfactory service.Identity, contact, assessment, financial dataNecessary to fulfil the contract for services for the User, in our legitimate interests to provide services.

5. Cookies

We use cookies, or similar technology (“Cookies”) to collect information and personalize your experience on our Platform. Cookies are small text files that include a unique reference code that a website transfers to your device to store and sometimes track information about you. A number of Cookies we use last only for the duration of your web session and expire when you close your browser. Other Cookies are used to remember you when you return to the Platform and will last for longer. For more information about the Cookies we use, please see our Cookies Policy devo.co.uk/legal/cookies

6. Marketing

We strive to provide you with the choices regarding certain personal information use, particularly around marketing and advertising.
We may use your identity, contact, technical, usage and profile data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you.
You will receive marketing communications from us if you have requested information from us or purchased products or services from us or if you provided us with your details when you entered a competition or registered for a promotion and, in each case, you have not opted out of receiving marketing.

7. Retention of Your Information

We'll only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period of your personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
We securely erase your information where we no longer require your information for the purposes collected.

8. Disclosure of Your Information

Most of the information we collect about you will be processed in the UK, in some cases the personal information we collect from you might be processed outside the European Economic Area (“EEA”), such as the United States. These countries may not have the same protections for your personal information as the EEA has. However, we are obliged to ensure that the personal data that is processed by us and our suppliers outside of the EEA is protected in the same ways as it would be if it was processed within the EEA. There are therefore certain safeguards in place when your personal information is processed outside of the EEA
Sharing your information with third parties:

We share your information with third party service providers. The type of third party service providers that we share your personal information with includes:

  • Payment providers (including online payment providers and fraud detection providers): for the purpose of providing services to us;
  • IT service providers (including cloud providers): for the purpose of data storage and analysis;
  • Partner Stores: so that they can fulfil your order, resolve issues, or improve their services;
  • Partner Couriers: so that they can deliver your order;
  • Marketing and advertising partners: so that they can ensure that you see advertising which is more relevant to you and send you content on our behalf.

We’ll take all the necessary reasonable steps in order to ensure that your personal information is treated securely and in accordance with this privacy policy when it is transferred to third parties.

If our business enters into a joint venture with, purchases or is sold to or merged with another business entity, your information may be disclosed or transferred to the target company, our new business partners or owners or their advisors.

We may also share your information:
if we are under a duty to disclose or share your information in order to comply with (and/or where we believe we are under a duty to comply with) any legal obligation or regulatory requirement. This includes exchanging information with other companies and other organisations for the purposes of fraud protection and prevention;
in order to enforce our contractual terms with you and any other agreement;
to protect the rights of Devo, Partner Stores, Partner Couriers, or others, including to prevent fraud; and
with such third parties as we reasonably consider necessary in order to prevent crime, e.g. the police.

9. Security

We're committed to protecting our users personal information. We adopt technical and organizational measures to help protect the security of your personal information; however, it is important to know that transmission of information via the internet is not ever completely secure. Although we take steps to protect your information from unauthorised access, against accidental loss, unlawful processing, damage and destruction, we cannot guarantee the security of your data transmitted to our Platform; any transmission is at your own risk.
Your password protects your user account, so we encourage you to use a strong and unique password, and not to share your password with anyone.

10. Your Rights

Under certain circumstances, you have the following rights under data protection laws in relation to your personal data:

The right to be informed. The right to be provided with transparent, clear and easily understandable information about how we use your information and your rights.

The right to access your personal data. The right to request and obtain access (if we’re processing it) to the personal data we process about you.

The right to update your personal data. The right to request that we amend or update your personal data where it is inaccurate or incomplete.

The right to erase your personal data. The right to request that we delete your personal data.

The right to restrict the use of your personal data. The right to request that we temporarily or permanently stop processing all or some of your personal data. When processing is restricted, we can still store your information, but will not use it further.

The right to object to the use of your personal data. The right to object to us processing your personal data where we no longer have a legitimate or legal need to process it.

The right to port your personal data. The right to request a copy of your personal data in an accessible and transferable format and the right to transmit that personal data for use in another party’s service.

The right to lodge a complaint. The right to lodge a complaint about how we handle or process your information with the data protection supervisory authority.

The right to withdraw consent. The right to withdraw consent to anything we do with your information at any time. WIthdrawing consent will not however make unlawful our use of your information while consent has been apparent.

The right to object to processing. The right to object to certain types of processing, including processing for profiling and direct marketing purposes.

11. Revisions to Our Privacy Policy

We may change this privacy policy from time to time. Sometimes, we'll let you know by revising the "Last Updated" date at the top of this privacy policy. Other times, we may provide you with additional notice through the Platform, by email, or other communication.

12. Complaints

If you have a complaint about how we use your personal information, please contact us through the Platform or send an email to support@devo.co.uk and we'll do our best to fix the problem.
If you are still not happy, you can make a complaint with the UK data protection supervisory authority, the Information Commissioner's Office (ICO). For more details, you can visit their website at ico.org.uk