Skip to content

Privacy Policy

Where this privacy policy refers to “Deliveroo”, “we”, “us", “our”, this means one or more of the particular Deliveroo group companies (each a “Group Company”) that processes your personal information for its respective independent purposes. Except as stated otherwise, each Group Company is an independent controller of the information it holds about you. For more information about our Group Companies, see the “Deliveroo Group Company details” section below. 

Deliveroo is committed to protecting the privacy of individuals who represent a partner which has a corporate relationship with Deliveroo, or is a prospective business partner of Deliveroo (“Deliveroo Partner Representative(s)”), including restaurant and grocery partners and Deliveroo for Work (“DfW”) clients (together “Deliveroo Partner(s)”).  

This includes Deliveroo Partner Representatives who use technology provided by or on behalf of Deliveroo, including Restaurant Order Manager (“ROM”), Partner Hub, Marketer, DfW Admin Portal and the food brokerage application (together “Business Apps”) and related services and websites. 

Please read this privacy policy which explains how and why we collect, use and protect your information.

1. Contact details

If you have any queries or requests about this privacy policy or how we handle your information more generally, you can get in touch by contacting our local Partner Support team (see the “Deliveroo Group Company Details” section below). For DfW accounts, please contact your DfW representative.

2. Information that we collect about you

As part of our commitment to your privacy, we want to be clear about the types of information we collect. We collect your information in a variety of ways, such as when we onboard a restaurant as a new partner and when you use the Business Apps. More details about how your information is collected are listed below.

1. Lead generation

When looking for opportunities with new partners, we may obtain your business contact details from a third party source, such as LinkedIn, Google, a publicly available source, business data provider, or a business contact that has provided us with your details.

2. Negotiation of a contract with Deliveroo Partners

When a contract is being negotiated with a Deliveroo Partner and we are onboarding a new Deliveroo Partner, we ask you as a Deliveroo Partner Representative to provide information about yourself including your name, business contact details and business address. We may record calls and meetings for quality and training purposes. We will inform you of such recording and give you the opportunity not to be recorded.

3. Onboarding a new Deliveroo Partner

To complete the onboarding process, Deliveroo will conduct due diligence on new Deliveroo Partners, which includes identity and tax verification checks. 

As part of our “Know Your Customer” checks on Deliveroo Partners we require Deliveroo Partner Representatives to complete an identity verification using our third party identity verification provider, Onfido. If you are tax registered, we will also conduct a tax verification using the Deliveroo Partner’s tax identification number.

For the purposes of identity verification, you will be asked to submit a photo (“selfie”) or video of yourself and a photo of your identity document to check your identity. Your selfie (which may be considered sensitive data in some markets) will be compared with the photo in the identity document. This comparison is made automatically using an identity verification platform with facial recognition, operated by our service provider called Onfido.

During the onboarding process, we create a business profile for the Deliveroo Partner and we will ask the Deliveroo Partner Representative to provide information in order to create and maintain this partner profile, which will include business payment data. 

4. Management 

When there is a change of ownership, we process your personal information as a Deliveroo Partner Representative for the purposes of managing the Deliveroo Partner’s relationship with Deliveroo, which includes conducting an identity verification as described above.  

Where a Deliveroo Partner chooses to register via a Business App, we will collect your personal information as a Deliveroo Partner Representative, for the purposes of registering on the Business Apps and to enable the Deliveroo Partner to access the Business Apps. This includes where you interact with the DfW Admin Portal.

5. Payment

When we make payments to or receive payments from Deliveroo Partners we produce payment files (which are transferred to third party providers for the purposes of processing payments), which include Deliveroo Partner payment data and may include your name if you’re a sole trader or an unincorporated business.  

6. Your location

When you have provided permission at a device level, we process location data obtained from your use of the Business Apps and via our security providers. This is collected for the reasons explained in “Use of your information and why” below. 

7. Support

When a Deliveroo Partner requires support from us (“Business Support”) we collect certain information, such as information about your query, notes regarding the issue, your use of Business Apps (if relevant) and your contact details, as a Deliveroo Partner Representative.

When you interact with our Business Support team via email, phone, post, chat or on the Business Apps, including when you report any incident, our team collects and uses information about you. If you contact the Business Support team by phone, your calls may be recorded and analysed for performance, training and improvement purposes.

8. Technical data 

We collect technical information about your device and your use of your device, including through the use of cookies and similar technologies to: 

  • enable auto-login for you into the Business App; and 
  • obtain technical information about your device, including characteristics of and performance data about your device, the Business Apps and operating system, your device type, network connection type, IP address from which you are accessing the Business Apps, app version, device language, screen size and platform.  

We also collect technical information about your use of our services through technology, for instance where you use a ROM as a Deliveroo Partner Representative.

When it comes to cookies and similar technologies, you can change your cookie preferences at any time, and withdraw any consent you provided at any time. You can also manage and delete cookies through most internet browsers by changing your cookie settings but if you do so, the Partner Hub or our websites may not work properly. 

9. Information about the services

If a Deliveroo Partner takes advantage of the perks offered by service providers on our perks page, we will share with the service provider the information provided to us about the Deliveroo Partner’s interest in those perks, which includes your information as a Deliveroo Partner Representative.

We collect information about you from the feedback you send us or provide to us. 

When you use websites or applications of third parties in connection with the services being provided by Deliveroo, including during the onboarding process, those sites or applications may collect and process your information independently of Deliveroo. We recommend that you check their privacy policies to understand how they process your personal information. 

3. Use of your information and why

We will only process your information if there is a reason for doing so, and if that reason is permitted by law. 

We process your information where we have a justifiable reason for doing so. We have listed these reasons below.

To facilitate the contract between Deliveroo and the Deliveroo Partner to:

  • provide and manage the Deliveroo Partner application, account, and onboarding process, as well as to execute a contract between the Deliveroo Partner and the relevant Deliveroo entity;
  • provide you with access to and use of the Business Apps as a means of Deliveroo providing the business with services, including to enable the business to make orders;
  • communicate with you about operational information relating to any services being provided to you by Deliveroo, such as any important changes or developments to a Business App and about your upcoming booked orders; 
  • enable Business Support to communicate with you to support the provision of services to the Deliveroo Partner; and
  • enable us to process payments to the Deliveroo Partner. 

To communicate with you to:

  • help you complete the Deliveroo Partner application;
  • get your feedback through surveys for our marketing or advertising materials, in which case we will not identify you unless you have consented to Deliveroo using your information in this way. We also use your survey comments and feedback for our internal business purposes, such as to generate aggregated insights to help us assess and improve our services. Your name will not be used when generating or sharing these aggregated insights;
  • provide you with news and information in connection with Deliveroo and to help you to understand more about Deliveroo, by email or phone; 
  • inform you of Deliveroo product updates; and
  • provide support to you for live operations.  

For onboarding and managing our relationship with Deliveroo Partners to

  • create and maintain Deliveroo Partner account information;
  • enable our Business Support, tech and engagement teams to help you with any issues, enquiries or complaints efficiently and effectively, and to fix any bugs or other technical issues in a Business App using technical information relating to your device;
  • use location data for the purposes of confirming the position of your restaurant (if relevant) to avoid riders arriving at the incorrect location; 
  • arrange to take pictures of restaurant premises for the Deliveroo app or website; and
  • maintain a list of restaurants that Deliveroo has onboarded. 

To develop our business, systems and services to:

  • understand from your data what attributes to a positive or negative customer, restaurant or rider experience with Deliveroo and what might cause inefficient deliveries or damage to Deliveroo, and use this data to responsibly design, develop, test and implement new tools, processes, and relationships to improve our business, systems and services;
  • analyse data to make certain assumptions about your position within the Deliveroo Partner entity so that we send you the types of promotional offers that may be particularly relevant to your area of business;
  • use basic location data on an aggregate basis to develop and improve our business; 
  • promote and improve our services, by making it easier for customers and riders to find your business location and contact details;
  • interact with you (such as via communications or Business App functionality) to encourage Deliveroo’s network efficiency based on our analysis of your services; and
  • analyse your activity on the Business Apps so that we can administer, support, improve and develop our business and for statistical and analytical purposes and to help us to prevent fraud.  

To protect Deliveroo:

  • for the exercise or defence of legal claims and to exercise and protect the rights of Deliveroo, restaurant partners, customers, riders, or others, including determining our liability;
  • to enforce the terms of any contract and keep records of such enforcement, including using your data to analyse whether you have breached a contract (such as by misusing the Business Apps or acting fraudulently), which may result in us disabling or terminating a contract if we have the right to do so; and
  • to investigate complaints or incident reports relating to Deliveroo’s relationship with Deliveroo Partners and prevent fraud or other misuse of our systems and services, including by using systems to assess whether or not a Partner’s refund dispute is valid or whether a partner is operating in compliance with our partner agreement. 

We also process your information where we are under a legal or regulatory obligation to do so. We use your information to:

  • carry out our due diligence, including by performing identity verification checks using our third party ID verification service provider and tax verification checks;
  • keep a record of payments made to or from the Deliveroo Partner, to the extent they include your information; 
  • comply with any other legal obligation or regulatory requirement to which we are subject.

Where we rely on our legitimate interest as a basis for processing your information, we carry out a ‘balancing test’ to ensure that our processing is necessary and that your fundamental rights of privacy are not outweighed by our legitimate interest for processing.

4. Communications

Where we have a lawful basis for doing so (and are permitted to do so by law) we will use your information to let you know by email, post, phone, SMS, push notifications or in-app messages about Deliveroo’s products and services and/or any promotions from third parties relevant to your business (such as about broadband and telecommunications services, payment processing, and customer review platforms). Where local law requires us to, we will ask for your consent before sending the relevant communication and offer an option to unsubscribe from these communications.

5. Sharing your information

The information we collect about you is transferred to and stored on our servers located within the EU.

Sharing your information internally: We share your information with other Deliveroo Group Companies carrying out certain processing activities only where necessary for the purposes set out in the “Use of Your Information and Why” section above.

Sharing your information with third parties: We share your information with third party service providers that provide services on our behalf, including:

  • IT service providers: including cloud, software, analytics, communications and data storage providers and SDKs.
  • Operational service providers: including feedback and survey providers, onboarding providers, our support service providers, payment providers, user research partners, marketing agencies, professional advisors, financial and administrative services providers and other suppliers, business partners, contractors and subcontractors.
  • Suppliers: where a Deliveroo Partner is registered on the Business Apps, we will share your contact details with the supplier in order to facilitate transactions on the Business Apps.

In certain circumstances, we will also share your information:

  • if our business enters into a joint venture with, purchases or is sold to or merged with another business entity, your information may be disclosed or transferred to the target company, our new business partners or owners or their advisors;
  • if we are under a duty to disclose or share your information in order to comply with (and/or where we believe we are under a duty to comply with) any legal obligation or regulatory requirement. This includes where we’re under a legal obligation to or need to provide information to relevant tax authorities, respond to police data requests or to exchange information with other companies and organisations for the purposes of fraud protection and prevention;
  • in order to enforce our contractual terms with the Deliveroo Partner;
  • in the event of a dispute relating to the Deliveroo Partner’s services to Deliveroo or the services provided to the Deliveroo Partner, or to protect the rights of Deliveroo, Deliveroo Partners, customers, or others, including to prevent fraud; and
  • with such third parties as we reasonably consider necessary in order to detect or prevent crime, eg. the police.

6. Data transfers

In some cases the personal information we collect from you as a Deliveroo Partner Representative may be processed outside of the country in which you reside, such as in the United States, the Philippines and in the other countries in which Deliveroo operates (which are set out on restaurants.deliveroo.com). These countries may not have the same protections for your information as in your country of residence. However, we are obliged to ensure that your information processed by us and our suppliers outside of your country is protected in the same way as it would be if it was processed within your country. 

Whenever we transfer your information outside of the UK or EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • we will only transfer your information to countries that have been deemed to provide an adequate level of protection for personal information; or
  • where we use certain service providers, we may use specific contracts approved for use in the UK or the EEA, as applicable, which give personal information adequate protection. 

7. Retention of your information

We will only retain your information for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain information for a longer period in the event of a complaint.

To determine the appropriate retention periods for information, we will take into account factors including:

  • the amount, nature and sensitivity of the information;
  • the potential risk of harm from unauthorised use or disclosure of your information;
  • the purposes for which we process your information and whether we can achieve those purposes through other means;
  • our contractual obligations and rights in relation to the information involved;
  • legal obligation(s) under applicable law to retain information for a certain period of time;
  • applicable regulatory, tax, accounting or other requirements;
  • statute of limitations under applicable law(s);
  • our legitimate interests for retaining the information (see ‘Use of Your information and Why’ above);
  • whether there is an actual or potential dispute; and
  • guidelines issued by relevant data protection authorities.

In some circumstances you can ask us to delete your information (see “Your rights” section below). At the end of a retention period, we will securely delete or anonymise  your information.

8. Security

We adopt robust technologies and policies to protect your information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We have implemented procedures to deal with any personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Unfortunately, the transmission of information via the internet is not completely secure. Although we take steps to protect your information, we cannot guarantee the security of your information transmitted to the websites or the Business Apps; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Where you have chosen a password which allows you to access certain parts of the Business Apps or websites, you are responsible for keeping this password confidential. You must keep any password you create, or other secure login method, secret, and prevent unauthorised access to your account. We advise you not to share your password with anyone. If you choose to share your password with your substitute, please make sure they are also aware that they must keep it confidential and secure and not share it with anyone else.

9. Your rights

In certain circumstances, under local data protection law, you may have rights in relation to the information we hold about you. We will handle a request to exercise these rights in line with the applicable law.

If you are in the UK or the EU, you have the following rights:

  • The right to be informed. You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This is why we’re providing you with the information in this policy.
  • The right of access. This is also known as a “data subject access request”. You have the right to receive a copy of your information if we hold any information about you and to check that we are processing it lawfully. 
  • The right to rectification. You are entitled to have any incomplete or inaccurate  information we hold about you corrected, though we may need to verify the accuracy of the new information you provide to us.
  • The right to erasure. This is also known as “the right to be forgotten”. You have the right to request the deletion or removal of certain information that we hold about you where there is no good reason for us continuing to process it. The right is not absolute and only applies in certain circumstances.
  • The right to restrict processing. You have rights to block or suppress further use of your information in certain circumstances. When processing is restricted, we may still have a lawful reason to hold your information, but we will not use it further.
  • The right to data portability. You have the right to receive your information in a structured, commonly used and machine-readable format. This right is not absolute and only applies in certain circumstances.
  • The right to withdraw consent. Where we rely on consent to use your information, you have the right to withdraw that consent at any time. Withdrawing consent will not, however, make unlawful our use of your information before you withdraw your consent. If you withdraw your consent we may not be able to provide certain services to you.
  • The right to object to processing. You have the right to object to certain types of processing of your information, including processing for direct marketing purposes. 

If you wish to exercise your privacy rights, please contact our Data Protection Officer in writing at dpo@deliveroo.com

10. Changes to our privacy policy

We update this privacy policy from time to time, so remember to check back in every so often, in case anything has changed and, where appropriate, we will notify you of the changes, for example by email or another method. Any changes to our privacy policy will be posted on the Deliveroo website and to the Business Apps and, as appropriate, through notification in the Business Apps or by email.

This privacy policy was last published on: 26 September 2023

11. Deliveroo Group Company details

UK

IRELAND

BELGIUM

  • Deliveroo Belgium SPRL, WeWork Botanic, Botanic Building, Boulevard Saint-Lazare 4, 1210, Saint-Josse-ten-Noode. Brussels, Belgium.
  • Contact

FRANCE

  • Deliveroo France SAS, 36 rue La Fayette, Paris, 75009, France.
  • Contact

ITALY

  • Deliveroo Italy SRL, Deliveroo c/o Via Carlo Bo 11, Milano, CAP 20143, Italy.
  • Contact

HONG KONG

  • Deliveroo Hong Kong Ltd, Room 1901/ 19F, Lee Garden One, 33 Hysan Avenue, Causeway Bay, Hong Kong.
  • Partners
  • Prospective partners can contact our hotline at: 58081733

SINGAPORE

UNITED ARAB EMIRATES

  • Deliveroo DMCC, Unit No 123, DMCC Business Centre, Level No 1, Jewellery & Gemplex 3, Dubai, United Arab Emirates.
  • Partners
  • For prospective partners: restaurants@deliveroo.ae

QATAR

  • Deliveroo LLC, Office No.G33, Plazza Level, QQ05A, Qanat Quartier, Regus AL Jaidah Business Centre, No. 18, Doha, Qatar.
  • Partners
  • For prospective partners: restaurants@deliveroo.com.qa

KUWAIT

  • Roofoods Consumer Products Delivery Gulf SPC, Al Mirqab, Al Soor Street, Burj AlShaya, Floor 10, Unit, 20, Kuwait City, Kuwait.
  • Partners
  • For prospective partners: restaurants@deliveroo.com.kw