Privacy Policy


Effective: 8 December 2021 

Previous version is located here

Practi Technologies Ltd, UK Private limited Company, Company number 09829987, Registered office address: Fleet Place House, 2 Fleet Place, London EC4M 7RF, England (“Practi Technologies Ltd") operates this website https://practi.co.uk and its subdomains and the POS mobile application (the "Service" or “POS”).  

Practi Technologies Ltd and/or its parent company, Simbambili Ltd (together or separately - "us", "we", or "our) process personal information as described in this statement and/or other applicable privacy notices and/or data protection terms. Note, that in different contexts, we act as both a data processor and a data controller under the GDPR or UK GDPR. Affiliates within our group of companies may process personal data or share data for the purposes described in this privacy statement. Additional information about the data processing may also be included in other privacy statements and/or terms. This privacy notice supplements the other notices and terms and is not intended to override them.    


Introduction

At Just Eat, we are committed to protecting the personal information of all visitors who access our websites or services through any mobile application, platform or device (collectively, the “Services”). For products or services (including web or application-based functionality) that may involve specific processing of your personal data, this Statement might be supplemented by our product or services specific notice which provides additional information on the processing of your personal data for the Services mentioned. 

This privacy statement  (“Statement”) explains how we  and our affiliates collect, share and use your personal information. You will also find information about how you can exercise your privacy rights. By using our Services you agree to  us  using your personal information as described in this Statement. 

You can rest assured that we are committed to treating your personal information responsibly, securely and transparently but if you have any questions, please contact us using the contact details provided at the bottom of this Statement. 


Information we collect from you and why

1. The personal information that we may collect about you broadly falls into the following categories: 

a. Information that you provide voluntarily
Certain parts of our Services may ask you to provide personal information voluntarily, such as: 

Registration information: When you sign up to our POS and create an account to use the Services, we collect information that can be used to contact or identify you including, but not limited to, your email address, name, phone number and postal address. The registration information you provide also allows us to authenticate your access to the Services. We also use registration information in our legitimate business interests to contact you for your views on our Services and to notify you of any important changes or updates to our Services. 

Financial information: We collect financial information such as your bank account number, sort code and credit/debit card details to enable us to take payment of Fees in accordance with our Service Agreement. Payment information, such as credit card numbers, are securely processed by our third party payment processors. Note that we never store your credit card information in our systems. 

Transaction information: We may also collect transaction information such as orders for good/services placed by customers of the Restaurant. We use this information in our legitimate business interests to provide you with the Services, including White Label Services. 

Feedback: When you contact us, for example with a question, problem or comment, we may collect information about you including your name and the content of your query. If you contact our customer services centre we may record and keep a record of your conversation for quality and training purposes and to aid in the resolution of your queries. We will also collect your personal information if you complete the surveys we may run to improve the Services that we deliver to you. 

b. Information that we collect automatically
When you access our Services, we may collect certain information automatically from your device. In some countries, including countries in Europe, this information may be considered personal information under applicable data protection laws. For instance: 

Activity information: We collect information about your use of the Services when you interact with the Website, especially when you browse any page of the Website, you receive emails or calls from us, and when you use a third party service linked to our POS. The information we may collect include data on how you use the Website such as your URL clickstreams (the path you take through the Website), goods/services viewed, page response times, download errors, how long you stay on webpages, what you do on those pages, how often you visit the Website, and other actions that you may take. We use the information to provide, maintain and improve the Services, and provide customer support in relation to the Services. 

Log data: We may also collect information that your browser sends whenever you visit our Service or when you access the Service by or through a mobile device ("Log Data"). This Log Data may include information such as your computer's Internet Protocol ("IP") address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages and other statistics. When you access the Service by or through a mobile device, this Log Data may include information such as the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile internet browser you use and other statistics. 

Location information: We may use and store information about your location, if you give us permission to do so. We use this information to provide features of our Service, to improve and customize our Service. You can enable or disable location services when you use our Service at any time, through your mobile device settings. 

Cookies and similar technologies: Cookies are files with small amounts of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer's hard drive. We use cookies and similar tracking technology to collect and use personal information about you (e.g. your Internet Protocol (IP) address, your device ID, your browser type and when, how often and how long you interact with the Services). You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some parts of our Service. When permitted and/or required by applicable law or where we have your consent, we use remarketing services to advertise on third party websites to you after you visited our Service. We, and our third party vendors, use cookies to inform, optimize and serve ads based on your past visits to our Service. For more information on how we use cookies and other tracking technologies, read our Cookie Notice. Via our cookie preference functionality, you are in control of your preferences.   


c. Information that we obtain from third party sources.

From time to time, when permitted and/or required by applicable law or, where we have your consent, we may receive personal information about you from a third party or public sources, but only where we have checked that these third parties either have your consent to process the information, or are otherwise legally permitted, or are required to share your personal information with us. For instance, we may use third party services such as Google Analytics that collect, monitor and analyze this type of information in order to increase our Service's functionality. These third party service providers have their own privacy policies addressing how they use such information. 


2. Who we share personal information with

We only share your personal data if it is necessary for the fulfilment of the purposes described in this Statement or when delivering our Services to you. In delivering our Services to you, depending on the circumstances, we may share your personal information with the following: 

We are a member within the Just Eat group of companies. We may share personal information with any other member of the same group (which includes our ultimate holding company and its subsidiaries and affiliates either now or at any time in the future) for the purposes set out in this Statement; however as far as competitively sensitive data from a competition law perspective is concerned (e.g. the information that an order was placed through a certain competitor of the Just Eat group of companies) we will not share this information with the Just Eat group of companies. 

third party service providers who undertake various activities to promote and support our Services (these third parties may be located outside of the country where your Restaurant is based);

any law enforcement or regulatory body, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person; 

if any part of our business enters into a joint venture, purchases another business or is sold to or merged with another business entity or any reorganization, your information may be disclosed or transferred to the target company, or new business partners or owners or their agents and advisors. In these circumstances we will always inform the relevant entities that they must only use your personal information for the purposes disclosed in this Statement; and  

any other person provided that you have given your consent to the disclosure. We will not sell, distribute or lease your personal information unless we have your permission or are required by law to do so.


3. Legal basis for processing personal information

Our legal basis for collecting and using your personal information as described above will depend on the specific context in which we collect it. We will always make sure that we have a legal basis to collect and use your personal information, and that legal basis may change depending on the type of personal information and the context in which we collect it. Generally, we rely on the following two legal bases for collecting and using your personal information: 

Contract: our main reason for collecting and using your personal information is so we can perform the obligations set out in our Service Agreement with you (i.e. to ensure you have full access to our Services), and to enable you to effectively deliver orders to your customers. If we ask you to provide personal information to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (and we’ll also explain the possible consequences of you not providing it).

Legitimate interests (as long as those interests are not outweighed by your rights and interests): We rely on legitimate interests when gaining insights from your behaviour on the Website; delivering, developing and improving the Website; enabling us to enhance, customise or modify the Website and Services; determining whether marketing campaigns are effective; and enhancing data security. We also rely on legitimate interests when we correspond with you about our service (including offering support for the service).

If you have questions about, or need further information concerning, the legal basis on which we collect and use your personal information, please contact us using the contact details provided below.


4. International data transfers

We may transfer your personal information to countries other than the country in which you are resident (to where other Just Eat group companies or our service providers have operations). We implement appropriate safeguards to protect your personal information when transferring data outside of the EEA. Some of the safeguards we rely on include, where appropriate, using the European Commission’s approved standard contractual clauses, intra-group transfer agreements, or other adequate measures, where this is appropriate. If you have questions about, or need further information concerning, the legal basis on which we collect and use your personal information, please contact us using the contact details provided below.


5. Security

The security of your personal information is important to us, but no method of transmission over the internet, or method of electronic storage is 100% secure. We place great importance on protecting your information from and against unauthorised access and against unlawful processing, accidental loss, destruction and damage. We implement appropriate technical and organisational measures to safeguard such information.
For example, connections to the Service are encrypted using 256-bit SSL with integrity assured by the SHA2 RSA algorithm. We use servers that comply with strict international data security standards, including ISO 27001. If you have reason to think that your interaction with us or your data is no longer processed in a secure manner, please reach out to us immediately using the contact details provided below. Be reminded that you are responsible for your login information and password and must keep them confidential. If you share data with us of other people, it is your responsibility to share this in compliance with local legal requirements.


6. Data retention

We will store your personal information for no longer than is necessary to fulfil the purposes described in this Statement. Please keep in mind that in certain cases a longer retention period may be required or permitted by law. We determine our retention period on criteria that include legally mandated retention periods, pending or potential litigation, intellectual property or ownership rights, contract requirements, operational directives or needs, and historical archiving.

We will destroy or permanently anonymise your personal information at the point that we no longer need to process it for our ongoing legitimate business needs or for any legal reason. If this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store it and isolate it from any further processing until deletion is possible.


7. Your data protection rights

We respect your privacy and data protection rights. Below is a summary of your rights in respect of your personal information which we:

- withdraw your consent at any time
- access your personal data
- verify and seek rectification of your personal data
- object to the processing of your personal data 
- restrict the processing of your personal data 
- request the erasure of your personal data 
- right to data portability 
- right regarding automated decision-making 

We strongly encourage you to take control of your personal data. We provide you with the tools to access, review or update your personal information at any time through your account. You can exercise these rights by contacting us using the contact details below, or by contacting the DPO Office. For any questions or reasonable enquiry related to the protection of your personal data by us or regarding this Statement in general, you can contact our group DPO Office. 

When permitted and/or required by applicable law or, where we have your consent, we may use your personal information to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send. 

Similarly, if we collect and process your personal information on the basis of your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent. 

You may turn off cookies - or similar tracking tools - in your browser via settings. Cookie is a generic name for a small text file which attaches an identifier to a user. A cookie may collect personal data. For more information about when and how we use cookies and similar tracking technology, please see-our Cookie Notice. You can control your cookie settings via the cookie preference choices. 

You have the right to complain to a data protection supervisory authority about our collection and use of your personal information. 

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. In certain cases, we may ask you to verify your identity before we can act on your request. We will do our best to address your request in time, in your local language and free of charge, except where it would require a disproportionate effort. If you are unsatisfied with the reply received, you may then refer your complaint to the relevant regulator in your jurisdiction. 


8. Links to third-party sites

Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy notices of every site you visit. We have no control over, and assume no responsibility for the content, privacy policies or practices of any third party sites or services.


9. Children’s privacy

Our Service does not address anyone under the age of 16. We do not knowingly collect personally identifiable information from children under 16. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children under age 16 without verification of parental consent, we take steps to remove that information from our servers.


10. Updates to this Statement

This Statement may be updated from time to time when necessary to reflect in our Services as a result of legal, technical or business developments. If changes are significant or have consequences for your rights under this Statement, we will provide you with more information and maintain prior versions for your reference. 

The most recent version of this Statement will govern the processing of your personal data by us and can be found via our website and mobile application. We encourage you to periodically review this Statement for the latest information on our privacy practices. Our Statement archive will keep prior versions of this Statement for your reference


11. How to contact us

If you have any questions about this Statement, please contact us or our Group Data Protection Officer via:

Practi Technologies Ltd, UK Private limited Company, Company number 09829987
Registered office address: Fleet Place House, 2 Fleet Place, London EC4M 7RF, England 

Talk to us on 020 3608 4840
Email: ukpos.support@justeattakeaway.com