Dill Privacy Policy

Effective Date: 24/11/2020

Introduction

Dill, Dill School and Dill Print are the mobile applications developed by Techdrobe Ltd., company registered in England and Wales, United Kingdom, Company Number 12485262. Everything that refers to Dill and Dill School in the context of this Privacy Policy, all the related materials and activities related to Dill’s and Dill School’s services are exclusively owned by Techdrobe Ltd. We will refer to all our services, including the mobile applications, website and platforms as Dill (“Services”).

This Privacy Policy note (“Privacy Policy”) explains how Techdrobe collects, shares, and uses your personal information and information about your privacy rights. By using our Services you agree to Techdrobe using your personal information as outlined in this Privacy Policy. The terms “we”, “us” or “our” are each intended as reference to Dill and Techdrobe. Unless otherwise defined in this Privacy Policy, the terms used in this Privacy Policy have the same meanings as in our Service Terms.

Key Points Summary

We’ve made a short summary of the key points of our Privacy Policy below. More information about each section can be found after this summary.

1. Information we collect from you and the reasons for it:

a) Information when you register a Dill account allows us to:
– create your account so you can place Orders under our Terms and Conditions (not applicable to Dill Print);
– identify you when you sign-in to your account;
– contact you for your views on our Services; and
– notify you of changes or updates to our Services.

b) Transaction Information when you place an Order with an Outlet in order to (not applicable to Dill Print):
– process your Order and provide you with a summary of it (please note that Dill never stores your credit card information in our internal systems, we only use PCI DSS Level 1 certified payment providers to fulfil Orders);
– communicate your Order information to the Outlet;
– send you status updates regarding your Order;
– resolve any issues that might arise with your Order;
– improve our Services based on research and analysis;
– protect you and our Services.

c) Feedback on our Services allows us to:
– reply to your questions, concerns and suggestions;
– publish feedback you submit to us about our Outlets and our services;
– improve our Services.

d) Activity Information so we can:
– continuously improve your experience using our Services;
– allowing you to access your Order history;
– provide other services at your request.

e) Technologies so we can:
– measure and analyse the use and effectiveness of our Services;
– use location services if you choose to share your geo-location.

f) Market research reports and analytics data in order to:
– measure the performance of marketing campaigns for our Services;
– learn more about your preferences and improve our campaigns accordingly.

2. Disclosure of your information

We are very careful and transparent about who your information is shared with. Whenever we share your information with third parties, we ensure their security to the best of our ability and have contractual measures in place, for your protection.

The types of third parties that we share your information with include:

a) Payment providers and fraud detection providers for the purposes of providing services to us, for example when they process information such as credit card payments for us, provide support services to you or carry out fraud checks for us;

b) Outlets that you placed an Order with for the purpose of processing it and for its delivery;

c) IT service providers (including cloud providers): for the purposes of data storage and analysis;

d) Third parties who undertake various activities to promote, market or support our Services. This includes social media platforms like Facebook, marketing service providers, partners for push notifications – any of these third parties might be inside or outside your country of residence;

e) Any regulatory body or law enforcement, government agency, court or other third party where we believe disclosure is necessary under applicable law or regulations;

f) New owners or re-organised entities in the event of a business restructuring, sale, purchase or joint venture affecting our business.

g) Any other person provided that you have given your consent. We will never sell, distribute or otherwise share your personal information unless we have your permission.

3. Processing personal information legal basis

We will always ensure that we have a legal basis to collect and use your personal information. The main reason for collecting and using your personal information is to perform our contract with you (to ensure you get your Order accurately, every time), but we may also process it where it is in our legitimate business interests to do so.

4. International data transfers

We may transfer your personal information to countries outside the one in which you are resident to other countries where Techdrobe or our service providers have operations. The data protection laws of these countries may differ from the laws of your country but Techdrobe takes care to implement appropriate safeguards to protect your personal information in those countries in accordance with this Privacy Policy.

5. Security

We adopt robust technologies and policies to ensure the personal information we hold about you is suitably protected. We take steps to protect your information from unauthorised access and against unlawful processing, accidental loss, destruction and damage.

6. Data retention

We will not retain your information for any longer than we think is necessary.

Information that we collect will be retained for as long as needed to fulfil the purposes outlined within this Privacy Policy, in line with our legitimate interest or for a period specifically required by applicable regulations or laws, such as retaining the information for regulatory reporting purposes.

7. Your data protection rights

You can access your account at any time to review your personal information and update your password. You can also contact us to ask us to delete or update your personal information or restrict its processing. You also have the right to unsubscribe from the marketing communications we send you by sending us an email at dillapplication@mydill.co.uk.

8. Links to third-party sites

Our Services may, from time to time, contain links to and from third-party websites (for example, those of our partner networks and affiliates). If you follow these links, please be aware that Techdrobe is not responsible or liable for these third-party websites which will have their own privacy policies.

9. Changes to our Privacy Policy

Any changes to our Privacy Policy will be posted to the Services and, where appropriate, we will notify you of the changes for example by email or push notification.

10. How to contact us

If you have any questions or concerns about this Privacy Policy and Techdrobe’s privacy practices, please contact us via email at dillapplication@mydill.co.uk.

Full Privacy Policy Contents

1. Information we collect from you and the reason for it:

a) Voluntary information

Certain parts of our Services may ask you to provide personal information voluntarily.
For instance:

Registration information: When you create a Dill account, sign-up or fill in forms on the Services, we collect information about you including your name, telephone number, email address. Your password is secured (through Firebase Authentication System) and we never have access to your account password.

Transaction information: We collect information relating to your Orders, including payment information (e.g. your credit card number) using the secure services of our payment processors. Payment operations are outsourced to our payment processors and we do not store your credit card information in our systems. We only use PCI DSS Level 1 certified payment providers to fulfil Orders. We also collect delivery details (e.g. your physical address) to fulfil each Order for delivery.

Feedback: When you post messages and reviews of the Services or you contact us, for example with a question, problem or comment, we collect information about you including your name and the content of your query. If you contact our customer support teams we will record and keep a record of your conversation for quality and training purposes and to aid in the resolution of your queries.

Sensitive Information: We collect information that you provide when you contact us (such as through our call centre or by using our online forms). This information may include sensitive personal information, such as health-related information (allergies or dietary requirements) or information about your religion (such as if you only eat halal food). We do not require this information and we ask that you share this information with the outlet only. However, there are some situations where you may nonetheless provide this type of information, for example if you make a complaint and in those circumstances we will only be collecting it with your consent.

b) Automatic information

When you access our Services, we may collect certain information automatically from your device. In some countries, including countries in Europe, this information may be considered personal information under applicable data protection laws.

For instance:

Activity information: We collect information about your usage of the Services and information about you from the content you create and the notifications or messages you post or send as well as what you search for, look at and engage with.

Tracking technologies: We use tracking technology to collect and use personal information about you (e.g. your Internet Protocol (IP) address, your device ID, and when, how often and how long you interact with the Services).

c) Third party information

From time to time, we may receive personal information from third party sources, including advertising networks but only where we have checked that these third parties either have your consent to process the information or are otherwise legally permitted or required to share your personal information with us. This information may include your likely demographic group.

For instance:

Analytics reports and market research surveys: We collect information from our third party affiliates about the way you respond to and engage with our marketing campaigns so that we can customise our marketing and Services accordingly.
We may also receive aggregated information in the form of audience segments from third party sources in order to display targeted advertising on digital properties operated by organisations like Facebook and Google.

2. How we use collected information

Examples of how we may use this information include:

a) Information that you provide voluntarily

Registration information

The registration information you provide when you create a Dill account allows us to give you access to the Services and to supply them to you under our Terms. We also use this information to authenticate your access to the Services, to contact you for your views and to notify you of important changes or updates to our Services.

Transaction information

Your transaction information (such as the food items you add to your basket) allow us to process your Order and send you an accurate bill. It also helps us and any Outlet you order with contact you where necessary.
Dill may contact you by email, phone or SMS to give you status updates or other information or to resolve problems with your account or Order. An Outlet may contact you by phone or SMS to provide you with status updates or other information regarding your Order.
Where you pay for your Order with a mobile payment or digital wallet service provider (such as Apple Pay or Google Pay) the Order information, including the date, time, sum, items ordered and Outlet name will be available in the Orders History section within Dill.
We will also analyse information on completed transactions and successfully delivered Orders on the basis of data matching or statistical analysis so that we can administer, support, improve and develop our business and Services. Our analyses also help us detect and prevent fraud or other illegal activities or acts prohibited by our Terms or any policies applicable to the Services.

Information regarding your marketing preferences

Techdrobe may market to you, where permitted by law, by post, email, telephone, mobile (i.e. SMS, in-app messaging and push notification) about our products or Services.
Where you have given your consent, we may share your information with third parties (e.g. other companies) in other sectors (such as food, drink and entertainment) so that they can tell you about goods or services which may interest you.
If you don’t want us to use your data in this way or generally change your mind about receiving any form of marketing communications, you can unsubscribe at any time by contacting us at dillapplication@mydill.co.uk. You may also be able to opt-out of push notifications at a device level (e.g. by way of your iOS settings). If you choose to unsubscribe from our marketing, we will keep a record of your preferences so that we don’t bother you with unwanted marketing in future.

Feedback and reviews

If you give us feedback we will use it to reply to your questions or queries, to provide customer support and resolve any problems with your Orders or with the Services. We will publish reviews that you send to us about the Outlets on our platform and our Services in general and we also analyse your feedback to improve and develop our Services and in order to enhance your experience.

b) Information that we collect automatically

When you access our Services, we may collect certain information automatically from your device such as your IP address, MAC address or device ID. In some countries, including in Europe, this information may be considered personal information under applicable data protection laws.

Activity Information

We may analyse your buying habits and how you interact with our Services so that we can suggest food options from outlets we think you would like to try. If you choose to share your geo-location with us, we may use this information to show you content that is local to you; this information will also help smooth the effective and speedy delivery of your Order. We may also provide you with customised content and advertisements based on your previous interactions with our Services and our knowledge of your preferences which we understand from your usage and buying history relating to the Services.
We enable you to access your Order History. We may also collect information about your interaction with our emails and other forms of communication.

Tracking technologies

Like many websites and online services we use technologies to maintain a record of your interaction with our Services. For further information about the types of technologies we use, why, and how you can control such technologies, please contact us at dillapplication@mydill.co.uk.

c) Information that we obtain from third party sources

Analytics reports and market research surveys

We analyse information we collect from our third-party service providers (such as Google, Facebook, Amazon and other affiliates) to understand how you engage with our Services and advertisements (e.g. whether you have clicked on one of our advertisements). This helps us to understand your preferences and recommend you Services which are tailored to your interests.

2. Disclosure of your information

In delivering the Services to you, depending on the circumstances, we may share your personal information with the following entities:

b) Outlets that you placed an Order with for the purpose of processing it and for its delivery;

c) IT service providers (including cloud providers): for the purposes of data storage and analysis;

e) Any regulatory body or law enforcement, government agency, court or other third party where we believe disclosure is necessary under applicable law or regulations;

f) New owners or re-organised entities in the event of a business restructuring, sale, purchase or joint venture affecting our business.

g) Any other person provided that you have given your consent. We will never sell, distribute or otherwise share your personal information unless we have your permission.

h) As mentioned above, we may also share information with third parties (for example, in the food, drink and entertainment sectors) so that they can contact you about goods or services which may interest you. We will only share your information with these third parties where you have given your consent. If you don’t want us to use your personal information in this way or generally change your mind about receiving any form of marketing communications, you can unsubscribe at any time by sending us an email at dillapplication@mydill.co.uk. If you choose to unsubscribe from our marketing, we will keep a record of your preferences so that we don’t bother you with unwanted marketing in future.
If any part of our business enters into a joint venture, purchases another business or is sold to or merged with another business entity, your information may be disclosed or transferred to the target company, or new business partners or owners or their agents and advisors. In these circumstances we will always inform the relevant entities that they must only use your personal information for the purposes disclosed in this Privacy Policy.

i) Any law enforcement or regulatory body, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person.

j) Any other person provided that you have given your consent to the disclosure. We will not sell, distribute or lease your personal information unless we have your permission or are required by law to do so.

3. Processing personal information legal basis

Our legal basis for collecting and using your personal information as described above will depend on the specific context in which we collect it.
Our main reason for collecting and using your personal information is to perform our contract with you (i.e. to make sure you get your Order when you want it). However we will also use your personal information where it is in our legitimate business interests to do so (but only if our interests are not overridden by your data protection interests or your fundamental legal rights and freedoms). In some cases, we may have a legal obligation to collect personal information from you (e.g. in the event of legal proceedings) or we might need to process it or share it with others to “protect your vital interests” (this is legal speak for saving your life) or those of another person (e.g. in a case where another person’s life is in danger).
If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (and we’ll also explain the possible consequences of you not providing it).
Similarly, we may collect and use your personal information in reliance on our legitimate interests (or those of any third party). Relevant legitimate interests include a) to market to you or make you offers that we believe will interest you; b) to analyse and understand how our services are used and so to improve them; c) for fraud prevention or prevention of other criminal acts; or d) to keep our systems secure.
If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the “How to contact us” at the bottom of this page.

5. International Data Transfers

6.Security

Where you have chosen a password that allows you to access certain parts of the Services, you are responsible for keeping this password confidential. We advise you not to share your password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will take steps to protect your information, we cannot guarantee the security of your data transmitted to the Services; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

7. Data retention

We will not retain your information for any longer than we think is necessary.

When determining the relevant retention periods, we will take into account factors including:

our contractual obligations and rights in relation to the information involved;
legal obligation(s) under applicable law to retain data for a certain period of time;
statute of limitations under applicable law(s);
our legitimate interests where we have carried out balancing tests;
(potential) disputes; and
guidelines issued by relevant data protection authorities.

Otherwise, we securely erase your information where we no longer require your information for the purposes collected.

8. Your data protection rights

Under data protection law, you may have a number of rights concerning the data we hold about you. If you wish to exercise any of these rights, please contact us at dillapplication@mydill.co.uk. For additional information on your rights please contact your data protection authority and see below.

The right to be informed. You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This is why we’re providing you with the information in this policy.

The right of access. You have the right to obtain access to your information (if we’re processing it). This will enable you, for example, to check that we’re using your information in accordance with data protection law. If you wish to access the information we hold about you in this way, please get in touch at dillapplication@mydill.co.uk.

The right to rectification. You are entitled to have your information corrected if it is inaccurate or incomplete. You can request that we rectify any errors in information that we hold by contacting us (see How to contact us below).

The right to erasure. This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of certain of the information that we hold about you by contacting us (see How to contact us below).

The right to restrict processing. You have rights to ‘block’ or ‘suppress’ further use of your information. When processing is restricted, we can still store your information, but will not use it further.

The right to data portability. You have the right to obtain your personal information in an accessible and transferable format so that you can re-use it for your own purposes across different service providers. This is not a general right however and there are exceptions. To learn more please get in touch (see How to contact us below).

The right to lodge a complaint. You have the right to lodge a complaint about the way we handle or process your information with the national data protection authority.

The right to withdraw consent. If you have given your consent to anything we do with your information (i.e. we rely on consent as a legal basis for processing your information), you have the right to withdraw that consent at any time. You can do this by contacting us (see How to contact us below). Withdrawing consent will not however make unlawful our use of your information while consent had been apparent.

The right to object to processing. You have the right to object to certain types of processing, including processing for direct marketing and profiling. You can object by changing your marketing preferences by getting in touch (see How to contact us below).

9. Links to third-party sites

Our Services may, from time to time, contain links to and from third-party websites (for example, those of our partner networks and affiliates). We provide these links to you only as a convenience and the inclusion of any link does not imply endorsement of the relevant website by Techdrobe. If you follow these links, please be aware that Techdrobe is not responsible or liable for these third-party websites which will have their own privacy policies.

10. Changes to our Privacy Policy

Any changes to our Privacy Policy will be posted to the Services and, where appropriate, we will notify you of the changes for example by email or push notification. We may update this Privacy Policy from time to time in response to changing legal, technical or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Policy changes if and where this is required by applicable data protection laws.
We encourage you to periodically review this page for the latest information on our privacy practices.

11. How to contact us

If you have any queries or requests concerning this Privacy Policy or how we handle your data more generally, please get in touch with us using the following details.

By contacting our general customer services team at: dillapplication@mydill.co.uk
By contacting our team via mail at:

Techdrobe Ltd., C/O Azets Charter Court, Swansea Enterprise Park, Swansea, Wales, SA7 9FS, Company registration number: 12485262

Dill Privacy Policy

Introduction

Key Points Summary

Full Privacy Policy Contents

Useful links