EAT apps privacy notice

About this notice

This notice explains what the EAT mobile apps collect, why, and what you can do about it. It covers three separate apps:

• EAT: Food Delivery — the customer app, for ordering food.
• EAT Restaurant Partner — used by restaurants to receive and fulfil orders.
• EAT Delivery — used by delivery partners to accept and complete deliveries.

The apps are operated by SPACE-IZ Ltd, registered in the United Kingdom with company number 12709068, at Level 39, One Canada Square, Canary Wharf, London, E14 5AB. SPACE-IZ is the data controller.

Our general privacy policy sets out your rights, our lawful bases, international transfers and how we handle data across all SPACE-IZ services. It continues to apply. This notice adds the detail specific to the EAT apps, and where the two differ on an app matter, this notice governs.

What the customer app collects

EAT: Food Delivery collects:

• Your mobile number, which is how you sign in. We send a one-time code to it.
• Your name and email address, if you add them to your profile, and your profile photo if you set one.
• Your delivery addresses, and your device’s location when you ask the app to find your address on a map or show restaurants near you. The customer app only uses location while you have it open. It never collects your location in the background.
• Your orders — what you ordered, from where, when, the delivery address, and any rating or note you leave afterwards.
• Payment confirmations. Payments are taken by PayPal. We receive confirmation that a payment succeeded and a reference for it. We never see or store your card number.
• Support messages you send us, and anything you attach to them.

What the restaurant partner app collects

EAT Restaurant Partner is for verified business partners. Alongside the account details above (mobile number, name, email, date of birth), it collects:

• Your restaurant’s details — trading name, address, the exact map coordinates you set for it, opening hours, cuisine types, logo, and the photos, prices and descriptions on your menu.
• Verification documents — your food hygiene registration and an identity check, including a photograph of you taken in the app. These are reviewed by a member of our team. We do not run facial recognition or any other biometric matching on them.
• Payout details — the account holder name, account number and SWIFT/BIC for the bank account we pay you into, and your tax or VAT registration number.
• Your orders and earnings, and any offers or discount campaigns you run.

The app asks for your location only when you are placing your restaurant’s pin on the map, and only while the app is open.

What the delivery partner app collects

EAT Delivery is for approved delivery partners. Alongside the account details above, it collects:

• Your personal details — name, email, date of birth, gender, home address, your profile photo, and an emergency contact number. If you give us an emergency contact, please make sure that person is content for us to hold their number for that purpose.
• Your blood group, if you choose to provide it. This is health information, and it is optional. We hold it so that it can be passed to emergency services if you are involved in an accident while working. You can leave it blank or clear it at any time from Edit Profile, and nothing else in the app depends on it.
• Verification documents — proof of identity, your driving licence, your vehicle registration document, your vehicle insurance certificate, and a photograph of you taken in the app. As above, these are checked by a person, not by biometric matching.
• Your vehicle — type, model and registration number.
• Payout details — account holder name, account number and SWIFT/BIC.
• Your deliveries and earnings, and your ratings.
• Your location, including in the background — see the next section, which explains this in full.

Background location in the delivery partner app

The EAT Delivery app collects your location in the background. That means it continues to collect it when the app is minimised, when your screen is off, and when the app is closed. This section explains exactly when that happens, because it is the most intrusive thing any of our apps does.

Background collection runs for exactly as long as you are toggled Online in the app, and stops the moment you go Offline.

It does not depend on whether you are carrying an order. While you are Online there are two modes:

• Online and waiting for work — we take a low-accuracy position roughly once a minute, so that our dispatch system knows which partners are near an incoming order and can offer it to the closest one.
• Carrying an order — we take a high-accuracy position roughly every fifteen seconds, or every fifty metres, so that we can navigate you to the restaurant and then to the customer, and so the customer and the restaurant can watch the order approach on a live map.

When you go Offline, or sign out, background collection stops. We do not collect your location when you are Offline, and we do not collect it when you are not signed in. We do not use it to build a profile of where you go outside working hours, and we do not sell it or share it with advertisers or data brokers.

Before your device asks you for background location permission, the app shows you a screen explaining this. You can decline. If you do, you can still use the app, but deliveries will only be offered to you reliably while you have it open on screen, because we cannot see where you are otherwise. You can change or withdraw the permission at any time in your device settings, and going Offline stops the collection without changing any permission.

We keep the location trail of a completed delivery so that we can resolve disputes about whether and when an order arrived. It is kept at full detail for 90 days. After that we thin it to a single point per minute and keep it in that reduced form as part of the order record.

Device and technical data

All three apps also collect:

• A push notification token for your device, so we can tell you about an order, a job offer or a reply from support. Turning off notifications in your device settings stops these.
• An account identifier that links your activity to your account.
• Basic technical data such as IP address and app version, which reaches our servers as part of making requests to them.

None of the EAT apps contain advertising SDKs or third-party analytics SDKs. We do not track you across other companies’ apps and websites, and we do not ask for permission to do so, because we do not do it.

How we use it and who we share it with

We use the data above to run the service: to sign you in, take and deliver orders, pay partners, verify that partners are who they say they are and are entitled to work, prevent fraud, support you when something goes wrong, and meet our legal obligations.

Some data is shared between the apps, because the service does not work otherwise:

• The restaurant sees the items ordered and the customer’s first name.
• The delivery partner sees the pickup and delivery addresses and a contact number for the drop-off.
• The customer and the restaurant see the delivery partner’s first name, photo, vehicle and live position while a delivery is in progress.

We also use service providers who process data on our behalf, under contract and on our instructions: our hosting and database providers, PayPal for payments, Google and Apple for maps and for delivering push notifications, and Expo for app updates and push delivery. We do not sell your personal data.

Verification documents may be shared with identity-checking providers and, where we are required to, with regulators or law enforcement.

Keeping your data, and deleting it

We keep your account and order records for as long as your account is open, and afterwards for as long as we need them for tax, accounting and dispute-resolution purposes. Delivery location trails are kept at full detail for 90 days and thinned to one point per minute after that, as described above. Verification documents are kept while you are an active partner and for the period our legal obligations require afterwards.

You can delete your account from inside every app, under Profile. You can also start a deletion without installing anything, at the customer form, the restaurant form or the delivery partner form.

Deleting your account removes your profile, your addresses, your documents and your saved payout details. We keep the minimum record of completed transactions that tax and accounting law requires us to keep, which we cannot delete on request.

Your rights and how to contact us

You have the right to ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on your consent — as we do for background location, and for your blood group — you can withdraw it at any time without affecting what we did before you withdrew it. These rights, and how to exercise them, are set out in full in our general privacy policy.

To exercise any of them, or to ask us anything about this notice, email support@space-iz.com. If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk, though we would rather you came to us first so we can put it right.