Privacy Policy

This privacy statement (“Statement’’) explains how Eat Halal Limited (“we” “us” or “our”) collect, use, disclose, and otherwise process personal data and  applies to the processing of personal data of customers who make use of one of our platforms and products, including order website, app, platform and products, products and services for business (collectively, the “Services”) to place orders with a restaurant partner (“Partner”) which offers products or services for delivery via our Services.

We may use your personal data to provide delivery services for orders placed on the Partner’s own website, application or ordering platform. In such circumstances, we will process data received from such Partner in accordance with this Statement. 

This Statement applies also to the processing of the personal data of all customers’ assigned employees and users who make use of one of our products and platform.

We are committed to protecting the privacy of everyone in our community. 

What personal data we process and why
Personal data, in this Statement also referred to as “your data”, means any information or set of information from which we are able, directly or indirectly, to personally identify you, in particular by reference to an identifier, e.g. name and surname, email address, phone number, home address, etc. It does not include data where the identity has been removed (anonymous data).

Whenever you interact with us via our Services we collect and process your personal data. We may process your personal data for the following purposes: 

1.    Ordering process

We process the personal data you provide to us when you place your order. This personal data is necessary to execute your order, confirm your order, and to assess your order, payment, and a possible refund. Your information (such as the items you add to your basket) allows us to process your order and send you an accurate bill. It also helps us and any Partner you order with contact to you where necessary.  Some Partners on our platform use our third party delivery companies which may use your information to provide you with status updates on the delivery of your order. Depending on the circumstance, we may rely on your consent or the fact that the processing is necessary to fulfil a contract with you, or to comply with law. We may process the following personal data in the ordering process:

• Name
• Address data
• Contact data
• Order and transaction data
• Payment data

As part of our Services we may sell products that may reveal sensitive personal data, such as health-related information (allergies or dietary requirements), information about your religion (due to you only eat halal food), information about your medical condition (e.g. drugs, medicines, medical devices, medicated creams, food supplements or herbal/homoeopathic products) or about your sexual orientation via our Partners. We will collect and process this data with your consent as part of your order.

We may engage in the sale and delivery of restricted products or Services. To comply with our legal obligations as may be imposed by the applicable laws we may implement verification procedures governing the sale and delivery of these products including your age and identity verification. For this purpose we may ask you to present a valid, government issued identification document and We will not be obliged to perform and complete its Services if you do not cooperate for the required verification procedure.

2. Partner & courier reviews

After your order, you may be asked to provide a review with the Partner or courier and we may offer you the opportunity to submit a review of Partners and/or couriers. Depending on the circumstance, we may rely on your consent or the fact that the processing is necessary to fulfil a contract with you, or to comply with law.

We process the personal data you provide when submitting a review. You can withdraw your consent by contacting us. We may process the following personal data when you post a Partner and/or courier review:

• Name 
• Contact data
• Review

When your review is published, the review, and your first name, may be made available to couriers, Partners and/or the public.

3. Customer Services and Support

When you contact our customer services support, we will use the personal data you provide to answer your question or handle your complaint. We may collect personal data under call recordings to provide customer support, including to investigate and address user concerns and to monitor and improve our customer support responses and processes.

We may also collect your personal data if you submit us a notice in relation to presence of any suspected item in our Services which you may consider as ‘’illegal content’’ as defined in the EU Regulation 2022/2065 of the European Parliament and of the Council (‘’Digital Services Act’’) and also to provide you with an access to internal complaint handling system and/or to take required suspension measures and protection against misuse of our Services as required by the Digital Services Act . 

Depending on the circumstance, we may rely on your consent or the fact that the processing is necessary to fulfil a contract with you, or to comply with law. We may process the following personal data for customer service purposes:

• Name
• Address data (if applicable)
• Contact data
• Order and transaction data
• Payment data (if applicable)
• Comments (if applicable) 
• Content of correspondences between you and customer services department
• Any other content that may be required for compliance with the Digital Services Act

4. Customer Accounts

If you interact with our Services you are given the opportunity to create an account with us either via our platforms or via using third-party social login portals (e.g. Apple, Google, Facebook Connect or other platforms) where privacy statement of the relevant third-party will also be applicable to you in addition to this Statement. Depending on the circumstance, we may rely on your consent or the fact that the processing is necessary to fulfil a contract with you, or to comply with law. You can withdraw your consent and/or delete your account by contacting us. The withdrawal or deletion of your account may have negative consequences on your user experience. We may process the following personal data for customer account purposes:

• Name
• Address data
• Contact data
• Credentials (applicable for Eat Halal for Business)

5. Customer research

To make sure that our Services are aligned with your preferences and to improve our Services and platforms, We may approach you to conduct customer research; such as but not limited to, surveys. We only send you these types of communications with your prior consent unless this is not necessary according to the applicable law. Participation in the customer satisfaction surveys is completely voluntary. If you do not wish to receive these surveys you can unsubscribe from them in the messages itself. We may process the following personal data for research purposes:

• Name
• Contact data
• Order and transaction data
• Research input 

6. Marketing [SD1] 

We also process your personal data to be able to send you (personalised) marketing communications and notifications to administer, support, improve and develop our Services. Such messages may include the latest news, discounts, and updates about new Partners, and other communications that may be subject to direct marketing. We rely on your consent unless your consent is not necessary according to the applicable law. Whenever you want to change your preferences with respect to receiving such communications, you can unsubscribe using the unsubscribe link in the messages, in your account settings or by contacting us. We may process the following personal data for marketing purposes:

• Name
• Address data
• Contact data
• Order and transaction data
• Review(s) (optional)
• Campaign data (optional)
• DeviceID
• Cookie and Technology data

In order to enable us to personalise your user experience with us and optimise our Services offered to you, we may use automated decision making and profiling for marketing purposes. Please refer to ‘’Automated Decision Making and Profiling’’ section below for further information.

There may be cases where We may process your personal data for promoting third-party offers, products and services. The legal basis for this processing of personal data is your consent unless your consent is not necessary according to the applicable law. Whenever you want to change your preferences with respect to receiving such communications, you can unsubscribe using the unsubscription link in the relevant messages or to opt-out of communications by SMS reply with "STOP” in accordance with applicable law. You may also decline marketing messaging sent by push notifications by refusing the relevant permission to our app in your phone or tablet settings, however this will also prevent you from receiving order updates via push.

7. Cookies

We use cookies or similar technologies for functional, analytical, and marketing purposes. Data processed for cookie purposes defer per purpose (functional, analytical or marketing) and depend on the preferences set by you. 

Please refer to our Cookie Statement for further information about our use of cookies and/or similar technologies. You can always change your cookie settings via our preferences centre and/or your settings in the tool you use to browse. Please note that disabling cookies may deny you the ability to use some of the Services and/or features on the website or impair your user experience.

8. Fraud prevention

We also process personal data to prevent fraud and other forms of misuse on and via our Services. Depending on the circumstance, we may rely on your consent or the fact that the processing is necessary to fulfil a contract with you, or to comply with law. We may process following personal data for fraud prevention purposes:

• Name
• Order and transaction data
• Payment data
• Device information
• IP address
• Browser information

9. Analytics

We use your personal data to be able to improve our website and our range of products and Services and to be able meet our reporting obligations towards third parties which may also include advertisers. Depending on the circumstance, we may rely on your consent or the fact that the processing is necessary to fulfil a contract with you, or to comply with law. We will make sure the reports do not contain any personal data so that the information cannot be traced back to you. 

10. Campaigns

We may launch specific campaigns or contests in connection to its Services. Joining our campaigns or contests is always on a voluntary basis. We may rely on your consent unless your consent is not necessary according to the applicable law. You can always withdraw your consent via the contact data provided to you within the campaign or by contacting us.  

We may process the following personal data for campaigning purposes:

• Name
• Contact data
• Order and transaction data (optional)
• Campaign data (optional)

Additional purposes
We will only use your personal data for the purposes described above. If we want to use the data for a different purpose, we will take appropriate measures to inform you, consistent with the significance of the changes we make. Depending on the circumstance, we may rely on your consent or the fact that the processing is necessary to fulfil a contract with you, or to comply with law. 

How we collect your personal data

We acquire, process and retain your personal data, as well as personal data about devices you use to navigate to our platforms (e.g. your computer, mobile or other means), which you provide to us by ordering, creating an account or otherwise by contacting us. 

We process personal data that you provide voluntarily, that we collect automatically and that we obtain from third party sources for the purposes outlined in this statement. 

• Personal data that you provide voluntarily: We may receive personal data provided from you when you place your order, create an account with us or provide for your marketing preferences or customer reviews in connection to our Services.
• Personal data that we collect automatically: With your prior consent or when permitted by applicable law, when you browse our platforms, we may automatically collect technical data about your equipment, browsing activities and patterns. We use this personal data by using cookies, server logs and other similar technologies. These self-learning algorithms generate content that they use to personalise your user experience, selecting in particular those items that you are interested in, as well as to support the overall optimisation of our Services. For our cookie policy, please refer above (Cookies) for more information.

We may allow you to use social media sites to create your account or link your account to the relevant social media site. These social media sites may provide us with automatic access to certain personal data they hold about you (e.g. content viewed by you, content liked by you, and information regarding the advertisements you have been shown or may have clicked on). Where we receive such information, we may use this information to further personalise your experience with us in line with your marketing preferences.

• Personal Data that we obtain from third-party sources: We may receive personal data from third party sources, including advertising networks and social media platforms such as Facebook or technical payment and delivery services providers which may be located outside EU for purposes such as to support procurement of our Services, to measure the performance of marketing campaigns for our Services; and better understand your preferences so that we can customise our marketing campaigns and Services accordingly. Where we may receive such personal data, we have checked that these third parties either have your consent to process the information or are otherwise legally permitted or required to share your personal data with us.

Age

Our Services are not intended for persons defined as underage by applicable local laws, nor do we intend to collect personal data of visitors who are under the defined legal age. However, we are unable to verify visitors’ ages. We therefore advise parents and/or legal guardians to monitor their children's online activities, to prevent their personal data being collected without parental consent. If you feel that we have collected personal data of a minor without consent, please contact us. We will then proceed to erase this data.

Automated decision-making and profiling
Automated decision-making takes place when an electronic system uses personal information to make a decision without human intervention. In the performance of the contract with you, and/or to the extent necessary to fulfil our obligations or where necessary to improve our platforms and Services for our legitimate interest, we use automated decision making and profiling. For example, we use your address data and/or location data to select available Partners in your local area. We also use automated decision-making in complying with our legal obligations to prevent money laundering, terrorism financing, and other criminal offences.

You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis for doing so and we have notified you. If you want to object to this type of processing, you can contact us. We will then proceed to reassess the situation and/or provide you with more information about why and how such automated decision was made.

How long we keep your data

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, tax, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances we may anonymise your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you. 

Sharing your personal data with Partners
If you order through our Services, we may share your personal information (order, name, address, or contact data) with the Partner you selected so that the Partner can deliver your order and where necessary services, for instance to resolve your complaint. Partners may process your personal data to contact you if it is necessary to fulfil the contract with you.

You are a direct customer of the Partner, and therefore the Partner bears its own responsibility and obligations for the processing of your personal data. For questions about how the Partner handles your data, we suggest you contact the Partner directly.

Sharing your personal data with others

We may work with other third parties in order to carry out the processing described in this Statement and/or to comply with legal obligations. 

These third parties will process your personal data on behalf of us as data processors or as autonomous data controllers (or in a position as so defined or referred under applicable data protection law including concepts as the equivalent of controller or processor), and have access to your personal data for the purposes described in this Statement. We require third parties to protect your personal data in accordance with the standards set out in this Statement and we take appropriate measures pursuant to the applicable data protection law to guarantee the same level of protection and confidentiality.  

We may also share your data with other third parties where appropriate or required by applicable law or regulation (including a court order or legal authority request) or where we believe disclosure is necessary to comply with legal obligations, to exercise, establish or defend legal rights or to protect the vital interests of any person. Such third party controllers may include law enforcement agencies. 

We may also disclose your personal data to any company or prospective buyer of all or substantially all of our assets in connection with any sale or transfer of those assets.

Your personal data may be shared with the following parties:

• Our affiliates
• Software providers such as providers for software, hosting, application support, delivery, logistics, information security, etc
• Third parties who undertake various activities to promote, market or support our Services. This includes social media platforms like Facebook, offshore customer support agents, marketing service providers, Ulearn Pvt Limited who manage our marketing emails and push notifications, partners who send you text messages when your order is on its way, delivery companies who deliver your order to you.
• Implementation partners
• Customer satisfaction survey firms and/or market research companies
• Loyalty shop partners 
• Professional consultants
• Law enforcement, governmental or regulatory authorities (including insurance companies, visa and tax authorities) 
• Prospective buyers
• Any other third party provided that you have given your consent to the disclosure

Third-party websites
Our website may include links to third-party websites. When accessing such third-party websites, please note that each of these websites has its own privacy statement. Although we take great care in selecting websites to link to, we cannot take responsibility for the way in which they handle your personal data.

Personal data rights, questions or complaints
We inform you that, with regard to the personal data, you can exercise the rights provided for by applicable data protection laws, which may include: the right to request access to, rectification of, or erasure of personal data or restriction of processing, and to object to processing, the right to data portability, to withdraw your consent at any time (without prejudice to the lawfulness of the processing based on the consent given prior to the withdrawal) as well as to lodge a complaint with a supervisory authority directly.

To exercise your rights please contact us.

We will do our best to address your request in time and free of charge, except where it would require an excessive and disproportionate effort. In certain cases, we may ask you to verify your identity before we can act on your request.

If you have any other questions or complaints about the processing of your personal data, we will be happy to contact you. We would also like to hear from you if you have tips or suggestions on how to improve our Statement.

Security
We take personal data protection very seriously and we therefore take appropriate measures to protect your personal data against misuse, loss, unauthorised access, unwanted disclosure, and unauthorised alteration. If you feel that your personal data are not adequately protected or there are indications of misuse, please contact us.

How to contact us
The data controller of your personal data is Eat Halal Limited.

If you need to contact us to make requests or if you have any questions and concerns about this Statement and/or our privacy practices and processing activities, please contact us at admin@eathalalonly.com.      

Updates to this privacy Statement
We may update this Statement from time to time in response to changing legal, technical or business developments. When we update our privacy Statement, we will take appropriate measures to inform you, consistent with the significance of the changes we make. Where required by applicable data protection law, we will obtain your consent to any material changes to this Statement.

For clarification, it should be noted that the use of the term “Partner” or any similar expression in this Statement does not imply or establish a partnership, employer-employee, or agency relationship of any kind between the mentioned party and us.

We encourage you to periodically review this Statement for the latest information on our  privacy practices. 

This Statement may be updated.