Effective: 21 Oct 2019
Previous version is located here.
Practi Technologies Ltd, UK Private limited Company, Company number 09829987, Registered office address: Fleet Place House, 2 Fleet Place, London EC4M 7RF, England (“Practi Technologies Ltd”, "us", "we", or "our") operates this website https://practi.co.uk and its subdomains and the PRACTI POS mobile application (the "Service") and is the controller of your personal data.
At Practi we are committed to protecting the personal information of all visitors who access our websites or services through any mobile application, platform or device (collectively, the “Services”).
Information we collect from you and why
1. The personal information that we may collect about you broadly falls into the following categories:
a. Information that you provide voluntarily
Certain parts of our Services may ask you to provide personal information voluntarily, such as:
Registration information: When you join Practi and create an account to use the Services, we collect information that can be used to contact or identify you including, but not limited to, your email address, name, phone number and postal address. The registration information you provide also allows us to authenticate your access to the Services. We also use registration information in our legitimate business interests to contact you for your views on our Services and to notify you of any important changes or updates to our Services.
Financial information: We collect financial information such as your bank account number, sort code and credit/debit card details to enable us to take payment of Fees in accordance with our Service Agreement. Payment information, such as credit card numbers, are securely processed by our third party payment processors. Note that we never store your credit card information in our systems.
Transaction information: We may also collect transaction information such as orders for good/services placed by customers of the Restaurant. We use this information in our legitimate business interests to provide you with the Services, including White Label Services.
Feedback: When you contact us, for example with a question, problem or comment, we may collect information about you including your name and the content of your query. If you contact our customer services centre we may record and keep a record of your conversation for quality and training purposes and to aid in the resolution of your queries. We will also collect your personal information if you complete the surveys we may run to improve the Services that we deliver to you.
b. Information that we collect automatically
When you access our Services, we may collect certain information automatically from your device. In some countries, including countries in Europe, this information may be considered personal information under applicable data protection laws. For instance:
Activity information: We collect information about your use of the Services when you interact with the Website, especially when you browse any page of the Website, you receive emails or calls from us, and when you use a third party service linked to Practi (such as Xero). The information we may collect include data on how you use the Website such as your URL clickstreams (the path you take through the Website), goods/services viewed, page response times, download errors, how long you stay on webpages, what you do on those pages, how often you visit the Website, and other actions that you may take. We use the information to provide, maintain and improve the Services, and provide customer support in relation to the Services.
Log data: We may also collect information that your browser sends whenever you visit our Service or when you access the Service by or through a mobile device ("Log Data"). This Log Data may include information such as your computer's Internet Protocol ("IP") address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages and other statistics. When you access the Service by or through a mobile device, this Log Data may include information such as the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile internet browser you use and other statistics.
Location information: We may use and store information about your location, if you give us permission to do so. We use this information to provide features of our Service, to improve and customize our Service. You can enable or disable location services when you use our Service at any time, through your mobile device settings.
c. Information that we obtain from third party sources.
From time to time, we may receive personal information about you from a third party or public sources, but only where we have checked that these third parties either have your consent to process the information, or are otherwise legally permitted, or are required to share your personal information with us. For instance, we may use third party services such as Google Analytics that collect, monitor and analyze this type of information in order to increase our Service's functionality. These third party service providers have their own privacy policies addressing how they use such information.
2. Who we share personal information with
In delivering our Services to you, depending on the circumstances, we may share your personal information with the following:
third party service providers who undertake various activities to promote and support our Services (these third parties may be located outside of the country where your Restaurant is based);
any law enforcement or regulatory body, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;
3. Legal basis for processing personal information
Our legal basis for collecting and using your personal information as described above will depend on the specific context in which we collect it. We will always make sure that we have a legal basis to collect and use your personal information, and that legal basis may change depending on the type of personal information and the context in which we collect it. Generally, we rely on the following two legal bases for collecting and using your personal information:
Contract: our main reason for collecting and using your personal information is so we can perform the obligations set out in our Service Agreement with you (i.e. to ensure you have full access to our Services), and to enable you to effectively deliver orders to your customers. If we ask you to provide personal information to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (and we’ll also explain the possible consequences of you not providing it).
Legitimate interests (as long as those interests are not outweighed by your rights and interests): We rely on legitimate interests when gaining insights from your behaviour on the Website; delivering, developing and improving the Website; enabling Practi to enhance, customise or modify the Website and Services; determining whether marketing campaigns are effective; and enhancing data security. We also rely on legitimate interests when we correspond with you about the Practi service (including offering support for the service).
If you have questions about, or need further information concerning, the legal basis on which we collect and use your personal information, please contact us using the contact details provided below.
4. International data transfers
We may transfer your personal information to countries other than the country in which you are resident (to where other Just Eat group companies or our service providers have operations). Practi implements appropriate safeguards to protect your personal information when transferring data outside of the EEA. Some of the safeguards Practi rely on include, where appropriate, using the European Commission’s approved standard contractual clauses with sub-processors, intra-group transfer agreements (so that we can safely transfer personal information between the Just Eat group of companies) and contracting with Privacy Shield certified companies in the United States, where this is appropriate.
The security of your personal information is important to us, but no method of transmission over the internet, or method of electronic storage is 100% secure. Practi places great importance on protecting your information from and against unauthorised access and against unlawful processing, accidental loss, destruction and damage. We implement appropriate technical and organisational measures to safeguard such information.
For example, connections to the Service are encrypted using 256-bit SSL with integrity assured by the SHA2 RSA algorithm. We use servers that comply with strict international data security standards, including ISO 27001. You are responsible for your login information and password and must keep them confidential.
6. Data retention
We will destroy or permanently anonymise your personal information at the point that we no longer need to process it for our ongoing legitimate business needs or for any legal reason. If this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store it and isolate it from any further processing until deletion is possible.
7. Your data protection rights
Practi respects your privacy and data protection rights. Below is a summary of your rights in respect of the personal information of yours which Practi handles:
Practi provides you with the tools to access, review or update your personal information at any time through your account. If you wish to request deletion of your personal information, you can do so by contacting us using the contact details provided below.
You can object to processing of your personal information, ask us to restrict processing of your personal information or request that it be ported to a third party. Again, you can exercise these rights by contacting us using the contact details provided below.
We may use your personal information to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send or by contacting us.
Similarly, if we collect and process your personal information on the basis of your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
You have the right to complain to a data protection supervisory authority about our collection and use of your personal information.
We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.
8. Links to third-party sites
9. Children’s privacy
Our Service does not address anyone under the age of 16. We do not knowingly collect personally identifiable information from children under 16. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a children under age 16 without verification of parental consent, we take steps to remove that information from our servers.
We encourage you to periodically review this page for the latest information on our privacy practices.
11. How to contact us
Practi Technologies Ltd, UK Private limited Company, Company number 09829987
Registered office address: Fleet Place House, 2 Fleet Place, London EC4M 7RF, England
Talk to us on 020 3608 4840
The controller of your personal information is Practi Technologies Ltd.