Privacy Policy

Effective: 21 Oct 2019

Previous version is located here.
Practi Technologies Ltd, UK Private limited Company, Company number 09829987, Registered office address: Fleet Place House, 2 Fleet Place, London EC4M 7RF, England (“Practi Technologies Ltd”, "us", "we", or "our") operates this website https://practi.co.uk and its subdomains and the PRACTI POS mobile application (the "Service") and is the controller of your personal data.

Introduction
At Practi we are committed to protecting the personal information of all visitors who access our websites or services through any mobile application, platform or device (collectively, the “Services”).

This privacy policy (“Privacy Policy”) explains how Practi and our affiliates collect, share and use your personal information. You will also find information about how you can exercise your privacy rights. By using our Services you agree to Practi using your personal information as described in this Privacy Policy. The terms “we”, “us” or “our” are each intended as reference to Practi Technologies Ltd, UK Private limited Company, Company number 09829987, registered office address: Fleet Place House, 2 Fleet Place, London EC4M 7RF, England (“Practi”, "us", "we", or "our") and any terms not defined in this Privacy Policy are defined in our Services Agreement with you.

You can rest assured that Practi is committed to treating your personal information responsibly, securely and transparently but if you have any questions, please contact us using the contact details provided at the bottom of this Privacy Policy.

Information we collect from you and why
1. The personal information that we may collect about you broadly falls into the following categories:

a. Information that you provide voluntarily
Certain parts of our Services may ask you to provide personal information voluntarily, such as:

Registration information: When you join Practi and create an account to use the Services, we collect information that can be used to contact or identify you including, but not limited to, your email address, name, phone number and postal address. The registration information you provide also allows us to authenticate your access to the Services. We also use registration information in our legitimate business interests to contact you for your views on our Services and to notify you of any important changes or updates to our Services.

Financial information: We collect financial information such as your bank account number, sort code and credit/debit card details to enable us to take payment of Fees in accordance with our Service Agreement. Payment information, such as credit card numbers, are securely processed by our third party payment processors. Note that we never store your credit card information in our systems.

Transaction information: We may also collect transaction information such as orders for good/services placed by customers of the Restaurant. We use this information in our legitimate business interests to provide you with the Services, including White Label Services.

Feedback: When you contact us, for example with a question, problem or comment, we may collect information about you including your name and the content of your query. If you contact our customer services centre we may record and keep a record of your conversation for quality and training purposes and to aid in the resolution of your queries. We will also collect your personal information if you complete the surveys we may run to improve the Services that we deliver to you.

b. Information that we collect automatically
When you access our Services, we may collect certain information automatically from your device. In some countries, including countries in Europe, this information may be considered personal information under applicable data protection laws. For instance:

Activity information: We collect information about your use of the Services when you interact with the Website, especially when you browse any page of the Website, you receive emails or calls from us, and when you use a third party service linked to Practi (such as Xero). The information we may collect include data on how you use the Website such as your URL clickstreams (the path you take through the Website), goods/services viewed, page response times, download errors, how long you stay on webpages, what you do on those pages, how often you visit the Website, and other actions that you may take. We use the information to provide, maintain and improve the Services, and provide customer support in relation to the Services.

Log data: We may also collect information that your browser sends whenever you visit our Service or when you access the Service by or through a mobile device ("Log Data"). This Log Data may include information such as your computer's Internet Protocol ("IP") address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages and other statistics. When you access the Service by or through a mobile device, this Log Data may include information such as the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile internet browser you use and other statistics.

Location information: We may use and store information about your location, if you give us permission to do so. We use this information to provide features of our Service, to improve and customize our Service. You can enable or disable location services when you use our Service at any time, through your mobile device settings.

Cookies and similar technologies: Cookies are files with small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer's hard drive. We use cookies and similar tracking technology to collect and use personal information about you (e.g. your Internet Protocol (IP) address, your device ID, your browser type and when, how often and how long you interact with the Services). You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some parts of our Service. Practi uses remarketing services to advertise on third party websites to you after you visited our Service. We, and our third party vendors, use cookies to inform, optimize and serve ads based on your past visits to our Service.

c. Information that we obtain from third party sources.

From time to time, we may receive personal information about you from a third party or public sources, but only where we have checked that these third parties either have your consent to process the information, or are otherwise legally permitted, or are required to share your personal information with us. For instance, we may use third party services such as Google Analytics that collect, monitor and analyze this type of information in order to increase our Service's functionality. These third party service providers have their own privacy policies addressing how they use such information.

2. Who we share personal information with
In delivering our Services to you, depending on the circumstances, we may share your personal information with the following:

as Practi is a member within the Just Eat group of companies, we may share personal information with any other member of the same group (which includes our ultimate holding company and its subsidiaries and affiliates either now or at any time in the future) for the purposes set out in this Privacy Policy; however as far as competitively sensitive data from a competition law perspective is concerned (e.g. the information that an order was placed through a certain competitor of the Just Eat group of companies) Practi will not share this information with the Just Eat group of companies.


third party service providers who undertake various activities to promote and support our Services (these third parties may be located outside of the country where your Restaurant is based);

any law enforcement or regulatory body, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;


if any part of our business enters into a joint venture, purchases another business or is sold to or merged with another business entity, your information may be disclosed or transferred to the target company, or new business partners or owners or their agents and advisors. In these circumstances we will always inform the relevant entities that they must only use your personal information for the purposes disclosed in this Privacy Policy; and any other person provided that you have given your consent to the disclosure. We will not sell, distribute or lease your personal information unless we have your permission or are required by law to do so.

3. Legal basis for processing personal information
Our legal basis for collecting and using your personal information as described above will depend on the specific context in which we collect it. We will always make sure that we have a legal basis to collect and use your personal information, and that legal basis may change depending on the type of personal information and the context in which we collect it. Generally, we rely on the following two legal bases for collecting and using your personal information:

Contract: our main reason for collecting and using your personal information is so we can perform the obligations set out in our Service Agreement with you (i.e. to ensure you have full access to our Services), and to enable you to effectively deliver orders to your customers. If we ask you to provide personal information to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (and we’ll also explain the possible consequences of you not providing it).

Legitimate interests (as long as those interests are not outweighed by your rights and interests): We rely on legitimate interests when gaining insights from your behaviour on the Website; delivering, developing and improving the Website; enabling Practi to enhance, customise or modify the Website and Services; determining whether marketing campaigns are effective; and enhancing data security. We also rely on legitimate interests when we correspond with you about the Practi service (including offering support for the service).

If you have questions about, or need further information concerning, the legal basis on which we collect and use your personal information, please contact us using the contact details provided below.

4. International data transfers
We may transfer your personal information to countries other than the country in which you are resident (to where other Just Eat group companies or our service providers have operations). Practi implements appropriate safeguards to protect your personal information when transferring data outside of the EEA. Some of the safeguards Practi rely on include, where appropriate, using the European Commission’s approved standard contractual clauses with sub-processors, intra-group transfer agreements (so that we can safely transfer personal information between the Just Eat group of companies) and contracting with Privacy Shield certified companies in the United States, where this is appropriate.

5. Security
The security of your personal information is important to us, but no method of transmission over the internet, or method of electronic storage is 100% secure. Practi places great importance on protecting your information from and against unauthorised access and against unlawful processing, accidental loss, destruction and damage. We implement appropriate technical and organisational measures to safeguard such information.
For example, connections to the Service are encrypted using 256-bit SSL with integrity assured by the SHA2 RSA algorithm. We use servers that comply with strict international data security standards, including ISO 27001. You are responsible for your login information and password and must keep them confidential.

6. Data retention
Practi will store your personal information for no longer than is necessary to fulfil the purposes described in this Privacy Policy (and the retention period depends on the type of personal information Practi collects, regulatory requirements, and how Practi use the personal information). The retention period of Practi is based on criteria that include legally mandated retention periods, pending or potential litigation, intellectual property or ownership rights, contract requirements, operational directives or needs, and historical archiving.

We will destroy or permanently anonymise your personal information at the point that we no longer need to process it for our ongoing legitimate business needs or for any legal reason. If this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store it and isolate it from any further processing until deletion is possible.

7. Your data protection rights
Practi respects your privacy and data protection rights. Below is a summary of your rights in respect of the personal information of yours which Practi handles:
Practi provides you with the tools to access, review or update your personal information at any time through your account. If you wish to request deletion of your personal information, you can do so by contacting us using the contact details provided below.

You can object to processing of your personal information, ask us to restrict processing of your personal information or request that it be ported to a third party. Again, you can exercise these rights by contacting us using the contact details provided below.

We may use your personal information to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send or by contacting us.

Similarly, if we collect and process your personal information on the basis of your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.

You may turn off cookies in your browser via settings. You can block cookies on your browser refusing cookies. You may delete cookies. If you turn off cookies, you can continue to use the website and browse its pages, but the website and certain services will not work properly. For more information about how we use cookies, please see Practi’s Cookie Notice.

You have the right to complain to a data protection supervisory authority about our collection and use of your personal information.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

8. Links to third-party sites
Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over, and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

9. Children’s privacy
Our Service does not address anyone under the age of 16. We do not knowingly collect personally identifiable information from children under 16. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a children under age 16 without verification of parental consent, we take steps to remove that information from our servers.

10. Updates to this Privacy Policy
We may update this Privacy Policy from time to time in response to changing legal, technical or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Policy changes if and where this is required by applicable data protection laws.

We encourage you to periodically review this page for the latest information on our privacy practices.

11. How to contact us
If you have any questions about this Privacy Policy, please contact us or our Data Protection Officer at:

Practi Technologies Ltd, UK Private limited Company, Company number 09829987
Registered office address: Fleet Place House, 2 Fleet Place, London EC4M 7RF, England

Talk to us on 020 3608 4840
Email: support@practi.co.uk

The controller of your personal information is Practi Technologies Ltd.