When you use Ruddy, you trust us with your personal data. We’re committed to keeping that trust. That starts with helping you understand our privacy practices.
This notice describes the personal data we collect, how it’s used and shared, and your choices regarding this data. We recommend that you read this, which highlights key points about our privacy practices.
Last modified: August 25, 2020
This notice applies to users of Ruddy’s services anywhere in the world, including users of Ruddy’s apps, websites, features, or other services.
This notice describes how Ruddy and its affiliates collect and use personal data. This notice applies to all users of our apps, websites, features, or other services anywhere in the world. This notice specifically applies to:
This notice also governs Ruddy’s other collections of personal data in connection with Ruddy’s services. For example, we may collect the contact information of individuals who use accounts owned by Ruddy for Business customers or of owners or employees of Ruddy’s restaurant partners, or we may collect other personal data in connection with our mapping technology and features.
All those subject to this notice are referred to as “users” in this notice.
Our data practices are subject to applicable laws in the places in which we operate. This means that we engage in the practices described in this notice in a particular country or region only if permitted under the laws of those places. Please contact us here or through the addresses below with any questions regarding our practices in a particular country or region.
B. Data controller and transfer
Ruddy and Ruddy OÜ are the data controllers for the personal data collected in connection with use of Ruddy’s services in the European Economic Area and the United Kingdom.
Ruddy is the data controller for the personal data collected in connection with use of Ruddy’s services anywhere else.
Ruddy (Vredelaan 3, 1081 Koekelberg, Belgium) and Ruddy OÜ (Harju maakond, Tallinn, Kesklinna linnaosa, Tartu mnt 67/1-13b, 10115, Estonia) are the data controllers for the personal data collected in connection with use of Ruddy’s services in the European Economic Area and the United Kingdom.
Ruddy is the data controller for the personal data collected in connection with use of Ruddy’s services anywhere else. We process personal data inside and outside of the United States. The personal data of users outside the United States is transferred on the basis of mechanisms approved under applicable laws, such as the Standard Contractual Clauses.
Questions, comments, and complaints about Ruddy’s data practices can be submitted here.
A. The data we collect
The following data is collected by or on behalf of Ruddy:
1. Data provided by users. This includes:
2. Data created during use of our services. This includes:
3. Data from other sources. This includes:
Ruddy may combine the data collected from these sources with other data in its possession.
B. How we use personal data
Ruddy collects and uses data to enable reliable and convenient services. We also use the data we collect:
Ruddy does not sell or share user personal data with third parties for their direct marketing, except with users’ consent.
Ruddy uses the data it collects for purposes including:
1. Providing services and features. Ruddy uses the data we collect to provide, personalize, maintain, and improve our products and services.
This includes using the data to:
2. Safety and security. We use personal data to help maintain the safety, security, and integrity of our services and users.
3. Customer support. Ruddy uses the information we collect (including recordings of customer support calls with notice to and the consent of the user) to provide customer support, including to:
4. Research and development. We may use the data we collect for testing, research, analysis, product development, and machine learning to improve the user experience. This helps us to improve and enhance the safety and security of our services, improve our ability to prevent the use of our services for illegal or improper purposes, develop new features and products, and facilitate insurance and finance solutions in connection with our services.
5. Enabling communications between users. For example, a user may message or call a restaurant to confirm a pickup location or a restaurant may call a delivery recipient with information about their order.
6. Marketing. Ruddy may use the data we collect to market our services to our users. This includes sending users communications about Ruddy services, features, promotions, sweepstakes, studies, surveys, news, updates, and events.
We may also send communications to our users about products and services offered by Ruddy partners. For example, if a user has placed a food order, we may provide recommendations, promotions, or ads about similar food offered by other Ruddy partners. Although we may send users communications about Ruddy partners’ products and services, we do not sell users’ personal data to, or share it with, such partners or others for purposes of their own direct marketing or advertising, except with users’ consent.
We may use the data we collect to personalize the marketing communications (including advertisements) that we send, including based on user location, past use of Ruddy’s services, and user preferences and settings.
We may also send users communications regarding elections, ballots, referenda, and other political and notice processes that relate to our services. For example, Ruddy has notified some users by email of new governmental directive or policies that concerns Ruddy’s products and services.
7. Non-marketing communications. Ruddy may use the data we collect to generate and provide users with receipts; inform them of changes to our terms, services, or policies; or send other communications that aren’t for the purpose of marketing the services or products of Ruddy or its partners.
8. Legal proceedings and requirements. We may use the personal data we collect to investigate or address claims or disputes relating to use of Ruddy’s services, or as otherwise allowed by applicable law, or as requested by regulators, government entities, and official inquiries.
C. Cookies and third-party technologies
D. Data sharing and disclosure
Some of Ruddy’s products, services, and features require that we share data with other users or at a user’s request. We may also share data with our affiliates, subsidiaries, and partners, for legal reasons or in connection with claims or disputes.
E. Data retention and deletion
Ruddy retains user profile, transaction, and other personal data for as long as a user maintains their Ruddy account.
Ruddy may retain certain user data after receiving an account deletion request if necessary, such as to comply with legal requirements.
Ruddy retains user profile, transaction, and other information for as long as a user maintains their Ruddy account.
Order recipients may request deletion of their account at any time through the app or through a request by email. Following such requests, Ruddy deletes the data that it is not required to retain for purposes of regulatory, tax, insurance, litigation, or other legal requirements. For example, Ruddy retains location, device, and usage data for these purposes for a minimum of 7 years; while it retains such data, it may also use it for purposes of safety, security, fraud prevention and detection, and research and development. In certain circumstances, Ruddy may be unable to delete a user’s account, such as if there’s an outstanding credit on the account or an unresolved claim or dispute. Upon resolution of the issue preventing deletion, Ruddy will delete the account as described above.
Ruddy may also retain certain information if necessary for purposes of safety, security, and fraud prevention. For example, if Ruddy deactivates a user’s account because of unsafe behavior or security incidents, Ruddy may retain certain information about that account to prevent that user from opening a new Ruddy account in the future.
F. Grounds for processing
We only collect and use personal data where we have lawful grounds to do so. These include processing user personal data to provide requested services and features, for purposes of Ruddy’s legitimate interests or those of other parties, to fulfil our legal obligations, or based on consent.
We collect and use personal data only where we have one or more lawful grounds for doing so. Such grounds may vary depending on where our users are located, but generally include processing personal data:
a. To provide requested services and features
In order to provide our services, we must collect and use certain personal data. This includes:
b. For purposes of the legitimate interests of Ruddy or other parties
This includes using personal data to maintain and enhance our users’ safety and security. For example, we use personal data to prevent use of our services by users who have engaged in inappropriate or dangerous behavior, such as by retaining data of banned users to prevent their use of Ruddy’s apps.
This also includes purposes such as combating fraud; improving our services, direct marketing, research, and development; and enforcing Ruddy’s Terms of Service.
In addition, it includes using personal data to the extent necessary for the interests of other people or the general public, such as in connection with legal or insurance claims, and to protect the rights and safety of others.
c. To fulfil Ruddy’s legal obligations
For example, Ruddy is subject to laws and regulations in many cities and countries that require it to collect and retain data about our users’ and to provide copies of such data to the government or other authorities. We collect and use personal data to comply with such laws.
Ruddy may also share data with law enforcement regarding criminal acts or threats to public safety, or requests by third parties pursuant to legal processes. For more information please get in touch with us by email.
d. With consent, Ruddy may collect and use personal data based on the user’s consent. For example, we may collect personal data through voluntary surveys. Responses to such surveys are collected on the basis of consent and will be deleted once no longer necessary for the purposes collected.
A user who has provided consent to a collection or use of their personal data can revoke it at any time. However, the user will not be able to use any service or feature that requires collection or use of that personal data.
Ruddy enables users to access and control the data that Ruddy collects, including through:
Ruddy also enables users to request access to or copies of their data, changes or updates to their accounts, deletion of their accounts, or that Ruddy restrict its processing of user personal data.
A. Privacy settings
Settings menus in the Ruddy app for users give them the ability to set or update their location-sharing preferences and their preferences for receiving mobile notifications from Ruddy. For more information about these settings, how to set or change these settings, and the effect of turning off these settings please contact us by email.
Ruddy uses device location services to make it easier to get to restaurants and order dishes. Location data helps improve our services, including pickups, navigation, and customer support.
Users may enable or disallow Ruddy to collect location data from their mobile devices.
Users who have enabled Ruddy to collect location data from their mobile device may also enable Ruddy to share their location with restaurants in order to facilitate pickup and orders.
Users may enable or disable this feature on their device.
Ruddy provides users with order status notifications and updates related to activity on their account. These notifications are a necessary part of using the Ruddy app and cannot be disabled. However, users may choose the method by which they receive these notifications through the settings on their device.
Users may enable Ruddy to send push notifications about discounts and news from Ruddy. Push notifications may be enabled or disabled through the settings of their device.
Order recipients who have opted in to communications from restaurant partners may stop sharing their data with each restaurant partner in their Ruddy account settings.
B. Device permissions
Most mobile device platforms (iOS, Android, etc.) have defined certain types of device data that apps cannot access without the device owner’s permission, and these platforms have different methods for how that permission can be obtained. iOS devices notify users the first time the Ruddy app requests permission to access certain types of data and gives users the option to grant or refuse permission. Android devices notify users of the permissions that the Ruddy app seeks before their first use of the app, and use of the app constitutes a grant of such permission.
C. Ratings look-up
After every order users and restaurant partners are able to rate each other on a scale from 1 to 5. An average of those ratings is associated with a user’s account and is displayed to other users for whom they provide or receive services.
This 2-way system holds everyone accountable for their behavior. Accountability helps create a respectful, safe environment for users and restaurant partners.
D. Marketing opt-outs
Users may opt out of receiving promotional emails from Ruddy by contacting us by email. Users may also opt out of receiving emails and other messages from Ruddy by following the unsubscribe instructions in those messages. We may still send users who have opted out non-promotional communications, such as receipts for orders or information about their account.
E. User data requests
Ruddy provides users with a variety of ways to learn about, control, and submit questions and comments about Ruddy’s handling of their data. To make a request, please contact us by email.
In addition, depending on their location, users may have the right to file a complaint relating to Ruddy’s handling of their personal data with the data protection authority in their country. For example, users in the European Union and South America may submit such requests to the data protection authorities in the country in which they live.