Privacy policy

Privacy Statement for Customers

This privacy statement (“Statement’’) explains how JNN Global Ltd and its subsidiaries and affiliates (“Yummi Eat ”, “we”, “us” or “our”) collect, use, disclose, and otherwise process personal data and apply to the processing of personal data of customers who make use of one of our platforms and products, including order website, app, platform and products, Yummi Eat’s platform, products and services for business (“Yummi Eat for Business’’) (collectively, the “Services”) to place orders with a restaurant partner, grocery store, convenience store or another business partner (“Partner(s)”) which offers products or services for delivery via our Services.

We may use your data to provide delivery services for orders placed on the Partner’s website, application, or ordering platform. In such circumstances, we will process data received from such Partner(s) by this Statement. 

This Statement applies also to the processing of the personal data of all customers’ assigned employees and users who make use of one of our Yummi Eat for Business products and platforms.

At Yummi Eat we are committed to protecting the privacy of everyone in our community. 

What personal data do we process and why
Personal data, in this Statement, also referred to as “your data”, means any information or set of information from which we are able, directly or indirectly, to personally identify you, in particular by reference to an identifier, e.g. name and surname, email address, phone number, etc. It does not include data where the identity has been removed (anonymous data).

Whenever you interact with Yummi Eat via our Services we collect and process your data. Yummi Eat may process your data for the following purposes: 

1.    Ordering process

We process the personal data you provide to us when you place your order. This personal data is necessary to execute your order, confirm your order, and assess your order, payment, and refund. Your information (such as the items you add to your basket) allows us to process your order and send you an accurate bill. It also helps us and any Partner you order with contact you where necessary. Some Partners on our platform use our third-party delivery companies which may use your information to provide you with status updates on the delivery of your order. Depending on the circumstance, we may rely on your consent or the fact that the processing is necessary to fulfill a contract with you, or to comply with the law. We may process the following personal data in the ordering process:

  • Name
  • Address data
  • Contact data
  • Order and transaction data
  • Payment data

As part of our Services, we may sell products that may reveal sensitive personal data, such as health-related information (allergies or dietary requirements), information about your religion (such as if you only eat halal food), information about your medical condition (e.g. drugs, medicines, medical devices, medicated creams, food supplements or herbal/homeopathic products) or your sexual orientation via our Partners. We will collect and process this data with your consent as part of your order.

We may engage in the sale and delivery of restricted products or Services. To comply with our legal obligations as may be imposed by the applicable laws we may implement verification procedures governing the sale and delivery of these products including your age and identity verification. For this purpose, we may ask you to present a valid, government-issued identification document, and Yummi Eat will not be obliged to perform and complete its Services if you do not cooperate with the required verification procedure.

2. Partner & courier reviews

After your order, you may be asked to provide a review with the Partner or courier, and we may offer you the opportunity to submit a review of Partners and/or couriers. Depending on the circumstance, we may rely on your consent or the fact that the processing is necessary to fulfill a contract with you, or to comply with the law.

Yummi Eat processes the personal data you provide when submitting a review. You can withdraw your consent by contacting us. We may process the following personal data when you post a Partner and/or courier review:

  • Name 
  • Contact data
  • Review

When your review is published, the review, and your first name, may be made available to couriers, Partners, and/or the public.

3. Customer Services and Support

When you contact our customer services support, we will use the personal data you provide to answer your question or manage your complaint. We may collect personal data under call recordings to provide customer support, including investigating and addressing user concerns and monitoring and improving our customer support responses and processes.

We may also collect your data if you submit us a notice about the presence of any suspected item in our Services which you may consider as ‘’illegal content’’ as defined in the EU Regulation 2022/2065 of the European Parliament and of the Council (‘’Digital Services Act’’) and also to provide you with an access to internal complaint handling system and/or to take required suspension measures and protection against misuse of our Services as required by the Digital Services Act. 

Depending on the circumstance, we may rely on your consent or the fact that the processing is necessary to fulfill a contract with you, or to comply with the law. We may process the following personal data for customer service purposes:

  • Name
  • Address data (if applicable)
  • Contact data
  • Order and transaction data
  • Payment data (if applicable)
  • Comments (if applicable) 
  • Content of correspondence between you and the customer services department
  • Any other content that may be required for compliance with the Digital Services Act

4. Customer Accounts

If you interact with our Services you are allowed to create an account with us either via our platforms or via using third-party social login portals (e.g. Apple, Google, Facebook Connect, or other platforms) where the privacy statement of the relevant third-party will also apply to you in addition to this Statement. If you do not wish to create an account with us, we also provide you with the option of proceeding with a guest (temporary) account to complete your purchase with us. Depending on the circumstance, we may rely on your consent or the fact that the processing is necessary to fulfill a contract with you, or to comply with the law. You can withdraw your consent and/or delete your account by contacting us. The withdrawal or deletion of your account may have negative consequences on your user experience. We may process the following personal data for customer account purposes:

  • Name
  • Address data
  • Contact data
  • Credentials (applicable for Tunakula for Business)

5. Loyalty programs (in applicable markets)

Yummi Eat has several loyalty programs to provide you with offers and discounts. When you make use of one of our loyalty programs, we process your data to provide you with the discounts or offers as set out in the respective loyalty program. Depending on the circumstance, we may rely on your consent or the fact that the processing is necessary to fulfill a contract with you, or to comply with law. One of our loyalty programs is the loyalty shop, where you may claim offers from external partners. Some of the loyalty shop partners require your data for shipping purposes. We may process the following personal data for the loyalty shop and shipping of your order:

  • Name
  • Address data
  • Contact data

6. Customer Research

To make sure that our Services are aligned with your preferences and to improve our Services and platforms, Yummi Eat may approach you to conduct customer research, such as but not limited to, surveys. We only send you these types of communications with your prior consent unless this is not necessary according to the applicable law. Participation in the customer satisfaction surveys is completely voluntary. If you do not wish to receive these surveys, you can unsubscribe from them in the messages itself. We may process the following personal data for research purposes:

  • Name
  • Contact data
  • Order and transaction data
  • Research input 

7. Marketing 

We also process your data to be able to send you (personalized) marketing communications and notifications to administer, support, improve, and develop our Services. Such messages may include the latest news, discounts, and updates about new Partners, and other communications that may be subject to direct marketing. We rely on your consent unless your consent is not necessary according to the applicable law. Whenever you want to change your preferences concerning receiving such communications, you can unsubscribe using the unsubscribe link in the messages, in your account settings, or by contacting us. We may process the following personal data for marketing purposes:

  • Name
  • Address data
  • Contact data
  • Order and transaction data
  • Review(s) (optional)
  • Campaign data (optional)
  • DeviceID
  • Cookie and Technology data

To enable us to personalize your user experience with Yummi Eat and optimize our Services offered to you, we may use automated decision-making and profiling for marketing purposes. Please refer to the ‘’Automated Decision Making and Profiling’’ section below for further information.

There may be cases where Yummi Eat may process your data for promoting third-party offers, products, and services. The legal basis for this processing of personal data is your consent unless your consent is not necessary according to the applicable law. Whenever you want to change your preferences concerning receiving such communications, you can unsubscribe using the subscription link in the relevant messages or opt-out of communications by SMS reply with "STOP” by applicable law. You may also decline marketing messaging sent by push notifications by refusing the relevant permission to our app in your phone or tablet settings, however, this will also prevent you from receiving order updates via push.

8. Cookies

Yummi Eat uses cookies or similar technologies for functional, analytical, and marketing purposes. Data processed for cookie purposes differs per purpose (functional, analytical, or marketing) and depends on the preferences set by you. 

Please refer to our  Statement for further information about our use of cookies and/or similar technologies. You can always change your cookie settings via our preferences center and/or your settings in the tool you use to browse. Please note that disabling cookies may deny you the ability to use some of the Services and/or features on the website or impair your user experience.

9. Fraud prevention

We also process personal data to prevent fraud and other forms of misuse on and via our Services. Depending on the circumstance, we may rely on your consent or the fact that the processing is necessary to fulfill a contract with you, or to comply with the law. We may process the following personal data for fraud-prevention purposes:

  • Name
  • Order and transaction data
  • Payment data
  • Device information
  • IP address
  • Browser information

10. Analytics

Yummi Eat uses your data to be able to improve our website and our range of products and Services and to be able to meet our reporting obligations towards third parties which may also include advertisers. Depending on the circumstance, we may rely on your consent or the fact that the processing is necessary to fulfill a contract with you, or to comply with the law. We will make sure the reports do not contain any personal data so that the information cannot be traced back to you. 

11. Campaigns

Yummi Eat may launch specific campaigns or contests in connection to its Services. Joining Yummi Eat campaigns or contests is always voluntary. We may rely on your consent unless your consent is not necessary according to the applicable law. You can always withdraw your consent via the contact data provided to you within the campaign or by contacting us.

We may process the following personal data for campaigning purposes:

  • Name
  • Contact data
  • Order and transaction data (optional)
  • Campaign data (optional)

12. Yummi Eat for Business

We process personal data if you use your Yummi Eat for Business allowance to pay for an order you placed via our Services, when using or interacting with Yummi Eat for Business products and services, to issue and ship the Yummi Eat for Business card, and/or to provide you with the digital allowance. Depending on the circumstance, we may rely on your consent or the fact that the processing is necessary to fulfill a contract with you, or to comply with law. The following personal data may be processed in connection with Yummi Eat for Business:

  • Name
  • Address data
  • Employment data (job role, department, contractual hours)
  • Contact data
  • Allowance data
  • Order and transaction data
  • Yummi Eat for Business card information
  • Payment data

The Yummi Eat for Business card is partnered with card issuing and card transaction services provider Adyen, which also qualifies as an independent data controller. The processing of some of the above personal data by Adyen is covered by Adyen's privacy statement, which can be viewed here privacy statement we recommend you read it as this applies in addition to this Statement.

Additional purposes
We will only use your data for the purposes described above. If we want to use the data for a different purpose, we will respond appropriately to inform you, consistent with the significance of the changes we make. Depending on the circumstance, we may rely on your consent or the fact that the processing is necessary to fulfill a contract with you, or to comply with the law. 

How we collect your data

We acquire, process, and retain your data, as well as personal data about devices you use to navigate to Yummi Eat platforms (e.g. your computer, mobile, or other means), which you provide to us by ordering, creating an account, or otherwise by contacting us. 

We process personal data that you provide voluntarily, that we collect automatically, and that we obtain from third-party sources for the purposes outlined in this statement. 

  • Personal data that you provide voluntarily: We may receive personal data provided from you when you place your order, create an account with us, or provide for your marketing preferences or customer reviews in connection to our Services.
  • Personal data that we collect automatically: With your prior consent or when permitted by applicable law, when you browse our platforms, we may automatically collect technical data about your equipment, browsing activities, and patterns. We use this personal data by using cookies, server logs, and other similar technologies. These self-learning algorithms generate content that they use to personalize your user experience, selecting those items that you are interested in, as well as supporting the overall optimization of our Services. For our cookie policy, please refer above (Cookies) for more information.

We may allow you to use social media sites to create your account or link your account to the relevant social media site. These social media sites may provide us with automatic access to certain personal data they hold about you (e.g. content viewed by you, content liked by you, and information regarding the advertisements you have been shown or may have clicked on). Where we receive such information, we may use this information to further personalize your experience with us in line with your marketing preferences.

  • Personal Data that we obtain from third-party sources: We may receive personal data from third-party sources, including advertising networks and social media platforms such as Facebook or technical payment and delivery services providers which may be located outside the EU for purposes such as to support procurement of our Services, to measure the performance of marketing campaigns for our Services; and better understand your preferences so that we can customize our marketing campaigns and Services accordingly. Where we may receive such personal data, we have checked that these third parties either have your consent to process the information or are otherwise legally permitted or required to share your data with us.

Age

Our Services are not intended for persons defined as underage by applicable local laws, nor do we intend to collect the personal data of visitors who are under the defined legal age. However, we are unable to verify visitors’ ages. We therefore advise parents and/or legal guardians to monitor their children's online activities, to prevent their data from being collected without parental consent. If you feel that we have collected the personal data of a minor without consent, please contact us. We will then proceed to erase this data.

Automated decision-making and profiling
Automated decision-making takes place when an electronic system uses personal information to decide without human intervention. In the performance of the contract with you, and/or to the extent necessary to fulfill our obligations or where necessary to improve our platforms and Services for our legitimate interest, Yummi Eat uses automated decision-making and profiling. For example, Yummi Eat uses your address data and/or location data to select available Partners in your local area. We also use automated decision-making in complying with our legal obligations to prevent money laundering, terrorism financing, and other criminal offenses.

You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making unless we have a lawful basis for doing so and we have notified you. If you want to object to this type of processing, you can contact us via our privacy form. We will then proceed to reassess the situation and/or provide you with more information about why and how such an automated decision was made.

How long we keep your data?

We will only retain your data for as long as necessary to fulfill the purposes we collected it for, including to satisfy any legal, tax, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your data, the purposes for which we process your data, and whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances, we may anonymize your data so that it can no longer be associated with you, in which case we may use such information without further notice to you. 

Sharing your data with Partners
If you order through our Services, Yummi Eat may share your personal information (order, name, address, or contact data) with the Partner you selected so that the Partner can deliver your order and where necessary services, for instance, to resolve your complaint. Partners may process your data to contact you if it is necessary to fulfill the contract with you.

You are a direct customer of the Partner, and therefore the Partner bears its responsibility and obligations for the processing of your data. For questions about how the Partner manages your data, we suggest you contact the Partner directly.

Sharing your data in terms of Yummi Eat for Business
If you use your Yummi Eat for Business allowance to pay for an order you placed via our Services or by using Yummi Eat for Business card, Yummi Eat shares personal data (such as email address and data about your order and allowance) with the person that grants you the allowance (which might be your employer, business partner, etc.) for performing our contract with this person. Please note that the person who grants you the allowance has its responsibility and obligation concerning the processing and protection of your data. If you have any questions about how your data is used by this corporate entity, please contact them directly. The person who grants you the allowance also shares personal data with us to allow us and the TUNAKULA for Business card service providers to provide services to you. 

Sharing your data with others

Yummi Eat may collaborate with other companies within the Yummi Eat group and/or other third parties to conduct the processing described in this Statement and/or to comply with legal obligations. 

These group companies and third parties will process your data on behalf of us as data processors or as autonomous data controllers (or in a position as so defined or referred under applicable data protection law including concepts as the equivalent of controller or processor), and have access to your data for the purposes described in this Statement. We require group companies and third parties to protect your data by the standards set out in this Statement and we respond appropriately under the applicable data protection law to guarantee the same level of protection and confidentiality.

We may also share your data with other third parties where appropriate or required by applicable law or regulation (including a court order or legal authority request) or where we believe disclosure is necessary to comply with legal obligations, to exercise, establish, or defend legal rights or to protect the vital interests of any person. Such third-party controllers may include law enforcement agencies. 

We may also disclose your data to any company or prospective buyer of all or all our assets in connection with any sale or transfer of those assets.

Your data may be shared with the following parties:

  • Yummi Eat’s affiliates, subsidiaries, and/or group companies of Yummi Eat
  • Software providers such as providers for software, hosting, application support, delivery, logistics, information security, etc
  • Third parties who undertake various activities to promote, market, or support our Services. This includes social media platforms like Facebook, offshore customer support agents, marketing service providers, other partners who manage our marketing emails and push notifications, partners who send you text messages when your order is on its way, and delivery companies who deliver your order to you.
  • Implementation partners
  • Merchants, payment, and card service providers such as Adyen (for their privacy statement please see here) and marketing service providers
  • Customer satisfaction survey firms and/or market research companies
  • Loyalty shop partners 
  • Professional consultants
  • Law enforcement, governmental or regulatory authorities (including insurance companies, visa and tax authorities) 
  • Prospective buyers
  • Any other third party if you have given your consent to the disclosure.

Third-party websites
Our website may include links to third-party websites. When accessing such third-party websites, please note that each of these websites has its privacy statement. Although Yummi Eat takes great care in selecting websites to link to, we cannot take responsibility for how they manage your data.

Where does your data get sent? 

If you are in the European Economic Area (EEA), Israel, Australia, New Zealand, and Canada, please be aware that we may process and/or transfer your data outside of the EEA Israel, Australia, New Zealand, and Canada. This may include transferring it to or accessing it from other jurisdictions, including jurisdictions that may not provide a level of protection equivalent to your local- and/or data protection laws (“Non-Adequate Country”). Where we transfer personal data outside the EEA, Israel, Australia, New Zealand, and Canada we will take into account any applicable statutory obligations relevant to personal data transfers, and in an Inadequate Country, we will rely on appropriate safeguards, including EC approved standard contractual clauses or other lawful binding transfer mechanism under the applicable data protection law.  

Personal data rights, questions, or complaints
We inform you that, about the personal data, you can exercise the rights provided for by applicable data protection laws, which may include: the right to request access to, rectification of, or erasure of personal data or restriction of processing, and to object to processing, the right to data portability, to withdraw your consent at any time (without prejudice to the lawfulness of the processing based on the consent given before the withdrawal) as well as to complain with a supervisory authority directly.

To exercise your rights please contact us.

We will do our best to address your request in time and free of charge, except where it would require an excessive and disproportionate effort. In certain cases, we may ask you to verify your identity before we can act on your request.

Regarding requests related to processing or sharing of personal data related to Yummi Eat Pay and/or Yummi Eat Pay Card, please contact the person who grants you the Yummi Eat Pay allowance (which might be your employer, business partner, etc.). This is required because Yummi Eat and the person who grants you the allowance have a separate responsibility concerning the processing and protection of your data.

If you have any other questions or complaints about the processing of your data, we will be happy to contact you. We would also like to hear from you if you have tips or suggestions on how to improve our Statement.

Security
Yummi Eat takes personal data protection very seriously and we, therefore, respond appropriately to protect your data against misuse, loss, unauthorized access, unwanted disclosure, and unauthorized alteration. If you feel that your data are not adequately protected or there are indications of misuse, please contact us on the privacy form.

How to contact us
The data controller of your data is the Tunakula entity present in the country where you use our Services unless stated otherwise in this Statement.

If you need to contact us to make requests or if you have any questions or concerns about this Statement and/or our privacy practices and processing activities, please contact us via our privacy form

For Yummi Eat for Business (Tunakula.) here

For JNN Global. here

Yummi Eat.com Data Protection Officer - JNN Global.

Updates to this Privacy Statement
We may update this Statement from time to time in response to changing legal, technical, or business developments. When we update our privacy Statement, we will respond appropriately to inform you, consistent with the significance of the changes we make. Where required by applicable data protection law, we will obtain your consent to any material changes to this Statement.

For clarification, it should be noted that the use of the term “Partner” or any similar expression in this Statement does not imply or establish a partnership, employer-employee, or agency relationship of any kind between the mentioned party and Yummi Eat.

We encourage you to periodically review this Statement for the latest information on our privacy practices. 

To the extent we have local language versions, the English version of this Statement shall prevail in case of conflicts between the different language versions.