Where this privacy policy refers to “Deliveroo”, “we”, “us, “our”, this means one or more of the particular Deliveroo group companies (each a “Group Company”) that processes your personal information for its respective independent purposes. Except as stated otherwise, each Group Company is an independent controller of the information it holds about you. For more information about our Group Companies, see the “Deliveroo Group Company details” section below. 

Deliveroo is committed to protecting the privacy of individuals who represent a partner which has a corporate relationship with Deliveroo, or is a prospective business partner of Deliveroo (“Deliveroo Partner Representative(s)”), including restaurant and grocery partners and Deliveroo for Work (“DfW”) clients (together “Deliveroo Partner(s)”).  

This includes Deliveroo Partner Representatives who use technology provided by or on behalf of Deliveroo, including Restaurant Order Manager (“ROM”), Partner Hub, Marketer and the DfW Admin Portal (together “Business Apps”) and related services and websites. 

Deliveroo is now part of the DoorDash, Inc. group of companies. This means that from time to time and where necessary to provide our services to you, DoorDash, Inc. is also a controller relating to your personal information and the processing described in this policy.

Please read this privacy policy which explains how we use and protect your personal information, which is any information about you or that can be used to identify you.

If you have any queries or requests about this privacy policy or how we handle your information more generally, you can get in touch by contacting our local Partner Support team (see the “Deliveroo Group Company Details” section below). For DfW accounts, please contact your DfW representative.

As part of our commitment to your privacy, we want to be clear about the types of information we collect. We collect your information in a variety of ways, such as when we onboard a restaurant as a new partner and when you use the Business Apps. More details about how your information is collected are listed below.

Lead generation

When looking for opportunities with new partners, we may obtain your business contact details from a third party source, such as LinkedIn, Google, a publicly available source, business data provider, or a business contact that has provided us with your details.

Negotiation of a contract with Deliveroo Partners

When a contract is being negotiated with a Deliveroo Partner and we are onboarding a new Deliveroo Partner, we ask you as a Deliveroo Partner Representative to provide information about yourself including your name, business contact details and business address. We may record calls and meetings for quality and training purposes. We will inform you of such recording and give you the opportunity not to be recorded.

Onboarding a new Deliveroo Partner

To complete the onboarding process, Deliveroo will conduct due diligence on new Deliveroo Partners, which includes identity and tax verification checks. 

As part of our “Know Your Customer” checks on Deliveroo Partners we require Deliveroo Partner Representatives to complete an identity verification using our third party identity verification provider, Onfido. If you are tax registered, we will also conduct a tax verification using the Deliveroo Partner’s tax identification number.

For the purposes of identity verification, you will be asked to submit a photo or video of yourself (“selfie”) and a photo of your identity document. Your selfie (which may be considered sensitive data in some markets) will be compared with the photo in the identity document. This comparison is made automatically using biometric data and identity verification technology provided by our service provider, Onfido.

During the onboarding process, we create a business profile for the Deliveroo Partner and we will ask the Deliveroo Partner Representative to provide information in order to create and maintain this partner profile, which will include business payment data. 

Management 

When there is a change of ownership, we process your personal information as a Deliveroo Partner Representative for the purposes of managing the Deliveroo Partner’s relationship with Deliveroo, which includes conducting an identity verification as described above.  

Where a Deliveroo Partner chooses to register via a Business App, we will collect your personal information as a Deliveroo Partner Representative, for the purposes of registering on the Business Apps and to enable the Deliveroo Partner to access the Business Apps. This includes where you interact with the DfW Admin Portal.

Payment

When we make payments to or receive payments from Deliveroo Partners we produce payment files (which are transferred to third party providers for the purposes of processing payments), which include Deliveroo Partner payment data and may include your name if you’re a sole trader or an unincorporated business.  

When you request to change your Deliveroo Partner payment details, we process your personal information to verify you are authorised to make such a change, which includes conducting an identity verification as described above.

Your location

When you have provided permission at a device level, we process location data obtained from your use of the Business Apps and via our security providers. This is collected for the reasons explained in “Use of your information and why” below. 

Support

When a Deliveroo Partner requires support from us (“Business Support”) we collect certain information, such as information about your query, notes regarding the issue, your use of Business Apps (if relevant) and your contact details, as a Deliveroo Partner Representative.

When you interact with our Business Support team via email, phone, post, chat or on the Business Apps, including when you report any incident, our team collects and uses information about you. If you interact with us by phone, your calls may be recorded and analysed for performance, training and improvement purposes. We will inform you of such recording and you can choose not to be recorded.

Technical data 

We collect technical information about your device and your use of your device, including through the use of cookies and similar technologies to: 

1. enable auto-login for you into the Business App; and 
2. obtain technical information about your device, including characteristics of and performance data about your device, the Business Apps and operating system, your device type, network connection type, IP address from which you are accessing the Business Apps, app version, device language, screen size and platform.  

We also collect technical information about your use of our services through technology, for instance where you use a ROM as a Deliveroo Partner Representative.

When it comes to cookies and similar technologies, you can change your cookie preferences at any time, and withdraw any consent you provided at any time. You can also manage and delete cookies through most internet browsers by changing your cookie settings but if you do so, the Partner Hub or our websites may not work properly. 

Information about the services

If a Deliveroo Partner takes advantage of the perks offered by service providers on our perks page, we will share with the service provider the information provided to us about the Deliveroo Partner’s interest in those perks, which includes your information as a Deliveroo Partner Representative.

We collect information about you from the feedback you send us or provide to us. 

When you use websites or applications of third parties in connection with the services being provided by Deliveroo, including during the onboarding process, those sites or applications may collect and process your information independently of Deliveroo. We recommend that you check their privacy policies to understand how they process your personal information. 

We will only process your information if there is a reason for doing so, and if that reason is permitted by law. 

We have listed these reasons below.

To facilitate the contract between Deliveroo and the Deliveroo Partner to:

• provide and manage the Deliveroo Partner application, account, and onboarding process, as well as to execute a contract between the Deliveroo Partner and the relevant Deliveroo entity;
• provide you with access to and use of the Business Apps as a means of Deliveroo providing the business with services, including to enable the business to make orders;
• communicate with you about operational information relating to any services being provided to you by Deliveroo, such as any important changes or developments to a Business App and about your upcoming booked orders; 
• enable Business Support to communicate with you to support the provision of services to the Deliveroo Partner; and
• enable us to process payments to the Deliveroo Partner. 

To communicate with you to:

• help you complete the Deliveroo Partner application;
• get your feedback through surveys for our marketing or advertising materials, in which case we will not identify you unless you have consented to Deliveroo using your information in this way. We also use your survey comments and feedback for our internal business purposes, such as to generate aggregated insights to help us assess and improve our services. Your name will not be used when generating or sharing these aggregated insights;
• provide you with news and information in connection with Deliveroo and to help you to understand more about Deliveroo, by email or phone, SMS, WhatsApp, push notifications or in-app messages; 
• inform you of Deliveroo product updates; and
• provide support to you for live operations.  

For onboarding and managing our relationship with Deliveroo Partners to: 

• create and maintain Deliveroo Partner account information
• perform identity verification, as described in the “Information we collect about you” section above, as well as audit and store evidence of identity verification to comply with our internal policies, protect our reputation and mitigate our legal risks. We also have a substantial public interest to prevent unlawful acts, such as prevention of fraud and money laundering;
• enable our Business Support, tech and engagement teams to help you with any issues, enquiries or complaints efficiently and effectively, and to fix any bugs or other technical issues in a Business App using technical information relating to your device;
• use location data for the purposes of confirming the position of your restaurant (if relevant) to avoid riders arriving at the incorrect location; 
• arrange to take pictures of the Deliveroo Partner premises for the Deliveroo app or website; and
• maintain a list of partners that Deliveroo has onboarded. 

To develop our business, systems and services to:

• understand from your data what attributes to a positive or negative customer, partner or rider experience with Deliveroo and what might cause inefficient deliveries or damage to Deliveroo, and use this data to responsibly design, develop, test and implement new tools, processes, and relationships to improve our business, systems and services;
• analyse data to make certain assumptions about your position within the Deliveroo Partner entity so that we send you the types of promotional offers that may be particularly relevant to your area of business;
• use basic location data on an aggregate basis to develop and improve our business; 
• promote and improve our services, by making it easier for customers and riders to find your business location and contact details;
• interact with you (such as via communications or Business App functionality) to encourage Deliveroo’s network efficiency based on our analysis of your services; and
• analyse your activity on the Business Apps so that we can administer, support, improve and develop our business and for statistical and analytical purposes and to help us to prevent fraud.  

To protect Deliveroo:

• for the exercise or defence of legal claims and to exercise and protect the rights of Deliveroo, Deliveroo Partners, customers, riders, or others, including determining our liability;
• to enforce the terms of any contract and keep records of such enforcement, including using your data to analyse whether you have breached a contract (such as by misusing the Business Apps or acting fraudulently), which may result in us disabling or terminating a contract if we have the right to do so; and
• to investigate complaints or incident reports relating to Deliveroo’s relationship with Deliveroo Partners and prevent fraud or other misuse of our systems and services, including by using systems to assess whether or not a Partner’s refund dispute is valid or whether a Partner is operating in compliance with our partner agreement. 

We also process your information where we are under a legal or regulatory obligation to do so. We use your information to:

• carry out our due diligence, including by performing identity verification checks using our third party ID verification service provider and tax verification checks;
• keep a record of payments made to or from the Deliveroo Partner, to the extent they include your information; 
• comply with any other legal obligation or regulatory requirement to which we are subject.

Where we have a lawful basis for doing so (and are permitted to do so by law) we will use your information to let you know by email, post, phone, SMS, WhatsApp, push notifications or in-app messages about Deliveroo’s products and services and/or any promotions from third parties relevant to your business (such as about broadband and telecommunications services, payment processing, and customer review platforms). Where local law requires us to, we will ask for your consent before sending the relevant communication and offer an option to unsubscribe from these communications.

We will only retain your information for as long as reasonably necessary to fulfil the purposes we collected it for, and for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. In the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you, we may retain your information for a longer period.

When determining the appropriate retention periods, we take into account factors including:

• the amount, nature and sensitivity of the information;
• the potential risk of harm from unauthorised use or disclosure of your information;
• the purposes for which we process your information and whether we can achieve those purposes through other means;
• our contractual obligations and rights in relation to the information involved;
• legal obligation(s) under applicable law to retain information for a certain period of time;
• applicable regulatory, tax, accounting or other requirements;
• statute of limitations under applicable law(s);
• our legitimate interests for retaining the information (to learn more, check the “Use of your information” section above);
• whether there is an actual or potential dispute; and
• guidelines issued by relevant data protection authorities.

The information we collect about you is transferred to and stored on our servers located within the EU. 

Sharing your information internally: We share your information with other Deliveroo Group Companies carrying out certain processing activities only where necessary for the purposes set out in the “Use of Your Information and Why” section above. We also share your information with our parent company, DoorDash, for group administrative purposes.

Sharing your information with third parties: We share your information with third party service providers that provide services on our behalf, including:

• IT service providers: including cloud, software, analytics, communications and data storage providers and SDKs.
• Operational service providers: including feedback and survey providers, onboarding providers, our support service providers, payment providers, user research partners, marketing agencies, professional advisors, financial and administrative services providers and other suppliers, business partners, contractors and subcontractors.
• Suppliers: where a Deliveroo Partner is registered on the Business Apps, we will share your contact details with the supplier in order to facilitate transactions on the Business Apps.

In certain circumstances, we will also share your information:

• if our business enters into a joint venture with, purchases or is sold to or merged with another business entity, your information may be disclosed or transferred to the target company, our new business partners or owners or their advisors;
• if we are under a duty to disclose or share your information in order to comply with (and/or where we believe we are under a duty to comply with) any legal obligation or regulatory requirement. This includes where we’re under a legal obligation to or need to provide information to relevant tax authorities, respond to police data requests or to exchange information with other companies and organisations for the purposes of fraud protection and prevention;
• in order to enforce our contractual terms with the Deliveroo Partner;
• in the event of a dispute relating to the Deliveroo Partner’s services to Deliveroo or the services provided to the Deliveroo Partner, or to protect the rights of Deliveroo, Deliveroo Partners, customers, or others, including to prevent fraud; and
• with such third parties as we reasonably consider necessary in order to detect or prevent crime, eg. the police.

Deliveroo is an international business and we may need to transfer your information outside the United Kingdom (UK) or European Economic Area (EEA) to help us provide our services, such as to India or other countries where we may have operations.

When we transfer personal information to our parent company, DoorDash, in the United States, we take steps to ensure that your personal information continues to be protected in accordance with applicable data protection standards.

If we transfer your information to another country that does not, under their local laws, offer an equivalent standard of data protection to the UK or EEA, we will make sure that your information is protected. For example, we will only transfer your information:

• to countries that have been deemed to provide an adequate level of protection for personal information; or
• where we can enter into contracts with third parties ensuring that strict data protection safeguards are in place before we transfer your information.

If you have any questions about the specific mechanisms used, please contact us (to learn more, check the “Contact details” section above).

If you use Deliveroo services in another country where we operate, for example, when you are travelling, your information will be processed in accordance with the applicable laws of that country and the Deliveroo privacy policy of that country will apply.

We will only retain your information for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain information for a longer period in the event of a complaint. 

To determine the appropriate retention periods for information, we will take into account factors including:

• the amount, nature and sensitivity of the information;
• the potential risk of harm from unauthorised use or disclosure of your information;
• the purposes for which we process your information and whether we can achieve those purposes through other means;
• our contractual obligations and rights in relation to the information involved;
• legal obligation(s) under applicable law to retain information for a certain period of time;
• applicable regulatory, tax, accounting or other requirements;
• statute of limitations under applicable law(s);
• our legitimate interests for retaining the information (see ‘Use of Your information and Why’ above);
• whether there is an actual or potential dispute; and
• guidelines issued by relevant data protection authorities.

In some circumstances you can ask us to delete your information (see “Your rights” section below). At the end of a retention period, we will securely delete or anonymise  your information.

We adopt robust technologies and policies to protect your information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We have implemented procedures to deal with any personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Although we take steps to keep your information secure when it is with us, transmitting data over the internet is never fully secure, so any information you send to our Rider Site or the Rider App is done at your own risk. Once we have received your information, we will use strict procedures and controls to ensure appropriate security.

Where you use a password to access certain parts of the Business Apps or websites, you are responsible for keeping this password confidential. You must keep any password you create, or other secure login method, secret, and prevent unauthorised access to your account. We advise you not to share your password with anyone. 

In certain circumstances, under local data protection law, you may have rights in relation to the information we hold about you. We will handle a request to exercise these rights in line with the applicable law.

If you are in the UK or the EU, you have the right to:

• be informed. This is why we’re providing you with the information in this privacy policy.
• access your information. You can ask us for a copy of the information we hold about you and to check whether we are processing it lawfully. In sharing with you a copy of your information, we use a third party secure method of transfer.
• change or update your information. You can ask us to make changes to any information we hold about you if it is incorrect or outdated, but we may need to verify the accuracy of the new information before updating it..
• delete your information. ]In certain circumstances, you have the right to request the deletion or removal of certain information that we hold about you where there is no good reason for us continuing to process it. 
• restrict our use of your information. In certain circumstances, you can ask us to suspend our handling of your information if you have a specific reason for doing so. For example, if you are unhappy with the way we have used your information you can ask us to stop using it until we have addressed your concerns.
• The right to data portability of your information. You can ask us for a copy of your information in a structured, commonly used and machine-readable format and, if we can, to send this to a third party. This right only applies to information that you have provided to us, which you initially provided consent for us to use or where we used the information to perform a contract with you.
• withdraw your consent. Where we rely on consent to use your information, you have the right to withdraw that consent at any time. Withdrawing consent will not, however, make unlawful our use of your information before you withdraw your consent. If you withdraw your consent we may not be able to provide certain services to you.
• object to processing. ou can object to us using your information if we have no legitimate reasons to do so.

To exercise any of these privacy rights, please contact our Data Protection Officer in writing at dpo@deliveroo.com. We may need to ask you to verify your identity before we can respond to your request.

If you are unhappy with how we have handled your information you can contact (depending on applicable data protection law) your local data protection authority. We would, however, really appreciate the chance to deal with your concerns before you approach your local data protection authority and so we ask that you please contact us first. Contact details for local data protection authorities can be found on the following links:

• UK - Information Commissioner’s Office
• Ireland - Data Protection Commission
• France - Commission Nationale de l'Informatique et des Libertés
• Belgium - Autorité de la protection des données 
• Italy - Garante per la protezione dei dati personali
• UAE (DIFC) - Commissioner of Data Protection 
• Qatar - Data Protection Office
• Kuwait - Communication and Information Technology Regulatory Authority
• Singapore - Personal Data Protection Commission

We may update this policy from time to time, so remember to check back in every so often, in case anything has changed. Where appropriate, we may notify you of the changes, for example by email or in-app notification.

This privacy policy was last published on: 20 February 2026

UK

• Entity: Roofoods Ltd, The River Building, 1 Cousin Lane, London, EC4R 3TE, United Kingdom.
• Partners
• For prospective partners: restaurantsupport@deliveroo.co.uk

IRELAND

• Deliveroo Ireland Limited, 1-2 Victoria Buildings, Haddington Road, Dublin 4, Dublin, D04 XN32, Ireland.
• For partners
• For prospective partners: restaurantsupport@deliveroo.co.uk

BELGIUM

• Deliveroo Belgium SPRL, WeWork, 31 Rue du Commerce, 1000, Brussels, Belgium.
• Contact

FRANCE

• Deliveroo France SAS, 36 rue La Fayette, Paris, 75009, France.
• Contact

ITALY

• Deliveroo Italy SRL, Deliveroo c/o Via Carlo Bo 11, Milano, CAP 20143, Italy.
• Contact

SINGAPORE

• Deliveroo Singapore Pte Ltd, 77, Raffles Place, Robinson Road, #13-00 Robinson 77, 068896, Singapore.
• Partners
• For prospective partners: restaurantsupport@deliveroo.co.uk

UNITED ARAB EMIRATES

Deliveroo DMCC, Unit No 123, DMCC Business Centre, Level No 1, Jewellery & Gemplex 3, Dubai, United Arab Emirates.

• Partners
• For prospective partners: restaurants@deliveroo.ae

QATAR

• Deliveroo LLC, No 15, 5th Floor Workinton M7, Building 17, Zone 3, Street 950, Mshelreb Downtown, Doha, Qatar.
• Partners
• For prospective partners: restaurants@deliveroo.com.qa

KUWAIT

• Roofoods Gulf Wholesale And Retail Trade Company SPC, Al Mirqab, Al Soor Street, Burj AlShaya, Floor 10, Unit, 20, Kuwait City, Kuwait.
• Partners
• For prospective partners: restaurants@deliveroo.com.kw