Your Privacy Choices

This notice supplements our Privacy Policy and applies to residents of California and of other US states with comprehensive privacy laws, including Colorado, Connecticut, Virginia, Utah, Texas, Oregon and Montana. Terms such as personal information, sale, share and sensitive personal information have the meanings given in those laws.

#1. Do we sell or share your personal information?

We do not sell your personal information for money.

We do disclose limited identifiers — such as a hashed email address or a mobile advertising identifier — to advertising and analytics partners so we can show you relevant ads and measure whether they worked. Under the CCPA/CPRA this may count as "sharing" for cross-context behavioural advertising, and under some other state laws as "targeted advertising".

You can stop this at any time. See Section 5.

We do not knowingly sell or share the personal information of anyone under 16.

#2. What we collect, and why

In the last 12 months we have collected the following categories of personal information. The full detail, including the specific data points, is in Section 1 of the Privacy Policy.

We retain each category for the periods set out in Section 5 of the Privacy Policy.

#3. Sensitive personal information

We collect a limited amount of sensitive personal information: government identifiers (Rider licence and right-to-work documents), precise geolocation (Riders on shift, Customers finding nearby stores) and account log-in credentials.

We use it only for the purposes permitted by law without a right to limit — providing the service you requested, verifying identity, preventing fraud, and ensuring safety. We do not use or disclose sensitive personal information to infer characteristics about you, and we do not use it for advertising.

#4. Your rights

#5. How to opt out of targeted advertising

You have three options, all of which work:

1. In the app — open Profile → Privacy → Do Not Sell or Share My Personal Information and switch it on.
2. On the web — use the "Your Privacy Choices" link in the website footer.
3. Global Privacy Control — we honour the GPC browser signal automatically. If your browser or extension sends GPC, we treat it as a valid opt-out for that browser without you needing to do anything else.

An opt-out applies to the browser or account where you set it. If you clear cookies or use another device, set it again there.

#6. How to make a rights request

Verification. To protect you, we confirm your identity before acting. For most requests we match the email address or phone number on your account. For deletion or for specific pieces of information we may ask for additional confirmation, such as a one-time code or details of a recent order. We use the information you supply for verification only.

Timing. We confirm receipt within 10 business days and respond substantively within 45 calendar days. If we need more time we will tell you why and may take a further 45 days. Opt-out requests are actioned within 15 business days.

Cost. Free, unless a request is manifestly unfounded, repetitive or excessive — in which case we will explain the charge before proceeding.

#7. Authorised agents

You may use an authorised agent. The agent must provide written permission signed by you, and we may contact you directly to verify that you gave permission. An agent submitting an opt-out signal on your behalf does not need to provide written permission, but we may still verify that the request is genuine.

#8. Appeals

If we refuse a request, we will tell you why. You may appeal by replying to our decision or emailing privacy@kwikfasthurry.com with the subject line "Privacy Appeal". We will review and respond within 45 days, explaining our reasoning.

If you disagree with the outcome you may contact:

• the California Privacy Protection Agency or the California Attorney General, if you are in California;
• your state Attorney General, in other states.

#9. Notice of financial incentive

From time to time we run programmes that offer credits or discounts in exchange for joining a mailing list or referring a friend. Participation is voluntary, you can withdraw at any time, and the value of the incentive is reasonably related to the value of the data to us — calculated from the expected marginal revenue of a subscribed customer less the cost of the incentive. Terms are disclosed when you join.

#10. Metrics

Where required by law, we publish an annual summary of the privacy requests we received, complied with, and denied. It is available at https://legal.kwikfasthurry.com and on request from privacy@kwikfasthurry.com.