Privacy policy

1. Contact details

2. How we collect your information

1. register a general interest in careers at Deliveroo,
2. attend a recruitment event at Deliveroo,
3. apply for a role at Deliveroo,
4. participate in a recruitment process at Deliveroo, or
5. enter into an employment contract with Deliveroo.

3. Information we collect about you

1. We collect your information when you register your interest (e.g. signing up for job alerts, during the application and recruitment process), including your:
   1. personal contact details, such as full name, personal email address, phone/mobile/fax number, location (city),
   2. recruitment information, such as application form, job interview notes, video interviews, assessment results, CV, resumes including education, past work experience, hobbies, interview notes and references from previous employer(s) or, if you are an internal candidate, your previous line managers, past performance review(s) and any internal transfers or promotions, and
   3. cookie data if you visit our websites or our recruitment partner sites, like Greenhouse.
2. We collect your information to identify you when you use our or our recruitment partners’ recruitment portal or systems, including:
   1. identification information, such as proof of identity, and
   2. authentication information, username and password for the recruitment portal.
3. We collect diversity information that you provide to us voluntarily because we are always working to make sure our hiring processes are equitable and inclusive and to help inform how we create a more diverse and inclusive workspace. The type of diversity information we collect may vary depending on your location and may include information relating to your gender, age, sexual orientation, ethnicity, neurodiversity, social mobility and/or disability status.
4. We collect information we need to enter into an employment contract with you and satisfy our obligations as an employer, such as:
   1. adate and place of birth, citizenship, passport number and country of issue; national ID number and tax details,
   2. ‘right to work’ documents,
   3. your responses to employment screening questions (where applicable), and
   4. background check information (where applicable).
5. In certain circumstances, we may need to collect sensitive information for specific purposes but we’ll explain why we’re collecting it when we ask you for this information. For example, we may need medical information for health and safety, accessibility or ‘fit for work’ purposes, or information relating to criminal background checks if it’s relevant to the role you have applied for. We’ll only collect your sensitive information where we are required or permitted to do so by law, or where we have your explicit consent.

We may use aggregated or anonymised information for reporting purposes including, for example, to report on our diversity targets or the type of candidates and volumes of job applications made to Deliveroo and related trends.

4. Use of your information

We will only process your information if there is a reason for doing so, and if that reason is permitted by law.

• setting up an electronic job applicant HR file,
  • managing your application,
  • organising interviews,
  • assessing and progressing your job application,
  • making a decision about your suitability for the role, and
  • contacting you throughout the recruitment and onboarding process,
• protect the health and safety of anyone visiting our premises and safeguard office equipment, facilities and other property, including maintaining and ensuring the security of our IT systems and premises,
• report on and improve our processes and to manage our workforce, and
• defend litigation and manage any complaints or claims, conduct investigations and comply with our internal policies and procedures.

• comply with laws, such as our obligations on health and safety, immigration, record-keeping and reporting, and
• respond to legal processes, such as subpoenas and court orders and requests from law enforcement or regulatory bodies pursuing legal rights and remedies.

5. Cookies

6. Sharing your information

• recruitment and work agencies,
• IT services providers, such as those providing technical and support services in connection with the application and recruitment process, and
• competency test providers and others who help us fill job vacancies and assess the suitability of candidates and progress applications.

• if we are under a duty to disclose or share it in order to comply with (and/or where we believe we are under a duty to comply with) any legal obligation or regulatory requirement,
• in order to enforce our contractual terms with you,
• to protect the rights of Deliveroo, and
• with such third parties as we reasonably consider necessary in order to prevent crime, eg. the police or other law enforcement bodies, public prosecutors, external advisors (such as legal advisors, accountants), benefits providers, pension trustees and insurers.

7.Retention of your information

• our contractual obligations and rights in relation to the information involved,
• legal obligation(s) under applicable law to retain information for a certain period of time,
• statute of limitations under applicable law(s),
• our legitimate interests for retaining the information (please see “Use of your information” section),
• whether there is an actual or potential dispute, and
• guidelines issued by relevant data protection authorities.

8. Security

9. Your Rights

• The right to be informed.This is the right to be provided with clear, transparent and easily understandable information about how we use your information and about your rights. This is why we’re providing the information in this policy.
• The right of access. This is also known as a “data subject access request” or the right to receive a copy of the information we hold about you and to check that we are processing it lawfully.
• The right to rectification. This is the right to have any incomplete or inaccurate information we hold about you corrected, though in some cases we need to verify the accuracy of the new information you provide to us.
• The right to erasure. This is also known as “the right to be forgotten” or the right to request the deletion or removal of certain of the information that we hold about you where there is no good reason for us continuing to process it. This right is not absolute and only applies in certain circumstances, meaning that the law permits us and in some cases obliges us to keep certain information after your request to exercise this right has been processed.
• The right to restrict processing. This is the right to block or suppress further use of your information in certain circumstances. When processing is restricted, we may still have a lawful reason to hold your information, but we will not use it further.
• The right to data portability. This is the right to receive your information in a structured, commonly used and machine-readable format transferred to a third party. This right is not absolute and only applies in certain circumstances.
• The right to withdraw consent. Where we rely on consent to use information, this refers to the right to withdraw that consent at any time. Withdrawing consent will not, however, make unlawful our use of your information before you withdraw your consent. If you withdraw your consent, we may not be able to process your application or continue with your recruitment process.
• The right to object to processing. This is the right to object to certain types of processing of your information, including processing for direct marketing purposes and profiling.
• The right not to be subject to a decision based solely on automated processing of your information. If we use automated processes to make a decision about your application, you can exercise this right by asking for a human review of the decision and the information on which the decision was based.

• UK – Information Commissioner’s Office
• France – Commission Nationale de l’Informatique et des Libertés
• Belgium – Autorité de la protection des données 
• Ireland – Data Protection Commission
• Italy – Garante per la protezione dei dati personali
• Netherlands – Autoriteit Persoonsgegevens
• Poland – Urząd Ochrony Danych Osobowych
• UAE – Commissioner of Data Protection 
• Qatar – Data Protection Office
• Kuwait – Communication and Information Technology Regulatory Authority
• Hong Kong – Office of the Privacy Commissioner for Personal Data
• Singapore – Personal Data Protection Commission

10. Changes to our Privacy Policy