Candidate Privacy Policy

You know us as Deliveroo, but our legal name in the UK is Roofoods Ltd and in other markets it will be an affiliated Deliveroo company that is hiring and specified in the job description (“Deliveroo”, “we”, “us” or “our”). We are committed to protecting the privacy of those who engage with us with an interest in a career at Deliveroo or applicants to a job opportunity at Deliveroo. We’ll be the “controller” of the information we hold about you. Please read this privacy policy that explains how we use and protect your personal information.

1. Contact details

If you have any queries or requests about this privacy policy or how we handle your information more generally, you can get in touch by contacting us at deliveroo.careers@deliveroo.co.uk.

2. How we collect your information

We collect information from you when you interact with us or show interest in joining Deliveroo, such as when you:

1. register a general interest in careers at Deliveroo, 
2. attend a recruitment event at Deliveroo,
3. apply for a role at Deliveroo,
4. participate in a recruitment process at Deliveroo, or
5. enter into an employment contract with Deliveroo. 

We may also collect information from third parties, such as recruitment agencies, recruitment or networking websites or job boards where you have made this information publicly available. To evaluate candidates for specific level positions, we may also obtain information from agencies that carry out reference checks on our behalf, including contacting other individuals to provide relevant information on your professional skills and profile. We will let you know and ask you before carrying out a reference check. 

3. Information we collect about you

As part of our commitment to your privacy, we want to be clear about the types of information we collect. 

1. We collect your information when you register your interest (e.g. signing up for job alerts, during the application and recruitment process), including your: 
   1. personal contact details, such as full name, personal email address, phone/mobile/fax number, location (city), 
   2. recruitment information, such as application form, job interview notes, video interviews, assessment results, CV, resumes including education, past work experience, hobbies, interview notes and references from previous employer(s) or, if you are an internal candidate, your previous line managers, past performance review(s) and any internal transfers or promotions, and
   3. cookie data if you visit our websites or our recruitment partner sites, like Greenhouse.
2. We collect your information to identify you when you use our or our recruitment partners’ recruitment portal or systems, including:  
   1. identification information, such as proof of identity, and
   2. authentication information, username and password for the recruitment portal.
3. We collect diversity information that you provide to us voluntarily because we are always working to make sure our hiring processes are equitable and inclusive and to help inform how we create a more diverse and inclusive workspace. The type of diversity information we collect may vary depending on your location and may include information relating to your gender, age, sexual orientation, ethnicity, neurodiversity, social mobility and/or disability status. 
4. We collect information we need to enter into an employment contract with you and satisfy our obligations as an employer, such as:
   1. date and place of birth, citizenship, passport number and country of issue; national ID number and tax details,
   2. ‘right to work’ documents,
   3. your responses to employment screening questions (where applicable), and
   4. background check information (where applicable).

1. In certain circumstances, we may need to collect sensitive information for specific purposes but we’ll explain why we’re collecting it when we ask you for this information. For example, we may need medical information for health and safety, accessibility or ‘fit for work’ purposes, or information relating to criminal background checks if it’s relevant to the role you have applied for. We’ll only collect your sensitive information where we are required or permitted to do so by law, or where we have your explicit consent. 

We may use aggregated or anonymised information for reporting purposes including, for example, to report on our diversity targets or the type of candidates and volumes of job applications made to Deliveroo and related trends.

4. Use of your information

We will only process your information if there is a reason for doing so, and if that reason is permitted by law. 

We process your information where we have a legitimate interest for doing so, which are to:

• initiate, manage and administer the recruitmenting process, including:
  • setting up an electronic job applicant HR file, 
  • managing your application,
  • organising interviews,
  • assessing and progressing your job application, 
  • making a decision about your suitability for the role, and
  • contacting you throughout the recruitment and onboarding process,
• protect the health and safety of anyone visiting our premises and safeguard office equipment, facilities and other property, including maintaining and ensuring the security of our IT systems and premises, 
• report on and improve our processes and to manage our workforce, and
• defend litigation and manage any complaints or claims, conduct investigations and comply with our internal policies and procedures.  

Where your job application is successful, we use your information to provide and manage the onboarding process, including to enter into an employment contract with you and to create your employee record after which your details will be processed in line with our Employee Privacy Policy and will be used to administer your employment and manage your career at Deliveroo.

With your consent, we may use your information to contact you about other roles or future suitable vacancies where you provide your contact details. You can withdraw your consent at any time (see “Your rights” section below). 

We may also use your information to:

• comply with laws, such as our obligations on health and safety, immigration, record-keeping and reporting, and 
• respond to legal processes, such as subpoenas and court orders and requests from law enforcement or regulatory bodies pursuing legal rights and remedies.

5. Cookies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of the website may become inaccessible or not function properly. For more information about the cookies we use, and how to set or amend your cookie preferences, please see our Cookie Policy.

6. Sharing your information

The information we collect about you is transferred to and stored on our servers located within the EU. 

We share your information with other Deliveroo group companies where necessary for the purposes set out in the “Use of your information” section above. We also share your information with third party service providers that provide services on our behalf, including, for example:

• recruitment and work agencies,
• IT services providers, such as those providing technical and support services in connection with the application and recruitment process, and
• competency test providers and others who help us fill job vacancies and assess the suitability of candidates and progress applications. 

We require all our third party service providers to implement appropriate security measures to protect your information consistent with our policies and any data security obligations applicable to Deliveroo. 

We also share your information:

• if we are under a duty to disclose or share it in order to comply with (and/or where we believe we are under a duty to comply with) any legal obligation or regulatory requirement,
• in order to enforce our contractual terms with you,
• to protect the rights of Deliveroo, and
• with such third parties as we reasonably consider necessary in order to prevent crime, eg. the police or other law enforcement bodies, public prosecutors, external advisors (such as legal advisors, accountants), benefits providers, pension trustees and insurers.

In some cases the information we collect from you might be processed outside of your country of residence, such as the United States and countries in which Deliveroo operates. These countries may not have the same protections for your information as your country of residence. 

However, we take steps to ensure that adequate safeguards are implemented to protect your information in the same way as it would be if it was processed in your country of residence. This can include, for example, us entering into standard contractual clauses to ensure an adequate level of protection for your information when it’s transferred internationally. Please contact us using the contact details in the “Contact us” section for further information on the specific mechanism used by us when transferring your information.

7Retention of your information

We will only retain your information for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. In the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you, we retain your information for a longer period.

When determining the appropriate retention periods, we take into account factors including:

• our contractual obligations and rights in relation to the information involved,
• legal obligation(s) under applicable law to retain information for a certain period of time,
• statute of limitations under applicable law(s),
• our legitimate interests for retaining the information (please see “Use of your information” section),
• whether there is an actual or potential dispute, and
• guidelines issued by relevant data protection authorities.

8. Security

We adopt robust technologies and policies to protect your information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

We have implemented procedures to deal with any data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will take steps to protect your information, we cannot guarantee the security of your information transmitted to Deliveroo; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

9. Your Rights

Depending on applicable data protection law and under certain circumstances, you may have certain rights in relation to the information we hold about you. These may include:

• The right to be informed.This is the right to be provided with clear, transparent and easily understandable information about how we use your information and about your rights. This is why we’re providing the information in this policy.
• The right of access. This is also known as a “data subject access request” or the right to receive a copy of the information we hold about you and to check that we are processing it lawfully.
• The right to rectification. This is the right to have any incomplete or inaccurate information we hold about you corrected, though in some cases we need to verify the accuracy of the new information you provide to us. 
• The right to erasure. This is also known as “the right to be forgotten” or the right to request the deletion or removal of certain of the information that we hold about you where there is no good reason for us continuing to process it. This right is not absolute and only applies in certain circumstances, meaning that the law permits us and in some cases obliges us to keep certain information after your request to exercise this right has been processed. 
• The right to restrict processing. This is the right to block or suppress further use of your information in certain circumstances. When processing is restricted, we may still have a lawful reason to hold your information, but we will not use it further.
• The right to data portability. This is the right to receive your information in a structured, commonly used and machine-readable format transferred to a third party. This right is not absolute and only applies in certain circumstances.
• The right to withdraw consent. Where we rely on consent to use information, this refers to the right to withdraw that consent at any time. Withdrawing consent will not, however, make unlawful our use of your information before you withdraw your consent. If you withdraw your consent, we may not be able to process your application or continue with your recruitment process.
• The right to object to processing. This is the right to object to certain types of processing of your information, including processing for direct marketing purposes and profiling. 
• The right not to be subject to a decision based solely on automated processing of your information. If we use automated processes to make a decision about your application, you can exercise this right by asking for a human review of the decision and the information on which the decision was based. 

Whether you can exercise these rights depends on applicable data protection law, but if you would like to enquire about exercising any of these rights, please contact our Data Protection Officer in writing at dpo@deliveroo.com.

If you are unhappy with how we have handled your information you can contact (depending on applicable data protection law) your local data protection authority. We would, however, really appreciate the chance to deal with your concerns before you approach an authority and so we please ask that you contact us first. Contact details for local data protection authorities can be found on the following links:

• UK – Information Commissioner’s Office
• France – Commission Nationale de l’Informatique et des Libertés
• Belgium – Autorité de la protection des données 
• Ireland – Data Protection Commission
• Italy – Garante per la protezione dei dati personali
• Netherlands – Autoriteit Persoonsgegevens
• Poland – Urząd Ochrony Danych Osobowych
• UAE – Commissioner of Data Protection 
• Qatar – Data Protection Office
• Kuwait – Communication and Information Technology Regulatory Authority
• Hong Kong – Office of the Privacy Commissioner for Personal Data
• Singapore – Personal Data Protection Commission

10. Changes to our Privacy Policy

We update this privacy policy from time to time, so please check back from time to time for updates and, where appropriate, we may notify you of changes by email.

This privacy policy was last published on: 10/01/2024

Deliveroo group companies: