Privacy policy

Who we are

Zaymo provides local delivery riders and ordering websites for restaurants in London. Zaymo is a trading name of StackWrx Ltd, company number 17108167, 19 Well Street E9 7QX, registered with the Information Commissioner's Office (registration pending). Contact: [email protected].

If you order from a restaurant

When you order on a restaurant's website, or a restaurant books a Zaymo delivery for you:

• What we get: your name, phone number, email (if you give it), delivery address and what you ordered.
• Why: to deliver your order, send you a tracking link, and sort out any problem you report.
• Who's in charge of it: the restaurant is the controller of your details. Zaymo processes them on the restaurant's behalf. Questions about your order or your data can go to the restaurant or to us.
• Payments are handled by Stripe on the restaurant's account. We never see or store your card number.
• Your delivery driver sees your first name, address and delivery notes during the job. Your PIN confirms handover.
• We don't send you marketing, and we don't sell your data.
• Problem reports: if you report a problem, we keep your message and any photo you add, so the restaurant and Zaymo can resolve it. The photo is deleted 90 days after it's resolved.

If you're a rider (driver)

• What we collect: your name, phone number, email, date of birth, home address, National Insurance number (or, if you deliver through a Limited Company, its name, number, tax reference, VAT number and registered address), vehicle type, an emergency contact if you give one, the jobs you do and what you're paid, your bank details (to pay you), photos you take in the app (sealed bags, appeal proof), and the documents you send us: a photo of you, proof of your National Insurance number (such as a payslip or HMRC letter), your right-to-work share code (or a photo of your passport) and, for mopeds, motorbikes and cars, a driving licence check code and a photo of your insurance certificate. If you're a substitute, we also know which rider you work for.
• Why: to check you can work in the UK and legally ride or drive for deliveries, to pay you, to contact you (and your emergency contact if something happens on a job), and because the law requires platforms like Zaymo to report to HMRC what riders earn each year, with their name, date of birth, address and National Insurance number.
• Your photo: once a person at Zaymo has checked it's you, the restaurant and customer see it while you're on their job (until it's delivered), so they know who's coming. Nobody else sees it, and it's deleted when you delete your account.
• Keeping it safe: your address, National Insurance number, emergency contact, bank details, share codes and document photos are encrypted. Only Zaymo staff can see them, and every look is recorded.
• Location: only while you're online or on a job, never when you're offline. We use it to offer you nearby jobs, show restaurants and customers where their order is, confirm you're at the restaurant, and review appeals.
• How long we keep it: your location record during jobs and job photos are deleted after 30 days. Document photos and share codes are deleted 90 days after we've checked them. Job and pay records, and the details HMRC reporting needs, are kept for 6 years, as tax law requires. The result of your right-to-work check is kept while you work with us and for 2 years afterwards.
• Automatic decisions: some decisions are made automatically (for example, passing a job to another rider when you're very late). You can appeal any of them in the app, and a person will review it (UK GDPR Article 22).
• Deleting your account: you can do this in the app. See the rider terms for what's kept.

If you run a restaurant

• What we collect: your business details, the names and emails of your staff logins, bookings, orders and billing records.
• Payments: your Stripe account is held by Stripe; we see the payments made through it and take our fees from them.

Who we share data with

Only the services needed to run Zaymo, each under a data processing agreement:

• Stripe (payments)
• Google Firebase (rider sign-in and job notifications)
• Hetzner (our servers, in the EU)
• Cloudflare (website security and speed)
• Brevo (sending tracking emails)
• Komoot's Photon (address suggestions as you type, from OpenStreetMap). We send only the text typed in the address box, from our own server, so it can't tell who you are.

Your rights

You can ask to see, correct or delete your data, object to how we use it, or ask us to limit it. Email [email protected]. If you're unhappy with our answer, you can complain to the Information Commissioner's Office (ico.org.uk).

Cookies

We only use cookies needed for the site to work (keeping you signed in, your basket). No advertising or tracking cookies.