Privacy Policy

Beehalf Ltd ("Beehalf", "we", "our", or "us") is committed to protecting and respecting your privacy.

1. OUR APPROACH TO PRIVACY
This privacy policy sets out how we use data that identifies or is associated with you ("personal information") when you use our app(s) (including via mobile or desktop), any website or webpage operated by us (including https://www.beehalf.ai/), and any services we provide or otherwise interact with us (together the "Services") either as a customer (“User”) or delivery driver or cyclist (“Rider”).

2. ABOUT US
Beehalf Ltd (company no. 15349575) is the data controller of the personal information we hold about you.

Our registered and postal address is The Retreat, 406 Roding Lane South, Woodford Green, Essex, England, IG8 8EY.

Our data protection officer can be contacted at [email protected].

3. PERSONAL INFORMATION WE COLLECT ABOUT YOU AND HOW WE USE IT
The table at Annex 1 sets out the categories of personal information we collect about you and how we use that information. The table also lists the legal basis which we rely on to process the personal information.

More generally, you may provide us with personal information when you:

are using our Services;

communicate with us (whether through the Services on the in-app chatbot, online including via social media, or by email);

submit your application to us to be a Rider; and

when you answer our surveys or participate in our events, campaigns and partnerships.

4. USE OF YOUR GOOGLE ACCOUNT
When you create your user account with us, we will request your permission to access your Google account (including your Gmail inbox and Google Calendar). This permission is required in order for us to provide you with the Services. As set out in detail in our User Terms, this access enables the Services to:

proactively identify emails received from specific third-party sellers (such as Amazon) containing instructions on how to return a purchase to help you with the returns process; and

access to your Google Calendar to suggest convenient parcel collection times and locations to actions returns on your behalf.

Once your consent has been provided, our Services interact with your Google account using Google Workspace APIs ("GW APIs"). Further information regarding our use of your personal data obtained through GW APIs is set out below:

Data Usage: The personal data obtained through GW APIs is used solely for the purpose of providing and improving the Services as outlined above. We do not use this personal data for any other purposes.

AI/ML Models: We do not use any personal data obtained through GW APIs to develop, improve, or train generalised AI or Machine Learning (ML) models. All AI/ML-related activities, if any, are strictly confined to providing or improving the functionality of your use of our Services and are not applied to any broader AI/ML initiatives.

Data Retention: As set out at section 5 below, we retain your personal data for only as long as necessary to fulfil the purposes described in this privacy policy or as required by law.

Special categories of personal data

We do not generally seek to collect any special categories of personal data (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data) or criminal offence or convictions data about you, but this type of personal data may be collected incidentally when our Services interact with a user’s Gmail inbox or Google Calendar.

5. DATA RETENTION
We will store the personal information we collect about you for no longer than necessary for the purposes set out in the table above in accordance with our legal obligations and legitimate business interests. When we have no ongoing legitimate business need or legal obligation to process your personal information, we will either delete or anonymise it or, if this is not possible at the time (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, as well as the applicable legal, regulatory, tax, accounting, or other requirements. How long we retain your personal information will also depend on the type of account you have with us and whether your account has been deactivated or deleted.

6. RECIPIENTS OF PERSONAL INFORMATION
We may share your personal information with the following:

Our Riders: we will share with our riders only the limited personal information required to enable them to fulfil a User’s return.

Service providers: we may share your personal information with our advisers, service providers and third parties that perform services for us or on our behalf (for example our data hosting provider).

Purchasers and third parties in connection with a business transaction: your personal information may be disclosed to third parties in connection with a transaction, such as a merger, sale of assets or shares, reorganisation, financing, change of control or acquisition of all or a portion of our business.

Law enforcement, regulators and other parties for legal reasons: we may share your personal information with third parties as required by law or if we reasonably believe that such action is necessary to (i) comply with the law and/or the reasonable requests of law enforcement; (ii) detect and investigate illegal activities and breaches of agreements; (iii) enforce our terms and/or (iv) exercise or protect the rights, property, or personal safety of Beehalf, its users or others.

Other members of the Beehalf group: where applicable, we may share your personal information with our affiliates (for example, where they provide services on our behalf).

7. MARKETING AND ADVERTISING
From time to time, we may contact you with information about the Services, including sending you marketing messages and asking for your feedback on our Services.

Marketing messages we send will be by email, text and in app messaging. For some marketing messages, we may use personal information we collect about you to help us determine the most relevant marketing information to share with you.

We will only send you marketing messages if we have your consent or, if consent is not required under applicable law, you have not opted out of receiving messages from us. You can withdraw your consent or opt out of receiving further communications at a later date, by clicking on the unsubscribe link at the bottom of our marketing emails, (in the case of text) texting STOP to our marketing texts or toggling your preferences within your account settings in our App.

Unsubscribing from marketing emails will not unsubscribe you from system or legal notifications which we may need to send as part of the Services we provide. From time to time, we may need to contact you by email or via our support team.

8. STORING AND TRANSFERRING YOUR PERSONAL INFORMATION
Security. We implement appropriate technical and organisational measures, including encryption, to protect your personal information against accidental or unlawful access, destruction, loss, alteration, or damage. All personal information we collect will be stored on our secure servers. Where data processing is carried out on our behalf by a third party, we take steps to ensure that appropriate security measures are in place to prevent unauthorised disclosure of personal information.

Despite these precautions, however, we cannot guarantee the security of information transmitted over the internet or that unauthorised persons will not obtain access to personal information.

International transfers of your personal information. The personal information we collect may be transferred to and stored in countries outside of the jurisdiction you are in where our affiliates and our third party service providers have operations. If you are located in the UK or European Economic Area ("EEA"), your personal information may be transferred outside of the UK and EEA respectively to a country which is not recognised by the UK or European Commission as ensuring an adequate level of protection for personal data. These international transfers of your personal information will be made pursuant to appropriate safeguards, such as standard contractual clauses adopted by the European Commission and UK government (as applicable). If you wish to enquire further about the safeguards used, please contact us using the details set out at the end of this privacy policy.

9. YOUR RIGHTS IN RESPECT OF YOUR PERSONAL INFORMATION
In accordance with applicable privacy law, you have the following rights in respect of your personal information that we hold:

Right of access. You have the right to obtain access to your personal information.
Right of portability. You have the right, in certain circumstances, to receive a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your personal information to another person.
Right to rectification. You have the right to obtain rectification of any inaccurate or incomplete personal information we hold about you without undue delay.
Right to erasure. You have the right, in some circumstances, to require us to erase your personal information without undue delay if the continued processing of that personal information is not justified.
Right to restriction. You have the right, in some circumstances, to require us to limit the purposes for which we process your personal information if the continued processing of the personal information in this way is not justified, such as where the accuracy of the personal information is contested by you.
Right to withdraw consent. If you have provided consent to any processing of your personal information, you have a right to withdraw that consent (without affecting the lawfulness of our processing prior to you having withdrawn your consent).

Right to object: you also have the right, in certain circumstances, to object to any processing based on our legitimate interests in certain circumstances. You can also object to our direct marketing activities for any reason by clicking on the unsubscribe link at the bottom of our marketing emails, (in the case of text) texting STOP to our marketing texts or toggling your preferences within your account settings in our App. See paragraph 7 for further details.

Please note that the above rights are not absolute, and we may be entitled to refuse requests, wholly or partly, where exceptions under the applicable law apply.

If you wish to exercise one of these rights, please contact us using the contact details at the end of this privacy policy. You may also review, remove, and edit some of the personal information you have submitted to us by logging into your account on the Services.

You also have the right to lodge a complaint to your national data protection authority. If you are in the UK, information on how to contact the Information Commissioner is available at www.ico.org.uk. If you are located in the EU, further information about how to contact your local data protection authority is available at: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

10. COOKIES AND SIMILAR TECHNOLOGIES
Our website uses cookies and similar technologies to distinguish you from other users of our Services. Please refer to our Cookie Policy for more information as to the way in which we use cookies on our Services.

11. LINKS TO THIRD PARTY SITES
Our Services may, from time to time, contain links to and from third party websites, including those of our business partners, advertisers, news publications and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. Please check the individual policies before you submit any information to those websites.

12. CHANGES TO THIS POLICY
We may update this privacy policy from time to time and so you should review this page periodically. When we change this privacy policy in a material way, we will update the "last modified" date at the end of this privacy policy. Changes to this privacy policy are effective when they are posted on this page.

13. CHILDREN (16 and under)
You must not use our Services if you are under the age of 16. No one under age 16 may provide any information through our Services. If you are under 16, you must not use any of our services or features, register an account, make any purchases, or provide any information including but not limited to: your name, address, telephone number, email address, username. We do not knowingly collect personal information relating to anyone under this age. If we learn we have collected or received personal information from an individual under 16, we will promptly delete that information. If you have any information from or about a child under 16, please contact [email protected].

14. CONTACTING US
If you have any questions, comments and requests regarding this Privacy Policy, you can contact us:

By post:

FAO Data Protection Officer
Beehalf Ltd
The Retreat
406 Roding Lane South
Woodford Green
Essex
IG8 8EY

By email: [email protected]

This privacy policy was last modified on 1 September 2024.