Privacy policy.

Tuck Trucks Privacy Policy 

 

1. About 

Tuck Trucks takes your privacy seriously and is committed to protecting and respecting it. 

We want you to understand how we collect and use information about you. 

This privacy notice (“Notice”) contains important information on who we are, on how and why we collect, store, use and share personal data, and on your rights in relation to your personal data. 

It is important that you read this Notice, together with any other privacy policy or processing policy that we may provide to you on specific occasions, so that you are fully aware of how and why we use your personal data. This Notice supplements our other notices and policies and does not override them. 

This Notice and our website, https://tucktrucks.co.uk (“Website”), are not intended for use by children and we do not knowingly collect personal data in relation to children. 

2. Contact Details 

We are The Ho-So Initiative Limited (referred to from now as “we” and via similar words, such as “our”). We trade under the name “Tuck Trucks”. We are a company incorporated in England and Wales under company number 12465469, and our registered office is at Devonshire House, 1 Devonshire Street, London W1W 5DR. 

Under data protection law, we are known as a “data controller”. This means we are responsible for the way in which we collect and process your personal data and must meet our legal obligations in relation to it. We are registered as a data controller with the Information Commissioner’s Office, which is the UK’s supervisory authority for data protection matters. 

Name: Rupert Smith 

Address: The Ho-So Initiative Ltd, t/a Tuck Trucks 
c/o Citroen Wells 
Devonshire House 
1 Devonshire Place 
London W1W 5DR 

Phone Number: 07391 127446 

E-mail: hq@tucktrucks.co.uk 

3. Our key data handling principles 

We need to capture some of your personal data to provide our service. When handling it, we live by the following principles: 

  • We do not collect more personal data than we need. 

  • When we collect it, we do not use personal data more widely than is necessary. 

  • We safeguard your personal data. 

4. What is personal data? 

Any information that relates to an identified, or identifiable, living person is personal data. 

You are identifiable if it is reasonably likely that your identity could be inferred from that data alone or from that data in combination with other information. 

5. When do we collect personal data? 

While carrying out our core business, which involves acting as a portal to connect customers with vendors who are selling food, we collect personal data at the following times: 

Direct interaction with you. For example, when you: 

  • Make an order 

  • Register to receive emails or newsletters from us 

  • Take part in competitions or contact us via social media or other means 

  • Contact us (for example, with a question or to provide feedback) 

  • Apply for a position with us. 

From third parties. For example, when you: 

  • Interact with one of our vendors and provide personal data that is provided to us 

  • Mention us on social media 

  • Are one of our business partners and we receive information, for example, when you are copied on an email. 

(Note: although this Notice will primarily be of interest to consumers, it is equally relevant to individuals working at our suppliers and at other businesses with which we have a relationship.) 

From automated technologies. As you use the Website, we collect Technical Data (see definition in section 6 below) about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies, subject to receiving your consent for the setting of non-essential cookies.  

6. What types of personal data do we collect? 

The types of personal data we may collect include: 

Identity Data: such as your name, title, date of birth, and gender 

Contact Data: principally your email address, although we may collect your billing address, delivery address, mobile number. 

Financial Data: namely your payment card details (although payments are made through our payment provider, and we do not ordinarily have access to your card details – see section 8 below) 

Transaction Data: namely details about payments you make to us (and any refunds given), and products and services you have purchased. 

Technical Data: including your internet protocol (IP) address, browser type and version, time-zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access the Website. 

Profile Data: including your user name, any password, any feedback and survey responses that you provide, and in some cases biographical information that you provide 

Usage Data: including information about how you use our Website and services 

Marketing Data: including your opt-in/opt-out preferences in relation to electronic marketing 

Applying for a role 

Note that if you apply for a post with us, and provide your CV, we will receive more detailed personal data (if you provide it), including biographical data about institutions you have attended and other posts that you have held. 

Aggregated Data 

We also collect Aggregated Data, which is large-scale statistical data. We use it for matters such as understanding what percentage of Website users look at a particular page. Aggregated Data is not personal data, as it will not reveal your identity. However, if we combine Aggregated Data with your personal data, so that you can be identified, we will treat the combined data as personal data and use it in accordance with this Notice. 

Special Categories 

We do not ordinarily collect any Special Categories of personal data about you (this is the legal term describing details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences. We may ask about allergies so that we can help safeguard customers, but we do not record such information in a way that would identify you.   

Note: do you have to provide personal data? 

In general, no – although in some situations we may be unable to provide a service if you do not. If we need to collect personal data by law, or to perform a contract with you, and you do not provide it, we may be unable to proceed.  

7. How do we use your personal data? 

We use your personal data to perform contracts with you, when our legitimate interests allow us to, to comply with the law, and when you consent. 

Whenever we use your personal data, we need what is known as a “lawful basis”. These are prescribed by law and are limited in number. Please see the glossary below for more about lawful bases. Sometimes we may have more than one lawful basis for the same processing activity. 

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are as follows: 

  • Your consent: You provide your consent when using the service and can remove this consent at any time. You can do this by contacting hq@tucktrucks.co.uk 

  • We have a contractual obligation: If you are a venue, vendor, partner, or other affiliate, we will keep data about your company, and personal data about individuals within it, for the purposes of fulfilling our contractual obligations. 

  • We have a legal obligation: We are legally required to retain certain information, for example for the purposes of tracking taxes or invoices. This is anonymised where possible. 

Consent 

We will make sure we have your consent before sending direct-marketing communications to you via email or SMS.   

You have the right to withdraw consent to such e-marketing at any time. This will not affect the lawfulness of marketing that took place prior to the time when we action your withdrawal of consent. Any marketing emails will contain an opt out link in the footer, or you can contact hq@tucktrucks.co.uk 

As explained in our Cookies Policy, we will not set non-essential cookies unless we have your consent.  

8. How do we share your personal data? 

We share your personal data only when necessary and to people in the following categories: 

Business partners and suppliers 

Like most businesses, we rely on partners to provide some of the services that we offer to you. These include: 

  • Vendors of food and drink with whom you may form a contract. These will have access to such personal data that we hold as is necessary for them to perform their contract with you.  

  • Payment-processing providers, such as Stripe and Zettle. When you enter your payment details, you are taken from our Website and to a site hosted by the payment provider (via a link embedded in our software), and so we do not directly receive your card details. 

  • E-mail, mail, and SMS service providers 

  • Technical and support partners, such as the businesses that host our platform, and companies who provide technical support and back-up services. 

  • Professional advisers, such as lawyers, accountants, auditors, and insurers, who require such information to provide services to us or for other lawful purposes 

  • Merger or acquisition partners, to the extent that sharing your personal data is necessary. 

Law-enforcement agencies 

We may be required to share personal data with a law-enforcement agency (or similar regulatory body) in connection with an investigation. 

The platform may provide functionality to upload files and images to cloud storage. We assume no responsibility or liabilities for the contents of these files, and any unlawful content will be reported to an appropriate law enforcement agency. 

HM Revenue & Customs 

We are required by law to maintain certain data for a period of years to enable proper assessment of taxation and similar matters. 

9. How long will your personal data be kept? 

We retain your personal data for no longer than is reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation. 

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data (and whether we can achieve those purposes through other means), and the applicable legal, regulatory, tax, accounting, and other requirements. 

10. Marketing 

We may store your contact details, and carry out marketing profiling activities, for direct electronic marketing purposes. If you have given your consent, we may contact you about our products or services that may be of interest to you. 

If, having opted in, you later prefer not to receive any direct electronic marketing communications from us, you can opt out at any time. We will give you the option to opt out each time we send a marketing communication by electronic means. 

Opting out will not affect our ability to use your personal data for the other purposes set out in this Notice, and it will not affect the lawfulness of electronic marketing carried out prior to the time when we actioned your opt-out request. 

11. International transfers 

We may transfer your personal data to another location if we consider it reasonably necessary for the purposes set out in this Notice. 

Where we do so, we will sure that transfers: 

  • are made to countries that have been deemed to provide an adequate level of protection to personal data; or 

  • are carried out under approved standard contractual clauses that enable the transfer. 

12. Keeping your personal data secure 

We have appropriate security measures in place designed to prevent data loss, to preserve data integrity, and to regulate access to the data. Only our authorised employees and contractors, and those referred to in this Notice, have access to your personal data. 

All our employees and contractors who have access to your personal data are required to adhere to our Privacy Policy and we have in place contractual safeguards with our third-party data processors to ensure that your personal data is processed only as instructed by us. 

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone. 

We take all reasonable steps to keep your data safe and secure and to ensure the data is accessed only by those who have a legitimate interest to do so. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorised access. 

13. Cookies 

Our platform uses cookies to enable essential functionality. Any uses outside of this are detailed in our cookie policy. 

14. Third-Party links 

This Website may include links to websites, plug-ins and applications that are owned by someone other than us. Clicking on those links may allow the owner to collect or share your personal data. We have no control over other sites, are we not responsible for their privacy statements. We encourage you to read the privacy policy of every website you visit. 

15. Changes to this Notice 

We may change this Notice from time to time. Please check this Notice on our Website regularly to ensure you are aware of the most recent version. 

16. Your data protection rights 

Under data protection law, you have rights including: 

  • Your right of access: You have the right to ask us for copies of your personal information.  

  • Your right to rectification: You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 

  • Your right to erasure: You have the right to ask us to erase your personal information in certain circumstances.  

  • Your right to restriction of processing: You have the right to ask us to restrict the processing of your personal information in certain circumstances.  

  • Your right to object to processing: You have the the right to object to the processing of your personal information in certain circumstances. 

  • Your right to data portability: You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances. 

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. 

We may first need to verify your identity (and, in certain cases, verify that you have authority to make the request on another person’s behalf). 

Complex requests may take longer, in which case we will respond within one month to notify you of this. If your request is “excessive, repetitive, or unfounded”, we may charge a reasonable fee or refuse to comply with your request. 

Please contact us at hq@tucktrucks.co.uk if you wish to make a request. 

17. How to complain 

In the first instance, we hope you raise any issues with us directly – in almost all situations, matters can be resolved very simply. To do this, please use the details set out in section 2 above. 

Should you find it necessary, you have a right to raise a concern with the UK’s information regulator, the Information Commissioner’s Office: https://ico.org.uk/.