C2C Delivery - Privacy Statement

Effective Date: May 8, 2023

This Privacy Statement delineates the methods and procedures through which C2C Delivery Inc., along with its subsidiaries and related entities ("C2C Delivery", "our", "we", or "us") amass, utilize, reveal, and otherwise manage personally identifiable information in connection with our Digital Infrastructure and Offered Services. Our Digital Infrastructure encompasses: (i) our web presences, inclusive of affiliated subdomains, (ii) our applications designed for mobile, tablet, and other intelligent devices, (iii) application programming interfaces, (iv) web-based services, and (v) all other tools, technology, and programs presently in use or potentially employed in the future, each of which refers to this Privacy Statement. "Offered Services" encompasses all services linked with the Digital Infrastructure.

This Privacy Statement does not extend to or incorporate our privacy practices concerning the personal information of prospective employees, current employees, and other staff members.

Should any term within this Privacy Statement lack a clear definition, such term shall bear the meaning ascribed to it within our Terms of Use.

Upon accessing or utilizing the Digital Infrastructure and/or Offered Services, you thereby acknowledge that you have read, comprehended, and consent to our gathering, retention, employment, and distribution of your personal information as articulated in this Privacy Statement and within our Terms of Use.

1. Methods of Procurement, Application, and Dissemination of Your Personal Information

1.1. Personal Identifiers and Client Records. Upon the establishment of an Account, completion of your Account profile, initiation of an order, subscription to a mailing list, or during any form of communication or engagement with us (irrespective of whether it's through an Account), we amass personal identifiers and client records such as your name, domicile, contact number, and electronic mail address. We may also glean identifiers like your name or email address from other individuals or commercial entities. Instances of such collection include, but are not limited to, receipt of identifiers (i) from a social network or authentication facilitator, such as Facebook, Amazon, or Google, if you employ these services to access the Platform; (ii) from other C2C Delivery users who recommend our Services to you; or (iii) from organizations of which you are a member, such as your employer or educational institution, that avail our enterprise services. Identifiers may also comprise numbers assigned to you like your IP address or a unique C2C Delivery account number, and data regarding your device and its software like your browser type, device type/model/manufacturer, operating system, and similar information. These identifiers are automatically procured or generated during your use of the Platform.

The aforementioned information may be employed to: (i) establish and administer your Account; (ii) expedite delivery services; (iii) engage in direct communication with you about the Services, as well as address any queries, issues, or concerns you or other users may present; (iv) scrutinize and enhance the use of the Platform and our Services; (v) identify and thwart fraud, abuse, or other detrimental activities, conduct security inquiries and risk assessments, and refine and enforce our security measures; and (vi) distribute marketing communications to you.

This information may be disseminated to advertising networks and other promotional partners for cross-context behavioral advertising. Refer to Section 2.1 below for additional details regarding your options concerning such cross-context behavioral advertising. We may also disclose identifiers and client records to certain Merchants as per our agreement with those Merchants. Furthermore, this information may be divulged to our service providers, or for other lawful purposes, as elaborated in Section 1.10 below.

C2C Delivery retains personal identifiers and client records for the duration of your account's existence with C2C Delivery, and for an additional period as determined necessary by C2C Delivery to comply with its legal obligations and to defend against legal claims.

1.2. Transactional Data. We amass transactional data from you, inclusive of credit or debit card specifications, when you enlist for our services or modify your preserved payment methodologies. We utilize this data to: (i) satisfy your requests and facilitate payment processes; and (ii) identify or mitigate fraud, abuse, or other injurious activities.

We refrain from selling transactional data to third parties or disseminating it to third parties for cross-context behavioral advertising. We likewise do not distribute this data to third parties for business or commercial objectives, although we may disclose it to our service providers, or for other lawful purposes, as expounded in Section 1.10 below.

C2C Delivery maintains transactional data for the duration of your account's existence with C2C Delivery, and for an additional period as determined necessary by C2C Delivery to adhere to its legal obligations and to defend against legal claims.

1.3. Commercial Data. Each time you request delivery through the Platform, we collect commercial data regarding you, such as your order history and purchasing patterns. This information can be employed to (i) expedite delivery services; (ii) scrutinize and enhance the use of the Platform and our Services; (iii) identify and thwart fraud, abuse, or other detrimental activities, conduct security inquiries and risk assessments, and refine and enforce our security measures; (iv) personalize your C2C Delivery experience, including which items we recommend to you and any advertisements you may encounter from us.

We may disseminate commercial data to advertising networks and other promotional partners for the purpose of cross-context behavioral advertising. Please refer to Section 2.1 below for additional details regarding your options concerning such cross-context behavioral advertising. We may also provide commercial data to certain Merchants when you order from them as part of our agreement with those Merchants. Furthermore, we may disclose commercial data to our service providers, or for other lawful purposes, as elaborated in Section 1.10 below.

C2C Delivery retains commercial data for the duration of your account's existence with C2C Delivery, and for an additional period as determined necessary by C2C Delivery to comply with its legal obligations and to defend against legal claims.

1.4. Digital Engagement Data. Upon utilization of the Platform, we automatically amass digital engagement data from you, including details pertaining to your interaction with the Platform, your browsing chronicle, and your search history. Dependent on your device and/or browser configurations, this information could include the website from which you navigated to our site, the website you are directed to upon exiting our site, the pages you peruse on the Platform, the links you activate on the Platform, whether you open our emails or engage the links we transmit, whether you access the Platform from multiple devices, page scrolling, and where you click or direct your mouse on our website.

We employ this data to (i) scrutinize and enhance the use of the Platform and our Services; (ii) identify and mitigate fraud, abuse, or other injurious activities, conduct security inquiries and risk assessments, and refine and enforce our security measures; (iii) personalize your C2C Delivery experience, inclusive of which items we recommend to you and any advertisements you may encounter from us; (iv) appraise the effectiveness of our advertising and marketing campaigns; and (v) distribute marketing communications to you.

We may procure digital engagement data through a multitude of tracking technologies, inclusive of cookies, web beacons, embedded scripts, mobile SDKs, location-identifying technologies, and analogous technology (collectively, "tracking technologies"), and we may engage third-party partners or service providers to assist in this endeavor, such as Google. Data we automatically amass about you or your device may be amalgamated with other personal information we directly collect, and our third-party partners may combine this information with data gathered from other devices, websites, or applications. For information about our and our partners' employment of cookies and associated technologies to automatically amass information, and choices you may have concerning its collection, please refer to our "About Our Ads" policy. You can acquaint yourself further with Google's practices at http://www.google.com/policies/privacy/partners.

We may disseminate digital engagement data to advertising networks and other promotional partners for the purpose of cross-context behavioral advertising. Please refer to Section 2.1 below for additional details regarding your options concerning such cross-context behavioral advertising. We may also disclose digital engagement data to our service providers, or for other lawful purposes, as expounded in Section 1.10 below. C2C Delivery maintains digital engagement data for the duration of your account's existence with C2C Delivery, and for an additional period as determined necessary by C2C Delivery to adhere to its legal obligations and to defend against legal claims.

1.5. Geospatial Information. We may automatically amass data pertaining to your approximate geographical location upon utilization of the Platform. For instance, your IP address provides a rough estimation of your whereabouts. We may also collect data about your precise location, contingent upon your consent to allow us access to your device’s geolocation. We utilize this locational information to (i) expedite order and delivery Services; (ii) scrutinize and enhance the use of the Platform and our Services; (iii) identify and thwart fraud, abuse, or other detrimental activities, conduct security inquiries and risk assessments, and refine and enforce our security measures; and (iv) personalize your C2C Delivery experience, inclusive of which Merchants and items we recommend to you.

We may employ the Google Maps API to derive geospatial information. Google utilizes various technologies to ascertain your location, including IP address, GPS, and other sensors that may, for instance, provide Google with data on nearby devices, WiFi access points, and cell towers (refer to the Google privacy policy and the Google Maps terms of service for additional information).

We refrain from selling geospatial information to third parties or disseminating it to third parties for cross-context behavioral advertising. We likewise do not distribute this information to third parties for business or commercial objectives, although we may disclose it to our service providers, or for other lawful purposes, as expounded in Section 1.10 below.

C2C Delivery maintains geospatial information for the duration of your account's existence with C2C Delivery, and for an additional period as determined necessary by C2C Delivery to adhere to its legal obligations and to defend against legal claims.

1.6. Audio-Visual Data. We may amass audio-visual data from you, such as call recordings, when you engage with our customer service team. We employ this data to scrutinize and enhance the use of the Platform and our Services.

We abstain from selling audio-visual data to third parties or disseminating it to third parties for cross-context behavioral advertising. We likewise do not distribute this information to third parties for business or commercial objectives, although we may disclose it to our service providers, or for other lawful purposes, as expounded in Section 1.1 below.

C2C Delivery maintains audio-visual data for the duration of your account's existence with C2C Delivery, and for an additional period as determined necessary by C2C Delivery to adhere to its legal obligations and to defend against legal claims.

1.7. Safeguarded Attributes. We may amass data pertaining to your age. We refrain from selling this data to third parties or disseminating it to third parties for cross-context behavioral advertising. We likewise do not distribute this data to third parties for business or commercial objectives, although we may distribute it to our service providers, or for other lawful purposes, as expounded in Section 1.10 below.

C2C Delivery maintains safeguarded attributes data for the duration of your account's existence with C2C Delivery, and for an additional period as determined necessary by C2C Delivery to adhere to its legal obligations and to defend against legal claims.

1.8. Deductions. Through your utilization of our Services, we may derive conclusions regarding your preferences, such as your favored restaurant types for food orders and potential dish inclinations. These deductions aid us in customizing your C2C Delivery experience, including Merchant and item recommendations, as well as any advertisements you may view from us.

We abstain from selling this data to third parties or disseminating it to third parties for cross-context behavioral advertising. We likewise do not distribute this information to third parties for business or commercial objectives, although we may disclose it to our service providers, or for other lawful purposes, as expounded in Section 1.10 below.

C2C Delivery maintains deductions about you for the duration of your account's existence with C2C Delivery, and for an additional period as determined necessary by C2C Delivery to adhere to its legal obligations and to defend against legal claims.

1.9. Correspondence Contents. We retain correspondences ensuing from your engagements with us or with Delivery Partners, inclusive of emails, postal mail, chat messages, as well as responses and viewpoints you provide when participating in surveys. We utilize these correspondences to (i) interface with you directly about the Services, including your orders, and address any queries, issues, or concerns you or other users may possess; (ii) examine and enhance the Platform and our Services; and (iii) identify and mitigate fraudulent, abusive, or otherwise detrimental activities, execute security investigations and risk evaluations, and strengthen our security protocols.

We refrain from selling correspondence contents to third parties or distributing them to third parties for cross-context behavioral advertising. We likewise do not disseminate this data to third parties for business or commercial activities, though we may disclose it to our service providers, or for other lawful objectives, as expounded in Section 1.10 below.

C2C Delivery preserves correspondence contents for the duration of your account's existence with C2C Delivery, and for an additional period as determined necessary by C2C Delivery to comply with its legal obligations and to defend against legal claims.

1.10. Additional Instances Involving the Utilization or Disclosure of Your Information. Beyond the aforementioned circumstances, C2C Delivery may find it necessary to utilize or disclose your personal data for the following reasons:

(i) Provisioning of our Services, inclusive of the sharing of information with Merchants, delivery service providers, payment processing entities, and other service providers that we depend on for order processing or other service providers that assist us in ensuring the seamless operation of the Platform and our Services;

(ii) Fulfillment of your requests, including the provision of information to other C2C Delivery users;

(iii) Adherence to legal and regulatory mandates and proceedings, encompassing corporate reporting obligations, subpoenas, or law enforcement inquiries; and/or

(iv) Upholding our rights, which includes the (a) investigation, prevention, and/or mitigation of contraventions of our Terms of Use, (b) detection, suppression, or prevention of fraud or the reduction of credit risk and collection of outstanding debts to us, (c) exercise or safeguarding of the rights, property, or personal safety of C2C Delivery, our visitors, or others, and/or (d) enforcement of our agreements with third parties and business associates.

In certain instances, when we divulge your information to third parties, those entities will utilize and process your payment data in accordance with their own distinct privacy policies and/or procedures.

We reserve the right to disseminate your personal data to:

(i) Entities that are owned or controlled by C2C Delivery Inc., as well as other entities that are under common ownership with C2C Delivery Inc., which notably includes our subsidiaries (i.e., any organization over which we exert control) or our ultimate holding company (i.e., any entity that exerts control over us) and any subsidiaries thereof, for operational or commercial objectives or as otherwise detailed in this Privacy Policy; or

(ii) A third-party entity during the course of, or in relation to, a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of all or a fragment of the company's assets, or in the event of insolvency, bankruptcy, or receivership.

Additionally, we may utilize or divulge personal information for a specific purpose that was not anticipated in this Privacy Policy. In such a situation, we will distinctly disclose that utilization to you and, when necessary, secure your consent.

2. Your Authority Over Personal Data

2.1. Exercising Your Right to Opt Out of Cross-Context Behavioral Advertising or the So-Called “Sales” of Your Information.

Under the legislative framework of certain U.S. jurisdictions, you may be entitled to opt out of our handling or dissemination of your data for the purpose of online cross-context behavioral advertising. Be aware that specific state laws may also enable you to opt out of the “sale” of your data to third parties in return for valuable consideration. While we do not sell your information in return for monetary compensation, some methods detailed in Section 1 through which we might disclose your information to third parties or utilize analytical or online advertising tools that result in your information being disclosed to third parties may be subject to this opt out privilege. If you wish to opt out of having your personal data shared for cross-context behavioral advertising or from “selling” your data, you may lodge a request at contact@c2c.delivery.

It is not obligatory to establish an account with us to opt out, but we may request that you supply additional personal data so that we can accurately identify you to monitor adherence with your opt out request. We will only utilize personal data provided in an opt out request to examine and abide by the request. If you opt not to provide this data, our capacity to process your request may be limited to the extent that we are able to identify you within our data systems, including processing your request solely on the device from which the request was submitted.

Certain devices and browsers may possess settings to restrict the manner in which website and application operators such as C2C Delivery can monetize your information or employ it for cross-context behavioral advertising. Upon detecting the activation of a legally-acknowledged browser-based opt out preference signal for your device or browser (such as Global Privacy Control), we will strive to respect such preference in accordance with and to the degree mandated by the pertinent law in the required jurisdictions. If you are utilizing an Apple device, you may have the ability to instruct the C2C Delivery application to refrain from “tracking” you, in which case we will not gather your device’s IDFA or employ information you submit through the app for cross-context behavioral advertising. Even if you request not to be tracked on an Apple device, it is advisable to still select one of the above links if you wish to opt out of the “sale” of your data or of cross-context behavioral advertising through your browser.

2.2. Regulation of Push Notifications and Our Access to Your Device Data. You retain the power to regulate our access to your device data or opt out of push notifications via the “Settings” application on your device. For instance, you can rescind permission for the app to access your location data through your device settings, although we may persist in approximating your location based on your IP address or other methods.

2.3. Communication Preferences. You have the ability to cease receiving promotional email communications by selecting the “unsubscribe link” provided in such correspondences. You are unable to opt out of service-related communications (e.g., Account verification, transactional communications, alterations/updates to features of the services, technical and security notifications). You also have the option to unsubscribe from certain order-related text (SMS) or multimedia (MMS) messages by responding with "STOP" to the number transmitting the message. Please refer to our Terms of Use for additional information on communications from or on behalf of C2C Delivery.

2.4. Data Administration. If you are a resident of specific states such as California, Colorado, Connecticut, Utah, and Virginia, you are endowed with the right to request certain actions concerning your data. We will strive to accommodate your requests if you are a resident of another state as well, to the extent possible and in compliance with the law.

You may initiate a request to acquire a copy of your Personal Information, to comprehend what we amass and how we disseminate your Personal Information, or to eliminate your Personal Information. We will need to authenticate your identity prior to executing your request, which may necessitate us to solicit additional personal information from you or require you to log into your account.

In specific circumstances, we may decline such a request, such as when we are incapable of verifying your identity, or when we are precluded from deleting your information due to legal or regulatory reasons. If we are unable to fulfill all or part of your request, we will elucidate the reasons for our inability to comply with the request.

You may initiate a request by emailing contact@c2c.delivery with the subject line “Privacy Request.”

You may also rectify or update your personal information, such as your name, email address, physical address, payment information, and phone number, on your account profile page.

If you opt to employ any of these methods to manage your data, we will not impose penalties, charge differential prices, or provide varying quality of services, except to the degree that you curtail our ability to process personal information necessary to deliver our Services. For instance, if you opt for data deletion, we may no longer be capable of offering you our products and Services or engage with you in the previous manner.

If you have queries concerning your request, you may email us at contact@c2c.delivery. Residents of Colorado, Connecticut, and Virginia may contest the denial of a request by emailing contact@c2c.delivery, and we will respond within the legally stipulated time frame, including a written explanation of the outcome of your appeal.

2.5. Submissions By Authorized Representatives. Under specific circumstances, you may authorize another individual (hereafter referred to as an "authorized agent") to lodge requests concerning your information on your behalf. The authorized agent is obligated to present adequate evidence demonstrating that they have been granted the legal authority to act in your stead, including, but not limited to, proof of a legally endorsed power of attorney. We reserve the right to reject a request if we are unable to authenticate the authorized agent's mandate to act on your behalf.

Please be advised that for reasons pertaining to privacy and security, we may opt to address communications in response to an authorized agent’s request directly to you as opposed to the authorized agent. For instance, we may need to authenticate your identity and confirm directly with you that you have extended permission to the authorized agent to lodge the request, and fulfilling requests from authorized agents may necessitate additional time.

3. How We Safeguard and Retain Your Information

3.1. Information Storage and Transmission. Should you establish an Account on the Platform as a non-U.S. visitor, your utilization of and/or access to the Platform or Services indicates your assent to the gathering, transmission, storage, and processing of your data within and to the United States. For individuals situated in the European Union or other regions with differing data collection and usage regulations from U.S. law, be aware that we may transfer data, inclusive of personal information, to a jurisdiction that may not have identical data protection regulations as your jurisdiction.

3.2. Ensuring Your Information's Security. We are committed to the security of your information and implement a combination of physical, administrative, and technological measures intended to uphold the security and integrity of all information amassed through our Platform and Services. Nonetheless, no security mechanism is entirely infallible, and we cannot vouch for the absolute security of our systems. Understand that the protection of your personal information also falls under your purview. We thus emphatically recommend that you periodically alter your passwords, avoid reusing passwords, employ a blend of alphabets and numerals, ensure usage of a secure browser, and exercise caution when disseminating your personal information on the internet. Should you become aware or suspect that your Account credentials have been lost, stolen, misused, or otherwise compromised, or in the event of any actual or suspected unauthorized usage of your Account, kindly contact us following the directions in the Contact Us section below.

4. Personal Information Pertaining to Minors

Our digital platforms and online Services are not designed for, nor do we intentionally, or knowingly gather or solicit personal information from individuals under the age of 16, and we do not consciously sell or disseminate personal information of individuals below this age. If we become aware that we have unintentionally obtained personal information from an individual under the age of 16, we will make efforts to expunge that data. If you are aware that we have gathered personal information from an individual under 16, please reach out to us at contact@c2c.delivery.

5. External Websites

Our digital platforms and online Services may incorporate links to third-party websites, plugins, and applications. Unless we explicitly present, link to, or expressly adopt or refer to this Privacy Policy, this Privacy Policy is not applicable to, and we do not bear responsibility for, any personal information practices of third-party websites and online services or the practices of other third parties. To familiarize yourself with the personal information practices of third parties, please refer to their individual privacy notices.

6. Marketing Initiatives

From time to time, we may institute marketing initiatives, such as competitions, raffles, joint marketing ventures, or services under joint brands. It is crucial that you thoroughly scrutinize the regulations and/or conditions pertaining to each marketing initiative you partake in, as the initiative may contain further vital information about our, a sponsor's, and/or another third party's handling of your personal information. In cases where the regulations or conditions of these marketing initiatives pertaining to the management of your personal information conflict with this Privacy Policy, the marketing initiative's rules will take precedence. When necessary to fulfill your request or application, or to facilitate your participation in the marketing initiative, we will divulge personal information to the co-sponsors of the marketing initiative.

7. Geographically-Specific Disclosures

We may be obligated by law or choose to provide varying or supplementary disclosures regarding the processing of personal information about residents of specific countries, regions, or states. Please refer to the following disclosures that may be relevant to you:

California. Under the stipulations of California's "Shine the Light" legislation (Civil Code § 1798.83), residents of California that maintain a business relationship with us have the right to request from us, once per annum, at no charge, a list of the third parties to whom we have disclosed their personal information (if any) for the direct marketing purposes of such third party in the preceding calendar year, along with the type of personal information disclosed to those third parties. If you are a resident of California and would like a copy of this notice, kindly submit a request to contact@c2c.delivery with the subject line "C2C Delivery California Shine the Light Notice." Please allow at least 30 days for a response. To prevent the disclosure of your personal information to third parties for their direct marketing purposes, please send your request to contact@c2c.delivery.

8. Modifications to This Privacy Policy

We reserve the right to periodically amend this Privacy Policy. Whenever we effectuate modifications to this Privacy Policy, we will adjust the "effective date" located at the beginning of this Privacy Policy. In addition to making the revised Privacy Policy and effective date available, we may choose to offer supplementary notification of the updated Privacy Policy, such as by dispatching an email to you or by providing a notice through our Platform and/or Services. All modifications will become effective as of the date of publication unless stated otherwise. If you do not terminate your Account prior to the date on which the amended Privacy Policy comes into effect, your ongoing access to or utilization of the Platform and/or Services will constitute acceptance of the amended Privacy Policy.

9. How to Reach Us

Should you have any inquiries or requests pertaining to this Privacy Policy or other matters related to privacy, please transmit an email to contact@c2c.delivery.