Rapid Eats Privacy Policy

Rapid Eats respects your privacy and is committed to handling personal information responsibly, transparently, and securely.

This Privacy Policy explains how Rapid Eats collects, uses, discloses, retains, and protects personal information when you interact with:

• The Rapid Eats website;
• The Rapid Eats mobile or installable web application;
• The Rapid Eats online marketplace;
• Delivery and pickup services;
• Customer accounts;
• Merchant services;
• Driver services and applications;
• Business partnership programs;
• Customer support;
• Marketing communications; and
• Any other Rapid Eats service that links to this Privacy Policy.

In this Policy, “Rapid Eats,” “we,” “us,” and “our” refer to Rapid Eats and its applicable affiliates, operators, successors, and assigns. “Platform” refers to our websites, applications, ordering systems, and related technology. “Services” refers to the Platform and our ordering, delivery, pickup, merchant, driver, support, and related services.

This Privacy Policy is a notice describing our information practices. It does not replace any consent or authorization required by law.

This Privacy Policy applies to personal information Rapid Eats processes about:

• Website visitors;
• Customers;
• Prospective customers;
• Account holders;
• Order recipients;
• Merchant owners and employees;
• Merchant applicants;
• Delivery drivers and driver applicants;
• Business contacts;
• Support users;
• Promotional participants; and
• Other individuals who interact with Rapid Eats.

This Policy does not apply to information processed independently by third parties under their own privacy policies, including participating merchants, payment processors, mapping providers, application stores, social media platforms, and websites not operated by Rapid Eats.

The information we collect depends on how you interact with Rapid Eats, which features you use, your device permissions, and the type of transaction involved.

Rapid Eats may use personal information to:

Rapid Eats may disclose personal information to the following categories of recipients.

Rapid Eats does not sell personal information to third parties for money.

We may use analytics, social media, or advertising technologies that receive limited information such as:

• Cookie identifiers;
• Device identifiers;
• IP address;
• Browser activity;
• Campaign interactions; and
• Website usage information.

Depending on the technology used and the law that applies, some disclosures for cross-context behavioral or targeted advertising may be legally defined as a “sale,” “sharing,” or “targeted advertising,” even when no money is exchanged.

If Rapid Eats uses such technologies and applicable law provides an opt-out right, we will provide an appropriate method to exercise that right, such as:

• Cookie Preferences;
• “Your Privacy Choices”;
• “Do Not Sell or Share My Personal Information”; or
• A recognized browser-based opt-out signal.

Rapid Eats does not knowingly sell or share personal information belonging to children under 16 for targeted advertising.

Before publishing this Policy, Rapid Eats must confirm whether advertising pixels, session-recording tools, or cross-site advertising technologies are active and configure the required consent and opt-out controls.

Rapid Eats and its providers may use:

• Cookies;
• Local storage;
• Software development kits;
• Pixels;
• Tags;
• Device identifiers;
• Log files; and
• Similar technologies.

These technologies may support:

You may manage certain cookies through our cookie-preference tool or your browser settings.

Disabling essential technologies may prevent parts of the Platform from working correctly.

Rapid Eats may send promotional communications when permitted by law.

You may opt out of:

• Marketing emails by using the unsubscribe link;
• Eligible marketing text messages by replying STOP;
• Push notifications through device settings; and
• Certain marketing preferences through your account.

Opting out of marketing will not prevent necessary transactional messages about:

• Orders;
• Deliveries;
• Payments;
• Refunds;
• Account security;
• Support cases; or
• Legal notices.

Message and data rates may apply to SMS communications.

Rapid Eats should maintain records of marketing consent and opt-out requests.

You may manage device-location access through your mobile device or browser settings.

Depending on the Platform and device, you may be able to choose:

• No location access;
• Approximate location;
• Precise location;
• Access while using the app; or
• Background access.

Rapid Eats should request only the level of location access reasonably necessary for the applicable feature.

Customers may be able to enter a delivery address manually instead of using device location.

Drivers may need location access to receive delivery opportunities, support routing, provide order tracking, confirm arrival, and complete deliveries.

Disabling driver location access may prevent the driver from receiving or completing delivery assignments.

Rapid Eats retains personal information only for as long as reasonably necessary for the purposes described in this Policy.

Retention periods may depend on:

• Account status;
• Order and transaction history;
• Tax and accounting requirements;
• Chargeback periods;
• Fraud-prevention needs;
• Legal obligations;
• Contract requirements;
• Insurance requirements;
• Merchant or driver relationships;
• Safety investigations;
• Support cases;
• Applicable limitation periods; and
• Litigation or legal holds.

Examples include:

• Account information may be retained while the account remains active.
• Order and payment records may be retained for financial, tax, dispute, and legal purposes.
• Driver and merchant records may be retained during the relationship and for an appropriate period afterward.
• Delivery photographs may be retained for delivery verification, support, fraud prevention, and dispute resolution.
• Identification records should be retained only as long as necessary for verification, compliance, or documented legal requirements.
• Marketing preferences may be retained to honor opt-out requests.
• Security logs may be retained to detect, investigate, and prevent abuse.
• Information subject to litigation, investigation, audit, or legal hold may be retained until the matter is resolved.

When information is no longer required, Rapid Eats will take reasonable steps to delete, de-identify, aggregate, or securely dispose of it.

Backup copies may remain for a limited period until overwritten or deleted through standard system processes.

Rapid Eats may create aggregated or de-identified information that cannot reasonably be linked to a specific individual.

We may use this information for:

• Business analytics;
• Marketplace performance;
• Service-area planning;
• Merchant reporting;
• Delivery optimization;
• Product development;
• Research;
• Security; and
• Other lawful business purposes.

Rapid Eats will not attempt to re-identify information that has been properly de-identified unless necessary to test de-identification methods, protect security, or comply with law.

Rapid Eats uses administrative, technical, and physical safeguards designed to protect personal information in light of:

• The sensitivity of the information;
• The size and nature of the business;
• Available technology;
• Operational requirements; and
• Reasonably foreseeable threats.

Safeguards may include:

• Access controls;
• Role-based permissions;
• Secure authentication;
• Encryption in transit;
• Encryption or other protections at rest where appropriate;
• Tokenized payment processing;
• Logging and monitoring;
• Secure backups;
• Software updates;
• Staff access restrictions;
• Vendor management;
• Security training;
• Incident response procedures; and
• Secure disposal practices.

No website, application, database, or transmission method can be guaranteed completely secure.

You are responsible for:

• Protecting your password;
• Keeping your device secure;
• Signing out of shared devices;
• Avoiding fraudulent links;
• Reviewing account activity; and
• Promptly reporting suspected unauthorized access.

Do not send complete payment-card details, passwords, Social Security numbers, or unrequested identification documents through ordinary email or support chat.

Rapid Eats maintains procedures designed to identify, investigate, contain, and respond to suspected security incidents.

If a security incident involving personal information requires notification under applicable law, Rapid Eats will provide notice to affected individuals and government authorities as required.

Notice may be provided by:

• Email;
• Postal mail;
• Platform notification;
• Website notice; or
• Another legally permitted method.

The timing and content of any notice will depend on applicable law, law-enforcement needs, the nature of the incident, and the information involved.

Depending on your relationship with Rapid Eats and applicable law, you may request to:

• Access personal information associated with you;
• Correct inaccurate information;
• Update account information;
• Delete certain personal information;
• Obtain a portable copy of certain information;
• Opt out of marketing;
• Manage cookie preferences;
• Limit certain location collection;
• Opt out of legally defined targeted advertising;
• Withdraw consent where processing is based on consent; or
• Appeal the denial of a privacy request where required by law.

These rights are subject to exceptions.

Rapid Eats may retain or decline to delete information when necessary to:

• Complete a transaction;
• Maintain financial records;
• Detect fraud;
• Protect safety;
• Exercise legal rights;
• Comply with law;
• Resolve disputes;
• Enforce agreements;
• Maintain suppression lists;
• Preserve security logs; or
• Satisfy another lawful business purpose.

You may submit a privacy request by contacting:

Email: contact@rapid-eats.com

Subject: Privacy Request

You may also write to:

Please include:

• Your full name;
• The email address associated with your account;
• Your telephone number, if applicable;
• The type of request;
• Sufficient information to identify the relevant account; and
• A description of the information or action requested.

Do not send a complete Social Security number, payment-card number, password, or unrequested identification document.

Rapid Eats may need to verify your identity before completing a privacy request.

Verification may include:

• Confirming access to your email;
• Confirming access to your telephone number;
• Confirming account details;
• Matching order information; or
• Requesting additional information reasonably necessary to prevent unauthorized access.

We will use verification information only to evaluate and respond to the request.

If we cannot reasonably verify your identity, we may deny or limit the request to protect your information.

Where permitted by law, an authorized agent may submit a request on your behalf. We may require proof of the agent’s authority and direct verification from you.

Rapid Eats will not discriminate against you for exercising a privacy right provided by applicable law.

You may request account deletion through available account settings or by contacting Rapid Eats.

Deleting an account may result in:

• Loss of order history access;
• Loss of saved addresses;
• Loss of favorites;
• Loss of unused promotional credits where permitted;
• Loss of stored preferences; and
• Inability to use account-dependent features.

Account deletion does not necessarily delete every associated record immediately.

Rapid Eats may retain information required for:

• Tax and accounting;
• Payment reconciliation;
• Chargebacks;
• Fraud prevention;
• Legal compliance;
• Safety;
• Dispute resolution;
• Enforcement; and
• Other legitimate purposes.

Where complete deletion is not available, information may be restricted, de-identified, or separated from active account use where appropriate.

Rapid Eats is not directed to children under 13 and does not knowingly collect personal information online from children under 13.

Individuals under 18 may not independently create a Rapid Eats account or enter into a transaction through the Platform.

A parent or legal guardian may place an order intended for a minor using the adult’s account and contact information.

If Rapid Eats learns that it collected personal information directly from a child under 13 without legally sufficient parental authorization, we will take reasonable steps to delete it.

A parent or guardian who believes a child has provided personal information may contact contact@rapid-eats.com.

Rapid Eats does not knowingly sell or share a child’s personal information for targeted advertising.

The Platform may include links to or integrations with:

• Participating merchant websites;
• Payment processors;
• Mapping services;
• Social media platforms;
• Application stores;
• Authentication providers;
• Business partners;
• Delivery providers; and
• Other third parties.

Third parties may collect information directly from you under their own privacy policies.

Rapid Eats is not responsible for independent third-party privacy practices. Review the privacy policy of any third-party service before providing personal information.

If you interact with Rapid Eats through social media, the social media platform may collect information about your activity according to its own privacy policy.

Rapid Eats may receive:

• Public profile information;
• Comments;
• Messages;
• Reactions;
• Advertising interactions; and
• Information you authorize the platform to provide.

Do not post order numbers, addresses, payment details, driver information, or other sensitive information publicly.

Rapid Eats may use automated systems to assist with:

• Fraud detection;
• Payment-risk assessment;
• Driver assignment;
• Merchant recommendations;
• Service-area eligibility;
• Delivery estimates;
• Promotional eligibility;
• Account security; and
• Platform moderation.

These systems may consider information such as:

• Account activity;
• Transaction patterns;
• Device information;
• Location;
• Order history;
• Payment-provider signals; and
• Delivery activity.

Rapid Eats does not intend to make decisions producing legal or similarly significant effects solely through automated processing without human review where such review is required by law.

You may contact support if you believe an automated decision was made in error.

Rapid Eats primarily operates in the United States.

Personal information may be processed in the United States or another location where an authorized service provider operates.

Data-protection laws in those locations may differ from the laws where you live. Rapid Eats will use reasonable safeguards and comply with applicable legal requirements for the transfer and processing of personal information.

A merchant, corporate customer, or other organization may create or administer an account for its authorized users.

In those circumstances, the organization may be able to:

• Manage user access;
• View business orders;
• View account activity;
• Review invoices;
• Manage payment settings;
• Assign permissions; and
• Receive reports.

The organization is responsible for notifying its authorized users about its own information practices.

Rapid Eats is not responsible for an organization’s independent use of information it receives through its authorized business account.

Rapid Eats may update this Privacy Policy to reflect:

• Changes to our Services;
• New technology;
• New legal requirements;
• New service providers;
• New operating practices; or
• Changes to how we process information.

The updated Policy will display a revised “Last Updated” date.

If a change materially affects how we use or disclose previously collected personal information, we will provide appropriate notice and obtain consent when required by law.

Notice may be provided through:

• The Platform;
• Email;
• Push notification;
• Account notification; or
• Another appropriate method.

We encourage you to review this Policy periodically.