Privacy Policy - Juice Planet

Juice Planet App allows customers to browse the menu and place orders directly from their phone using the app. As a single-vendor shop, it provides a simple platform to view available items, customize orders, and complete payments. The app features Click & Collect, enabling customers to choose their pickup time, view order history, and receive real-time updates about their order.

This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

This policy is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Interpretation and Definitions
Lawful Basis for Processing
Collecting and Using Your Personal Data
Third-Party Services and SDKs
Retention of Your Personal Data
Transfer of Your Personal Data
Delete Your Personal Data
Disclosure of Your Personal Data
Security of Your Personal Data
Children's Privacy
Links to Other Websites
Your Rights Under UK GDPR
Changes to this Privacy Policy
Contact Us

Interpretation and Definitions

Interpretation

The words with initial capital letters have meanings defined below. These definitions apply whether they appear in singular or plural.

Definitions

For the purposes of this Privacy Policy:

Account means a unique account created for You to access our Service or parts of our Service.

Affiliate means an entity that controls, is controlled by, or is under common control with a party.

Application refers to Juice Planet, the mobile application provided by the Company, available on Android (Google Play Store) and iOS (Apple App Store).

Company (referred to as "the Company", "We", "Us" or "Our") refers to Juice Planet, United Kingdom.

Country refers to: United Kingdom.

Device means any device that can access the Service such as a mobile phone or digital tablet.

Personal Data is any information that relates to an identified or identifiable individual.

Service refers to the Application.

Service Provider means any natural or legal person who processes data on behalf of the Company.

Usage Data refers to data collected automatically, generated by the use of the Service or from the Service infrastructure.

You means the individual accessing or using the Service.

Lawful Basis for Processing

Under the UK GDPR, We process Your Personal Data on the following legal bases:

Contract: Processing is necessary to fulfil orders You place through the Application and to provide Our Service to You.
Consent: You have given consent for specific purposes such as receiving promotional communications and push notifications.
Legitimate Interest: Processing is necessary for Our legitimate interests, such as improving the Service, preventing fraud, and ensuring security.
Legal Obligation: Processing is necessary to comply with applicable UK laws and regulations.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with the following personally identifiable information:

Phone number — used for account registration and OTP (One-Time Password) verification via SMS
Name — used for Your profile and order identification
Email address — used for order confirmations, receipts, and account communications
Address — used for Your profile and account details
Payment information — card details, Google Pay, or Apple Pay tokens processed securely by Stripe (We do not store Your full card details)
Order history and transaction data — records of items ordered, amounts paid, discount codes used, and order status

Location Data

With Your permission, We collect and use Your device's location data to:

Show You nearby store and pickup locations
Enhance Your Click & Collect experience

You can enable or disable location access at any time through Your device settings.

Usage Data

Usage Data is collected automatically when using the Service and may include IP address, browser type and version, pages visited, time spent, unique device identifiers, and other diagnostic data.

When accessing the Service via a mobile device, We may collect information such as device type, device unique ID, mobile operating system, mobile browser type, and other diagnostic data.

Push Notification Data

We collect Your device's push notification token (via Firebase Cloud Messaging) to send You real-time updates about Your orders, promotional offers, and important service announcements. You can opt out of push notifications at any time via Your device settings.

Use of Your Personal Data

We may use Personal Data to:

Provide and maintain our Service, including processing and fulfilling Your orders.
Manage Your Account and registration via phone number verification.
Process payments securely through our payment provider (Stripe).
Send You order confirmations, status updates, and receipts via email and push notifications.
Verify Your identity through SMS-based OTP authentication.
Show You store location and pickup details.
Apply discount codes and promotional offers to Your orders.
Contact You via email, SMS, push notifications, or in-app messages regarding Your orders or account.
Provide news, special offers, and information about our products or services (with Your consent).
Process refunds when applicable (e.g., vendor cancellation or unconfirmed orders).
Analyze usage trends and improve our Service.

Sharing Your Personal Data

We may share information with:

Payment Processors: Stripe processes Your payment data to complete transactions.
Authentication Providers: Firebase (Google) processes Your phone number for OTP verification.
Cloud Service Providers: Amazon Web Services (AWS) hosts Our servers and database.
Analytics Providers: To help Us understand how You use the Service.
Business transfers: In the event of mergers, acquisitions, or sale of assets.
Law enforcement: When required by law or to protect Our rights.
With Your consent for any other purposes.

Third-Party Services and SDKs

Our Application uses the following third-party services that may collect and process Your data:

Firebase (Google) — Used for phone number authentication (OTP/SMS verification), push notifications (FCM), and analytics. Firebase may collect device identifiers, IP address, and phone numbers.
Firebase Privacy Policy

Stripe — Used for secure payment processing including card payments, Google Pay, and Apple Pay. Stripe collects payment card details, billing information, and transaction data. We do not store Your full card number on Our servers.
Stripe Privacy Policy

Google Maps / Location Services — Used for store location display and address lookup. May collect location data when You grant permission.
Google Privacy Policy

Amazon Web Services (AWS) — Used for hosting Our backend servers and database. Your data is stored on AWS servers located in the United Kingdom (London region).
AWS Privacy Policy

Retention of Your Personal Data

We retain Your Personal Data only as long as necessary to fulfil the purposes described in this policy. Specifically:

Account data: Retained for as long as Your account is active.
Order history: Retained for up to 7 years for accounting and legal compliance.
Payment data: Processed and stored by Stripe in accordance with their retention policy. We only retain transaction IDs and order amounts.
Usage data: Retained for up to 12 months for analytics purposes.

Transfer of Your Personal Data

Your information is primarily stored on servers located in the United Kingdom. However, some of Our third-party service providers (such as Firebase and Stripe) may process data in other countries. Where data is transferred outside the UK, We ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

By using the Service, You consent to such transfers where necessary for the provision of the Service.

Delete Your Personal Data

You have the right to request deletion of Your Personal Data. You can:

Delete Your account directly from the Application settings.
Email Us at juiceplanet.management@gmail.com to request full data deletion.

Upon receiving a valid deletion request, We will delete Your Personal Data within 30 days, except where We are required to retain it for legal obligations (e.g., financial records for tax compliance). We will also instruct Our third-party providers to delete Your data where possible.

Disclosure of Your Personal Data

Business Transactions: In mergers or acquisitions, Your data may be transferred.
Law Enforcement: We may disclose Personal Data when legally required by UK law or court order.
Other Legal Requirements: To comply with law, protect rights, prevent wrongdoing, ensure safety, or defend against liability.

Security of Your Personal Data

We take the security of Your data seriously and implement the following measures:

All data transmitted between the Application and Our servers is encrypted using HTTPS/TLS.
Payment processing is handled by Stripe, which is PCI DSS Level 1 certified.
User authentication is managed through Firebase with SMS-based OTP verification.
Access to Our servers and database is restricted and protected by firewalls.
We use JWT (JSON Web Tokens) for secure API authentication.

While We strive to use commercially acceptable means to protect Your Personal Data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Children's Privacy

Our Service is not intended for anyone under the age of 16. We do not knowingly collect Personal Data from children under 16. If You are a parent or guardian and believe Your child has provided Us with Personal Data, please contact Us. We will take steps to remove such information from Our servers.

Links to Other Websites

Our Service may link to third-party websites. We are not responsible for their content, privacy policies, or practices. We encourage You to review the privacy policy of every site You visit.

Your Rights Under UK GDPR

Under the UK GDPR and Data Protection Act 2018, You have the following rights:

Right of Access: You can request a copy of the Personal Data We hold about You.
Right to Rectification: You can request correction of inaccurate or incomplete data.
Right to Erasure: You can request deletion of Your Personal Data (see "Delete Your Personal Data" above).
Right to Restrict Processing: You can request that We limit how We use Your data.
Right to Data Portability: You can request Your data in a commonly used, machine-readable format.
Right to Object: You can object to the processing of Your data for marketing purposes.
Right to Withdraw Consent: Where processing is based on consent, You can withdraw it at any time.

To exercise any of these rights, please contact Us at juiceplanet.management@gmail.com. We will respond to Your request within 30 days.

If You are not satisfied with Our response, You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Where changes are significant, We will notify You via push notification or email.

You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have questions about this Privacy Policy or wish to exercise Your data rights, contact us:

juiceplanet.management@gmail.com

Juice Planet

Contents