Privacy Policy

1. Who We Are

This Privacy Policy explains how Haste Global Ltd ("Haste", "we", "us", "our") collects, uses, stores, and shares your personal data when you use the Haste platform (the "Platform"). Haste Global Ltd is registered in England and Wales (Company Number 16569263). Our registered address is available via Companies House. Haste is the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at hello@gohaste.co.

2. What Personal Data We Collect

a) Data you provide to us directly:

• Full name
• Email address
• Phone number
• Delivery addresses
• Payment information (processed securely via our payment processor — we do not store full card details)
• Account login credentials
• Any communications you send to us, including support enquiries

b) Data we collect automatically:

• Device information (device type, operating system, browser type)
• IP address and approximate location data
• App usage data, including pages visited, order history, and interaction patterns
• Cookies and similar tracking technologies (see Section 9)

c) Data we receive from third parties:

• Delivery status and location data from Stuart Delivery and other logistics partners
• Payment confirmation data from our payment processor
• Analytics data from marketing and analytics tools

3. How We Use Your Personal Data

We use your personal data for the following purposes:

• To create and manage your Haste account
• To process and fulfil your orders, including passing necessary details to retailers and delivery partners
• To take and process payment on behalf of retailers, as their commercial agent
• To provide live order tracking from store to your door
• To communicate with you about your orders, including confirmations, updates, and delivery notifications
• To send you marketing communications, including promotional offers and platform updates, where you have given your consent or we have a legitimate interest in doing so
• To improve and personalise your experience on the Platform
• To detect, investigate, and prevent fraudulent or unlawful activity
• To comply with our legal and regulatory obligations

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Contract: Processing necessary to fulfil your orders and manage your account
• Legitimate interests: Fraud prevention, platform security, service improvement, and direct marketing to existing customers where this does not override your rights
• Consent: Where you have opted in to receive marketing communications or agreed to non-essential cookies
• Legal obligation: Where we are required to process data to comply with applicable law

5. Who We Share Your Data With

We share your personal data only where necessary and with the following categories of third party:

a) Stuart Delivery and logistics partners:

We share your name, delivery address, phone number, and order details with Stuart Delivery (a DPD Group company) and any other logistics partners we use, solely for the purpose of fulfilling your delivery. These partners act as data processors on our behalf.

b) Payment processors:

We share the necessary payment and order information with our payment processor to facilitate secure transactions. Our payment processor is PCI-DSS compliant. Haste does not store your full card details.

c) Retailers on the Platform:

We share your name, order details, and delivery address with the relevant retailer to enable them to prepare and dispatch your order. Retailers receive only the data necessary to fulfil your specific order.

d) Marketing and analytics tools:

We use third-party marketing and analytics tools to understand Platform usage, improve our service, and deliver relevant marketing communications. These tools may process data such as device information, IP address, and usage patterns. Where required, we obtain your consent before using such tools. We do not sell your personal data to any third party. We require all third parties to process your data securely and only for specified, lawful purposes.

6. Marketing Communications

With your consent, or where we have a legitimate interest as an existing customer, we may contact you by email or push notification with information about new retailers, promotions, and Platform updates. You can opt out of marketing communications at any time by clicking "unsubscribe" in any marketing email, adjusting your notification preferences in the Haste app settings, or contacting us directly at hello@gohaste.co. Opting out of marketing will not affect transactional communications related to your orders.

7. How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purposes set out in this Policy, or as required by law:

• Account data: Retained for the duration of your account and for up to 6 years following closure, in line with statutory limitation periods
• Order data: Retained for 6 years for tax, accounting, and legal purposes
• Marketing preferences: Until you withdraw consent or opt out
• Fraud and security records: As long as necessary to protect Haste and its users

8. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: To request a copy of the personal data we hold about you
• Right to rectification: To request correction of inaccurate or incomplete data
• Right to erasure: To request deletion of your data in certain circumstances
• Right to restrict processing: To request that we limit how we use your data
• Right to data portability: To receive your data in a structured, machine-readable format
• Right to object: To object to processing based on legitimate interests, including direct marketing
• Rights related to automated decision-making: To not be subject to solely automated decisions that significantly affect you

To exercise any of these rights, please contact us at hello@gohaste.co. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

The Platform uses cookies and similar tracking technologies to enhance your experience, analyse usage, and support our marketing activity. We use the following types of cookies:

• Essential cookies: Necessary for the Platform to function correctly. These cannot be disabled.
• Analytics cookies: Help us understand how users interact with the Platform, so we can improve it.
• Marketing cookies: Used to deliver relevant advertising and track the effectiveness of our campaigns.

You can manage your cookie preferences through the cookie settings on the Platform or via your browser settings. Disabling non-essential cookies will not affect your ability to place orders.

10. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, or disclosure. All data is transmitted over encrypted connections (HTTPS). Payment data is handled exclusively by our payment processor. Access to personal data within Haste is restricted to those who need it to perform their role. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO as required by law.

11. International Data Transfers

We aim to keep your data within the UK and European Economic Area (EEA) wherever possible. Where any third-party service provider processes data outside the UK or EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the ICO or equivalent protections.

12. Children's Privacy

The Platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at hello@gohaste.co and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes via the Platform or by email. The date at the top of this Policy indicates when it was last updated.

14. Use of Automated Systems

Haste uses automated systems to detect and prevent fraud, abuse of the Platform, and violations of our Terms and Conditions. These systems may analyse account activity, order patterns, and payment behaviour to identify suspicious or fraudulent conduct. Where automated systems flag activity as potentially fraudulent or abusive, this may result in your account being suspended or permanently closed without manual review. If you believe your account has been incorrectly affected by an automated decision, you have the right to request human review by contacting us at hello@gohaste.co. We will respond within one calendar month.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us at:

Haste Global Ltd

hello@gohaste.co

Company Number 16569263, registered in England and Wales. Registered address available via Companies House.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk at any time.

Haste Global Ltd — Company No. 16569263 — Registered in England and Wales