Welcome and thank you for visiting. Restaurant Technology Solutions, LLC and its affiliates (“we”, “our”, or “us”) provide this Privacy Notice to explain our privacy and information practices for our Food Commerce Hub services (the “services”). When you access the Food Commerce Hub services through the Venmo app, you are interacting with our embedded ordering platform. Our Food Commerce Hub facilitates payment processing and transaction management between consumers, restaurants, and payment providers like PayPal.
Depending on the product or feature you use, we may act (i) as a service provider/processor to Venmo (and other payment providers) when we process personal data on their instructions to facilitate payments and related services; or (ii) as an independent business/controller when we determine the purposes and means of processing (for example, operating our website, managing user accounts, analytics, product improvements, and loyalty programs). Where we act as Venmo’s service provider/processor, Venmo is responsible for complying with applicable privacy obligations for that processing, and you should consult Venmo’s Privacy Statement and any related privacy notices for details on their practices and how to exercise your rights. Where we act as a business/controller, this Privacy Notice applies.
- Personal Data We Collect
- Use of Personal Data
- Sharing of Personal Data
- Data Protection Rights
- Data Transfer
- Data Retention
- Security
- Additional Terms
- Cookies Notice
PERSONAL DATA WE COLLECT
“Personal data” is defined as any information that can identify, relate to, describe, be associated with, or be reasonably capable of being associated with a particular individual. Personal data does not include anonymous, de-identified, or non-personal data. We collect the following types of personal data:
- Personal Data You Provide to Us. We collect personal data that you provide directly for a business or commercial purpose, such as when you access our website, enter into a contract, establish a user account with us, engage in our loyalty program, payment order information via our checkout process, register for an event or our services, through social media outlets, in connection with a potential business relationship with us, or by giving us your contact information through making an online order. This personal data may include your name, curbside pickup information, birthdate, email, phone number, order transaction information (including any comments you decide to provide such as dietary and order modifications), payment information, loyalty information, and certain feedback information.
- What We Get From Other Third Parties, Affiliates, and Subsidiaries. In certain circumstances, we collect personal data about you from certain third party partners, affiliates, and subsidiaries for a business and commercial purpose. We may combine this information with personal data provided by you. This helps us update, expand, and analyze our records and order transaction information, identify new customers, and create more tailored advertising to provide services, restaurant suggestions, or other products that may be of interest to you. This personal data may include your contact information, social media information, commercial information, and inferences and preferences related to your behavior. When you use Venmo to complete transactions through our Food Commerce Hub services, Venmo provides us with certain personal data including your name, email address, phone number, and with your explicit consent, your precise location data. If you choose not to share precise location, you may manually enter your city to see available restaurants and merchants. We act as Venmo’s data processor for this information, meaning we process it solely on Venmo’s behalf and in accordance with Venmo’s instructions. Please refer to Venmo’s Privacy Statement for notices on how this information is used. We do not use personal data that we process solely on behalf of partners like Venmo for tailored advertising.
- What We Automatically Collect from You. We collect the following information for a business and commercial purpose from you when you use the services:
- General System Information. Through your use of the services, we collect certain hardware and software information (including session-based interaction data,) from you and your device such as your device id, device type, network information, time zone, operating system version, order printing information, device id location, IP address, and other general system information.
- Cookies. We use necessary cookies, web beacons, and similar technologies when you use our services. For example, these cookies include the ability for us to operate the services, maintain your shopping cart, and perform analytics by recording certain user interactions, such as clicks and navigation paths, to measure performance and improve the user interface. Where required by applicable law, we obtain your consent before enabling non‑essential cookies and similar technologies. You can withdraw or adjust your preferences at any time by contacting us.
USE OF PERSONAL DATA
For personal data where we act as a controller (e.g., support and loyalty), we rely on our legitimate interests to improve our services. For data processed on behalf of Venmo, we process strictly according to Venmo’s instructions. Our primary purpose in collecting personal data is to facilitate and provide the services or information that you have selected to receive. Where required by law, we obtain your consent to use and process your personal data for these purposes. Otherwise, we rely on another authorized legal basis (including but not limited to the performance of a contract or legitimate interest) to collect and process your personal data. We use personal data for the following purposes:
- To Provide Your Requested Services. Our primary business and commercial purpose in collecting personal data is to facilitate and provide the services or information that you have selected to receive through either your consent or through entering a contract with us. For example, our core services relate to facilitating the sale of items to you and for us to potentially operate the loyalty program. In addition, in operation of the loyalty program, we may also combine previous order information via Otter. For personal data received from Venmo, we rely on Venmo’s explicit instructions in facilitating your transaction and providing our services, as well as performance of our contract with you.
- To Manage User Registrations. If you have registered for an account with us, we process your personal data for a business purpose by managing your user account for the purpose of performing our contract with you according to applicable terms of service.
- To Contact You. With your consent or, in some cases for our legitimate interest, we use your personal data for our business and commercial purpose to contact you for marketing purposes, including telemarketing calls, and to send marketing emails that we believe may be of interest to you, such as product announcements, loyalty program emails, newsletters, informational materials, and details on upcoming events.
- To Manage Payments. If you have provided financial information to us, we process your personal data to verify that information and to collect payments to the extent that doing so is necessary for our business purpose to complete a transaction and perform our contract with you.
- To Plan, Manage, and Facilitate Special Events. With your consent, we use your personal data for our business and commercial purpose in event planning and management, including registration, billing, and connecting with other event attendees, or to contact you further about relevant products and services.
- For Security, Legal Obligations, and Investigations. We use your personal data for our business purpose and legitimate interest to prevent, detect, mitigate, and investigate potential security issues, as well as fraudulent or illegal activity. We may also use your personal data for a legitimate interest to comply with and enforce applicable legal requirements or to protect our interests or the interests of other third parties. This also includes sharing personal data with others in connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company.
- For Improvements to Our Services and Products. We use your personal data for our business and commercial purpose and legitimate interest in connection with our products and services to diagnose technical problems, track and analyze usage, and make updates or improvements. For example, we may use your comments to improve or help guide future enhancements to our products and services.
SHARING OF PERSONAL DATA
Because our services are embedded within the Venmo app, we primarily act as a data processor or service provider, sharing data only as necessary to fulfill orders and process payments at the direction of Venmo. However, in instances where we provide direct services to you, such as managing a loyalty account or responding to a support inquiry, we may share information as an independent controller to facilitate those specific requests. We do not share data processed on behalf of our partners with third-party advertisers for their own marketing purposes.
- To Provide the Core Services. In order to facilitate your food ordering and payment transactions, we share certain personal data with key service partners. When you place an order through our Food Commerce Hub, we share your name and order details, and when you have consented to location sharing or provided city information, relevant location data with the restaurant and merchants to enable order fulfillment. When you use Venmo as your payment method, we share transaction details necessary to complete your payment, while Venmo separately provides us with your name, email address, and phone number as described in Section 1 of this Privacy Notice. We limit data sharing to what is necessary to provide the requested services and complete your transaction.
- Affiliates and Service Providers. We share personal data with our affiliates and like most businesses, we also share personal data with third-party service providers or vendors contracted to provide services on our behalf. Our service providers assist us by handling tasks such as IT services, data management, and order fulfillment.
- Advertisers. We may share personal data with our advertisers. Our advertisers may use your information to display advertisements to you through the services and advertisements for us on third party websites. As noted above, this does not apply to data processed solely on behalf of our partners like Venmo.
- Law Enforcement. We may share personal data with law enforcement agencies if we reasonably believe unlawful activities have occurred or the personal data may aid in an ongoing investigation. We may also share personal data with law enforcement agencies if we determine, in our sole judgment, that you have violated our agreements or policies or that the release of your personal data may protect the rights, property, interests, or safety of us, our affiliates or any other third party.
- Legal Processes. We may share personal data as required by, or permitted by, law, whether in response to subpoenas, court orders, other legal processes, or as we believe is necessary to exercise our legal rights, including defending against legal claims that have been or might be brought against us.
- Business Transfers. Your personal data may be transferred to a third party as a part of a potential sale, merger, reorganization or other similar transaction. In accordance with applicable laws, we will use reasonable efforts to notify you of any transfer of personal data to an unaffiliated third party.
- Consent. With your consent, we may disclose personal data about you to certain restaurant operators and other third parties. For example, at the checkout screen, your contact information will be provided to the restaurant and other information may be provided to Venmo. In addition, if you decide to create a loyalty account, such information will be directly provided to the restaurant.
DATA PROTECTION RIGHTS
Because we act in a dual capacity, the method for exercising your rights depends on the nature of your request. For personal data we process as a data processor or service provider on behalf of Venmo (such as transaction history), you should contact Venmo directly to exercise your rights. For personal data where we act as a controller (such as support logs or loyalty profiles), you may exercise your rights with us using the contact information below.
- Individual Rights. Subject to applicable privacy laws, you may have certain legal rights over the personal data we hold about you. These rights may include the right to access and to obtain a copy of your personal data processed by us, the right to restrict (including any withdrawal or objection rights) the processing of your personal data, or the right to access, correct, delete your personal data. However, please note that such rights are not absolute. They do not always apply and exemptions may be applicable. In response to any such request, you may be asked to verify your identity and/or provide information that helps us to better understand your request. If we are unable to comply with your request, we will explain why. As noted above, for personal data that we receive about you from Venmo, you should exercise your rights directly with Venmo using the contact information provided in Venmo’s Privacy Statement.
- Exercise of Such Rights. Subject to applicable privacy laws, to exercise your individual rights, you may send an email to [email protected]. If you are not satisfied with how we process your personal data, please let us know and we will take reasonable steps to investigate your concern. If you are not satisfied with our response, you have the right to make a complaint to the data protection authority in the jurisdiction where you live or work, or in the place where you think an issue in relation to your data has arisen. The contact details of each Data Protection Authority can be found at the following website: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en and https://ico.org.uk/global/contact-us/ (for the United Kingdom).
DATA TRANSFER
Your personal data may be stored and processed in the United States and in any other country where we or our affiliates, subsidiaries, or third-party service providers maintain facilities or personnel. When you provide personal data to us, we may process and transfer your data within the United States and around the world. We follow applicable data protection laws when transferring personal data, including EU standard contractual clauses.
DATA RETENTION
We will retain your personal data for as long as legally permitted or needed in light of the purpose(s) for which it was obtained and as outlined in this Privacy Notice. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you and provide the services to you; (ii) whether there is a legal obligation to which we are subject; or (iii) whether retention is advisable in light of our legal position.
SECURITY
We have technical and physical safeguards in place to help protect your personal data. However, no method of storage or transmission is 100% secure. We therefore urge you to exercise caution when conveying any personal data over the Internet. As when disclosing any information on the Internet, you should remain mindful that such information might be accessible by the public and, consequently, may be collected and used by others without your consent. You should also recognize that your use of the Internet and any other means of communication with us is solely at your own risk.
ADDITIONAL TERMS
- Please note that when you use Venmo to complete transactions through our Food Commerce Hub, we act as a data processor or service provider for your transaction data, while Venmo acts as the controller. or specific services where we act as a controller (such as support or loyalty), we are responsible for compliance with privacy laws. For core transaction processing, we operate as a data processor or service provider to Venmo and follow their instructions. Venmo's processing of your data is governed by their Privacy Statement, while our processing is governed by this Privacy Notice.
- Location Data Rights and Choices. You have multiple options regarding location data: (1) consent to precise location sharing through Venmo for enhanced features, (2) decline location sharing and manually enter your city. You may also request deletion of any location data we have collected by contacting us directly. Choosing manual city entry instead of precise location will not affect your ability to place orders, though some location-based features may be limited.
- This Privacy Notice does not apply to websites or applications offered by other organizations or individuals that may be displayed as content on our website, including point of sale systems or any delivery platforms. We encourage you to read the Privacy Notice of any third-party website or applications before transmitting personal data.
- The services are not directed to individuals under the age of 16 and we do not knowingly collect personal data from individuals under the age of 16.
- We reserve the right, at any time, to modify this Privacy Notice. You should review this Privacy Notice periodically so that you keep up to date on our most current policies and practices. We will note the effective date of the latest version of our Privacy Notice at the end of this Privacy Notice.
COMMUNICATIONS
If you have any additional questions or concerns about our Privacy Notice or any other privacy or security issue, please contact us at:
Attn: Legal & Compliance - Privacy Counsel
633 W 5th Street Fl 11
Los Angeles, CA 90071
If we need, or are required, to contact you concerning any event that involves information about you, we may do so by email, telephone, mail, or as otherwise required by law.
For questions specifically related to personal data we receive from Venmo through our Food Commerce Hub services, you may contact us using the information above. For questions about Venmo's separate processing of your data, please contact Venmo directly through their privacy contact methods in Venmo’s Privacy Statement.
STATE SPECIFIC DISCLOSURES
State Privacy Laws This section contains terms that reflect our commitment to comply with the California Consumer Privacy Act of 2018, as amended (the “CCPA”) and other US state privacy laws (together with the CCPA, “State Privacy Laws”). For the purposes of this section, “personal data” is defined as any information that can identify, relate to, describe, be associated with, or be reasonably capable of being associated with a particular individual or household. Please note that we act as a 'Service Provider' (as defined by the CCPA) for personal data processed on behalf of Venmo. For personal data collected for our independent business purposes, we act as a 'Business'.
- Information we collect, use, and disclose. We have collected the following categories of personal data from consumers within the last twelve (12) months:
- a. Identifiers – Such as the personal data you provide us and the personal data that we receive from third parties in the form of your name, business name, email, address, and telephone number.
- b. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) – Such as the personal data you provide us related to your payment details, signature, address, phone number, or other contact information.
- c. Commercial Information – Such as the personal data you provide us, the information we automatically collect from you, and information we receive from third parties. This personal data may be in the form of your contact information, cookies, and certain professional or social media information.
- d. Internet or Other Similar Network Activity – Such as the personal data we automatically collect in the form of cookies and general system information as well as other personal data collected from third parties including professional and social media information.
- e. Inferences – We may draw inferences through the personal data you provide us, the information we automatically collect from you, and the information we receive from third parties. These inferences may relate to your eater profile, loyalty profile, and other related analytics.
- f. Audio, Electronic, Visual, Thermal, or Similar Information – Such as audio recordings as part of our customer calls or support services for you.
- g. Geolocation Data – Such as the location of your delivery address, and with your explicit consent, precise location data received from Venmo to facilitate restaurant discovery and delivery coordination. Alternatively, manually entered city information when precise location consent is not provided.
We have disclosed to service providers and to third parties for a business purpose items a to g. We have collected and used for a business purpose items a to g and items a to g for a commercial purpose. Please visit the Personal Data We Collect and Sharing of Personal Data sections of the Privacy Notice for more information on what personal data we collect and disclose. Please visit the section on Use of Personal Data for additional information on how we use personal data.
Your rights and choices. With exceptions, certain State Privacy Laws may provide you with specific rights regarding their personal data. This section describes the rights that you may have under applicable State Privacy Laws.
- h. Access to information and data portability rights. Certain State Privacy Laws provide consumers with the right to request a business disclose what personal data (and the categories) it collects, uses, discloses, and sells. Once we receive and confirm your verifiable consumer request, we will disclose to you the specific pieces of personal data we have collected from you. In that disclosure, you will also receive information that describes the following:
- The categories of personal data that we have collected in the preceding 12 months
- The categories of sources from which the personal data is collected
- The categories of personal data that we have disclosed for a business purpose
- The categories of third parties to whom the personal data was disclosed for a business purpose
- The business or commercial purpose for collecting personal data
- i. Deletion request rights. Certain State Privacy Laws provide you with the right to request that we delete all of the personal data that we collected and retained from you, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal data from our records, unless an exception applies.
- j. Data correction rights. Certain State Privacy Laws may provide you with the right to correct inaccuracies in your personal data, taking into account the nature of the personal data and the purposes of the processing of the personal data.
- k. Exercising your rights. To exercise your rights, please visit the section above on Your Data Protection Rights. In order for us to honor your request, we must verify your identity. In your request, please provide us with your email address and name. We will then send you a verification email for you to respond to. Once verified, we will confirm receipt of the request within 10 days and provide information on how the business will process the request. We endeavor to respond to verifiable consumer requests within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. You may only make a verifiable consumer request for your personal data twice within a 12-month period. The response we provide will also explain the reasons we cannot comply with a request, if applicable. We will select a format to provide your personal data that is readily usable. Please note that we cannot respond to your request or provide you with personal data if we cannot verify your identity or your authority to make the request and confirm the personal data that relates to you. Only you, or a person you authorized in writing or registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal data. You may also make a verifiable consumer request on behalf of your minor. If you submit a deletion or access request for data we hold as a service provider, we may direct you to submit that request to the primary merchant or partner (the controller).
- l. Non-discrimination and financial incentives. We will not discriminate against you for exercising any of your State Privacy Law rights. In addition, the services we provide may include the implementation of a loyalty program and other services that are operated by the various merchants but intended to provide benefits to you. Please refer to the merchant’s terms and/or privacy notice for more information.
- m. Profiling. Presently, we do not profile based on applicable State Privacy Laws in furtherance of decisions that produce legal or similarly significant impact on consumers in scope of applicable State Privacy Laws.
- n. Deidentified personal data. In certain circumstances, we may process personal data to create deidentified information that can no longer reasonably be used to infer information about, or otherwise be linked to, a particular individual or household. In addition, where required by State Privacy Laws, we will maintain the use of the deidentified information in deidentified form and not attempt to reidentify the information.
- o. Right to limit use of Sensitive Personal Information. Under State Privacy Laws, you may have the right to direct us to limit our use and disclosure of your sensitive personal information, including precise geolocation data, to only what is necessary to provide our services. Because we collect sensitive personal information including precise geolocation data received from Venmo with your explicit consent for restaurant discovery and delivery coordination purposes, California residents can exercise this right by contacting us at [email protected]. We will respond to your request within fifteen (15) business days.
Sale of personal data. We have not sold (as defined under the CCPA) any personal data of any consumers (including any consumers under 16 years old) to any third parties in the preceding 12 months. We do not “sell” personal data under the traditional sense of the word. However, we use advertising cookies with your consent.
Sensitive personal data. Depending on the service provided, sensitive forms of personal data may include (i) information that may be interpreted to be “health data” under State Privacy Laws to the extent you voluntarily include allergy or dietary restrictions), (ii) account login details needed in order to sign up for a loyalty program or user account, and (iii) precise geolocation data received from Venmo with your explicit consent for restaurant discovery and delivery coordination purposes.
Shine the Light. Under California Civil Code sections 1798.83-1798.84, California residents who have an established business relationship with us are entitled to ask us for a notice describing what categories of personal data we share with third parties for their direct marketing purposes. This notice will identify the categories of information shared with third parties and will include a list of the third parties with which it is shared, along with their names and addresses. If you are a California resident and would like a copy of this notice, please submit a written request to us at the addresses listed below.
Do not track. Some web browsers and devices permit you to broadcast a preference that you not be “tracked” online. At this time, we do not modify your experience based upon whether such a signal is broadcast.
Effective as of January 25, 2026