Privacy Policy

Last updated 29 September 2026

Delo is a marketplace for ordering from local shops and takeaways in Ireland, on delo.ie and in the Delo app. Delo is run by Eclyde Corporation Limited, a company registered in Ireland ("Delo", "we", "us"). We are the data controller for the information described here. This policy explains what we collect, why, who we share it with and the rights you have under the GDPR.

What we collect

Account details: your name, email address and phone number. If you sign in with Apple or Google, we receive the name and email they share with us (Apple lets you hide your real email).
Delivery addresses you type or choose, and the map position of each address, so we can show shops that deliver to you and send your order to the right door.
Orders: what you ordered, from which shop, prices, deals, tips, delivery notes, order status, refunds and any problem you report.
Reviews you leave for a shop (stars and an optional comment).
Payments: card and wallet payments are handled by Stripe. We never see or store your full card number; we keep a payment reference and whether it succeeded or was refunded.
Device details for notifications: if you allow notifications in the app, a push token for your device so we can send order updates.
Basic technical data: your IP address and browser or device type in server logs, kept for security and to fix problems.

We do not collect your precise location from your phone's GPS, we do not use advertising trackers, and we do not sell your information.

Why we use it (and our legal basis)

To take and deliver your order, take payment, send receipts and order updates, and handle refunds and problems. Performance of our contract with you.
To run your account: sign-in, saved addresses, order history and reorders. Contract.
To keep Delo safe: preventing fraud and misuse, and securing our systems. Our legitimate interests.
To meet legal duties such as keeping tax and accounting records. Legal obligation.
To improve Delo using order totals and trends that don't identify you. Legitimate interests.
Marketing emails only if you opt in; you can opt out at any time from any email. Consent.

Who we share it with

The shop you order from receives your name, phone number, delivery address, order and notes, so it can prepare and deliver your order. Each shop is the seller of its own goods. In the Delo partner hub, shops see your contact details for 24 hours after an order, then only the order itself.
Couriers delivering your order receive your first name, delivery address, phone number and delivery notes.
Service providers who process data for us under contract: Stripe (payments), Supabase (our database and sign-in, hosted in the EU), Cloudflare (website hosting and security), Resend (emails), Google (address search and maps, and Google sign-in if you use it) and Apple (Sign in with Apple and app notifications on iPhone).
Authorities where the law requires it, or to protect people's safety or our legal rights.

Some of these providers may process data outside the EU. Where they do, the transfer is covered by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

How long we keep it

Your account stays until you delete it.
Order and payment records are kept for 6 years, as Irish tax law requires, even after you delete your account.
Push tokens are removed when you sign out, turn notifications off or delete your account.
Server logs are kept for a short period only, typically no more than 30 days.

Deleting your account

You can delete your account at any time in the app (Account, then Delete account) or at delo.ie/delete-account. We remove your account, saved addresses and devices. We keep only the order records the law requires, as above.

Your rights

You have the right to access your data, correct it, delete it, restrict or object to how we use it, and receive a copy in a portable format. Where we rely on consent you can withdraw it at any time. To use any of these rights, email hello@delo.ie. We reply within one month.

If you're unhappy with how we handle your data, you can complain to the Data Protection Commission, dataprotection.ie.

Children

Delo is not for children under 16. Age-restricted items, such as alcohol, are only sold to adults, and ID may be checked on delivery.

Security

Data is encrypted in transit, access is limited to people who need it, and payments are handled by Stripe, which is certified to PCI DSS Level 1.

Changes

If we change this policy we'll update the date above, and tell you in the app or by email if the change is significant.

Contact

Eclyde Corporation Limited, Ireland. Email hello@delo.ie.