This privacy notice ("Notice") explains to individuals interacting with our products and services – the "Onro Services" – or corresponding with us about the Onro Services ("you"), how Onro UK Ltd and its affiliates, who operate Onro Services ("Onro" or "we") use your personal data in connection with the Onro Services. It also explains your data protection rights, which include the right to object to our use of your personal data in some situations.
We'll let you know if we post a materially revised Notice (e.g. by sending you an email or providing information on the Onro website). You should regularly review this Notice so that you're aware of what personal data we collect, how we use and otherwise process it and under what circumstances we share it with third parties.
You can jump to different sections of this Notice by clicking on the links below:
We collect, receive, store and otherwise process the following personal data about you:
Sometimes, we also receive personal data from third parties. In particular:
We collect, use, store and otherwise process your personal data for the reasons set out below.
To perform, or take steps to enter into, a contract with you.
We use your personal data where needed to provide you with the services set out in our Terms and Conditions including:
If you do not provide the above information, we would not be able to provide our services to you. Mandatory fields in forms will be marked as such.
Where it is in our or a third party’s legitimate interests, if these interests are not overridden by your rights or interests.
We use your personal data where needed:
Where you consent.
If we rely on your consent to use your personal data, we will tell you why we want your personal data, what we will do with it, and – if relevant – we will identify third parties who will rely on the consent. We will make it clear to you when we are obtaining your consent. Where you provide consent, you can withdraw it at any time through the means indicated when we collect it, or by contacting us as set out below. We will also tell you what the consequences are if you withdraw your consent.
Where we are required to pursuant to UK, EU or EU Member State applicable law.
We collect, use and store your personal data to meet or comply with our legal obligations under UK, EU or EU Member State law, including requirements relating to audit and reporting, maintenance of accounting and tax records, anti-money laundering (AML), sanctions and anti-terrorism laws and regulations and fighting crime.
We also use your personal data where this is not incompatible with the original purpose for which we obtained it, and for any other purpose that we specifically tell you about when we obtain personal data about you.
We share personal data within our group and with:
If we transfer personal data to recipients outside of the United Kingdom or European Economic Area that are not subject to a European Commission adequacy decision or equivalent (in other words, official approval for us to transfer personal data to those recipients), we will where feasible put in place European Commission-approved standard contractual clauses (or equivalent) in order to protect this personal data. We might also rely on other permitted data transfer mechanisms such as relying on the relevant third party’s "binding corporate rules" (approved by UK or EU data protection authorities and put in place to protect your personal data). You have a right to ask us for a copy of the safeguard used (by contacting us as set out below). Note that those additional safeguards may not be usable in all circumstances, for example in the case of (i) disclosures to foreign authorities, (ii) where an urgent data transfer is necessary in your or another person's vital interests, or (iii) where you have expressly consented to the data transfers.
We keep your personal data for as long as is necessary for the purposes for which we use it. When we assess that necessity, we consider the amount, nature and sensitivity of your personal data as well as the potential risk of any unauthorised use or disclosure.
By law, we can keep different personal data for different periods of time. For example, we can keep certain basic information for six years after you stop using the app as a seller or buyer for tax or dispute resolution purposes.
Depending on applicable law, you may have the following rights in respect of the personal data we process about you:
These rights may be limited in some situations; for example, where we can demonstrate that we have legitimate grounds to process your personal data, or are prohibited from deleting mandatory records. Please also note that in some cases, we might not be able to delete your personal data except by also closing your user account.
We may ask you to verify your identity and to provide other details to help us to respond to your request. If you wish to exercise these rights, please contact us at the email address provided below.
Onro Services may, from time to time, contain links to and from the websites or services of our partners, such as our payment provider Stripe, Inc our logistics provider Parcel2Go, or other third parties.
If you follow a link to any of these websites, please note that these websites or services may have their own privacy policies and we do not accept any responsibility or liability for these policies, nor do we endorse such websites or services. We advise that you check any relevant terms before you submit any personal information to these third parties.
If you have any questions about this Privacy Notice, or if you want to exercise your data protection rights, you may contact us at privacy@onro.com.
We hope that we can satisfy any queries that you may have about the way we process your personal data. However, if you have unresolved concerns you also have the right to complain to the data protection authority in the country where you live, work or where you consider a breach has occurred. In the UK, the data protection authority is the Information Commissioner’s Office (ICO) (www.ico.org.uk).