Privacy Statement
Last Updated: April 7, 2025
California Notice at Collection/State Law Privacy Rights: See the State law privacy rights section below for important information about your rights under applicable state privacy laws.
This Privacy Statement describes how Beehub Inc. operating under the brand name Peppr ("Beehub", "Peppr", "we", "us", and/or "our") processes personal information that we collect through our digital or online properties or services that link to this this Statement, including our web application, the website, social media pages, marketing activities, live events and other activities described in this Privacy Statement (collectively referred to as "Services"). To transparently outline our procedures regarding your personal information, we have established this Privacy Statement ("this Statement").
This Statement primarily covers the information we collect from or about the following groups of individuals:
“Merchants”: businesses that have expressed interest in using the Services or have contracted with Peppr to provide the Services within their restaurants;
“Merchant Employees”: employees of our Merchants that use the Services; and
“Guests”: individuals that use the Services at one of our Merchant’s restaurants, through a business partner, or directly through Peppr.
You can download a printable copy of this Statement by printing this page.
1. What personal information we collect
Information you provide to us. The personal information you may provide to us through the Services or otherwise depends on how you interact with the Services.
If you are a Merchant using the Services, we may collect:
Contact data, such as your name, billing and mailing address, email, date of birth, professional title and company name, and phone number.
Government-issued identification number data, such as your tax identification number or national identification number (e.g. Social Security number or passport number).
Financial data, including banking and payment card information.
Communications data based on our exchanges with you, including when you contact us through the Services, social media, or otherwise.
Marketing data, such as your preferences for receiving our marketing communications and details about your engagement with them.
Other data not specifically listed here, which we will use as described in this Privacy Statement or as otherwise disclosed at the time of collection.
If you are a guest using the Services at one of our Merchant's restaurants, we may collect:
Contact data, such as your name, email, date of birth, and phone number.
Payment data needed to facilitate transaction processing. This information is shared with the necessary payment institutions for processing purposes. The data collected may include your payment card information such as the brand, card number, security code and expiration date, transaction information and details.
Communications data based on our exchanges with you, including when you contact us through the Services, social media, or otherwise.
Marketing data, such as your preferences for receiving our marketing communications and details about your engagement with them.
Account data, such as the phone number, username, or password that you may set to establish an online account with the Services, date of birth, redemption code, loyalty program details and points, dietary or allergy information, reservation or waitlist details, vehicle information (for curbside pickup), preferences, order history, information about your participation in our contests, promotions, or surveys, and any other information that you add to your account profile.
Other data not specifically listed here, which we will use as described in this Privacy Statement or as otherwise disclosed at the time of collection.
If you are a Merchant Employee, we may collect:
Contact data, such as your name, billing and mailing address, email, date of birth, and phone number.
Peppr’s Pay Card and PayOut Service data, such as your account and transaction history.
Information collected automatically. We, our service providers, and our business partners may collect information automatically when you visit our websites, complete a transaction, or use our Services. Information collected automatically may include:
Device data, such as your device type/model, number and device ID (e.g., MAC address), information about your browser, settings (e.g., language) and operating system; your internet protocol (IP) address (including, in some instances, your perceived location); and unique advertising and related identifiers; transactional and purchase information.
Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths between pages or screens, information about your activity on a page or screen, access times and duration of access, and whether you have opened our emails or clicked links within them.
Communication interaction data such as your interactions with our email or other communications (e.g., whether you open and/or forward emails) – we may do this through use of pixel tags (which are also known as clear GIFs), which may be embedded invisibly in our emails.
Information collected from other sources. We may also collect personal information about you from third parties including our business partners, identity verification services, credit bureaus (if applicable), banks and other financial institutions and credit card companies.
2.How we use personal information
We may use your personal information for the following purposes or as otherwise described at the time of collection:
Provide, maintain and support our Services. We use your personal information to take and handle orders, deliver products or services, process payments, and enable access and usage of services for Merchants and their employees.
Operating and managing our business. We use your personal information to take service performance analysis including workforce enhancement and service development, generating analytics for our benefit and that of our Merchants, evaluating service effectiveness, service and website improvement.
Provide, troubleshoot, and improve our services. We use your personal information to provide functionality, analyze performance, fix errors, and improve the usability and effectiveness of our services.
Comply with legal obligations and protection. In certain cases, we collect and use your personal information to comply with laws; protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims); audit our internal processes for compliance with legal and contractual requirements or our internal policies; enforce the terms and conditions that govern the Services; prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.
Fraud Prevention and Credit Risks. We use personal information to prevent and detect fraud and abuse in order to protect the security of our customers, Beehub, and others. We may also use scoring methods to assess and manage credit risks.
Marketing and advertising. We, our service providers and our third-party advertising partners may collect and use your personal information for marketing and advertising purposes:
Direct marketing. We may send you direct marketing communications and may personalize these messages based on your needs and interests. You may opt-out of our marketing communications as described in the Opt-out of marketing section below.
Interest-based advertising. We, our service providers, and third-party advertising partners may use cookies and other technologies to collect information about your interaction (including the data described in the automatic data collection section above) with the Service, our communications and other online services over time, and use that information to serve online ads that we or they think will interest you. This is called interest-based advertising. We may also share information about our users with these companies to facilitate interest-based advertising to those or similar users on other online platforms.
Data sharing in the context of corporate events. We may share certain personal information in the context of actual or prospective corporate events – for more information, see How we share personal information, below.
To create aggregated, de-identified and/or anonymized data. We may create aggregated, de-identified and/or anonymized data from your personal information and other individuals whose personal information we collect. We make personal information into de-identified and/or anonymized data by removing information that makes the data identifiable to you. We may use this aggregated, de-identified and/or anonymized data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business.
Further uses. In some cases, we may use your personal information for further uses, in which case we will ask for your consent to use of your personal information for those further purposes if they are not compatible with the initial purpose for which information was collected.
3.How we share personal information
In certain instances, Beehub will share personal information with the following parties (or as otherwise described in this Statement, in other applicable notices, or at the time of collection):
Merchants. As part of providing the Services (for example, when you complete a transaction at a Merchant's restaurant), we will share your information with the Merchant and Merchants’ Employees. In certain cases, where a Merchant is part of a larger management group, this may include sharing that information with other restaurants within that group as part of your future dining experiences. Our Merchants may then use this information for their own business purposes. Any requests related to the subsequent use of your personal information should be directed to the relevant Merchant.
Business Partners in order to provide, maintain, improve and expand our Services.
Third-party Integration Partners selected by the Merchant or with whom you do business where Beehub is instructed to share your information as part of the Services.
Affiliates. Our parent, subsidiary, or affiliate companies, agents (if any) for the purposes outlined above.
Service Providers. Third parties to provide, maintain and improve our services, including service providers who access information about you to perform services on our behalf or on behalf of our Merchants, such as hosting and information technology services, payment services, identity verification and fraud prevention services, marketing and advertising services, data analytics and personalization services and customer support services.
Payment Processors. Any payment card information you use to make a purchase on the Service is collected and processed directly by our payment processors, such as Adyen. Adyen may use your payment data in accordance with its privacy policy: https://www.adyen.com/privacy-policy. And Worldpay, who may use your payment data in accordance with its privacy policy: https://privacy.worldpay.com/ .
Advertising Partners. Third-party advertising companies for the interest-based advertising purposes described above.
Business Transferees. In connection with, or during the negotiation of, any merger, sale of company stock or assets, financing, acquisition, divestiture or dissolution of all or a portion of our business; or
Professional Advisors or Authorities. Including lawyers, auditors, bankers, insurers, law enforcement, and government agencies if we believe it is authorized or necessary to:
protect our rights or property, or the security or integrity of our Services;
enforce the terms of our terms of service or other applicable agreements or policies;
protect us, users of our Services or the public from harm or potentially prohibited or illegal activities;
investigate, detect and prevent fraud and security breaches; or
comply with any applicable law, regulation, legal process or governmental request (including, for example, a court order, subpoena, or search warrant).
We may also share aggregated and/or anonymized information derived from the Services that does not directly identify you.
4. How we store your personal information
We are an international company and may use service providers that operate in other countries. Your personal information may be transferred to the United States or other locations where privacy laws may not be as protective as those in your state, province, or country. For example, we will store your personal information in the U.S. on AWS which is our cloud service provider.
5. Cookies and Similar Technology
Beehub may use cookies, web beacons and other tracking technologies as part of providing the Services and for the purposes described in this Statement.
There are other tracking technologies, such as web beacons/GIFs, pixels, page tags, embedded scripts, that consist of small transparent image files or other web programming code that record how you interact with websites, mobile applications and services. They are often used in conjunction with web browser cookies or other identifiers associated with your device.
You may have the right to accept or reject cookies. You can manage or delete cookies according to your preferences, such as clearing all cookies saved on your computer, mobile device or in the software, but you may not be able to fully experience some of our convenience and security services.
6. How we protect your personal information
We have implemented technical and organizational measures (such as network isolation, data encryption, employee access control and other measures) designed to protect the personal information we collect.
However, no system or network is absolutely safe, and we cannot guarantee the security of your personal information.
7. Third-party services
We may provide links to other websites and services provided by third parties. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. These services and websites may operate independently from us and may have their own privacy notices or policies, which we strongly suggest you review before you use any of their services or conduct any activities on those websites. To the extent that any linked websites you visit are not owned or controlled by us, we are not responsible for their contents, their privacy practices and the quality of their services.
8. Your rights and choices
Depending on the nature of your relationship with Beehub, we may provide you with the capability to manage your personal information directly as part of the Services or by contacting Beehub. Users who are located in California or other applicable US sates with omnibus consumer privacy laws can find additional information about their rights below.
Access or update your information. You can manage your personal information by yourself as logging into your account. In other instances, if applicable, see the instructions provided as part of the Services or contact us as described in the "How to contact us" section of this Statement. We may need to verify your identity before changing or correcting your information. In certain instances, we may not be able to make the correction or accommodate the request due to legal, contractual or technical restrictions.
Opt-out of communications. You may opt-out of marketing-related emails by following the opt-out or unsubscribe instructions at the bottom of the email, or by contacting us. Please note that if you choose to opt-out of marketing-related emails, you may continue to receive service-related and other non-marketing emails.
Cookies. Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. Please note that if you set your browser to disable cookies, the Service may not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit www.allaboutcookies.org. You can also configure your device to prevent images from loading to prevent web beacons from functioning.
Blocking images/clear gifs: Most browsers and devices allow you to configure your device to prevent images from loading. To do this, follow the instructions in your particular browser or device settings.
Advertising choices. You may be able to limit use of your information for interest-based advertising through the following settings/options/tools:
Browser settings. Changing your internet web browser settings to block third-party cookies.
Privacy browsers/plug-ins. Using privacy browsers and/or ad-blocking browser plug-ins that let you block tracking technologies.
Platform settings. Google and Facebook offer opt-out features that let you opt-out of use of your information for interest-based advertising. You may be able to exercise that option at the following websites:
Google: https://adssettings.google.com/
Facebook: https://www.facebook.com/about/ads
Ad industry tools. Opting out of interest-based ads from companies that participate in the following industry opt-out programs:
Network Advertising Initiative: http://www.networkadvertising.org/managing/opt_out.asp
Digital Advertising Alliance: optout.aboutads.info.
AppChoices mobile app, available at https://www.youradchoices.com/appchoices, which will allow you to opt-out of interest-based ads in mobile apps served by participating members of the Digital Advertising Alliance.
Mobile settings. Using your mobile device settings to limit use of the advertising ID associated with your mobile device for interest-based advertising purposes.
You will need to apply these opt-out settings on each device and browser from which you wish to limit the use of your information for interest-based advertising purposes.
We cannot offer any assurances as to whether the companies we work with participate in the opt-out programs described above.
Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.
Declining to provide information. We need to collect personal information to provide certain services. If you do not provide the information we identify as required or mandatory, we may not be able to provide those services.
9. Minors' personal information
Our Services are not targeted or directed at the minors under the age of 18, and we do not intend to, or knowingly, collect or solicit personal information from minors. If we learn that any personal information we collected has been provided by a minor, we will promptly delete that personal information. For the collection of personal information of minors with the consent of parents or legal guardians, we will only use or publicly disclose this information if permitted by law, explicitly agreed by parents or guardians or necessary to protect minors.
10. How to contact us
If you have any questions about this Statement or personal information protection, you can reach us via the Customer Service email: contact@peppr.com.
11. Changes to this Privacy Statement
From time to time, we may update, change, modify or amend this Privacy Statement in order to comply with the applicable law or our changing business practices. Unless we are required by the applicable law to provide a prescribed form of notice and/or obtain consent, updated versions of this Statement may be posted on this website with additional communication. An archived version of our previous Privacy Statement can be found here. Please check this website and this Privacy Statement regularly for updates.
12. California notice at collection/US state law privacy notice
Except as otherwise provided, this section only applies to residents of California and other states with privacy laws applicable to us that grant their residents the rights described below. For purposes of this section, “personal information” has the meaning given to “personal data”, “personal information” or similar terms under the applicable privacy laws of the state in which you reside. Please note that not all rights listed below may be afforded to all users and that if you are not a resident of the relevant states, you may not be able to exercise these rights. In addition, we may not be able to process your request if you do not provide us with sufficient detail to allow us to confirm your identity or understand and respond to it.
In some cases, we may provide a different privacy notice to certain categories of residents of these states, such as job applicants, in which case that notice will apply with respect to the activities it describes instead of this section.
Your privacy rights. You may have some or all of the rights listed below. However, these rights are not absolute, are subject to certain exceptions, and in certain cases we may decline your request as permitted by law.
Right to know. You can request the following information about how we have collected and used your Personal Information during the past 12 months:
The categories of Personal Information that we have collected.
The categories of sources from which we collected Personal Information.
The business or commercial purpose for collecting, selling, or sharing Personal Information.
The categories of third parties to whom we disclose Personal Information.
The categories of Personal Information that we sold, disclosed, or shared for a business purpose.
The categories of third parties to whom the Personal Information was sold, shared, or disclosed for a business purpose.
Right to access/portability. You can request a copy of certain personal information that we have collected about you during the past 12 months.
Right to correction. You can request that we correct inaccurate personal information that we have collected about you.
Right to deletion. You can request that we delete personal information that we collected from you.
Right to opt-out.
Opt-out of the "sharing” of personal information (i.e., tracking for targeted advertising purposes). If we “share” your personal information as defined by the CCPA, you can opt-out of certain tracking activities for targeted advertising (also known as interest-based advertising) purposes.
Opt-out of the “sale” of personal information. If we “sell” your personal information as defined by the CCPA, you may ask us not to sell personal information.
Opt-out of profiling/automated decision making. If we use your personal information for profiling/automated decision making as defined by the CCPA or applicable state privacy laws, you can opt-out of such processing.
Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by applicable state privacy laws.
How to exercise your rights to know, access/portability, correction, deletion, and opt-out of profiling/automated decision making. You may submit requests to exercise your right to know, access, deletion, correction, and opt-out of profiling/automated decision making to via email to Support@peppr.com and/or review the information here. The rights described above are not absolute, and in certain cases, we may decline your request as permitted by law. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it. You may also have the right to appeal any denial of your request in the same manner through which you may submit a request.
Exercising your right to opt-out of tracking for targeted advertising purposes. Like many companies, we use services that help deliver interest-based ads to you as described above. You can submit requests to opt-out of tracking for targeted advertising purposes here: Do Not Sell or Share My Personal Information. Your request to opt-out will apply only to the browser and the device from which you submit the request. You can also broadcast the Global Privacy Control (GPC) to opt-out for each participating browser system that you use. Learn more at the Global Privacy Control website.
Verification of identity; Authorized agents. We may need to verify your identity to process your requests to exercise your rights to know, access, deletion, and correction, and we reserve the right to confirm your California residency. To verify your identity, we may require you to log into an online account if you have one, provide identifiers we can match against information we may have collected from you previously, confirm your request using the email or telephone account stated in the request, provide government identification, or provide a declaration under penalty of perjury, where permitted by law.
Your authorized agent may make a request on your behalf upon our verification of the agent’s identity and our receipt of a copy of a valid power of attorney given to your authorized agent pursuant to applicable state law. If you have not provided your agent with such a power of attorney, we may ask you and/or your agent to take additional steps permitted by law to verify that your request is authorized, such as information required to verify your identity and that you have given the authorized agent permission to submit the request.
Additional information for California residents: The following describes our practices currently and during the past 12 months:
Sensitive personal information. We do not use or disclose sensitive personal information for purposes that California residents have a right to limit under the CCPA.
Sales. We do not “sell” personal information as defined by the CCPA and have not sold personal information in the preceding 12 months except to the extent that use of the interest-based advertising services described above constitutes a “sale” under the CCPA. We do not have actual knowledge that we have sold or shared the personal information of California residents who are under 16 years of age.
Retention. The criteria for deciding how long to retain personal information is generally based on whether such period is sufficient to fulfill the purposes for which we collected it as described in this notice, including complying with our legal obligations.
Deidentification. We do not attempt to reidentify deidentified information derived from personal information, except for the purpose of testing whether our deidentification processes comply with applicable law.
Collection and disclosure. The chart below describes the personal information we collect by reference to the categories of personal information specified in the CCPA (Cal. Civ. Code §1798.140), and the categories of third parties to whom we disclose it. The terms in the chart refer to the categories of information and third parties described above in this Statement in more detail. Information you voluntarily provide to us, such as in free-form webforms, may contain other categories of personal information not described below.
Personal Information (“PI”) we collect |
CCPA statutory category |
Categories of third parties to whom we “disclose” PI for a business purpose |
Categories of third parties to whom we “sell” or “share” PI |
---|---|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Device data |
Internet or Network Information |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|