Our Privacy Policy

OUTRCH (“OUTRCH“), along with its affiliated companies, is committed to safeguarding your privacy. This Privacy Policy (the “Policy”) describes OUTRCH’s policies and procedures regarding the collection, use and disclosure of the information collected through the OUTRCH website,

outrch.net

(“Site”), mobile applications, and other affiliated websites owned and operated by OUTRCH (the site, and any products and services provided by OUTRCH are collectively referred to as the “Services,” which includes the Platform, as defined below).

1. OUTRCH Service Overview

Each of the restaurants and other locations available through the Service (a “Venue”) has adopted OUTRCH’s proprietary reservation and inventory management system (the “Platform“). The Platform interacts with the Venue to find available reservations, to secure, change or cancel online reservations, and to confirm that reservations were honored. Where reservations are placed directly with a Venue that uses the Platform, or through other third-party reservation services that the Venue may use, information about patrons of a Venue (each, a “Guest”) is recorded in (or transferred to) the Platform to assist the Venue in managing the reservation and provide services to such Guest. While an individual Venue’s reservation inventory is accessible to the Platform to perform these functions, other information that may be stored by a Venue (for example, credit card numbers) is not accessible to the Platform. Where a Guest may pay or enter payment information via the Platform (either to hold a reservation, or for services received at a Venue), payment is processed by a third-party payment processor and information about that payment is subject to such processor’s policies. Note that in no case does OUTRCH store credit card or payment information on the Service; all such information is held by our third-party payment processor(s) or the Venue itself.

A Note for Guests. OUTRCH’s customers are the Venues (or agents that Venues have contracted to handle their reservations), and only Venue employees or agents have Accounts (as defined below) with OUTRCH. Guests do not have Accounts on the Platform, however they may create a profile containing the information requested by a Venue in order to facilitate expedited reservation data entry at other Venues that use OUTRCH. Except where provisions are specific to Registered Users, Accounts, or Guests, all the terms of this Policy apply equally to both Guest and Registered User information. Our use of information that we process on behalf of our Venues may be governed by our agreements with such Venues. If you have concerns regarding your personal data that we process on behalf of a Venue, please direct your concerns to that Venue.

2. Types of Data We Collect

Information You Provide to Us.

Account data. We may collect personal data from you, such as your first and last name, gender, phone number, e-mail and mailing addresses, and password when you create an account to use the Services (“Account”). Only representatives of a Venue may create an Account (each such individual, a “Registered User”).

Transactional data. Such as information relating to or needed to complete your orders on or through the Service, including order numbers and transaction history.

Marketing data. Such as your preferences for receiving our marketing communications and details about your engagement with them.

Communications data. If you provide us feedback or contact us via e-mail, we will collect your name and e-mail address, as well as any other content included in the e-mail, in order to send you a reply.

Demo, contact and enquiry data. If you request a demo or submit an enquiry, we collect the details you provide and use them solely to respond to that request.

Survey data. If you participate in a survey conducted via the Services, we may collect additional profile information.

Other data. We may also collect other personal data not specifically listed here, which we will use as described in this Policy or as otherwise disclosed at the time of collection.

Information Collected From Third Parties.

Venues. When a Venue takes a reservation directly from a Guest, or receives such information from a third party service or platform (i.e., Google, Yelp), personal data about the Guest is recorded in the Platform. In addition, Guest notes (such as dining preferences) may be recorded in the Platform by Venue staff.

Public sources. Such as government agencies, public records, social media platforms, and other publicly available sources.

Private sources. Such as data providers, social media platforms and data licensors.

Business contacts. Such as details you give us directly when you request a demo, submit an enquiry or attend an event we host.

Third-party services, such as social networking sites, that you use in connection with, or otherwise link to, the Site or Services. This data may include your username, profile picture and other information associated with your account on that third-party service that is made available to us based on your account settings on that service.

Information Collected Via Technology.

Information Collected By Our Servers. To make our Site and Services more useful to you, we, our service providers and partners may collect information about you, your computer or mobile device, and your interaction over time with the Site and Services, our communications and other online services, such as:

Device data. Such as your computer or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers, language settings, mobile device carrier, phone number, unique device id number (Registered Users only), radio/network information (e.g., Wi-Fi, LTE, 3G), and general location information such as city, state or geographic area.

Online activity data. Such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths between pages or screens, information about your activity on a page or screen, access times and duration of access, and whether you have opened our emails or clicked links within them.

Location data. When you authorize (our mobile application/the Services) to access your device’s location.

Communication interaction data. Such as your interactions with our email, text or other communications (e.g., whether you open and/or forward emails) – we may do this through use of pixel tags (which are also known as clear GIFs), which may be embedded invisibly in our emails.

Log Files. As is true of most websites, we gather certain information automatically and store it in log files. This information includes IP addresses, browser type, Internet service provider (“ISP”), referring/exit pages, operating system, date/time stamp, and clickstream data. We use this information for security, to operate and maintain the Site, to diagnose technical issues, to analyze aggregate trends, and to better understand and improve our Services. Except as noted in this Policy, we do not link this automatically collected data to personal data, and we do not use it to serve advertisements or personalise content to your interests.

Google reCAPTCHA. We use Google reCAPTCHA on our Site and/or Platform to ensure its security and protect against spam and abuse. This service is used to determine whether data entry is being done by a human or an automated bot. The reCAPTCHA service collects hardware and software information, such as device and application data, and sends this data to Google for analysis. This data collection may include: IP address, Referrer URL, Device and browser information (e.g., operating system, browser type), User interaction data (e.g., mouse movements and clicks), Cookies and other tracking technology used by Google. The data collected is used solely for the purpose of protecting our website and preventing fraudulent activities. We do not use this information for advertising or other profiling purposes. By using our Site and/or Platform, you consent to the use of reCAPTCHA, and acknowledge that its operation is subject to Google's policies. For further details on how Google handles your data, please review:

Google's Privacy Policy

Google's Terms of Service

Consent. We will only collect, use, or communicate your personal information with your consent, unless otherwise required or permitted by applicable law.

Cookies. For more information on how we use cookies and other technologies on our Site, please see our

Cookie Notice

How We Respond to Do Not Track Signals. We currently respond to Global Privacy Control “do not track” signals only.

Mobile Services. (Registered Users only). We may also device-level data from your mobile device if you have downloaded our mobile application (the “Application”). This information is generally used to help us deliver the most relevant information to you. Examples of information that may be collected and used include your geographic location, how you use the Application, and information about the type of device you use. In addition, in the event our Application crashes on your mobile device, we will receive information about your mobile device model software version and device carrier, which allows us to identify and fix bugs and otherwise improve the performance of our Application. This information is sent to us as aggregated information and is not traceable to any individual and cannot be used to identify an individual.

Location of Servers. We maintain servers around the world and your information may be processed on servers located outside of the country where you live. Data protection laws vary among countries, with some providing more protection than others. Regardless of where your information is processed, we apply the same protections described in this policy. For information on how we transfer your personal data outside the European Economic Area, United Kingdom, and/or Switzerland, please see the Notice to European users below.

3. Use of Your Data

3.1 By OUTRCH

Service Delivery and Operations. In general, personal data you submit to us is used either to deliver the Services or respond to requests that you make. We use your personal data in the following ways:

facilitate the creation of and secure your Account (Registered Users only);

identify you as a user of the Services;

provide, operate and improve the Site and Services;

provide the Services you request;

communicate about the Services, including sending you administrative e-mail notifications, such as security or support and maintenance advisories (Registered Users only);

respond to your inquiries related to employment opportunities or other requests;

understand your needs and interests, and personalize your experience with the Services and our communications; and

send newsletters, surveys, offers and other promotional materials related to our Services, but only to Registered Users who have separately and affirmatively opted in to receive them.

Marketing. We use personal data for marketing only where we have a separate, affirmative opt-in from the individual concerned. We do not carry out interest-based, cross-context behavioural or targeted advertising, and we do not disclose personal data to advertising partners for those purposes.

Direct marketing. We may send direct marketing communications only to people who have opted in to receive them, and every message includes a working unsubscribe mechanism. We do not use demo, contact or other enquiry data for marketing.

Compliance and Protection. We may use your personal data to:

comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas, investigations or requests from government authorities, including to meet national security or law enforcement requirements;

protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims);

audit our internal processes for compliance with legal and contractual requirements or our internal policies;

enforce the terms and conditions that govern the Site and Services; and

prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.

Service Improvement and Analytics. We may use your personal data to analyze your usage of the Site and Services, improve the Site and Services, improve the rest of our business, help us understand user activity on the Site and Services, including which pages are most and least visited and how visitors move around the Site and Services, as well as user interactions with our emails, and to develop new products and services.

With Your Consent. In some cases, we may specifically ask for your consent to collect, use or share your personal data, such as when required by law.

Anonymous Data. We may create anonymous, aggregated, and/or de-identified records from personal data of both Guests and Registered Users (e.g., in relation to dietary preferences). We use this anonymous, aggregated and/or de-identified data to analyze request and usage patterns so that we may enhance the content of our Services and improve Site navigation.

Artificial Intelligence and Related Technologies. We rely on artificial intelligence, machine learning and similar technologies (including, without limitation, voice processing) in order to operate our Platform and offer our Services. Your personal data that we collect and use as part of rendering our Services may be processed using these technologies. We do not engage in automated decision making without human intervention.

3.2 By Venues

When you make a reservation using the Services, your name is provided to the applicable Venue, just as would occur if you were making a reservation over the phone. Your email address and phone number are also provided to the Venue in case the Venue needs to contact you regarding your reservation. You may also provide special preferences or comments regarding your reservation, which the Services will pass on to that Venue. Venues will process your Personal Data in accordance with their own privacy policies.

OUTRCH will only share the information specified above with the Venue at which a Guest has made reservations using the Service. Venues cannot use the Services to access information pertaining to Guests, reservations or related information from other Venues, except that Venues with the same corporate ownership may elect to share such information with their corporate group and subject to that Venue’s privacy policy. If you submit a data subject request related to a Venue, OUTRCH may contractually be required to share such your personal data with an affiliate entity or otherwise authorized third party of the Venue as part of their data subject request process.

Each Venue is a separate business from OUTRCH. While OUTRCH encourages Venues to comply with data protection requirements, OUTRCH will not be responsible for a Venue’s failure to comply with laws applicable to the use of Personal Data. Any complaints or inquiries regarding use of your information by a Venue, or marketing communications from a Venue, should be addressed directly to the Venue in question.

In no event will OUTRCH be responsible for information, management, and use of data collected by Venues from their own websites and not stored on the Services.

4. Sharing of Your Data

We may disclose your personal data as described below and as described elsewhere in this Policy.

Service Providers. We may share your personal data with third party service providers to: provide you with the Services; to conduct quality assurance testing; to facilitate creation of Accounts; to provide technical support; and/or to provide other services to the OUTRCH.

Payment Processors. We use third party payment processors to process payments made through the Platform to Venues. These payment processors may use your payment data in accordance with their privacy policies.

Social Networking Sites. We allow Guests to place reservations with Venues on the Platform via social networking sites (e.g., Facebook or Twitter, and each an “SNS”). Guests who access the Platform via an SNS (i.e., by choosing to “sign in via Facebook” or the equivalent) consent to OUTRCH receiving information required to make the reservation from the SNS. The Platform may also enable you to post content to an SNS. If you choose to do this, we will provide information to such SNS in accordance with your elections. You agree that you are solely responsible for your use of an SNS and that it is your responsibility to review the terms of use and privacy policy of such SNS. Any information that we collect from an SNS account will depend on the privacy settings you have with that SNS, so please consult the SNS’ privacy and data practices.

Affiliates. We may share some or all of your personal data with our parent company, joint ventures, or other companies under a common control (“Affiliates”).

Enquiry, demo and contact data. Information you submit through a demo request, contact form, enquiry or similar request is used only to respond to that specific request. We do not use it for marketing, advertising, enrichment, profiling, partner or co-marketing programmes, or unrelated follow-up, and we do not share it with marketing partners, unless you give a separate affirmative opt-in. We do not run co-marketing lead-sharing programmes.

Corporate Restructuring. We may share some or all of your personal data in connection with or during negotiation of any merger, financing, acquisition or dissolution transaction or proceeding involving sale, transfer, divestiture, or disclosure of all or a portion of our business or assets. In the event of an insolvency, bankruptcy, or receivership, personal data may also be transferred as a business asset. If another company acquires our company, business, or assets, that company will possess the personal data collected by us and will assume the rights and obligations regarding your personal data as described in this Policy.

Professional advisors. Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.

Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the Compliance and protection purposes described above.

5. Communications and Disclosures.

From OUTRCH. OUTRCH sends automated service messages to Guests via email and / or text pertaining to upcoming or recent Venue reservations or other core functions of the Services, such as confirmations, reminders, and/or invitations to provide customer feedback (“Service Communications”). In addition, Guests and Registered Users may also opt in to receive promotional notices, special offers, and other related information from OUTRCH (“Marketing Communications”). You may always unsubscribe from Marketing Communications. However, so long as you use the Service, we may send essential Service Communications to the contact information associated with your Account.

From Venues. Venues may independently use the Platform to send Guests Service Communications and, if opted in by a Guest, Marketing Communications. Communications sent directly from a Venue via the Platform are subject to this Policy, but communications sent by a Venue outside of the Platform are subject to the Venue’s policies and practices.

Third Parties. OUTRCH will never sell, rent, loan or otherwise distribute any of your personal data (including but not limited to your name, email address, phone number or any other identifiable information about you) to any third party except as set forth in this Policy without your prior, express written consent.

6. Accounts

Registered Users can view and manage their Account information, including any associated personal data, by clicking on the “Account” link at the top of the login page. Guests and Registered Users may at any time contact OUTRCH at info@outrch.net or as set forth in Section 13 to request that all personal data be deactivated.

7. How OUTRCH Protects Data

OUTRCH uses a number of technical, organizational and physical safeguards designed to protect the personal data we collect. However, security risk is inherent in all internet and information technologies and we cannot guarantee the security of your personal data.

8. A Note About Children

We do not intentionally gather personal data from visitors who are under the age of 18. If we learn that a child under the age of 18 has submitted personal data to OUTRCH, we will attempt to delete such data as soon as possible. If you believe that we might have any personal data from a child under 18, please contact us at info@outrch.net or as set forth in Section 13.

9. Changes to this Policy

Any changes to this Policy will always be posted to this page of the Site, along with the effective date of the updated Policy. You should check this page periodically to stay abreast of any such changes. OUTRCH will never make changes to the Policy that violate any applicable privacy laws. For any material changes to the Policy, we will notify you via email or by placing a prominent notice on the homepage of our Site.

10. Disclosure, Correction, Control of Personal Data

If you wish to have OUTRCH disclose what personal data of yours it holds, and / or how OUTRCH obtained such information, or if you desire the correction, suspension of use, deletion or to be informed of the purpose of use of personal data by OUTRCH, please contact OUTRCH at info@outrch.net. OUTRCH will process such request in compliance with all applicable privacy laws, but may first confirm that such request has been made by you personally.

11. State Privacy Rights

This section applies only to California and Virginia residents and provides additional information to residents pursuant to applicable state privacy laws including the California Consumer Privacy Act (“CCPA”) and the Virginia Consumer Data Protection Act (“VCDPA”) (collectively the “State Privacy Laws”). In this section, the term “Personal Information” means information defined as “personal information,“ “personal data,” or other similar term under the State Privacy Laws. The State Privacy Laws may provide residents with some or all of the rights listed below. Please note that not all rights listed below may be afforded to all users and that if you are not a resident of one of these states listed above, you may not be able to exercise these rights. In addition, we may not be able to process your request if you do not provide us with sufficient detail to allow us to confirm your identity or understand and respond to it. We may decline your request in certain cases as permitted by law.

Furthermore, this section applies only to Personal Information which OUTRCH collects and processes on its own behalf, such as information collected about employees or agents of Venues in the initiation or administration of Accounts.

With respect to Personal Information of Guests of the Venues that are OUTRCH’s customers, OUTRCH processes such information as a service provider to such Venues. This section does not apply to data collected by OUTRCH as a service provider. Any requests relating to this Personal Information should be directed to the appropriate Venue.

Your privacy rights. The State Privacy Laws may provide residents with some or all of the rights listed below. However, these rights are not absolute and some State Privacy Laws do not provide these rights to their residents. Therefore, we may decline your request in certain cases as permitted by law.

Information. You can request the following information about how we have collected and used your Personal Information during the past 12 months:

The categories of Personal Information that we have collected.

The categories of sources from which we collected Personal Information.

The business or commercial purpose for collecting and/or selling Personal Information.

The categories of third parties with which we share Personal Information.

The categories of Personal Information that we sold or disclosed for a business purpose.

The categories of third parties to whom the Personal Information was sold or disclosed for a business purpose.

Access. You can request a copy of the Personal Information that we have collected about you during the past 12 months.

Appeal. You can appeal our denial of any request validly submitted.

Correction. You can ask us to correct inaccurate Personal Information that we have collected about you.

Deletion. You can ask us, subject to certain exceptions, to delete the personal information that we have collected from you.

Opt-out of processing for targeted advertising purposes. OUTRCH does not process personal information for targeted advertising, but you may contact us at any time to confirm or exercise this right.

Limit processing of Sensitive Personal Information. You can ask us to limit the processing of any Sensitive Personal Information we collect as necessary for our (1) service or product delivery and operations, (2) Compliance and protection, (3) research and development, or (4) service or product improvement and analytics purposes.

Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the State Privacy Laws.

How to Exercise Your Rights to information/know, access, appeal, correction, deletion. You can submit requests to exercise your right to information/know, access appeal, correction and deletion rights by contacting us at or at info@outrch.net.

Processing for targeted advertising purposes. We do not sell personal information, and we do not share or otherwise disclose personal information to third parties for cross-context behavioural or interest-based advertising.

Global Privacy Control website

We do not sell or share any category of personal information with advertising partners.

Verification of Identity; Authorized agents. We may need to verify your identity in order to process your information/know, access, appeal, correction, or deletion requests and reserve the right to confirm your residency. To verify your identity, we may require government identification, a declaration under penalty of perjury, or other information, where permitted by law.

Under the State Privacy Laws, you may be permitted to authorize an authorized agent to make a request on your behalf. However, we may need to verify your authorized agent’s identity and authority to act on your behalf. We may require a copy of a valid power of attorney given to your authorized agent pursuant to applicable law. If you have not provided your agent with such a power of attorney, we may ask you to take additional steps permitted by law to verify that your request is authorized, such as by providing your agent with written and signed permission to exercise your privacy rights on your behalf, the information we request to verify your identity, and confirmation that you have given the authorized agent permission to submit the request.

Additional information for California residents.

Sensitive personal information. We do not use or disclose sensitive personal information for purposes that California residents have a right to limit under the California Consumer Privacy Act.

California categories of personal information. California law requires that we describe to California residents the categories of personal information we collect by reference to certain categories described in the California Consumer Privacy Act (Cal. Civ. Code Section 1798.140(v)):

All categories described in this Policy may include “identifiers” or “inferences”;

Account data may include “commercial information” and “California customer records”;

Payment data may include “financial information,” “commercial information,” and “California customer records”;

Transaction data may include “financial information,” “commercial information,” and “California customer records”;

Communications data and Communication interaction data may include “commercial information,” “California customer records,” and “internet or other electronic network activity information”;

Survey data may include “commercial information” and “California customer records”;

Marketing data may include “commercial information,” “California customer records,” and “internet or other electronic network activity information.”

Online Activity Data, Device Data, Location data, and Log files include “internet or other electronic network activity information” and “geolocation data”.

Shine the light law. Under California’s Shine the Light law (California Civil Code Section 1798.83), California residents may ask companies with whom they have formed a business relationship primarily for personal, family or household purposes to provide the names of third parties to which they have disclosed certain personal information (as defined under the Shine the Light law) during the preceding calendar year for their own direct marketing purposes, and the categories of personal information disclosed. You may send us requests for this information to info@outrch.net. In your request, you must include the statement “Shine the Light Request," and provide your first and last name and mailing address and certify that you are a California resident. We reserve the right to require additional information to confirm your identity and California residency. Please note that we will not accept requests via telephone, mail, or facsimile, and we are not responsible for notices that are not labeled or sent properly, or that do not have complete information.

12. Additional information for European users

Where this Notice to European users applies. The information provided in this Section 12 applies only to individuals in the European Economic Area, United Kingdom, and Switzerland (“Europe”).

Controller. OUTRCH is the controller in respect of the processing of Registered User, Accounts, and website visitor personal data covered by this Policy for purposes of the “GDPR” (i.e., the General Data Protection Regulation 2016/679 (“EU GDPR”) and the EU GDPR as it forms part of UK law (“UK GDPR”). See the ‘Contacting OUTRCH’s section below for our contact details. With respect to personal information of Guests of the Venues that are OUTRCH’s customers, OUTRCH processes such information as a processor under GDPR to such Venues. Such Venues determine the purposes and means of processing of any personal information collected from Guests, constitute the controller under GDPR with respect to such personal information and consequently, with respect to such information, the privacy policies of such Venues govern.

Our GDPR Representatives. Where required, OUTRCH has appointed representatives in the EU and the UK. Enquiries relating to those appointments, or to this Policy, should be sent to info@outrch.net.

By email to: info@outrch.net.

Legal bases. In respect of each of the purposes for which we use your personal data, the GDPR requires us to ensure that we have a “legal basis” for that use. Our legal bases for processing your personal data described in this Policy are listed below.

Where we need to perform a contract, we are about to enter into or have entered into with you (“Contractual Necessity”).

Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests (“Legitimate Interests”). More detail about the specific legitimate interests pursued in respect of each purpose we use your personal data for is set out in the table below.

Where we need to comply with a legal or regulatory obligation (“Compliance with Law”).

Where we have your specific consent to carry out the processing for the Purpose in question (“Consent”).

We have set out below, in a table format, the legal bases we rely on in respect of the relevant purposes for which we use your personal data – for more information on these purposes and the data types involved, see ‘Use of your data’ above.

Retention. We retain personal data for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for Compliance and protection purposes.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

No Automated Decision-Making and Profiling. As part of the Service, we do not engage in automated decision-making and/or profiling, which produces legal or similarly significant effects.

Your rights.

The GDPR gives you certain rights regarding your personal data. If you are located in Europe, the UK, or Switzerland you may ask us to take the following actions in relation to your personal data that we hold:

Access. Provide you with information about our processing of your personal data and give you access to your personal data.

Correct. Update or correct inaccuracies in your personal data.

Delete. Delete your personal data where there is no good reason for us continuing to process it - you also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below).

Transfer. Transfer a machine-readable copy of your personal data to you or a third party of your choice.

Restrict. Restrict the processing of your personal data, for example if you want us to establish its accuracy or the reason for processing it.

Object. Object to our processing of your personal data where we are relying on Legitimate Interests – you also have the right to object where we are processing your personal data for direct marketing purposes.

Withdraw Consent. When we use your personal data based on your consent, you have the right to withdraw that consent at any time.

Exercising These Rights. You may submit these requests by email to info@outrch.net. We may request specific information from you to help us confirm your identity and process your request. Whether or not we are required to fulfill any request you make will depend on a number of factors (e.g., why and how we are processing your personal data), if we reject any request you may make (whether in whole or in part) we will let you know our grounds for doing so at the time, subject to any legal restrictions.

Data Processing outside Europe. Our service providers, advisers, partners and other recipients of data may be located in countries outside Europe. Where personal data is transferred outside Europe, we rely on an appropriate transfer mechanism recognised under applicable data protection law, such as the European Commission's standard contractual clauses together with any additional safeguards required.

It is important to note that the US is not the subject of an ‘adequacy decision’ under the GDPR – basically, this means that the U.S. legal regime is not considered by relevant European bodies to provide an adequate level of protection for personal data, which is equivalent to that provided by relevant European laws.

Where we share your personal data with third parties who are based outside Europe, we try to ensure a similar degree of protection is afforded to it by making sure one of the following mechanisms is implemented:

Transfers to territories with an adequacy decision.

We may transfer your personal data to countries or territories whose laws have been deemed to provide an adequate level of protection for personal data by the European Commission or UK Government (as and where applicable) (from time to time).

Transfers to territories without an adequacy decision

We may transfer your personal data to countries or territories whose laws have not been deemed to provide such an adequate level of protection (e.g., the U.S., see above).

However, in these cases:

we may use specific appropriate safeguards, which are designed to give personal data effectively the same protection it has in Europe – for example, standard-form contracts approved by relevant authorise for this purpose; or

in limited circumstances, we may rely on an exception, or ‘derogation’, which permits us to transfer your personal data to such country despite the absence of an ‘adequacy decision’ or ‘appropriate safeguards’ – for example, reliance on your explicit consent to that transfer.

You may contact us if you want further information on the specific mechanism used by us when transferring your personal data out of Europe.

13. Contacting OUTRCH

If you have any questions, concerns or complaints about this Policy or our data collection or processing practices, or if you want to report a security issue, please contact us by email. Requests addressed to an EU or UK representative may also be sent to the same address.

By email at: info@outrch.net

OUTRCH is an independent company. OUTRCH is independently owned and is not affiliated with, or a subsidiary of, any delivery marketplace.