Privacy Policy

1. Overview

At Scoot, we’re working hard to serve our customers, communities, and planet a little better every day. To do this, we need to be able to offer you products and services that meet these goals. Looking after the data you share with us and our Retail Partners is a hugely important part of this. We want you to be confident that your data is safe and secure with us, and that you understand how we use it to offer you a better and more relevant shopping experience.

This privacy notice covers the activities of Booker Limited in relation to our rapid online delivery service, “Scoot”,

SCOOT is a registered trademark of Booker Limited (a company registered in England and Wales with the company number: 00197380). Booker’s registered office is at: Equity House, Irthlingborough Road, Wellingborough, NN8 1AT. Our VAT number is: GB 220 4302 31. (‘Scoot, we, our or us’).

Scoot has agreements with various independently owned convenience stores who operate their businesses under the brand names Londis, Premier, Budgens or Family Shopper (Retail Partners’). Scoot provides a service to Retail Partners by providing a platform for them to sell their products to customers. These Retail Partners have been invited to create their own individual online stores on the App where they can list and sell their products for delivery to customers in their local area.

When you purchase a product on the App, you enter a contract directly with one of our Retail Partners who you will have selected (your ‘Local Store’). Scoot is not a party to any contract entered into by you or any Retail Partner. Scoot is not an agent for Retail Partners and does not assume any responsibility arising out of, or in connection with, the sale or delivery of your Orders.

The data controller for Scoot is the relevant company whose services are being used (collectively referred to in this Notice as “Booker”, “Scoot” or “we”, “our” or “us”). Where the data controller is another party such as your nominated Retail Partner or a 3rd party payment provider this will be clearly referenced in this notice, and you should refer to the other party’s own privacy notice for details of what data they process about you and how they use this information.

When you shop and/or purchase goods via the Scoot (IOS or Android) App, goods will be supplied and delivered to you directly from one of our Retail Partners. We collect and create personal data about you to assist in this order and delivery process. This is also the case when you communicate with us or enter a competition.

Scoot is a trademark of Booker. Bookers serve a variety of customers, and this notice applies to you if you use our Scoot services.

This Privacy policy does the following:

sets out the different ways you interact with us and the types of personal data that we collect.
explains the reasons why we use the data we collect.
explains when and why we will share personal data within Booker, with Retail Partners and with other organisations.
explains the rights and choices you have when it comes to your personal data (including your marketing and cookie preferences).

2. What does Scoot know about me?

Scoot will collect and create different types of data. These include the following broad types of data.

Aggregated data

We try and remove personal data we don’t need. If we remove enough personal data, it becomes anonymous. This means that you can’t be identified.

We might also take data we hold and remove certain information and replace it with other non-identifying information, such as an ID number or reference number. This is an extra technique we use to protect data.

Identity and contact data (name, address, phone number, username, email address, and location)

This is information that helps us identify who you are and how we can contact you. This includes your name, title, order number, address, email, username and telephone number. It also helps us manage the account(s) you hold with us and allows us to locate the nearest Scoot Retail Partners to your location. Some of this data will be passed on to your Nominated Retail Partner if you place an order for delivery via the Scoot App with them.

Payment data

Scoot does not collect any financial or payment data for any orders placed using the Scoot App. For any orders you place with one of our Retail Partners, the contract for this will be between you and them and payment will be taken by them via a payment services provider. Your Nominated Retail Partner will be the data controller for any of your personal data used to place an order, pay for and deliver the goods to you via the Scoot App.

If you place an order which includes any age restricted products then at the point of delivery the Retail Partner or their nominated delivery courier will need to see and validate your photo ID before the age restricted products are handed over to you – this is to meet the Challenge 25 ID checks.

User and interaction data (how you interact with products and services)

User data is information collected about you as a user of the Scoot App and service. This may include where you engage with us in a survey; provide feedback on your shopping experience; or raise a complaint.

We’ll also collect information about you that allows us to create an analysis of you as a customer. This is to better judge what products and services to offer you.

Interaction data is information about how you interact with the Scoot App and website namely what you click on and interact with on our sites and app. This includes data about the order and time you place your order and select products.

Marketing data

This is information about your marketing preferences and your interaction with online marketing. For example, we can see when you open marketing emails and/or other electronic marketing messages from Scoot (you can opt out of marketing at any time by telling us). This also includes if you interact with adverts from Scoot while browsing the internet. This enables us to judge effectiveness when we compare your interactions with what you’ve purchased.

Technical device data

This is information about the device you use to access our websites and app. This could be information that identifies your device, its operating system, internet address, your sign-in data, browser and plug-ins, location, where you came to our site from and where you go when you leave, as well as how often you visit. This is done via the use of cookies, which is covered further down in this notice.

Special category data

This is special information that the law says is more sensitive (sometimes it’s referred to as ‘sensitive personal data’) and it needs more protection. Scoot do not collect any special category data. If we do collect sensitive personal data in our future interactions with you (for example, if you’re making a complaint to us, or reporting an accident), we’ll clearly explain what we’re doing, and we’ll only collect the data with your consent.

3. Why do you need to know this about me?

We’ve carefully considered the reasons for collecting and/or creating this data. Here’s a summary of when and why we believe it’s appropriate.

To make our services and those of our Retail Partners available to you

This means that processing your personal data allows us to:

manage the account(s) you hold with us
process your orders by referring you to one of our Retail Partners

Why do we process your personal data in this way?

We need to process your personal data so that we can manage your customer account, direct you to your local Retail Partner(s) thus enabling you to order and pay for the goods you want to buy, and help you with any queries or complaints that you may have.

Why we’re using this data (our ‘legal basis’ for doing so)

Legitimate interests – to enable you to use the Scoot App, to help you find your local Retail Partner, to facilitate you with placing an order with your Nominated Retail Partner and for them to deliver your order to your chosen location.
Consent – for marketing purposes.
Legal obligation – transactions information which is required under UK regulations such as the Organisation for Economic Development (OECD) Model Reporting Rules for Digital Platforms.

We won’t be able to facilitate you ordering your goods from your Nominated Retail Partner if you don’t provide us with this data.

To manage and improve our day-to-day operations.

Help to develop and improve our services, know-how and the way we communicate with you.

Why do we process your personal data in this way?

We rely on the use of personal data to carry out internal research and development. It also helps us to improve our information technology systems (including security), and our services. This allows us to serve you better.

Detect and prevent fraud or other crime.

Why do we process your personal data in this way?

It’s important for us to monitor how the Scoot App is used to detect and prevent fraud, other crimes, and the misuse of the Scoot App. This helps us to make sure that you can safely use the Scoot App.

Why we’re using this data (legal basis)

Legitimate interests

To personalise your Scoot experience

Manage and improve our websites and mobile app.

Why do we process your personal data in this way?

We use cookies and similar technologies on our websites and the Scoot App to improve your experience.

Some cookies are necessary so you shouldn’t disable these if you want to be able to use all the features of our websites and the Scoot App. You can disable other cookies, but this may affect your experience. For more information about cookies and how you can disable them, see the cookies and similar technologies section.

Use your online browsing behavior, and online purchases (including transactions), to help us better understand you as a customer and provide you with personalized offers and services.

Why do we process your personal data in this way?

We use basic data about your general shopping habits (and those of similar customers) to group customers into different segments. This allows us to personalise our offers and services for you (including in our marketing communications).

Provide you with relevant marketing communications, relating to the products and delivery services offered by our Retail Partners.

If we or our supplier partners run online advertising on the Scoot App, we may measure the effectiveness of this advertising. To do this, we may use certain basic data about your online purchases (for example if you bought a particular product that was featured in an advert). However, we limit this to what is necessary, and it is always obscured or anonymised to protect your identity. When we share your data in this way, it won’t be used by those platforms for their own purposes and will be deleted shortly after.

Why do we process your personal data in this way?

We want to make sure that we provide you with marketing communications, including in-app advertising, that are relevant to your interests. To achieve this, we measure your responses to marketing communications relating to the products and delivery services that our Retail Partners offer. This means that your needs as a customer can be better met.

Why we’re using this data (consent)

We will send you relevant offers and news about our Retail Partner’s products and delivery services via the Scoot App where you have provided consent.

Changing your preferences

You can change your marketing preferences with us at any time by through your online account with us if you have one.

To contact and interact with you

Contact you about, for example by phone, email, or post, chat, or by responding to social media posts that you’ve directed at us.

Why do we process your personal data in this way?

We want to serve you better as a customer, so we use personal data to provide you with clear information or help in response to your communications.

Review and Manage promotions you purchase

Why do we process your personal data in this way?

We need to process your personal data, so that we can manage the promotions you choose to purchase including those we run with our supplier and other third parties.

Why we’re using this data (legal basis)

Legitimate interests

4. Why are you allowed to use my data in this way?

Whenever an organisation uses data, they must have a reason to use it. The law gives certain reasons for the use of data and Scoot will always use data according to one of those reasons. In the section ‘Why do you need to know this about me?’ we’ve stated the different reasons that we might hold data.

In this section, we explain why we think those reasons are suitable and what this means for you.

There’s often a focus on consent to use personal data but, in many circumstances, consent wouldn’t be appropriate. For example, a consumer withdrawing consent to be monitored for security issues would increase risk to you and our Retail Partners; or for example a consumer withdrawing consent to process their payment information, would increase the financial risk to Scoot’s and our Retail Partner’s businesses.

Therefore, in many situations, Scoot relies upon other legal reasons. For example, Scoot may have a legal obligation to report transactional information to HMRC. Where there is a legal obligation then we must comply to ensure we are not in breach of any UK regulations.

Another reason is called ‘legitimate interests. This is when there are legitimate and reasonable reasons when Scoot might collect and use data. For example, collecting information through our website and the Scoot App is beneficial to both you and Scoot to ensure we keep the website and your data secure.

Our use of your personal data when based on ‘legitimate interests’ are to:

promote and market our Retailer Partner’s products and delivery services, and those of our other partners and service providers.
service your account (such as your Scoot account), manage complaints, and resolve any disputes.
protect and support our business, colleagues, customers and shareholders.
prevent and detect anti-social behaviour, fraud and other crime.
test and develop new products and services as well as improve existing ones.

We’ve assessed these fundamental reasons against the fundamental rights and freedoms provided to you under the law and balanced them up against the benefit both you and Scoot might receive from this data being used.

5. How does Scoot look after my data?

We know how important it is to protect and manage your personal data. This section sets out some of the measures we have in place.

We make sure staff are trained and rules are in place to ensure that data is used properly.
We have physical protections and digital/electronic systems in place to keep what we hold secure.
When data is moved or transferred, we make sure it’s encrypted (scrambled).
We use computer safeguards such as firewalls and data encryption to keep this data safe when it’s not being moved.
We only allow access to authorised colleagues and partners and suppliers.
We regularly watch our systems for possible weaknesses and attacks, and we carry out tests (penetration testing) to see what can be improved.
We’ll ask for proof of identity before we share your personal data with you.
We’ll reveal only the last four digits of your payment card number when confirming an order.

Your personal data may be transferred outside the UK. It may also be processed by companies outside the UK who work for us (or for one of our service providers). When we do this, your personal data will be subject to appropriate protections. If we do transfer personal data to outside of the UK, it’ll be protected in the same way as if it was being used in the UK. To do this, we use one of the following safeguards:

We transfer to a non-UK country whose privacy laws ensure an appropriate level of protection for personal data.
We put in place a contract with a third party that means they must protect personal data to the same standards as the UK.
We transfer personal data to organisations that are part of specific agreements on cross-border data transfers with the UK.
We complete a transfer risk assessment before agreeing to transfer data to any organisation who are in a country that does not have specific cross border arrangement and only if we decide the risk is low, we will progress and ensure we put in place an International Data sharing agreement with those organisations alongside a contract so that they protect the data to the same standards as the UK.

6. Do you keep my data forever?

We won’t keep your personal data longer than we need to. In most circumstances, this means we won’t keep your personal data for more than 7 years after the end of your relationship with us. For certain data sets, we have the following specific retention periods:

Information about purchases and the payment information relating to those purchases might be kept for up to 7 years after the transaction to allow us to meet statutory financial reporting requirements in areas such as VAT returns, Anti money laundering, investigate fraud and handle legal claims
Customer complaints and feedback will be deleted 4 years after the date of the last communication
Where your personal data is needed because of a serious dispute (such as litigation) or investigation, your personal data will be deleted 7 years after the matter is closed.
When a customer has not shopped with Scoot for 2 years or more, the account will be closed and can no longer be used, and any personal data held will be anonymised.

7. Do you share my data?

We may share personal data with other organisations (including other Booker companies, Group companies and Retail Partners as listed below) in the following circumstances:

In order to facilitate you placing an order with and receiving delivery of products from your Local Store.
To offer you other products that our Retail Partners sell which may be of interest to you.
Enable third parties to market their goods and services to you in accordance with your marketing preferences.
We may share personal data with other organisations in the following circumstances;
If the law or a public authority says we must share the personal data.
To establish, exercise or defend our legal rights or we need to by law (this includes for the purposes of preventing fraud and reducing credit risk).
To investigate or manage any complaints that you may have about deliveries, products or services.
Where we restructure, sell, or transfer our business (or a part of it). For example, in connection with a takeover or merger.
To any company within the Booker Group of companies (see section 9 “What about other companies in the Tesco/Booker Group?” below for more details).

8. Service providers

These are organisations that help us to deliver and improve the services we offer to you. For example:

technology and data services (such as storing, combining, and analysing data).
fulfilment of orders.
Payment providers such as DNA Payments.
legal or other professional services.
those who provide services on our behalf such as managing our website and Scoot App services .
We only share personal data that enable our service providers and Retail Partners to provide their services and they only use it for purposes agreed with us. We may also combine service providers data with data held by Booker to understand your purchases and interactions with us better.

9. What about other companies in the Tesco/Booker Group?

Booker Limited, Makro Self Service Wholesalers Limited, Booker Retail Partners (GB) Limited, Booker Direct Limited and Venus Wines and Spirits Plc are all part of the Booker Group. We may share personal data we collect with other companies in the Booker Group. For example, we may share your consumer data amongst other Booker Group companies to enable us to deliver your services from the most convenient location to you.

Booker is part of the Tesco Group, which includes companies such as Tesco Stores limited, Tesco Mobile, dunnhumby, One Stop and Tesco Business Solutions. Data sharing is needed and essential for several reasons including corporate governance, provision of services e.g GDPR and intrusion detection, as well as achieving effective business management. For the avoidance of doubt, none of your product order data is shared with or used by the wider Tesco Group outside of the Booker Group.

10. What about my Local store?

Your Local Store will be the data controller for any of your personal data the purposes of;

agreement to supply goods to you the consumer which have been placed and paid for via the Scoot App including communications of out of stocks and substitutions,
Invoicing you
Delivery of the goods to you the consumer including age verification checks
Communicating with you on any queries, recalls or complaints.

You should contact your local store for further information on how and why they are processing your data for these purposes if you have placed an order with them via the Scoot App.

11. Cookies

We use cookies and similar technologies, such as tags and pixels (‘cookies’), to personalise and improve your customer experience as you use our websites and mobile app, and to provide you with relevant online advertising. This section provides more information about cookies, including how we use them and how you can make choices about our use of cookies.

How we use cookies

Cookies are small text files containing a unique identifier, which are stored on your computer or mobile device so that your device can be recognised when you’re using a particular website or mobile app. Some cookies may be used only for the duration of your visit, and others may be used to measure how you interact with services and content over time. Cookies help to provide important features and functionality on our websites and mobile app, and to improve your experience. Cookies can also be used to help us detect fraudulent activity or to prevent security breaches, so we may record information about your device within the cookie. The reasons we use cookies are;

Improve the way our websites and mobile apps work

Cookies allow us to improve the way our Websites and Mobile Apps work, so that we can personalise your experience and allow you to use many of their useful features. For example, we use Cookies so we can remember your preferences and the contents of your shopping basket when you return to our Mobile Apps.

Improve the performance of our websites and mobile apps

Cookies can help us to understand how our Websites and Mobile Apps are being used, for example, by telling us if you get an error messages as you browse.

These Cookies collect data that is mostly aggregated and anonymous.

Deliver relevant online advertising

We use Cookies to help us deliver online advertising that we believe is most relevant to you on our websites and other organisations' websites and using social media.

Cookies used for this purpose are often placed on our websites by other companies providing specialist services to us. These Cookies may collect information about your online behaviour, such as your IP address, the website you arrived from and information about your purchase history or the content of your shopping basket. This means that you may see our adverts on our websites and on other organisations' websites. You may also see adverts for other organisations on our websites.

Measuring the effectiveness of our marketing communications, including online advertising

Cookies can tell us if you have seen a specific advert or message, and how long it has been since you have seen it. This information allows us to measure the effectiveness of our online advertising campaigns and control the number of times you are shown an advert.

We also use Cookies to measure the effectiveness of our marketing communications, for example by telling us if you have opened a marketing email that we have sent you.

A list of the cookies we use can be found here;

Your choices when it comes to Cookies

Web browser cookies

You can use your browser settings to accept or reject new cookies and to delete existing cookies. You can also set your browser to notify you each time new cookies are placed on your computer or other device. You can find more detailed information about how you can manage cookies through your browser’s help function.

If you choose to disable some or all cookies, you may not be able to make full use of our websites or the Scoot App. For example, you may not be able to add items to your shopping basket, proceed to checkout, or use any of our products and services that require you to sign in. To manage your cookies, click here.

12. What rights do I have (including subject access)?

Subject Access

You have the right to see the personal data we hold about you. This is called a Subject Access Request or SAR.

If you’d like a copy of the personal data we hold about you, you can see this in your account settings and order history, for anything else please email us DSAR@booker.co.uk

Inaccurate data

If you believe we hold inaccurate or incomplete data, please let us know and we’ll correct it. You can manage changes to your data via you account profile on the App.

Withdrawal of consent

Where you gave us, information based upon your consent, if you withdraw that consent, we’ll stop using that data.

Objection to our use of your data

We’ll consider your objection to our use of your personal data. If, on balance, your rights outweigh our interests in using your personal data, then you can ask us to either restrict our use of it or delete it. In almost all cases relating to marketing, we’ll stop using that data at your request.

Restriction to use your data

There are several situations when you can restrict our use of your personal data. This includes (but is not limited to):

You’ve successfully made a general objection (as above)
You’re challenging the accuracy of the personal data we hold
We’ve used your personal data unlawfully, but you don’t want us to delete it

Deletion

There are several situations when you can have us delete your personal data. This includes (but is not limited to):

We no longer need to keep your personal data
You’ve successfully made a general objection (as above)
You’ve withdrawn your consent to us using your personal data (and we don’t have any other grounds to use it)
We’ve unlawfully processed your personal data

Complain to the data protection regulator (ICO)

We’d like the chance to resolve any complaints you have. However, you also have the right to complain to the UK data protection regulator (the ‘ICO’) about how we’ve used your personal data.

More information on your data protection rights

The ICO website also contains more detail on the data protection rights mentioned above, or if you’d like to speak to us about these rights in more detail, see the ‘how to contact us’ section below.

13. How can I contact Scoot about my data?

We want to ensure that the personal data we hold about you is accurate and up to date, if any of the details are incorrect and you can’t change them in your account on the App please let us know and we will amend them.

If you have any questions, wish to exercise any of your rights or have any complaints about how Scoot uses your personal data, please contact us.

Phone: 01933 371000

Email: Booker Group, Head of Data Privacy & Risk (Registered Data Protection Officer), Equity House, Irthlingborough Road, Wellingborough, Northants. NN8 1LT

Email: DPO@booker.co.uk

We reserve the right to make changes to this Privacy Notice from time to time, so please take time to review this periodically.

NEW: February 2025