Privacy Policy

This privacy notice describes how and why Zipline International Inc. ("Zipline," "we," "us," or "our") collects, stores, uses, and shares ("process") personal information in connection with our Services, such as when you:

• Download our app or visit our website at https://zipline.com, or any website or app that links to this privacy notice;
• Engage with us in other related ways, including any sales, marketing, or events; or
• Purchase, register or otherwise use or receive Zipline delivery or distribution.

Notice of Collection: For California residents, learn more about what categories of personal information we may collect, how we may use that personal information, how we may collect that personal information, how we may disclose those categories of personal information, your privacy rights, and additional information provided below in the section titled “California Privacy Rights.”

Where Zipline fulfills orders placed on a Merchant’s app, website, or similar platform, the data controller is that Merchant and Zipline is a processor. In all other cases, the data controller for the purposes of processing personal data in the context of the Services is Zipline International Inc., located at 333 Corey Way, South San Francisco, California 94080, USA.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. By using our Services, you acknowledge this privacy notice. If you have questions or concerns about Zipline’s handling of your personal information, please contact us at privacy@flyzipline.com.

I. DEFINITIONS

1. Depending on the context, "you" may mean "User" or "Merchant".

• User is defined as someone who: (a) interacts with Zipline’s app, including by (i) downloading the app, (ii) registering for a Zipline account, or (iii) placing an order for delivery on Zipline’s app; (b) places an order on our Merchant’s website or app for Zipline delivery; or (c) visits Zipline’s website.

• Merchant is defined as an entity, or a person acting on behalf of an entity, who does business with or transacts with Zipline (such as by procuring Zipline’s delivery services for your restaurant’s patrons, or contracts with Zipline to provide inter-facility delivery for your organization).

1. “Services” means our drone-based delivery services and everything we do to enable them, such as providing our mobile app, sending and receiving order information from our Merchants, communicating with Users or Merchants about our services, or developing or improving our hardware and software, and any other website, service, or activity that links back to this privacy notice.

II. INFORMATION WE PROCESS ON BEHALF OF MERCHANTS

If you place an order from one of our Merchants using their website or app or other method provided by the Merchant and choose Zipline as the delivery method (or the Merchant uses Zipline for the delivery), we may process your personal information on that Merchant’s behalf. Our processing of this personal information is at the direction of Merchant and is subject to our agreements with them. If you have a question about how this personal information is processed, please contact the Merchant from which you purchased the item.

III. WHAT PERSONAL INFORMATION DO WE COLLECT?

We may collect the following categories of personal information.  For example, we collect personal information that you provide to us when you register for the Services, express an interest in obtaining information about us or our products and Services, when you use the Services, request customer service support or otherwise communicate with us, or that is otherwise disclosed to you at the time of collection. We may process the following categories of personal information in connection with our Services:

1. User Contact Information. We may collect your name, phone number, delivery address, email address, and other contact information provided to us by you.

2. Account Information. We may collect your username, password, and contact preferences.

3. Order Data. We may collect your order data and order history when you use our Services, such as when you place a delivery order.

4. Log Data. When you use the Services, we may collect information such as your Internet Protocol (IP) address and/or domain, the type and version of your Internet browser software and operating system you use, the date, time, and duration of your use of the Services, the specific pages, buttons, images, links, and forms that you access while visiting the Services, your in-app search history, the type of device you use to access the Services, and your mobile carrier and/or Internet Service Provider.

5. Health-Related Information. When using or interacting with our Services, we may collect information that may indicate information regarding your health status such as certain product purchase information.

6. Location Information. If you have consented by enabling location access on your phone, we may receive your precise location information to determine if such location is a serviceable delivery address. You may use our Services without enabling the collection of precise location information by manually entering in your delivery address in our app.

7. Delivery Location Data. When you order a delivery and when we provide the Services, we may collect terrain, geodata, and imagery of delivery areas and other adjacent areas, which may include images of individuals or other objects within the field of view of our drones, and which we may associate with your account.

8. User Interactions. In some cases, we may collect click or touch stream data, movement, scroll, keystroke activity and third-party sites or services you were using before and after interacting with the Services.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Some of the personal information we collect from or about you may reflect sensitive personal information under relevant laws.

IV. COOKIES AND SIMILAR TECHNOLOGIES

We use automated means to collect some information. We and our third-party partners and providers may use (i) cookies or small data files that are stored on an individual’s computer and (ii) other similar technologies, such as web beacons, pixels, embedded scripts, location-identifying technologies, and logging technologies (collectively, "cookies") to automatically collect certain information when an individual visits or interacts with the Services. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.

V. INFORMATION COLLECTED FROM OTHER SOURCES

We may collect personal information about you from other sources, including the following sources:

1. Merchants. Merchants using Zipline’s delivery Services may provide us with information about Users, including name, address, phone number, and requests for delivery. We use this information for the purposes disclosed in this privacy notice and to provide relevant Services to you, including to determine whether you are in our service range now or in the future, and provide you with delivery at your requested date and time. We may also use this information to market our Services or communicate offers to you unless you opt out of those uses.

2. Third Party Information. In order to enhance our ability to provide relevant marketing, offers, and services to you and update our records, we may obtain information about you from other sources, such as public databases, joint marketing partners, affiliate programs, and from other third parties. This information includes mailing addresses, job titles, email addresses, phone numbers, intent data (or behavior data), Internet Protocol (IP) addresses, social media profiles, social media URLs, and custom profiles. We may use this information to provide or enhance the Services, and may also use it to tailor the way we market our Services and promote events related to the Services.

3. Analytics. We may use third-party web analytics services on the Services, such as Google Analytics, to understand how you engage with our website and apps and for certain advertising related purposes. The information collected by the technology will be disclosed to or collected directly by these service providers, who use the information to evaluate your use of the Services. To prevent Google Analytics from using your information for analytics, you may install the Google Analytics Opt-out Browser Add-on.

4. Advertising. Our vendors may use cookies to collect information about your activities on the Services and other websites to provide you targeted advertising based upon your interests. For more information and to learn about how to opt out, please see our Cookie Notice.

VI. HOW DO WE PROCESS YOUR INFORMATION?

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

1. To facilitate account creation and otherwise manage accounts. We may process your information so you can create and log in to your account, as well as keep your account in working order.

2. To validate whether you are in our service areas. We may process your personal information to determine if we serve your location, or soon will, and to identify future service areas.

3. To deliver and facilitate delivery of Services. We may process your personal information to provide the Services.

4. To respond to inquiries/offer support. We may process your personal information to respond to your inquiries and solve any potential issues you might have with the Services.

5. To fulfill and manage your orders. We may process your personal information to fulfill and manage your orders, payments, returns, and exchanges made through the Services.

6. To request feedback. We may process your personal information when necessary to request feedback and to contact you about your use of our Services.

7. To send you marketing and promotional communications. We may process the personal information you send to us for our marketing and promotional purposes, including by sending you marketing and promotional materials via email, direct mail, and SMS messaging. You can opt out of our marketing emails and SMS messages at any time. For more information, see "What Are Your Privacy Rights and Choices?" below.

8. To deliver personalized advertising to you. We may process your personal information to develop and display personalized advertising tailored to your interests, location, and more.

9. To deliver targeted advertising to you. We may disclose personal information (e.g., identifiers and service and platform usage) to advertising partners to provide you with personalized ads on third-party platforms, which may constitute a “sale” or “sharing” of your personal information.

10. To deliver personalized content to you. We may process your personal information to develop and display personalized content to you.

11. To protect our Services. We may process your personal information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.

12. To identify usage trends. We may process personal information about how you use our Services to better understand how they are being used so we can improve them.

13. To determine the effectiveness of our marketing and promotional campaigns. We may process your personal information to better understand how to provide marketing and promotional campaigns that are most relevant to you.

14. To save or protect an individual’s vital interest. We may process your personal information when necessary to save or protect an individual’s vital interest, such as to prevent harm.

15. To comply with our legal obligations, such as subpoenas or other legal requests. We may process your personal information to comply with any legitimate legal obligation in relevant jurisdictions.

16. To maintain records for internal business purposes. We may process your personal information to maintain and update records for internal business purposes.

17. To conduct our business and provide our services. We may process your personal information, including by reviewing visual data captured during delivery, to provide, maintain, protect, promote and improve our Services, and to develop new services.

18. To send administrative information. We may process your personal information to send important notices, updates, security alerts, support, and other administrative messages to you or others affiliated with your account.

19. To carry out any other purpose described to you at the time we collect your information. We may process your personal information for a purpose described to you at the time we collect your personal information.

VII. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

We only process your personal information when we have a valid legal reason (i.e., legal basis) to do so under applicable law. This means that either we’ve obtained your consent to process the information or we need to process it in order to comply with applicable law, provide you with the Services, enter into contractual obligations with or fulfill our contractual obligations to you, protect your rights, or fulfill our legitimate business interests.

If you are located in the European Economic Area ("EEA"), or the United Kingdom ("UK"), this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:

1. Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time.

2. Performance of a Contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.

3. Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal information for some of the purposes described in order to:

• Send information about special offers and discounts on our products and Services;
  • Develop and display personalized and relevant advertising content;
  • Analyze how our Services are used so we can improve them;
  • Support our marketing activities;
  • Diagnose problems and/or prevent fraudulent activities; or
  • Understand how our products and Services are being used so we can improve the service experience.

1. Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.

2. Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:

• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way.
• For investigations and fraud detection and prevention.
• For business transactions provided certain conditions are met.
• If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim.
• For identifying injured, ill, or deceased persons and communicating with next of kin.
• If we have reasonable grounds to believe an individual has been, is, or may be a victim of financial abuse.
• If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province.
• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records.
• If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced.
• If the collection is solely for journalistic, artistic, or literary purposes.
• If the information is publicly available and is specified by the regulations.

If you are located in other countries outside the US, this section applies to you.

By accessing the Services and providing us with your information, you acknowledge that your information may be transferred outside the country in which you reside, including, but not limited to the United States, where data protection and privacy regulations may not offer the same level of protection as in other parts of the world and where the information may be accessible to law enforcement and national security authorities of that jurisdiction. Where legally required, we use appropriate safeguards for transferring your data outside of your jurisdiction. This includes using Standard Contractual Clauses for information of EEA and UK residents.

VIII. WHEN AND TO WHOM DO WE DISCLOSE YOUR PERSONAL INFORMATION?

We disclose the categories of personal information described above with the following categories of third parties in order to fulfill your requests, provide the Services, run our business, and comply with legal obligations, among other purposes:

1. Vendors, Consultants, and Other Third-Parties that Assist with Our Business. We may disclose your data to third-parties, processors, vendors, or agents ("vendors") who perform services for us or on our behalf and require access to such personal information to do that work.

2. Recipients of Business Transfers. We may disclose or transfer your personal information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

3. Affiliates. We may disclose your personal information to our affiliates. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.

4. Business or Government Partners & Merchants. We may disclose your personal information to our business or government partners and Merchants, such as merchants whose products you seek to have delivered, to fulfill your orders, meet applicable government regulations or Merchant requirements, or offer you certain products, services, or promotions.

5. Law Enforcement Agencies, Regulatory or Governmental Bodies, or Other Third Parties. We may disclose your personal information in order to respond to a legal process, comply with any legal obligation, protect or defend our rights, interests or property or that of third parties, or prevent or investigate wrongdoing in connection with the Services.

6. Other Third Parties With Your Consent. We may share your personal information in other ways if you have asked us to do so or have given your consent.

IX. HOW LONG DO WE KEEP YOUR INFORMATION?

We will keep your personal information for as long as it is necessary for the purposes set out in this privacy notice. We may also keep your information when necessary to comply with contractual and legal obligations, or when we have a legitimate interest to do so (such as improving and developing the Services and enhancing the safety, security, and stability of the Services). We may also store your personal information in order to defend or ascertain our legal rights, respond to valid legal requests, in the context of a merger/acquisition, or in order to implement our Terms of Service.

In all cases, in addition to the purposes, we consider the amount, nature, and sensitivity of the personal information, as well as the potential risk of harm from unauthorized use or disclosure of your personal information, in determining how long to retain personal information.

X. HOW DO WE KEEP YOUR INFORMATION SECURE?

We use a system of organizational and technical security measures designed to protect your personal information.

We have implemented technical and organizational security measures designed to protect the security of personal information we process. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot ensure or guarantee the security of any information transmitted to or generated by Zipline in connection with the Services, or any other service offered by Zipline. Transmission of personal information to and from our Services is at your own risk.

XI. WHAT ARE YOUR PRIVACY RIGHTS AND CHOICES?

Depending on your jurisdiction, and subject to certain exceptions, exemptions, and restrictions, you may exercise the following rights:

1. Your Privacy Rights. Applicable law may give you various rights regarding your personal information. If these rights apply to you, you may request that we:

• Confirm whether we process your personal information or provide access to and/or a copy of certain information we hold about you;
  • Object to the use or disclosure of your information for certain purposes (including direct-marketing purposes);
  • Opt-out of the processing of your personal data for targeted advertising or selling your personal information;
  • Update personal information which is out of date or incorrect;
  • Delete certain personal information which we are holding about you;
  • Restrict the way that we process or disclose your personal information, including any automated processing or profiling;
  • Transfer your personal information to a third party provider of services; and
  • Revoke your consent for the processing of your personal information.

Zipline will not discriminate against you for exercising any of your applicable rights. We reserve the right to deny your request if we cannot verify your identity or if an exemption or exception applies.

2. Privacy Rights Requests. You may exercise your privacy rights by contacting us by using the contact details provided in the section "How Can You Contact Us About This Notice?" below. Certain personal information may be exempt from such requests under applicable law. For example, we may need certain types of information so that we can provide the Services to you. If you ask us to delete it, you may no longer be able to access or use the Services. In exercising your privacy rights, you may be required to provide additional information to verify your identity before we fulfill your request.

3. Complaints. If applicable, you may make a complaint to the data protection supervisory authority in the state or country where you are based.

XII. CONTROLS FOR DO-NOT-TRACK FEATURES

Do Not Track ("DNT") is a privacy preference that Users can set in certain web browsers. We do not currently recognize or respond to browser initiated DNT signals. Learn more about Do Not Track. Please note that Do Not Track is a different privacy mechanism than the Global Privacy Control browser choice referenced below.

XIII. THIRD-PARTY LINKS

The Services may contain links to other websites or services that are not controlled by Zipline. Your use of a third-party website or any of its informational content is subject to and governed by the privacy policies, terms, and conditions of that website. We are not responsible for the privacy practices of any third-party websites.

XIV. CALIFORNIA PRIVACY RIGHTS

If you are a resident of California, we need to provide certain additional information to you.

This section applies only to "personal information" about California residents, as that term is defined in the California Consumer Privacy Act ("CCPA"), and it supplements the information in the rest of this Privacy Notice. Data about individuals who are not residents of California may be handled differently and is not subject to the same California rights described below.

1. CCPA Categories of California Personal Information We Collect. Throughout this Privacy Notice, including the "What Information Do We Collect?" section, we discuss in detail the specific pieces of personal information we collect from and about our Users. Under the CCPA, we are also required to provide you with the CCPA "categories" of personal information and sensitive personal information we collect. The categories we collect are: identifiers (such as name, address, email address); commercial information (such as transaction data); financial data (such as credit card information); internet or other network or device activity (such as browsing history or IP address); location information (e.g., your address or precise location, with your consent); professional or employment related data ( see Privacy Notice for California Job Applicants); audio & visual information (e.g., call recordings or delivery location images associated with your account); inferences we make about you; and other information that identifies or can be reasonably associated with you. The categories of sensitive personal information are account log-in and password, financial data, or other credentials allowing access to your account, precise geolocation, and if you use certain Services, your health data.

2. How We Use These Categories of Personal Information. We and our vendors may use and disclose any of the personal information we collect for the purposes described in this Privacy Notice, and in accordance with our disclosures in the "How Do We Process Your Information?" section above. This includes the following business and commercial purposes (as those terms are defined in applicable law):

• Providing the Services (e.g., account servicing and maintenance, order processing and fulfillment, customer service, advertising and marketing, analytics, and communication about the Services);
  • Operational purposes (e.g., to enable and troubleshoot the Services);
  • Auditing consumer interactions on our site (e.g., measuring ad impressions);
  • Detecting, protecting against, and prosecuting security incidents and fraudulent or illegal activity;
  • Bug detection, error reporting, and activities to maintain the quality or safety of our Services;
  • Short-term, transient use, such as customizing content that we or our vendors display on the Services;
  • Improving our existing Services and developing new services (e.g., by conducting research to develop new products or features);
  • Other uses that advance our commercial or economic interests, such as third-party advertising and communicating with you about relevant offers from third-party partners; and
  • Other uses about which we notify you.

3. How We Collect These Categories of Personal Information. We collect the categories of personal information identified above from the following sources: (1) directly from you; (2) through your use of the Services; (3) through affiliates; and (4) through third parties such as advertisers, Merchants, and our business partners.

4. How We Disclose These Categories of Personal Information. We describe our information sharing practices in the "When And To Whom Do We Disclose Your Personal Information?" section above. When you place an order with a Merchant, you intentionally direct us to disclose your information to the Merchant in order to provide the Services. We may also disclose any of the categories of personal information described above with third parties (as defined by the CCPA) for business purposes.

XV. CHILDREN'S PRIVACY

The Services are not for individuals under the age of 18. If you become aware that we have collected "personal information" (as defined by the United States Children’s Online Privacy Protection Act) from children under the age of 13, please contact us using the contact information in Section 18. We also comply with other age restrictions and requirements in accordance with applicable local laws.

XVI. DO WE MAKE UPDATES TO THIS NOTICE?

Zipline may update this privacy notice at any time without any prior notice to you. When we make material changes to this privacy notice, we will update the “Revised” date on this page and notify you that material changes have been made to the privacy notice as required by law, including by posting the revised privacy notice at www.zipline.com or by directly sending you a notification or email notice. Such updated terms to this privacy notice will apply to your use of the Services after the date on which Zipline has posted the updated terms or otherwise notified you of such changes to this privacy notice. Your continued use of our Services after any updates to this privacy notice constitutes your acknowledgement of Zipline’s privacy practices as described herein. Any hyperlinks included in this privacy notice also refer to the future updated versions of those links, and if a hyperlink becomes inactive, or the hyperlinked location of a document in this Agreement is amended, the new hyperlink location of the same or updated version of that document applies instead of the incorrect or superseded hyperlink in this document.

XVII. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at privacy@flyzipline.com, call us at 1-855-947-5163 (855-ZIP-L1NE), fill out the privacy request form at https://www.zipline.com/privacy-request, or write us at:

Zipline International Inc.

333 Corey Way

South San Francisco, CA 94080

United States