Compliance with the EU’s General Data Protection Regulation (GDPR)

Ritual is committed to our GDPR obligations and measures compliance on an ongoing basis. Accordingly, Ritual Online Ordering is fully GDPR compliant. For complete details, see your Merchant Agreement and Ritual ONE Addendum. Below are some answers frequently asked questions about what GDPR compliance means for Ritual’s merchants and customers. 

1. Ritual only collects personal information that is needed to provide the service, nothing more; this data is not shared for other unrelated purposes.
2. Ritual requires explicit and affirmative consent before processing personal data. More specifically, customer data is only shared with merchants if a customer opts-in to sharing their data. The opportunity to opt-in to data sharing occurs prior to checkout, where customers can review Ritual’s Privacy policy. When placing an order, the checkout screen highlights that By placing your order you agree to Ritual’s Terms and Privacy.
3. Ritual keeps records of personal data processing up-to-date for proof of consent.
4. Ritual has the right procedures in place to detect, report and investigate both internal and external data breaches.