REBUILDING TECHNOLOGY PTE. LTD. (hereinafter referred to as “DiDi” or the “Company”), a company duly established according to the laws of Singapore, having its offices at 163 Tras Street #03-01 Lian Huat Building Singapore (079024), which determines the purposes and means of the processing of the Delivery Partner personal information.

DiDi and its affiliates through the application and website named “DiDi Food” provide online applications and related services, which enable customers (hereinafter referred to as the “Customers”) to place orders regarding goods, food and beverages to restaurants and order logistics and delivery services (hereinafter referred to as the “Orders”), and arrange such logistics and delivery service opportunities to independent delivery service providers (hereinafter referred to as the “Services”). Such independent delivery service provider who is accessing, browsing or using Didi Food and DiDi’s relevant websites in order to provide delivery services which includes the delivery of goods, food and beverages to Customer is hereinafter referred to as the “Delivery Partner”.

This Privacy Notice of DiDi Food (hereinafter referred to as this “Privacy Notice”), together with the Terms and Conditions of Use of DiDi Food, sets out the basis on which the collected Personal Information will be processed.

Please read this Privacy Notice to understand the views and practices regarding the Delivery Partner’s Personal Information and how the data will be treated. By accessing or browsing DiDi Food, the Delivery Partner hereby agree to accept the Privacy Notice.

Please carefully read this Privacy Notice, fully understand and agree to it before using DiDi Food. If the Delivery Partner does not agree to any item herein, the Delivery Partner should stop using DiDi Food immediately. When the Delivery Partner starts using DiDi Food, it is understood that the Delivery Partner agrees that DiDi can collect, disclose, store, use, process, share, transfer and protect the Delivery Partner’s Personal Information in compliance with this Privacy Notice.

1. Processing of the Personal Information

DiDi Food is owned and operated by DiDi, DiDi will process the Delivery Partner’s Personal Information in accordance with this Privacy Notice and the Law.

2. Collection of the Personal Information

2.1 DiDi will process the following personal data:

DiDi will process the Delivery Partner’s name, mobile phone number, ID card and Tax ID on DiDi Food. DiDi will recognize the Delivery Partner identity and provide the Delivery Partner with services on DiDi Food.

As required, the Delivery Partner needs to provide vehicle brand, model and color, vehicle registration certificate, and vehicle official documentation, as well as name, CURP, mobile phone number a scanned copy of ID card or other identity certificate, photograph, mailing address, location, and device identification code.

DiDi collects such information by laws and regulations, for security reasons and for security of the Delivery Partners, Customers and Delivery Recipients of Delivery Services. If the Delivery Partner does not provide such information, the Delivery Partner may fail to fully access the Services of DiDi Food.

ii. Location

DiDi will collect the Delivery Partner location information when DiDi Food is running in the foreground (the application open and onscreen) or background (the application open but not on screen) of the Delivery Partner device. DiDi will obtain the Delivery Partner location through IP address, GPS, and other sensors that provide relevant information (such as providing DiDi with nearby devices, Wi-Fi access points, and base station information) for better providing the Services.

iii. Trip

DiDi will collect the Delivery Partner place of departure and destination, the locations of collection and destination of the corresponding Commodities and the duration and mileage information. DiDi collects the aforesaid information based on the requirements of laws and regulations, protection of the Delivery Partner personal and property safety, for determining the Delivery Fee, as well as the need for dealing with disputes of the Delivery Partner in accordance with the rules of DiDi Food.

iv. Call information

DiDi may record and collect the content of the calls and the messages that the Delivery Partner makes through DiDi Food, including but not limited to the duration of the call, the mobile phone number of the communicated parties. DiDi keeps the aforesaid information through call recording, so as to verify the facts and handle complaints in case of disputes or safety of the Delivery Partner and Customers.

v. Order and transaction status

DiDi may record the Delivery Partner orders and transactions status. DiDi collects such information by laws and regulations for the Delivery Partner personal and property safety, for determining the Delivery fee and evidence for disputes.

vi. Rating information

The Delivery Partner can evaluate the User anonymously on DiDi Food, it would be advisable that the Delivery Partner does not provide Personal Information during such process, otherwise, it may be disclosed to the User.

vii. Financial Data

DiDi may collect the Delivery Partner Financial Data (credit or debit card information) or any other payment method information, bank accounts, invoice records, payments records, credit bureau records, payment receipts, tax ID information (Registro Federal de Contribuyentes in Spanish, “RFC”), any other tax information required to produce valid invoices such as a CSD and FIEL files, financial records, income records, tax statements, and any other patrimonial information that might be relevant for DiDi to provide the Services either directly or through a third party to collect from and distribute money to the Delivery Partner appointed account, and for any other purpose related providing the Delivery Services.

viii. Personal Sensitive Data

DiDi may collect a certificate of no criminal conviction (issued by the competent authorities) from the Delivery Partners, to make sure the Delivery Partner complies with the mandatory need to operate on DiDi Food. By uploading the certificate of no criminal conviction, the Delivery Partner authorizes DiDi to collect, transfer, store and use such certificate in accordance with this Privacy Notice.

DiDi will process your digital image for facial recognition purposes in order to perform identification, authentication/verification of your identity.

ix. Customer Service

When the Delivery Partner contacts the customer service team, DiDi will record the Delivery Partner’s call information, the Delivery Partner’s comments or suggestions, the name and contact information and other information provided by the Delivery Partner through call recording and manual input manner, so that DiDi can handle the disputes, solve the problems or give the Delivery Partner feedback. If the Delivery Partner refuses DiDi to collect such information, it will result in that our customer service team may not able to handle and solve the disputes, but it does not affect the Delivery Partner use of the core business functions of DiDi Food.

x. Operational Activities

The Delivery Partner may be required to provide certain information, which may include the Delivery Partner name, photograph, mailing address, contact information and bank card number. Such information can help us publicize the results of the operation activities, carry the follow-up publicity of the operation activities, get in touch with the Delivery Partners, and give the Delivery Partner gifts or transfer money to the Delivery Partners.

xi. Data Analysis

In order to better improve the services of DiDi Food, DiDi will collect the Delivery Partner logging information, if applicable, including the search content, IP address, device (including device model, device identification code, operating system, and telecommunication operator), location, so as to provide the Delivery Partner with more personalized and convenient services. DiDi will use the browser storage mechanism and data cache to collect and store information on the Delivery Partner device.

xii. Third-party Services

During the course of the Delivery Partner use of the third-party services, DiDi will collect (including the information provided by the Delivery Partner and the information recorded by the system) the Delivery Partner’s necessary Personal Information and share it with the third party providing such services, so that the third party can provide the Delivery Partner with the appropriate services. If the Delivery Partner refuses collection of such information, the Delivery Partner may not be able to use the third-party services through DiDi Food, but it does not affect the Delivery Partner use of the core business functions of DiDi Food.

3. Device Permissions

3.1 DiDi Food may request some of the Delivery Partner device permissions. The Delivery Partner is deemed to grant device permission of Internet accessing when they access or use DiDi Food.

3.2 The Delivery Partner can choose to close some or all the permissions in the device, so as to prevent DiDi from collecting the corresponding Personal Information. For different devices, the permissions display manner and closing manner may be different, please contact the device and system developers for details.

4. Storage of the Personal Information

4.1 Storage period of the Personal Information

4.1.1 DiDi will keep the Delivery Partners Personal Information continuously while he/she is using the services of DiDi Food.

4.1.2 The Delivery Partner cannot directly cancel the account on DiDi Food through the setup feature of DiDi Food. Even if the Delivery Partner apply to delete his/her account, DiDi will preserve the Delivery Partner’s Personal Information for personal and property safety of the Delivery Partners, unless the Delivery Partner expressly requests DiDi not to do so, or applicable laws and regulations stipulate otherwise.

4.1.3 If the Delivery Partner wants to delete his/her Personal Information, he/she may contact the customer service to submit the deletion application. DiDi will delete his/her Personal Information subject to applicable laws and regulations. DiDi will no longer put the Delivery Partner’s Personal Information into commercial use within the minimum storage period stipulated by laws and regulations

4.2 Information Storage

4.2.1 The Delivery Partner’s Personal Information collected by DiDi will be transferred and stored in Mexico, U.S. or any other places as appropriate and in accordance with applicable laws and regulations, which are controlled by DiDi and its affiliates.

4.3 Use of the Personal Information

4.3.1 The Delivery Partner fully acknowledges and agrees that the Delivery Partner’s Personal Information may be used in the usage scenarios which are directly or reasonably related to the purposes stated in the clause “Collection of the Personal Information”.

4.3.2 The Delivery Partner fully acknowledges and agrees that DiDi may analyze Personal Information to provide the Delivery Partner with a more personalized and convenient service.

4.3.3 The Delivery Partner fully acknowledges and agrees that DiDi may design, develop and promote new products and services based on Delivery Partners’ Personal Information statistics.

4.3.4 The Delivery Partner fully acknowledges and agrees that DiDi may analyze the Delivery Partners’ Personal Information and share such statistics with the public or the third party to the purpose of providing the Services.

4.3.5 The Delivery Partner fully acknowledges and agrees that DiDi will send the Delivery Partner information and notifications through various channels, including but not limited to the verification code, the necessary pushed notifications when using the products or services, the news about the services of DiDi Food, as well as marketing activities and special promotion information, and the promotional information of third parties in cooperation with DiDi Food, or other content that the Delivery Partner may be interested in. If the Delivery Partner does not wish to continue receiving the aforesaid information, the Delivery Partner may unsubscribe it.

4.3.6 In case DiDi uses the Delivery Partner’s Personal Information beyond the scope which is directly or reasonably related to the purposes stated in this Privacy Notice, DiDi will further inform the Delivery Partners.

5. Sharing, Transfer and Publicity of the Personal Information

5.1 The Delivery Partner fully acknowledges and agrees that DiDi will keep the Delivery Partner’s Personal Information confidential in accordance with relevant laws and regulations. The Delivery Partner fully acknowledges and agrees that DiDi will share and/or transfer the Delivery Partner’s Personal Information with third parties in the following situations:

i. For the pursuit of commercial legit purposes to its affiliates and subsidiaries which operate under the same privacy policies as DiDi, which comply with all applicable laws. This transfer of personal information does not rely on the Delivery Partner’s consent.

ii. To third parties in order to provide the Services through DiDi Food to the Delivery Partners. For example, DiDi may share information with other Customers, and selected restaurants appointed by DiDi Food, which may include the Delivery Partner’s name, telephone number, and other Personal Information as required. This transfer of personal information does not rely on the Delivery Partner’s consent.

iii. To provide reciprocal services with other cooperative third-party service providers (hereinafter referred to as the “Cooperative 3rd Parties”). In order to improve the quality of services provided by DiDi. DiDi may share the Delivery Partner’s Personal Information with the affiliated company and Cooperative 3rd Parties.

iv. To vendors, service providers, and other partners who globally support DiDi’s business, such as providing technical infrastructure services, providing investigation services regarding criminal background check, analyzing how DiDi’s services are used, measuring the effectiveness of services, providing customer service, or facilitating and processing payments. These partners must adhere to strict confidentiality obligations in a way that is consistent with this Privacy Notice and the agreements DiDi enters into with the Delivery Partners.

v. When the Delivery Partner uses the third-party services through DiDi Food, the Delivery Partner fully acknowledges and agrees that DiDi will share the Delivery Partner’s Personal Information with the third party who provides the services. This transfer of personal information does not rely on the Delivery Partner’s consent.

vi. In order to protect the legitimate rights and interests of the Delivery Partners, DiDi may provide the interested parties with the necessary information to resolve any transaction dispute. This transfer of personal information does not rely on the Delivery Partner’s consent.

vii. DiDi may transfer the Delivery Partner’s Personal Information to administrative or judicial authority according to applicable laws or regulations. This transfer of personal information does not rely on the Delivery Partner’s consent.

viii. As required or permitted by applicable laws or regulations, the Personal Information may be provided for the protection of the public interest. This transfer of personal information does not rely on the Delivery Partner’s consent.

5.2 Other situations.

5.2.1 DiDi will keep the Delivery Partner’s Personal Information confidential in accordance with relevant laws and regulations. DiDi will not publicly disclose the Delivery Partner’s Personal Information unless the Delivery Partner has given his/her explicit consent or authority in advance, or as required by law.

5.2.2 In the event of acquisition, merger, reorganization and other changes, DiDi will require its successor to comply with this Privacy Notice. If the successor needs to change the purpose of usage of the Personal Information, the successor shall obtain the Delivery Partner explicit consent in advance.

6. Use of Financial Data and Personal Sensitive Data

FOR CLARIFICATION, NOTWITHSTANDING ANY TERM AND CLAUSE IN THIS PRIVACY NOTICE TO THE CONTRARY, DIDI WILL NOT TRANSFER THE DELIVERY PARTNER FINANCIAL DATA TO ANY THIRD PARTY OTHER THAN THE SERVICE PROVIDERS TO CONDUCT PAYMENT TRANSFER OR ANY OTHER CORRESPONDING FINANCIAL SERVICE. LIKEWISE, DIDI WILL NOT TRANSFER THE CERTIFICATE OF NO CRIMINAL CONVICTION AND OTHER PERSONAL SENSITIVE DATA OF THE DELIVERY PARTNER TO ANY THIRD PARTY. DIDI WILL ONLY COLLECT, ANALYZE, TRANSFER AND STORE THE DELIVERY PARTNER FINANCIAL DATA AND PERSONAL SENSITIVE DATA FOR THE PURPOSE OF PROVIDING THE SERVICES.

7. Rights of the Delivery Partners

The Delivery Partner may access Personal Information through DiDi Food by following ways:

7.1 Access

The Delivery Partner can access Personal Information on DiDi Food in the following ways:

i. Account

The Delivery Partner can access the Delivery Partner’s Personal Information and other information provided by the Delivery Partner through the Delivery Partner account on DiDi Food.

ii. Trip.

The Delivery Partner can access the order and transaction status on DiDi Food.

iii. Wallet

The Delivery Partner can access the payment method, payment record and other information through the wallet feature of DiDi Food.

7.2 Rectification

The Delivery Partner has the right to make corrections or updates of Personal Information. The Delivery Partner may correct or modify his/her Personal Information on DiDi Food by submitting his/her correction application to the customer service team or by the following manners:

i. Account

The Delivery Partner can correct or modify the Delivery Partner’s Personal Information through the Delivery Partner account on DiDi Food.

ii. Setup

The Delivery Partner can correct or modify the password and other information through the setup feature of DiDi Food.

iii. Wallet

The Delivery Partner can correct or modify the Financial Data and other information through the wallet feature of DiDi Food.

7.3 Opposition

7.3.1 DiDi will protect the Delivery Partner right to withdraw the Delivery Partner consent in the following ways:

i. The commercial information sent by DiDi Food will tell the Delivery Partner the specific unsubscribing manner, and the Delivery Partner can withdraw the Delivery Partner consent through the unsubscribing manner described in the “commercial information” section.

ii. The Delivery Partner can withdraw the Delivery Partner authorization to access the Delivery Partner’s Personal Information to DiDi through the device's setup feature to close the corresponding device permissions (including location, address book, photo, microphone, camera, notification, etc.).

iii. The Delivery Partner can also withdraw part of the authorization by canceling bank card binding, deleting information, etc.

7.3.2 When the Delivery Partner withdraws his/her consent or authorization, DiDi may/will not be able to continue to provide the Delivery Partner with the services corresponding to the withdrawn authorization. However, the Delivery Partner withdrawal of consent or authorization does not affect the processing of Personal Information based on his/her consent prior to the withdrawal.

7.4 If the Delivery Partner is unable to access, rectify, cancel or delete his/her Personal Information and withdraw the Delivery Partner consent, the Delivery Partner may contact the customer service team online or by phone through the "customer service" feature of DiDi Food.

7.5 Limit the use or disclosure of your personal information.

i. The Delivery Partner may limit the use and / or disclosure of your personal data by contacting the customer service team online or by phone through the "customer service" feature of DiDi Food. Should your application comply with the Law requirements, we will proceed to include you in our “Exclusion List”.

8. Changes

8.1 In case of the following changes of DiDi Food, DiDi will timely make the corresponding amendments to this Privacy Notice:

i. Changes of the business functions of DiDi Food.

ii. Changes of the Delivery Partners’ Personal Information usage rules.

iii. Changes of DiDi’s contact information and complaint channels.

iv. Other changes which may affect the Delivery Partners’ Personal Information security or the Delivery Partners’ privacy rights.

8.2 DiDi will not reduce the Delivery Partner rights under this Privacy Notice without the Delivery Partner explicit consent.

8.3 Unless otherwise specified, the revised Privacy Notice will take effect from the date of publication.

9. This document has been drafted in both English and Spanish; in case of any contradiction or inconsistency between such versions, the English version shall prevail.

10. Definition and Scope of the Personal Information

10.1 Personal data refers to the data that can identify the personal identity of a natural person, alone or together (hereinafter referred to as “Personal Data”), if applicable, herein involves, but not limited to name, mobile phone number, a set of copy of ID card or other identity certificate, photograph, vehicle registration certificate, vehicle model and color, insurance policy of car, location, cash withdrawal record, bank card number, logging information, search content, device information, telecommunication operator and IP address.

10.2 Personal sensitive data refers to the personal data that affects the most private (intimate) information of the data owner, or which if improperly used could lead to discrimination and could entail a grave risk for the data owner (hereinafter referred to as “Personal Sensitive Data”). It herein involves, among other, criminal record and certificate of no criminal record. If required by applicable Laws, DiDi may ask written express consent from Personal Sensitive Data owner.

10.3 Financial data refers, but not limited to, credit or debit card information or any other payment method information, bank accounts, invoice records, payments records, credit bureau records, payment receipts, tax information, financial records, and any other financial information that might be relevant for DiDi to provide the Services (hereinafter referred to as “Financial Data”, and together with “Personal Data” and “Personal Sensitive Data” referred to as the “Personal Information”).

10.4 If the Delivery Partner does not provide any of the Personal Information as required, they may fail to access all or part of the Services.