DiDi Food Japan Corp. (hereinafter referred to as the “Company”), through the application named “DiDi Food” (hereinafter referred to as the “App”) provides mobile applications and related services, which enable Users to place orders and arrange and schedule logistics and delivery services regarding goods, food and beverages from third party providers and restaurants under agreement with the Company or its affiliates (hereinafter referred to as the “Services”). Any User who is accessing, browsing or using the App and the Company’s relevant websites in order to receive the delivery services which includes the delivery of goods, food and beverages from delivery partners is hereinafter referred to as the “User”.

The Privacy Policy of DiDi Food (hereinafter referred to as the “Privacy Policy”), together with the Terms and Conditions of Use of the App, sets out the basis on which the collected Personal Information will be processed.

Please read this Privacy Policy to understand the views and practices regarding the User’s Personal Information and how the data will be treated. By accessing or browsing the App, the User hereby agrees to accept the Privacy Policy.

1. Processing of the Personal Information

DiDi Food is operated by the Company and its affiliates, and the Company and its affiliates will handle the User’s Personal Information in accordance with this Privacy Policy and the Act on the Protection of Personal Information (Act No. 57 of 2003) and other laws and regulations.

2. Collection of the Personal Information

2.1 The Company may collect the following Personal Information:

i. Personal Information

The User will provide his/her name, mobile phone number, email address and other relevant Personal Information on the App. The Company will recognize the User’s identity and provide the User with Services on the App.

If the User does not provide such information, the User may fail to fully access the Services of the App.

ii. Information that the User may Provide

The User may provide, among other, his/her photograph, resident address, and other Personal Information at his/her discretion.

iii. Location

The Company will collect the User’s location information when the App is running in the foreground (the application open and on screen) or background (the application open but not on screen) of the User’s device. The Company will obtain the User’s location through IP address, GPS and other sensors that provide relevant information (such as providing the Company with nearby devices, Wi-Fi access points, and base station information) for better providing the Services.

iv. Messages

The Company may record and collect the content of the the messages that the User exchanges through applications on the App, including but not limited to the mobile phone number of the communicated parties. The Company uses the aforesaid information so as to verify the facts and handle complaints in case of disputes or safety accidents of the User.

Also, the Company will record the content of the calls made by the User to the Company for inquiry, to improve the quality of the services and to handle complaints.

v. Order and transaction status

The Company may record the User’s orders and transactions status. The Company collects such information to protect the User’s safety, and to use as evidence for disputes.

vi. Operational Activities

The User may be required to provide certain information including the User’s mailing address, phone number and the delivery address. Such information may be used for providing the Services smoothly, such as allowing the delivery partner to contact the User.

2.2 Rating information

The User can evaluate the restaurants and the appointed delivery partners anonymously on the App. The Company may use such evaluation information for the purposes of, and to the extent necessary for improving the quality of the services provided by the Company, restaurants and delivery partners, such as by disclosing such evaluation information to the restaurants or delivery partners which are subject to the evaluation.

2.3 Financial Data

The Company may collect the User’s Financial Data to collect considerations from the User’s appointed account, to settle the payment obligations of the parties involved in providing the Services. However, the card information is stored by a payment agent associated with the Company, and the Company will not retain the card information.

2.4 Customer Service

When the User contact the customer service, the Company will record the User’s call information, the User’s comments or suggestions, the name and contact information and other information provided by the User through call recording and manual input manner, so that the Company can handle the disputes, solve the problems or give the User feedback. If the User refuses the Company to collect such information, it may result in that our customer service may not be able to handle and solve the disputes, but it does not affect the User’s use of the core functions of the App.

2.5 Data Analysis

In order to improve the Services of the App, the Company will collect the User’s logging information, the search content, IP address, device information (including device model, device identification code, operating system and telecommunication operator), location, thus providing the User with more personalized and convenient services. The Company will use the browser storage mechanism and data cache to collect and store information on the User’s device.

2.6 Third-party Services

During the course of the User’s use of the third-party services, the Company will collect (including the information provided by the User and the information recorded by the system) the User’s necessary Personal Information and, with the consent of the User, share it with the third party providing such services, so that the third party can provide the User with the appropriate services. If the User refuses collection and sharing of such information by the Company, the User may not be able to use the third-party services through the App, but it does not affect the User’s use of the core functions of the App.

3. Device Permissions

3.1 The App may request some of the User’s device permissions. The User is deemed to grant device permission of Internet accessing when he/she accesses or uses the App.

3.2 The User can choose to close some or all of the permissions in the device, so as to prevent the Company from collecting the corresponding Personal Information. For different devices, the permissions display manner and closing manner may be different, please contact the device and system developers for details.

4.1 Storage period of the Personal Information

i. The Company will keep the User’s Personal Information continuously while he/she is using the services of the App.

ii. Even if the User applies to delete his/her account, the Company will preserve the User’s Personal Data for personal and property safety of the User, unless the User expressly requests the Company not to do so, or applicable laws and regulations stipulate otherwise. The Company will delete the Personal Data in its possession without delay when the need to use the Personal Data gets diminished.

5. Use of the Personal Information

5.1 The User fully acknowledges and agrees that the User’s Personal Information may be used in the usage scenarios which are necessary to achieve the purposes stated in the clause “Collection the of Personal Information”:

i. The User fully acknowledges and agrees that the Company may analyze Personal Information to provide the User with a more personalized and convenient service.

ii. The User fully acknowledges and agrees that the Company may design, develop and promote new products and services based on User’s Personal Information statistics.

iii. The User fully acknowledges and agrees that the Company may analyze the User’s Personal Information and share such statistics with the public or the third party to the purpose of providing the Services.

iv. The User fully acknowledges and agrees that the Company will send the User information and notifications through various channels, including but not limited to the verification code, the necessary pushed notifications when using the products or services, the news about the services of App, as well as marketing activities and special promotion information, and the promotional information of third parties in cooperation with the App, or other content that the User may be interested in. If the User do not wish to continue receiving the aforesaid information, the User may unsubscribe it.

5.2 In case the Company uses the User’s Personal Information beyond the scope which is necessary to achieve the purposes stated in the Privacy Policy, the Company will further inform the User and obtain the User’s consent when required in accordance with applicable laws.

6. Sharing, Transfer and Publicity of the Personal Information

6.1 The User fully acknowledges and agrees that Company will keep the User’s Personal Information confidential in accordance with relevant laws and regulations. The Company will not share the User’s Personal Data with other people except in the following situations:

i. The Company may share the User’s Personal Information to third parties to provide the Services through the App to the User. For example, the Company may share information of the User with the appointed delivery partner, may include the User’s telephone number and the other Personal Information which required by the App.

ii. The Company may transfer the User’s Personal Information to vendors, service providers, and other partners who globally support the Company’s business, such as providing technical infrastructure services, analyzing how the Company’s services are used, measuring the effectiveness of services, providing customer service, or facilitating and processing payments. These partners shall adhere to strict confidentiality obligations in a way that is consistent with the Privacy Policy and the agreements the Company entered into with them.

iii. When the User uses the third-party services through the App, the Company will provide the User’s Personal Data to the third party who provides the services. The Company will obtain a separate consent from the User before providing the Personal Data to the third party service provider.

iv. In order to resolve transaction disputes involving the User, the Company may provide the payment agents and credit card companies with the information necessary to resolve transaction disputes.

v. The Company may transfer the User’s Personal Data to administrative or judicial authority according to applicable laws or regulations.

vi. As required or permitted by applicable laws or regulations, the User’s necessary Personal Data may be provided for the protection of the public interest.

vii. Other situations that permitted by the User.

6.2 The Company will not provide the User’s Personal Information to any third party that is not stipulated in the Privacy Policy, unless the Company obtain the User’s consent. The Company will enter into a strict confidentiality agreement with the third party with whom the Company share the User’s Personal Information, requesting them take necessary confidential and security measures to process the User’s Personal Information.

For the purposes of improving the usability of the services provided by the Company and its affiliates by sharing account information, the Company may provide the following information to DiDi Mobility Japan Corp., and jointly use such information with DiDi Mobility Japan Corp.

(i) Scope of person(s) that jointly utilizes the personal data:

Name: DiDi Mobility Japan Corp.

Address: Daiwa Harumi Building 3F, 10-1, Harumi 3-chome, Chuo-ku, Tokyo, Japan

(ii) Categories of the jointly utilized personal data:

- Email address

- Mobile phone number

- Payment account information

(iii) Purposes of use for the person jointly utilizing the personal data:

To improve the usability of the services provided by the Company and its affiliates by sharing account information

(iv) The party responsible for the joint use:

DiDi Mobility Japan Corp.

The Company may provide Personal Data to DiDi USA Inc. (251 LITTLE FALLS DRIVE, WILMINGTON, New Castle, DE, USA) for entrusting the handling of Personal Data. DiDi USA Inc. will handle the Personal Data provided in accordance with the provisions of Chapter IV, Section 1 of the Act on the Protection of Personal Information and this Privacy Policy.

6.5 The Company will keep the User’s Personal Information confidential in accordance with relevant laws and regulations. The Company will not publicly disclose the User’s Personal Information unless the User has given his/her explicit consent or authority in advance, or as required by law.

6.6 In the event of acquisition, merger, reorganization and other changes, The Company will require its successor to comply with the Privacy Policy. If the successor needs to change the purpose of usage of the Personal Information, the successor shall obtain the User’s explicit consent in advance.

6.7 Opinions and Inquires for Handling of Personal Information

For opinions and inquiries for the handling of Personal Information, please contact:

[Customer Service for Personal Information]

(i) Contact: DiDi Food Japan Corp.

(ii) Address: Daiwa Harumi Building 2F, 10-1, Harumi 3-chome, Chuo-ku, Tokyo, Japan

(iii) Email: [email protected]

For clarification, notwithstanding any term and clause in the Privacy Policy to the contrary, the Company will not transfer the User’s Financial Data to any third party other than the service providers to conduct payment processing or any other applicable financial service.

8. Rights of the User

8.1 Access

The User can access Personal Data on the App in the following ways:

i. Account

The User can access the User’s Personal Data and other information provided by the User through the User’s account on the App.

ii. Order.

The User can access the order and transaction status on the App.

iii. Payment method

The User can access the payment method, payment record and other information through the “payment method” of the App.

8.2 Rectification

The User has the right to make corrections or updates of Personal Data. The User may correct or modify his/her Personal Data on the App by submitting his/her correction application to the customer service or by the following manners:

i. Account

The User can correct or modify the User’s Personal Information through the User’s account on the App.

ii. Setup

The User can correct or modify the password and other information through the setup feature of the App.

iii. Payment method

The User can correct or modify the Financial Data and other information through the “payment method” of the App.

8.3 Withdrawal of consent

The Company will protect the User’s right to withdraw the User’s consent in the following ways:

i. The commercial information sent by the App will describe the specific unsubscribing manner, and the User can withdraw the User’s consent through the unsubscribing manner described in the commercial information.

ii. The User can withdraw the User’s authorization to access the User’s Personal Information to the Company through the device's setup feature to close the corresponding device permissions (including location, address book, photo, microphone, camera, notification, etc.).

iii. The User can also withdraw part of the authorization by canceling credit card binding, deleting information, etc.

When the User withdraws his/her consent or authorization, the Company may not continue to provide the User with the services corresponding to the withdrawn authorization. However, the User’s withdrawal of consent or authorization does not affect the processing of Personal Information based on his/her consent prior to the withdrawal.

8.4 If the User is unable to access, rectify, cancel or delete his/her Personal Information and withdraw the User’s consent, the User can contact the customer service online or by phone through the customer service feature of the App.

9.1The Company will collect information of the User including advertising identifiers (Advertising ID (AdID), Advertising Identifier (IDFA)) (hereinafter referred to as “Informative Data”) via the following information collecting module incorporated into the app. The respective module providers will handle the information of the User according to their respective privacy policies.

・Firebase provided by Google Inc. (hereafter “Google”)

(Google Privacy Policy) https://policies.google.com/privacy?hl=ja

・AppsFlyer provided by AppsFlyer Ltd.

(AppsFlyer Privacy Policy) https://www.appsflyer.com/jp/privacy-policy/

9.2If the User wishes to restrict the advertising they receive by way of Informative Data, the User may stop receiving such advertising in the following manner.

・Android

Informative Data provided by Google: If the User wishes to restrict advertising that utilizes Advertising ID (AdID), please follow the instruction provided by Google.

https://support.google.com/googleplay/answer/3405269?hl=ja

・iOS

Informative Data provided by Apple: If the User wishes to restrict advertising that utilizes Advertising Identifier (IDFA), please follow the instruction provided by Apple.

https://support.apple.com/ja-jp/HT202074

10. Changes

10.1 In case of the following changes of the App, the Company will timely make the corresponding amendments to the Privacy Policy:

i. Changes of the business functions of the App.

ii. Changes of the User’s Personal Information usage rules.

iii. Changes of the Company’s contact information and complaint channels.

iv. Other changes which may affect the User’s Personal Information security or the User’s privacy rights.

10.2 The Company will not reduce the User’s rights under the Privacy Policy without the User’s explicit consent.

10.3 Unless otherwise specified, the revised Privacy Policy will take effect from the date of publication.

11. Definition and Scope of the Personal Information

11.1 “Personal Information” and “Personal Data” have the meaning set forth in the Act on the Protection of Personal Information.

11.2 Financial data refers, but not limited to, credit or debit card information or any other payment method information, bank accounts, invoice records, payments records, credit bureau records, payment receipts, tax information, financial records and any other financial information that might be relevant for the Company to provide the Services (“Financial Data”).

11.3 If the User does not provide any of the Personal Information as required, they may fail to access all or part of the Services.

Established: March 24, 2020

Revised: November 9, 2020

Revised: December 21, 2020

Revised: July 2, 2021