Dear Customer,

We are pleased that you are interested in personal data protection. We would like to give you an easily

understandable overview of the personal data collection, use, and disclosure (“process or processing”)

practices and our privacy compliance measures when providing you with our delivery applications and related

services (we'll call all of these together simply the "platform" below). Our goal is to provide you with an

amazing customer experience while keeping your personal data secure. Trust, transparency and honesty are

our leading principles. Your trust in our product is the reason why we can provide you with an amazing

customer experience.

Who we are

G-TechThailand LTD

Business Solution Providers

Address: Bangkok, Thailand

Postcode City: 10400

Web : https://www/g-techthailand.com

E-mail : info@g-techthailand.com

We are the data controller of the processing activities conducted on our platform. "Data controller" simply

means we have the power and duty to make decisions in regard to the collection, use, or disclosure of

the personal data. While we are required by law to provide you with all of the following information, we

do so primarily out of the belief that a partnership should always be honest.

If you have any questions about personal data protection at about Smart Dine Inn US, you can also contact our

data protection for the above address.

G-tech Thailand LTD

www.g-techthailand.com

Minors

To use our services and platforms, you must be at least 18 or above years of age. According to the applicable

law, if we need to process your personal data, and you are below 18 years of age or not become sui juris under

Thai law, and such processing is based on consent as a legal basis, you must also ensure that you obtain

the necessary consent from your parent or legal guardian, and provide us with any proof thereof promptly,

upon request.

Privacy is your right and you have the choice

As a customer, you have the choice to decide which information or personal data you would like to share with

us. Please be aware, however, that by signing up to our platform, you are required to accept our terms of use.

Legally speaking, this means you will enter into a contract with us for the provision of delivery platform service.

Of course, we need some information and personal data from you in order to be able to perform our obligations

under this contract. However, this does not always require all the personal data which you can make available

to us.

To exercise your legal rights against us, you can contact info@g-techthailand.com at any time.

You can take the following steps to disclose less information and personal data about yourself:

Advertising: No Advertisement available on our apps.

No data sharing: Your personal Data won’t be share to any third party organization / Agencies. What we collect

it will be on our data warehouses only.

Your legal rights:

Right to access

You have the right to be informed about the personal data that we store about you and how we process this

personal data. This also includes a right to receive a copy of your personal data. In addition, you have the

right to request for us to disclose the source of your personal data, for which you did not provide consent.

Right to rectification

If you notice that stored personal data is incorrect or outdated, you can always ask us to correct or update it.

Right to erasure

You can ask us at any time to delete, destroy, or de-identify the personal data we have stored about you.

Right to restriction of processing

If you do not wish to delete your personal data, but do not want us to process it further, you can ask us to

restrict the processing of your personal data. In this case, we will archive your personal data and only

reintegrate it into our operative systems if you so wish and you will not be able to use our services during

this time. However, if you change your mind to use our services again, we will process your personal data

accordingly.

Right to personal data portability

You can ask us to transmit the personal data stored about you in generally readable or usable - with automatic

tools or equipment - format to you or an authorized representative, or another data controller. In this context,

we will make the personal data available to you in JSON, PDF or similar format.

Right to object to the processing of your personal data

You can object to the further processing of your personal data. This also includes objecting to our processing,

which we process without your consent but based on our legitimate interest. This applies, for example, to

direct marketing. You can object to receiving further newsletters at any time.

Right to withdraw your consent

Where we rely on your consent to process your personal data, you can withdraw your consent at any time.

The withdrawal of consent may be subject to restrictions by law, or the contract which gives benefits to you.

Therefore, your request to withdraw consent may be denied on said grounds.

The withdrawal of your consent may affect certain services which are offered to you, which you may be

aware of when requesting us to withdraw the consent. However, it will not affect any actions and processing

of the personal data, which has been conducted legally before the withdrawal of such consent.

Your request to exercise any of the rights stated above is subject to the conditions and limitations imposed

by applicable personal data protection laws and regulations, whereby your data subject rights request may

be rejected based on a legitimate ground.

What personal data we process

In the following description of our processing activities, we refer in each case to categories of personal data.

A category includes several personal data, which are usually processed together for the purposes. Personal

data is information that can identify you or even make you identifiable. We generally process the following

categories of personal data for the following reasons:

Contact Information:

Name, address, telephone number, email address, your email ID of your Facebook if you shared only.

Reason:

If you contact us, we collect this personal data because we need to know who we are talking to and what

we have been talking about so that we can help you with your reason for contacting us. This also applies if

you leave comments on social media on our fan pages. We do not combine this personal data with your

profile personal data on our platform, but we can still identify you by your social media ID. This category of

personal data will be processed in respect to various activities and purposes, namely providing services,

contacting, performing rights and duties under our contracts, providing special deals, verifying your

identity, managing complaints, and other relevant activities.

Location data:

Address, Postcode, City, Country

Reason:

We need this personal data in order to be able to deliver your orders.

Profile data (master data):

Name, email address, password, telephone number, delivery addresses, interests, demographic data

(delivery address), order data, device information and access data, payment data will not be stored, and

other information and personal data, which we may receive in the ordinary course of our business.

Reason:

This personal data is your master data, which we absolutely need for our services, and it will be processed

as a basis for other activities and purposes. If you decline to provide this personal data, we may not be able

to provide you with our services appropriately. Without your personal data, including name, email address,

telephone number and a password, you cannot create a profile. We need your age to ensure that you are not

a minor.

Device information and access data:

Device ID, device identification, operating system and corresponding version, time of access, configuration

settings, information on Internet connection (IP address)

Reason:

With each access this information is stored by us for technical reasons. We also process parts of this

information to detect suspicious behaviour at an early stage and to avert damage. This personal data will also

be processed for the purpose of providing personalized experiences, and to ensure that you are able to

receive the best services, special deals, and promotions from us.

Order data:

Order history, selected restaurants, invoices, order ID, comments on orders, information on payment method,

delivery address, successful orders and cancelled orders

Reason:

Each time you place an order, this information will be added to your profile. You can view all this information

in your profile at any time. The information should give you an overview of your own interests and previous

orders. We will also use the same information to improve our services, to learn about your needs and interests,

to provide the best personalized services, and to process other activities in the ordinary course of our

business. In addition, we will anonymize this information when you request a deletion or when your profile

becomes inactive in order to continue to use this information in an anonymized form to optimize our services.

Communication data:

Name, email address, telephone number, device ID

Reason:

If you would like to receive a newsletter, an SMS or an in-app push notification from us, we need certain

information to send you the messages. Instead of addressing you with "Hey You", we find it more customer

friendly to address you with your name. This category of personal information is also used by us to contact

you, for example, if a product cannot be delivered and we want to offer you an alternative instead. Similarly,

to make the online ads you may see from us more relevant, we may process this personal data. In regard to

our communications, other categories of your personal data, as described in this Privacy Policy, may also be

processed.

Payment data:

Payment method, we use PayPal / Bank Transfer QR code, We do not store Credit Card Information.

Reason:

We need this information to track your payments and assign them to the orders you have placed. This personal

data will mainly be processed for the purpose of proceeding with your orders, whereby your personal data

may be shared with our partners or service providers in order to complete these transactions. We store only

QR code if seller shared.

Delivery data:

Name, delivery address, phone number, order ID

Reason:

We process the personal data in order to provide you with our services, perform our duties and rights

under contracts between us, and to improve our services, manage complaints, and other relevant activities.

In accordance with the principle of data minimization, we only provide our riders and restaurants with the

information that they need from you to prepare and deliver your order.

For which purposes we process data

We process your personal data to the extent that the processing activities are permitted by law. We pay

particular attention to the fact that all principles for the processing of personal data are taken into account.

We pay great attention to transparency. Therefore, we generally process your data if this is lawful and you

can reasonably expect it to be processed.

Account creation, SSO registration, administration of your profile

In order to be able to offer you our services, the processing of your personal data for the purpose of creating

your account and profile, registering to use our services and platform, verifying your identity, and managing

your account and profile is essential. Much of this personal data that you transmit to us and other parts of

the personal data that we collect automatically when using our platforms. Nevertheless, we endeavor to keep

the amount of personal data as minimal as possible. You can help us by only sharing necessary personal

data with us that we need to fulfill our contractual obligations. The details of the processing activities are

described in the below sections.

Account creation

When creating a customer account you will be asked to enter your master data. This is absolutely necessary,

as we cannot create a customer profile without this personal data. Your email address and telephone number

are particularly important, as we can use this information to identify you in our system the next time you want

to log in again. Furthermore, we would like to ask you to choose your password carefully. Do not use the

same password on multiple websites. Your password should also be at least 12 characters long, at least one

lowercase letter, one uppercase letter, one special character (!?#,%& etc.) and one digit.

Categories of personal data:

• Profile data (master data)

• Device information and access data

• Contact information

• Location data

Legal basis:

• Contract initiation to proceed with your request to enter into a contractual relationship with us

• Legitimate interest

If you do not provide us with your personal data for these purposes, Smart Dine Inn US will not be able to

create your accounts and you will not be able to use our platform.

If you already have an existing customer account, you will need to enter your email address and password

to log in in order to verify your identity before using our services, enter into contracts, and use our platform.

If we detect irregularities during registration, such as entering the wrong password several times, we will

take appropriate measures to prevent damage to you and us.

Categories of personal data:

• Profile data (master data)

• Contact information

Legal basis:

• Contractual obligations

• Legitimate interest

If you do not provide us with your personal data for these purposes, Smart Dine Inn US may not be able to

verify your identity and complete the log-in process. Therefore, we would not be able to enter into the

contract with you, if you do not provide us with your personal data

Single-Sign-On with Facebook

If you have a Facebook profile, you can register on our app to create a customer account or to register using

the social plugin "Facebook Connect" of the social network Facebook, which is operated by Meta Platforms,

Inc. (“Meta”), 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"), within the framework of the so-called

Single Sign On technology. You can recognize the social plugins of "Facebook Connect" on our website by

the blue button with the Facebook logo and the inscription "Log in with Facebook" or "Connect with

Facebook" or "Log in with Facebook" or "Sign in with Facebook".

If you call up a page of our website that contains such a plugin, your browser establishes a direct connection

to the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser and

integrated into the page. Through this integration, Facebook receives the information that your browser has

called up the corresponding page of our website, even if you do not have a Facebook profile or are not logged

on to Facebook. This information (including your IP address) is transmitted directly from your browser to a

Facebook server in the USA and stored there. These personal data processing operations are carried out in

accordance with applicable personal data protection law on the basis of Facebook's legitimate interest in the

display of personalized advertising on the basis of surfing behavior.

By using this "Facebook Connect" button on our website, before connecting, receiving, and sharing any

personal data with Facebook, you will be asked to give permission to connect to Facebook, whereby Smart

Dine Inn US will not connect with Facebook, unless such e-permission is given. We will receive the general and

publicly accessible information which is stored in your profile when using the "Facebook Connect" button on

Facebook, depending on your personal data protection settings on Facebook. This information includes the

user ID, name only if they made to public accounts.

Managing your profile

You can log in to your profile at any time and change your personal data, such as name, email address or

telephone number. You can also view your previous orders.

Categories of personal data:

• Profile data, location data

• Order information

• Device information and access data

• Order information

• Communication data

• Payment data

Legal basis:

• Legitimate interest

If you do not provide us with your personal data, foodpanda may not be able to manage your profile and

proceed with other relevant transaction.

Order processing

Once you have successfully registered and decided to place your order, we will store this information in

your profile and process it in further processes so that you can submit your order to us. When you submit

your order, your personal data is transferred to our backend where it is transferred to other systems for

further processing.

Categories of personal data:

• Contact Information

• Location data

• Device information and access data

• Order data

• Payment data

• Communication data

Legal basis:

• Contractual obligations

If you do not provide us with your personal data, foodpanda may not be able to fulfil our obligations under

the contract, i.e., fulfil your order and perform any other necessary actions to complete the transactions for

you.

Buffering

After you have logged in to your profile and made your selection, the products will be saved in your profile.

If you accidentally close your browser or app, you can continue to the last point of your order. The last

information is stored in a cookie.

Categories of personal data:

• Profile data (master data)

• Device information and access data

• Order data

• Payment data

• Location data

• Contact information

Legal basis:

• Legitimate interest

The legitimate interest is to provide you with a better ordering experience where you can conveniently continue

your order with browsers or apps that are accidentally closed.

Delivery

Once you have successfully placed your order, a number of processes are running in the background to

ensure that your order is delivered quickly. The following processing activities describe how and why your

personal data is processed for the respective purposes.

Personal Data Transfer to Riders and Restaurants:

We use different riders for delivery. Therefore, we will need to send or disclose your personal data to the riders,

so that they can deliver your order quickly and properly. Legally binding agreements between the riders and

us require all riders to process data for the sole purpose of delivering your order. The personal data will be

sent or disclosed to such riders via electronic systems.

Categories of personal data:

• Delivery information

• Contact information

• Location data

• Order data

• Payment data

Legal basis:

• Performance of contract

If you do not provide us with your personal data, foodpanda may not be able to fulfil our obligations under

the contract, i.e., fulfil your order and perform any other necessary actions to complete the transactions.

Therefore, we would not be able to comply with our contractual obligations without your personal data.

Calls from riders or restaurants

If a product of your choice is not available for delivery or our riders cannot reach you at the delivery address

which you provided, or there is an error and a failure in respect to your orders or transactions, the riders

or restaurants will be authorized by us to call or contact you, so that the problem can be resolved easily.

Categories of personal data:

• Delivery information

• Order data

• Payment data

• Contact information

• Location data

Legal basis:

• Legitimate interest

Saved payment methods & payments processing

Payment methods only Paypal/ BankQR Code features. We are not saving any personal information related to

Payment information such as Credit Card Number etc. But you need Accept for the Paypal Guidelines for

online checkout process. Bank QR code will be taken with the permission of the seller. ( if they shared only )

Categories of personal data:

• Payment data

Legal basis:

• Consent

Advertising and marketing

Direct marketing

Newsletter

No Newsletters / Advertising.

Net Promoter Score (NPS)

No Promotions or Ads

In-app and push notifications

We are planning to implement push notification in near future in latest updated version.

Categories of personal data:

• Order data

SMS

No SMS services

Online marketing

No Marketing service.

No Cookies

User Experience Surveys:

Not yet Implements, if we implement, we will update the Policy.

Facilitating your rights under the applicable personal data protection law

To facilitate your request to exercise any of your rights to your personal data, subject to limitations and

conditions imposed by applicable personal data protection law.

Categories of personal data:

All categories of your personal data, depending on your request.

Legal basis:

• Legitimate interest

• Legal obligation

Without your personal data, Smart Dine Inn US would not be able to comply with our legal

obligations in respect to facilitating or providing you with channels to exercise any of your rights

in regard to your personal data.

Third parties

We will not Distribution or Sharing information with any other agencies or organization.

We do not sell or rent your personal data to third parties under any circumstances, and this will never take

place without your consent.

How long we store your data

Smart Dine Inn US will retain your personal data for as long as is required in order to fulfil the purposes as

specified above, and for 10 (ten) years after the cessation of our contractual relationship, or our last

contact/communication, unless otherwise required or permitted by applicable law.

Generally where we rely on legal obligation to process your personal data, we will retain your personal data

throughout the prescribed legal retention period, as stipulated under the applicable personal data

protection law.

Right of modification

Smart Dine Inn US may amend, change, or update this privacy policy from time to time, whereby Smart

Dine Inn US will notify you about such changes via your selected communication channel. In the event that

the amendment, change, or update will affect the purposes for which your personal data has originally been

collected, Smart Dine Inn US will notify you about such changes, and obtain your consent (if applicable),

prior to such changes becoming effective.