Privacy Policy | Xmart Booking

1

Introduction

Xmart Booking is a platform operated by VNOD Corporation, a corporation registered in the Province of Ontario, Canada.

We are committed to protecting your privacy and managing your information in accordance with:

PIPEDA — Canada's Personal Information Protection and Electronic Documents Act
CASL — Canada's Anti-Spam Legislation

2

What Information We Collect

Restaurant Owner Information

Name, email address, and phone number
Restaurant details (name, address, capacity)
Payment information (processed via secure gateway, not stored by us)
Platform usage history

Restaurant Customer Information

Name, email address, phone number
Reservation history
Food preferences and dining tastes (if provided)

Sensitive Information

If a customer provides information such as food allergies, religious dietary requirements (e.g. halal), or medical restrictions when making a reservation, this information is considered sensitive and will:

Only be used to provide the service to that specific restaurant.
Not be processed for any other purpose.
Never be transferred to third parties.

Google Login

If you sign in using your Google account, we only receive the following basic information:

Full name
Email address
Profile picture

We do not have access to any other information in your Google account. Use of Google Login is also subject to Google's Privacy Policy.

Technical Information

IP address
Browser type and device information
Pages visited on the platform
Cookies

3

How Information Is Collected

Registration on the platform
Use of reservation services
Contact with support
Cookies on the website

4

How We Use Your Information

Collected information is used for the following purposes

Providing and improving platform services
Processing payments
Sending important notifications about your account
Technical support
Analyzing and improving system performance
Training AI systems (in anonymized form only)

5

Who We Share Information With

We do not sell your information. Information is only shared in the following cases:

Technical service providers we use to operate the platform (such as servers, email) — these companies are bound by confidentiality obligations.
Legal authorities — only when required by law.
In the event of a merger or sale of the company — with prior notice to you.

> **Note:** This section concerns personal information of Restaurant Owners and Customers. It does not apply to the promotional use of a Restaurant's business name, logo, or brand assets as a client reference, which is governed by Section 13 of the Terms of Service.

### 5.1 Internal Access

Authorized personnel of VNOD Corporation may access your account information in the following circumstances:

Resolving technical issues and providing support
Improving and developing the platform
Monitoring system security
Meeting legal requirements

All internal access is logged, monitored, and restricted to authorized personnel only. No employee is permitted to view your information without a specific and documented reason.

6

Cookies

We use cookies for the following purposes

Maintaining your login session
Improving user experience
Statistical analysis of platform usage

You can manage cookies through your browser settings. Disabling cookies may limit some platform features.

7

Artificial Intelligence and Model Training

Xmart Booking uses artificial intelligence to improve platform services:

Behavioral patterns are used in anonymized and aggregated form only to improve the system.
This training never includes customers' personal information (name, phone, email).
We do not permit third parties to use your personal data to train their own AI models.

Behavioral Tags: Xmart Booking does not create or display personal behavioral tags for customers without their explicit knowledge and consent. Any behavioral data is processed only in aggregated and anonymized form.

8

Data Retention

Your account information is retained for as long as your account is active.
After account closure, your information will be deleted within 30 days.
Certain information may be retained for up to 7 years to meet legal requirements.

9

Data Security

All data is encrypted in transit and at rest (SSL/TLS).
Access to data is restricted to authorized personnel only.
Security systems are regularly reviewed and updated.
In the event of a security breach, you and the relevant authorities will be notified as soon as possible.

10

Your Rights

Under Canada's PIPEDA, you have the right to

Be informed of the information we hold about you.
Receive a complete copy of your data.
Correct inaccurate information.
Request deletion of your information.
Opt out of the use of your information for marketing purposes.

To exercise these rights, please contact us at: privacy@xmartbooking.com

11

International Data Transfers

If our servers are located outside Canada, your information may be transferred to other countries. We ensure that such transfers comply with PIPEDA standards and include adequate protections.

12

Children's Privacy

This platform is not designed for individuals under the age of 18. We do not knowingly collect information from children.

13

Changes to This Policy

In the event of significant changes to this policy

You will be notified at least 30 days before the changes take effect.
The date of the last update will be displayed at the top of this page.

14

Contact Us

For any questions about this policy or your personal information:

Email: privacy@xmartbooking.com
Address: VNOD Corporation, Ontario, Canada