I. Introduction
This notice describes the personal data we collect, how it’s used and shared, and
your choices regarding this data. We recommend that you read this along with our
privacy overview, which highlights key points about our privacy practices.
II. Overview
A. Scope
This notice applies to users of XBAPA services anywhere in the world, including
users of XBAPA’s apps, websites, features, or other services.
This notice describes how XBAPA and its affiliates collect and use personal data.
This notice applies to all users of our apps, websites, features, or other services
anywhere in the world, unless covered by a separate privacy notice, such as the
XBAPA Freight Privacy Notice. This notice specifically applies to:
Riders: individuals who request or receive transportation, including those who
receive transportation requested by another individual
Drivers: individuals who provide, or submit applications to XBAPA to provide,
transportation individually or through partner transportation companies
Delivery recipients: individuals who request or receive food, or other products and
services
Delivery partners: individuals who provide, or submit applications to XBAPA to
provide, delivery or other services
Renters: individuals who rent JUMP bicycles or scooters, or other light electrical
vehicles or devices (collectively, “Rental Devices”), through an XBAPA app.
This notice also governs XBAPA’s other collections of personal data in connection
with XBAPA’s services. For example, we may collect the contact information of
individuals who use accounts owned by XBAPA for Business customers or of owners or
employees of XBAPA Eats restaurant partners, or we may collect other personal data
in connection with our mapping technology and features.
All those subject to this notice are referred to as “users” in this notice.
In addition, please note the following:
For users in Argentina: The Public Information Access agency, in its role of
Regulating Body of Law 25.326, is responsible for receiving complaints and reports
presented by any data subjects who believe their rights have been impacted by a
violation of the local data protection regulation.
For users in Brazil: Please see here for information regarding XBAPA’s privacy
practices required under Brazil’s General Data Protection Law (Lei Geral de Proteção
de Dados - LGPD)
For California users: Information regarding XBAPA’s privacy practices related to
the California Consumer Privacy Act (CCPA) is available here.
For users in Mexico: Please see here for information regarding XBAPA’s privacy
practices required under Mexico’s Mexican Personal Data Protection Law (Ley Federal
de Protección de Datos Personales en Posesión de los Particulares).
For users in Colombia: This notice also applies for the lessors and lessees. For the
purposes of this notice, lessors will be considered drivers and lessees will be
considered riders.
For riders without an XBAPA account: The personal data of riders who take trips
arranged by the owners of an XBAPA account, such as when a rider takes a ride
arranged by the owner of an XBAPA Health account (such as a hospital or healthcare
provider), is processed in accordance with our contract with the owner of that
account, and not as otherwise described in this notice. Such processing may include
sharing of rider location data with the owner of that account. Please contact the
owner of such account for more information.
Our data practices are subject to applicable laws in the places in which we operate.
This means that we engage in the practices described in this notice in a particular
country or region only if permitted under the laws of those places. Please contact
us here or through the addresses below with any questions regarding our practices in
a particular country or region.
B. Data controller and transfer
III. Data collections and uses
A. The data we collect
XBAPA collects:
Data provided by users to XBAPA, such as during account creation
Data created during use of our services, such as location, app usage, and device
data
Data from other sources, such as XBAPA partners and third parties that use XBAPA
APIs
The following data is collected by or on behalf of XBAPA:
1. Data provided by users. This includes:
User profile: We collect data when users create or update their XBAPA accounts.
This
may include their name, email, phone number, login name and password, address,
profile
picture, payment or banking information (including related payment verification
information), government identification documents, including driver’s license
numbers
and images, birthdate, signature, and photo. This also includes vehicle or insurance
information of drivers and delivery partners, and user settings. We may use the
photos
submitted by drivers and/or delivery partners to verify their identities, such as
through facial recognition technologies. For more information, please see the
section
titled “How we use personal data.”
Background check and identity verification: We collect background check and identity
verification information for drivers and delivery partners. This may include
information
such as driver history or criminal record (where permitted by law), and right to
work.
This information may be collected by an authorized vendor on XBAPA’s behalf. We
also
collect identity verification from XBAPA Eats users who request alcohol delivery.
Demographic data: We may collect demographic data about users, including through
user
surveys. In some countries, we may also receive demographic data about users from
third
parties.
User content: We collect the information users submit when they contact XBAPA
customer
support, provide ratings or compliments for other users or restaurant partners, or
otherwise contact XBAPA. This may include feedback, photographs or other recordings
collected by users.
2. Data created during use of our services. This includes:
Location data: We collect precise or approximate location data from a user’s mobile
device if enabled by the user to do so. For drivers and delivery partners, XBAPA
collects this data when the XBAPA app is running in the foreground (app open and
on-screen) or background (app open but not on-screen) of their mobile device. For
riders, delivery recipients, and renters, XBAPA collects this data when the XBAPA
app
is running in the foreground. In certain regions (which do not include the European
Union), XBAPA may also collect this data when the XBAPA app is running in the
background of the user’s mobile device. Riders, delivery recipients, and renters may
use
the XBAPA apps without enabling XBAPA to collect location data from their mobile
devices. However, this may affect some functionality available in the XBAPA apps.
For
example, a user who has not enabled location data collection will have to manually
enter
their address. In addition, the location data collected from a driver or rental
device
during a trip will be linked to the rider’s or renter’s account, even if they have
not
enabled location data to be collected from their device, including for purposes of
receipt generation, customer support, fraud detection, insurance, and litigation.
Transaction information: We collect transaction information related to the use of
our
services, including the type of services requested or provided, order details,
delivery
information, date and time the service was provided, amount charged, distance
traveled,
and payment method. Additionally, if someone uses your promotion code, we may
associate
your name with that person.
Usage data: We collect data about how users interact with our services. This
includes
data such as access dates and times, app features or pages viewed, app crashes and
other
system activity, type of browser, and third-party sites or services used before
interacting with our services. In some cases, we collect this data through cookies,
pixels, tags, and similar tracking technologies that create and maintain unique
identifiers. To learn more about these technologies, please see our Cookie Notice.
Device data: We may collect data about the devices used to access our services,
including the hardware models, device IP address, operating systems and versions,
software, preferred languages, unique device identifiers, advertising identifiers,
serial numbers, device motion data, and mobile network data.
Communications data: We enable users to communicate with each other and XBAPA
through
XBAPA’s mobile apps and websites. For example, we enable drivers and riders, and
restaurants or delivery partners and delivery recipients, to call, text, or send
other
files to each other (generally without disclosing their telephone numbers to each
other). To provide this service, XBAPA receives some data regarding the calls,
texts,
or other communications, including the date and time of the communications and the
content of the communications. XBAPA may also use this data for customer support
services (including to resolve disputes between users), for safety and security
purposes, to improve our products and services, and for analytics.
Rental devices data: We collect data generated by rental devices, such as bicycles,
scooters, or other light electric vehicles or devices, when they’re in use. This
includes the date and time of use, and the location, route, and distance traveled.
To
the extent permitted by law, the location data collected from the rental device
during
the trip will be linked to the renter’s account, even if they have not enabled
XBAPA to
collect location data from their mobile device.
3. Data from other sources. This includes:
User feedback, such as ratings, feedback, or compliments.
Users participating in our referral programs. For example, when a user refers
another
person, we receive the referred person’s personal data from that user.
XBAPA account owners who request services for or on behalf of other users, or who
enable such users to request or receive services through their accounts. This
includes
owners of XBAPA for Business accounts.
Users or others providing information in connection with claims or disputes.
XBAPA business partners through which users create or access their XBAPA account,
such
as payment providers, social media services, or apps or websites that use XBAPA’s
APIs
or whose APIs XBAPA uses.
XBAPA business partners in connection with the XBAPA Visa Cardto the extent
disclosed
in the terms and conditions for the card.
Vendors who help us verify users’ identity, background information, and eligibility
to
work, for regulatory, safety, and security purposes.
Insurance, vehicle, or financial services providers for drivers and/or delivery
partners.
Partner transportation companies (for drivers or delivery partners who use our
services
through an account associated with such a company).
Publicly available sources.
Marketing service providers.
XBAPA may combine the data collected from these sources with other data in its
possession.
B. How we use personal data
XBAPA collects and uses data to enable reliable and convenient transportation,
delivery, and other products and services. We also use the data we collect:
To enhance the safety and security of our users and services
For customer support
For research and development
To enable communications between users
To send marketing and non-marketing communications to users
In connection with legal proceedings
XBAPA does not sell or share user personal data with third parties for their direct
marketing, except with users’ consent.
XBAPA uses the data it collects for purposes including:
1. Providing services and features. XBAPA uses the data we collect to provide,
personalize, maintain, and improve our products and services.
This includes using the data to:
Create and update users’ accounts.
Verify drivers’ and delivery partners’ identity, background history, and eligibility
to
work.
Enable transportation, deliveries, and other services.
Offer, process, or facilitate payments for our services.
Offer, obtain, provide, or facilitate insurance, vehicle, invoicing, or financing
solutions in connection with our services.
Track and share the progress of rides or deliveries.
Enable features that allow users to share information with other people, such as
when
riders submit a compliment about a driver, when delivery recipients provide feedback
for
a restaurant or delivery partner, refer a friend to XBAPA, split fares, or share
ETA
and location with their contacts.
Enable features to personalize users’ XBAPA accounts, such as creating bookmarks
for
favorite places, and to enable quick access to previous destinations. We may, for
example, present an XBAPA Eats user with personalized restaurant or food
recommendations based on their prior orders. Please see the section of this notice
titled “Choice and transparency” to learn how to object to this use of personal
data.
Enable Accessibility features that make it easier for users with disabilities to use
our
services, such as those that enable deaf or hard-of-hearing drivers to alert their
riders of their disabilities, allow only text messages from riders, and enable
receipt
of flashing trip request notifications instead of sound notifications on their
mobile
device.
Perform internal operations necessary to provide our services, including to
troubleshoot
software bugs and operational problems; to conduct data analysis, testing, and
research;
and to monitor and analyze usage and activity trends.
2. Safety and security. We use personal data to help maintain the safety, security,
and
integrity of our services and users. This includes:
Screening riders, drivers, and delivery partners before enabling their use of our
services and at subsequent intervals, including through reviews of background
checks,
where permitted by law, to help prevent use of our services by unsafe drivers and/or
riders.
Using data from drivers’ or delivery partners’ devices to help identify unsafe
driving
behavior such as speeding or harsh braking and acceleration, and to inform them of
safer
driving practices. We also use data from delivery partners’ devices to verify the
type
of vehicles they used to provide deliveries.
In certain regions, using information derived from driver’s license photos, and
other
photos submitted to XBAPA, for safety and security purposes. This includes XBAPA’s
Real-Time ID Check feature, which prompts drivers and delivery partners to share a
selfie before going online to help ensure that the driver or delivery partner using
the
app matches the XBAPA account we have on file. This also includes comparing
photographs
that we have on file against photographs (i) of other users to prevent
identity-borrowing, and (ii) from public databases to verify user identity.
Using device, location, profile, usage, and other data to prevent, detect, and
combat
fraud or unsafe activities.
Using user ratings and feedback to encourage compliance with our Community
Guidelines
and as grounds for deactivating drivers and delivery partners with low ratings or
who
otherwise violated such guidelines in certain countries.
3. Customer support. XBAPA uses the information we collect (including recordings of
customer support calls with notice to and the consent of the user) to provide
customer
support, including to:
Direct questions to the appropriate customer support person
Investigate and address user concerns
Monitor and improve our customer support responses and processes
4. Research and development. We may use the data we collect for testing, research,
analysis, product development, and machine learning to improve the user experience. This
helps us to improve and enhance the safety and security of our services, improve our
ability to prevent the use of our services for illegal or improper purposes, develop new
features and products, and facilitate insurance and finance solutions in connection with
our services.
5. Enabling communications between users. For example, a driver may message or call a
rider to confirm a pickup location, a rider may contact a driver to retrieve a lost
item, or a restaurant or delivery partner may call a delivery recipient with information
about their order.
6. Marketing. XBAPA may use the data we collect to market our services to our users.
This includes sending users communications about XBAPA services, features, promotions,
sweepstakes, studies, surveys, news, updates, and events.
We may also send communications to our users about products and services offered by
XBAPA partners. For example, if a user has placed an XBAPA Eats order, we may provide
recommendations, promotions, or ads about similar food offered by other XBAPA partners.
Although we may send users communications about XBAPA partners’ products and services,
we do not sell users’ personal data to, or share it with, such partners or others for
purposes of their own direct marketing or advertising, except with users’ consent.
We may use the data we collect to personalize the marketing communications (including
advertisements) that we send, including based on user location, past use of XBAPA’s
services, and user preferences and settings.
We may also send users communications regarding elections, ballots, referenda, and other
political and notice processes that relate to our services. For example, XBAPA has
notified some users by email of ballot measures or pending legislation relating to the
availability of XBAPA’s services in those users’ areas.
7. Non-marketing communications. XBAPA may use the data we collect to generate and
provide users with receipts; inform them of changes to our terms, services, or policies;
or send other communications that aren’t for the purpose of marketing the services or
products of XBAPA or its partners.
8. Legal proceedings and requirements. We may use the personal data we collect to
investigate or address claims or disputes relating to use of XBAPA’s services, or as
otherwise allowed by applicable law, or as requested by regulators, government entities,
and official inquiries.
9. Automated decision-making
We use personal data to make automated decisions relating to use of our services. This
includes:
Enabling dynamic pricing, in which the price of a ride, or the delivery fee for XBAPA
Eats orders, is determined based on constantly varying factors such as the estimated
time and distance, the predicted route, estimated traffic, and the number of riders and
drivers using XBAPA at a given moment.
Matching available drivers and delivery partners to users requesting services. Users can
be matched based on availability, proximity, and other factors. Please see here for
further information about our matching process.
Determining driver and delivery partner ratings, and deactivating drivers, riders, and
delivery partners with low ratings. For more information about how ratings are
determined and used, please see here for rider ratings, herefor driver ratings, and here
for delivery partner ratings. Please also see the section below titled “Ratings look-up”
for further information.
Deactivating users who are identified as having engaged in fraud or activities that may
otherwise harm XBAPA, its users, and others. In some cases, such as when a user is
determined to be abusing XBAPA’s referral program, such behavior may result in
automatic deactivation.
Using driver location information, and communications between riders and drivers, to
identify cancellation fees earned or induced through fraud. For example, if we determine
by using such information that a driver is delaying a rider pickup in order to induce a
cancellation, we will not charge the rider a cancellation fee and will adjust the
amounts paid to the driver to omit such a fee. To object to such adjustment, please
contact XBAPA customer support.
Click the links in this section for more information about these processes. To object to
a deactivation resulting from these processes, please contact XBAPA customer support.
C. Cookies and third-party technologies
XBAPA and its partners use cookies and other identification technologies on our apps,
websites, emails, and online ads for purposes described in this notice.
Cookies are small text files that are stored on browsers or devices by websites, apps,
online media, and advertisements. XBAPA uses cookies and similar technologies for
purposes such as:
Authenticating users
Remembering user preferences and settings
Determining the popularity of content
Delivering and measuring the effectiveness of advertising campaigns
Analyzing site traffic and trends, and generally understanding the online behaviors and
interests of people who interact with our services
We may also allow others to provide audience measurement and analytics services for us,
to serve advertisements on our behalf across the Internet, and to track and report on
the performance of those advertisements. These entities may use cookies, web beacons,
SDKs, and other technologies to identify the devices used by visitors to our websites,
as well as when they visit other online sites and services.
Please see our Cookie Notice for more information regarding the use of cookies and other
technologies described in this section.
D. Data sharing and disclosure
Some of XBAPA’s products, services, and features require that we share data with other
users or at a user’s request. We may also share data with our affiliates, subsidiaries,
and partners, for legal reasons or in connection with claims or disputes.
XBAPA may share the data we collect:
1. With other users
This includes sharing:
Riders’ first name, rating, and pickup and/or dropoff locations with drivers.
Riders’ first name with other riders in a carpool trip. Riders in carpool trips may also
see the dropoff location of the other riders.
Delivery recipients’ first name, delivery address, and order information with their
delivery partner and restaurant. We may also share ratings and feedback, or other
information to the extent required by law, with the restaurant partner and delivery
partner.
For drivers and delivery partners, we may share data with the rider(s), delivery
recipient(s), and restaurant partner(s), including name and photo; vehicle make, model,
color, license plate, and vehicle photo; location (before and during trip); average
rating provided by users; total number of trips; length of use of the XBAPA app;
contact information (depending upon applicable laws); and driver or delivery partner
profile, including compliments and other feedback submitted by past users. We also
provide riders and delivery recipients with receipts containing information such as a
breakdown of amounts charged, driver or delivery partner first name, photo, route map,
and such other information required on invoices in the country or region where the
driver or delivery partner operates.
For those who participate in XBAPA’s referral program, we share certain personal data
of referred users, such as trip count, with the user who referred them, to the extent
relevant to determining the referral bonus.
2. At the user’s request
This includes sharing data with:
Other people at the user’s request. For example, we share a user’s ETA and location with
a friend when requested by that user, or a user’s trip information when they split a
fare with a friend.
XBAPA business partners. For example, if a user requests a service through a
partnership or promotional offering made by a third party, XBAPA may share certain data
with those third parties. This may include, for example, other services, platforms, apps
or websites that integrate with our APIs; vehicle suppliers or services; those with an
API or service with which we integrate; or restaurant partners or other XBAPA business
partners and their users in connection with promotions, contests, or specialized
services.
3. With the general public
Questions or comments from users submitted through public forums such as XBAPA blogs
and XBAPA social media pages may be viewable by the public, including any personal data
included in the questions or comments submitted by a user.
4. With the XBAPA account owner
If a user requests transportation or places an order using an account owned by another
party, we may share their order or trip information, including real-time location data,
with the owner of that account. This occurs, for example, when:
A rider uses their employer’s XBAPA for Business profile, such as when they take trips
arranged through XBAPA Central
A driver or delivery partner uses an account owned by or associated with an XBAPA
partner transportation company or restaurant
A rider takes a trip arranged by a friend or under a Family Profile
A delivery partner acts as a substitute (UK only)
5. With XBAPA subsidiaries and affiliates
We share data with our subsidiaries and affiliates to help us provide our services or
conduct data processing on our behalf. For example, XBAPA processes and stores data in
the United States on behalf of its international subsidiaries and affiliates.
6. With XBAPA service providers and business partners
XBAPA provides data to vendors, consultants, marketing partners, research firms, and
other service providers or business partners. These include:
Payment processors and facilitators
Background check and identity verification providers (drivers and delivery partners
only)
Cloud storage providers
Marketing partners and marketing platform providers, including social media advertising
services
Data analytics providers
Research partners, including those performing surveys or research projects in
partnership with XBAPA or on XBAPA’s behalf
Vendors that assist XBAPA to enhance the safety and security of its apps
Consultants, lawyers, accountants, and other professional service providers
Fleet partners
Insurance and financing partners
Airports
Lime and other local providers
Restaurant partners and/or their point of sale providers
Vehicle solution vendors or third-party vehicle suppliers
7. For legal reasons or in the event of a dispute
XBAPA may share users’ personal data if we believe it’s required by applicable law,
regulation, operating license or agreement, legal process or governmental request, or
where the disclosure is otherwise appropriate due to safety or similar concerns. This
includes sharing personal data with law enforcement officials, public health officials,
other government authorities, airports (if required by the airport authorities as a
condition of operating on airport property), or other third parties as necessary to
enforce our Terms of Service, user agreements, or other policies; to protect XBAPA’s
rights or property or the rights, safety, or property of others; or in the event of a
claim or dispute relating to the use of our services. If you use another person’s credit
card, we may be required by law to share your personal data, including trip or order
information, with the owner of that credit card.
Please see XBAPA’s Guidelines for Law Enforcement Authorities for more information.
This also includes sharing personal data with others in connection with, or during
negotiations of, any merger, sale of company assets, consolidation or restructuring,
financing, or acquisition of all or a portion of our business by or into another
company.
8. With consent
XBAPA may share a user’s personal data other than as described in this notice if we
notify the user and they consent to the sharing.
E. Data retention and deletion
XBAPA retains user profile, transaction, and other personal data for as long as a user
maintains their XBAPA account.
XBAPA may retain certain user data after receiving an account deletion request if
necessary, such as to comply with legal requirements.
XBAPA retains user profile, transaction, and other information for as long as a user
maintains their XBAPA account. For drivers and delivery partners, XBAPA also retains
vehicle and background check information (to the extent permitted by law) for as long as
they maintain their XBAPA account.
Riders and delivery recipients may request deletion of their account at any time through
the Settings > Privacy menus in the XBAPA app, or through XBAPA’s Help Center.
Following such requests, XBAPA deletes the data that it is not required to retain for
purposes of regulatory, tax, insurance, litigation, or other legal requirements. For
example, XBAPA retains location, device, and usage data for these purposes for a
minimum of 7 years; while it retains such data, it may also use it for purposes of
safety, security, fraud prevention and detection, and research and development. In
certain circumstances, XBAPA may be unable to delete a user’s account, such as if
there’s an outstanding credit on the account or an unresolved claim or dispute. Upon
resolution of the issue preventing deletion, XBAPA will delete the account as described
above.
XBAPA may also retain certain information if necessary for purposes of safety,
security, and fraud prevention. For example, if XBAPA deactivates a user’s account
because of unsafe behavior or security incidents, XBAPA may retain certain information
about that account to prevent that user from opening a new XBAPA account in the future.
F. Grounds for processing
We only collect and use personal data where we have lawful grounds to do so. These
include processing user personal data to provide requested services and features, for
purposes of XBAPA’s legitimate interests or those of other parties, to fulfill our
legal obligations, or based on consent.
We collect and use personal data only where we have one or more lawful grounds for doing
so. Such grounds may vary depending on where our users are located, but generally
include processing personal data:
a. To provide requested services and features
In order to provide our services, we must collect and use certain personal data. This
includes:
User profile data, which we use to establish and maintain user accounts; verify user
identity; communicate with users about their trips, orders, and accounts; and enable
users to make payments or receive earnings
Background trip information, which is used to verify an applicant’s eligibility to be a
driver or delivery partner
Driver and delivery partner location data, which we use to track trips and assist with
navigation
Usage data, which is necessary to maintain, optimize, and enhance XBAPA’s services,
including to determine incentives, connect riders and drivers, and calculate costs of
trips and driver earnings
Transaction information
Information relating to customer support
b. For purposes of the legitimate interests of XBAPA or other parties
This includes using personal data to maintain and enhance our users’ safety and
security. For example, we use personal data to prevent use of our services by users who
have engaged in inappropriate or dangerous behavior, such as by retaining data of banned
users to prevent their use of XBAPA’s apps. We also use usage data to prevent matching
of riders and drivers for whom there is higher risk of conflict (for instance, because
they have been the subject of prior complaints from other users).
This also includes purposes such as combating fraud; improving our services, direct
marketing, research, and development; and enforcing XBAPA’s Terms of Service.
In addition, it includes using personal data to the extent necessary for the interests
of other people or the general public, such as in connection with legal or insurance
claims, and to protect the rights and safety of others.
c. To fulfill XBAPA’s legal obligations
For example, XBAPA is subject to laws and regulations in many cities and countries that
require it to collect and retain data about our users’ trips, and to provide copies of
such data to the government or other authorities. We collect and use personal data to
comply with such laws.
XBAPA may also share data with law enforcement regarding criminal acts or threats to
public safety, or requests by third parties pursuant to legal processes. For more
information about such sharing, please see XBAPA’s Guidelines for Law Enforcement
Authorities - United States, Guidelines for Law Enforcement Authorities - Outside the
US, and Guidelines for Third Party Data Requests and Service of Legal Documents.
d. With consent
XBAPA may collect and use personal data based on the user’s consent. For example, we
may collect personal data through voluntary surveys. Responses to such surveys are
collected on the basis of consent and will be deleted once no longer necessary for the
purposes collected.
A user who has provided consent to a collection or use of their personal data can revoke
it at any time. However, the user will not be able to use any service or feature that
requires collection or use of that personal data.
IV. Choice and transparency
XBAPA enables users to access and control the data that XBAPA collects, including
through:
In-app settings
Device permissions
In-app ratings pages
Marketing opt-outs
XBAPA also enables users to request access to or copies of their data, changes or
updates to their accounts, deletion of their accounts, or that XBAPA restrict its
processing of user personal data.
A. Privacy settings
Settings menus in the XBAPA app for riders give them the ability to set or update their
location-sharing preferences and their preferences for receiving mobile notifications
from XBAPA. Information about these settings, how to set or change these settings, and
the effect of turning off these settings is described below.
Location data
XBAPA uses riders’ device location services to make it easier to get a ride whenever
they need one. Location data helps improve our services, including pickups, navigation,
and customer support.
Riders may enable or disallow XBAPA to collect location data from their mobile devices
through the Settings > Privacy menus in the XBAPA app. Riders and delivery recipients
can enable or disallow such collections through the settings on their mobile device.
Share Live Location (riders)
Riders who have enabled XBAPA to collect location data from their mobile device may
also enable XBAPA to share their location with their driver from the time the ride is
requested to the start of the trip. This can help improve pickups for both drivers and
riders, particularly in crowded areas.
Riders may enable or disable this feature through the Settings > Privacy menus in the
XBAPA app.
Emergency Data Sharing (riders)
Riders who have enabled XBAPA to collect location data from their mobile device may
also enable the Emergency Data Sharing feature that shares data with emergency police,
fire, and ambulance services. Such data includes approximate location at the time the
emergency call was placed; the car’s make, model, color, and license plate information;
the rider’s name and phone number; pickup and dropoff locations; and the driver’s name.
Riders may enable or disable this feature through the Settings > Privacy menus or the
Safety Center in the XBAPA app.
Notifications: account and trip updates
XBAPA provides users with trip status notifications and updates related to activity on
their account. These notifications are a necessary part of using the XBAPA app and
cannot be disabled. However, users may choose the method by which they receive these
notifications through the Settings > Privacy menus in the XBAPA app.
Notifications: discounts and news
Users may enable XBAPA to send push notifications about discounts and news from XBAPA.
Push notifications may be enabled or disabled through the Settings > Privacy menus in
the XBAPA app.
Communications from restaurant partners
Delivery recipients who have opted in to communications from restaurant partners may
stop sharing their data with each restaurant partner in their XBAPA Eats account
settings.
B. Device permissions
Most mobile device platforms (iOS, Android, etc.) have defined certain types of device
data that apps cannot access without the device owner’s permission, and these platforms
have different methods for how that permission can be obtained. iOS devices notify users
the first time the XBAPA app requests permission to access certain types of data and
gives users the option to grant or refuse permission. Android devices notify users of
the permissions that the XBAPA app seeks before their first use of the app, and use of
the app constitutes a grant of such permission.
C. Ratings look-up
After every trip, drivers and riders are able to rate each other on a scale from 1 to 5.
An average of those ratings is associated with a user’s account and is displayed to
other users for whom they provide or receive services. For example, rider ratings are
available to drivers from whom they request transportation, and driver ratings are
available to their riders.
This 2-way system holds everyone accountable for their behavior. Accountability helps
create a respectful, safe environment for drivers and riders. Riders can see their
average rating in the main menu of the XBAPA app. Drivers can see their average rating
after tapping their profile photo in the XBAPA Driver app.
Delivery partners are also rated by delivery recipients and restaurant partners. Click
here for more information.
D. Marketing opt-outs
Users may opt out of receiving promotional emails from XBAPA here. Users may also opt
out of receiving emails and other messages from XBAPA by following the unsubscribe
instructions in those messages. We may still send users who have opted out
non-promotional communications, such as receipts for rides or information about their
account.
E. User data requests
XBAPA provides users with a variety of ways to learn about, control, and submit
questions and comments about XBAPA’s handling of their data. To make a request, please
go here.
Accessing data: Users can ask for an explanation of the data we collect from them and
how we use it.
Receiving data: Users can ask for a copy of data that XBAPA collects from them with
their consent or as necessary to provide our services.
Changing or updating data: Users can edit the name, phone number, email address, payment
method, and photo associated with their account through the Settings menu in XBAPA’s
apps or driver portal. They may also ask that XBAPA change or update their data,
including if they believe such data is inaccurate or incomplete.
Deleting data: Users may request deletion of their account at any time through the
Settings > Privacy menus in the XBAPA app, or through XBAPA’s website (riders and
delivery recipients here; drivers and delivery partners here).
Objections, restrictions, and complaints: Users may request that we stop using all or
some of their personal data, or that we limit our use of their data. XBAPA may continue
to process data after such objection or request to the extent required or permitted by
law.
In addition, depending on their location, users may have the right to file a complaint
relating to XBAPA’s handling of their personal data with the data protection authority
in their country. For example, users in the European Union and South America may submit
such requests to the data protection authorities in the country in which they live.
V. Updates to this notice
We may occasionally update this notice. Use of our services after an update constitutes
consent to the updated notice to the extent permitted by law.
We may occasionally update this notice. If we make significant changes, we will notify
users in advance of the changes through the XBAPA apps or through other means, such as
email. We encourage users to periodically review this notice for the latest information
on our privacy practices. After such notice, use of our services by users in countries
outside the European Union will be understood as consent to the updates to the extent
permitted by law.
1. Housing
Thank you for using XBAPA! Your trust is important to us and we’re committed to
protecting the privacy and security of your personal information. The information
that’s shared with us helps us to provide a great experience with XBAPA. We have a
dedicated privacy team that’s committed to protecting all the personal information
we collect and help ensure that personal information is handled properly worldwide.
This Privacy Policy describes how we collect, use, process, and disclose your
personal information, in conjunction with your access to and use of the XBAPA
Platform and the Payment Services. This privacy policy describes our privacy
practices for all websites, platforms and services that link to it. Please read the
privacy policy on the applicable site.
1.1 Definitions
If you see an undefined term in this Privacy Policy (such as “Listing” or “XBAPA
Platform”), it has the same definition as in our Terms of Service (“Terms”).
1.2 Data Controller
When this policy mentions “XBAPA,” “we,” “us,” or “our,” it refers to the XBAPA
company that is responsible for your information under this Privacy Policy (the
“Data Controller”).
1.3 Applicability to Payments
This Privacy Policy also applies to the Payment Services provided to you by XBAPA
Payments pursuant to the Payments Terms of Service (“Payments Terms”). When using
the Payment Services, you will be also providing your information, including
personal information, to one or more XBAPA entities, which will also be
the Data Controller (the "Payments Data Controller") of your information related to
the Payment Services, generally depending on your country of residence.
2. INFORMATION WE COLLECT
There are three general categories of information we collect.
2.1 Information You Give to Us.
2.1.1 Information that is necessary for the use of the XBAPA Platform.
We ask for and collect the following personal information about you when you use the
XBAPA Platform. This information is necessary for the adequate performance of the
contract between you and us and to allow us to comply with our legal obligations.
Without it, we may not be able to provide you with all the requested services.
Account Information. When you sign up for an XBAPA Account, we require certain
information such as your first name, last name, email address, and date of birth.
Profile and Listing Information. To use certain features of the XBAPA Platform
(such as booking or creating a Listing), we may ask you to provide additional
information, which may include your address, phone number, and a profile picture.
Identity Verification Information. To help create and maintain a trusted
environment, we may collect identity verification information (such as images of
your government issued ID, passport, national ID card, or driving license, as
permitted by applicable laws) or other authentication information. To learn more,
see our Help Center article about providing identification on XBAPA.
Payment Information. To use certain features of the XBAPA Platform (such as booking
or creating a Listing), we may require you to provide certain financial information
(like your bank account or credit card information) in order to facilitate the
processing of payments (via XBAPA).
Communications with XBAPA and other Members. When you communicate with XBAPA or
use the XBAPA Platform to communicate with other Members, we collect information
about your communication and any information you choose to provide.
2.1.2 Information you choose to give us.
You may choose to provide us with additional personal information in order to obtain
a better user experience when using XBAPA Platform. This additional information
will be processed based on our legitimate interest or when applicable, your consent.
Additional Profile Information. You may choose to provide additional information as
part of your XBAPA profile (such as gender, preferred language(s), city, and a
personal description). Some of this information as indicated in your Account
settings is part of your public profile page, and will be publicly visible to
others.
Address Book Contact Information. You may choose to import your address book
contacts or enter your contacts’ information manually to access certain features of
the XBAPA Platform, like inviting them to use XBAPA.
Other Information. You may otherwise choose to provide us information when you fill
in a form, update or add information to your XBAPA Account, respond to surveys,
post to community forums, participate in promotions, communicate with our customer
care team, share your experience with us (such as through Host Stories), or use
other features of the XBAPA Platform.
2.1.3 Information that is necessary for the use of the Payment Services.
The Payments Data Controller needs to collect the following information necessary
for the adequate performance of the contract with you and to comply with applicable
law (such as anti-money laundering regulations). Without it, you will not be able to
use Payment Services:
Payment Information. When you use the Payment Services, the Payments Data Controller
requires certain financial information (like your bank account or credit card
information) in order to process payments and comply with applicable law.
Identity Verification and Other Information. If you are a Host, the Payments Data
Controller may require identity verification information (such as images of your
government issued ID, passport, national ID card, or driving license) or other
authentication information, your date of birth, your address, email address, phone
number and other information in order to verify your identity, provide the Payment
Services to you, and to comply with applicable law.
2.1.4 Information We Automatically Collect from Your Use of the XBAPA Platform and
Payment Services.
When you use the XBAPA Platform and the Payment Services, we automatically collect
personal information about the services you use and how you use them. This
information is necessary for the adequate performance of the contract between you
and us, to enable us to comply with legal obligations and given our legitimate
interest in being able to provide and improve the functionalities of the XBAPA
Platform and Payment Services.
Geo-location Information. When you use certain features of the XBAPA Platform, we
may collect information about your precise or approximate location as determined
through data such as your IP address or mobile device’s GPS to offer you an improved
user experience. Most mobile devices allow you to control or disable the use of
location services for applications in the device’s settings menu. XBAPA may also
collect this information even when you are not using the app if this connection is
enabled through your settings or device permissions.
Usage Information. We collect information about your interactions with the XBAPA
Platform such as the pages or content you view, your searches for Listings, bookings
you have made, and other actions on the XBAPA Platform.
Log Data and Device Information. We automatically collect log data and device
information when you access and use the XBAPA Platform, even if you have not
created an XBAPA Account or logged in. That information includes, among other
things: details about how you’ve used the XBAPA Platform (including if you clicked
on links to third party applications), IP address, access dates and times, hardware
and software information, device information, device event information, unique
identifiers, crash data, cookie data, and the pages you’ve viewed or engaged with
before or after using the XBAPA Platform.
Cookies and Similar Technologies. We use cookies and other similar technologies when
you use our platform, use our mobile app, or engage with our online ads or email
communications. We may collect certain information by automated means using
technologies such as cookies, web beacons, pixels, browser analysis tools, server
logs, and mobile identifiers. In many cases the information we collect using cookies
and other tools is only used in a non-identifiable without reference to personal
information. For example, we may use information we collect to better understand
website traffic patterns and to optimize our website experience. In some cases we
associate the information we collect using cookies and other technology with your
personal information. Our business partners may also use these tracking technologies
on the XBAPA Platform or engage others to track your behavior on our behalf.
Pixels and SDKs.
Do Not Track Signals. While you may disable the usage of cookies through your
browser settings, the XBAPA Platform currently does not respond to a “Do Not Track”
signal in the HTTP header from your browser or mobile application due to lack of
standardization regarding how that signal should be interpreted.
Payment Transaction Information. XBAPA collects information related to
your payment transactions through the XBAPA Platform, including the payment
instrument used, date and time, payment amount, payment instrument expiration date
and billing postcode, PayPal email address, IBAN information, your address and other
related transaction details. This information is necessary for the adequate
performance of the contract between you and XBAPA and to allow the
provision of the Payment Services.
2.1.5 Information We Collect from Third Parties.
XBAPA may collect information, including personal information,
that others provide about you when they use the XBAPA Platform and the Payment
Services, or obtain information from other sources and combine that with information
we collect through the XBAPA Platform and the Payment Services. We do not control,
supervise or respond for how the third parties providing your information process
your Personal Information, and any information request regarding the disclosure of
your personal information to us should be directed to such third parties.
Third Party Services. If you link, connect, or login to your XBAPA Account with a
third party service (e.g. Google, Facebook, WeChat), the third party service may
send us information such as your registration, friends list, and profile information
from that service. This information varies and is controlled by that service or as
authorized by you via your privacy settings at that service.
Your References. If someone has written a reference for you, it will be published on
your XBAPA public profile page with your consent. To learn more, see our Help
Center article about References.
Background Information. For Members in the United States, to the extent permitted by
applicable laws, XBAPA may obtain reports from public records
of criminal convictions or sex offender registrations. For Members outside of the
United States, to the extent permitted by applicable laws and with your consent
where required, XBAPA may obtain the local version of police,
background or registered sex offender checks. We may use your information, including
your full name and date of birth, to obtain such reports.
Enterprise Product Invitations and Account Management. Organizations that use our
Enterprise products (such a XBAPA for work and programs with property managers and
owners) may submit personal information to facilitate account management and
invitations to use enterprise products.
Referrals. If you are invited to XBAPA, the person who invited you may submit
personal information about you such as your email address or other contact
information.
Other Sources. To the extent permitted by applicable law, we may receive additional
information about you, such as demographic data or information to help detect fraud
and safety issues, from third party service providers and/or partners, and combine
it with information we have about you. For example, we may receive background check
results (with your consent where required) or fraud warnings from service providers
like identity verification services for our fraud prevention and risk assessment
efforts. We may receive information about you and your activities on and off the
XBAPA Platform through partnerships, or about your experiences and interactions
from our partner ad networks.
2.2 Children’s Data.
Our websites and applications are not directed to children under 16 and we do not
knowingly collect any personal information directly from children under 16. If you
believe that we processing the personal information pertaining to a child
inappropriately, we take this very seriously and urge you to contact us using the
information provided under the “Contact Us” section below.
3. HOW WE USE INFORMATION WE COLLECT
We may use, store, and process personal information to (1) provide, understand,
improve, and develop the XBAPA Platform, (2) create and maintain a trusted and
safer environment (such as to comply with our legal obligations and ensure
compliance with XBAPA Policies) and (3) provide, personalize, measure, and improve
our advertising and marketing.
3.1 Provide, Improve, and Develop the XBAPA Platform. We may use the personal
information to provide, improve, and develop the XBAPA Platform such as to:
enable you to access and use the XBAPA Platform,
enable you to communicate with other Members,
operate, protect, improve, and optimize the XBAPA Platform and experience, such as
by performing analytics and conducting research,
provide customer service,
send you service or support messages, updates, security alerts, and account
notifications,
if you provide us with your contacts’ information, we may process this information:
(i) to facilitate your referral invitations, (ii) send your requests for references,
(iii) for fraud detection and prevention, and (iv) for any purpose you authorize at
the time of collection,
to operate, protect, improve, and optimize the XBAPA Platform and experience, and
personalize and customize your experience (such as making Listing suggestions,
ranking search results), and facilitate claims with our Host Guarantee, Host
Protection Insurance, Experience Protection Insurance or other similar host
protection programs, we conduct profiling based on your interactions with the XBAPA
Platform, your search and booking history, your profile information and preferences,
and other content you submit to the XBAPA Platform, and
enable your use of our enterprise products.
We process this personal information for these purposes given our legitimate
interest in improving the XBAPA Platform and our Members’ experience with it, and
where it is necessary for the adequate performance of the contract with you.
3.2 Create and Maintain a Trusted and Safer Environment. We may use the personal
information to create and maintain a trusted and safer environment such as to:
detect and prevent fraud, spam, abuse, security incidents, and other harmful
activity,
conduct security investigations and risk assessments,
verify or authenticate information or identifications provided by you (such as to
verify your Accommodation address or compare your identification photo to another
photo you provide),
conduct checks against databases and other information sources, including background
or police checks, to the extent permitted by applicable laws and with your consent
where required,
comply with our legal obligations,
Resolve any disputes with any of our Members and enforce our agreements with third
parties,
enforce our Terms of Service and other policies, and
in connection with the activities above, we may conduct profiling based on your
interactions with the XBAPA Platform, your profile information and other content
you submit to the XBAPA Platform, and information obtained from third parties. In
limited cases, automated processes may restrict or suspend access to the XBAPA
Platform if such processes detect activity that we think poses a safety or other
risk to the XBAPA Platform, our community, or third parties. If you challenge the
decisioning based on the automated process, please contact us as provided in the
Contact Us section below.
We process this personal information for these purposes given our legitimate
interest in protecting the XBAPA Platform, to measure the adequate performance of
our contract with you, and to comply with applicable laws.
3.3 Provide, Personalize, Measure, and Improve our Advertising and Marketing. We may
use the personal information to provide, personalize, measure, and improve our
advertising and marketing such as to:
send you promotional messages, marketing, advertising, and other information that
may be of interest to you based on your preferences (including information about
XBAPA or partner campaigns and services) and social media advertising through
social media platforms such as Facebook or Google),
personalize, measure, and improve our advertising,
Administer referral programs, rewards, surveys, sweepstakes, contests, or other
promotional activities or events sponsored or managed by XBAPA or its third party
partners,
conduct profiling on your characteristics and preferences (based on the information
you provide to us, your interactions with the XBAPA Platform, information obtained
from third parties, and your search and booking history) to send you promotional
messages, marketing, advertising and other information that we think may be of
interest to you,
enrolling in an email subscription will not affect the frequency of administrative
emails that we may send in connection with any XBAPA Account. No fee is charged for
sending promotional emails to you, but third-party data rates may apply. Note that
you may not be able to take advantage of certain promotions if you do not have an
XBAPA Account, and
invite you to events and relevant opportunities (for example, when you share your
Host story, we may use the information provided to reach out to you to invite you to
relevant events).
We will process your personal information for the purposes listed in this section
given our legitimate interest in undertaking marketing activities to offer you
products or services that may be of your interest.
3.4 How the Payments Data Controller uses the Personal Information Collected. We may
use the personal information as a part of Payment services such as to:
Enable you to access and use the Payment Services.
Detect and prevent fraud, abuse, security incidents, and other harmful activity.
Conduct security investigations and risk assessments.
Conduct checks against databases and other information sources.
Comply with legal obligations (such as anti-money laundering regulations).
Enforce the Payment Terms and other payment policies.
With your consent, send you promotional messages, marketing, advertising, and other
information that may be of interest to you based on your preferences.
The Payments Data Controller processes this personal information given its
legitimate interest in improving the Payment Services and its users’ experience with
it, and where it is necessary for the adequate performance of the contract with you
and to comply with applicable laws.
3.5 SMS Terms for U.S.
For text messaging in the United States, by requesting, joining, agreeing to,
enrolling in, signing up for, acknowledging, or otherwise consenting to receive one
or more text messages (“Opting In”) or using a XBAPA arrangement in which XBAPA
sends (or indicates that it may send, or receives a request that it send) one or
more text messages (“Text Message Service”), you accept these SMS Terms for U.S.
(“SMS Terms”), consent to the handling of your personal information as described in
the XBAPA Privacy Policy, and agree to resolve disputes with XBAPA as described in
our Terms of Service. Message and data rates may apply.
XBAPA will use reasonable commercial efforts to deliver the automated marketing
text messages to the number you provide through compatible wireless carriers.
Carriers and XBAPA are not liable for delayed or undelivered messages. The short
code we use for some Text Message Services may not be supported on all U.S.
carriers.
Opting In
By Opting In to a Text Message Service:
You expressly authorize XBAPA to use autodialer or non-autodialer technology to
send text messages to the cell phone number associated with your Opt-In (i.e., the
number listed on the Opt-In form or instructions, or, if none, the number from which
you send the Opt-In, or, if none, the number on file for your account). You also
authorize XBAPA to include marketing content in any such messages. You do not have
to Opt In or agree to Opt In as a condition of purchase.
You consent to the use of an electronic record to document your Opt-In. To withdraw
that consent, request a free paper or email copy of the Opt-In, or to update our
records with your contact information, please contact us via the methods described
in the Contact Us section. To view and retain an electronic copy of these SMS Terms
or the rest of your Opt-In, you will need (i) a device (such as a computer or cell
phone) with internet access, and (ii) either a printer or storage space on such
device. If you withdraw your consent, certain features of our service may not be
available to you. To update information on how we would contact you electronically,
visit your Notification settings in your account settings.
You confirm that you are the subscriber to the relevant phone number or that you are
the customary user of that number on a family or business plan and that you are
authorized to Opt In.
You consent to the use of an electronic record to document your Opt-In. To withdraw
that consent, update our records with your contact information, please visit your
XBAPA account Notifications settings or contact customer support.
These SMS Terms still will apply if you withdraw the consent mentioned above or opt
out of the Text Message Service.
After Opting In, in addition to the main messages the service offers, you may
receive one or more welcome messages or administrative messages, such as (in some
cases) a request to confirm your Opt-In.
About the Text Message Services and Opting Out
Message and data rates may apply. Unless otherwise noted, Text Message Services send
multiple, recurring messages. XBAPA may terminate any Text Message Service or your
participation in it at any time with or without notice, including, for example,
before you have received any or all messages that you otherwise would have received,
but these SMS Terms still will apply. Text STOP to any promotional message to Opt
Out or if applicable update your “Notification” settings on your XBAPA account.
For additional help, text HELP in response to a marketing message or contact
customer service.
3.6 Your Choices
You have choices on the promotional messages that you choose to receive.
You can limit the information you provide to XBAPA. Participation in promotions and
marketing programs is voluntary.
You can limit the communications that XBAPA sends to you.
To opt-out of marketing emails, simply click the link labeled “unsubscribe” at the
bottom of any marketing email we send you or access the notification settings in
your XBAPA Account.
To revoke permissions that you may have given to send promotional text messages,
text STOP in response to any message.
You can always update your notification settings within your XBAPA Account by
visiting the Notifications section of your XBAPA Account. Please note that even if
you opt-out of marketing communications, we may still need to contact you with
important transactional information about your account. For example, even if you
opt-out of emails, we may still send you activity confirmations or fraud alerts.
4. SHARING & DISCLOSURE
4.1 Advertising and Social Media; Sharing With Your Consent.
Where you have provided consent, we share your information, including personal
information, as described at the time of consent, such as when you authorize a third
party application or website to access your XBAPA Account or when you participate
in promotional activities conducted by XBAPA partners or third parties.
Where permissible according to applicable law we may use certain limited personal
information about you, such as your email address, to hash it and to share it with
social media platforms, such as Facebook or Google, to generate leads, drive traffic
to our websites or otherwise promote our products and services or the XBAPA
Platform. These processing activities are based on our legitimate interest in
undertaking marketing activities to offer you products or services that may be if
your interest.
The social media platforms with which we may share your personal information are not
controlled or supervised by XBAPA. Therefore, any questions regarding how your
social media platform service provider processes your personal information should be
directed to such provider.
4.2 Sharing between Members.
To help facilitate bookings or other interactions between Members, we may need to
share certain information, including personal information, with other Members, as it
is necessary for the adequate performance of the contract between you and us, as
follows:
When you as a Guest submit a booking request, certain information about you is
shared with the Host (and Co-Host, if applicable), including your profile, full
name, the full name of any additional Guests, your cancellation history, and other
information you agree to share. When your booking is confirmed, we will disclose
additional information to assist with coordinating the trip, like your phone number.
When you as a Host (or Co-Host, if applicable) have a confirmed booking, certain
information is shared with the Guest (and the additional Guests they may invite, if
applicable) to coordinate the booking, such as your profile, full name, phone
number, and Accommodation or Experience address.
When you as a Host invite another Member to become a Co-Host, you authorize the
Co-Host to access and update your information and Member Content, including but not
limited to certain information like your full name, phone number, Accommodation
address, calendar, Listing information, Listing photos, and email address.
When you as a Guest invite additional Guests to a booking, your full name, travel
dates, Host name, Listing details, the Accommodation address, and other related
information will be shared with each additional Guest.
When you as a Guest initiate a Group Payment Booking Request certain information
about each participant such as first name, last initial, profile picture as well as
the booking details is shared among all participants of the Group Payment Booking
Request.
We don’t share your billing and payout information with other Members.
4.3 Profiles, Listings, and other Public Information.
The XBAPA Platform lets you publish information, including personal information,
that is visible to the general public. For example:
Parts of your public profile page, such as your first name, your description, and
city, are publicly visible to others.
Listing pages are publicly visible and include information such as the Accommodation
or Experience’s approximate location (neighborhood and city) or precise location
(where you have provided your consent), Listing description, calendar availability,
your public profile photo, aggregated demand information (like page views over a
period of time), and any additional information you choose to share.
After completing a booking, Guests and Hosts may write Reviews and rate each other.
Reviews and Ratings are a part of your public profile page and may also be surfaced
elsewhere on the XBAPA Platform (such as the Listing page).
If you submit content in a community or discussion forum, blog or social media post,
or use a similar feature on the XBAPA Platform, that content is publicly visible.
Based on our legitimate interest to promote the XBAPA Platform we may display parts
of the XBAPA Platform (e.g., your Listing page) on sites operated by XBAPA’s
business partners, using technologies such as widgets or APIs. If your Listings are
displayed on a partner’s site, information from your public profile page may also be
displayed.
Information you share publicly on the XBAPA Platform may be indexed through third
party search engines. In some cases, you may opt-out of this feature in your Account
settings. If you change your settings or your public-facing content, these search
engines may not update their databases. We do not control the practices of third
party search engines, and they may use caches containing your outdated information.
4.4 Additional Services by Hosts.
Hosts may need to use third party services available through the XBAPA Platform to
assist with managing their Accommodation or providing additional services requested
by you, such as cleaning services or lock providers. Hosts may use features on the
XBAPA Platform to share information about the Guest (like check-in and check-out
dates, Guest name, Guest phone number) with such third party service providers for
the purposes of coordinating the stay, managing the Accommodation, or providing
other services. Hosts are responsible for third party service providers they use and
ensuring those service providers process Guest information securely and in
compliance with applicable law including data privacy and data protection laws.
4.5 Compliance with Law, Responding to Legal Requests, Preventing Harm and
Protection of our Rights.
XBAPA may disclose your information, including personal
information, to courts, law enforcement, governmental authorities, tax authorities,
or authorized third parties, if and to the extent we are required or permitted to do
so by law or if such disclosure is reasonably necessary: (i) to comply with our
legal obligations, (ii) to comply with a valid legal request or to respond to claims
asserted against XBAPA, (iii) to respond to a valid legal request relating to a
criminal investigation or alleged or suspected illegal activity or any other
activity that may expose us, you, or any other of our users to legal liability (See
more information on XBAPA’s Law Enforcement Guidelines here), (iv) to enforce and
administer our Terms of Service, the Payment Terms or other agreements with Members,
or (v) to protect the rights, property or personal safety of XBAPA, its employees,
its Members, or members of the public. For example, if permitted due to the forgoing
circumstances, Host tax information may be shared with tax authorities or other
governmental agencies.
These disclosures may be necessary to comply with our legal obligations, for the
protection of your or another person's vital interests or for the purposes of our or
a third party’s legitimate interest in keeping the XBAPA Platform secure,
preventing harm or crime, enforcing or defending legal rights, facilitating the
collection of taxes and prevention of tax fraud or preventing damage.
Where appropriate, we may notify Members about legal requests unless: (i) providing
notice is prohibited by the legal process itself, by court order we receive, or by
applicable law, or (ii) we believe that providing notice would be futile,
ineffective, create a risk of injury or bodily harm to an individual or group, or
create or increase a risk of fraud upon XBAPA’s property, its Members and the
XBAPA Platform. In instances where we comply with legal requests without notice for
these reasons, we may attempt to notify that Member about the request after the fact
where appropriate and where we determine in good faith that we are no longer
prevented from doing so.
4.6 Service Providers.
XBAPA uses a variety of third-party service providers to help
us provide services related to the XBAPA Platform and the Payment Services. Service
providers may be located inside or outside of the European Economic Area (“EEA”). In
particular, our service providers are based in Europe, India, Asia Pacific and North
and South America.
For example, service providers may help us: (i) verify your identity or authenticate
your identification documents, (ii) check information against public databases,
(iii) conduct background or police checks, fraud prevention, and risk assessment,
(iv) perform product development, maintenance and debugging, (v) allow the provision
of the XBAPA Services through third party platforms and software tools (e.g.
through the integration with our APIs), (vi) provide customer service, advertising,
or payments services, or (vii) process, handle or assess insurance claims or other
similar claims (such as claims under the XBAPA Host Guarantee). These providers
have limited access to your personal information to perform these tasks on our
behalf, and are contractually bound to protect the personal information and only use
the personal information in accordance with our instructions .
XBAPA will need to share your information, including
personal information, in order to ensure the adequate performance of our contract
with you.
4.7 Corporate Affiliates.
To enable or support us in providing the XBAPA Platform and the Payment Services,
we may share your information, including personal information, within our corporate
family of companies (both financial and non-financial entities) that are related by
common ownership or control.
Sharing with XBAPA, Inc. Even if your country of residence is not the United
States, your information may be shared with XBAPA, Inc. which provides the
technical infrastructure for the XBAPA Platform, product development and
maintenance, customer support, trust and safety and other business operation
services to other XBAPA entities. The data sharing is necessary for the performance
of the contract between you and us and is based on our legitimate interests in
providing the XBAPA Platform globally.
Sharing with XBAPA. In order to facilitate payments on or through the
XBAPA Platform, certain information as described above in “Information that is
necessary for the use of the Payment Services” section above, may be shared with the
relevant XBAPA entity. The data sharing is necessary for the performance
of the contract between you and us.
Sharing with XBAPA Ireland. If your country of residence is the United States, some
of your information may be shared with XBAPA Ireland when you create a Listing or
when you book a Host Service located outside of the United States (other than in
China). The information shared in these circumstances may include: (i) your name,
e-mail address and phone number, (ii) information relating to the Listing or Host
Service, including its address, (iii) booking information for the Listing or Host
Service, including but not limited to booking dates and payment amounts, and (iv)
the names, nationalities, and identification details (including passport/national ID
numbers and expiry dates) of any Guests. Additionally, when you send a message to a
Host or Guest outside of the United States (other than China), your first name,
profile picture and message content sent via the XBAPA Platform will be shared with
XBAPA Ireland. The data sharing is necessary for the performance of the contract
between you and us.
Sharing with XBAPA. Even if your country of residence is not Japan, some of
your information will be shared with XBAPA in the following circumstances:
Creating a Listing. If you create a Listing in Japan: (i) your name, phone number,
gender, birth date, email address, information relating to where you live and work
details on your profile page, (ii) information relating to the Listing (e.g.,
address, government notification numbers, permit details or other information),
(iii) booking information relating to the Listing, such as Guest details as set out
below in Host Services, booking dates, and payment amounts, (vi) details (if any) of
the payout method associated with the Listing, and (v) messages between you and
prospective and confirmed Guests at the Listing.
Host Services. If you book a Host Service located in Japan: (i) your name, phone
number, gender, birth date, email address, information relating to where you live
and your work on your profile page, IP address in relation to the transaction, (ii)
booking dates, (iii) messages between the Host and you or other Guests on the same
booking, (iv) details (if any) of the payment method used by any Guests for booking
the Host Service, and (v) the names and identification detail (if available) of any
Guests.
Sending Messages. If you send a message to a Host in relation to that Host’s Listing
in Japan, your first name, profile picture and message content.
The data sharing is necessary for the performance of the contract between you and us
to enable you to list or book Host Services in Japan and communicate with Members in
Japan.
Sharing with XBAPA China. Even if your country of residence is not China, some of
your information will be shared with XBAPA China in the following circumstances:
Creating a Listing. If you create a Listing in China, information shared includes:
(i) your name, phone number, email address, and passport/ID details, (ii)
information relating to the Listing (e.g., address), (iii) booking information
relating to the Listing, such as Guest details as set out below in Host Services,
booking dates, and payment amounts, and (iv) messages between you and prospective
and confirmed Guests at the Listing.
Host Services. If you book a Host Service located in China, information shared
includes: (i) your name, phone number, and email address (ii) booking dates, (iii)
messages between the Host and you or other Guests on the same booking, and (iv) the
names, nationalities, and identification details (including passport/national ID
numbers and expiry dates) of any Guests.
Sending Messages. If you send a message to a Host in relation to that Host’s Listing
in China, information shared includes: your first name, profile picture and message
content.
The data sharing is necessary for the performance of the contract between you and us
to enable you to list or book Host Services in China and communicate with Members in
China. Where required under law and you have expressly granted permission, XBAPA
China may disclose your information to Chinese government agencies without further
notice to you. We’ll notify you in advance in the above situations, and in specific
situations where we apply any practices that differ from what is described in this
Privacy Policy (including practices pertaining to disclosures to government
agencies).
Additionally, we share your information, including personal information, with our
corporate affiliates in order to support and integrate, promote, and to improve the
XBAPA Platform and our affiliates’ services.
4.8 Collection and Remittance of Occupancy Taxes.
In jurisdictions where XBAPA facilitates the Collection and Remittance of Occupancy
Taxes as described in the “Taxes” section of the Terms of Service, Hosts and Guests,
where legally permissible according to applicable law, expressly grant us
permission, without further notice, to disclose Hosts’ and Guests’ data and other
information relating to them or to their transactions, bookings, Accommodations and
Occupancy Taxes to the relevant tax authority, including, but not limited to, the
Host’s or Guest’s name, Listing addresses, transaction dates and amounts, tax
identification number(s), the amount of taxes received (or due) by Hosts from
Guests, and contact information.
4.9 Government Registration.
In jurisdictions where XBAPA facilitates or requires a registration, notification,
permit, or license application of a Host with a local governmental authority through
the XBAPA Platform in accordance with local law, we may share information of
participating Hosts with the relevant authority, both during the application process
and, if applicable, periodically thereafter, such as the Host’s full name and
contact details, Accommodation address, tax identification number, Listing details,
and number of nights booked.
4.10 Information Provided to Enterprise Customers.
If you have linked your XBAPA Account to the XBAPA Account of a company or other
organization (an “Enterprise”), added your work email address, or have a booking
facilitated via another party (such as the future employer or other entity) or used
a coupon in a similar capacity in connection with an Enterprise (such as using a
coupon to pay for an accommodation for an enterprise related event like employment
onboarding, orientation, meetings, etc.) through one of our Enterprise products,
that Enterprise will have access to your name, contact details, permissions and
roles, and other information as required to enable use by you and the Enterprise of
such Enterprise products.
4.11 Host Information Provided to XBAPA for Work Customers.
If a booking is designated as being for business purposes and made by a Guest
affiliated with an Enterprise, and the Enterprise is enrolled in our XBAPA for Work
, such as a booking made for business purposes using a coupon provided by an
Enterprise, we may disclose information related to the booking to the Enterprise,
such as the name of the Host, the Accommodation address, booking dates, pricing,
Listing details, and other related information, to the extent necessary for the
adequate performance of XBAPA’s contract with the Enterprise and to provide the
services. . At the request of the Enterprise or the Guest, we may also share this
information with third parties engaged by the Enterprise to provide travel
management, travel planning, financial reporting, personnel management, crisis
management, or other services.
4.12 Guest Information Provided to XBAPA for Work Customers.
If you have linked your XBAPA Account with an Enterprise, and you are included on a
booking designated as being for business purposes, we may disclose information
related to the booking to the Enterprise to the extent necessary for the adequate
performance of XBAPA’s contract with the Enterprise. Typically, this includes
information related to the booking, such as your name, dates of the booking, number
of guests, pricing, Listing details, the Accommodation address, and other related
information. At the request of you or your Enterprise, we may also disclose this
information to service providers engaged by it, such as companies that provide
travel management, financial reporting, personnel management, crisis management, or
other services. In the event of a dispute, emergency, or similar situation involving
a booking identified as being for business purposes, XBAPA may also share
additional relevant information it believes is necessary to safely and quickly
address the situation.
4.13 Programs with Managers and Owners.
We may share personal information and booking information with landlords, management
companies, and/or property owners in order to facilitate programs with these
partners. For example, guest booking and personal information may be shared with
owners and property managers of the building, complex, or planned community where a
host lives and/or the listing is to facilitate hosting services, security, billing,
and other services that may be provided.
4.14 Business Transfers.
If XBAPA undertakes or is involved in any merger, acquisition, reorganization, sale
of assets, bankruptcy, or insolvency event, then we may sell, transfer or share some
or all of our assets, including your information in connection with such transaction
or in contemplation of such transaction (e.g., due diligence). In this event, we
will notify you before your personal information is transferred and becomes subject
to a different privacy policy.
4.15 Aggregated Data.
We may also share aggregated information (information about our users that we
combine together so that it no longer identifies or references an individual user)
and other anonymized information for regulatory compliance, industry and market
analysis, research, demographic profiling, marketing and advertising, and other
business purposes.
5. OTHER IMPORTANT INFORMATION
5.1 Analyzing your Communications.
We may review, scan, or analyze your communications on the XBAPA Platform for fraud
prevention, risk assessment, regulatory compliance, investigation, product
development, research, analytics, and customer support purposes. For example, as
part of our fraud prevention efforts, we scan and analyze messages to mask contact
information and references to other websites. In some cases, we may also scan,
review, or analyze messages to debug, improve, and expand product offerings. We use
automated methods where reasonably possible. However, occasionally we may need to
manually review some communications, such as for fraud investigations and customer
support, or to assess and improve the functionality of these automated tools. We
will not review, scan, or analyze your messaging communications to send third party
marketing messages to you, and we will not sell reviews or analyses of these
communications.
These activities are carried out based on XBAPA's legitimate interest in ensuring
compliance with applicable laws and our Terms, preventing fraud, promoting safety,
and improving and ensuring the adequate performance of our services.
5.2 Linking Third Party Accounts.
You may link your XBAPA Account with your account at a third party social
networking service. Your contacts on these third party services are referred to as
“Friends.” When you create this link:
some of the information you provide to us from the linking of your accounts may be
published on your XBAPA Account profile;
your activities on the XBAPA Platform may be displayed to your Friends on the
XBAPA Platform and/or that third party site;
a link to your public profile on that third party social networking service may be
included in your XBAPA public profile;
other XBAPA users may be able to see any common Friends that you may have with
them, or that you are a Friend of their Friend if applicable;
other XBAPA users may be able to see any schools, hometowns or other groups you
have in common with them as listed on your linked social networking service;
the information you provide to us from the linking of your accounts may be stored,
processed and transmitted for fraud prevention and risk assessment purposes; and
the publication and display of information that you provide to XBAPA through this
linkage is subject to your settings and authorizations on the XBAPA Platform and
the third party site.
We only collect your information from linked third party accounts to the extent
necessary to ensure the adequate performance of our contract with you, or to ensure
that we comply with applicable laws, or with your consent.
5.3 Third Party Partners & Integrations
The XBAPA Platform may contain links to third party websites or services, such as
third party integrations, co-branded services, or third party-branded services
(“Third Party Partners”). XBAPA doesn’t own or control these Third Party Partners
and when you interact with them, you may be providing information directly to the
Third Party Partner, XBAPA, or both. These Third Party Partners will have their own
rules about the collection, use, and disclosure of information. We encourage you to
review the privacy policies of the other websites you visit.
Parts of the XBAPA Platform may use third party services such as Google Maps/Earth
services, including the Google Maps API(s), and Citibank for XBAPA. Use of
these respective services is subject to their privacy policies such as Google
Maps/Earth Additional Terms of Use, and the Google Privacy Policy, Citi Privacy
Policy.
6. YOUR RIGHTS
Consistent with applicable law, you may exercise any of the rights described in this
section before your applicable XBAPA Data Controller and Payments Data Controller.
See here for information on data subject rights requests and how to submit a
request. . Please note that we may ask you to verify your identity and request
before taking further action on your request.
6.1 Managing Your Information.
You may access and update some of your information through your Account settings. If
you have chosen to connect your XBAPA Account to a third-party application, like
Facebook or Google, you can change your settings and remove permission for the app
by changing your Account settings. You are responsible for keeping your personal
information up-to-date.
6.2 Rectification of Inaccurate or Incomplete Information.
You have the right to ask us to correct inaccurate or incomplete personal
information about you (and which you cannot update yourself within your XBAPA
Account).
6.3 Data Access and Portability.
In some jurisdictions, applicable law may entitle you to request certain copies of
your personal information held by us. You may also be entitled to request copies of
personal information that you have provided to us in a structured, commonly used,
and machine-readable format and/or request us to transmit this information to
another service provider (where technically feasible).
6.4 Data Retention and Erasure.
We generally retain your personal information for as long as is necessary for the
performance of the contract between you and us and to comply with our legal
obligations. In certain jurisdictions, you can request to have all your personal
information deleted entirely." Please note that if you request the erasure of your
personal information:
We may retain some of your personal information as necessary for our legitimate
business interests, such as fraud detection and prevention and enhancing safety. For
example, if we suspend an XBAPA Account for fraud or safety reasons, we may retain
certain information from that XBAPA Account to prevent that Member from opening a
new XBAPA Account in the future.
We may retain and use your personal information to the extent necessary to comply
with our legal obligations. For example, XBAPA may keep some of
your information for tax, legal reporting and auditing obligations.
Information you have shared with others (e.g., Reviews, forum postings) may continue
to be publicly visible on the XBAPA Platform, even after your XBAPA Account is
cancelled. However, attribution of such information to you will be removed.
Additionally, some copies of your information (e.g., log records) may remain in our
database, but are disassociated from personal identifiers.
Because we maintain the XBAPA Platform to protect from accidental or malicious loss
and destruction, residual copies of your personal information may not be removed
from our backup systems for a limited period of time.
6.5 Withdrawing Consent and Restriction of Processing.
If we are processing your personal information based on your consent you may
withdraw your consent at any time by changing your Account settings or by sending a
communication to XBAPA specifying which consent you are withdrawing. Please note
that the withdrawal of your consent does not affect the lawfulness of any processing
activities based on such consent before its withdrawal. Additionally, in some
jurisdictions, applicable law may give you the right to limit the ways in which we
use your personal information, in particular where (i) you contest the accuracy of
your personal information; (ii) the processing is unlawful and you oppose the
erasure of your personal information; (iii) we no longer need your personal
information for the purposes of the processing, but you require the information for
the establishment, exercise or defence of legal claims; or (iv) you have objected to
the processing pursuant to Section 6.6 and pending the verification whether the
legitimate grounds of XBAPA override your own.
6.6 Objection to Processing.
In some jurisdictions, applicable law may entitle you to require XBAPA
Payments not to process your personal information for certain specific purposes
(including profiling) where such processing is based on legitimate interest. If you
object to such processing XBAPA and/or XBAPA will no longer process your
personal information for these purposes unless we can demonstrate compelling
legitimate grounds for such processing or such processing is required for the
establishment, exercise or defence of legal claims.
6.7 Lodging Complaints.
You have the right to lodge complaints about our data processing activities by
filing a complaint with our Data Protection Officer who can be reached by the
“Contact Us” section below or with a supervisory authority.
7. OPERATING GLOBALLY & INTERNATIONAL TRANSFERS
To facilitate our global operations XBAPA may transfer,
store,
and process your information within our family of companies, partners, and
service
providers based in Europe, India, Asia Pacific and North and South America. Laws
in
these countries may differ from the laws applicable to your country of
residence.
For example, information collected within the EEA may be transferred, stored,
and
processed outside of the EEA for the purposes described in this Privacy Policy.
Where we transfer store, and process your personal information outside of the
EEA we
have ensured that appropriate safeguards are in place to ensure an adequate
level of
data protection.
7.1 EU-US & Swiss-US Privacy Shield.
XBAPA comply with the EU-US Privacy Shield Framework and
the
Swiss-US Privacy Shield Framework as set forth by the U.S. Department of
Commerce
regarding the collection, use, and retention of personal information transferred
from the European Union, United Kingdom and Switzerland to the United States,
respectively. XBAPA has certified to the Department of Commerce that it adheres
to
the Privacy Shield Principles. If there is any conflict between the terms in
this
Privacy Policy and the Privacy Shield Principles, the Privacy Shield Principles
shall govern. To learn more about the Privacy Shield program, and to view our
certification, please visit https://www.privacyshield.gov/.
Under the Privacy Shield Framework, XBAPA are subject to
the
authority of the Federal Trade Commission. If you have any questions or concerns
relating to our Privacy Shield certification, contact us at XBAPA, Inc., Legal
Department, 888 Brannan Street, San Francisco, CA 94103 or via email. If we are
not
able to resolve your concern, you may also contact your European Data Protection
Authority or Commission or seek assistance from our designated Privacy Shield
independent recourse mechanism, JAMS. In certain circumstances, you may also
have
the right to pursue binding arbitration through the Privacy Shield Framework, as
described in Annex I to the Privacy Shield Principles.
If we have received your personal information under the Privacy Shield and
subsequently transfer it to a third party service provider for processing as
described in this Privacy Policy, we will remain responsible if these providers
process your personal information in a manner inconsistent with the Privacy
Shield
Principles, except where we can establish that XBAPA or XBAPA was not
responsible for the violation.
7.2 Other Means to Ensure an Adequate Level of Data Protection.
If XBAPA Ireland is the Data Controller and your information is shared with
corporate affiliates or third party service providers outside the EEA, we have
(prior to sharing your information with such corporate affiliate or third party
service provider) established the necessary means to ensure an adequate level of
data protection. This may be an adequacy decision of the European Commission
confirming an adequate level of data protection in the respective non-EEA
country or
an agreement on the basis of the EU Model Clauses (a set of clauses issued by
the
European Commission). We will provide further information on the means to ensure
an
adequate level of data protection on request.
7.3 California & Vermont Residents.
XBAPA will not share information it collects about you with its
affiliates
or third parties (both financial and non-financial), except as required or
permitted
by your state’s law.
7.4 California Privacy Rights.
California law permits Members who are California residents to request and
obtain
from us once a year, free of charge, a list of the third parties to whom we have
disclosed their personal information (if any) for their direct marketing
purposes in
the prior calendar year, as well as the type of personal information disclosed
to
those third parties. See the “Contact Us” section for where to send such
requests.
XBAPA do not share personal information with third parties
for
their own direct marketing purposes without your prior consent. Accordingly, you
can
prevent disclosure of your personal information to third parties for their
direct
marketing purposes by withholding consent.
Effective January 1, 2020, the California Consumer Privacy Act (CCPA) allows
California residents, upon a verifiable consumer request, to request that a
business
that collects consumers’ personal information to give consumers access, in a
portable and (if technically feasible) readily usable form, to the specific
pieces
and categories of personal information that the business has collected about the
consumer, the categories of sources for that information, the business or
commercial
purposes for collecting the information, and the categories of third parties
with
which the information was shared. California residents also have the right to
submit
a request for deletion of information under certain circumstances. Consistent
with
California law, if you choose to exercise your rights, we won’t charge you
different
prices or provide different quality of services unless those differences are
related
to your information. See here for information on data subject rights requests
and
how to submit a request. Please note that you must verify your identity and
request
before further action is taken. As a part of this process, government
identification
may be required. Consistent with California law, you may designate an authorized
agent to make a request on your behalf. In order to designate an authorized
agent to
make a request on your behalf, you must provide a valid power of attorney, the
requester’s valid government government issued identification, and the
authorized
agent’s valid government issued identification.
We do not sell personal information to third parties. We do allow third parties
to
collect personal information through our Service and share personal information
with
third parties for the business purposes described in this Privacy Policy,
including
without limitation advertising and marketing on our Service and elsewhere based
on
users’ online activities over time and across different sites, services, and
devices.
8. SECURITY
We are continuously implementing and updating administrative, technical, and
physical security measures to help protect your information against unauthorized
access, loss, destruction, or alteration. Some of the safeguards we use to
protect
your information are firewalls and data encryption, and information access
controls.
If you know or have reason to believe that your XBAPA Account credentials have
been
lost, stolen, misappropriated, or otherwise compromised or in case of any actual
or
suspected unauthorized use of your XBAPA Account, please contact us following
the
instructions in the Contact Us section below.
9. CHANGES TO THIS PRIVACY POLICY
XBAPA reserves the right to modify this Privacy Policy at any time in
accordance
with this provision. If we make changes to this Privacy Policy, we will post the
revised Privacy Policy on the XBAPA Platform and update the “Last Updated” date
at
the top of this Privacy Policy. We will also provide you with notice of the
modification by email at least thirty (30) days before the date they become
effective. If you disagree with the revised Privacy Policy, you may cancel your
Account. If you do not cancel your Account before the date the revised Privacy
Policy becomes effective, your continued access to or use of the XBAPA Platform
will be subject to the revised Privacy Policy.
This policy sets out the way in which XBAPA's and its franchisees ("we" or "us")
collect, hold, disclose, use and protect your personal information.
By visiting any third party food ordering application or platform, or by
visiting any of our websites (including by using an application on a smart
device), creating any accounts with, XBAPA's Rewards, VIP club or our Digital
Asset Management services (“DAM”), placing an order with any of our stores
(including franchise stores) or providing us with your personal information, you
agree to your personal information being collected, held, used and disclosed as
set out in this policy. References to 'website' include the following:
XBAPA.com, or any other site, services (including web-services),
software, application or media managed by XBAPA's.
You do not have to provide us with your personal information but if you do not
provide us with the information we require we may not be able to assist you
process your job application, franchise application or expression of interest in
a franchise, process your order, participate in XBAPA's Rewards or provide you
with access to “DAM”or allow you physical access to any of our premises. If you
do not agree with the practices described in this Privacy Policy, please do not
provide us with your personal information or interact with our websites.
The XBAPA's Privacy Policy forms part of the Terms & Conditions of Use and can
be found following either of these links, or a copy is available at the XBAPA’s
Headoffice Reception:
Revisions to this Policy
We may revise this policy from time to time whenever necessary so check this
website regularly to stay informed of any updates. If we think any material
changes to this policy will have a significant effect on you, we may notify you
by email or put a notice on the homepage (XBAPA.com) of our
websites. You can determine when this Privacy Policy was last revised by
referring to the date it was “Last Updated” above.
If you continue to use our websites, place an order with any of our stores or
provide further personal Information to us after this policy has been revised
you will be deemed to have accepted the revised policy.
What Information we collect
We collect information necessary for us to process your order, process a refund
of your order, process your donation (if any) to Give for Good, register you for
an account such as XBAPA's Rewards, VIP club or XBAPA’s Online Ordering or
DAM, process your application for employment or an expression of interest for a
franchise, provide you with information about new franchising opportunities, or
provide you with other services and/or the assistance you have requested. Where
practicable, we will give you the option of interacting with us anonymously.
The personal information which we collect from you and hold ("Information")
includes information like your first and last name, day and month of birth,
postal address, telephone and mobile number(s), email address, details of your
order (i.e. your last four orders, your delivery address or preferred pick-up
location), IP address and credit card details. In respect of your credit card
details we only hold some information, as detailed further below. If required,
we may request your bank details in order to process a refund of your order.
When you place an order with us online using the XBAPA's Pizza internet
ordering system (whether via the XBAPA’s website itself or an application on a
smart device), we collect additional Information from you such as:
your IP address as part of your order;
your feedback;
your entries into our competitions and draws;
your menu preferences and previous order information;
any delivery instructions or comments;
if you use an eVoucher or InstaGift™ we collect your order details, if you have
used it, when you used it;
if you donate to Give for Good, and if so, how much;
any information, personal or otherwise, that you include in your order either by
telephone, in person or via online ordering or an App about your delivery
instructions.
We may also collect your smart device ID and use your smart device’s location
services (with your consent) in order to provide you with XBAPA’s application
services. See ‘XBAPA’s applications for smart devices’ section below for
further information.
If you visit the XBAPA’s Headoffice Reception you will be presented with a
COVID-19 visitor notice and self-declaration regarding your health, recent
travel, and interaction with a person or persons diagnosed with COVID-19.