ARABIAN COFFEE FZE and any affiliate or related party to these companies and the group of companies, as the franchisee for Caribou Coffee Company, INC in Bahrain, Egypt, Iraq, Jordan, Lebanon, Oman, Qatar, Saudi Arabia, Turkey and United Arab Emirates ("we," "our," or "us") and its affiliates are committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, store, process, transfer, share, and use data that identifies or is associated with you ("personal information") and provides information regarding our use of cookies and similar technologies.

We operate an online marketplace for ordering coffee and food products known as the "App." This service is available to users through our mobile application ("App").

This Privacy Policy applies to the App, including the App.

Please ensure that you have read and understood this Privacy Policy before accessing or using the App.

WHO IS RESPONSIBLE FOR THE USE OF YOUR PERSONAL INFORMATION

We are the controllers of the personal information we hold about you in connection with your use of the App. This means that we determine and are responsible for how your personal information is used.

PERSONAL INFORMATION WE COLLECT FROM YOU WHEN YOU USE THE SERVICE, AND HOW WE USE IT

We collect personal information that you voluntarily submit directly to us when you use the App. This may include information provided during account setup, form submissions, product purchases, phone or email correspondence, newsletter subscriptions, or other interactions with the App.
This information may include your contact and payment details. If you choose not to provide such personal information, we may be unable to provide certain parts of the App or respond to your requests.

For detailed information on the categories of personal information we collect and how we use it, as well as the legal basis for processing and recipients of this information, please refer to Annex 1 [link to Annex 1 below].

INFORMATION WE COLLECT ABOUT YOU AUTOMATICALLY

We also automatically collect personal information indirectly related to how you access and use the App, including information about the device you use. This information is collected when you visit our App, read our emails, or engage with us.
We use tracking technologies such as cookies, web beacons, embedded scripts, and location-identifying technologies to collect this information.
For a detailed breakdown of the categories of automatically collected personal information and how we use it, as well as the legal basis for processing and recipients of this information, please refer to Annex 2 [link to Annex 2 below].

TRACKING TECHNOLOGIES USED IN OUR EMAILS

Our emails may contain tracking pixels that identify if and when you have opened an email that we have sent you, how many times you have read it, and whether you have clicked on any links in that email. This helps us measure the effectiveness of our marketing email campaigns, make the emails we send to you more relevant to your interests, and understand if you have opened and read any important administrative emails we might send you.
Most popular email clients will allow you to block these pixels by disabling certain external images in emails. You can do this through the settings on your email client, which generally give you the option to choose whether emails will display "remote images," "remote content," or "images" by default.
Some browsers also give you the option of downloading and installing extensions that block pixels and other tracking technologies.

INTEREST BASED ADVERTISING

We participate in interest-based advertising and use third-party advertising companies to serve you targeted advertisements based on your browsing history and use of the App. We may share, or we may permit third-party online advertising networks, social media companies, and other third-party services to collect information about your use of the App over time so that they may play or display ads on the App, on other websites, apps, or services you may use (including Facebook), and on other devices you may use.
Typically, but not always, this information is collected through cookies and similar tracking technologies. These third parties may collect, or we may share, mobile identifiers, such as the ID for Advertising for iOS (IDFA), Google Advertising ID, as well as your device’s IP address, information about other applications on your device, your location, information about your use of the App, email address, or hashed data, and information about which advertisements you have seen or clicked on.
We and our third-party partners use this information to make the advertisements you see online more relevant to your interests, as well as to provide advertising-related services such as reporting, attribution, analytics, and market research.
We may also use certain forms of display advertising and other advanced features through Google Universal Analytics, such as Remarketing with Google Analytics, Google Display Network Impression Reporting, the DoubleClick Campaign Manager Integration, and Google Analytics Demographics and Interest Reporting. These features enable us to use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the Doubleclick advertising cookie) or other third-party cookies together to inform, optimize, and display ads based on your past visits to the App. You may control your advertising preferences or opt-out of certain Google advertising products by visiting the Google Ads Preferences Manager, currently available at https://google.com/ads/preferences or by visiting NAI’s online resources at http://www.networkadvertising.org/choices.
We and our third-party partners may also link your various devices so that content you see on one device can result in relevant advertising on another device. We do this by collecting information about each device you use when you are logged in to the App. We may also work with third-party partners who employ tracking technologies or the application of statistical modeling tools to determine if two or more devices are linked to a single user or household. We may share a common account identifier (such as a user ID) with third-party advertising partners to help recognize you across devices. We and our partners can use this cross-device linkage to serve interest-based advertising and other personalized content to you across your devices, to perform analytics, and to measure the performance of our advertising campaigns.
You may be able to limit the use of these identifiers for interest-based advertising on a particular device through the settings on your device by selecting “limit ad tracking” (iOS) or “opt out of interest-based ads” (Android). You may also be able to opt-out of some, but not all, interest-based ads served by mobile ad networks by visiting http://youradchoices.com/appchoices and downloading the mobile AppChoices app.
To learn more about interest-based advertising and how you may be able to opt-out of some of this advertising, you may wish to visit:

the Network Advertising Initiative’s online resources, at http://www.networkadvertising.org/choices
the DAA’s resources at www.aboutads.info/choices; and/or
Your Online Choices at www.youronlinechoices.eu.

Please note that opting-out of receiving interest-based advertising through the NAI’s and DAA’s or Your Online Choices’ online resources will only opt you out from receiving interest-based ads on that specific browser or device, but you may still receive interest-based ads on your other devices. You would need to perform the opt-out on each browser or device you use.
Some of these opt-outs may not be effective unless your browser is set to accept cookies. If you delete cookies, change your browser settings, switch browsers or devices, or use another operating system, you will need to opt-out again.
Please note that opting out of interest-based advertising does not mean you will no longer see advertising on your device – it just means that adverts may no longer be tailored to your interests.

COOKIES AND SIMILAR TECHNOLOGIES USED ON OUR APP

Our App uses cookies and similar technologies, such as pixels and Local Storage Objects (LSOs) like HTML5, collectively referred to as "cookies," to distinguish you from other users and improve your browsing experience.
Cookies store information like user IDs and preferences. They are small data files transferred to your computer's hard disk for record-keeping purposes.
While we do our best to respect user privacy preferences, we cannot respond to Do Not Track signals set by your browser at this time.
We use various types of cookies:

Strictly necessary cookies: These are required for the operation of our App, enabling secure login, shopping cart use, and e-billing services.
Analytical/performance cookies: They help us count visitors and understand how they navigate our App, facilitating improvements.
Functionality cookies: Recognizing you when you return, they personalize content, greet you by name, and remember preferences.
Targeting cookies: They record your visits, pages viewed, and links followed, allowing us to make our App and advertising more relevant to your interests. We may share this information with third parties who provide services to us for this purpose.
Third-party cookies: Advertisers and third parties may use their own cookies and tags when you click on advertisements or links on our App. These parties are responsible for their own cookie and privacy policies.

For more information about the cookies we use on the App, please refer to Annex 3 [link to Annex 3 below].

If you do not wish to receive cookies, most browsers allow you to change your settings. However, depending on your device and operating system, you may not be able to delete or block all cookies. Please note that refusing all cookies may limit the functionality of our App. Cookie settings are typically found in your browser's "options" or "preferences" menu. You can find guidance on these settings via the following links:

Cookie settings in Internet Explorer
Cookie settings in Firefox
Cookie settings in Chrome
Cookie settings in Safari web and iOS
Mobile users can control cookies and advertising IDs in their device operating systems. To block the IDFA on iOS, follow this path: Settings > General > About > Advertising, then turn on 'Limit Ad Tracking.' To block Android ID on Android, follow this path: Google Settings > Ads, then turn on 'Opt out of interest-based ads.'
For further information about cookies and similar technologies, visit www.allaboutcookies.org or the Network Advertising Initiative’s online sources at www.networkadvertising.org.

Please note that deleting or blocking cookies may not be effective for all types of tracking technologies, such as Local Storage Objects (LSOs) like HTML5.

Control Over Your Information

You may update your profile information, such as your contact information, and may change some of your data-sharing preferences on your Account page or by emailing us at [Caribou Email].

Use of Third-Party Services

Some functionalities of the Caribou App Service are provided by third-party service providers. We have entered into data processing agreements with these third parties to ensure that your data is handled in accordance with this Privacy Policy. These agreements include provisions for the secure storage, processing, use, and deletion of your data.
We are committed to working with trusted partners to provide you with the best possible user experience, and we hold our third-party service providers to high privacy and security standards.

LINKS TO THIRD PARTY SITES

The App may, from time to time, contain links to and from third party websites, including those of other users, our partner networks, advertisers, partner merchants, news publications, retailers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. Please check the individual policies before you submit any information to those websites.

ANNEX 1 – PERSONAL INFORMATION YOU PROVIDE TO US

Category of personal information	How we may use it	Legal basis for the processing	Recipients of personal information
Contact information such as your first name, last name, address (home and billing address), phone number and e-mail address.	We may use this information to process any orders that you make by using the Caribou App Service, including for the purposes of invoice creation and in order to e-mail e-receipts to you.	The processing is necessary for the performance of a contract with you and to take steps prior to entering into a contract with you.	We may share this information with: Mixpanel; Google Analytics / Firebase; Swifty Beaver;
	We also use this information to set up and authenticate your account.	The processing is necessary for the performance of a contract with you and to take steps prior to entering into a contract with you.
	We use this information to tailor how the Caribou App Service is displayed to you (such as the language in which it is provided to you).	The processing is necessary for our legitimate interest, namely tailoring the Caribou App Service so that it is more relevant to our users.
	We may use this information to deal with enquiries and complaints made by or about you relating to the Caribou App Service.	The processing is necessary for our legitimate interests, namely administering the App, and for communicating with you effectively to respond to your queries or complaints.
	We may use this information to communicate with you, including sending service-related communications.	The processing is necessary for the performance of a contract with you.
	We may use this information to send you unsolicited marketing communications in accordance with your preferences.	We will only use your personal information in this way to the extent you have given us consent to do so.
	We may use this information when you choose to participate in promotions or contests that we run. We ask those who enter into promotions or contests to provide this information so that we can contact you in relation to the promotion or contest, for example, we will notify you if you win a prize.	The processing is necessary for our legitimate interests, namely administering the promotion or contest, and for communicating with you effectively to respond to your queries or complaints.
	We may use this information to contact you provide us with feedback, for example, when you participate in online surveys. We use such information in order to administer and improve the Caribou App Service.	We will only use your personal information in this way to the extent you have given us consent to do so.
Chat and comments. When you contact us directly, e.g. by email, phone, or when you participate in a chat on the App, we will record your comments and opinions	We may use this information to operate, maintain and provide to you the social features and functionalities of the App.	The processing is necessary for the performance of a contract with you.	We share this information with [*] and [*], for the provision of customer support, for example, in order to facilitate a live chat or phone call session.
	We may use this information to operate, maintain and provide to you the social features and functionalities of the App.	The processing is necessary for our legitimate interests, namely communicating with users and responding to queries, complaints and concerns.
	We may use this information to develop new products and features available through the or otherwise improve the App.	The processing is necessary for our legitimate interests, namely developing and improving the App.
Payment and transaction information, such as your credit card, payment authentication code, billing address, and other information such as date and time of your transaction.	We may use this information to process the payments you make or receive through the Caribou App Service.	The processing is necessary for the performance of a contract.	We may share this information with [Oracle] and [MyFatoorah], in order to identify you so that you can make and receive payments through the Caribou App Service.
Location information, such as your GPS coordinates when you place an order through the Caribou App Service.	We may use this information for operational purposes. Our App works on showing you beverage and food vendors according to a specific radius and GPS coordinates are required in order to ensure that the list we show you is accurate.	The processing is necessary for our legitimate interest, namely tailoring the Caribou App Service so that it shows you beverage and food vendors that are in / near your particular location.	We may share this information with:Mixpanel;[***].
Information received from third parties, such as social networks. If you interact with the App through a social network, we may receive information from the social network such as your name, profile information, user ID, and any other information you permit the social network to share with third parties. The data we receive is dependent on your privacy settings with the social network.	We may use this information to authenticate you and allow you to access the App. We may use this information to help match you with other users in accordance with the functionality of the App. We may use this information to tailor the way this is displayed to you (such as the language in which it is presented to you).	The processing is necessary for the performance of a contract with you. The processing is necessary for the performance of a contract with you. The processing is necessary for our legitimate interests, namely tailoring the Caribou App Service so that it is more relevant to our users.	We may share this information with:Mixpanel;[***].
Your preferences, such as preferences set for notifications, marketing communications, how the App is displayed and the active functionalities on the Caribou App Service.	We use this information to provide notifications, send news, alerts and marketing communications and provide the App in accordance with your choices.	The processing is necessary for our legitimate interest, namely ensuring the user receives the correct marketing and other communications, and that this is displayed in accordance with the user’s preferences.	We may share this information with [Adjust] [Google Analytics / Firebase] and [Mixpanel], to ensure that [we comply with your preferences with respect to the types of emails and messages we send to you].
	We use this information to ensure that we comply with our legal obligation to send only those marketing communications to which you have consented.	The processing is necessary for compliance with a legal obligation to which we are subject.
All personal information set out above.	We may use all the personal information we collect to operate, maintain and provide to you the features and functionality of the App, to communicate with you, to monitor and improve the App and business, and to help us develop new products and services.	The processing is necessary for our legitimate interests, namely to administer and improve the App.	As described above and in Section 6.

ANNEX 2 – PERSONAL INFORMATION COLLECTED AUTOMATICALLY

Category of personal information	How we may use it	Legal basis for the processing	Recipients of personal information
Your IP address.	We may use this information to detect fraud or suspicious activity in relation to your account.	The processing is necessary for our legitimate interests, namely to protect our business and your account from fraud and other illegal activities.	We may share this information with:[Mixpanel], [Google Analytics / Firebase] and [Swifty Beaver] in order to [protect our business and your account from fraud and other illegal activities, to provide us with data analytics and error correction services].
	We may use this information to localise features of the App.	The processing is necessary for our legitimate interest, namely localising features of the App and tailoring the App so that it is more relevant to our users.
	For our internal analytical purposes.	The processing is necessary for our legitimate interests, namely to monitor and resolve issues with the App, to improve the App generally, to localise features of the App and tailor the App so that it is more relevant.
	Where you have given us your consent to send you marketing communications, we will use this information during the e-mail marketing process.	The processing is necessary for our legitimate interests, namely to administer the marketing communication.
Information about how you access and use the Caribou App Service. For example, how frequently you access the App, the time you access the App and how long you use it for, the approximate location that you access the App from, the site from which you came and the site to which you are going when you leave our App, the App pages you visit, the links you click, whether you open emails or click the links contained in emails, whether you access the App from multiple devices, and other actions you take on the App.	We may use information about how you use and connect to the App to present the App to you on your device. We may use this information to determine products and services that may be of interest to you for marketing purposes. We may use this information to monitor and improve the App and business, resolve issues and to inform the development of new products and services.	The processing is necessary for our legitimate interests, namely to tailor the App to the user. The processing is necessary for our legitimate interests, namely to inform our direct marketing. The processing is necessary for our legitimate interests, namely to monitor and resolve issues with the App and to improve the App generally.
Log files and information about your device. We also collect information about the computer, tablet, smartphone or other electronic device you use to connect to the App. This information can include details about the type of device, Internet service provider and type of Internet access, platform type, device type, date and time stamp, a unique ID (that allows us to uniquely identify your browser, mobile device, or your account), operating systems (including operating system versions), browsers and applications connected to the App through the device, your mobile network, your IP address and your device’s telephone number (if it has one). When you access our App from a mobile device, we may collect unique identification numbers associated with your device or our mobile application (including, for example, a UDID, Unique ID for Advertisers (“IDFA”), Google AdID, or Windows Advertising ID), mobile carrier, device type, model and manufacturer, mobile device operating system brand and model, phone number, and, depending on your mobile device settings, your geographical location data, including GPS coordinates (e.g., latitude and/or longitude) or similar information regarding the location of your mobile device, or we may be able to approximate a device’s location by analyzing other information, like an IP address.	We may use information about how you use and connect to the App to present the App to you on your device. We may use this information to determine products and services that may be of interest to you for marketing purposes. We may use this information to monitor and improve the App and business, resolve issues (such as bugs), to identify and fix any device / version / Internet type specific issues with the App, and to inform the development of new products and services.	The processing is necessary for our legitimate interests, namely to tailor the App to the user. The processing is necessary for our legitimate interests, namely to inform our direct marketing. The processing is necessary for our legitimate interests, namely to inform our direct marketing.

ANNEX 3 – COOKIES

Third party	Product	Persistent / session	Type of cookie	Purposes / Additional information
[Google]	[Google, Google Ads & DoubleClick]	[Persistent]	[Third party – analytics / advertising / marketing.]	[For analytics, marketing and advertising purposes. Note you may control your advertising preferences or opt-out of certain Google advertising products by visiting the Google Ads Preferences Manager, currently available at https://google.com/ads/preferences or by vising NAI’s online resources at http://www.networkadvertising.org/choices. . You can learn more about Google’s practices at http://www.google.com/policies/privacy/partners and view its currently available opt-out options at https://tools.google.com/dlpage/gaoptout.]