Grabbit User Privacy Policy

1. Information We Collect

We collect only information reasonably necessary to operate, secure, and improve the Platform.

1.1 Account and contact information

This may include:

• Name
• Mobile phone number
• Email address
• Delivery address
• Account login details
• Information provided when contacting customer support

1.2 Order and transaction information

This may include:

• Products ordered
• Merchant and order details
• Pickup or delivery information
• Order history
• Refunds and cancellations
• Grabbit Wallet balances
• Promotional rewards
• Customer support communications relating to an Order

1.3 Payment information

Payments are processed through approved third-party payment providers. Grabbit may receive payment-related information necessary to confirm and reconcile transactions, such as:

• Payment status
• Transaction reference
• Payment method
• Limited card information
• Electronic-wallet identifiers

Grabbit does not store complete payment-card security information, such as CVV numbers, unless expressly stated by the relevant payment provider.

1.4 Device and technical information

When you use the Platform, we may collect:

• Device identifiers
• IP address
• Device type and operating system
• Application version
• Language and regional settings
• Access times
• Crash reports
• Log information
• Technical and security information

1.5 Location information

With your permission, Grabbit may access your device’s approximate or precise location to:

• Display nearby surplus-food offers
• Show relevant Merchants
• Assist with delivery routing
• Improve location-based Platform features

Grabbit does not intentionally track your location in the background when the Application is closed, unless this is clearly disclosed and permitted by your device settings and applicable law. You may disable location access through your device settings, but some Platform features may not function correctly.

1.6 Information about another person

If you place an Order for another person, such as a friend or family member, you must ensure that you have the legal right or appropriate permission to provide that person’s personal data to Grabbit for Order fulfillment.

2. How We Use Personal Data

Grabbit may use personal data to:

• Create and manage your account
• Process Orders, payments, refunds, and cancellations
• Facilitate pickup and delivery
• Share necessary information with Merchants and Delivery Providers
• Provide customer support
• Send transactional communications
• Send marketing communications where permitted
• Operate, maintain, and improve the Platform
• Personalize offers and Platform content
• Manage Grabbit Wallet balances and promotional rewards
• Prevent fraud, abuse, unauthorized access, and security incidents
• Investigate complaints and disputes
• Comply with legal, tax, regulatory, and court requirements
• Protect the rights, safety, and property of Grabbit, Users, Merchants, Delivery Providers, and the public

3. Legal Basis for Processing

Depending on the circumstances and applicable law, Grabbit may process personal data because:

• It is necessary to provide the services you request
• It is necessary to perform our agreement with you
• We have a legitimate operational, security, or fraud-prevention interest
• We are required to comply with a legal or regulatory obligation
• You have provided consent
• It is necessary to protect the rights, safety, or property of a person or organization

Where applicable law requires separate consent, Grabbit will request it separately. General use of the Platform will not replace consent where separate consent is legally required.

4. Communications

4.1 Transactional communications

Grabbit may send essential communications relating to:

• Account registration
• One-time passwords
• Order confirmations
• Pickup instructions
• Delivery status
• Payment and refund status
• Account security
• Service interruptions
• Important legal or operational notices

These communications are necessary to provide the Platform and generally cannot be disabled while your account remains active.

4.2 Marketing communications

Grabbit may send promotional communications, including offers, discounts, challenges, and rewards, where permitted by law and where consent is required, after obtaining the necessary consent. You may opt out of marketing communications at any time through:

• Application settings
• The unsubscribe option in the relevant message
• Contacting [email protected]

You may continue to receive transactional communications after opting out of marketing.

5. When We Share Personal Data

Grabbit does not sell your personal data. We may share limited personal data with the following parties where reasonably necessary:

5.1 Merchants

We may share information such as your name, Order details, pickup information, and relevant contact or delivery information so the Merchant can prepare, verify, and fulfill your Order.

5.2 Delivery Providers

For delivery Orders, we may share the information necessary to complete delivery, including your name, delivery address, phone number, Order details, and delivery instructions. Delivery Providers may use this information only to perform the delivery and related support. Grabbit requires them to protect the information and not use it for unrelated purposes.

5.3 Payment and technology providers

We may share necessary information with:

• Payment gateways
• Banks and electronic-wallet providers
• Hosting and cloud-service providers
• Customer-support providers
• Communication providers
• Analytics and security providers
• Other service providers supporting the Platform

These providers may process information only for authorized business purposes and subject to appropriate confidentiality and security obligations.

5.4 Legal and regulatory disclosures

We may disclose personal data where reasonably necessary to:

• Comply with Jordanian law
• Respond to a court order or government request
• Cooperate with regulatory or law-enforcement authorities
• Investigate fraud, abuse, or security incidents
• Establish, exercise, or defend legal claims
• Protect the rights, safety, and property of Grabbit or others

5.5 Business transfers

If Grabbit is involved in a merger, acquisition, restructuring, financing, sale of assets, or similar transaction, personal data may be transferred as part of that transaction, subject to applicable law and appropriate safeguards.

6. Cookies and Similar Technologies

Grabbit may use cookies, device identifiers, software development kits, and similar technologies to:

• Keep the Platform functioning
• Remember preferences
• Maintain account security
• Analyze performance
• Understand usage trends
• Detect fraud or abuse
• Improve and personalize the Platform

You may adjust your device or browser settings to restrict certain technologies. Some Platform features may not function properly as a result.

7. Data Security

Grabbit uses reasonable technical and organizational safeguards designed to protect personal data against:

• Unauthorized access
• Loss
• Misuse
• Disclosure
• Alteration
• Destruction

However, no internet, mobile network, or electronic storage system is completely secure. You are responsible for protecting your account credentials, device, and access codes. If Grabbit becomes aware of a material data breach, we will take reasonable steps to investigate, contain, and address the incident and provide notifications where required by applicable law.

8. Data Retention

Grabbit retains personal data only for as long as reasonably necessary for the purposes described in this Policy, including to:

• Provide and maintain the Platform
• Complete Orders and financial reconciliation
• Comply with tax, accounting, and legal obligations
• Prevent fraud and repeated abuse
• Resolve complaints and disputes
• Enforce the Terms and Conditions
• Establish, exercise, or defend legal claims

Financial, tax, accounting, and Order records may be retained for periods required by Jordanian law. Where an account has been suspended or banned for fraud, abuse, or serious violations, Grabbit may retain limited hashed identifiers, such as a phone number, email address, or Device ID, for as long as reasonably necessary to prevent fraud and circumvention of account restrictions. Grabbit will review such information periodically and delete or anonymize it when it is no longer reasonably necessary, unless retention is legally required.

9. Account Deletion

You may request account deletion through the Application or by contacting Privacy & Data Requests: [email protected]. Grabbit will generally process a standard deletion request within fifteen (15) Business Days. Deletion may be delayed or limited where information must be retained for:

• Legal, tax, or accounting obligations
• Pending Orders, refunds, or chargebacks
• Fraud prevention and security
• Dispute resolution
• Legal claims
• Compliance with a court or regulatory requirement

Deleting your account does not automatically cancel or refund a confirmed Order.

10. Your Privacy Rights

Subject to applicable law, you may have the right to:

• Request access to personal data held about you
• Request correction of inaccurate or incomplete information
• Request deletion of personal data
• Request restriction of certain processing
• Object to certain processing
• Withdraw consent where processing is based on consent
• Opt out of marketing communications
• Submit a complaint to the competent authority

To exercise a right, contact [email protected]. We may request information reasonably necessary to verify your identity and protect your account.

11. Children

The Platform is not intended for children who are not legally able to enter into the relevant agreement under applicable law. If you believe that a child has provided personal data to Grabbit without appropriate authorization, contact us at [email protected] so that we can review and take appropriate action.

12. Third-Party Services and Links

The Platform may contain links to third-party websites, applications, payment services or other services. This Privacy Policy does not apply to the privacy practices of those third parties. You should review the privacy policies of any third-party service you use. Grabbit is not responsible for the privacy practices of third parties except to the extent required by applicable law.

13. Changes to This Privacy Policy

Grabbit may update this Privacy Policy to reflect changes in:

• The Platform or services
• The personal data we process
• Processing purposes
• Service providers
• Security practices
• Applicable law or regulatory requirements

For material changes, Grabbit will provide reasonable notice through the Application, email, push notification, or another appropriate electronic method. The notice will identify the effective date and, where reasonably practical, summarize the material changes. Changes will apply from the stated effective date and will not normally apply retroactively. Where applicable law requires fresh consent, Grabbit will request that consent separately before carrying out the relevant processing. Grabbit may make immediate changes where reasonably necessary for legal compliance, food safety, cybersecurity, fraud prevention, payment-provider requirements, Platform protection, or correction of an obvious error. The latest version will be identified by its “Last Updated” date. If you do not agree with a material update, you may stop using the Platform and request account deletion, subject to the retention rules in this Policy.

14. Governing Law and Language

This Privacy Policy is governed by the laws of the Hashemite Kingdom of Jordan, including the Jordanian Personal Data Protection Law No. (24) of 2023, as applicable. Privacy-related disputes shall be subject to the jurisdiction of the competent courts of Amman, Jordan, including the Palace of Justice, unless mandatory law provides otherwise. The Arabic version is the official legal version. If there is any conflict between the Arabic version and an English translation, the Arabic version shall prevail.

15. Contact Us

For privacy questions, data requests, or account-deletion requests:

• Privacy & Data Requests: [email protected]
• General Support: [email protected]