Privacy Policy

Malabari Bistro

Effective Date: May 15, 2026 Last Updated: May 15, 2026

This Privacy Policy explains how Malabari Bistro ("we", "us", or "our") collects, uses, shares, and protects your

personal information when you visit our website or use our mobile application ("App"). Both the website and

App are built and hosted on the Wix platform (Wix.com Ltd.) and the App is available on the Google Play

Store and Apple App Store.

By accessing our website or creating an account and using our App, you agree to the terms of this Privacy

Policy. If you do not agree, please do not use our website or App.

1. Platform and Hosting

Our website and App are built and hosted on Wix.com Ltd., a third-party platform provider. Wix provides the

infrastructure, hosting, user authentication, payment processing, and data storage that power both our website

and App. As a result, some of your personal data is collected and processed by Wix on our behalf, governed by

the Wix Privacy Policy:

https://www.wix.com/about/privacy

We encourage you to review the Wix Privacy Policy to understand how your data is handled at the platform

level.

2. Information We Collect

a) Information You Provide Directly

• Account Information: Full name, email address, phone number, and password when you register an

account on our website or App.

• Delivery Address: Your home, work, or any delivery address you enter when placing a delivery order.

This information is used solely to fulfill your delivery.

• Payment Information: Payment card details, processed securely through Wix Payments or a

Wix-integrated payment provider. We do not store your full card number. All payment data is handled in

accordance with PCI-DSS security standards.

• Order Information: Items ordered, customizations, special instructions, order history, and your preferred

fulfillment method (pickup or delivery).

• Catering and Event Requests: Event date, time, location, guest count, menu preferences, dietary

requirements, and any other details you submit through our catering quote request form.

• Referral Information: Your referral code activity and any rewards earned or redeemed through our

referral program.

• Communications: Messages, feedback, reviews, or support requests you send us through the website,

App, or email.

b) Information Collected Automatically

• Device Information: Device type, model, operating system version, unique device identifiers, browser

type, and mobile network information.

• Usage Data: Pages and screens viewed, features used, session duration, clicks, and in-app interactions

— collected through Wix analytics tools on both the website and App.

• Location Data: With your explicit permission, approximate or precise location to support delivery address

suggestions and delivery distance calculations.

• Log Data: IP address, error reports, crash logs, referral URLs, and performance diagnostics collected

automatically by Wix infrastructure.

• Cookies and Tracking Technologies: Our website and the Wix platform use cookies, web beacons, and

similar technologies for session management, analytics, and personalisation. You can manage cookie

preferences through your browser settings.

c) Information from Third Parties

• Google Sign-In / Apple Sign-In: If you sign in using Google or Apple, we receive your name and email

address from those services to create or log into your account.

• Wix Analytics: Wix may provide us with aggregated or anonymised usage insights to help us improve the

website and App experience.

3. How We Use Your Information

We use the information we collect to:

• Create, verify, and manage your account on our website and App

• Process and fulfill food orders for pickup and delivery

• Deliver orders to your provided address and calculate applicable delivery fees

• Provide estimated delivery times and real-time order tracking notifications

• Respond to catering and event quote requests and manage bookings

• Send order confirmations, preparation updates, and delivery status notifications

• Provide, manage, and track exclusive deals, coupon codes, and referral program rewards

• Personalise your experience on our website and App based on your order history and preferences

• Improve our menu offerings, website functionality, and App features

• Send promotional or marketing notifications — only with your explicit consent

• Detect, prevent, and investigate fraud, abuse, or unauthorised account activity

• Comply with applicable laws, including the Canadian federal privacy law (PIPEDA) and Ontario provincial

regulations

• Respond to lawful requests from regulatory or law enforcement authorities

4. How We Share Your Information

We do not sell your personal information to any third party. We may share your information only in the

following limited circumstances:

• Wix.com Ltd.: As our website and App platform and hosting provider, Wix processes data on our behalf

as a data processor. See: https://www.wix.com/about/privacy

• Delivery Partners: Your name, phone number, and delivery address are shared with delivery drivers

solely to complete your order.

• Payment Processors: Payment information is handled by Wix Payments or a Wix-integrated third-party

payment processor. We do not have direct access to your full card details.

• Push Notification Services: Wix-integrated notification services are used to send you order updates and,

with your consent, promotional messages.

• Analytics Providers: Aggregated, non-identifiable usage data may be shared with analytics tools to help

us understand website and App performance.

• Legal Authorities: We may disclose your information when required by law, court order, or government

regulation, or to protect the legal rights, safety, or property of Malabari Bistro, our users, or the public.

• Business Transfers: In the event of a merger, acquisition, or sale of business assets, your information

may be transferred. You will be notified of any such change in advance.

5. Data Retention

We retain your personal information for as long as your account is active or as reasonably necessary to provide

our services. When you request account deletion, we will delete your personal data within 30 days, except

where we are required to retain certain records for legal, tax, or fraud prevention purposes. Data stored within

the Wix platform is also subject to Wix's own data retention policies available at:

https://www.wix.com/about/privacy

6. Your Rights and Choices

Under applicable Canadian privacy law (PIPEDA) and Ontario regulations, you have the following rights:

• Access: Request a copy of the personal information we hold about you.

• Correction: Request that we correct inaccurate or incomplete personal information.

• Deletion: Request deletion of your account and all associated personal data (see Section 7).

• Withdraw Consent: Withdraw your consent for optional data uses such as marketing communications at

any time.

• Opt Out of Notifications: Disable promotional push notifications at any time through your device settings

or in-app notification preferences.

• Cookie Preferences: Manage or disable cookies on our website through your browser settings.

To exercise any of these rights, contact us at: hellolondon@malabaribistro.ca. We will respond to all verified

requests within 30 days.

7. Account Deletion

You have the right to delete your account and all associated personal data at any time, free of charge.

How to delete your account:

• In-App: Navigate to Profile > Settings > Delete Account within the App and follow the on-screen

instructions.

• On the Website: Log into your account, go to Account Settings > Delete Account and follow the steps

provided.

• By Email: Send a deletion request to hellolondon@malabaribistro.ca with the subject line "Account

Deletion Request", including the email address associated with your account.

What happens when you delete your account:

• Your account, order history, saved delivery addresses, payment methods, referral data, reward balances,

and personal preferences will be permanently and irreversibly deleted.

• Deletion will be completed within 30 days of your confirmed request.

• Certain data may be retained beyond this period only where required by law — for example, transaction

records for tax or accounting purposes, or data needed for fraud prevention. Retained data will not be used

for marketing or service purposes.

Apple App Store users: In full compliance with Apple App Store Review Guideline 5.1.1(v), users who created an

account in this App may initiate complete account deletion directly from within the App as described above. This

applies to both the iOS App and the website.

Google Play users: In compliance with Google Play Data Safety policy requirements, users may request deletion of

their account and all associated personal data through the App, website, or by emailing us as described above.

8. Location Data

We request access to your device location only to support delivery address auto-fill and to calculate delivery

eligibility and fees. Location access is always optional.

• You can enable or disable location access at any time through your device Settings app.

• Disabling location access will not prevent you from using the App or website, but you will need to enter

your delivery address manually.

• We do not share your precise location data with any third party beyond what is strictly necessary to fulfill

your delivery order.

• Location data is not used for advertising or sold to any third party.

9. Cookies and Tracking Technologies (Website)

Our website, powered by Wix, uses cookies and similar tracking technologies to enhance your browsing

experience, manage sessions, and analyse website traffic. Types of cookies used include:

• Essential Cookies: Required for the website to function correctly (e.g., keeping you logged in,

maintaining your shopping cart).

• Analytics Cookies: Used to understand how visitors interact with the website (e.g., pages visited, time

spent). Data is aggregated and anonymised.

• Preference Cookies: Used to remember your settings and preferences for future visits.

You can manage or disable cookies through your browser settings at any time. Note that disabling essential

cookies may affect website functionality. For details on cookies used by Wix, see:

https://www.wix.com/about/privacy

10. Children's Privacy

Our website and App are not intended for use by children under the age of 13. We do not knowingly collect,

solicit, or store personal information from children under 13. If you are a parent or guardian and believe we

have inadvertently collected information from a child under 13, please contact us immediately at

hellolondon@malabaribistro.ca and we will delete it promptly.

11. Security

Our website and App are hosted on Wix's secure cloud infrastructure, which implements industry-standard

security measures to protect your personal information, including:

• Data encryption in transit using TLS/HTTPS protocols

• Data encryption at rest on Wix servers

• Secure access controls, role-based permissions, and multi-factor authentication

• Regular security monitoring, vulnerability assessments, and compliance audits conducted by Wix

• PCI-DSS compliant payment processing for all transactions

Despite these measures, no method of data transmission or electronic storage is 100% secure. We encourage

you to use a strong, unique password for your account, keep your login credentials confidential, and log out

when using shared or public devices.

12. Third-Party Services and Links

Our website and App may include links to or integrations with third-party services. We are not responsible for

the privacy practices of those third parties. We recommend reviewing their privacy policies before providing any

personal information. Key third-party services include:

• Google Sign-In: https://policies.google.com/privacy

• Apple Sign-In: https://www.apple.com/legal/privacy

• Wix Payments / Payment Processors: Governed by the applicable payment provider's privacy policy

• Wix Analytics: https://www.wix.com/about/privacy

13. Apple App Store — Privacy Nutrition Label Disclosures

In accordance with Apple App Store privacy requirements, the following categories of data are collected by this

App and linked to your identity. This information is also reflected in the App's Privacy Nutrition Label on the

Apple App Store listing:

Data Type Linked to Identity Purpose

Name & Email Address -Yes- Account creation and order communication

Phone Number -Yes- Delivery coordination and account verification

Physical / Delivery Address -Yes- Fulfilling food delivery orders to your location

Payment Information -Yes- Processing food orders and catering bookings

Order & Purchase History -Yes- Order management, reordering, and personalisation

Location (optional) -Yes- Delivery address suggestions and distance calculation

Device Identifiers -Yes- Analytics and push notification delivery

Usage Data -No- App performance monitoring and improvement

Crash & Diagnostic Data -No- Identifying and resolving technical issues

Data not linked to identity is collected in aggregate form only and cannot be used to identify you personally. You may

review the complete privacy nutrition label on the App's Apple App Store listing page.

14. Google Play — Data Safety Disclosure

In accordance with Google Play's Data Safety policy requirements, this App collects and uses personal data as

fully disclosed in this Privacy Policy and in the Data Safety section of our Google Play Store listing. The

following applies to all data collected:

• Data is collected to provide and improve the App experience as described in Section 3.

• Data sharing is limited to the parties described in Section 4.

• Users may request deletion of their account and all associated data at any time as described in Section 7.

• Data is encrypted in transit and at rest as described in Section 11.

• Users have the right to access, correct, and delete their personal data as described in Section 6.

Our Data Safety form on Google Play reflects all categories of data collection and usage disclosed in this

15. Canadian Privacy Law (PIPEDA) Compliance

Malabari Bistro is committed to complying with the Personal Information Protection and Electronic

Documents Act (PIPEDA) and applicable Ontario provincial privacy regulations. In accordance with PIPEDA:

• We collect only the personal information that is necessary for the purposes identified in this Privacy Policy.

• We obtain your meaningful consent before or at the time of collecting your personal information.

• You may withdraw consent at any time, subject to legal or contractual restrictions.

• We retain personal information only as long as necessary to fulfill the identified purposes.

• We protect personal information with appropriate security safeguards.

• We will respond to access and correction requests within 30 days.

To exercise your rights under PIPEDA or for any privacy concerns, contact our Privacy Officer at:

hellolondon@malabaribistro.ca

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, Wix platform updates,

or applicable legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page

• Notify you via a push notification or email for significant changes

• Post the updated policy at a publicly accessible URL on our website

Your continued use of our website or App after changes are posted constitutes your acceptance of the updated

17. Contact Us

For any privacy-related questions, data access requests, correction requests, or account deletion requests,

please contact us:

Malabari Bistro — Privacy Officer

Email: hellolondon@malabaribistro.ca

Serving London and Sarnia, Ontario, Canada

We aim to respond to all privacy inquiries within 5 business days.