We are Opening Soon
Privacy Policy
Effective Date: June 20, 2025
Hi Bowl Canada Restaurant Group Ltd. and its global affiliates (collectively, “Hi Bowl”, “we”,”us”, or “our”) understand that privacy is important to our members, users and other individuals that interact with us (“you” or “your”). This privacy policy (“Privacy Policy”) describes how we collect, use, disclose, and otherwise process personal information in Canada.
This Privacy Policy applies to all of our processing of personal information in Canada through our online and offline activities, when we provide products or services to you through self-owned and authorized channels, including but not limited to: the official website of Hi Bowl (https://hibowl.haidilao-inc.com/), the platform for ordering food used in Hi Bowl restaurants, any Hi Bowl mobile application, our web game platform, our member loyalty program, and any websites and online service that we operate and that link to this Privacy Policy (collectively “Services”).
This Privacy Policy does not impose any limits on the collection, use, or disclosure of business contact information.
We have designated a Privacy Officer who is responsible for our compliance with this Privacy Policy. The Privacy Officer may be contacted as described below.
Please review this Privacy Policy carefully. By submitting your personal information to us, accessing or using the Services, you consent to our collecting, using and disclosing your personal information as set out in this Privacy Policy.
How We Collect Your Personal Information
We collect personal information directly from you, automatically through your use of the Services, and from third-party sources. To the extent permitted by applicable law, we may combine the information we collect from publicly available or third-party sources.
Personal Information Collected Directly. While the personal information we collect varies depending on how you interact with us, in general we may collect the following personal information directly from you:
Orders. When you order food and beverages using our Services we may collect your name, phone number, email address, physical address, payment details, and specific order details, such as order numbers, accumulated growth value of member points, consumption details, consumption amounts, check-out times and consumption restaurant names. For example, your order details will be collected and displayed on the Hi Bowl App after you make restaurant reservations or complete your orders.
Reservations. When you make a reservation at one of our restaurants using our Services we may collect your name, phone number, the date and time of the reservation, and the number of guests.
Account and Membership. If you join our membership and loyalty program, we may collect your name, nickname, gender, date of birth, email address, username and password, demographic information, physical address, phone number, payment information, such as credit card details, food and consumption preferences, order and reservation history, transactions, loyalty program information such as loyalty points, growth value, coupons, and any other information you choose to provide. For example, phone number or email address may be collected from you via electronic form upon registering and logging into the Hi Bowl App, and nickname, gender and date of birth may be collected from you via electronic form if you have voluntarily entered this information in the Hi Bowl App. In addition, your coupon information, including coupon name, coupon type, available time and period, available restaurant and use instruction, will be collected and displayed on the Hi Bowl App after you get coupons, and information about your membership or loyalty points will be collected and displayed on the Hi Bowl App according to your transaction status.
Interactions with Hi Bowl. When you email, call, or otherwise communicate with us and with members of our team, we collect and maintain a record of your contact details, communications, and our responses. We also maintain records of communications and information that you post in chat sessions, forums and in other areas of the Services, well as on our social media channels, and the information you provide to us related to any customer support requests.
Surveys. If you respond to a survey, we may collect your name, email address, and your answers to the survey questions.
Web games. If you participate in our web games, we will collect information about your participation in the game. After completing the game, you will proceed to a reward page where we will collect your mobile phone number to send electronic vouchers to your membership account.
Events. We also collect personal information related to your participation in our events. For example, if you register for or attend an event that we host or sponsor, we may collect information related to your registration for and participation in such event.
Security. When you visit our restaurants, we may also capture video recordings of you through our security cameras that help us monitor and protect the safety of our customers, staff and property.
Personal Information from Third Parties. To the extent permitted by applicable law and, where necessary, with your consent, we may collect personal information about you from third-party sources, such as public databases, joint marketing partners, social media platforms or other third parties.
We may receive your username, email or phone number from third parties when you are redirected from their platform or services.
We may receive information about you when you integrate or link a third-party service or account with our Services. You may also integrate our Services with other services you use (such as your Google account or Apple ID), to login to our Services through a third-party. The information we receive when you link or integrate our Services with a third-party service depends on the settings, permissions and privacy policy controlled by that third-party service. You should always check the privacy settings and notices in these third-party services to understand what data may be disclosed to us or shared with our Services.
If you post information about us or engage with us on third-party platforms, such as social media platforms, we may collect personal information about you from that third-party platform. These third-party platforms and services control the information they collect and share about you. For information about how they may use and disclose your information, including any information you make public, please consult their respective privacy policies.
Personal Information Collected Automatically. To the extent permitted by applicable law and, where necessary, with your consent, we automatically collect personal information related to your use of our Services and interactions with us and others, including information we collect automatically (e.g., using cookies and pixel tags), as well as information we derive about you and your use of the Services. This information includes:
Device and browsing information. We use cookies, log files, pixel tags and other tracking technologies to automatically collect information when users access or use our Services, such as IP address, general location information, domain name, page views, a date/time stamp, browser type, device type, device ID, mobile phone or terminal brand, mobile phone or terminal model, Internet service provider, referring and exiting URLs, operating system, operating system version, App version number, membership ID, membership level, country, language, login status, clickstream data, behavior time and similar device and usage information.
Activities and usage. We also collect activity information related to your use of the Services, such as information about the links clicked, searches, features used, items viewed, time spent within the Services, files uploaded, and products and items you view.
Location information. We may collect or derive location information about you, when you order products from our stores. Further, with your permission, we may collect geolocation information from your device. You may turn off location data sharing through your device settings.
How We Use Your Personal Information
Generally, we may collect, process, use, transfer, disclose, and otherwise process your personal information for the following purposes:
Account Management. To process your account registration, facilitate logins and to otherwise manage your account.
Orders and Reservations. To manage orders, reservations and queuing requests made via the Services.
Services and support. To provide and operate our Services, communicate with you, respond to your inquiries and requests, process payments, communicate with you about the Services, facilitate your use of the Services, display order and coupon details, and for similar service and support purposes.
Membership and Loyalty Program. To manage and administer our global membership and loyalty program, including activating and validating your membership, facilitating your membership benefits, displaying your loyalty points and membership status, analyzing your membership details and use, and providing special offers and promotions.
Analytics and improvement. To better understand how users access and use the Services, and our other products and offerings, and for other research and analytical purposes, such as to evaluate and improve our Services and business operations, to develop services and features, and for internal quality control and training purposes.
Marketing and advertising. For marketing and advertising purposes, with your consent, and in accordance with applicable laws. For example, to send you information about our products such as offers, promotions, newsletters, and other marketing content, including about third-party products and services we think may interest you, as well as any other information that you sign up to receive. We may also use certain aggregated information we collect to manage and improve our advertising campaigns so that we can better reach people with relevant content.
Planning and managing events. For event planning and management, including registration, attendance, connecting you with other event attendees, and contacting you about relevant events and Services that you have expressed an interest in.
Games. To administer our web games and to send electronic vouchers to your membership account, after you complete our web game and provide your mobile phone number on the reward page.
Research and surveys. To administer surveys and questionnaires, such as for market research or member satisfaction purposes.
Contests. To administer promotional contests and sweepstakes.
Security and protection of rights. To protect the Services and our business operations; to protect our rights or those of our stakeholders; to prevent and detect fraud, unauthorized activities and access, and other misuse; where we believe necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety or legal rights of any person or third party, or violations of our Terms of Use.
Compliance and legal process. To comply with the law and our legal obligations, to respond to legal process and participate in legal proceedings, and to investigate legal claims.
General business and operational support. To consider and implement mergers, acquisitions, reorganizations, bankruptcies, and other business transactions such as financings, and related to the administration of our general business, accounting, auditing, compliance, recordkeeping, and legal functions.
Other purposes. For any other purposes disclosed to you at the time we collect your information or pursuant to your consent, or as otherwise required or permitted by applicable law.
If your personal information is to be used for a purpose not previously identified, we will disclose that new purpose to you before that use, and we will seek your consent unless the use is otherwise authorized or required by law.
Do-Not-Track Signals and Similar Mechanisms
Some mobile and web browsers transmit “do-not-track” signals. Because of differences in how web browsers incorporate and activate this feature, it is not always clear whether users intend for these signals to be transmitted, or whether they even are aware of them. We currently do not recognize these signals in our Services.
How We Share Your Personal Information
We may share and disclose the personal information we collect for the purposes described above and as follows:
Service providers: We may retain agents, subcontractors or service providers from time to time in relation to our business or the products or services that we provide (for example, outsourced customer service providers, reservation platforms, instant messaging services, IT service providers, payment processors, analytics providers, consultants, auditors, and legal counsel). If we require a service provider to deal with your personal information, we will take reasonable steps to ensure that the service provider adheres to privacy procedures and will keep your personal information confidential.
Delivery platforms. If you use a take-out or delivery platform or service, we may disclose your name, address, phone number, and other delivery-related information as necessary to ensure you receive your order.
Payment processors: In the course of processing your orders and other purchases, relevant payment agencies may collect such information as your order, amount of payment, account number and other information related to your payment.
Third party platforms, providers, and networks. We may disclose or make available personal information to third party platforms and providers that we use to provide or make available certain features or portions of the Services, or as necessary to respond to your requests. We may also make available certain personal information to third parties in support of our marketing, analytics, advertising, and campaign management, with your consent.
Corporate affiliates. We may share your information with our affiliates, parent companies, or subsidiaries for the purposes described in this Privacy Policy, including so that they may use the information for their own purposes with respect to administering our global loyalty and rewards program.
At your request. We may disclose personal information to others when you have requested, explicitly or implicitly, that we share such personal information.
In support of business transfers. If we or our affiliates are or may be acquired by, merged with, or invested in by another company, or if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may transfer the personal information we have collected from you to the other company. We may also share certain personal information as necessary prior to the completion of such a transaction or corporate transactions such as financings or restructurings, to lenders, auditors, and third-party advisors, including attorneys and consultants, as part of due diligence or as necessary to plan for a transaction.
Compliance and legal obligations. We may also disclose personal information to third parties to comply with our legal and compliance obligations and to respond to legal process. For example, we may disclose information in response to subpoenas, court orders, and other lawful requests by regulators and law enforcement, including responding to national security or law enforcement disclosure requirements. This may include regulators, government entities, and law enforcement as required by law or legal process. In addition, it may include certain disclosures that we are required to make under applicable laws, such as the names of sweepstakes and contest winners.
Security and protection of rights. We may disclose personal information where we believe doing so is necessary to protect the Services, our rights and property, or the rights, property and safety of others. For example, we may disclose personal information in order to (i) prevent, detect, investigate and respond to fraud, unauthorized activities and access, illegal activities, and misuse of the Services, (ii) situations involving potential threats to the health, safety or legal rights of any person or third party, or (iii) enforce, and detect, investigate and take action in response to violations of, our Terms of Use. We may also disclose information, including personal information, related to litigation and other legal claims or proceedings in which we are involved, as well as for our internal accounting, auditing, compliance, recordkeeping, and legal functions.
Aggregate and Deidentified Information. Notwithstanding anything else in this Privacy Policy, we may use, disclose, and otherwise process aggregate and deidentified information related to our business and the Services with third parties for quality control, analytics, research, development, and other purposes.
Other Disclosures. We may disclose personal information in other ways not described above, including as required or permitted by applicable law, but will notify you and, if necessary, obtain your consent.
Cross-Border Transfers
Hi Bowl is headquartered in Singapore, and has operations, entities, and service providers in Singapore, Canada, and other countries. Due to the global nature of our operations, your personal information may be transferred, communicated, stored, and processed to or by personnel, affiliates, or service providers outside of your province or territory of residence. By using our Services, you understand that your information will be transferred to provinces, territories, or countries outside of your place of residence, including Singapore and the United States.
We will make these transfers in compliance with applicable privacy laws, and we will make reasonable efforts to ensure that adequate safeguards are in place so that your personal information will receive an adequate degree of protection. However, you acknowledge that your personal information may be processed and stored in foreign jurisdictions and that governments, courts, law enforcement or government or regulatory agencies in Singapore may be able to access or obtain disclosure of your personal information under a lawful order or otherwise through the laws of the foreign jurisdiction, regardless of the safeguards we have put in place for the protection of your personal information. In these cases, we will comply with applicable local law requirements relating to the conditions for disclosure or release of personal information. For more information about our policies and practices regarding transfers of personal information outside of Canada, contact us using the contact information in the “Contact Us” section below.
Consent
We will obtain your consent to collect, use or disclose personal information, except where we are authorized or required by law to do so without consent. Your consent can be express, implied or given through an authorized representative such as a lawyer, agent or broker. Consent may be provided orally, in writing, electronically, through inaction (such as when you fail to notify us that you do not wish your personal information collected/used/disclosed for various purposes after you have received notice of those purposes) or otherwise.
You may withdraw consent at any time, subject to legal, contractual and other restrictions, provided that you give us reasonable notice of withdrawal of consent. If you notify us that you withdraw consent, we will inform you of the likely consequences of that withdrawal of consent, which may include our inability to provide certain services for which that information is necessary. Withdrawing your consent does not force us to delete or destroy personal information which we would otherwise be allowed to retain under applicable law, nor does it affect the lawfulness of processing up to the time of such withdrawal.
Retention of Personal Information
We will retain your personal information for as long as necessary to fulfill the purposes for which we collected it, and as permitted or required by law.
We will retain personal information used to make a decision affecting you for at least one year after using it to make the decision.
We will destroy, erase, or make anonymous documents or other records containing personal information as soon as it is reasonable to assume that the original purpose is no longer being served by retention of the information and retention is no longer necessary for a legal or business purpose.
How We Protect Your Personal Information
We have implemented commercially reasonable physical, organizational, contractual and technological security measures with a view to protecting your personal information from accidental or unlawful destruction, loss or theft, unauthorized access, disclosure, copying, use or modification. You should understand that no data storage system or transmission of data over the Internet or any other public network can be guaranteed to be 100 percent secure, accurate, complete, or current.
Given that the Internet environment is not absolutely safe, you are reminded that the information you voluntarily share or even publicly share when you purchase/use our Services may contain your own personal information or other people’s personal information, or even sensitive personal information. If you choose to engage in public activities on the Services, you should be aware that any information you share there can be read, collected, or used by other users. For this reason, if you decide to upload any picture that contains personal information when you leave a comment, please reconsider whether you want to share or even make relevant information available to the public when you purchase/use our products/services. You should use caution in disclosing information while participating in these areas. We are not responsible for the information you choose to submit in public areas.
Your Rights and Choices With Respect to Your Personal Information
Individuals have a number of rights concerning their personal information under global privacy laws. In Canada, you have certain rights regarding your personal information as described below:
Access. You have a right to access your personal information held by us. Upon written request and authentication of identity, we will provide you with your personal information under our control. We will also give you information about the ways in which that information is being used and a description of the individuals and organizations to whom that information has been disclosed. We may charge you a reasonable fee for doing so, upon providing you notice of such fees in advance. In some situations, we may not be able to provide access to certain personal information (e.g., if disclosure would reveal personal information about another individual, the personal information is protected by solicitor/client privilege, the information was collected for the purposes of an investigation or where disclosure of the information would reveal confidential commercial information that could harm our competitive position). We may also be prevented by law from providing access to certain personal information. Where an access request is refused, we will notify you in writing, document the reasons for refusal and outline further steps that are available to you.
Accuracy and Correction. If you demonstrate the inaccuracy or incompleteness of personal information, we will amend the information as required. If appropriate, we will send the amended information to third parties to whom the information has been disclosed. When a challenge regarding the accuracy of personal information is not resolved to your satisfaction, we will annotate the personal information under our control with a note that the correction was requested but not made.
Complaints. We will, on request, provide information regarding our complaint procedure.
Supervisory Authorities. If you have unresolved concerns, you have the right to complain to a privacy commissioner or data protection authority where you reside, where you work, or where you believe there has been non-compliance with data protection or privacy laws.
These rights may be limited, for example, if fulfilling your request would reveal personal information about another person, or if you ask us to delete information that we are required by law or have compelling legitimate interests to keep.
Please contact us as set out below to exercise any of the rights available to you.
Cookies and Tracking Technologies
We and our third-party service providers use cookies, pixels, local storage objects, log files, APIs, and other mechanisms to automatically collect information browsing, activity, device and similar information within our Services and to target advertising and content. We use this information to, for example, analyze and understand how users access, use and interact with others through our Services, as well to identify and resolve bugs and errors in our Services and to assess secure, protect, optimize and improve the performance of our Services. To the extent required by applicable law, we will only use these technologies if you provide us with your express consent to do so. You also have certain choices about our use of cookies and tracking within the Services, as described in this section.
Cookies. Cookies are alphanumeric identifiers that we transfer to your device’s hard drive through your web browser for record-keeping purposes. Some cookies allow us to make it easier for you to navigate our Services, while others are used to enable a faster log-in process, support the security and performance of the Services, or allow us to track activity and usage data within Service.
Pixel tags. Pixel tags (sometime called web beacons or clear GIFs) are tiny graphics with a unique identifier, similar in function to cookies. While cookies are stored locally on your device, pixel tags are embedded invisibly within web pages and online content. We may use these, in connection with our Services to, among other things, track the activities of users, help us manage content and compile usage statistics. We may also use these in HTML e-mails we send, to help us track e-mail response rates, identify when our e-mails are viewed, and track whether our e-mails are forwarded.
Local storage objects. Local storage is a web storage mechanism that allows us to store data on a browser that persists even after the browser window is closed. Local storage may be used by our web servers to cache certain information in order enable faster loading of pages and content when you return to our websites. You can clear data stored in local storage through your browser. Please consult your browser help menu for more information.
Opting Out of Marketing Communications
If you no longer want to receive marketing-related e-mails from us, you may opt out of receiving marketing-related e-mails by clicking the “unsubscribe” link at the bottom of any e-mail you receive from us. You may also opt out by contacting us directly using the contact information in the “Contact Us” section below.
Please note that if you opt out from receiving marketing-related e-mails, we may still need to send you communications about your use of our products or services, or other matters.
Third-Party Websites and Services
We may provide links within our Services to third-party websites for your convenience and information. We may also make opportunities available to you to purchase, subscribe to, or use other products or services from third parties with different privacy practices. Those other websites, products, or services are governed by the privacy statements and policies of the respective third party. This Privacy Policy does not extend to any websites, products, or services provided by third parties. We do not assume responsibility for the privacy practices of third parties and we encourage you to review all third-party privacy statements prior to using third-party websites, products, or services.
Protection of Minors
Our products and services are not intended for children under the age of 14 and we do not knowingly collect personal information from children under the age of 14. If you are under 14, please do not provide any personal information on any website, online service, web game, or offline platform that we operate. If you are the parent or guardian over the child and believe that the child may have provided us with personal information, you can contact us using the contact details below, and we will verify and delete the child’s personal information. In circumstances where it is identifiable that the personal information belongs to a child, if we ascertain that we have collected such information, we will remove it from our databases and cease its use.
Privacy Policy Updates
We may modify this Privacy Policy from time to time. When we update the Privacy Policy, we will revise the “Effective Date” date above and post the new Privacy Policy on our website and Services. We recommend that you review the Privacy Policy each time you visit the Services to stay informed of our privacy practices. Changes to this Privacy Policy will be announced on our website or through similar means for a reasonable time before and after the changes take effect. Where required by applicable law, we may ask you to confirm your consent to the processing of your personal information. Otherwise, your continued access to or use of our Services constitutes your acknowledgment and acceptance of the changes.
Contact Us
If you need to exercise any of the rights described above, or have any questions, opinions, or concerns on this Privacy Policy and the safety of your own personal information, or intend to file reporting or a complaint in this regard, or even have other concerns that cannot be solved herein, you may contact us via the following contact information:
E-mail of the person in charge of privacy affairs:
Chief Privacy Officer
Position: Data Protection Officer
E-mail address: Jnd5d@haidilao.com