We are committed to providing our customers with a secure, private shopping experience.

HELL Pizza (“HELL”, “we”, “us” or “our") collects certain information about you when you use our website (www.hellpizza.com) or social media pages (each a “website”) and the related mobile application (the “app”) and uses this information to provide services to you. We are committed to protecting the personal information of our customers and users of our website and app and are bound by the Privacy Act 2020 and the New Zealand Privacy Principles. This privacy policy will help you to understand: • how and why we collect personal information; • how that personal information is stored and used; • how you can access and correct that personal information; and • when we might disclose your personal information to other people.

Personal information is identifiable information about you, examples of personal information that we may collect are as follows: • your name, phone number, delivery address and email address; • date of birth; • payment method and any card payment details; • social media handles; • location information if location services are permitted on your device; • transaction details (e.g. the products ordered, the date and time of your order and the amount charged); • your marketing preferences (this may include dietary preferences); • copies of any identification documentation provided to us (e.g. drivers license); • your Internet Protocol (IP) address and the browser your computer is using; • any communication you have with us (either directly, by phone or email); and • any other information you submit to us through your use of our website and/or services. If you can not be identified from the information that we collect (for example, when personal data has been anonymised) then this privacy policy does not apply. By accessing our website or app and/or using our services you are consenting to the collection, use, disclosure, storage and processing of your personal information in accordance with this privacy policy.

When you visit our website or app or use our services, we collect personal information from you. The following are the different ways that we collect this personal information: Directly: We might ask you to provide personal information to us. For example when you: • register for an account on our website or app; • purchase products through the website or app; • participate in any offers, marketing activities and/or promotional activities; • provide feedback to us through our website, app, via email, through our social media channels, telephone and in person; • browse the website or app generally; or • upload anything to our website or app or use our services. You do not have to provide us with your personal information if you do not want to. Although, if you choose not to you may be unable to use some parts or all of our website, app and/or services. Automatically: We collect some information about you automatically when you visit our website or app and/or use our services. This information includes your IP address, device type, what pages you are visiting on our website or app and any links you click on while using our website. This information is used to gain a better understanding of how people are using our website and app and how we can better this experience for our customers. If permitted through the permission system in your device, we may also collect the location of your device when the app is running in the foreground or background. This may be collected in order to deliver your order or to identify which store you should be placing an order from. We may use cookies (being an alphanumeric identifier that we transfer to your computer’s hard drive so we can recognise your browser) in order to monitor your use of the website or app. This information is anonymous and is used to enable us to enhance and customise your experience across the provision of the website and app and use of our services. You may disable cookies by changing the settings on your browser, although this may mean that you cannot use all of the features of the website and app. Cookies do not personally identify users, although they do identify a user’s browser. From third parties: In addition to the information we collect directly from you, we may collect personal information from third parties. These include credit referral agencies, the customer’s bank (past and present), any other suppliers of products and services to the customer and other persons or companies with whom the customer has been associated. This information is used to supplement the personal information we already hold about you, in order to personalise and improve our services, and to validate the personal information you have already provided to us. Social Media: If you engage with us via any of our social media platforms we may collect the personal information associated with your social media account in order to in order to personalise and improve our services, and to validate the personal information you have already provided to us.

We use your personal information in connection with the provision of our services to you. For example: • To process your registration application. • To fulfil your order, deliver our products to you and facilitate payment. • To provide you with certain content, products and services you request. • To confirm your age in connection with the provision of alcohol or other age restricted products. • To improve, enhance, update and maintain our website, app and services to optimise your experience and offer you a personalised experience. • To communicate with you in relation to any changes to the website, app and services or assistance with using our website, app or services. • To market or promote our services to you, including contacting you electronically (for example by email or online messaging platform) or through targeted advertising online (for example through our own website or app or third party websites). • To undertake any credit checks of you that may be necessary. • For our accounting purposes, including authorising and processing credit or debit card transactions. • To respond to communications from you including any assistance you have requested from us in relation to your use of the website, app or the services. • To allow third parties with whom we have a business relationship to provide you with information about products, services and other opportunities that they think might be of interest to you. • To co-operate with any government, industry, legislative or regulatory authorities. • To protect and/or enforce our legal rights and interests, including defending any claim. • For any other purpose authorised by you, the Privacy Act 2020 and any other relevant legislation. You may request that we stop sending marketing messages at any time, by contacting us at feedback@hell.co.nz.

Unless expressly authorised by you or under this privacy policy, we will not disclose your personal information to any third party except in the course of providing our services to you. We may disclose your personal information in the following circumstances: • To the HELL family, including our franchisees and related companies. Any use of your information by such parties will be in compliance with this privacy policy. • To third party service providers who assist us with our use of your personal information. This includes providers who support our delivery of the website, app and/or services to you, credit referral agencies, business advisers or providers who assist us with marketing or promoting our services to you. • We partner with alcohol suppliers to provide customers with alcohol delivery. Certain personal information is provided to the relevant alcohol suppliers and District Licensing in order to prove that customers purchasing alcohol are of legal drinking age. • Where we are required by the Privacy Act 2020 or any other applicable laws or regulations to do so or to defend our legal rights. Where possible, we will notify you of this type of disclosure. • When we have your express consent to do so. • We may disclose aggregate shopper statistics to any party, provided that these statistics do not contain any identifiable information about a customer and their individual shopping habits.

Your personal information may be processed in countries other than the country you live in (for example, Australia). Although these countries may have different privacy laws, we ensure that your personal information remains protected to the same standard it would if it was being held in New Zealand. Your personal information will only be transferred or disclosed to third parties or countries that have appropriate privacy laws and regulations in place and provide sufficient protection for your information where we are confident that your personal information will be protected. To ensure that these third parties will protect your personal information we may require them to enter into a contract enforcing contractual clauses relating to New Zealand privacy laws.

We have processes and policies in place to ensure that your personal information is stored in a secure environment protected from unauthorised access. We have security measures in place to ensure that New Zealand information handling and storage standards are adhered to. The personal information that we collect from you is stored digitally in the form of cloud storage. This information may be accessed by our employees or agents and we ensure that access to this information is restricted. We have appropriate systems in place to protect against unauthorised access, copying or disclosure of any personal information. We carry out ongoing reviews of the security measures in place to ensure that your information is securely held. In order to allow us to protect your personal information the best we can it is important that you do not share your HELL account login with any other person.

We will take all reasonable steps to ensure the personal information used or disclosed in accordance with this privacy policy is accurate, complete, relevant, up to date and not misleading. We will hold your personal information while you hold a HELL account with us and for so long as we are legally entitled to do so. This length of time will depend on whether we have an ongoing business need to retain it (for example, to comply with all applicable legal requirements).

You have the following rights with respect to the personal information we hold on behalf of you: • To request access to your personal information. • To request a correction to your personal information. • To request the deletion or removal of your personal information. • To object to or request a restriction on the processing of your personal information. • To withdraw consent to the use of your personal information. You can access the personal information we hold about you in the “My Customer Details” area of the website or the “Account” section of the app. If you think that the information we hold is incorrect please contact us at feedback@hell.co.nz There are exemptions under the Privacy Act 2020 where access to your information may be denied. We will notify you if this is the case.

Our website or app may contain links to other third party websites and these third party websites may have separate and independent privacy policies. We have no responsibility and we will have no liability for the content and activity of these linked sites.

We may change or update this privacy policy at any time by uploading a revised privacy policy to our website. By using our services, app and website you agree to be bound by the privacy policy that is in effect at that time.

Any privacy concerns you may have can be resolved quickly by contacting the HELL Privacy Officer through the website or feedback@hell.co.nz.