Privacy Policy
Privacy Statement for Customers, Chefs/Entrepreneurs and Delivery partners

Last Updated on : June 11, 2026

This privacy statement applies to the processing of personal data of customers, Chefs/Entrepreneurs and Delivery partners who make use of one of KOOKXTRA (koookxtra.com) platforms and products, including order website, app, and services, including KOOKXTRA's platform and services for business ("KOOKXTRA for Business") and KOOKXTRA's for business Card (collectively, the "Services"). Unless otherwise stated, the data controller for processing these personal data is koookxtra.com (hereinafter referred to as "KOOKXTRA"). KOOKXTRA company is registered under Netherlands, Chamber of Commerce - with KVK number (88788695), Registered address - Antillenstraat 28 H,1058HB, Amsterdam At KOOKXTRA we are committed to building the world's greatest food community, and that begins with protecting the privacy of everyone in our community. This means that we'll protect the personal information of all visitors that make use of our Services.

What personal data we process and why

Whenever you interact with KOOKXTRA via our Services we collect and process your personal data. KOOKXTRA may process your personal data for the following purposes.

1. Ordering process

We process the personal data you provide to us when you place your order. This personal data is needed to execute your order, confirm your order, and to assess your order, payment, and a possible refund. The legal basis for this processing of personal data is that it is needed for the performance of a contract as defined in the GDPR. We process the following personal data in the ordering process:

2. Chef/Entrepreneur reviews

After the order process you are asked to provide a review with the relevant Chef/Entrepreneur via email. The legal basis for this email, as defined in the GDPR, is your consent unless your consent is not necessary according to the applicable law.

KOOKXTRA processes the personal data you provide when submitting a Chef/Entrepreneur review. The legal basis for the processing of personal data when you submit your reviews is the consent provided by you. You can withdraw your consent by contacting us via e-mail : info@Kookxtra.com or by visiting our website. We process the following personal data when you post a Chef/Entrepreneur review:

3. Customer Services

When you contact our customer services department, we will use the personal data you provide to answer your question or handle your complaint. The legal basis for this processing of personal data is that it is needed for the performance of a contract and/or to comply with KOOKXTRA's legal obligations as defined in the GDPR. We process the following personal data for customer service purposes:

4. Customer / Chef/Entrepreneur / Delivery Partner Accounts

If you interact with our Services you are given the opportunity to create an account with us. The creation of an account is based on your consent. You can withdraw your consent and/or delete your account by contacting us by filling out a form under Reach us section by clicking Learn More on our website or contact us via info@Kookxtra.com. The withdrawal or deletion of your account may have negative consequences on your user experience. The following personal data is processed in connection with your account:

5. Location Data (Only if you are a Delivery Partner)

KOOKXTRA collects location data of delivery partners even when the app is running in the background or is closed. This enables us to provide customers with detailed information about their orders. Additionally, it aids in monitoring the performance of our delivery partners. The data is uploaded to our servers and is automatically deleted after 7 days. It is important to note that this feature is exclusively for delivery partners, and we do not track the location of customers or chefs/entrepreneurs.

6. Customer research

To make sure that our services are aligned with your preferences and to improve our services and platforms, KOOKXTRA may approach you to conduct customer research; such as but not limited to, surveys. We only send you these types of communications with your prior consent, unless this is not necessary according to the applicable law. Participation in the customer satisfaction surveys is completely voluntary. If you do not wish to receive these surveys you can unsubscribe from them in the messages itself. KOOKXTRA may processes the following personal data for research purposes:

7. Marketing

We also process your personal data to be able to send you (personalised) marketing messages and notifications. Such messages include the latest news, discounts, and updates about new Chefs/Entrepreneurs (by email or push notification), regardless of the format we use to share these kinds of messages (including email or push messages). The legal basis for this processing of personal data, as defined in the GDPR, is your consent provided during the ordering process unless your consent is not necessary according to the applicable law. Whenever you want to change your preferences with respect to receiving such messages and notifications, you can unsubscribe using the unsubscribe link in the messages, in your account settings or by filling out a form under Reach us section by clicking Learn More on our website or contact us via info@Kookxtra.com. We process the following personal data for marketing purposes:

8. Cookies

KOOKXTRA uses cookies or similar technologies for functional, analytical, and marketing purposes. Data processed for cookie purposes defer per purpose (functional, analytical or marketing) and depend on the preferences set by you. Please refer to our Cookie Statement for further information about our use of cookies and to set your preferences.

9. Fraud prevention

We also process personal data to prevent fraud and other forms of misuse on and via our Services. The legal basis for this processing operation is that it is needed in pursuing a legitimate interest of KOOKXTRA (fraud prevention) as defined in the GDPR. Personal data processed for fraud prevention purposes are:

10. Analysis

KOOKXTRA uses your personal data to be able to meet our reporting obligations towards advertisers and to be able to improve our website and application and our range of products and services. The legal basis for this processing operation is that it is needed in pursuing a legitimate interest of KOOKXTRA (analysis & reporting) as defined in the GDPR. We will always make sure the reports do not contain any personal data so that the information cannot be traced back to you.

11. Campaigns

KOOKXTRA may launch specific campaigns or contents in connection to its Services. If you wish to enter a KOOKXTRA campaign, KOOKXTRA will always ask you for your permission to process your personal data. The legal basis for this processing activity is your consent. You can always withdraw your consent by contacting us via the contact data provided to you within the campaign or by filling out a form under Reach us section by clicking Learn More on our website or contact us via info@Kookxtra.com. KOOKXTRA processes the following personal data for campaigning purposes:

Additional purposes

We will only use your personal data for the purposes described above. If we want to use the data for a different purpose, we will take appropriate measures to inform you, consistent with the significance of the changes we make. Where required by applicable data protection law, we will obtain your consent.

Age

Our website and application is neither intended for persons aged under 16, and nor do we intend to collect personal data of website visitors who are aged under 16. However, we are unable to verify visitors' age. We therefore advise parents to monitor their children's online activities, to prevent their personal data being collected without parental consent. If you feel that we have collected personal data of a minor without consent, please contact us by filling out a form under Reach us section by clicking Learn More on our website or contact us via info@Kookxtra.com. We will then proceed to erase this data.

Automated decision-making and profiling

In the performance of the contract with you and to improve our platform, KOOKXTRA uses automated decision-making and profiling. For example, KOOKXTRA uses your address data and/or location data to select available Chefs/Entrepreneurs in your local area. We also use automated decision-making in complying with our legal obligations to prevent money laundering, terrorism financing, and other criminal offences. When such automated decision-making and/or profiling leads to a negative decision about you, and you do not agree with it, you can contact us by filling out a form under Reach us section by clicking Learn More on our website or contact us via info@Kookxtra.com. We will then proceed to reassess the situation.

How long we store personal data for

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, tax, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. In some circumstances we may anonymise your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you. If you have any questions on the way we retain your personal data you can contact us by filling out a form under Reach us section by clicking Learn More on our website or contact us via info@Kookxtra.com.

Sharing with Chefs/Entrepreneurs

If you order via our Services, KOOKXTRA will share your personal data (order, name, address data and telephone number) with the Chef/Entrepreneur you selected, so that the Chef/Entrepreneur can deliver your order. As you are a direct customer of the Chef/Entrepreneur, the Chef/Entrepreneur will have its own responsibility and obligations with respect to the processing of your personal data. If you have questions about how the Chef/Entrepreneur handles your personal data, you should contact the Chef/Entrepreneur directly.

Sharing with others (not being Chefs/Entrepreneurs)

KOOKXTRA may work with other companies within the KOOKXTRA group and other third parties in order to carry out the processing described above and/or to comply with legal obligations.

These group companies and third parties will process your personal data on behalf of us (as data processors) or as autonomous data controllers, and have access to your personal data for the purposes described in this privacy notice. We require group companies and third parties to protect your personal data in accordance with the standards set out in this privacy notice and we take appropriate measures pursuant to the applicable data protection law to guarantee the same level of protection and confidentiality.

We will also share your data with other third party data controllers where appropriate or required by applicable law or regulation (including a court order) or where we believe disclosure is necessary to comply with legal obligations, to exercise, establish or defend legal rights or to protect the vital interests of any person. Such third party controllers may include law enforcement agencies.

We may also disclose your data to any company or prospective buyer of all or substantially all of our assets in connection with any sale or transfer of those assets.

Your personal data may be shared with the following parties:

Where your data gets sent

We may transfer your personal data outside of the European Economic Area (EEA). This may include transferring it to or accessing it from other jurisdictions, including jurisdictions that may not provide a level of protection equivalent to the EU data protection laws. Where we transfer personal data outside the EEA we will take into account any applicable statutory obligations relevant to personal data transfers and, where there is no European Commission (EC) adequacy decision in place, we will rely on appropriate safeguards, including EC approved standard contractual clauses. We have implemented similar appropriate safeguards with our third party service providers and further data can be provided upon request.

Personal data rights, questions or complaints

We inform you that, with regard to the personal data, you can exercise the rights provided for by applicable data protection laws, which include: the right to request access to, rectification of, or erasure of personal data or restriction of processing, and to object to processing, the right to data portability, to withdraw your consent at any time (without prejudice to the lawfulness of the processing based on the consent given prior to the withdrawal) as well as to lodge a complaint with a supervisory authority.

To exercise your rights please contact us by filling out a form under Reach us section by clicking Learn More on our website or contact us via info@Kookxtra.com.

If you have any other questions or complaints about the processing of your personal data, we will be happy to talk to you. We would also like to hear from you if you have tips or suggestions on how to improve our privacy policy.

Security

KOOKXTRA takes personal data protection very seriously and we therefore take appropriate measures to protect your personal data against misuse, loss, unauthorised access, unwanted disclosure, and unauthorised alteration. If you feel that your personal data are not adequately protected or there are indications of misuse, please contact us by filling out a form under Reach us section by clicking Learn More on our website or contact us via info@Kookxtra.com.

Data Protection Authority

Besides the option of lodging a complaint with us, you have the right to lodge a complaint with the relevant supervisory authority for the protection of personal data. To do so, contact the supervisory authority directly.

How to contact us

If you have any questions or concerns about this Privacy Statement and/or our privacy practices, please contact us via e-mail - info@Kookxtra.com or by contacting via our website

KOOKXTRA, Antillenstraat 28 H, Amsterdam, 1058 HB, Netherlands

TariniOS Platform — Privacy Statement for Entrepreneurs and Customers

1. Definition and Legal Identity of TariniOS

TariniOS is a registered trading name and proprietary AI-native commerce operating system owned, developed, and operated exclusively by Kookxtra (registered in the Netherlands, Chamber of Commerce KVK: 88788695, VAT/BTW: NL864779379B01, registered address: Antillenstraat 28H, 1058HB, Amsterdam, The Netherlands).

TariniOS enables independent entrepreneurs and businesses to launch, operate, and scale their own branded storefronts, booking systems, product catalogues, payment flows, and digital services — all powered by Kookxtra's infrastructure.

Any reference to "TariniOS" in this Privacy Statement refers exclusively to the platform owned and operated by Kookxtra. TariniOS is not a separate legal entity. All legal rights, obligations, and responsibilities relating to personal data processing under TariniOS remain solely with Kookxtra as the registered legal entity and data controller.

2. Scope of this Section

This section applies to:

(a). all independent entrepreneurs, businesses, and service providers (referred to as "Entrepreneurs") who operate storefronts, booking systems, or digital services through the TariniOS platform; and

(b). all individuals or entities (referred to as "Customers") who visit, browse, purchase, book, or interact with any storefront, booking page, or service powered by TariniOS.

This section supplements the main Kookxtra Privacy Statement above and should be read together with it. Where this section conflicts with the main Privacy Statement, this section shall take precedence in matters relating to TariniOS.

3. Data Controller

For all personal data collected and processed through TariniOS-powered storefronts and services, Kookxtra acts as the data controller. Entrepreneurs operating on TariniOS act as data processors on behalf of Kookxtra for the purpose of fulfilling orders and services placed on their storefronts, and are contractually bound to process personal data strictly in accordance with this Privacy Statement and applicable GDPR obligations.

4. Personal Data Collected Through TariniOS Storefronts

When a Customer interacts with any TariniOS-powered storefront, Kookxtra may collect and process the following personal data through the platform infrastructure:

From Customers:

From Entrepreneurs:

5. Purposes and Legal Basis for Processing

Kookxtra processes personal data collected through TariniOS for the following purposes:

5.1 Order and Service Fulfilment

Personal data is processed to facilitate, confirm, and execute orders, bookings, and service agreements between Customers and Entrepreneurs. The legal basis is the performance of a contract as defined under GDPR.

5.2 Payment Processing

Personal data is processed to facilitate secure payment transactions through the TariniOS platform on behalf of Entrepreneurs. The legal basis is the performance of a contract as defined under GDPR.

5.3 Platform Operations and Account Management

Personal data is processed to manage Entrepreneur accounts, storefronts, and platform access, and to provide Customers with a consistent and functional platform experience. The legal basis is the performance of a contract and legitimate interest as defined under GDPR.

5.4 Customer Support

Personal data is processed to handle queries, complaints, and disputes raised by Customers or Entrepreneurs in connection with TariniOS-powered storefronts. The legal basis is the performance of a contract and legitimate interest as defined under GDPR.

5.5 Fraud Prevention and Platform Integrity

Personal data is processed to detect, prevent, and investigate fraudulent activity, misuse, or unauthorised access on the TariniOS platform. The legal basis is legitimate interest as defined under GDPR.

5.6 Legal and Regulatory Compliance

Personal data is processed where required to comply with applicable laws, regulations, tax obligations, and court orders. The legal basis is compliance with a legal obligation as defined under GDPR.

5.7 Platform Improvement and Analytics

Anonymised and aggregated data derived from TariniOS platform activity may be used to improve platform performance, features, and services. No personally identifiable information is included in such analysis.

6. Sharing of Personal Data

6.1 Between Kookxtra and Entrepreneurs

Kookxtra shares Customer personal data with the Entrepreneur operating the relevant TariniOS storefront solely for the purpose of fulfilling the order or service placed by the Customer. Entrepreneurs are contractually bound to use this data exclusively for fulfilment purposes and may not use it for off-platform marketing, solicitation, or any other purpose without explicit Customer consent and prior written approval from Kookxtra.

6.2 Between Entrepreneurs and Customers

Entrepreneurs may share relevant operational information with Customers in the course of fulfilling an order or service. Entrepreneurs are solely responsible for ensuring such sharing complies with GDPR and applicable data protection laws.

6.3 Third Party Service Providers

Kookxtra may share personal data with trusted third party service providers engaged to support TariniOS platform operations, including but not limited to payment processors, cloud infrastructure providers, customer support tools, and fraud prevention services. All such providers are contractually bound to process personal data in accordance with GDPR and Kookxtra's data protection standards.

6.4 Legal Obligations

Kookxtra may disclose personal data to law enforcement agencies, regulatory bodies, or government authorities where required by applicable law or court order.

7. Data Retention

Personal data collected through TariniOS-powered storefronts is retained only for as long as necessary to fulfil the purposes for which it was collected, including any applicable legal, tax, accounting, or regulatory retention requirements. Upon termination of an Entrepreneur's TariniOS account, personal data associated with that account will be retained for the legally required period and thereafter securely deleted or anonymised.

8. Entrepreneur Data Protection Obligations

Entrepreneurs operating on TariniOS are contractually bound to:

(a). process Customer personal data strictly in accordance with this Privacy Statement and applicable GDPR obligations;

(b). use Customer personal data solely for the purpose of fulfilling orders and services placed on their TariniOS storefront;

(c). not export, store externally, share, sell, or otherwise transfer Customer personal data outside the TariniOS platform without explicit Customer consent and prior written approval from Kookxtra;

(d). implement appropriate technical and organisational measures to protect Customer personal data against unauthorised access, loss, or misuse;

(e). notify Kookxtra immediately upon becoming aware of any personal data breach involving Customer data accessed through the TariniOS platform;

(f). comply with all applicable data protection laws in their country of operation;

(g). upon termination of their TariniOS access, immediately cease processing Customer personal data obtained through the platform and return or securely delete all such data as directed by Kookxtra.

Failure to comply with these obligations may result in immediate suspension or termination of TariniOS access and may expose the Entrepreneur to legal liability under applicable data protection law.

9. Customer Rights

Customers whose personal data is processed through TariniOS-powered storefronts retain all rights under applicable data protection law, including:

To exercise any of these rights in connection with a TariniOS-powered storefront, Customers may contact Kookxtra directly at info@kookxtra.com. Kookxtra will coordinate with the relevant Entrepreneur where necessary to fulfil the request.

10. Cookies

All cookie usage across TariniOS-powered storefronts is governed by Kookxtra's Cookies Policy, accessible at www.kookxtra.com. Entrepreneurs may not deploy additional tracking technologies or cookies on their TariniOS storefronts without prior written approval from Kookxtra.

11. Security

Kookxtra implements appropriate technical and organisational measures to protect personal data collected through TariniOS-powered storefronts against unauthorised access, loss, misuse, or disclosure. If you believe your personal data has not been adequately protected or you suspect misuse, please contact us at info@kookxtra.com.

12. Cross-Border Data Transfers

Personal data collected through TariniOS-powered storefronts may be transferred outside the European Economic Area where necessary for platform operations. Any such transfers are conducted in accordance with applicable GDPR safeguards including EC approved standard contractual clauses where required.

13. Contact

For any questions, requests, or complaints relating to the processing of personal data through TariniOS-powered storefronts, please contact:

Email: info@kookxtra.com

Website: www.kookxtra.com

Address: Antillenstraat 28H, 1058HB, Amsterdam, The Netherlands

Updates to this privacy Statement

We may update this privacy Statement from time to time in response to changing legal, technical or business developments. When we update our privacy Statement, we will take appropriate measures to inform you, consistent with the significance of the changes we make. Where required by applicable data protection law, we will obtain your consent to any material changes to this privacy Statement.

We encourage you to periodically review this Statement for the latest information on our privacy practices.