1. Introduction

WDI International, Inc. ("WDI," "we," "us," or "our") values your privacy. This Privacy Policy ("Policy") describes what Personal Information we collect, why we collect it, how we use and protect it, and your rights regarding that information.

This Policy applies to the WDI Restaurants website at https://www.wdi.co.jp/en/restaurants, our associated mobile and other applications, any online reservations or food orders you make through our Site or restaurants, and any other services we offer (collectively, the "Services"). "You" or "Your" refers to a user of our Site or Services.

By accessing or using the Site or Services, you consent to the practices described in this Policy and the applicable Terms and Conditions. Please note that you must be a U.S. resident to register for an account or participate in any of our loyalty or membership programs.

2. Who Collects Your Information

The Site is operated by vendors of WDI International, Inc., which acts as the controller for all Personal Information collected through the Site and Services and at our restaurants. This Policy applies only to the Site, Services, and our restaurants.

3. Information We Collect

Information You Provide Directly

We collect Personal Information you choose to share with us, including when you:

• Make a reservation at one of our restaurants;

• Register for email or marketing communications;

• Sign up for or use any of our loyalty or membership programs;

• Place an online order for food, gift cards, or merchandise through our Site, App, or Services;

• Engage in promotions, contests, sweepstakes, or giveaways;

• Apply for a job at one of our locations (including your name, contact information, and resume); or

• Contact us with inquiries or complaints.

We also collect transaction information related to your activity at our restaurants ("Transaction Information") for marketing, promotions, and to develop and improve our products and services.

Information Collected Automatically

We and our Service Providers automatically collect certain information when you use our Site or Services, including:

• Domain name, browser type, and operating system;

• Web pages viewed, links clicked, and referring URLs;

• IP address and mobile device ID;

• Length and time of your visit; and

• General usage patterns (collectively, "Usage Data").

We may combine Usage Data with other Personal Information we hold about you.

Geolocation

If you grant permission through your mobile device, we may collect precise location information (latitude/longitude) via GPS, Wi-Fi, or cell tower proximity. You may withdraw this permission at any time through your device settings. Contact your device manufacturer or service provider for assistance with disabling location services.

4. Cookies and Other Tracking Technologies

We and our Service Providers use cookies, web beacons, and other tracking mechanisms to understand how you use our Site and Services. Cookies are used only when you are asked to select a location or log in to our Site.

Currently, our systems do not respond to browser "Do Not Track" signals. However, you may opt out of certain tracking using the controls described below.

Session Cookies Session cookies exist only while your browser is open. We use them to recognize you during a single visit, process transactions, and verify your identity as you navigate the Site.

Persistent Cookies Persistent cookies remain after you close your browser. We use them to track aggregate and statistical usage information.

Disabling Cookies You can configure your browser to block or delete cookies. Note that disabling cookies may prevent you from accessing certain areas of the Site or using some Services.

Third-Party Analytics We may use third-party analytics tools, such as Google Analytics, to evaluate use of our Site and Services. These providers may use cookies and similar technologies. We do not share your Personal Information with analytics providers unless you have consented. To opt out of Google Analytics data collection, visit: https://tools.google.com/dlpage/gaoptout.

5. How We Use Your Information

We use your Personal Information for the following business purposes:

• To provide our Site and Services, process reservations, fulfill online food orders, respond to inquiries, and address customer service needs;

• To personalize your experience, including location-based customization and relevant content;

• To send marketing communications, newsletters, special offers, and promotions (where you have opted in or as otherwise permitted by law);

• To conduct promotions, sweepstakes, contests, and giveaways;

• To process job applications;

• To analyze usage patterns and improve our Site, Services, and customer experiences; and

• To advertise our Site and Services on third-party platforms using information we have collected.

6. How We Share Your Information

We do not sell your Personal Information. We may share your Personal Information in the following limited circumstances:

Affiliates We may share Personal Information with our affiliated restaurant entities. Any such affiliate will maintain your information in accordance with this Policy.

Service Providers We may share Personal Information with third-party vendors, contractors, or agents ("Service Providers") who perform functions on our behalf, including hosting, data storage, property management, and marketing. Service Providers are contractually required to use your information only as directed by WDI and to maintain appropriate security safeguards. We disclose only the information necessary for them to perform their services.

Business Transfers In connection with a merger, acquisition, sale of assets, or bankruptcy proceeding, we may transfer your Personal Information to the relevant party or their advisors. We will notify you of any such change in ownership or control that materially affects your Personal Information.

Legal Requirements We may disclose Personal Information to comply with applicable law, judicial proceedings, court orders, or legal process (e.g., in response to a subpoena or regulatory request).

Protection of Rights We may disclose Personal Information where necessary to investigate or prevent illegal activity, suspected fraud, safety threats, Terms and Conditions violations, or for use in litigation.

Aggregate and De-Identified Information We may share aggregated or de-identified data (which cannot reasonably be used to identify you) with third parties for marketing, research, or analytical purposes.

7. Online Food Ordering

When you place an online food order through our Site, App, or Services, we collect your name, delivery or pickup address, contact information, payment card details, and order history. This information is used to process and fulfill your order, communicate order status, and improve our ordering experience. Payment card data is processed by our PCI-DSS-compliant payment processors and is not stored on our servers beyond what is required by law.

8. Retention of Personal Information

We retain Personal Information for as long as necessary to fulfill the purposes for which it was collected, including for the duration of any contractual relationship or your registration with our Services, and thereafter as required or permitted by applicable law. Our retention practices comply with applicable statute of limitations periods and legal requirements.

9. Security

We maintain physical, technical, and administrative safeguards designed to protect your Personal Information from unauthorized access, use, or disclosure. However, no transmission over the Internet can be guaranteed to be 100% secure. You transmit information to us at your own risk. You are responsible for maintaining the confidentiality of any login credentials associated with your account and should use strong, unique passwords.

10. Links to Third-Party Websites

Our Site and Services may contain links to third-party websites. We do not endorse or control those sites and are not responsible for their privacy or security practices. You access third-party sites at your own risk and should review their privacy policies before providing any Personal Information.

11. Children's Privacy

Our Site and Services are directed to individuals 18 years of age and older. We do not knowingly collect Personal Information from children under the age of 13 (or under 16 where required by applicable law). If you believe we have inadvertently collected information from a child under 13, please contact us immediately as described in Section 14. Parents may mark their inquiry "COPPA Information Request."

12. Processing in the United States

All Personal Information we collect is stored and processed in the United States. If you are located outside the United States, please be aware that U.S. privacy laws may differ from those in your jurisdiction. By using the Site or Services, you consent to the transfer, processing, and storage of your Personal Information in the United States.

13. Your Privacy Rights by Jurisdiction

Depending on where you live, you may have certain rights regarding your Personal Information. We will not deny you goods or services, or charge you different prices, solely because you exercise your privacy rights.

A. California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of Personal Information we have collected about you in the past 12 months.

• Right to Delete: Request deletion of Personal Information we have collected from you, subject to certain exceptions.

• Right to Correct: Request correction of inaccurate Personal Information we hold about you.

• Right to Opt-Out of Sale or Sharing: We do not sell your Personal Information as defined under the CCPA/CPRA. If this changes, we will update this Policy and provide an opt-out mechanism.

• Right to Limit Use of Sensitive Personal Information: You may request that we limit our use of sensitive Personal Information to purposes reasonably necessary to provide our Services.

• Right of Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To submit a verifiable request, contact us by email at info@wdiusa.com or by phone at (310) 533-3201. We may need to verify your identity before processing your request. You may designate an authorized agent to submit requests on your behalf.

We will acknowledge your request within 10 business days and respond within 45 days (extendable by an additional 45 days with notice). You may make up to two requests per 12-month period.

B. Other U.S. State Residents

Residents of Virginia, Colorado, Connecticut, Texas, Florida, Nevada, Montana, Iowa, Indiana, Tennessee, Oregon, Delaware, New Hampshire, New Jersey, Nebraska, Maryland, Minnesota, Rhode Island, Kentucky, and other states with comprehensive privacy laws may have similar rights, including rights to access, correct, delete, and opt out of certain processing of their Personal Information. Please contact us using the details in Section 15 to submit a request. We will respond in accordance with applicable law.

C. European Economic Area and UK Residents

Our Site and Services are not directed at individuals in the EEA or UK, and we do not accept registrations from EEA or UK residents. If you believe we have collected your Personal Information in connection with the EEA or UK, please contact us at the details in Section 15.

[LEGAL NOTE: If WDI actively serves EEA/UK customers, a full GDPR/UK GDPR compliance review will be required.]

14. Managing Your Information

You may request to review, correct, update, or delete the Personal Information you have provided to us by contacting us at the number or email listed in Section 15. We will respond within the timeframe required by applicable law, or within 30 days if no specific timeframe applies.

To opt out of marketing emails, click the unsubscribe link in any marketing email we send you.

15. How to Contact Us

For privacy-related questions, requests, or complaints, please contact our Restaurant Support Center:

Phone: (310) 533-3201 Email: info@wdiusa.com

Please include your name, mailing address, and phone number or email address in all communications and clearly state the nature of your request. We will investigate and attempt to resolve complaints within 30 days of receipt, unless a shorter period is required by law.

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated Policy on our Site and update the effective date. Material changes will be communicated to you via email or prominent notice on our Site. Your continued use of the Site or Services after the effective date of any update constitutes your acceptance of the revised Policy.