Privacy Policy

Privacy Policy

1. Introduction

1.1. Kab Kem Ltd., Company No. 515436129 (the “Company”) is the owner of the website:
https://www.kabkem.com/
and operates and manages the restaurant “Kab Kem” (the “Restaurant”), and is part of the “Bait Thai” restaurant group,
the private room “Kua Kun Lek” (the “Restaurants”), and the event venue “Carte Blanche”.

For the avoidance of doubt, wherever this Privacy Policy uses the term “Website”, it refers to all digital platforms
owned or controlled by the Company, including but not limited to landing pages, digital campaigns, digital forms,
social platforms, and any other digital interface operated, managed, or controlled by the Company, and/or the Company’s
phone and/or email, unless the context requires otherwise.

1.2. The purpose of this Privacy Policy is to explain how the Company operates in relation to information provided to it
by users in connection with their use of the Website (to the extent information is required to be provided on the Website),
including how the Company manages, collects, stores, and uses information provided by users through the Website, including
disclosure to third parties as detailed below (the “Users” and/or “User”). The Company places great importance on protecting
Users’ privacy and makes efforts to appropriately protect and safeguard its Users’ information and privacy.

1.3. In addition, the Company details in this Privacy Policy the Users’ rights regarding the information the Company collects
about them and the Users’ entitlements regarding information provided by them. The Company believes Users have the right to
know the Company’s policies and practices regarding the collection and use of information received from them and collected
about them in connection with their use of the Website.

1.4. Use of the Website is subject to the terms of use and/or regulations as detailed on the Website and this Privacy Policy.
This Privacy Policy supplements any other written and/or implied agreement between the User and the Company, adds to it without
detracting from it, and forms an integral part thereof.

1.5. The User has no legal obligation to provide information as part of using the Website. Providing information depends on the
User’s will and their full and free consent. The User may request that the Company delete and/or correct the information held
by the Company at any time, all in accordance with and subject to the provisions of Section 2.4 below.

1.6. By using the Website, the User consents to the terms of this Privacy Policy.

1.7. Subject to any applicable law, the Company may amend this Privacy Policy from time to time at its sole discretion without
prior notice, by updating the Privacy Policy published on the Website. Therefore, Users are advised to review the Privacy Policy
published on the Website periodically to keep informed of changes.

1.8. Where this Privacy Policy uses singular and/or masculine language, it is for convenience only and refers to all Users.

2. Information Collected

2.1. When a User uses the Website, the Company may collect two types of information from the User as detailed below, including
via external platforms (as defined below), for the purpose of providing the services offered on the Website:

1. 2.1.1. “Personal Information” – Identifying details such as first and last name, contact details (mobile number and email),
   residential address, and similar information (i.e., information that can be used to identify the User, contact the User, and provide
   the services offered on the Website in an optimal manner). Such information is provided knowingly by the User, with full consent
   (i.e., after active entry by the User), for the purpose of receiving the services offered on the Website and/or receiving information.

   Regarding the Restaurants’ loyalty/members club: in addition to the Personal Information above, information for joining the Restaurants’
   members club (for example, date of birth and wedding anniversary, for granting benefits that change from time to time in accordance with
   the members club terms; information regarding the User’s use of benefits as a member; purchase dates at the Restaurant, etc.).

2. 2.1.2. “Non-Personal Information” – Aggregated statistical information that cannot be used to identify or contact the User,
   including information about visits and use of the Website, such as referral source, length of visit, page views, and similar data.

   (Personal Information and Non-Personal Information together: the “Information”.)

2.2. Please note that information provided through the Website may, in practice, be provided to a third party during use of external
platforms (as defined below) embedded on the Website. In such cases, the information is stored via those external platforms and is held
by both the Company and the relevant external platform, subject to and in accordance with their privacy policies.

2.3. The User declares and undertakes that any information they provide, update, or upload through use of the Website is true, reliable,
and accurate, and that the User provides such information in their own name and for themselves only, and not on behalf of third parties,
except where duly and expressly authorized by law to provide such information for another.

2.4. If a User does not wish to provide information to the Company (and/or an external platform), or does not agree to the uses described
in this Privacy Policy, the User has no legal obligation to do so. However, since most of the information the Company collects (either
directly or via an external platform) is required to provide the services offered through the Website, if the User chooses not to provide
information or does not agree to the uses described herein, the User may not be able to receive the services described in the terms of use,
in whole or in part. In certain cases, the User may be able to choose what information to provide and which uses are permitted; in such a
case the Company will indicate the impact, if any, on the service provided.

3. How Information Is Collected

3.1. The Company may collect information about the User during the User’s use of the Website for the purpose of providing the services offered
on the Website (including via external platforms), including:

1. 3.1.1. Information the User provides directly to the Company:
   1. 3.1.1.1. Contact Us – The User will provide the Company with personal details via the Company’s email address and/or
      phone number listed in Section 11 below.
   2. 3.1.1.2. Registration to the Restaurants’ members club – The User will provide personal details through a dedicated form
      on the Website to join the Restaurants’ members club.
   3. 3.1.1.3. Table reservation and/or purchase of a gift voucher – The User will provide information required to make a reservation
      and/or purchase a gift voucher by clicking a dedicated link on the Website that automatically redirects the User to the requested service.
      External platforms may collect relevant details to provide such services, including payment details collected through an external payment
      processor in accordance with the required data security standard to ensure their protection, all subject to the external platforms’ privacy
      policies.
   4. 3.1.1.4. Private event – The User will provide information when contacting the group to request an event in the private room.
   5. 3.1.1.5. General – Any information provided by the User and/or received by the Company in connection with the User and their
      use of the Website and/or services, including information provided when contacting the Company for any reason, including via social networks,
      email, phone, WhatsApp, or any other communication method. The Company may request additional information from the User as needed to provide
      the services.
2. 3.1.2. Information collected automatically: During use of the Website, technical information and/or information regarding the User’s
   use of the Website may be collected automatically. The Company collects such information via logs, cookies, and similar technologies.

4. The Company’s Use of Information

4.1. Generally, the Company collects and uses the Information to contact the User and provide the services offered by the Company through the Website,
including sending service-related updates and/or for any other purpose required or permitted by law or described in this Privacy Policy.

4.2. In addition, the Company may use the Information (subject to applicable law, including the Communications Law provisions) to update Users regarding
special events, send newsletters, periodic updates, marketing offers, promotions, or services from the Company and/or third parties with whom the Company
has business cooperation (“Marketing Updates”).

4.3. In such cases, the Company may send Marketing Updates either directly or via external platforms. Marketing Updates will be sent only subject to the
User’s explicit consent, as required by the Communications Law. Subject to law, the User may withdraw consent to receive Marketing Updates at any time by
clicking an “Unsubscribe” link in the message or by contacting the Company using the contact details in Section 11 below.

4.4. The Company may use cookies for the proper and ongoing operation of the Website, including collecting statistical data about usage of the Website;
verifying details; adapting the Website to the User’s personal preferences; and for information security purposes.

4.5. The User can manage and delete cookies at any time through their browser settings, and can choose to block tracking technologies. However, blocking
certain cookies may impair the functionality of the Website or some of the services offered. Use of the Website constitutes consent to the use of cookies
and tracking technologies as described in this Privacy Policy, without detracting from the User’s right to manage preferences as stated above.

5. Permissions to Access the User’s Device

5.1. When using the Website, the User may be asked to approve access to certain permissions and/or services from a computer, tablet, mobile/smartphone,
or any other device, for the purpose of accessing the services offered on the Website.

5.2. Such permissions may include, among others, internet access, camera access, location services access, dialing access, microphone access, SMS access,
internal storage, and similar permissions.

5.3. The User is not obligated to approve such permissions (in whole or in part). For certain permissions required to provide services, the User may be
asked to provide explicit and specific approval via the operating system of the relevant device. The User may refuse and/or block any or all permissions,
however in such case the Company will not be able to provide some or all of the services offered on the Website.

5.4. The Company may send the User messages containing an authentication code to enable access to the Website and/or to any other external platform,
including for password recovery, and messages/updates relating to the User’s activity with the Company.

6. Collection and Use of Information via External Platforms (Data Processors for the Company)

6.1. As part of using the Website, some or all of the services offered on the Website, including reservation systems, online payment systems, direct-mail
systems, CRM systems, and other systems, may be provided via external online platforms operated by third-party service providers and embedded in the Website
(“External Platforms”). These External Platforms are integrated systems that the User reaches automatically by clicking a link on the Website. The External
Platforms provide the Company with solutions and services that complement or support the services offered on the Website.

6.2. For the purpose of providing services on the Website (all or part), External Platforms act as data processors and carry out collection, processing,
and storage of Information provided by Users through use of services on the Website, in accordance with the Company’s instructions and applicable law.

Transfer of Information to Third Parties

6.3. To provide services through External Platforms, the Company may share Personal Information with such External Platforms. Note that when receiving certain
services through an External Platform, the User provides information about themselves, including information about their payment method, which is transferred
directly to the External Platform in order to perform the services, including processing payment for the Company’s services. The Company is not a party to such
transfer, and the provision of the User’s information (including payment details) to External Platforms is made with the User’s consent and subject to the External
Platforms’ privacy policies. The User is responsible for reviewing the privacy policies of such External Platforms before providing their information.

6.4. In addition, the Company may transfer Information to analytics providers (such as Google Analytics) and advertising platforms (such as Pixel) and similar
technologies.

6.5. Some External Platform providers and/or those listed in Section 6.4 operate outside of Israel; therefore, Information may be transferred and stored on
servers abroad, subject to Israel’s Protection of Privacy Law and its regulations.

6.6. Under applicable law, Information provided to External Platforms is considered information transferred both to the Company and to those platforms; accordingly,
provision of Information is also subject to the privacy policies and terms of use of each External Platform.

6.7. Without derogating from the above, the Company does not transfer Personal Information to third parties for their independent use, except with the User’s
explicit prior consent or as required by law.

6.8. Without derogating from the above, the Company may transfer information about Users in the following cases:

1. 6.8.1. With the User’s consent to such transfer;
2. 6.8.2. As part of collaborations with the Company’s business partners, including the Restaurants’ companies;
3. 6.8.3. Where the Information is transferred to corporations holding ownership in the Company, including for supervision, management, and ongoing operations;
4. 6.8.4. To respond to User support or service requests;
5. 6.8.5. To enforce this Privacy Policy;
6. 6.8.6. To detect, prevent, or otherwise address misuse or security issues, as well as technical problems;
7. 6.8.7. To comply with any legal requirement;
8. 6.8.8. In the event the Company transfers and/or assigns its activity, rights, or obligations toward Users to a third party, including in the course of business
   negotiations, and in cases of transfer of the Company’s shares or substantially all of its assets, to the extent transfer of Information is required to perform such actions;
9. 6.8.9. Where the Information is statistical/aggregated information that does not directly identify Users.

7. Information Security

7.1. The Company invests efforts and resources to protect Users’ Information and implements appropriate security measures for the Information in its possession,
at an adequate level consistent with accepted industry standards and applicable law, and in accordance with the level of risk. This is intended to reduce the risks
of unauthorized access or intrusion into systems and possible harm to Users’ privacy in relation to their Information. However, complete protection against such risks
cannot be guaranteed, and the User is hereby informed that the Company will not be liable for any damage and/or loss, direct or indirect, of any kind, caused as a
result, including privacy infringement.

8. Data Retention Period

8.1. The Company will retain Users’ Information for as long as necessary to fulfill the purposes for which it was collected, as detailed in this Privacy Policy, or for the
period required by law.

8.2. After the above period ends, Personal Information will be deleted or retained in an anonymous form so that the User cannot be identified, unless there is a genuine
additional need to retain the Information or a legal obligation to do so.

9. Right to Access and Modify Information

9.1. Under Israel’s Protection of Privacy Law, Users have the following rights:

1. 9.1.1. Right of access – to review Personal Information about the User held in the Company’s databases.
2. 9.1.2. Right to information – to receive information from the Company regarding how the User’s Personal Information is used, including the purposes
   of use, the identity of parties that received the Information, and the retention period.
3. 9.1.3. Right to correction – to correct inaccurate, incomplete, or outdated information about the User.
4. 9.1.4. Right to deletion – to request deletion of the User’s Personal Information, as required by law.
5. 9.1.5. Right to object – to object at any time to use of the Information for direct marketing.
6. 9.1.6. Right to restrict processing – to request that the Company restrict processing of the User’s Personal Information in certain cases, such as
   where the accuracy of the Information is being verified or where there is an objection to its use.
7. 9.1.7. Right to data portability – to request receiving the Personal Information provided by the User to the Company in a structured, commonly used,
   and machine-readable format, and to request transfer of such data to another party.

9.2. Requests on these matters and/or any matter related to this Privacy Policy should be sent to the Company using the contact details below. The Company will
respond within a reasonable time.

10. Children’s Information

10.1. The Company does not knowingly collect Personal Information from Users under the age of 16 and does not wish to process or retain information relating to such children.

10.2. If the Company becomes aware that Personal Information of a child under the age of 16 has been collected, the Company will act to delete such information as soon as possible.

11. Contact

11.1. You may contact the Company regarding this Privacy Policy by email: itamarisraeli@gmail.com
and/or by phone: 052-436-4466.

12. Governing Law and Jurisdiction

12.1. The governing law for and in connection with this Privacy Policy and use of the Website is Israeli law only. Exclusive jurisdiction in connection with this
Privacy Policy and the Website terms of use is granted to the competent court in Tel Aviv–Yafo only.

Last update: [November 2025]