Taobao Basic Function Privacy Policy (Overseas Version)
Publication Date：30 July 2024
Welcome to Taobao! As Taobao service providers (as defined in the Appendix below), we attach great importance to your personal information, and your trust is very important to us. In handling your personal data, we will strictly abide by applicablelaws and regulations, including taking security protection measures to ensure that your personal information is safe.
If you are using Taobao products or services outside the mainland of China, please carefully read this “Taobao Basic Function Privacy Policy (Overseas Version)” (hereinafter referred to as ‘this policy’ or ‘Privacy Policy’) before using our services. This Privacy Policy is a special note to the “Taobao Basic Function Privacy Policy (淘宝网基本功能隐私政策)” (provided only in Chinese version).
Before using our products and services, please ensure that you have carefully read and understood this policy, especially the terms marked in bold and /or underline. If you have any questions, comments or suggestions about this policy, you can contact us through the contact information at the end of this policy.
If you are below 14 years of age, please read <Children’s Personal Information Protection Rules and Guardians Instructions> and obtain the consent of your parent or legal guardian before consenting to this privacy policy.
Your consent to this privacy policy represents that you have acknowledged and understood the basic functions provided by our products and services as well as the necessary personal information required for the operation of the basic functions, and that you have given the corresponding authorization on the collection and use of your personal information. However, your consent to this privacy policy does not represent your consent to enable additional functions, under which circumstances we will ask for your separate consent for additional functions based on your actual usage. Your usage of the basic functions will not be affected if you refuse to enable additional features or if you refuse to consent to our collection of personal information which are not necessary to provide you with our products and services.
This Privacy Policy contains the following:
I. Scope of Application
II. Collection and Use of Information
III. Partners Involved in the Use of Data and the Transfer or Disclosure of Personal Information
IV. Your Rights
V. Retention and Transfer of Information
VI. Update of Privacy Policy
VII. Minor Protection
VIII. Contact Us
Appendix: Relevant Definitions
I. Scope of Application
This policy applies to all online shopping products and services related to overseas service functions provided by Taobao service providers through websites, clients, applets and new forms that may emerge as technology evolves.
If you choose to use the overseas service functions provided by us, including but not limited to Taobao cross-border e-commerce performance, marketing promotion, interactive games and other services, we will identify whether this policy applies to you through various methods (including but not limited to registration or login into Taobao by using a overseas mobile phone number, email address or third-party account, this policy shall apply).
II. Collection and Use of Information
To enable us to provide you with the basic functions of our products and/or services, you must authorize us to collect and use the necessary information. If you refuse to provide the corresponding information, you will not be able to enjoy our products and/or services.
The specific functional scenarios we will provide you include:
(1) To help you become our user and account management
1. Taobao Account Service
We provide services for you based on Taobao account. In order to create a Taobao account, you must provide your mobile phone number or email account. If you refuse to provide the above information, you will not be able to register a Taobao account, and you can only use browsing and searching services. You can also use third-party accounts (subject to the real-time actual display of the page) for authorized login on Taobao. We may collect your third-party account name, email address and avatar from the above third parties.
You can use the products or services provided by us and/or our affiliates through the Taobao account at the link portal or other product/service portal provided though our websites or clients. In order to facilitate your management of Taobao account, we will synchronize and display your registration information in Taobao account service and your operations on Taobao platform or products and services associated with Taobao account, including centralized display of your personal information, preferential rights and interests, and transaction orders through Taobao account. The above information associated with your Taobao account will be used to provide you with customer services, identify your account’s security risks and recommend information about goods or services that you may be interested in (if you do not turn off the personalized recommendation function of in the Taobao Privacy Centre under [Recommendation management]).
You can set your own Taobao nickname, gender and avatar, which will be publicly displayed in comments, shares and other interactive scenarios. In some countries or regions where we will allow you to set your own date of birth, Taobao may display birthday-related rights and interests based on the date of birth that you provide. Such information is unnecessary personal information, if you do not provide the aforementioned information, your use of Taobao platform services will not be affected.
2. Authorized Login
If you need, we may provide your account information (avatar, Taobao nickname and other information prompted on the page) to the third party to help you easily register the third-party account or log in directly though the third party. In addition, we may obtain your third-party account information from a third party and associate it with your Taobao account, so that you can directly log in through the third-party account and use our products and/or services.
3. Authentication
In order to comply with relevant legal and regulatory requirements, ensure the authenticity of user identity, achieve risk control such as anti-fraud and ensure the security of systems and services, we will collect your relevant information for identity verification when you use specific services/functions based on your separate consent.
(2) Display Information About Goods or Services
1. Browse
On Taobao platform, you can collect/subscribe/add/follow/share/like the products, shops, channels, content (and content creators) that you are interested in, and we will collect your operation records for the above functions and other purposes that we have clearly informed.
You can view and manage your operation record information through [Account]-[Wishlist]/[Following]/[History].
2. Search
When you use the search function (including picture and voice search), we will collect your search history, including search content (search keyword, picture, voice information), browsing history/time, search time/volume, and request your microphone permissions, camera permissions, or pictures permissions based on actual needs of the function that you use.
In order to provide efficient search services, some of the above information will be temporarily stored on your local device, and the search history will be displayed.
3. Personalized Recommendation
In order to display and recommend information of the goods or service that you may be interested in, we will collect and use your browsing, search, add to cart and transaction records when you visit or use Taobao platform websites or clients, and predict your preference through algorithm models with legally collected equipment information, service log information and other information you authorized. We will push commercial advertisements (only in some regions) and other commercial information that you may be interested in through Taobao and other third-party applications, terminals or through SMS, email or other forms based on your consent and preference features. Based on the statistical analysis of the hot spots and trends of your browsing and searching for goods or services, we will use the selection sort algorithm to generate relevant selected lists and recommend them to you.
Personalized recommendation and search algorithms predict your preferences based on the model, match the goods, services or other information that you may be interested in, and sort the goods, services or other information displayed to you. We provide real-time feedback on the recommendation model based on your browsing behaviour during your use, and continuously adjust and optimize the recommendation results. In order to satisfy your various needs, we will introduce diversified recommendation technologies in the sorting process to expand the content of the recommendation and avoid excessive concentration of the same type of content.
At the same time, we try to ensure your privacy experience through the following measures:
1. If you do not want to receive the advertisement or commercial information we send to you, you can unsubscribe or turn off through SMS, email or phone call or through our customer service and other methods we provide;
2. If you do not want to see the goods or services we recommend to you on the home page or on the payment complete page, you can choose to block the category of similar goods or goods or services in the pop-up window that appears later by long pressing the picture of the recommended goods or services;
3. If you want to cancel the personalized recommendations, you can set it in [Account] - [Settings] - [Privacy] - [Recommendation management].
(3) Help You Complete the Transaction
1. Shopping Cart
When you use the shopping cart function, we will collect your add to cart information on the goods, and use your order information to improve your shopping experience (for example, to remind you of price reduction/discount, to filter your frequently purchased goods, to recommend sharing links, etc.).
2. Order Placing and Order Management
When you order specific goods and/or services in our products and/or services, we will generate your order on the goods and/or services through the system. In the process of placing an order, you need to provide at least the consignee's full name, delivery address and delivery phone number, for special types of goods and services, you also need to provide other information necessary for the goods or services, for example, information related for cross-border transactions such as your ID information to complete customs clearance (if required). You can also fill in/select additional information including other contact numbers and delivery time to ensure accurate delivery of goods or services. If you need to issue an invoice, according to relevant tax-related laws, regulations and regulatory requirements, etc., you may also be required to provide the invoice title (if required), the taxpayer identification number (if required), email address to receive the invoice and other necessary buyer information. In providing us with the personal data of any third parties, you represent and warrant that you have obtained all necessary consent to do so.
At the same time, the order will contain information about the goods and/or services you purchased, the specific order number, the time when the order was created, the promotional offers you have used, the payable amount and your notes. We collect the aforementioned information to help you successfully complete the transaction, ensure the transaction security, facilitate your inquiry of order information, provide customer service and after-sales service, carry out tax declaration regarding reconciliation and preferential information (if required) and other purposes we clearly inform.
You can order goods and/or services for others through Taobao, you need to provide the aforementioned personal information of the actual consignee and ensure that the consent of the actual consignee has been obtained.
In order to facilitate your understanding, query and management of the order information, we will collect the order information generated through your use of our services to display and facilitate your order management.
You can view and manage your order information through [Account] - [My orders].
3. Payment and Delivery of Goods or Services
When you purchase goods or services, in order to help you complete or complete the order payment on behalf of others, and smoothly collect the purchased goods or services, we or the third party that provides the service will collect your order information and delivery information. For details, please refer to "III. Partners Involved in the Use of Data and the Transfer and Disclosure of Personal Information-(1) Partners Involved in the Use of Data -5. Scenarios Where We Disclose Your Personal Information to Out Partners -(1) To Achieve Business Functions-A. Payment Services/B. Logistics Services" in this Policy.
(4) Provide you with Information Dissemination Function
1. Review and Comments
When you review on the traded goods and/or services, we will collect and display your review and shared content (including your posted text, pictures, and videos), avatar, and nickname on the store page such as the store "Product Review" list and/or the public page such as Taobao homepage. If you choose to comment anonymously, your avatar, nickname and the comment content will not be displayed on the public page. When you reply to the comments and content posted by other users, your avatar, nickname and comment content will be publicly displayed.
2. Personal Homepage
In some countries or regions, we provide you with the function of personal homepage. If applicable, you can display your avatar, nickname, posted content and related interactive information (followers, followings, comments/likes, reviews, questions and answers, collections) on your personal homepage, other users can search for your Taobao nickname or view your personal homepage (you can turn this off through [Account]-[Settings]). You can click on the avatar in the upper right corner of [Account] to enter [Personal information] to view and manage your personal data, posted information/content and the privacy settings of the personal homepage. Whether the personal homepage function is enabled or not is subject to your Taobao page function display.
Please note that your use of the information posting function may involve your or others personal information or even sensitive personal information. Please consider carefully whether to share or even publicly share relevant information when using our services. If your publicly posted information involves others personal information, you need to obtain the consent of others before posting.
(5) Notification and Interactive Communication
1. Message Notification
During our operation, we may send you one or more types of notifications at the same time, through the contact information (such as contact number and contact email) you provided during the use of products and/or services, such as service notification, identity verification, security verification, user experience research, etc. We may also send you commercial information on services, functions or activities that you may be interested in and other information regarding products or services through SMS and pop-up window push. If you do not want to receive our commercial information and other information regarding goods or services, you can unsubscribe or turn off through the unsubscribe methods provided in SMS, phone calls and emails or through our customer service. If you want to turn off the pop-up window information push, you can turn on/off the Taobao notification permission in the [Settings] of your device, or set the message notification through [Account]-[Settings]-[Notification settings], or turn off through the [Skip] button or related buttons on the pop-up page.
In addition, when you initiate customer service consultation or make transactions and interactions with the store (such as subscribe and join store membership), you will receive the store's customer service message in [Messages], and you can enter the chat page of the corresponding store for non-disturbing settings.
2. Campaign Participation
When you participate in our activities, we may need to collect and use your relevant personal information (including but not limited to your nickname, avatar, contact information, delivery information, order information, history, account level) to help you register, participate, enjoy the rights and interests of the campaign, etc., please pay attention to the specific scope of personal information collection and use that is separately informed to you in the relevant scenarios, and participate in the corresponding campaigns after consent.
If the relevant campaigns are jointly organized by us and our affiliates or a third party, we will share necessary information with the affiliate or the third party after obtaining your consent, or associate your Taobao account with the account of our affiliates or the third party, and/or synchronize your account, participation progress, specific rights and interests and other information among multiple platforms that participate in the campaign, to ensure you consistent and complete service during the campaign.
3. Sharing Interaction
When you share or receive shared information or participate in campaigns, we will read your clipboard content to judge whether there are relevant passwords, sharing codes and links, so as to enable functions or services such as redirecting, sharing and campaign linking. However, we will upload the clipboard content to our server only when we identify locally that it belongs to Taobao's instructions such as redirecting, sharing and campaign linking, other information on your clipboard will not be collected or stored. At the same time, we may need to read your mobile photo album so that you can share or receive shared pictures or videos.
4. Live Stream Interaction
In some countries or regions, we provide you with live stream function, when you choose to watch the live stream, your nickname, avatar and interactive information in the live stream (such as comments, likes, rewards, gifts, fan levels, etc.) will be publicly displayed in the live stream. At the same time, we will collect your interactive information to form statistical data (such as lists, popularity, etc.) in the live stream and publicly display them. Please see specific Taobao page on whether live stream and its interactive function are enabled.
5. Instant Messaging Tool
If you choose to use the Instant Messaging (“IM”) tool on Taobao, your personal data will be processed in accordance with Taobao’s IM tool policy which is available at <Users Notice of Taobao Instant Messaging Tools>.
(6) Customer Service and Dispute Resolution
When you contact us or submit applications for sale, after-sale and dispute resolution, we need you to provide the necessary personal information to verify your identity in order to protect your account and system safety.
In order to contact you, help you solve the problem as soon as possible or record the solution and result of the problem, we may save communication/call records and related contents (including account information, order information and other information you provide to prove the relevant facts, or the contact information you provide) between you and us. If you make inquiries, complaints or suggestions for specific orders, your account information and order information will be used.
In order to provide services and improve service quality, we may also use your other information, including the information you provide when you contact customer service, and the questionnaire response information you send us when you participate in the questionnaire survey.
We will use deep learning technology to provide you with intelligent Q & A dialogue, intelligent voice customer services. The communication, SMS/phone call records and related content between you and us are de-identified and used for intelligent customer service algorithm model training. During your intelligent customer service, we will give you significant tips. We will continuously improve the service quality of intelligent customer service based on your using record of intelligent customer service.
(7) Security Assurance
We are committed to providing you with a secure and trusted e-commerce trading environment. In order to ensure the order and security of e-commerce transactions, prevent and control telecommunications network fraud, maintain the normal and stable operation of the network, prevent illegal and criminal activities on the network, effectively deal with network security incidents, protect your, other users’ and the public’s personal and property safety from infringement, and more accurately identify violations of laws and regulations or relevant Taobao agreements and rules, we will collect your device identifier (Android ID), variable identifier (IDFA, IDFV, OAID, GAID), application information (application crash information, notification switch status, the running process of this App and other information related to this App), device parameters and system information (device type, device model, operating system and hardware related information), device network environment information IP address, WLAN(Wi-Fi) network protocol configuration excluding WLAN(Wi-Fi) Mac information, Bluetooth information, device sensor information and other network-related information], operator information, and broadcast component communication information. In order to prevent phishing websites, fraud, network attacks and network intrusion risks, we only process software installation information locally on the device and will not upload it to the server.
We may use your above information, Taobao account information, service log information, and information that our affiliates and partners have obtained your authorization or can provide to us in accordance with the law to determine account security, transaction security, identity verification, identify violations of laws and regulations, detect and prevent security incidents, and take necessary recording, analysis, and disposal measures in accordance with the law.
(8) Other Additional Services Provided to You
1. Additional Services Based on System Permissions
We may collect and use your personal information in the basic functions we provide to you by requiring you to turn on certain system permissions on your device. For example, in order to enable relevant products or service functions, we will ask for your location permissions and collect your location information when you want to quickly fill in the delivery address, recommendation information regarding nearby goods or services or logistics pick-up/delivery points, help you add locations in your posted information and use member code products. If you refuse to turn off the relevant permissions, it will not affect your use of Taobao's basic services, but we will no longer continue to collect and use relevant personal information based on the corresponding permissions. You can view and manage the status of the above permissions item by item in [Settings] of your device or [Account] - [Settings] - [Privacy]- [System permission management] in our client, and you can decide whether to turn on or turn off these permissions any time. Your decision to turn off the permission will not affect the previous information collection and use based on your authorization.
2. Cookies and Similar Technology Services
Cookies and similar device information identification technologies are commonly used on the Internet. When you use our services, we may use relevant technologies to send one or more cookies or anonymous identifiers (hereinafter referred to as "Cookies") to your device to collect, identify and store information when you visit and use this product, such as your IP address when you log in, and your browsing history and operations such as pulling down and clicking on specific pages. We do not use Cookies for any purpose other than the purposes described in this Privacy Policy. We use Cookies mainly to ensure safe and efficient operation of products and services, so that we can confirm the security status of your account and transactions, check the abnormal situation of crash and delay, and help you save repetitive steps and processes of filling out the form and entering the search content.
At the same time, we may use Cookies to display information or features that you may be interested in and improve your selection of advertisements. Most browsers provide users with the function of erasing the browser cache data, you can operate on corresponding data erasing, modify the level of acceptance of Cookies or reject our Cookies. Because of these modifications, you may not be able to use the services or corresponding functions that depend on Cookies.
(9) Other Rules for Collection and Use of Personal Information
If the information you provide contains personal information of other users, you must ensure that you have obtained legal authorization before providing such personal information to Taobao.
If we use the information for other purposes not specified in this policy, or use the information collected for a specific purpose for other purposes, we will obtain your consent in advance.
Under the premise that such data is processed by secure encryption technology and is strictly de-identified, we may use the collected data for machine learning, algorithm model training or other data analysis and mining processing to better protect our product experience, assist business decision analysis, and model optimization.
III. Partners Involved in the Use of Data and the Transfer and Disclosure of Personal Information
(1) Partners Involved in the Use of Data
1. Basic Principles
When working with partners, we will adhere to the following principles:
(1) Principle of Legitimacy, Minimality and Necessary: data processing should have a legal basis, have a legitimate purpose, and be limited to the minimum scope to achieve the purpose of processing.
(2) Principle of Maximizing Users' Right to Know and Decision-Making: in the process of data processing, users shall have the right to know and decide on the processing of their personal information.
(3) Principle of the Most Enhanced Security Assurance: we will take necessary measures to ensure the security of the personal information processed, carefully evaluate the purpose of the data used by partners, conduct comprehensive assessment on security assurance capabilities of these partners, and require them to comply with the relevant requirements of the cooperation agreement.
2. Scope of Partners
Partners include our affiliates and third parties and you can click here to view the description of data partners on Taobao Platform.
3. Partners Who Are Data Processors
We may entrust authorized partners to act as data processors with regard to the processing of your personal information in order to authorize them to provide you with certain services or perform certain functions on our behalf. We will only entrust them to process your information for the legitimate, justifiable, necessary, specific and clear purposes stated in this policy. Authorized partners can only access the information they require to perform their duties, and we will require them, through agreements, to not to use this information for any other purpose beyond the scope of entrustment. If the authorized partner uses your information for purposes not entrusted to us, it will obtain your consent separately.
4. Partners Who are Joint Controllers with Us
For the scenario where there is joint processing of personal information and the partners are joint controllers of your personal information together with us, we will sign relevant agreements with our partners in accordance with the law and agree on their respective rights and obligations to ensure that the use of relevant personal information complies with the relevant provisions of the law and protects data security.
5. Scenarios Where We Disclose Your Personal Information to Our Partners
(1) To Achieve Business Functions
A. Payment Services
In order to complete order payment, you need to associate the Alipay account and select the payment method. We will collect your Taobao Account name, corresponding Alipay account name, payment related information, order security related equipment information and other necessary information required by anti-money laundering laws during your use of payment services, and share it with Alipay through the Alipay software development kit embedded in the website or client (the software tool development kit is referred to as "SDK" in this policy) and other security methods. If you choose to provide payment services for you by other financial institutions or other third-party payment tools, the payment institution may also collect or verify your bank card (including debit card and credit card) information and other necessary payment information by itself or by entrusting us. If the aforementioned information is collected by us, it will be shared with the corresponding payment institution you choose.
You can ask others to pay for your order, under which circumstance you need to provide payer's Alipay account and/or mobile phone number. In order to acknowledge and confirm your payment progress and status in a timely manner and provide you with after-sales services and dispute resolution services, you agree that we can collect payment progress related information from the transaction object you select, Alipay Company or other financial institutions you choose. You can view the Alipay account information associated to your Taobao account or apply to change the associated Alipay account.
B. Logistics Services
In order to ensure the smooth, safe and accurate delivery and provision of the goods and/or services you purchase, we will disclose the distribution information related to the order to Zhejiang Cainiao Supply Chain Management Co., Ltd. and Zhejiang Speed Chain International Supply Chain Management Co., Ltd., which provide logistics information systems and technical services for Taobao platform, and synchronize the distribution information to the corresponding logistics distribution subjects according to the selection of the provider of goods and/or services. You understand and agree that the corresponding logistics distribution entities will be inevitably informed and use your distribution information for the purpose of completing the delivery.
In order to provide you with after-sales services and dispute resolution services, we need to acknowledge and confirm the delivery progress and status in a timely manner. You agree that we may collect information related to the delivery progress from the logistics-related service entities.
C. Channel (Applet) Services
When you use the channel (applet) service, we will collect and use your channel login, browse, use, subscribe/add/cancel and other operation records according to your operation situation, so as to provide you with more convenient, high-quality and personalized channel services and content. In order to facilitate your use of products and/or services provided by our partners on Taobao through your Taobao account, our partners [usually developers of relevant channels (applets)] will use your personal information such as your nickname and avatar related information authorized by you.
D. Translation
We provide translation functions to buyers and sellers who use different languages through third-party translation technology service providers that cooperate with the platform. If you choose to use the above translation function, you agree to and authorize the platform to obtain the content (which may include your personal information) you enter (provided) in instant messaging tools and comments, and provide the information to the above-mentioned translation technology service provider, entrusting them to translate the above content into a language recognizable to buyers and sellers, including but not limited to Chinese and English, to assist buyers and sellers in completing cross-border transaction and optimize your shopping experience. For more details <Users Notice of Taobao Instant Messaging Tools>.
(2) Advertising and Analytics Services
We may engage partners to process information related to advertising and the coverage, effectiveness and accuracy of advertising while ensuring compliance with industry standard security measures. For example, based on the purpose of customizing the content you see when you visit our platform, as well as the purpose of analysis and/or advertising, we may provide your user ID and some behaviour data (such as your collection, purchase, browsing and other data) to the above authorized partners within the scope of legality and necessity, such partners may combine the above information with other data that they have lawfully obtained to perform advertising services or decision-making recommendations entrusted by us.
(3) Safety and Statistical Analysis
A. Guarantee the Safety of Use: we attach great importance to the safety of products and/or services. In order to protect the legitimate rights and interests of users from illegal infringement, the partners we entrust to deal with may use the necessary equipment, account number and log information that are strictly de-identified and cannot be identified to specific individuals.
B. Analyse Products and/or Services: in order to analyze the stability of products and/or services, the partner providing the analysis service may need information such as service usage, device identification information and overall application installation usage.
C. Academic Research: In order to enhance scientific research capabilities in related fields and promote the level of scientific and technological development, we may use de-identified or anonymized data with partners (such as scientific research institutes, universities, etc.) under the premise of ensuring data security and with proper purpose.
(4) Other Scenarios
In addition to the above scenarios, we may also entrust information to other partners who cooperate with Taobao, including providing technical infrastructure services, analyzing the use of our services, providing merchant membership services or other customer services.
In order to ensure the stable operation and function of our client for you to use and enjoy more services and functions, our application will be embedded with the SDK of an authorized partner or other similar application programs. For example, the third-party telecom operator you use will independently collect and process your information, including your mobile phone number, network status, mobile device information, etc., by embedding the SDK, to verify identity and avoid fraud. We will conduct strict security checks on the application program interface (API) and SDK through which the authorized partner obtains the relevant information, and make agreement with the authorized partner on strict data protection measures to process personal information in accordance with this policy and any other relevant confidentiality and security measures, except where the authorized partner separately obtains your consent.
You can view the details of the SDK we have accessed by clicking on the <Third-Party SDK Information Collection and Use Statement>.
(I) Transfer
If we need to transfer personal information due to merger, separation, dissolution or bankruptcy, we will inform you of the name and/or contact information of the recipient. The recipient will continue to comply with this Policy and other statutory obligations. If the recipient changes the original processing purpose and processing method, the recipient will obtain your consent again.
(II) Public Disclosure
We will only disclose your personal information in the following circumstances:
1. We may publicly disclose your personal information based on your active selection and other separate consent.
2. If we confirm that you have violated laws and regulations or seriously violated the relevant agreements and rules of Taobao platform, or to protect the personal and property safety of Taobao users or the public from infringement, we may disclose your personal information, including relevant violations and actions that has been taken by Taobao against you.
(III) Cessation of Operation
If we stop operating products and/or services, we will stop collecting your personal information in a timely manner. We will send you notices one by one or in the form of announcements to stop operations, and delete or anonymize the personal information related to the products and/or services that we hold or that have been shut down through methods in this Privacy Policy [Retention of Information-Retention Period] and [Your Rights-Deletion].
(IV) Circumstances Exempted from Obtaining Your Consent According to Law
Please understand that in accordance with laws, regulations and national standards, the partner may use or we may transfer or disclose your personal information without obtaining your authorization and consent.
IV. Your Rights
You can access and manage your information in the following ways, we will respond to your request in compliance with legal and regulatory requirements, including but not limited:
(1) Consult, Correct and Supplement
You have the right to consult, correct and supplement your information in the following ways:
1. Log in to Taobao, enter [Account] and select [Account Settings];
2. Log in to Taobao client and enter [Account] - [Settings];
3. Log in to Taobao client and select [Account] - [Taobao Customer Service].
(2) Copy
You can copy your information in the following ways:
1. Log in to Taobao client and enter [Account] - [Settings] - [Privacy] - [Personal info download];
2. You can copy your personal information through the path listed in "(1) Consult, Correct and Supplement".
(3) Delete
You can delete some of your information through the path listed in "(1) Consult, Correct and Supplement", or apply for deletion of your account to delete all your information.
In the following circumstances, you can contact our customer service to request the deletion of personal information:
1. If our handling of personal information violates laws and regulations;
2. If we collect and use your personal information without your explicit consent;
3. If our handling of personal information seriously violates the agreement with you;
4. If our processing purpose has been achieved, cannot be achieved, or is no longer necessary to be achieved;
5. If we stop providing products or services, or if the retention period has expired.
If we decide to respond to your deletion request, we will also notify the subjects who have obtained your personal information from us as much as possible and request them to delete it in a timely manner (unless otherwise provided by laws and regulations, or these subjects have independently obtained your authorization).
When you or when we assist you to delete the relevant information, we may not be able to delete the corresponding information from the backup system immediately due to applicable legal and security technical restrictions. We will securely store your personal information and restrict any further processing of it until the backup can be deleted or anonymized.
(4) Modify the Scope of Authorization
You can modify or withdraw the scope of your authorization to collect and process your personal information in the following ways:
1. Manage your authorization in [Account] - [Settings] - [Privacy] - [Personal information];
2. Manage the system authority authorization used by the App in [Account] - [Settings] - [Privacy] - [System permission management];
4. Manage your authorized applications in [Account] - [Settings] - [Privacy] -[Authorization Management].
For the authorization that you cannot set directly through the above methods, you can modify it by contacting customer service. However, please note that for some types of personal information, such as information necessary to enable the basic functions of Taobao or information necessary to fulfill our obligations under laws and regulations, we may not be able to respond to your request to modify the scope of your authorization. When you withdraw your authorization, we will no longer process the corresponding personal information. However, your decision to withdraw authorization will not affect our previous processing of personal information based on your authorization.
(5) Delete Account
You can apply to delete your account in the following ways:
1. Submit an account deletion application in [Account] - [Settings] - [Account and security] -[Delete account];
2. Contact customer service and apply for deletion of your account.
After you voluntarily delete your account, we will stop providing you with products or services and delete or anonymize your personal information as required by applicable law.
(6) Constrain Automated Decision-making of Information Systems
In some business functions, we may make decisions based solely on non-human automated decision-making mechanisms, including algorithms. If these decisions affect your legitimate rights and interests, you can contact us through customer service.
(7) Others
If according to other applicable laws and regulations, you enjoy any data subject rights other than items (I) to (VI), please contact us, and we will respond to your request under the circumstances that such request complies with the requirements of laws and regulations. For example: 1) you have the right to object to our processing of your personal information when your legitimate interests are infringed or we fail to comply with applicable laws and regulations; 2) Under certain circumstances, you have the right to request restrictions on the processing or transfer of your personal information to third parties; 3) you have the right to withdraw your consent and request the deletion of your personal data at any time, but the withdrawal of your consent will not affect the legality of any processing performed before your withdrawal, nor will it affect our processing of your personal information on a legal basis other than consent; 4) you have the right to make feedback to the relevant data regulatory authorities on our collection and use of your personal information.
(8) Respond to Your Above Request
You can make the above request to us, as well as your relevant personal information rights under applicable laws, which you can handle through customer service or by contacting us through Article 8. We will respond within 15 days.
In order to protect the security of your account and your personal information, when you make such a request to us, we may first verify your identity (such as account verification, asking you to provide a written request or other reasonable methods) before processing your request.
For your reasonable request, we do not charge a fee in principle, but for repeated requests or requests that exceed reasonable limit, we may charge a certain fee depending on the circumstances. We may reject requests for information that is not directly related to your identity, that is without a legitimate reason for repeated requests, or that requires too much technology (such as information request that requires to develop new systems or fundamentally change the existing practices), that poses risk to the legitimate rights of others, or that is unrealistic.
V. Retention and Transfer of Information
(1) Retention Period
We will only retain your personal information for as long as necessary to achieve the purposes described in this policy, unless there are mandatory retention periods required by applicable laws and regulations.
We determine the retention period of personal information based on the following criteria:
1. to satisfy the purpose of the transaction related to you, maintain the corresponding transaction and business records, in response to your possible inquiries or complaints;
2. to ensure the safety and quality of the services we provide to you;
3. whether you agree to a longer retention period;
4. according to the relevant needs of the statute of limitations;
5. whether there are other special agreements or laws and regulations on the retention period.
Beyond the retention period, we will delete or anonymize your personal information as required by applicable laws.
(2) Storage Locations and Cross-border Transfer
The personal information we collect and generate will be stored in the People's Republic of China, unless prohibited by applicable laws and regulations. We will only transfer your personal information overseas in compliance with applicable laws. Such overseas countries or regions may have different data protection laws or even none. In such circumstances, we will assess and make our best endeavors to ensure that your personal information is provided with a standard of protection comparable to the protection under the data protection laws of the country of your residence.
(3) Storage Security
1. Technical Measures for Data Protection
We have taken reasonable and feasible security measures in accordance with industry standards to protect your information from unauthorized access, public disclosure, use, modification, damage or loss of personal information. For example, we will use encryption technology to improve the security of personal information. When exchanging data between your browser and the server, it is protected by SSL protocol encryption. We provide HTTPS protocol for secure browsing. We will use trusted protection mechanisms to prevent malicious attacks on personal information. We will deploy access control mechanisms to ensure that only authorized personnel can access personal information.
2. Organizational Measures for Data Protection Management
We have established an advanced data security management system with data as the core and around the data life cycle in the industry to improve the security of personal information from the dimensions of organization construction, system design, personnel management and product technology. We have set up a dedicated department for the protection of personal information. Through training courses and examinations, we have continuously strengthened employees' awareness of the importance of protecting personal information.
3. Response to Personal Information Security Incidents
If our physical, technical or management protection facilities are damaged, resulting in unauthorized access, public disclosure, tampering or destruction of information that leads to damage to your legitimate rights and interests, we will promptly activate the emergency plan and take reasonable and necessary measures to minimize the impact on you. In the event of a personal information security incident, we will also inform you of the basic situation and possible impact of the security incident in accordance with the requirements of laws and regulations, the measures we have taken or will take, suggestions for you to independently prevent and reduce risks, and remedial measures for you. We will inform you by text messages, phone calls, push notifications and other reasonable channels. If it is difficult to inform one by one, we will issue an announcement in a reasonable and effective manner. At the same time, we will also report the handling of personal information security incidents in accordance with regulations and regulatory requirements.
4. Prevention of Account Security Risks
When using Taobao services to conduct online transactions, you will inevitably have to disclose your personal information, such as contact information or contact address, to the counterparty or potential counterparty of the transaction. In addition, you can also establish communication, exchange information or analyze content with third parties through our services. Please properly protect your personal information, only provide it to others when necessary, and do not trust transaction through other tools, so as to avoid information theft or even telecom network fraud.
If you are worried about the leakage of your personal information, especially your account or password, please contact Taobao customer service immediately so that we can take corresponding measures according to your application.
VI. Update of Privacy Policy
In order to improve your product and service experience, we continuously strive to develop our products, services and technologies. If there are changes of new services and business processes, we may update our Privacy Policy to inform you of the specific changes. However, we will not limit your rights under this Policy without your express consent. We will publish any changes to this policy on the relevant rules page (including historical versions).
For material changes, we will also provide more prominent notification (including notification through Taobao announcement or pop-up prompt).
Material changes referred to in this policy include, but are not limited to:
1) Significant changes of the business model of the product. For example, the purpose of processing personal information, the type of personal information processed, and the use of personal information;
2) Changes in the subject of this Privacy Policy caused by business adjustments, transactions and mergers, and the new recipient changes the original processing purpose and processing method;
3) Changes in the main objects of personal information sharing or public disclosure;
4) Significant changes in the user's personal information rights and the way they are exercised;
5) Changes in the contact information and complaint channels of the person in charge of personal information protection;
6) When the personal information protection impact assessment report indicates that the product has a significant impact on personal rights and interests.
VII. Minor Protection
In ecommerce activities, we assume that you have the corresponding civil capacity. If you are a minor, we request you to ask your parents or other guardians to read this policy carefully and to use our services or provide information to us based on the consent of your parents or other guardians.
If you are a child under the age of 14 or you are a minor according to any applicable laws, before you use our services, you and your guardian should carefully read the "Children's Personal Information Protection Rules and Guardian Instructions (Overseas Version)", ensure that you will only use our services under the guidance of your guardiancies after obtaining the guardian's consent to the "Children's Personal Information Protection Rules and Guardian Instructions (Overseas Version), and to ensure your safety when using our services and conducting transactions, if you do not have the aforementioned capacity for civil conduct, you and your guardian shall bear the legal consequences arising therefrom in accordance with the law.
If you are a parent or other guardian of a minor, please pay attention to whether he/she uses our services after obtaining your authorization and consent. If you have any questions about your children's personal information, please contact us.
VIII. Contact Us
You can contact us in the following ways, and we will reply to your request within 15 working days:
1. If you have any questions, comments or suggestions about this policy, you can contact us through Taobao customer service;
2. We have also set up a full-time personal information protection department, and have set up/appointed a Data Protection Officer (DPO) for Taobao service providers under this privacy policy. You can contact through [pip.tmw@service.alibaba.com] (please indicate that it is related to [Taobao] and explain the specific facts). Please note that we may not respond to questions that are not related to this policy or your personal information rights.
If you are not satisfied with our response, especially if you believe that our processing of personal information has damaged your legitimate rights and interests, you may also seek a solution by filing a lawsuit in the court of competent jurisdiction of the place where the defendant has his domicile.
Appendix: Relevant Definitions
“Taobao network”: refers to the Taobao (domain name is taobao.com) website and Taobao client.
“Taobao service provider” or “we” or “us”: refers to Zhejiang Taobao Network Co., Ltd. (浙江淘宝网络有限公司)、Taobao (China) Software Co., Ltd. (淘宝（中国）软件有限公司).
“Affiliates”: refers to the affiliates of the Taobao service provider disclosed in the latest listed company annual report of Alibaba Group Holding Limited.
“Alipay Company”: refers to Alipay.com Co. Ltd., the main provider of Alipay services and/or Alipay Singapore E-Commerce Private Limited.
“Personal Information”: refers to all kinds of information (electronically or otherwise recorded), which can alone or in combination with other information held by us be used to identify natural person.
“Sensitive Personal Information”: personal information that, once leaked or illegally used, may easily lead to infringement of the personal dignity of natural persons or the harm of personal and property safety, such as biometrics.
“Device Information”: include the device identifier (Android ID , IMEI only 27.40 versions of Taobao App before), variable identifiers (IDFA, OAID, GAID) application information (application crash information, notification switch status, running processes and other application-related information), device parameters and system information (device type, device model, operating system, device sensor, hardware serial number and hardware-related information), equipment network environment information [IP address, WLAN(Wi-Fi) information, Bluetooth information, base station information and other network related information , the WLAN-MAC is only collected after applying for location permission], operator information, broadcast component communication information.
“Service Log Information”: including browsing records, click to view records, search and query records, wishlist, add to carts, transactions, after-sales, following and sharing, posting information, as well as IP address, browser type, telecom operator, language used, access date and time.
“De-identify”: the process by which personal information is processed so that it is not possible to identify a specific natural person without the aid of additional information.
“Anonymize”: the process of processing personal information that cannot identify a specific natural person and cannot be recovered.
