Alibaba.com Privacy Policy

(Last Updated: May 30, 2025)

Note: This Privacy Policy applies to Users outside of Mainland China (registered country/region other than “Mainland China”) who are provided with various products and services through websites, apps, and new forms emerging with technological development by Alibaba.com. This Privacy Policy does not apply to Users within Mainland China (registered country/region as “Mainland China”). For Chinese Users, please click here to review our privacy policy for Chinese sellers.

1.     INTRODUCTION

2.     DETAILS OF DATA PROCESSING

3.     DISCLOSURE OR SHARING OF PERSONAL INFORMATION

4.     RETENTION

5.     COOKIES

6.     YOUR RIGHTS

7.     USERS FROM EUROPEAN UNION OR THE UNITED KINGDOM

8.     USERS FROM THE UNITED STATES

9.     USERS FROM BRAZIL

10.   INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION

11.   MINORS

12.   SECURITY MEASURES

13.   CHANGES TO THIS PRIVACY POLICY

14.   HOW TO CONTACT US

15.   LANGUAGE

1.     INTRODUCTION 

We at Alibaba.com and its national sites (collectively “Alibaba.com”, the “Platform” or “we”) recognize the importance of privacy and confidentiality of personal information. Alibaba.com is a business to business (“B2B”) platform which connects and facilitates sales and purchases of products and/or services between suppliers (“Sellers”) and buyers (“Buyers”). Collectively, the Sellers and Buyers shall be referred to as the “Users”. The Platform is for B2B transactions and therefore is only made available for use by businesses and not for individual or personal use.   

The controllers of your personal information are the legal entities set out in section 14. “HOW TO CONTACT US”.

This Alibaba.com Privacy Policy (“Privacy Policy”) sets out how we collect, process and disclose information in connection with the operation of the Platform for visitors (i.e., non-registered Platform Users) and the Users based outside of China (“you”) including personal information about the visitors and, representatives and employees of the Users. This Privacy Policy also applies to your use of the Platform via a mobile device, either through mobile applications or mobile-optimized websites. For the avoidance of doubt, since the national sites of Alibaba.com (which include but not limited to Alibaba.uk) and Alibaba.com itself share the same data controllers and engage in the same data processing activities, if you are a user of such national sites, you may also refer to this Privacy Policy to understand how your personal information is processed.

If you are from China, please refer here to find out more about how we process your personal information. If you are from European Union or the United Kingdom, specific disclosures can be found in “7. USERS FROM EUROPEAN UNION AND THE UNITED KINGDOM”. If you are from the United States, specific disclosures can be found in “8. USERS FROM THE UNITED STATES” and in “Alibaba.com Privacy Policy Addendum for U.S. Residents”. If you are from California, specific disclosures, including “Notice at Collection” details, can also be found in “Alibaba.com Privacy Policy Addendum for U.S. Residents”. If you are from Brazil, specific disclosures can be found in “9. USERS FROM BRAZIL”.

For details of the personal information that we collect when you use or interact with other Alibaba services, please refer to the applicable privacy policy for those services.

This Privacy Policy does not apply to the extent we process personal information in the role of a processor or service provider on behalf of other companies.

If you have any questions or concerns about the use of your personal information, then please contact us using the contact details provided at section “14. HOW TO CONTACT US” of this Privacy Policy. All capitalized terms not defined in this Privacy Policy shall have the meanings ascribed to them in the Terms of Use for the Platform, which can be found here.

2.     DETAILS OF DATA PROCESSING

Below you will find an overview of what kind of personal information we process about you and for which purposes we collect this personal information.

The categories of personal information described in the table above are detailed below:

Information you provide to us

If you are a representative or employee of any Buyer or Seller or a sole trader Buyer or Seller, subject to your use of the applicable functions and/or services on the Platform, we will ask you to provide:

• contact information, such as contact/legal representative name, address, phone number of the company/the contact, email address of the company and the contact/legal representative, job title and department, ID information, phone bills of the contact/legal representative.

• account information, such as your username and password, gender and your account settings.

• business information, such as identity information, tax registration and/or related information about your business, such as your company name, registration number and date, company official website, business type and industry, corporate registration details and information about your business license, proof of business operation including lease agreement, property deed, utility bills and etc.

• transaction information, such as transaction statements, billing/delivery address of the recipient of your order, payments and orders placed, and other details of the products you have supplied or purchased through the Platform.

• payment information, such as bank account numbers, credit/debit card numbers, credit/debit card holders, expiration dates and security code and tracking information from cheques or money orders, bank statement and account opening page.

• in order to facilitate your use of the services available on the Platform (including on mobile-optimized websites and/or mobile applications), we may request for access to, and you may provide us with, contents stored in your devices including but not limited to photos, videos, calendar and/or other files. If you are using the communication tools available on the Platform (particularly in case of voice communication), we may require access to your camera and/or microphone.

• From time to time, we may also collect information about the existing and prospective Users, during or in connection with trade shows, industry events and/or other functions, including representative contact names, addresses, phone numbers, fax numbers and email addresses.

Information that we collect automatically

If you are a Buyer or Seller or prospective Buyer or Seller, we will automatically collect:

• device information, such as the type of device you use, unique device identification numbers, IP addresses, browser type, browsing patterns, advertising identifiers and other types of identifiers.

• online activity information, such as page views and searches, information about content that has been viewed and/or downloaded, information about your activity on a page or screen, access times and duration of access, and other details of how you have interacted with our Platform.

• location information, such as your general or precise geolocation data. In limited situations, and with your consent, we collect your precise geolocation data. Please note that for most devices, you can manage or disable the collection of precise geolocation data for all applications in the settings menu of your device.

• communication information, such as posts and/or contents uploaded on the Platform, any comments on content you have uploaded to the Platform or on other Users’ content on the Platform.

• marketing and advertising information, such as your interests based on your use of the Platform and your purchases, responses to surveys, promotions you participate in, preferences in receiving marketing content from us, communication preferences, preferences for particular products or services and your subscription data.

• user-generated content, such as profile photos, videos or audio recordings that you upload to the Platform as part of product reviews or by sharing content in socializing within the Platform.

• other information, such as statistical information about the Platform and visitors to the Platform including, browser software, operating system, software and hardware attributes, number of sessions and unique visitors.

Some of this information may be collected using cookies and similar tracking technology, as explained further under our Cookies Policy.

Information that we receive from third parties

• social media account information, such as social media username, profile picture and your login details where you choose to log into the Platform using social media accounts or when you interact with us through an external service or application.

• communication information, such as feedback and other communications with us (including when you interact with our subcontracted customer support agents), disputes/complaints from Sellers/Buyers on the Platform, copy of your correspondence if you contact us such as via our customer services department chat service, telephone or email (including in the case wherein those functions involved integration of services provided by third-party service providers) , chat information between you and other users via instant messaging services provided by DingTalk.

• third parties that are engaged by us to provide verification services, such as conducting applicable anti-money laundering, fraud and “Know Your Customer” checks on the Buyers and Sellers, conducting due diligence and verification on Users. This includes your name, email address, company details, and contact information.

• information about your interactions with products and services offered by our group companies and affiliates.

• If you choose to participate in reviewing or rating products and/or services on Alibaba.com, we may receive personal information about you from third parties that work with us to conduct reviews into our services and/or rate us.  

3.     DISCLOSURE OR SHARING OF PERSONAL INFORMATION

We may disclose (or provide access to) personal information to the following categories of recipients:

• Other Platform Users where necessary in connection with the facilitation of purchases and communications made between you and the other Users.

• Our group companies and affiliates and/or their designated service providers that work with us to provide processing services such as software, tools, systems and messaging services for purposes described in this Privacy Policy.

• Third party business partners and service providers engaged by us or working with us to assist us to provide services to you or who otherwise process personal information for purposes described in this Privacy Policy or notified to you when we collect your personal information. Categories of these partners or service providers include:

• our business partners that offer supplementary services to those provided by us, such as partners that resell our products and services, to the extent you consent to such sharing (where required by applicable law);

• marketing and advertising platforms, such as Google, Twitter, Facebook and Instagram, and providers of analytics services relating to Users’ behaviour, in order to tailor the content you see when visiting our Platform. These platforms may combine information they collect on our Platform with data on their platforms and data they collect from other websites or through other sources in order to conduct targeted advertising. Some of this information may be collected using cookies and similar tracking technology, as explained further under the section 5. “COOKIES” below. The processing activities of these third-party marketing platforms are governed by their own privacy policies, not this Privacy Policy;

• due diligence and verification service providers, who collect and process personal information to perform due diligence and business verification services;

• payment service providers who collect and process personal information to assist with settling the payments for transactions or process withdrawal requests for Sellers. The activities of payment service providers may be governed by their own privacy policies, not this Privacy Policy;

• credit risk assessment providers to conduct risk assessment on Sellers to determine whether a Seller can be permitted to make a fund withdrawal;

• logistics partners for providing delivery services for Buyers, including return and exchange of products, and warehousing services for Sellers;

• custom agents for customs clearances purposes;

• cloud computing service providers to provide cloud storage services;

• instant messaging service providers for enabling communications between the Buyers and Sellers via the Platform;

• software development kit (“SDK”) service providers to provide SDK services;

• customer service providers to provide after-sale services;

• risk control service providers to assess the security of Users’ accounts and transaction risks; and

• third party rating / reviewing service providers to carry out reviews of our services with Users who participate in reviewing or rating Alibaba.com’s products and/or services;

• External professional advisers, law enforcement agencies, insurers, government and regulators and other organizations where it is necessary to comply with applicable laws or to exercise, establish or defend our legal rights or protect your vital interests or those of any other person, we may also disclose and transfer your personal information or as otherwise required or permitted by applicable laws.

• Actual or potential business acquirers (and its agents and advisers) in connection with any actual or proposed purchase, merger or acquisition of any part of our business, provided that we inform the acquirer that it must use your personal information only for the purposes disclosed in this Privacy Policy.

We may provide anonymized data to third parties, but when we do so, the information we share is in a de-identified format that does not personally identify you.

We have established relationships with third parties and websites to offer you products and services which we do not offer. We offer you access to these other parties and their websites either through the use of hyperlinks to these sites from our Platform or through offering co-branded sites in which both we and other parties share the same uniform resource locator (URL), domain name or pages within a domain name on the Internet. In some cases, you may be required to submit personal information to register or apply for products or services provided by such third parties or co-branded partners. This Privacy Policy does not apply to these third-party sites or co-branded sites. The privacy policies of those other parties may differ from ours, and we have no control over the information that you submit to those third parties. You should read the relevant privacy policy for those third-party sites and co-branded sites before responding to any offers, products or services advertised by those parties.

The instant messaging service on the platform is provided by our partner DingTalk (data controllers: Dingding Technology Co., Ltd. and DingTalk (China) Information Technology Co., Ltd.). DingTalk will collect your chat information and device information and share a copy of your chat information with us. We will use your chat information based on security, risk control and other compliance requirements based on our platform policies and rules, legal and regulatory requirements, response to requests from regulatory authorities, provision of services (including but not limited to transactions processing and dispute settlement between the Buyers and Sellers, Users complaints handling) and other analytical and service needs. You may refer to the applicable privacy policy of DingTalk for more data processing details relating to such service.

4.     RETENTION

We retain your personal information as long as we have an ongoing legitimate business need to do so, for example to provide services or products to you, or as required or permitted by applicable laws, such as tax and accounting laws.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it.

5.     COOKIES 

To enable our systems to recognize your browser or device and to provide and improve our services, we or our authorized service providers may use cookies, beacons and/or other similar technologies (collectively, “Cookies”). For more information about the types of Cookies we use, why, and how you can control them, please read our Cookies Policy.

6.     YOUR RIGHTS 

As a user of the Platform, you may have the following data protection rights, which you can exercise pursuant to applicable laws at any time by contacting us using the contact details provided under section 14. “HOW TO CONTACT US” below:

• The right to access, correct, update or request deletion of your personal information.

• The right to object to processing of your personal information when it is based on our legitimate interests, and separately the right to object to direct marketing.

• The right to ask us, in some situations, to restrict processing of your personal information or request portability of your personal information.

• The right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you. To opt-out of other forms of marketing (such as postal marketing or telemarketing), then please contact us using the contact details provided under section 14. “HOW TO CONTACT US” below. If you are signed into your Alibaba.com account, you can also unsubscribe from receiving promotional and/or marketing notifications from us by clicking here.

• If we have collected and process your personal information with your consent, then you have the right to withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.

• The right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority. If you are from European Union, the main supervisory authority will be the Garante per la protezione dei dati personali in Italy.

• We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. If you live in a jurisdiction that provides for a right to appeal a denial of your request to exercise such rights, you may submit your appeal using the contact details provided under section 14. “HOW TO CONTACT US” below.

If you are aware of changes or inaccuracies in your information, you should inform us of such changes so that our records may be updated or corrected.

7.     USERS FROM EUROPEAN UNION OR THE UNITED KINGDOM

If you are from European Union or the United Kingdom, below you will find an overview of what kind of personal information we process about you, for which purposes, on which legal basis and where we collect this personal information.

If you need us to provide you with our services or fulfil a contract with you, or because we are required to do so by law, but do not provide us with your personal information, we may be unable to provide our services or fulfil our contractual obligations to you.

If we ask you to provide personal information to comply with a legal requirement or to enter into a contract with you, we will make this clear at the relevant time. We will advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information). In some instances, you may be required to provide us with personal information for processing as described above, in order for us to be able to provide you all of our services, and for you to use all the features of our Platform.

For processing operations based on our legitimate interests, we have carried out a legitimate interest assessment to ensure that our interests are not prejudiced by your interests or fundamental rights and freedoms.

If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under section 14. “HOW TO CONTACT US” below.

8.     USERS FROM THE UNITED STATES

If you are based in the United States, the personal information you provided to us will be stored in the United States and will be processed as described in this Privacy Policy. Additional information for U.S. residents (including specific details for California residents) as required by certain U.S. state privacy laws can be found by clicking here.

Please also note, if you are a Buyer, Sellers will also act as a data controller of personal information about you, your Platform purchases and communications with them. Please refer to the privacy policies of those Sellers for more information about the ways in which they will process such information.

9.     USERS FROM BRAZIL

This section applies if you are based in Brazil. The personal information you provided to us will be stored in Singapore. Please also note, if you are a Buyer, Sellers will also act as a data controller of personal information and your Platform purchases and communications with them. Please refer to the privacy policies of those Sellers for more information about the ways in which they will process such information.

Legal Basis for Data Processing

If you are a User from Brazil, our legitimacy for the processing of personal data may include the following bases:

• Contract performance: necessary for providing the services pursuant to the agreement between you and Alibaba.com Singapore E-Commerce Private Limited and/or its affiliates (for example, to provide you with the services you request and to identify and authenticate you so you may use the Platform)

• Your consent: when we seek your consent prior to processing your personal information a specific purpose that we communicate to you. You may withdraw your consent at any time and we will stop processing your data for that purpose;

• compliance with legal requirements: necessary to comply with legal requirements (for example, to comply with applicable accounting rules and to make mandatory disclosures to law enforcement);

• our legitimate interest and interest of users: necessary for our legitimate interests and not overridden by your rights (for example, to detect and prevent fraud and abuse in order to protect the safety of the Users);

• necessary for the regular exercise of rights on legal, administrative or arbitral action; and/or

• necessary for credit protection.

If we collect and use your personal information in reliance on our legitimate interests (or those of any third party), this interest will normally be to operate our Platform and services, manage our relationship with you and communicate with you as necessary to provide our services to you and for our legitimate commercial interest, for instance, when responding to your queries, improving our Platform and our services, undertaking marketing, or for the purposes of ensuring the security of our Platform and services and detecting or preventing illegal activities such as fraud. We may have other legitimate interests and if appropriate we will make clear to you at the relevant time what those legitimate interests are.

If we ask you to provide personal information to comply with a legal requirement or to enter into a contract with you, we will make this clear at the relevant time. We will advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information). In some instances, you may be required to provide us with personal information for processing as described above, in order for us to be able to provide you all of our services, and for you to use all the features of our Platform.

If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under section 14. “HOW TO CONTACT US” below.

Your Rights

If you are a User from Brazil, in addition to the aforementioned privacy rights under section 6. “YOUR RIGHTS”, you can exercise the following data protection rights under the Brazilian General Data Protection Law

• The right to request a review of decisions based solely on automated processing, which may affect your interests, under certain circumstances.

• The right to request information about with whom your personal information has been shared.

• The right to request anonymisation of personal information, under certain circumstances.

• The right to receive clear and complete information about the possibility and consequences of not providing consent when applicable for the processing of personal information.

10.   INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION

We will store the personal information we collect from you through the Platform in the United States, Germany, Singapore or China, depending on the country in which you reside.

Being a cross-border B2B platform, it is inevitable that there will be certain cases that require international transfers of personal information of the Users among the above-mentioned countries. These countries have data protection laws that may have different provisions to the laws of your country. We ensure that any such international transfers will only be conducted to achieve legitimate purposes and with legal basis or as otherwise permitted by applicable law. We take appropriate steps to ensure that recipients of your personal information are bound to duties of confidentiality and we implement appropriate technical and organizational measures to ensure your personal information will remain protected in accordance with this Privacy Policy, such as standard contractual clauses. A copy of those clauses can be requested from DataProtection@service.alibaba.com.

In the event where you are a Buyer and have access to personal information belonging to Users from China on the Platform, you shall comply with the Alibaba.com Website Users Data Processing Terms.

11.   MINORS

The Platform is intended for adults. Our Platform is not directed to and we do not intend to, or knowingly, collect, or solicit personal information online from Users under the age of 18 ( “Minors”).

We do not intend to sell any of our products or services to Minors. If a Minor has provided us with personal information without parental or guardian consent, the parent or guardian should contact DataProtection@service.alibaba.com to remove the information.

12.   SECURITY MEASURES

We implement appropriate technical and organisational measures to prevent unauthorized access to the Platform, to maintain data accuracy and to ensure the correct use of the information we hold.

For registered Users of the Platform, some of your information can be viewed and edited through your account, which is protected by a password. It is your responsibility to keep your password secure and confidential. You must not divulge your password to anyone. Our personnel will never ask you for your password in an unsolicited phone call or in an unsolicited email. If you share a computer with others, you should not save your log-in information (e.g., user ID and password) on that shared computer. Remember to sign out of your account and close your browser window when you have finished your session.

No data transmission over the internet or any wireless network can be guaranteed to be perfectly secure. As a result, while we use appropriate technical and organizational measures to protect the information we hold for you, we cannot guarantee the security of any information you transmit to us and you do so at your own risk.

13.   CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time including in response to changing legal, technical or business developments. When we update our Privacy Policy, we will take appropriate measures to notify you, consistent with the significance of the changes we make. We will obtain your consent if and when we materially change this Privacy Policy in a way that reduces the protection of your personal information collected in the past. Any changes to this Privacy Policy will be communicated by us posting an amended Privacy Policy on the Platform. Once posted on the Platform, the new Privacy Policy will be effective immediately. You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the top of this Privacy Notice.

14.   HOW TO CONTACT US

You can click here to exercise your rights after accessing your account. And if you have any requests, questions or concerns about our use of your personal information and this Privacy Policy, you can contact our Data Protection Officer at DataProtection@service.alibaba.com.

If you are a registered member of the Platform, and you are from Hong Kong Special Administrative Region (“Hong Kong”), Macao Special Administrative Region (“Macao”) or Taiwan Region of China (“Taiwan”), you are contracting with Alibaba.com Hong Kong Limited (incorporated in Hong Kong Special Administrative Region with Reg. No. 0689778).

If you are a registered member of the Platform, and you are from other locations outside of mainland China, Hong Kong, Macao or Taiwan, you are contracting with Alibaba.com Singapore E-Commerce Private Limited (incorporated in Singapore with Company Reg. No. 200720572D).

Korean Domestic Privacy Representative

If you are Users or regulators in South Korea, you may reach out to us via the mechanisms set out above or contact our following Korean Domestic Privacy Representative:

• Company Name: DR & AJU LLC

• Address: 7-16F, Donghoon Tower, 317 Teheran-ro, Gangnam-gu, Seoul, South Korea, 06151

• Telephone number: +82 02-3016-7449

• E-mail: PrivacyAlibaba.com@draju.com

15.   LANGUAGE 

If there is any conflict between the English version and another language version of this Privacy Policy, the English version shall prevail.