1688 Privacy Policy
Effective as of September 25, 2024
Introduction
Thank you for choosing to use our products and services. We are fully aware of the importance of your Personal Information to you. Your trust is of great importance to us, and we will take corresponding security measures in strict compliance with laws and regulations and strive to protect your Personal Information to keep it secure and under control. On this basis, if you are a registered member of 1688 Platform, and you are not located in Mainland China, 1688 Platform Service Provider (“we”, “us” or “our”) have formulated this 1688 Privacy Policy (this “Policy” or “Privacy Policy”) to help you fully understand how we will collect, use, disclose, share, store and protect your Personal Information and how you may manage your Personal Information during your use of our products and services so that you can better make appropriate choices. If you are a registered member of 1688 Platform, and you are located in Mainland China,阿里巴巴（1688）隐私政策shall apply to you. If you are a registered member of 1688 Platform, and you are located in Kazakhstan, you may refer to the translation version of this Policy Политика конфиденциальности Платформы 1688.
Before using our products and services, you must carefully read and understand this Policy, especially the clauses in bold/in bold and underlined and ensure that you have fully understood and agreed with this Policy. In addition to this Policy, under certain scenarios, we will inform you of the purpose and scope of information collection and methods of use of collected information through instant notifications (including without limitation, pop-ups and instructions on webpages), descriptions of functional updates and otherwise, all of which shall constitute an integral part of and have the same effect as this Policy. To facilitate your understanding, we will try to explain to you the professional terms involved hereunder in a plain and straightforward way.
If you have any questions, comments or suggestions on the contents of this Policy, you may contact us using such contact details as specified at the end of this Policy.
By accepting this Privacy Policy, you acknowledge that you have been aware of the functions offered by 1688 Platform and such Personal Information as necessary for the operation of such functions, and you hereby grant consent for collecting, processing, using and/or disclosing such Personal Information. However, this does not mean that you have given separate consent to activating any additional function or processing any unnecessary Personal Information. We will, based on your actual use, seek your separate consent for activation of any additional function, or for processing any additional Personal Information.
This Privacy Policy will help you understand:
I. Scope of Application
II. Collection, Processing, Use and Disclosure of Personal Information
III. Partners Involved in Use of Personal Information and Transfer and Disclosure of Personal Information
IV. Your Rights
V. Storage of Information
VI. Updates to Policy
VII. Minors
VIII. How to Contact Us
Schedule: Definitions
I. Scope of Application
This Policy governs the products and services provided by 1688 Platform Service Provider to you through websites, mobile applications, applets and new forms emerging along with technological development. If there is any separate privacy policy governing any product or service provided to you by us or our Affiliates (such as the 1688 Privacy Policy for Merchants), such product or service shall be governed by such privacy policy.
Except for the collection, processing, use and/or disclosure of Personal Information as specified herein, this Policy shall not govern other services provided to you by sellers on 1688 Platform or other third parties. Such other services shall be governed by the rules on collection, processing, use and disclosure of Personal Information as otherwise notified to you by such sellers and other third parties. For example, when you become a member of a seller or brand, the use of your membership information by such seller or brand will be governed by the rules specifically notified to you by the relevant seller.
II. Collection, Processing, Use and Disclosure of Personal Information
During your use of our products/services, we need/may need to collect, process, use and/or disclose your Personal Information, including:
1. information that you are required to consent to collect, process, use and/or disclose as necessary for our provision of the basic functions of our products and/or services to you and for fulfillment of obligations provided by laws and regulations. If you refuse to provide such information, you will be unable to use our products and/or services normally; and
2. information that you may grant or withhold separate consent for us to collect, process, use and/or disclose for our provision of any additional functions of our products and/or services to you. If you refuse to provide such information, you will be unable to use such additional functions normally or to achieve our intended effect, but your use of the basic functions of our products and/or services will not be affected.
3. As noted below, we collect Personal Information which may be considered sensitive in certain jurisdictions. Specifically, if we collect your passport, your ID number, your payment card information, or your financial information and tax identification information, you may have additional rights and protections with regard to such sensitive personal information under certain Personal Information protection laws.
Please note in particular that we are committed to developing a variety of products and services to satisfy your needs. Given such fact and the fact that the specific products/services selected by different users may vary, the basic/additional functions and the categories and scope of the Personal Information to be collected, used and/or disclosed by us may vary accordingly. Your Personal Information to be collected, used and/or disclosed will depend on the specific functions of our products/services you use.
Specific functions that we will offer you and related scenarios include:
(I) Helping you become our member and manage your account
1. Basic membership services
We will provide you with services through your 1688 Platform account. To create a 1688 Platform account, you are required to provide us with at least your mobile number, and intended member name and password. If you refuse to provide such information, you will be unable to register a 1688 Platform account and will only be able to use browsing and search services.
In order to ensure that it is you to whom we are providing services, we may verify your identity based on the above information provided by you. If it is legally required to verify your identity as necessary (including for protecting the rights and interests of minors in accordance with laws, cracking down on telecom/online frauds, withholding taxes for you, and identifying entity subject to administrative law enforcement or judicial litigation).
We will determine your current account level based on your use of your 1688 Platform account and such calculation rules on account levels as set by 1688 Platform and make available to you the basic benefits corresponding to your account level.
2. Additional membership services
Special membership benefits: Your provision of the following additional information about you will help us to provide you with more personalized products or services: your landline phone number and other contact details, position, main industry, nickname and profile picture. We may also provide you with special membership services. Specifically, the nickname and profile picture set by you will be displayed publicly.
Authorized login: Subject to your separate consent, we may obtain your third-party account information (including profile picture, nickname, email address and other information as specified on relevant webpage) from a third party and link your third-party account with your 1688 Platform account so that you may log in to and use our products and/or services directly with such third-party account. We will use your information to the extent authorized by your separate consent.
If you already have a 1688 Platform account, we may display in the services provided by 1688 Platform your Personal Information as specified above and your operations on 1688 Platform or in respect of products and services in connection with your 1688 Platform account (you may, through your 1688 Platform account, use the products and/or services provided by us and/or our Affiliates via the links provided on our website or application or other product/service access), including without limitation display of your Personal Information, discounts and benefits and transaction orders together through your 1688 Platform account. We will respect your choices of services and settings of account on 1688 Platform.
3. Verification and authentication
To comply with laws, regulations and regulatory requirements, guarantee the authenticity of user identity, implement anti-fraud and other risk controls, and safeguard the security of systems and services, we need to collect your information for identity verification during your use of certain services/functions as follows:
[Account retrieval] If you need to retrieve your 1688 Platform account, we may collect your email address and/or mobile number to verify your identity and to help you retrieve your 1688 Platform account.
[Real-name/real-person authentication] You are required to complete real-name or real-person authentication if it is necessary for effecting transactions of commodities or services of special categories, applying for membership that requires additional authentication (such as the capacity as a seller or content creator), or meeting requirements under scenarios where it is legally required to verify the real identity of a user (including for protecting the rights and interests of minors in accordance with laws, cracking down on telecom/online frauds, withholding individual income taxes, identifying entity subject to administrative law enforcement or judicial litigation, conducting suitable money laundering, and “Know Your Customer” checks). For the purpose of authentication, you need to provide your true identity information (including your name, ID number and other identity certificate information or facial recognition information, depending on the actual circumstance and subject to instructions on relevant webpage) and authorize us to verify such information through an authoritative and credible identity authentication agency recognized by the state or a third party that engaged by us. We will record and keep the authentication information and results of authentication in accordance with applicable laws and will use the same only for the purpose of authentication or other purposes provided by laws and regulations and will not use the same for any other purpose without your express consent.
(II) Helping you use browsing, search and personalized recommendation functions
1. Browsing
When you browse 1688 Platform, you may add to favorites/add to shopping cart/follow/share/like any commodity, store, channel, live streaming channel, content (including texts, pictures and short videos) or content creator you are interested in. We will collect your operation history for the purpose of the foregoing functions and other purposes expressly notified by us.
You may view and manage your operation history through “My” - “Favorites”/“History”/“Following” and other modules.
2. Search
When you use the search function (including search by image), we will collect your search history, including the content searched (including search terms or images), browsing history/time and search time/times, and request access to your camera and photo album as necessary for the functions you use.
To provide efficient search services, some of the information specified above will be temporarily stored on your device locally, and your search history will be displayed to you.
Please understand that a single search term cannot identify you and is not your Personal Information, and thus we have the right to reasonably use it for other purposes.
3. Personalized recommendation
In order to show and recommend to you commodities, services and/or contents that are more relevant to you, and provide personalized experience that better satisfies your needs, we will use the browsing and search history we collect as specified above, together with legally collected Device Information, approximate geographic location information (e.g. district level location) and other information with your consent, for personalized recommendation services. In addition, we will provide you with information and search results that are not specific to your personal characteristics.
You may manage the personalized recommendation services as follows:
1）When you use our site search services, if you wish to view search results that are not sorted according to your personal characteristics, you may click “Filter” on the search results webpage and then choose to filter and sort by “Sales”, “Price” and/or “General Sorting”.
2) If you do not wish to receive any recommendation of commodities or services provided by us on the homepage or in your purchase order or favorites, you may tap and hold on the pictures of such recommended commodities or services and then choose to block similar commodities or the category which such commodities or services are under by following the instructions on the subsequent pop-up;
3) You may manage personalized advertisements sent by us through “My - Settings - Privacy - Advertisement Management - Opt out of Personalized Advertisements” (Click to manage personalized advertisements); and
4) You may manage personalized contents sent by us through “My - Settings - Privacy - Recommendation Management - Settings for Personalized Recommendations” (Click to manage personalized recommendations).
(III) Helping you to complete transactions
1. Shopping cart
When you use the shopping cart function, we will collect information on commodities added by you and your purchase order information to optimize your shopping experience (such as price-off/discount reminder, and display of frequently purchased commodities).
2. Order placing and management
When you purchase any commodities and/or services through our products and/or services, we will generate purchase orders for such commodities and/or services through our system. To place a purchase order, you need to provide at least name and contact number of the consignee and delivery address, and, in the case of commodities and/or services of special categories, you also need to provide other information necessary therefor (such as your ID certificate information for customs clearance in the case of cross-border transaction). You may fill out/provide alternative contact number, delivery time and other additional information to guarantee accurate delivery of commodities or services. If you request any invoice, you need to further provide invoice title, taxpayer ID number and the email address to receive the invoice.
A purchase order so generated will specify information on the commodities and/or services purchased by you, specific purchase order number, purchase order generation time, amount payable by you and your remarks. We will collect such information to help you complete your transactions, guarantee the security of your transactions, facilitate your inquiry about purchase order information, and provide customer and after-sales services and for other purposes expressly notified by us.
You may purchase commodities and/or services through 1688 Platform for others, in which case you need to provide the foregoing Personal Information of the actual consignee and ensure that you have obtained the consent from such actual consignee.
We will collect the information on purchase orders placed by you during your use of our services so as to present such information to you and facilitate your knowledge of, inquiry about and management of your purchase orders.
You may view and manage your purchase order information through “My Orders”.
3. Payment for and delivery of commodities or services
When you purchase commodities or services, we or relevant third-party service providers will collect, process, use and/or disclose your purchase order information and delivery information, so as to help you to complete payment for yourself or on behalf of others, and facilitate the successful receipt of the commodities or services purchased. For details, please refer to “III. Partners Involved in Use of Personal Information and Transfer and Disclosure of Personal Information - (I) Partners involved in use of Personal Information - 5. Cooperation scenarios - 1) For the realization of business functions - A. Payment services/B. Logistics services” of this Policy.
(IV) Customer services and dispute resolution
When you contact us or apply for resolution of disputes during or after sales, you will be required to provide necessary Personal Information to verify your membership, so as to guarantee the security of your account and systems.
We may keep records of history and contents of correspondence and communications/telephone conversations between you and us (including account information, purchase order information and other information provided by you to prove relevant facts, and your contact details), to facilitate our communication with you, help you solve relevant issues as soon as possible and/or document solutions and results of relevant issues. If you inquire about, or submit any complaint or suggestion in connection with, a purchase order, we will use your account information and purchase order information.
We may also use your other information as reasonably required for provision of services and improvement of service quality, including information provided by you during your communication with our customer service personnel and answers you send to us through any questionnaire.
We will, by using deep learning technology, provide you with intelligent FAQ chatbot and intelligent voice customer services, and De-identify the records of history and contents of correspondence and communications/telephone conversations between you and us, and to the extent that you cannot be identified, use such De-identified information for training intelligent customer service algorithm models. During the provision of intelligent customer services to you, we will notify you thereof in a prominent manner. We will make continued efforts to improve the quality of our intelligent customer services based on historical data on your use of such services.
(V) Providing you with information publishing functions
1. Making reviews or comments
When you make reviews on commodities and/or services purchased by you, we will collect and display your reviews (including texts, pictures and other contents posted by you) in the relevant store’s “Commodity Reviews” list and/or on 1688 Platform’s homepage, commodity cards or other public webpages.
When you make comments on reviews or contents posted by other users, your nickname, profile picture and comments will be displayed publicly.
2. Publishing content
When you create/edit or publish any content, your profile picture and nickname, texts, pictures and/or videos published by you, relevant links, approximate location (e.g. country or city-level location), relevant comments and interactions and other information will be collected and may be selected to be displayed on 1688 Platform’s homepage, member channel and other public webpages. In addition, we will request you to authorize us to access your camera, photo album, microphone and/or location depending on the types of functions you use. If you refuse to grant, or withdraw, such consent, you will be unable to use corresponding functions, but your normal use of other functions will not be affected.
We provide you with filters and other beautification features for improved visual effect of pictures/videos. When you use such features, we need to conduct intelligent recognition of your pictures using technologies, to offer appropriate effects matching such pictures. Such features are realized on your device locally. We will not use the foregoing information for facial recognition or other purposes, nor will we transfer it to or store it on our servers, or share it with any third party.
Please note that the information published by you may involve Personal Information of you or others. For example, pictures you upload in making comments may contain Personal Information. Please consider more prudently before sharing or even making public relevant information during your use of our services. If the information to be published by you involves any Personal Information of another individual, you shall obtain his/her consent before publishing such information. We are not responsible for obtaining consent on collection and processing of third parties’ Personal Information, the relevant consent shall be obtained by the user who uploads such information and makes it publicly available.
3. Profile page
Your profile picture, nickname and other information will be displayed on your profile page. You may view and manage your Personal Information and published information/contents in “Account Security” after clicking on the profile picture in the upper left corner of “My” module.
Please note that your use of the information publishing function may involve Personal Information of you or others. Please consider more prudently before sharing or even making public relevant information during your use of our services. If the information to be published by you involves any Personal Information of another individual, you shall obtain his/her consent before publishing such information.
(VI) Interactions
1. Notices and messages
During our operation, we may send to you one or more kinds of notices simultaneously, such as notices on services, identity verification, security verification and user experience research, using contact details (such as phone number and email address) provided by you during your use of our products and/or services. In addition, we may provide you with commercial information on services, functions or events you may be interested in and other information on commodities or services via SMS messages, phone calls or pop-ups. If you do not wish to receive such commercial information or other information on commodities or services from us, you may opt out or disable such function by such means as provided in relevant SMS messages or emails or by contacting our customer service personnel directly. If you wish to block pop-ups, you may do so by clicking “Skip” button or other relevant button thereon.
We will push platform notifications (such as logistics information, event offers, interactive messages and service notices) to you through “Messages”.
In addition, if you initiate communication with customer service personnel of a store or trade or interact with a store (e.g., subscribing to or becoming a member of such store), the messages from customer service personnel of such store will be shown in “Messages” module, and you may mute notifications on the chat page for conversations with such store.
2. Event participation
If you intend to participate in any marketing event held by us, we may need to collect, use and/or disclose your Personal Information (including without limitation your nickname, profile picture, contact details, delivery information, purchase order information, browsing history and account level), so that you can participate in such event, including participating in prize draw and claiming prizes, and we will separately notify you of the specific scope of collection, processing, use and/or disclosure under relevant scenarios and obtain your consent.
In case of any event jointly held by us and our Affiliate or a third party, we will, subject to your consent, share necessary information with such Affiliate or third party, or link your 1688 Platform account to your account(s) on platform(s) of such Affiliate or third party, and/or share your account, participation progress and other information in relation to such event among platforms involved in such event, so as to ensure consistent and complete services to you during the event.
In addition, we may use your information obtained in connection with events for research, development and improvement of products and/or services, comprehensive statistics, data analysis or processing, or other purposes permitted by you.
3. Sharing
Under circumstances such as when you share any information, receive any shared information, or participate in an event, we will read contents from your clipboard to determine whether there is any relevant password, sharing code or link for the purpose of functions or services such as navigation, sharing and event linkage, provided that we will upload the contents identified by us locally from your clipboard to our servers only if and to the extent that such contents are navigation, sharing, event linkage and other instructions in connection with 1688 Platform, and will not collect or store other information from your clipboard. Such single information from the clipboard cannot identify you. In addition, we may need to access your photo album in your mobile phone in order for you to share pictures or videos or receive shared pictures or videos.
4. Interactions in watching short videos
When you watch short videos, your nickname and interactive information in relation to the short videos (including without limitation your comments, likes and fan level) will be publicly displayed in or under such short videos. In addition, we will collect your interactive information to generate and make public the statistics (including without limitation lists and popularity ranking) related to such short videos. If you intend to post any short video, you are required to complete real-person authentication and grant access to your microphone and/or camera before such interaction or posting.
(VII) Providing safeguards for you
In order to fulfill the legal obligations of guaranteeing the security of e-commerce transactions, improve the security of your use of the services provided by us and by our Affiliates and partners, safeguard personal and property safety, and the security of accounts and transactions, of you, other users or the public, better prevent phishing website, fraud, network vulnerability, computer virus, and cyber-attack and intrusion risks, and identify more accurately violations of laws or regulations or breaches of agreements with or rules of 1688 Platform, we will collect your Device Information and Service Log Information through the application security SDK embedded in our applications which is developed by our Affiliates, and may use or combine your membership information, transaction information, Device Information, Service Log Information and information shared by our Affiliates and partners with your consent or as required by laws (we may, during the running of applications in the background, collect MAC address, IMEI and other device identifiers for risk identification), so as to comprehensively assess the risks of your account and transactions, carry out identity verification, detect and prevent security incidents and take necessary recording, auditing, analyzing and handling measures in accordance with laws.
(VIII) Providing you with other additional services
1. Additional services based on system permissions
In order to provide you with products and/or services that are more convenient, of better quality and further personalized, and to improve your experience, we may collect, use and/or disclose your Personal Information subject to system permissions in the following additional services provided to you. If you refuse to grant such permissions, you will still be able to use the basic services provided by 1688 Platform, while such additional services may be unavailable to you.
You may, in your sole discretion, grant or withdraw such permissions at any time.
Please note that by granting any of such permissions, you consent to collect, process, use and/or disclose your relevant Personal Information for provision of the corresponding services to you, and by withdrawing any of such permissions, you withdraw your corresponding consent and we will cease to collect, process, use and/or disclose your relevant Personal Information pursuant to such consent and will be unable to continue to provide you with services for which such permission is granted. However, your decision to withdraw any such consent will not affect any previous collection, process or use of your Personal Information with your consent
2. Services using Cookies and similar technologies
Cookies and similar device identification technologies are commonly used on the Internet. During your use of our services, we may, through relevant technologies, send one or more cookies or anonymous identifiers (each a “Cookie”) to your device to collect, identify and store information on your access to and use of our services. We undertake not to use Cookies for any purpose other than those set forth in this Privacy Policy. We use Cookies mainly for guaranteeing the secure and efficient operation of our products and services. Cookies enable us to check whether your account and transactions are secure, and conduct troubleshooting to identify crashes, delays and other abnormalities, and help you avoid repeated filling out of forms and input of search content.
In addition, we may use Cookies to show you information or functions that you may be interested in, and to optimize advertisements to be offered to you. Most browsers allow users to clear browser cache. You may clear your browser cache accordingly, or change your acceptance level to Cookies or reject our Cookies. However, such operation may render you unable to use the services or functions which rely on Cookies.
Where you allow the use of cookies, you consent to the collection, process, use and/or disclosure of your Personal Information using cookies for the above purposes.
(IX) Other rules on collection and use of Personal Information
If the information provided by you contains any Personal Information of other users, you shall ensure that you have been legally authorized by such users before providing such Personal Information to us.
If we are to collect, process, use and/or disclose your Personal Information for any purpose other than those specified herein, or collect, process, use and/or disclose your Personal Information collected for a certain purpose for any other purpose, we will obtain your prior consent.
We will use the Personal Information collected for machine learning, algorithmic model training, or other data analysis and mining provided that such data are strictly De-identified by security and encryption technologies and cannot re-identify certain individuals, to better safeguard product experience and facilitate our business decision analysis.
III. Partners Involved in Use of Personal Information and Transfer and Disclosure of Personal Information
We may also collect, process, use and disclose Personal Information as set out in this section.
(I) Partners involved in use of Personal Information
1. Basic principles
In our cooperation with our partners, we will abide by the following principles:
1) Principles of legality, legitimacy and minimum necessity: Personal Information shall be processed on a legal basis, for legitimate purposes and to the minimum extent necessary for fulfilling such purposes.
2) Principle of guaranteeing user's right to be informed and right to decide to maximum extent: During Personal Information processing, a user's right to be informed of, and right to decide on, the processing of his/her Personal Information will be fully respected.
3) Principle of maximizing security capabilities: We will take necessary measures to safeguard the security of the processed Personal Information, carefully evaluate the purposes for which our partners use the Personal Information, conduct a comprehensive assessment of the security capabilities of such partners, and request them to comply with the applicable cooperation agreement.
2. Scope of partners
Where a certain function or scenario involves any service provided by our Affiliate or any third party, such Affiliate or third party will be deemed as our partner.
3. Entrusted processing
We may entrust an authorized partner to process your Personal Information, so that such authorized partner may provide you with certain services or perform certain functions on our behalf (for example, when you choose to “become a seller”, we will provide your name, contact information, platform account information, registration time and last login time to relevant service providers, so that they may contact you and help you become our merchant member). We will entrust authorized partners to process your information only for the legal, legitimate, necessary, specified and express purposes stated herein. Such authorized partners will have access only to the information necessary for the performance of their duties, and we will contractually require them not to use such information for any purpose other than as entrusted. If any authorized partner intends to use your information for any purpose other than as entrusted by us, it will obtain your separate consent.
4. Joint processing
In the case of joint processing of Personal Information, we will, pursuant to laws, enter into an agreement with each partner concerned in respect thereof, specifying the rights and obligations of the parties thereto, and will ensure compliance with laws and Personal Information security during the use of relevant Personal Information.
5. Cooperation scenarios
1) For the realization of business functions
A. Payment services
If you choose payment services provided by Alipay, we will disclose your 1688 account, the corresponding Alipay account, order payment-related information, order security-related device information, and other necessary information required by relevant laws to Alipay. If you choose payment services provided by other financial institutions, your bank card number, expiry date and other information necessary for bank card payment will be used by financial institution that provides you with payment services.
You may request others to make payments for you, in which case you will be required to provide the third-party payment account and/or mobile number of the actual payer.
You agree that we may collect information on payment progress from the counterparty and financial institution selected by you, so that we can promptly know and confirm the progress and status of your payment and provide you with after-sales and dispute resolution services.
B. Logistics services
In order to ensure the smooth, safe and accurate delivery and/or provision of commodities and/or services purchased by you, we will disclose delivery information of relevant purchase orders to logistics service providers as selected by you or the providers of commodities and/or services purchased. You understand and agree that it is inevitable for such logistics service providers to know and use your delivery information for the delivery purpose.
Given that it is necessary for us to promptly know and confirm the delivery progress and status so as to provide you with after-sales and dispute resolution services, you agree that we may collect information on delivery progress from relevant logistics service providers.
C. Channel (applet) services
When you use channel (applet) services, we will collect, use and/or disclose the records of your operations (such as login, viewing, use, subscription/adding/cancellation) to provide you with channel (applet) services and contents that are more convenient, of better quality and further personalized. To facilitate your use of the products and/or services provided by our partners to you on 1688 Platform, our partners (usually channel developers) will use your Personal Information.
2) Advertising and analysis services
We may entrust our partners to process information in connection with the placement, coverage and effectiveness of advertisements, subject to adoption of security technologies generally accepted in the industry. We will not entrust such partners to process your personally identifiable information.
3) Security and statistics analysis
A． Guaranteeing security of use: We attach great importance to the security of our products and/or services, and our partners may use necessary Device Information, account information and log information to protect the legitimate rights and interests of users of 1688 Platform from any infringement.
B. Product analysis: In order to analyze the stability of the products and/or services provided by 1688 Platform, our partners who provide analysis services may need to use information on, among others, use of services, device identifiers and overall situation of installation and use of applications.
C. Academic research: In order to enhance the scientific research capability in relevant fields and promote scientific and technological development, we may, together with our partners (such as scientific research institutions and universities), use De-identified or Anonymized data, subject to data security and legitimacy of purposes.
4) Other cooperation scenarios
In addition to the cooperation scenarios above, we may entrust information to other partners supporting our business, including those entrusted by us to provide technology infrastructure services, analyze usage methods of our services, or provide merchant membership services or other customer services. In order to ensure the smooth operation of our applications and the realization of functions, and enable you to use and enjoy more services and functions, authorized partners’ SDK or other similar tools will be embedded in our applications. We will carry out strict security inspection on the APIs and SDKs used by each authorized partner for obtaining information, and agree with each authorized partner upon strict Personal Information protection measures, and require it to process Personal Information in accordance with this Policy and any other applicable confidentiality and security measures, unless it has obtained a separate consent from you.
(II) Transfer
Where we need to transfer Personal Information due to any merger, division, dissolution or declared bankruptcy, we will inform you of the name and contact information of the recipient, who will continue to perform this Policy and other statutory obligations. If the recipient intends to change the original purposes or methods of processing, it will obtain a new consent from you.
(III) Public Disclosure
We will not publicly disclose your Personal Information except:
1. upon your voluntary option or otherwise with your separate consent, we may publicly disclose your Personal Information; or
2. if we determine that you have violated laws or regulations, or have materially breached any of the agreements with or rules of 1688 Platform, or for the purpose of protecting users of 1688 Platform or the general public from damage to their personal or property safety, we may publicly disclose your Personal Information, including your violation/breach and the measures taken by 1688 Platform against you.
(IV) Cessation of operation
If we cease the operation of our products and/or services, we will promptly cease to collect, use and/or disclose your Personal Information. We will notify you of such cessation of operation by a separate notice to you or announcement, and delete or Anonymize your Personal Information in our possession in connection with the products and/or services so ceased.
IV. Your Rights
You may access and manage your information in the following ways, and we will respond to your requests subject to applicable laws and regulations:
(I) Access, correction and supplement
You have the right to access, correct and supplement your information by:
1. logging in to the website version of 1688 Platform, entering the home page of “My 1688” and then conducting operations through “My Alibaba - Settings – Account Information and Account Security”; or
2. logging in to the website version of 1688 Platform to contact our customer service personnel or logging in to the application version of 1688 Platform to contact our customer service personnel through “My - Settings - About Us”.
(II) Change of scope of consent
If we have collected and process your personal information with your consent, you may change the scope of or withdraw your consent to us to collect and process your Personal Information by contacting our customer service personnel. However, please note that with respect to certain categories of Personal Information, such as those necessary for the basic functions of 1688 Platform or for us to perform our obligations imposed by laws and regulations, we may not be able to respond to your request for change of scope of consent. After you withdraw your consent, we will no longer process the Personal Information concerned; provided that your decision to withdraw your consent will not affect the Personal Information processing previously conducted by us under your consent.
(III) Closure of account
You may apply for closure of your account by:
1. submitting an application for account closure through “Account Security” on the website version of 1688 Platform; or
2. contacting our customer service personnel.
After you voluntarily close your account, we will cease to provide products or services to you and delete or Anonymize your Personal Information as required by applicable laws. If it is technically difficult to delete your Personal Information, we will Anonymize such Personal Information or cease the processing thereof other than storage and taking necessary security measures, unless otherwise provided by laws and regulations.
(IV）In addition to the above choices, if you are a user in the UK, EEA, Switzerland, Kazakhstan, in accordance with applicable Personal Information protection and privacy laws and regulations, you are entitled to exercise the following rights:
1. ask us about the processing of your Personal Information and access it, including by asking us to provide you with a copy of your personal information, purposes, terms and methods of their collection and processing.
2. request the correction and/or updating of your Personal Information;
3. request the deletion or blocking of your Personal Information;
4. request the restriction of the processing of your Personal Information, or object to that processing;
5. withdraw your consent to the processing of your Personal Information (where we process your Personal Information based on your consent);
6. request receipt or transmission to another organization, in a machine-readable form, of the Personal Information that you have provided to us where we are using your Personal Information based on consent or performance of a contract; and
7. complain to the relevant supervisory authority;
8. restriction on automated decision-making by information systems: in certain business functions, we may make decisions by relying on non-manual automated decision-making mechanisms, such as algorithms, only. If such decisions affect your legitimate rights and interests, you may contact us through our customer service;
9. the right to opt-out of marketing communications we send you at any time. You can exercise this right according to relevant provisions of this Privacy Policy.
Please note that these rights are not absolute and are subject to a number of exceptions and qualifications that mean they may not always apply.
Privacy rights for users located in the United States:
1. Access/Right to Know: You may ask for: (i) a portable copy of the specific pieces of your personal information that we have collected; (ii) a list of categories of personal information (and sensitive personal information) we have collected about you; (iii) a list of categories of sources from which such information was collected; (iv) a list of categories of information that we sold or disclosed for a business purpose about you; (v) a list of categories of third parties to whom the information was sold or disclosed for a business purpose; and/or (vi) the business or commercial purpose for collecting and selling your information.
2. Deletion: You may request that we delete the personal information we have collected about you, subject to certain exceptions.
Do not Sell or Share my Personal Information for Behavioral Advertising: We do not “sell” or “share” your Personal Information as defined under applicable law.
3. Correct or Update Your Personal Information: You have the right to request that we correct, update, or modify the personal information we maintain about you.
4. Limit the Use and Sharing of Your Sensitive Personal Information: In relation to any sensitive personal information identified in section 1 above, you can request that we limit our use and sharing of such information to those uses which are necessary to perform our services or as otherwise allowed by relevant Personal Information protection laws.
Non-Discrimination: If you exercise any of the above privacy rights, we will continue to treat you fairly and without discrimination. If you exercise your rights under this Privacy Policy, you will not be denied or charged different prices or rates for our services, or provided a different level or quality of goods or services than others.
Authorized agents: You may designate an agent to submit requests on your behalf. When submitting a request through the methods described above, the agent must identify itself as your authorized agent. Depending on the type of request being submitted, we may request additional verification to confirm you have authorized the agent to act on your behalf.
Do Not Track: Some browsers have a “do not track” feature that lets you tell websites that you do not want to have your online activities tracked. At this time our websites do not respond to browsers’ do not track signals.
If you are a User located outside the EEA, UK, Switzerland, the U.S. or Kazakhstan , depending on the Personal Information protection and privacy laws and regulations applicable in your jurisdiction, you may be entitled to exercise some or all of the above rights (subject to certain exceptions and limitations under such laws and regulations).
(V) Response to your requests above
If you or other competent persons intend to make any request above to us, or you intend to exercise your Personal Information rights under applicable laws, you may contact us through our customer service or file a complaint directly to our dedicated Personal Information protection working group. We will respond thereto within ten (10) days, unless otherwise provided in applicable laws.
In order to guarantee the security of your account and your Personal Information, when you make any request above to us, we may verify your identity (for example, by account authentication, requesting you to provide a written request or other reasonable means) before handling your request.
We will not charge any fee for your reasonable requests in principle, but we will charge, as appropriate, certain fees for any repeated request beyond reasonable extent, in accordance with applicable laws. We may reject any request in accordance with applicable laws, for example if it is related to information not directly related to your identity, is repeated without reasonable cause, requires excessive technical support (such as development of a new system or fundamental change of prevailing practice), may cause risks to others’ legitimate rights and interests, or is impracticable.
V. Storage of Information
(I) Retention period
We will retain your Personal Information only for such period as is necessary for achieving the purposes set forth herein, unless otherwise compulsorily required by laws. In addition, we may retain your personal information (or sensitive personal information, if any) for a longer period (including after you are no longer a user) if it is necessary to comply with laws and regulations applicable to us. The criteria we use to determine the appropriate retention periods are:
1. the various regulatory requirements that we are subject to;
2. whether a legal claim could be brought against us for which your personal information may be relevant;
3. the necessity of your personal information to provide the services by us;
4. the type, nature, and sensitivity of your personal information being processed; and
5. the legal basis for processing your personal information – e.g., consent or legitimate interests or otherwise.
Upon expiry of the retention period, we will delete or anonymize your Personal Information as required by applicable laws.
(II) Location of storage and international transfers of Personal Information
In connection with providing the services through 1688 Platform, we will store your Personal Information in the infrastructure of cloud service provider. There will also be international transfers of your Personal Information among the storage location, PRC, Singapore and the countries/regions where service providers engaged are located for purposes such as fulfilling your order. These countries/regions have Personal Information protection laws that may have different provisions to the laws of your country. We ensure that any such international transfers will only be conducted to achieve legitimate purposes and with legal basis or as otherwise permitted by applicable laws. We take appropriate steps to ensure that recipients of your Personal Information are bound to duties of confidentiality, and we implement appropriate measures to ensure your Personal Information will remain protected in accordance with this Privacy Policy, such as standard contractual clauses or other mechanism provided for in the applicable law.
Hereby you provide your consent to cross-border transfer of your Personal Information to any country, including the People's Republic of China. If the relevant jurisdiction requires to store your Personal Information within the country of your residence or otherwise, we will make sure to localize such Personal Information according to the applicable laws.
(III) Storage security
1. Technical Personal Information protection measures
We have taken reasonable and practical security measures up to industry standards to protect your information and prevent your Personal Information from unauthorized access, collection, disclosure, copying, use or modification, disposal, damage or loss or similar risks, and the loss of any storage medium or device on which Personal Information is stored. For example, we will use encryption to improve the security of Personal Information, protect Personal Information transmission between your browser and the server with SSL encryption, and make available HTTPS protocol to secure browsing; we will use trusted protection mechanism to protect Personal Information from malicious attacks; and we will deploy access control mechanism to ensure Personal Information is accessible only to authorized personnel to the maximum extent possible. Currently, our key information system has passed the assessment on classified protection of cybersecurity and rated as Level 3 or above.
2. Organizational Personal Information protection measures
We have in place an industry-leading Personal Information security management system that is data-centric and built on data life cycle, which improves the security of Personal Information from aspects such as organizational structure, system design, personnel management and product technology. We have set up a dedicated Personal Information protection working group. We hold training sessions and examinations to improve our employees’ awareness of the importance of protecting Personal Information.
3. Response to Personal Information security incidents
If our physical, technical or organizational protection facilities are damaged, causing any unauthorized access to, collection, use, disclosure, copying, modification or disposal of, or damage to your information, or the loss of any storage medium or device on which Personal Information is stored in circumstances where the unauthorized access, collection, use, disclosure, copying, modification or disposal of the Personal Information is likely to occur or any damage to your legitimate rights or interests, we will promptly initiate our emergency plan and take reasonable and necessary measures to minimize the impact on you. Upon occurrence of any Personal Information security incident, we will to the extent necessary and if required by laws and regulations, notify you of basic information and potential impact of such security incident, countermeasures we have taken or will take, suggestions on how you may prevent or mitigate risks on your own, and remedies to be taken for you. We will notify you via SMS message, phone call, push notification and other reasonable channels. If it is difficult to notify each user one by one, we will publish announcements in a reasonable and effective manner. In addition, we will report on the handling of Personal Information security incidents as required by regulators.
4. Prevention of account security risks
When you conduct online transactions through the services of 1688 Platform, it is inevitable that you need to disclose your Personal Information, such as contact information or contact address, to your counterparty or potential counterparty. You may also use our services to establish communication, or exchange information or analysis with third parties. Please properly protect your Personal Information, provide it to others only if and to the extent necessary, and never easily trust any other trading instrument, so as to avoid information theft or even telecom/online fraud.
If you suspect any breach of your Personal Information, especially your account or password, please immediately contact our customer service personnel so that we can take appropriate measures at your request.
VI. Updates to Policy
In order to offer you better product and service experience, we have been making continued efforts to improve our products, services and technologies. In case of new services and changes in business processes, we may update our Privacy Policy to inform you of specific changes. Without your express consent, we will not restrict your rights under this Privacy Policy. We will publish any modification made to this Privacy Policy on the relevant webpage.
In respect of any Material Change, we will also notify you by a more prominent notice (including public announcement or pop-up message on 1688 Platform) and seek your consent as required by laws and regulations.
For the purpose of this Policy, “Material Change” shall include without limitation:
1. any material change in the business mode of our services, such as the purpose of Personal Information processing, the categories of Personal Information we process and the ways in which we use Personal Information;
2. any change of the owner of this Privacy Policy as a result of any business adjustment, merger and acquisition or other transaction, or change of the original purposes and methods of processing by the new owner;
3. any change of the main subjects with or to which Personal Information is shared or disclosed;
4. any material change in user’s Personal Information rights or the way to exercise such rights;
5. any change in the contact details of our personnel responsible for Personal Information protection or the channels for complaints; and
6. where a personal information protection impact assessment report indicates that our services have a material impact on personal rights and interests.
We will also retain the historical versions of this Policy on the relevant webpageof 1688 Platform for your reference.
VII. Minors
1688 Platform is intended for adults. The Platform is not directed to and we do not intend to, or knowingly, collect, or solicit Personal Information online from users under the age of 18 (“Minors”). We do not intend to sell any of our products or services to Minors. If a Minor has provided us with Personal Information without parental or guardian consent, the parent or guardian should contact 1688DataProtection@service.alibaba.com to remove the information.
VIII. How to Contact Us
You may contact us as stated below, and we will respond to your request within ten (10) days unless otherwise provided in applicable laws:
1. If you have any questions, comments or suggestions on the contents of this Policy, you may contact us through the customer service of 1688 Platform and the online customer service of 1688 Platform Service Center;
2. We have also set up a dedicated personal information protection working group through which you may contact our Data Protection Officer [Jerry Lau] via 1688DataProtection@service.alibaba.comand（+86-571）81166924 (please indicate the relevance to 1688 Platform and specify relevant facts). Please note that we may not respond to questions not relevant to this Privacy Policy or your Personal Information rights.
In case of any discrepancy between the English version and another language version hereof, the English version shall prevail.
Schedule: Definitions
“1688 Platform” /"the Platform" means the 1688 website (with the domain names being alibaba.com.cn, alibaba.cn and 1688.com) and its relevant mobile applications.
“1688 Platform Service Provider” means 1688.COM PTE. LTD.
“Affiliates” means affiliates of 1688 Platform Service Provider as disclosed by Alibaba Group Holding Limited in its latest annual report as a listed company.
“Alipay” means Alipay.com Co., Ltd., World First Digital Technology Pte Ltd and the provider of Alipay services
“Personal Information” means information of any kind related to an identified or identifiable natural person, whether recorded electronically or otherwise, excluding Anonymized information. 1688 Platform Service Provider would comply with its Personal Information protection obligations in respect of any data that would be considered as Personal Information in certain jurisdictions.
“Device Information” includes hardware model, hardware serial number, software list, list of installed applications, list of installed software, International Mobile Equipment Identity (IMEI), device’s MAC address, SIM card’s IMSI information, Android ID, MEID, Open UDID, GUID, Bluetooth information, broadcasting component communication information, ICCID, operator information, information on sensors (gyroscope, gravity sensor, acceleration sensor, environmental sensor, optical heart rate sensor), and clipboard information, as actually collected during the services.
“Service Log Information”, in relation to you, includes your browsing history, clicking and viewing history, search history, favorites list, information on products added to shopping cart, transaction information, after-sales service information, information on following and sharing, published information, and your IP address, type of browser, telecommunication service provider, language, visit date and time and records of webpages visited.
“De-identification” means the processing of Personal Information through which the data subject cannot be identified without additional information, and “De-identify” or “De-identified” shall be construed accordingly.
“Anonymization” means the processing of Personal Information through which the data subject cannot be identified, and the Personal Information cannot be restored, and “Anonymize” or “Anonymized” shall be construed accordingly.
“Mainland China” means the territory of the People's Republic of China, excluding the Hong Kong Special Administrative Region, the Macao Special Administrative Region, and the Taiwan region.
“SDK” means Software Development Kit.
