1688 Privacy Policy
Effective as of 26 August, 2025
Introduction
We at 1688 (whose domain name is 1688.com, 1688 and the related application and website hereinafter are referred to as “1688” or the “Platform”) recognize the importance of privacy and confidentiality of personal information. 1688 is a e-commerce platform which connects and facilitates sales and purchases of products and/or services between suppliers (“Sellers”) and buyers (“Buyers”). Collectively, the Sellers and Buyers shall be referred to as the “Users”.
On this basis, if you are accessing and using the Platform outside the mainland of China, 1688.COM PTE. LTD., the operator and also the data controller of 1688(“we” or “us”), has formulated this Privacy Policy (“Privacy Policy” or “Policy”) to set out how we collect, use, share and otherwise process personal information in connection with the operation of the Platform for visitors (i.e., non-registered users) and Users. The term "outside the mainland of China" refers to countries and regions other than the mainland area of the People's Republic of China, including the Hong Kong Special Administrative Region, the Macau Special Administrative Region, and the Taiwan region of China. Users outside the mainland of China are those who are either authenticated as having an overseas identity, registered with an overseas mobile phone number, or located overseas and registered on the Platform via email or a third-party account, as well as those who are reasonably inferred to be overseas Users based on the circumstances. The specific determination shall be subject to the actual identification by the Platform (e.g. Users authenticated as having a Chinese mainland identity, and those who have registered with a domestic mobile phone number but have not been authenticated as having an overseas identity are all considered as domestic Users.).
Before using our services, you must carefully read and understand this Policy, especially the clauses in bold and ensure that you have fully understood and agreed with this Policy.
If you have any questions, comments or suggestions on the contents of this Policy, you may contact us using such contact details as specified at the end of this Policy.
BY ACCEPTING THIS PRIVACY POLICY, YOU ACKNOWLEDGE THAT YOU HAVE BEEN AWARE OF THE FUNCTIONS OFFERED BY 1688 AND SUCH PERSONAL INFORMATION AS NECESSARY FOR THE OPERATION OF SUCH FUNCTIONS, AND YOU HEREBY GRANT CONSENT FOR COLLECTING, USING, SHARING AND OTHERWISE PROCESSING OF SUCH PERSONAL INFORMATION.
I. COLLECTION OF PERSONAL INFORMATION
• Information That You Provide to Us
• Information That We Collect Automatically
• Information That We Receive From Third Parties
II. HOW AND WHY WE USE YOUR PERSONAL INFORMATION
III. HOW WE DISCLOSE AND SHARE PERSONAL INFORMATION
IV. RETENTION
V. COOKIES
VI. YOUR RIGHTS
VII. INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION
VIII. CHILDREN’s PRIVACY
IX. SECURITY MEASURES
X. CHANGES TO THIS PRIVACY POLICY
XI. HOW TO CONTACT US
XII. LANGUAGE
XIII.VISITORS AND USERS FROM BRAZIL
XIV. VISITORS AND USERS FROM THAILAND
XV. VISITORS AND USERS FROM VIETNAM
XVI. VISITORS AND USERS FROM KAZAKHSTAN
I. COLLECTION OF PERSONAL INFORMATION
The personal information that we collect from you, either directly or indirectly, will depend on how you interact with us and the Platform. The categories of personal information described in the table above are detailed below:
Information you provide to us
Depending on your access to and/or use of Platform and services, functions, information, software and products of the Platform (such services, functions, information, software and products are collectively referred to as the "Services" hereinafter), we may ask you to provide:
●
account information, such as your user ID, username, password, phone number, email address, profile image and your account settings.
●
transaction information, such as order ID, orders placed, and other details of the products you have purchased through the Platform, your shipping address (e.g., house no., city, state, country of residence, postal code), your ID number for customs clearance if required by law and recipient contact information (e.g., name, mobile phone number) and some other information for returns, refund, tax determinations, payment operations, your transaction and purchase history on or through the Platform.
●
payment information, such as bank account, credit/debit card or similar payment account information, credit/debit card holders, expiration dates and security code and tracking information from cheques or money orders, bank statement, account opening page and billing and delivery address.
●
communication information, such as feedback, comments and/or other contents uploaded on the Platform, copy of your correspondence if you contact us such as via our customer services department, chat service, telephone or email (including in the case wherein those functions involved integration of services provided by third-party service providers), chat information between you and us and other Users via instant messaging services.
In order to facilitate your use of the Services available on the Platform, we may request for access to, and you may provide us with, contents stored in your devices including but not limited to photos, videos, calendar and/or other files. If you are using the communication tools available on the Platform (particularly in case of voice communication), we may require access to your camera and/or microphone.
From time to time, we may also collect information about the existing and prospective Buyers, during or in connection with trade shows, industry events and/or other functions, including representative contact names, addresses, phone numbers and email addresses.
In some situations, you may provide personal information of other individuals to us (such as your family members or friends or persons in your contact list), such as when you add them as recipients or beneficiaries of any use of our Services. You represent and warrant that you have (i) informed such third party about this Privacy Policy; and (ii) obtained the necessary consent where applicable and necessary to permit us to process his/her personal information in accordance with this Privacy Policy.
Information that we collect automatically
When you access Platform, we will automatically collect:
●
device information, such as the type of device you use, unique device identification numbers, IP addresses, browser type, browsing patterns, operating system, language settings, advertising identifiers and other types of identifiers.
●
online activity information, such as information about content that has been searched/viewed and/or downloaded, information about your activity on a page or screen, access times and duration of access, the source from which you arrived at the page, broad geographic location (e.g. country or city-level location) and other details of how you have interacted with our Platform (e.g. inferences we draw from other information we collect.).
●
marketing and advertising information, such as your interests based on your use of the Platform and your purchases, promotions you participate in, preferences in receiving marketing content from us, communication preferences, preferences for particular products or services and your subscription data.
Some of this information may be collected using cookies and similar tracking technology, as explained further under section V. “COOKIES”.
Information that we receive from third parties
●
third party account information, such as account ID, username, profile picture, email address, phone number and your login details associated with the relevant third-party service provider where you choose to log into the Platform using the third party accounts or when you interact with us through an external service or application.
●
compliance information, such as information provided by third parties engaged by us to provide verification services, conducting applicable anti-money laundering fraud and “Know Your Customer” checks, conducting due diligence and verification on Users. This includes your name, email address, company details, and contact information.
●
logistics information, updated delivery and address information from our carriers or other third parties, which we use to correct our records and deliver your next purchase or communication more easily.
II．HOW AND WHY WE USE YOUR PERSONAL INFORMATION
We will use your personal information for the purposes outlined below in accordance with applicable data protection laws. Where required by law, we will obtain your consent before using or disclosing your personal information.
Purpose | Data categories |
Account administration. We use your information to verify your eligibility to register as a User in accordance with our Terms of Use; and set up/administer user accounts, such as providing log in IDs and developing a Platform profile. | Account information Third party account information |
Purchase and delivery of products and services. We use your information to provide services for the display of product or service information, such as browsing, searching, and adding to or removing from the shopping cart, take and handle orders, deliver products and services on the Platform, process payment, provide logistics services via the Platform, facilitate customs clearance declarations/applications via the Platform. | Account information Transaction information Logistics information Payment information Communication information Device information |
Communicate with you. We use your personal information to facilitate communication between Users and us, and between the Buyers and Sellers via the Platform, for the purpose of processing transactions and settlement between the Buyers and Sellers made over the Platform and providing customer service support, such as responding to your queries, feedback and managing claims and/or disputes. We will, by using deep learning technology, provide you with intelligent FAQ chatbot and intelligent voice customer services, and de-identify the records of history and contents of correspondence and communications/telephone conversations between you and us, and to the extent that you cannot be identified, use such de-identified information for training intelligent customer service algorithm models. During the provision of intelligent customer services to you, we will notify you thereof in a prominent manner. We will make continued efforts to improve the quality of our intelligent customer services based on historical data on your use of such services. | Account information Transaction information Logistics information Payment information Communication information Online activity information |
Providing relevant membership/events’ benefits (if applicable), including but not limited to 1688 membership offers and coupon, birthday rewards, anniversary awards, exclusive member prices, depends on which membership or events you apply for | Account information Transaction information Communication information Device information Online activity information Marketing and advertising information |
Recommendations and personalization. We use your personal information to recommend features, products and services that might be of interest to you, identify your preferences, and personalize your experience with the Platform. You can opt out this function by following the method provided under section VI. “YOUR RIGHTS” below. | Account information Transaction information Device information Online activity information Marketing and advertising information |
Marketing. We may collect and use your personal information for marketing purposes in accordance with applicable laws. To the extent permitted by applicable law, we may send you direct marketing communications. If you don't want such ads, you can follow the method described at the bottom of the message you received or using the contact details provided under section XI. “HOW TO CONTACT US” below. If you wish to block pop-ups, you may do so by clicking “Skip” button or other relevant button thereon. | Account information Transaction information Device information Online activity information Marketing and advertising information |
Interest-based advertising. We may use your personal information to send and serve you advertising that we believe will be of interest to you based on the ways in which you use the Platform, your browsing records, and order history. Cookies or other similar technologies may be used to provide you with advertising based upon your browsing activities and interests. Please see section V. “COOKIES” below for more information about how we use Cookies. You can opt out this function by following the method provided under section VI. “YOUR RIGHTS” below. | Account information Transaction information Device information Online activity information Marketing and advertising information |
Research and development. We use your personal information to perform research or statistical analysis in order to improve the content and layout of the Platform, and use your personal information to improve the product offerings and services on the Platform. We will also use the personal information collected for machine learning, algorithmic model training, or other data analysis and mining provided that such data are strictly de-identified by security and encryption technologies and cannot re-identify certain individuals, to better safeguard product experience and facilitate our business decision analysis. | Account information Device information Online activity information Communication information Transaction information Logistics information Payment information |
Fraud prevention and credit risks. To the extent permitted by applicable laws, we use personal information to prevent and detect fraud and abuse in order to protect the security of the Platform, our Users and others. We may also use scoring methods to assess and manage credit risks. | Account information Transaction information Payment information Communication information Device information Online activity information Compliance information |
Comply with legal obligations. In certain cases, we collect and use your personal information to comply with laws. For instance, we use your information to verify your identity and conducting security checks, KYC (know-your-customer) and anti-money laundering due diligence in order to set up user accounts | Account information Communication information Transaction information Payment information Online activity information Compliance information |
In the event that your personal information is required for the performance of contract or for pre-contractual measures, and you did not provide such personal information to us, we may not be able to proceed with your request to enter into a contract with us, or may not be able to perform our obligation under the contract with you, either in whole or in part. For example, we may not be able to facilitate you according to the contract or provide you with Services, either in whole or in part. In addition, in the event that your personal information is required for the performance of legal obligations, failure to provide personal information under said circumstance may result in us and/or you being in breach of the applicable law or regulation.
III. HOW WE DISCLOSE AND SHARE PERSONAL INFORMATION
We may disclose (or provide access to) personal information to the following categories of recipients:
●
Other Users where necessary in connection with the facilitation of purchases and communications made between you and other Users. If you are a Buyer, Sellers that you purchase from will also collect, use and/or process personal information about you relevant to or connected with your Platform purchases and communications with them. Please note that, in using our Services, you may share personal information to others; for example, when other visitors and Buyers view items on our Platform, they may see item reviews you left as well as your profile image and nickname.
●
Our group companies and affiliates and/or their designated service providers that work with us to provide processing services such as software, tools, systems and messaging services for purposes described in this Privacy Policy.
●
Third party business partners and service providers engaged by us or working with us to assist us to provide services to you, or who otherwise process personal information for purposes described in this Privacy Policy or notified to you when we collect your personal information. Categories of these partners or service providers include:
●
IT system and software service provider, such as hosting services (including cloud storage) providers, instant messaging service providers for enabling communications between the Buyers, Sellers and us via the Platform, translation service providers to provide translation service to facilitate communication between Users and Users and us, software optimization services, logistics management software, advertisement management software or system maintenance services providers;
●
advertising and analytics service provider, such as third-party advertising, marketing and analytics services providers relating to Buyers’ behavior for interest-based advertising purposes. These services providers may combine information they collect on our Platform with data they collect themselves and data they collect through other sources in order to conduct targeted advertising. Some of this information may be collected using Cookies and similar tracking technology, as explained further under the section V. “COOKIES” below. The processing activities of these third-party services providers are governed by their own privacy policies, not this Privacy Policy;
●
business and marketing partner, such as third parties with whom we co-sponsor events or promotions, with whom we jointly offer products or services, or whose products or services may be of interest to you;
●
due diligence and verification service providers, who collect and process personal information to perform due diligence and business verification services;
●
payment service providers who collect and process personal information to assist with settling the payments for transactions. The activities of payment service providers may be governed by their own privacy policies, not this Privacy Policy;
●
credit risk assessment providers to conduct risk assessment on Users to better facilitate transaction;
●
logistics partners for providing delivery services for Buyers, including return and exchange of products;
●
custom agents for customs clearances purposes;
●
software development kit (“SDK”) service providers to provide SDK services;
●
customer service providers to provide after-sale services;
●
insurance service providers to provide insurance services where requested by a User or us; and
●
risk control service providers to assess the security of Users’ accounts and transaction risks;
●
External professional advisers, law enforcement agencies, insurers, government and regulators and other organizations where it is necessary to comply with applicable laws or to exercise, establish or defend our legal rights or protect your vital interests or those of any other person; or as otherwise required or permitted by applicable laws.
●
Actual or potential business acquirers (and its agents and advisers) in connection with any actual or proposed purchase, merger or acquisition of any part of our business, provided that we inform the acquirer that it must use your personal information only for the purposes disclosed in this Privacy Policy.
IV. RETENTION
We retain your personal information for as long as it is considered necessary for the purposes for which it was collected, used or disclosed as outlined in this Privacy Policy, for example to provide services or products to you, or as required or permitted by applicable laws, such as tax and accounting laws. When we no longer have a necessity to process your personal information, we will either delete or anonymize it, or if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
The duration for which your data is retained depends on how you use our Platform (for example if you are logged in as a User or visiting as a visitor) and the purpose for which the information you provide is used. For example, if you are a User, certain data will be retained for a specific period to fulfil our contractual obligations with you and to comply with applicable laws (such as if a court order is received regarding your account, we would retain your account information longer than the usual retention period when an account is deleted), or in case of disputes.
V. COOKIES
This section explains how we use cookies and similar technologies (we refer to them collectively as “Cookies”, or “Cookie”) to recognize you when you visit our Platform. It explains what these technologies are, why we use them, and your rights to control them.
●
Cookies are small text files collecting amounts of data that your browser receives and stores on the local drive of your computer or mobile device, which enable your device to be recognized when you visit a website or application. We also use other technologies that function similarly to cookies. For example, we use Software Developer Kits (“SDKs”), a collection of software development tools in one installable package, which allows third-party developers to integrate with our mobile application for specific purposes (e.g., authentication).
●
We along with our partners or authorized third-party providers use Cookies to provide you with a better, faster and safer User experience. Some Cookies are strictly necessary to make our Services work, ensure data and IT security and prevent fraudulent activities. We refer to these as “Essential Cookies”. Other Cookies enable us to provide Services functionality, or to enhance User experience on our Services, for instance, we may provide Users with personalized content and advertising in the future.
●
Essential Cookies are strictly necessary to enable to access and use of our Services, and you cannot disable them. If you disable Non-essential Cookies, you can still use our Services although your use of some features and access to some areas on our Services may be limited.
VI. YOUR RIGHTS
You may have the following data protection rights and/or other rights depending on your applicable laws, which you can exercise pursuant to applicable laws at any time following the method below and/or by contacting us using the contact details provided under section XI. “HOW TO CONTACT US” below:
●
The right to access, correct, update or request deletion of your personal information by:
1)logging in to the application version of 1688 Platform, entering the home page of “Me” and then conducting operations through “Me - Settings – Account & Security”; or
2)logging in to the application version of 1688 Platform to contact our customer service personnel or logging in to the application version of 1688 Platform to contact our customer service personnel through “Me - Settings - About Us”.
●
The right to ask us, under certain circumstances as provided by law, to restrict or object processing of your personal information.
●
The right to opt-out of marketing communications we send you at any time. You can exercise this right by following the method described at the email you received or using the contact details provided under section XI. “HOW TO CONTACT US” below. If you wish to block pop-ups, you may do so by clicking “Skip” button or other relevant button thereon.
●
The right to obtain a copy of your personal information, and to request that we disclose the source(s) of your personal information which has been obtained without your consent.
●
If we have collected and process your personal information with your consent, then you have the right to withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent. Please note that upon your consent withdrawal, we may not be in a position to continue to provide the Services to you or perform any contract we have with you, and we will not be liable in the event that we do not continue to provide the Services to, or perform our contract with you. Our legal rights and remedies are expressly reserved in such an event.
●
The right to request to have your personal information in a format which is generally readable or usable by the automatic tools or devices, and which can be used or disclosed via automatic means, and to have your personal information in said format transmitted to another data controller; and
●
The right to request suspension of the use of your personal information.
●
The right to file a complaint in relation to our processing of your personal information with competent authority in accordance with applicable laws.
In addition, you may manage the personalized recommendation services and interest-based advertising as follows:
1）When you use our site search services, if you wish to view search results that are not sorted according to your personal characteristics, you may click “Filter” on the search results webpage and then choose to filter and sort by “sales”, “price” , "repurchase rate" and/or “general sorting”.
2) If you do not wish to receive any recommendation of commodities or services provided by us on the homepage or in your purchase order or favorites, you may tap and hold on the pictures of such recommended commodities or services and then choose to block similar commodities or the category which such commodities or services are under by following the instructions on the subsequent pop-up;
3) You may manage personalized contents sent by us through “Me - Settings - Privacy Statement - Recommendation Management - Settings for Personalized Recommendations” (Click to manage personalized recommendations).
4) You may manage personalized advertisements sent by us through “Me- Settings - Privacy Statement - Advertisement Management - Opt out of Personalized Advertisements” (Click to manage personalized advertisements); and
We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. If you or other competent persons intend to make any request above to us, or you intend to exercise your personal information rights under applicable laws, you can contact us through the contact details provided under section XI. “HOW TO CONTACT US” below. We will respond thereto within 10 days, unless otherwise provided in applicable laws.
If you are aware of changes or inaccuracies in your information, you should inform us of such changes so that our records may be updated or corrected.
In order to guarantee the security of your account and your personal information, when you make any request above to us, we may verify your identity (for example, by account authentication, requesting you to provide a written request or other reasonable means) before handling your request.
We will not charge any fee for your reasonable requests in principle, but we will charge, as appropriate, certain fees for any repeated request beyond reasonable extent, in accordance with applicable laws. We may reject any request in accordance with applicable laws, for example if it is related to information not directly related to your identity or may violate the rights and freedoms of others.
VII. INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION
In connection with providing the services through 1688, we will store your personal information in China, Singapore and/or the countries/regions requiring local back up and data center storage depending on the country/region you are located in (such as Kazakhstan). Being a cross-border platform, it is inevitable that there will be certain cases that require international transfer of personal information among the storage location, China, Singapore and the countries/regions where service providers engaged are located for purposes such as fulfilling your order. These countries/regions have personal information protection laws that may have different provisions to the laws of your country. We ensure that any such international transfers will only be conducted to achieve legitimate purposes and with legal basis or as otherwise permitted by applicable laws. We take appropriate steps to ensure that the destination country receiving such personal information has adequate data protection standards and/or recipients of your personal information are bound by duties of confidentiality, and we implement appropriate measures to ensure your personal information remains protected in accordance with this Privacy Policy and the applicable data protection laws, including de-identification processing, encrypted transmission, regular assessment and auditing of the security capabilities of the recipient, and entering into data processing agreements/terms, etc.
TO THE EXTENT REQUIRED AND PERMITTED BY APPLICABLE LAWS, HEREBY YOU PROVIDE YOUR CONSENT TO CROSS-BORDER TRANSFER OF YOUR PERSONAL INFORMATION TO SPECIFIC COUNTRIES THAT ARE NECESSARY FOR OUR BUSINESS OPERATIONS, INCLUDING CHINA ANDSINGAPORE.
VIII. CHILDREN’s PRIVACY
1688 is intended for adults. The Platform is not directed towards, and we do not intend to, or knowingly collect or solicit personal information online from visitors or Buyers who do not meet the adult status requirements of the User's respective country (“Child”/ “Children”). We do not intend to sell any of our Services to Children.
By accessing or using the Platform, you confirm and warrant that you are not a Child and that you have the capacity to understand and accept the terms of this Privacy Policy. If you are a Child, you may use our Platform only with the consent and under the supervision of your parents or legal guardians, in accordance with applicable laws.
If Children have provided us with personal information without parental or legal guardian consent, the parent or legal guardian should contact us through the contact details provided under section XI. “HOW TO CONTACT US” below to remove the information or to provide consent for the processing of the Children’s personal information. By doing so, they accept and agree to be bound by this Privacy Policy and assume responsibility for the Children’s actions.
IX.SECURITY MEASURES
We implement appropriate technical and organizational measures, which may include physical measures, to prevent unauthorized or unlawful loss, access to, use, alteration, correction or disclosure of personal information. Upon becoming aware of a data breach, we will notify you and the regulatory authorities in accordance with the timescales and scope required by applicable data protection laws.
For Users of the Platform, some of your information can be viewed and edited through your account, which is protected by a password. It is your responsibility to keep your password secure and confidential. You must not divulge your password to anyone. Our personnel will never ask you for your password in an unsolicited phone call or in an unsolicited email. If you share a computer with others, you should not save your log-in information (e.g., user ID and password) on that shared computer. Remember to sign out of your account and close your browser window when you have finished your session.
We take the security of your information seriously. While we implement industry-standard encryption and access controls to safeguard data in our care, it's important to understand that no digital transmission method can be considered completely invulnerable. We continuously monitor and update our security practices to protect against emerging threats, and encourage Users to adopt strong password practices as part of our collaborative approach to data protection.
X. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time in response to changing legal, technical or business developments. When we update our Privacy Policy, we will take appropriate measures to notify you, consistent with the significance of the changes and as required by applicable law. This may include posting an amended Privacy Policy on the Platform. Unless otherwise specified by applicable laws, any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). We recommend that you review the Privacy Policy each time you visit our Platform to stay informed of our privacy practices.
XI. HOW TO CONTACT US
Contact information of the Data Protection Officer: Jerry Lau, 1688DataProtection@service.alibaba.com, 60 PAYA LEBAR ROAD #06-33 PAYA LEBAR SQUARE SINGAPORE (409051).
We will respond you within ten (10) days, unless otherwise provided in applicable laws.
XII.LANGUAGE
In case of any discrepancy between the English version and another language version of this Privacy Policy, the English version shall prevail.
Jurisdiction-Specific Supplemental Terms
XIII.USERS FROM BRAZIL
This section applies if you are a User located in Brazil. The personal information you provided to us will be stored in China and Singapore. Please also note, if you are a Buyer, Sellers will also act as a data controller of personal information and your Platform purchases and communications with them. Please refer to the privacy policies of those Sellers (if any) for more information about the ways in which they will process such information. The personal information processing activities performed by us under the Platform for the Brazilian market, which includes any processing activity (i) carried out in Brazil, (ii) aimed at offering or providing goods or services or processing data of individuals located in Brazil, or (iii) collected in Brazil, are carried out in accordance with the laws of Brazil, including the Marco Civil da Internet, Federal Law No. 12.965/2014 ("MCI") and the General Data Protection Law, Federal Law No. 13.709/2018 ("LGPD") and their latest amendments (if any) and respective regulations.
We process the categories of personal information described under section I. “COLLECTION OF PERSONAL INFORMATION”. Depending on the services you use, this may include your identifiers (e.g. IP addresses, date and time of access to the Platform, and email addresses), business and internet or other online activity information. It may also include inferences we draw from other information we collect.
Legal Basis for Data Processing
We process personal information for the purposes set out in this Privacy Policy observing legal basis set out in the LGPD. Our legal basis for processing your personal information will depend on the personal information in question and the specific context in which we collect it (purpose of the processing), but will include when it is:
●
necessary for the performance of the contract between you and 1688.COM PTE. LTD. (for example, to provide the services requested by you and to identify and authenticate you so that you can use the Platform).
●
necessary to comply with legal requirements (for example, to comply with applicable accounting rules and make required disclosures to law enforcement authorities);
●
necessary to achieve our legitimate interests or those of third parties;
●
based on your consent;
●
necessary for the regular exercise of rights in judicial, administrative and arbitration proceedings;
●
necessary for the protection of life and limb or of the data subject and third parties;
●
used for credit protection purposes;
●
used for other cases foreseen in the LGPD or applicable legislation.
If we collect and use your personal information based on our (or a third party's) legitimate interest, that interest will generally be to operate our Platform and services, manage our relationship with you and communicate with you for legitimate business interest, for example, improving our Platform and Services (including by training our intelligent customer service algorithm models when the de-identification is impossible), conducting marketing campaigns, or for the purpose of ensuring the security of our Platform and services and detecting or preventing illegal activities such as fraud. We may have other legitimate interests and, if appropriate, we will make clear to you at the relevant time what those legitimate interests are. When relying on the processing of your data in the legitimate interest legal basis we will always ensure a lawful balance between our legitimate interests and your fundamental rights and make our best efforts to use the necessary data to achieve our interests.
If we ask you to provide personal information to comply with a legal requirement or to enter into a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as the possible consequences if you do not provide your personal information). In some cases, it may be necessary for you to provide us with personal information for processing as described above in order for us to provide you with all of our services and for you to use all of the features of our Platform.
If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under section XI. “HOW TO CONTACT US”.
Your Rights
If you are a User located in Brazil, in addition to the aforementioned privacy rights under section VI. “YOUR RIGHTS”, you can exercise the following data protection rights under the Brazilian General Data Protection Law
●
The right to confirm the existence of the processing: You have the right to inquire whether your personal data is being processed by 1688.
●
The right to request a review of decisions based solely on automated processing, which may affect your interests, under certain circumstances.
●
The right to object to the processing of your personal information where it is based on one of the events of waiver of consent, in case of noncompliance with the provisions of the LGPD.
●
The right to request information about with whom your personal information has been shared.
●
The right to request anonymization of personal information, under certain circumstances.
●
The right to receive clear and complete information about the possibility and consequences of not providing consent when applicable for the processing of personal information.
●
The right to portability: You have the right to request the transfer of personal data from 1688's database to a third party (in accordance with further regulation issued/to be issued by the Brazilian Data Protection Authority’s ("ANPD")).The right to restriction, objection, or deletion: If there is any processing that is not in compliance with the LGPD, the data subject may: (i) request the blocking of his/her personal data, temporarily suspending our ability to process them, (ii) object to the processing of his/her personal data, and/or (iii) request the deletion or anonymization of his/her personal data, including when the data processing relies on consent, in which case 1688 must delete or anonymize all the data irreversibly, except as required by law. 1688 may retain the personal data if necessary to (a) comply with applicable law; or (b) fulfill a contract or to exercise our rights in judicial, administrative, or arbitration proceedings.
●
The right to lodge a complaint before the ANPD about personal data processing carried out by 1688. You can contact the ANPD through the means indicated on the authority's website: https://www.gov.br/anpd/pt-br.
With respect to the confirmation of the existence of processing and access to personal data, we will respond thereto immediately, in a simplified format or within 15 days, with a complete declaration. As for the other rights, we will follow ANPD’s regulations on the matter. We will not charge any fees to answer your inquiries.
International Data Transfers
As mentioned in Section VII of this Policy, personal data may be transferred internationally by 1688 through 1688 systems, due to 1688's global footprint, always linked to the purpose of providing the Services, mainly to China and Singapore, without prejudice to other countries where our service providers may be located.
The duration of processing outside Brazil will depend on the term of the contracts with such third parties and/or the necessity of their support to achieve the intended purposes, including the provision of the Services, always in accordance with the retention and disposal rules outlined in this Policy.
Even when personal data is processed outside Brazil, 1688 ensures compliance with applicable data protection and privacy laws by implementing the security measures described in this Policy.
You may exercise your rights as data subject outlined in this Policy also with respect to international data transfers.
Children and Adolescents' Privacy
The Platform and Services are not intended for or directed at children or adolescents, only for adults (individuals that are at least 18 years old). In accordance with Brazilian law, children are individuals under the age of 12, and adolescents are individuals between the ages of 12 and 18 (“Child” or “Children”).
If 1688 becomes aware that the personal data processed are from Children and are being processed without the appropriate legal basis, to the detriment of their best interests, 1688 will take immediate steps to delete such personal data.
If a parent or guardian wishes to inquire about anything related to the personal data belonging to a Child, please use the contact information indicated in Section XI of this Policy.
XIV. VISITORS AND USERS FROM THAILAND
This section applies if you are a User from Thailand.
A new paragraph shall be added to the section IV. “RETENTION” as follows:
We retain your personal information for as long as is required in order to fulfil our contractual obligations with you. In general, we will retain your personal information throughout the period which you are our Users and for ten (10) years after the cessation of our contractual relationship, or our last contact/communication, unless otherwise provided in applicable laws. Notwithstanding the above, we may retain your personal information longer than the specified period, only as otherwise permitted or required by the applicable law.
Section VIII. “CHILDREN’s PRIVACY” shall be subject to the following:
Children refer to those who are under 20 years old and have not legally married.
XV. VISITORS AND USERS FROM VIETNAM
This section applies if you are a User from Vietnam.
A new paragraph shall be added to the section II．“HOW AND WHY WE USE YOUR PERSONAL INFORMATION” below the table as follows:
In limited circumstance, certain information we collect may be considered as sensitive personal information as defined by applicable law, such as payment information in Vietnam.
The name of the section VI. “YOUR RIGHTS” shall be amended as “YOUR RIGHTS AND OBLIGATIONS” and a new paragraph shall be added as follows:
Your obligations
You must (A) protect or request other relevant organizations and individuals to protect your personal information, (B) respect and protect the personal information of others, (C) provide complete and accurate personal information when consenting to the personal information processing, and (D) implement regulations on personal information protection and other relevant obligations as provided by applicable law.
Paragraph 2 of section XI. “HOW TO CONTACT US” will be amended as follows:
We will respond you within 72 hours, unless otherwise provided in applicable laws.
XVI. VISITORS AND USERS FROM KAZAKHSTAN
This section applies if you are a User from Kazakhstan.
Paragraph 2 of section XI. “HOW TO CONTACT US” will be amended as follows:
We will respond you within one (1) working day, unless otherwise provided in applicable laws.
