Privacy Policy
Updated Date: December 23, 2025
Effective Date: December 23, 2025
PART I. GENERAL PROVISIONS
1.
ABOUT WEBSITE
This Privacy Policy explains how Alibaba (China) Co., Ltd. (“Alibaba”, “we”, “us” or “our”) processes your personal information via this website www.alibabagroup.com (the “Website”). This Privacy Policy does not cover those associated websites that have independent privacy policies. This Privacy Policy applies to the personal information collected from you or provided directly by you thorugh the Website, but does not cover any personal or non-personal information collected through other websites (including the websites of our affiliates). If you use any product or service provided by Alibaba or its affiliates, and would like to know how your related personal information is processed by such product or service, please refer to the privacy policy applicable to such product or service.
2. INFORMATION WE COLLECT AND HOW WE USE YOUR INFORMATION
We may collect and process personal information about you when you visit the Website or choose to interact with us. Unless otherwise noted, this Privacy Policy describes our current information practices . This includes:
2.1 Information We Collect Automatically and How We Use the Information Collected
Category | Details | Purposes | Legal Base |
Device Information | Log personal information about your device such as your device identifiers, device type, device’s operating system, browser and other software including type, version, language, settings, and configuration. | ● Providing the Website. To provide and administer the Website, including securing and troubleshooting the site. ● Providing Services: To provide our services, including ensuring the security and integrity of our services and performing internal services on behalf of the business, such as providing customer services. ● Business Operations. To operate our business, such as improving our operations, securing our systems, prevent and detect acts that endanger cybersecurity and meeting our legal obligations. ● Website Improvement, Development, and Research. To optimize the visiting experience and page performance, to perform visiting statistics on website usage. | Consent; Processing is necessary to perform the contract governing our provision of the Website. |
Location Information including internet or other electronic network activity information | General location information (such as city, state, and country), for example, by using your internet protocol (IP) address. | ● Providing the Website. To provide and administer the Website, including securing and troubleshooting the site. ● Providing Services: To provide our services, including ensuring the security and integrity of our services and performing internal services on behalf of the business, such as providing customer services. ● Business Operations. To operate our business, such as improving our operations, securing our systems, prevent and detect acts that endanger cybersecurity and meeting our legal obligations. ● Website Improvement, Development, and Research. To optimize the visiting experience and page performance, to perform visiting statistics on website usage. | Consent; Processing is necessary to perform the contract governing our provision of the Website. |
2.2 Information We collect that is Provided by You and How We Use the Information Collected
Category | Details | Purposes | Legal Base |
Communication Information for Investor Relations | First name, last name, organization, whether you are an individual investor/institutional investor/broker/others, email address, phone number, subject and message of your communication. Other information you choose to provide in your request or inquiry. | We ask for your consent on provisions of this category of information. | |
Communication Information for Media Relations | First name, last name, media outlet, email address, phone number (optional), subject and message of your communication. Other information you choose to provide. | We ask for your consent on provisions of this category of information. | |
Subscriber Information | First name, last name, whether you are an individual investor/institutional investor/broker/others, country/region, company (optional), job information (optional), email address, category of the subscription | We ask for your consent on provisions of this category of information. | |
Recipient Information | First name, last name, company, department (optional), address, city/state, postal code, country/region, email address, phone number, fax (optional) | To send you a hard copy of our annual report upon your request | We ask for your consent on provisions of this category of information. |
3. DISCLOSURE/SHARING OF INFORMATION
We may disclose or share the above categories of data with the following categories of recipients in some limited circumstances as outlined below:
Category of Recipient | Why? |
Affiliated companies of Alibaba | At your request, render services, or respond to or process your inquiries, or help resolve your problems. The Website is technically supported by affiliated companies, when we may share necessary information for the nececity of Website development. When we need to investigate or prevent or take other action regarding any actual or suspected illegal activity or other misconduct, or to protect the rights, property, or safety of us, our users, or others. |
Relevant law enforcement authorities or other government authorities | As required by applicable law or in response to legal process. |
A third party that acquires all or substantially all of us or our business | In connection with a corporate transaction, such as the sale of asset or shares, a merger, consolidation, reorganization, financing, change of control, acquisition of all or a portion of our business, or in the unlikely event of bankruptcy, or other similar business arrangement in which information may be among the transferred assets, as permitted by applicable law. |
Other third parties (e.g., investor relations service providers, media distribution partners or service providers for data analysis). | With your consent or at your direction in order to fulfil your request for investor updates, deliver subscribed news materials, or provide printed annual reports. |
4. YOUR RIGHTS
Pursuant to applicable data protection laws and depending on the relevant jurisdiction, you may have the following rights in relation to your personal information:
●
Right to Access: You have the right to request access to the personal information we hold about you.
●
Right to Correction: You have the right to request correction of any inaccurate or incomplete personal information.
●
Right to Withdraw Consent: You have the right to withdraw your consent for the processing of your personal information at any time.
Applicable data protection laws may provide some additional rights that you may enjoy. We respond to requests received from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.
5. SENSITIVE/SPECIAL CATEGORIES OF PERSONAL INFORMATION
We do not collect or process personal information considered sensitive personal information, including personal information that reveals an individual’s racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade unions membership, or personal information concerning such an individual’s health or information concerning such an individual’s sex life or sexual orientation or history of criminal convictions.
6. AUTOMATED DECISIONS MAKING
We do not use your personal information with any automated decision-making processes, including profiling, which may produce a legal effect concerning the individual or similarly significantly affect the individual.
7. DATA SECURITY
We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, use, alteration, and disclosure. These measures include encryption, access controls, secure network configurations, and regular security audits. While we strive to protect your personal information, no data storage system or transmission of data over the Internet or any other public network can be guaranteed to be 100 percent secure.
8. INTERNATIONAL DATA TRANSFER
Due to the global nature of our business, your personal information may be stored on a server located in China, assisting us with hosting and maintenance of the Website. We take reasonable measures to ensure appropriate safeguards are in place to protect the transfer of your personal information to the recipient country.
9. DATA RETENTION
In accordance with applicable regulations, we will process your personal information until they become unnecessary for the purpose for which they are being processed, or until you request their deletion, object to the processing or withdraw your consent.
When determining the specific retention period, we take into account various criteria, such as the type of service provided to you, the nature and length of our relationship with you, and mandatory retention periods provided by applicable laws. Where information is used for one or more purpose, we will retain it until the purpose with the latest period expires.
10. INFORMATION RELATING TO CHILDREN
The Website is not intended for children under the age of majority as defined by applicable laws depending on jurisdiction. If you believe that we have inadvertently collected personal information from a minor, please contact us at data-protection@service.alibaba.com.
11. CHANGES TO THE POLICY
We may update this Privacy Policy from time to time. When we update this Privacy Policy, we will notify you by updating the “Last Updated” date at the top of the new Privacy Policy, posting the new Privacy Policy, or providing any other notice required by applicable law. We recommend that you review the Privacy Policy each time you visit the Website to stay informed of our privacy practices.
12. CONTACT US
If you have any questions, comments or suggestions with respect to the content of this Privacy Policy, you may contact us at data-protection@service.Alibaba.com.
PART II JURISDICTION-SPEICIFC ADDENDUM
If you are located in the European Economic Area (“EEA”), UK, or California in the United State, the following additional jurisdiction-specific supplemental terms that apply to you.
FOR RESIDENTS OF THE EUROPEAN ECNOMIC AREA (EEA) and UK
1.
YOUR RIGHTS
If you are a resident of the EEA or UK, depending on the circumstances, you may have the following data protection rights, which you can by contacting us using the contact details provided under Section 12. Contact us above:
Right | Summary |
The right of access | Enables you to access and receive a copy of your personal information |
The right to rectification | Enables you to correct any inaccurate or incomplete personal information we hold about you |
The right to erasure | Enables you to ask us to delete your personal information in certain circumstances |
The right to restrict processing | Enables you to ask us to halt the processing of your personal information in certain circumstances |
The right to object | In certain circumstances and for reasons related to your particular situation, you may object to the processing of your data, in which case we will cease processing them, unless there are compelling legitimate grounds or they are necessary for the establishment, exercise, or defense of possible claims. |
The right to data portability | Enables you to request us to transmit personal information that you have provided to us, to a third party without hindrance, or to give you a copy of it so that you can transmit it to a third party, where technically feasible |
Withdrawal of Consent | With regard to the processing of your data that we carry out based on the consent you have given us, you have the right to withdraw that consent at any time. Once such withdrawal has occurred, unless there is another legal basis that allows us to continue processing, the processing will cease. However, the withdrawal will not have retroactive effects, meaning it will not affect the processing that has been conducted up to that point. |
Any emails sent are in response to enquiries submitted by you and are service messages only.
We also inform you that you have the right to file a complaint with the competent Supervisory Authority if you believe that there has been any violation in relation to the processing of your personal information.
Please note that the Website does not engage in any personalised advertising.
Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details. Please send an email to us if you would like to exercise any of your rights at data-protection@service.Alibaba.com.
2.
INTERNATIONAL DATA TRANSFER
Personal information that we collect from you may be transferred to and stored at a destination outside the EU/EEA and UK. Due to the global nature of our business, your personal information will be stored on a server located in China, assisting us with hosting and maintenance of the Website. We ensure appropriate safeguards are in place to protect the transfer of your personal information to the recipient country.
For transfers from EEA/UK to other jurisdictions including China we rely on the EU Standard Contractual Clauses, approved by the EU Commission, for use between controller and processor.
FOR RESIDENTS IN CALIFORNIA OF USA
We have adopted this addendum to comply with the California Consumer Privacy Act 2018, as amended by the California Privacy Rights Act 2020 and its implementing regulations (collectively the “CCPA”) and any terms defined in the CCPA have the same meaning when used in this Addendum.
Unless otherwise noted, this Privacy Policy describes our current information practices as well as our practices in the preceding 12 months. If you are a resident in the State of California, depending on the circumstances, you may have the following privacy rights:
1.
Right to know, including:
a.
the right to know the categories and/or specific pieces of information collected about you
b.
the right to know the categories of sources of information
iii.
the business purpose for collecting and disclosing information
iv.
the categories of third parties to whom we disclose information
2.
Right to delete your information
3.
Right to correct your information
We do not sell or share information for cross-context behavioral advertising, so we do not offer a way for you to submit such a request. We do not collect sensitive personal information and as such do not use or disclose sensitive personal information for purposes to which the right to limit use and disclosure applies under applicable law. We do not currently engage in automated decision making as defined under applicable law.
We will not discriminate against you for exercising one of your rights. You may authorize an agent to exercise a right on your behalf. To exercise a right, or authorize an agent, please contact us data-protection@service.alibaba.com. Once you have submitted your request, we will respond within the applicable time frame. To help protect the security of your information, we will need to verify your identity in connection with any requests. We may contact you by email to verify your request.
Depending on your request, we may ask you for information such as your name, an email address, or phone number that you have used with Alibaba. We take steps to ensure that only you or your authorized representative can exercise rights with respect to your information.