Introduction

Baozun (hereinafter referred to as “we,” “us,” or “our”) is committed to protecting user privacy and personal information. We understand the importance of personal information to you. Therefore, we will take appropriate protective measures to safeguard the security of your relevant information in accordance with national laws, regulations, and policy requirements. At the same time, when you use our products or services, we may collect, use, store, and share your personal information. In view of this, we have formulated the Baozun Privacy Policy so that you can better understand our services and make appropriate choices.

Notice

Before using any product or service provided by us to you, please read all contents of this Policy in detail and ensure that you have understood and agreed to all contents of this Policy. If you continue to use the products or services provided by us to you after reading this Policy, it means that you fully understand and agree to this Policy. If you have any objection to the contents of this Policy (including any revised version of this Policy in accordance with Article 8 of this Policy), please immediately stop using the products or services provided by us; at the same time, you also have the right to cancel your retained personal information in accordance with the relevant provisions and guidelines of Article 6 of this Policy.

This Policy applies to all products and services provided by us and our controlling entities.
However, if other privacy policies or similar agreements regarding personal information protection are independently set up in the relevant products or services, the independently set privacy agreement or policy shall prevail.

If you have any questions about this Policy or need relevant assistance, please contact us in accordance with the relevant guidelines of Article 9 of this Policy.

I. Types and Content of Information We Collect

When you use the products or services provided by us, we may collect the following types of information from you:

1.1 Information you actively provide when using our products or services.

1.1.1 Information you fill in when registering an account.

For example, the name, nickname, mobile phone number, email address, and other personal information you fill in when registering an account.

1.1.2 Information you upload when using products or services.

For example, the avatar you upload and photos you share when using the products or services provided by us.

1.1.3 Information you submit to our customer service or when participating in activities held by us.

For example, when you participate in our online activities, the activity page may contain information such as your name, telephone number, and home address.

Some of our services may require you to provide specific personal privacy information to achieve specific functions. If you choose not to provide such information, you may not be able to properly use specific functions in the services, but we will try our best not to affect your use of other functions in the services. If you actively provide your personal privacy information, it means that you agree that we may process your personal privacy information for the purposes and in the manners described in this Policy.

1.2 Information we obtain when you use products or services

1.2.1 Log information. When you use our services, we may automatically collect relevant information and store it as service log information.

(1) Device information. For example, device model, operating system version, unique device identifier, battery, signal strength, and other information.

(2) Software information. For example, software version number and browser type. To ensure the security of the operating environment or to provide services as required, we will collect information about the mobile applications and other software you use.

(3) IP address. The Internet Protocol address of the network you use.

(4) Service log information. For example, information you search for and view when using our services, and other similar relevant information.

1.2.2 Location information. When you use location-related services, we may record the location information of your device in order to provide you with relevant services.

(1) When you use the services, we may obtain your geographic location information through IP address, GPS, WiFi, or base stations;

(2) Information provided by you or other users when using the services may contain your geographic location information, for example, the region information contained in the account information you provide, and geographic tag information contained in photos shared by you or others;

1.2.3 Other relevant information. To help you better use our products or services, we will collect relevant information. For example, the friend list, group list information, and voiceprint feature value information we collect. To ensure that you can contact people you know when using our services, if you choose to enable the import contacts function, we may encrypt the names and phone numbers of your contacts and only collect the encrypted information.

1.3 Information about you contained in information shared by other users

For example, photos posted or videos shared by other users may contain your information.

1.4 Information obtained from third-party partners

We may obtain information generated or shared by you when using third-party partner services. For example, when you use WeChat to log in to the products provided by us or receive services, we may obtain relevant information provided by you on WeChat, such as the WeChat nickname or avatar you use, to facilitate your authorization management.
Please be sure to carefully read and understand the user agreement or privacy policy of third-party partner services.

II. How We Use Your Information

We will use the information collected from you for the following purposes within the scope permitted by law and as agreed with you.

2.1 To provide services to you.
For example, when you register to use our products or services, you need to provide us with an account, password, your mobile phone number, and email address. We may verify whether the identity information you provide is valid by sending verification codes to the mobile phone number or email address you provide. You may modify and supplement your account information, such as nickname, gender, birthday, and interests. The account information you supplement will help us provide you with a personalized recommendation experience, but if you do not provide such supplementary information, it will not affect your use of the basic functions of the products.

2.2 To meet your personalized needs.
For example, language settings, location settings, and personalized help services. Through your information, we provide product experiences that are more acceptable and usable for corresponding groups.

2.3 Product development and service optimization.
For example, when a failure occurs in our system, we will record and analyze the information generated during the system failure to optimize our services.

2.4 Security assurance.
For example, we will use your information for identity verification, security prevention, anti-fraud monitoring, archiving and backup, customer security services, and other purposes. For example, the security software you download or install will detect malicious programs or viruses, or identify fraudulent information for you. We may determine the risk of your account by understanding your browsing information, commonly used software information, device information, and other means, and may record some links that we consider risky; we will also collect your device information to analyze product system problems, count traffic, investigate possible risks, and investigate when you choose to send us abnormal information. In addition, information related to your use of the products can help us better understand the operation of the products or services we provide. We may record relevant information, such as the frequency of your use of our products or services, failure information, performance data, or other similar information.

2.5 To recommend advertisements, information, and other content that may interest you.
To evaluate and improve the effectiveness of our advertising placement and other promotional and marketing activities, or to invite you to participate in surveys related to our products or services. Specifically, we may collect your order information, browsing information, and your interests and hobbies (which you may submit in your account personal information) for data analysis to form user profiles, so as to display product or service information that interests you; or to display products you may hope to find when you search.
If you do not wish to receive commercial advertisements sent by us, you may unsubscribe through the unsubscribe method expressly stated in the commercial advertisement or through other methods provided by us.

2.6 You fully understand that in the following circumstances, we do not need to obtain your authorization or consent to use personal information:

2.6.1 Circumstances related to national security or national defense security;

2.6.2 Circumstances related to public security, public health, or major public interests;

2.6.3 Circumstances related to criminal investigation, prosecution, trial, and enforcement of judgments;

2.6.4 Circumstances where it is necessary to protect the life, property, and other major lawful rights and interests of the personal information subject or other individuals but it is difficult to obtain the consent of the individual;

2.6.5 Circumstances where the personal information collected is disclosed by the personal information subject to the public on its own;

2.6.6 Circumstances where your personal information is collected from legally publicly disclosed information, such as lawful news reports and government information disclosure channels;

2.6.7 Circumstances necessary to maintain the safe and stable operation of the products and/or services provided, such as discovering and handling failures of the products and/or services;

2.6.8 Circumstances necessary for lawful news reporting;

2.6.9 Circumstances where academic research institutions conduct statistics or academic research based on public interests and de-identify the personal information contained in the results when providing academic research or descriptive results externally;

2.6.10 Other circumstances stipulated by laws and regulations.

III. How We Use Cookies and Related Similar Technologies

3.1 A Cookie is a neutral technology that allows a website server to store data on or read data from a client. A Cookie file is a file that stores some information related to a user’s visit to a website, in .txt format. Cookie content is usually encrypted. Secure Cookie technology will provide users with more convenient services when surfing the Internet.

3.2 You may manage or delete Cookies according to your own preferences. You may clear all Cookies saved on your computer. Most web browsers automatically accept Cookies, but you can usually modify your browser settings to refuse Cookies according to your needs;
In addition, you may also clear all Cookies saved in the software. However, if you do so, you may need to personally change user settings each time you visit the products, and the corresponding information previously recorded by you will also be deleted, and it may have a certain impact on the security of the services you use. Please note, however, that if Cookies are disabled, you may not be able to enjoy the best service experience, and some services may not work properly.

3.3 In addition to Cookies, we also use web beacons and other similar technologies on the website. Our web pages often contain some electronic images. A beacon is an electronic image file or other technology embedded in a website or email, which can be used to calculate the number of visitors, record whether and when you read an email or website, or to use certain Cookies.

IV. How We Share, Transfer, and Publicly Disclose Your Information

4.1 Sharing

4.1.1 In principle, we will not share your personal information with organizations and individuals other than our controlling entities,
but based on the circumstances listed in Article 2.6 of this Policy, we may share your information with third parties.

4.1.2 We may share your personal information with our affiliates. However, we will only share necessary personal information and it will be subject to the purposes stated in this Privacy Policy. If our affiliates change the purpose of processing personal information, they will seek your authorization and consent again.

4.1.3 We may share your order information, account information, device information, and location information with third parties such as partners to ensure the smooth completion of the services provided to you. However, we will only share your personal information for lawful, legitimate, necessary, specific, and explicit purposes, and will only share the personal information necessary to provide the services. Our partners include the following types:

(1) Suppliers of goods or technical services. We may share your personal information with third parties that support our functions. Such support includes providing goods or infrastructure technical services, payment services, data processing, etc. for us. The purpose of sharing such information is to realize the core functions of our products and/or services.

(2) Third-party merchants. We must share your order information and necessary transaction-related information with third-party merchants to realize your need to purchase goods or services from them and to enable them to complete subsequent after-sales services.

(3) Partners that entrust us to conduct promotion. Sometimes we provide promotional services on behalf of other enterprises to user groups using our products and/or services. We may use your personal information and indirect user profiles formed by collections of your non-personal information to share with partners that entrust us to conduct promotion (“Entrusting Parties”), but we will only provide these Entrusting Parties with information on the coverage and effectiveness of the promotion, and will not provide your personally identifiable information, or we will de-identify such information so that it cannot identify you personally. For example, we may inform the Entrusting Party of how many people viewed their promotional information or purchased the Entrusting Party’s goods after seeing such information, or provide them with statistical information that cannot identify individuals, to help them understand their audience or customers.

4.2 Transfer

We will not transfer your personal information to any company, organization, or individual, unless:

4.2.1 Your explicit consent or authorization is obtained in advance;

4.2.2 Provision is necessary according to applicable laws and regulations, legal procedures, or mandatory administrative or judicial requirements;

4.2.3 In the event of merger, acquisition, asset transfer, or similar transactions, if personal information transfer is involved, we will require the new company or organization holding your personal information to continue to be bound by this Privacy Policy; otherwise, we will require such company or organization to seek your authorization and consent again.

4.3 Public Disclosure

We will publicly disclose your personal information only under the following circumstances and on the premise of adopting security protection measures that conform to industry standards:

4.3.1 According to your needs, disclose your designated personal information in the disclosure manner to which you have explicitly consented;

4.3.2 Where it is necessary to provide your personal information according to the requirements of laws and regulations, mandatory administrative enforcement, or judicial requirements, we may publicly disclose your personal information according to the required type of personal information and disclosure manner. On the premise of complying with laws and regulations, when we receive the above request for disclosure of information, we will require the corresponding legal documents to be issued, such as a subpoena or investigation letter. We firmly believe that the information requested from us should be kept as transparent as possible within the scope permitted by law. We have carefully reviewed all requests to ensure that they have a legal basis and are limited to data that law enforcement departments have the legal right to obtain for specific investigation purposes. On the premise permitted by laws and regulations, the documents we disclose are protected by encryption keys.

V. How We Protect and Preserve Your Personal Information

5.1 We have adopted a complete information security management system. At present, we have passed ISO27001 certification. We have adopted security protection measures that conform to industry standards and are reasonable and feasible to protect your information and prevent personal information from unauthorized access, public disclosure, use, modification, damage, or loss.

5.2 We will take all reasonable and feasible measures to ensure that irrelevant personal information is not collected. We will retain your personal information only for the period necessary to achieve the purposes described in this Policy, unless a longer retention period is required or permitted by law.

5.3 The Internet is not an absolutely secure environment, and it cannot be determined whether communication methods with other users such as email, instant messaging, and social software are fully encrypted. We recommend that you use complex passwords when using such tools and pay attention to protecting the security of your personal information.

5.4 The Internet environment is not 100% secure, and we will try our best to ensure or guarantee the security of any information you send to us.
We will try our best to ensure the security of equipment and protective facilities. However, if, despite our taking necessary measures, our physical, technical, or management protective facilities are damaged, resulting in unauthorized access, public disclosure, tampering, loss, or destruction of information, causing damage to your lawful rights and interests, such loss shall be deemed force majeure, and you agree to exempt us from legal liability.

VI. How You Manage Your Personal Information

You may access and manage your information in the following ways:

6.1 Query your information

Except as otherwise provided by laws and regulations, you have the right to access your personal information at any time. If you cannot normally query your personal information, please seek our help through the contact channels in Article 9 of this Policy.

6.2 Correct or supplement your information

When you find that the information about you processed by us is incorrect, you have the right to request us to make corrections or supplements. You may modify your information according to the operation instructions through the relevant module for correcting information in personal information.

6.3 Delete your information

In the following circumstances, you may request us to delete personal information:

6.3.1 If our processing of personal information violates laws and regulations;

6.3.2 If we collect or use your personal information without obtaining your explicit consent;

6.3.3 If our processing of personal information seriously violates the agreement with you;

6.3.4 If you no longer use our products or services, or you actively cancel your account;

6.3.5 If we no longer provide products or services to you.

If we decide to respond to your deletion request, we will also, to the extent possible, notify the entities that obtained your personal information from us and require them to delete it promptly (unless laws and regulations provide otherwise, or these entities have independently obtained your authorization). After you or we assist you in deleting relevant information, due to applicable laws and security technologies, we may not be able to immediately delete the corresponding information from the backup system. We will securely store your personal information and isolate it from any further processing until the backup can be cleared or anonymization is achieved.

6.4 Cancel your account

You may submit an account cancellation application on the “Cancel Account” page by yourself.
After you actively cancel your account, we will stop providing products or services to you, and delete your personal information or anonymize it in accordance with applicable laws.

VII. Protection of Personal Information of Minors

7.1 In e-commerce activities, we presume that you have corresponding civil capacity. If you are a minor, we require you to ask your parents or guardians to carefully read this Privacy Policy, and use our services or provide information to us only with the consent of your parents or guardians.

7.2 For the collection of minors’ personal information through the use of our products or services with the consent of parents or guardians, we will only use, share, transfer, or disclose such information within the scope permitted by laws and regulations, with the explicit consent of parents or guardians, or as necessary to protect minors.

VIII. Changes and Revisions to This Privacy Policy

8.1 According to changes in relevant laws and regulations or other needs, we may revise the contents of this Policy from time to time. If such changes will result in a material reduction of your rights under this Policy, we will, before the changes take effect,
notify you by prompting in a prominent position on the page or by sending you an email. In such case, if you continue to use our services, it means that you agree to be bound by the revised policy.

IX. Contact Us

9.1 If you have any questions, opinions, or suggestions about this Privacy Policy or matters related to your personal information, please contact us by visiting the online customer service system or sending an email to secteam@baozun.com. We will review as soon as possible and try our best to resolve the problems you face.