JD Privacy Policy
Dear JD users: We have updated the JD Privacy Policy. The update of this version of JD Privacy Policy mainly focuses on the types of your personal information that JD needs to collect and the retention period of your personal information.
[Special Notification] Please carefully read JD Privacy Policy (especially the bold or underlined content therein) and confirm that you have understood our rules to process your personal information. If you have any questions while reading it, you may consult us through the contact information in the JD Privacy Policy; If you disagree with any of the terms in the JD Privacy Policy, you should immediately stop visiting or using JD.
Version update date: October 13, 2020
Version effective date: October 20, 2020
Introduction
Beijing JD 360° E-Commerce Co., Ltd. (hereinafter referred to as "We") attaches great importance to user privacy and personal information protection. When you use our products and/or services, your relevant information may be collected and used by us. Through JD Privacy Policy ("the Privacy Policy"), we hope to explain how we will collect, use, store, share and transfer your relevant information and the ways we will provide for you to access, update, delete and protect such information when you use our products and/or services.
This privacy policy will help you understand the following content:
I. How Do We Collect and Use Your Personal Information
II. How Do We Use Cookies and Similar Technologies
III. How Do We Share, Transfer and Publicly Disclose Your Personal Information
IV. How Do We Protect and Save your Personal Information
V. How Do You Manage Personal Information
VI. Protection of Personal Information of Minors
VII. Notification and Revision
VIII. How Do you Contact Us
The Privacy Policy is closely related to the JD mall services you use and all service functions provided by such services (hereinafter referred to as "our products and/or services"). We hope that you carefully read this Privacy Policy and fully understand the content herein before using our products and/or services, and we will let you make choices you think appropriate under the guidance of the Privacy Policy. We will make relevant terminologies presented in the Privacy Policy as concise as possible and provide links for further explanation of them so that you can have a better understanding. Your use or continuous use of our products and/or services after the update of this Privacy Policy (as we inform you of the latest updates) implies that you agree on the contents of this Privacy Policy (including the updated version), and grant us the permission to collect, use, save and share your relevant information in accordance with this Privacy Policy.
In particular, please note that this Privacy Policy applies to each of our products and services that we provide to you in the form of websites, clients, applets, and new forms that emerge as technology evolves. If we and our affiliates use products or services from JD Mall (such as logging in with JD Mall account) that do not have a separate privacy policy, then this Privacy Policy also applies to those products or services. If we and our affiliates have separate privacy policies for the products or services they provide to you, the corresponding privacy policies will apply to the corresponding products or services.
If you have any questions about this privacy policy or related matters, you can visit the online customer service system (https://help.jd.com), send an email to privacy@jd.com, or call any of our customer service numbers, etc. to contact us.
I. How Do We Collect and Use Your Personal Information
Personal information refers to all kinds of information which is recorded in electronic or other forms, able to identify the identity of a specific natural person or reflect the activity of a special natural person independently or in combination with other information. Personal sensitive information refers to personal information that may endanger personal and property safety once leaked, illegally provided or abused, and easily lead to damage to personal reputation, physical and mental health or discriminatory treatment, etc. Personal information covered by this privacy policy includes: basic information (including personal name, birthday, gender, address, personal telephone number, e-mail address); Personal identification information (including ID card, officer's license, passport, driver's license, etc.); Personal biometric information (including voiceprint, facial recognition features, etc.); Network identification information (including personal information such as subject account number, IP address, personal digital certificate, etc.); Personal property information (including transaction and consumption records, balance, Jingdou, coupons, JD E-card, game redemption codes and other virtual property information); Contacts; Personal Internet access records (including web browsing records, software usage records, click records); Personal common device information (including hardware model, device's MAC address, type of operation system, unique device identification code of software list (such as IMEI/android ID/IDFA/OPENUDID/GUID, SIM card IMSI information and other information describing the basic situation of personal common devices)); personal location information (including travel information, precise positioning information, accommodation information, latitude and longitude, etc.); Among them, the bolded part of the font is the personal sensitive information involved.
We will only collect and use your personal information for the following purposes:
(I) You must authorize us to collect and use your personal information
Our products and/or services include some core functions, which include functions necessary to realize online shopping and functions necessary to ensure transaction security. We may collect and use the following information about you to achieve these functions. If you do not provide relevant information, you will not be able to enjoy the products and/or services we provide. These features include:
1. Realize the necessary functions for online shopping
(1) User registration
You first need to register a JD account to become a JD user. When you register, you at least need to provide us with your JD account name, password, your own mobile phone number, and email address (used to verify your email). We will verify your identity by sending SMS verification codes or emails. Your account name is your default nickname. You can modify and supplement your nickname, gender, birthday, hobbies, and information related to your real-name authentication. All these information belong to your "account information". Your supplementary account information will help us provide you with personalized product recommendations and a better shopping experience. However, if you do not provide this supplementary information, it will not affect your use of the basic functions of online shopping.
(2) Product information display and search
In order for you to quickly find the product you are looking for, we may collect device information (including device name, device model, device identifier, operation system and application version, language setting, resolution, service provider network ID (PLMN)), and browser type during your use of our products and/or services to display product information in the best way. We might also use your above information in order to constantly improve and optimize the above function.
You can also search to accurately find the goods or services you need. We will keep your search content to facilitate your repeated input or to show you the goods or services associated with your search content.
Please note that separate device information, browser type or search keyword only cannot identify you. It does not belong to your personal information, and we have the right to use it for any purpose; Only when your device information, browser type or search keyword information is used in conjunction with other information about you and can identify you, we will treat your device information, browser type or search keyword information as your personal information during the period of combined use, and process and protect it in accordance with this Privacy Policy.
In order to show you the information about the goods or services you are interested in, or to show you the goods or services you may wish to find when you search, we may collect your order information, browsing information, and your hobbies (which you can fill in the account information) for data analysis to form a user portrait. We may also obtain other information about you for reasonable needs to provide services and improve service quality, including relevant information provided by you when you contact customer service, questionnaire response information sent to us when you participate in the questionnaire survey as well as the relevant information we obtain when you interact with our affiliates and our partners. We may connect the information that we have collected on different devices used by you, so that we can provide you with consistent services on these devices. We may combine information collected from one service with information collected from other services in order to provide you with services, personalized content and suggestions. If you do not want to be affected by personalized service, you may choose to browse and search products and services by category on the product display page. We also provide you with options in the search results that are not based on personal characteristics, such as sorting products or services by price, sales volume, etc.; Without your explicit consent, we will not provide your personal information to third parties.
(3) Place an order
When you are ready to settle the goods in your shopping cart, JD system will generate an order for you to purchase the goods. You need to fill in at least your consignee's name, delivery address, and mobile phone number in the order. The order will contain the order number, the information about the goods or services you have purchased, the amount of payment you should pay, and the payment method; You can additionally fill in the consignee's fixed phone number and email address to add more contact information to ensure that the goods can be delivered accurately, however, not filling in this information will not affect the generation of your order.
When you book airline tickets, train tickets, hotels, or package tours, purchase cell phone number cards or contract cell phones, or apply for Internet and other services on JD.com, you may be required to provide your real name information in accordance with national laws and regulations or the requirements of service providers (including ticket sellers, hotels, travel agencies and their authorized agents, basic telecommunication operators, mobile resale operators, etc.). Such real name information may include your identity information (such as a copy or number of your birth certificate, household register, ID card, military officer's certificate, passport, driver's license and other documents containing your identity information), your own photo or video, name and telephone number. These orders may include your itinerary, hotel address, your designated service address or device installation address (which could be your home address).
All the above information constitutes your "order information". We will use your order information to verify your identity, confirm transactions, make payments and settlements, complete delivery, inquire about orders for you, and provide customer service consultation and after-sales service. We will also use your order information to determine whether your transaction is abnormal to protect your transaction security.
(4) Payment function
After you place an order, you can choose payment services provided by JD's affiliates or third-party payment institutions cooperating with JD (including payment channels such as JD Pay, WeChat Pay, Union Pay and Net Union, collectively referred to as "payment institutions" hereinafter). The payment function itself does not collect your personal information, but we need to share your JD order number and transaction amount with these payment institutions to confirm your payment instructions and complete the payment. An "affiliate" refers to any company or institution controlling or anticipated to control, controlled or anticipated to be controlled, or under the common control with a party now or in the future, as well as the legal representative of such company or institution. "Control" refers to the ability, directly or indirectly, to influence the management of the company mentioned, whether through ownership, voting shares, contracts or other methods determined by the people's court.
(5) Delivery of product and/or service functions
After you place an order and choose cash on delivery or complete the payment online, JD, JD's affiliates, suppliers, merchants or third-party delivery companies that cooperate with JD (hereinafter referred to as the "delivery companies") will complete the delivery of the order for you. You know and agree that JD, JD.com's affiliates, suppliers, merchants or delivery companies cooperating with JD will use your order information in the above links to ensure that your ordered goods can be delivered safely.
While providing delivery services to you, our delivery staff will assist you in completing your real name authentication based on the need for real name authentication as required by certain business laws, such as when you purchase a cell phone number card. We will use your ID card to verify your identity through the proprietary device of the national certification authority in this process, we will not collect your ID card information in this process, and our delivery personnel are subject to the provisions of the company's confidentiality system.
(6) Customer service and after-sales service
Our telephone customer service and after-sales service will use your account information and order information.
To ensure the security of your account, our call center customer service and online customer service will use your account information to verify your identity with you. When you need us to provide customer service and after-sales service related to your order information, we will inquire about your order information. You may provide other information than the above information when communicating with our customer service staff, for example, when you request us to change the delivery address, contact person or contact phone number.
2. Functions necessary to ensure transaction security
In order to improve the security of the system when you use our products and/or services, prevent phishing website fraud and protect account security more accurately, we may learn about your browsing information, order information, your commonly used software information, and device information to judge the risk of your account, and may record some links ("URL") that we think are risky. We will also collect your device information to analyze JD's system problems, count traffic, troubleshoot possible risks and abnormal information sent by you.
(II) Circumstances under which you can choose to provide personal information or not
1. In order to make your shopping more convenient or more fun, and to enhance your online shopping experience on JD.com, our following extended functions may collect and use your personal information. If you do not provide this personal information, you can still shop online, but you may not be able to use the extended functions that bring you shopping pleasure or you need to fill in some information repeatedly when purchasing certain products. These extended functions include:
(1) Personalized recommendation function based on location information: We will collect your location information (we only collect your geographic location at that time, but will not combine your location information from time to time to determine your whereabouts) to determine your location and automatically recommend products and/or services that can be purchased in your region, such as recommending the nearest available hotel to you.
(2) Extended functions based on the camera: With this extended function, you can shoot videos, take pictures, scan codes, and log in with face recognition. We will collect your facial information when you log in with facial recognition. In the future, we may apply facial recognition technology to more scenarios. At that time, we will confirm with you again whether you are willing to use your facial information to implement these extended functions.
(3) Extended functions based on image upload: You can upload your photos on JD.com to realize the functions of photo shopping, order posting, evaluation and Q&A. We will use the pictures or videos you upload to identify the products and/or services you need to buy, or use the order posting, evaluation and Q&A containing the pictures or videos you uploaded.
(4) Extended functions based on voice technology: You can use the microphone directly for voice shopping or consulting and interacting with our customer service staff. In these functions, we will collect your recording content to identify your shopping needs as well as customer service and after-sales needs.
(5) Extended function based on address book information: In this function, we will collect your address book information so that you do not need to manually enter the contact information in your address book when shopping (for example, you can directly top up the phone number in your address book). In order to increase your social fun while shopping, we can also determine whether your friends are also JD users when we obtain your consent, and establish contacts for your communication on JD.com.
2. The above extended features may require you to enable access to your geolocation (location information), camera, photo album (photo gallery), microphone and address book in your device to enable the collection and use of information involved in these features. You can check the status of your above permissions on an item-by-item basis at JD Mall by visiting the "Account Settings - General - Privacy Settings" page, and you can decide to enable or disable these permissions at any time (we will guide you to complete the settings in your device system). Please note that when you enable these permissions, it means that you authorize us to collect and use this personal information to achieve the above functions. Once you disable any permission, it means that you have cancelled the authorization, and we will no longer continue to collect or use relevant personal information, nor can we provide you with the services corresponding to the permission. Your decision to disable the permissions will not affect the previous processing of personal information based on your authorization.
(III) You should be fully aware that in the following situations, we do not need your authorization to collect and use your personal information:
1. When it is related to national security and national defense security;
2. When it is related to public security, public health and major public interests;
3. When it is related to criminal investigation, litigation, trial and judgment enforcement;
4. Where, for protecting the life, property and other significant legal rights and interests of the subject of personal information or others, it is difficult to get the consent from the subject;
5. The involved personal information is disclosed to the public by the personal information subject or its guardian;
6. Your personal information is collected from legally disclosed information, such as lawful news reports and government information disclosures;
7. Necessary for executing and performing the agreement pursuant to your requirements;
8. Necessary for maintaining the safe and stable operation of the products and/or services provided, such as the detection and disposal of failures of products and/or services;
9. Where the information is necessary for legal news reports;
10. Where the information is necessary for academic research institutions to carry out statistics or academic research on the basis of public interests, and de-identify the personal information included in the academic research or description results when providing the results to the public;
11. Other circumstances prescribed by laws and regulations.
(IV) Circumstances where we can obtain your personal information from a third party
We may obtain your authorized shared account information (profile photo, nickname) from a third party, and associate your third-party account with your JD account after you agree the Privacy Policy, so that you may directly log in and use our products and/or services through the third-party account. We will use your personal information subject to compliance with relevant laws and regulations after confirming the legality of the source of personal information based on the agreement with the third party.
(V) Rules for the use of your personal information
1. According to the provisions of this Privacy Policy, we will make use of the collected personal information to make our products and/or services effective.
2. After collecting your personal information, we will use technical means to de-identify the information, and the de-identified information will not be able to identify the subject. Please understand and agree that in this case we have the right to use the de-identified information; And under the premise of not disclosing your personal information, we have the right to analyze the user database and make commercial use.
3. Please understand and agree that for all personal information you provide when using our products and/or services, unless you delete it or refuse to allow us to collect it through system settings, you will be deemed to have continuously authorized your consent to our use for the duration of your use of our products and/or services. When you cancel an account, we will disuse and delete your personal information. For details, please refer to Annex Instructions for Cancellation of JD Account of the Privacy Policy.
4. We will analyze the usage of our products and/or services, and may share with the public or third parties our analytic results to present the general usage tendency on our products and/or services. But the analytic results do not contain any identifying information.
5. When presenting your personal information, we will mask your information through replacement of content and anonymous handling to protect your information.
6. We will obtain your explicit consent in advance before we use your personal information for purposes other than those stated under the Privacy Policy or use the personal information collected for a particular purpose for other purposes. Please understand that the products and/or services we offer to you are constantly updated and changed. If you choose products and/or services other than those stated under the Privacy Policy, we will specify the purpose, way and scope of information collection through ways such as agreements and page prompts for your consent before collecting your personal information. If you refuse to provide the foregoing information, you may not be able to use the products and/or services. However, this does not impose the prejudice to your use in existing products and/or services.
II. How Do We Use Cookies and Similar Technologies
(I) Use of cookies
1. For the purpose of fulfillment in your personalized demand for online experience so as to get an easier access to experience, we send one or more small data files called Cookies to your computer or mobile device. Cookies assigned to you are unique and can only be read by Web server in the domain released by Cookies to you. We send Cookies to you so as to simplify repeated login steps or store shopping preferences or commodity data in your shopping cart, thereby further providing you with shopping preferences, and facilitating your optimization in the selection and interaction of advertisements and your judgment in login status as well as account or data security.
2. We will not use Cookie for any other purposes than those specified in the Privacy Policy. You may manage or delete Cookie based on your preferences. You can clear away all Cookies stored on your computer. Most of web browsers will automatically accept Cookies, but you can usually modify their settings to reject Cookies as appropriate to your needs. In addition, you can also clear away all Cookies saved in the software. However, if you do this, you may need to personally change your user settings in each access to JD website. Meanwhile, relevant information previously recorded by yourself will be deleted, and this may have a certain influence on security of services selected by you.
(II) Web Beacons and use of similar technologies
In addition to Cookies, we also apply other similar technologies such as web Beacons on the website. Usually, our web pages contain some electronic images (called "single-pixel" GIF files or "web Beacons"). The ways to use web Beacons by us are as follows:
1. Calculate the number and retention time of user visits by using web Beacons on JD website, and identify registered JD users through access to Cookies;
2. We provide you with personalized services through obtained Cookies.
III. How Do We Share, Transfer and Publicly Disclose Your Personal Information
(I) Sharing
1. We will not share your personal information with any company, organization or individual other than JD, except for the following cases:
(1) Your explicit consent or authorization is obtained in advance;
(2) In accordance with applicable laws and regulations, requirements of legal procedures, mandatory administrative or judicial requirements, provision is necessary under such circumstance;
(3) To the extent permitted by laws and regulations, necessary provision is done to protect the interests, property or safety of JD, its affiliates or partners, you or other users of JD or the public from damage;
(4) Only by sharing your personal information, we can realize the core functions of our products and/services or provide you with required services;
(5) Information is provided for handling disputes or controversies between you and others at your request;
(6) Information is provided in accordance with relevant agreements (including electronic agreements signed online and corresponding platform rules) signed with you or other legal documents;
(7) Information is used for academic researches;
(8) Information is used for the public interest in accordance with laws and regulations.
2 We may share your personal information with our affiliates. However, we will only share necessary personal information and are bound by the purposes stated in the Privacy Policy. Where our affiliates want to change the handling purpose of personal information, we will seek your authorization and consent again.
3. We may share your order information, account information, device information, and location information with third parties such as partners, to ensure the smooth completion of the services provided for you. However, we will only share your personal information for lawful, legitimate, necessary, specific and explicit purposes, and will only share the personal information necessary to provide services. Our partners have no right to use the shared personal information for any other purpose. Our partners include the following types:
(1) Suppliers of commodities or technical services. We may share your personal information with the suppliers to support our functions. These supports include supply of commodities, or provision of infrastructure-related technical services, logistics distribution services, payment services, and data processing, etc. We share such information, for the purpose of realizing the core shopping functions of our products and/or services. For example, we must share your order information with the logistics service provider to make delivery arrangements; When your order commodities or services are directly delivered or provided by the suppliers, we need to share ordering information and receipt information in your order with the suppliers, for the purpose of directing them to deliver the commodities or provide the services.
(2) Third-party merchants. We must share your order information and transaction-related necessary information with third-party merchants to meet your requirements for purchasing commodities or services and enable them to complete the subsequent after-sales services.
(3) Partners who entrust us with promotion (the "Entrusting Parties"). From time to time, we may accept other companies to entrust us to promote their products and/or services to our users. We may share with the entrusting parties indirect user portraits collectively formed by your personal information and your non-personal information. However, we only provide the entrusting parties with information of promotion coverage and effectiveness instead of your personal identity information or summarize these information, so that you cannot be identified upon the provision of such information. For example, we may inform the entrusting parties of the number of people to purchase their commodities after browsing or viewing their promotion information, or provide the entrusting parties with unidentifiable analytic information of personal identity, to help them know the commodity audiences or customers.
4. We will sign strict confidentiality agreements with companies, organizations and individuals with whom we share personal information, under which we will require them to process personal information in accordance with our instructions, the Privacy Policy and any other relevant confidentiality and security measures. In order to ensure the security and control of data in the third party, we launched the JD YunDing services, which provide a safe and reliable data use and storage environment in the Cloud to ensure the security of user data. In the use of personal sensitive data, we will require third parties to adopt data masking and encryption technologies to better protect personal sensitive information. For the SDK directory of our partners and other third parties, please see here.
5. Information will be exchanged with other companies and organizations in order to comply with laws, perform or apply to our terms of use and other agreements or protect the rights, properties or security of JD, you or other customers of JD, for example, preventing fraud and other illegal activities and reducing credit risk. However, this does not include personal information sold, rented, shared or otherwise disclosed for the purpose of profit in violation of the commitments made in the Privacy Policy.
(II) Transfer
We will not transfer your personal information to any company, organization or individual, except for the following cases:
1. Your explicit consent or authorization is obtained in advance;
2. In accordance with applicable laws and regulations, requirements of legal procedures, mandatory administrative or judicial requirements, provision is necessary under such circumstance;
3. Information is provided in accordance with relevant agreements (including electronic agreements signed online and corresponding platform rules) signed with you or other legal documents;
4. In the case of mergers, acquisitions or transfer of assets or similar transactions, if we are involved in the transfer of personal information, we will require new companies and organizations that hold your personal information to continue being bound by the Privacy Policy, otherwise we will require the companies and organizations to obtain your separate consent for authorization.
(III) Public disclosure
We will only publicly disclose your personal information under the following circumstances, on the premise of taking the safety protection measures in line with industry standards, including:
1. The personal information designated by you is disclosed in the manner expressly agreed by you at your request;
2. In accordance with requirements of laws and regulations, mandatory administrative or judicial requirements, if it is necessary to provide under such circumstance, we may publicly disclose your personal information according to the type of personal information and the manner of disclosure as required. Under the premise of compliance with laws and regulations, when we receive the above information disclosure request, we will require a corresponding legal document to be issued, such as the subpoena or the survey letter. We firmly believe hereby that any information required to be provided by us shall be maintain transparency to the maximum extent permitted by law. We will prudently review all requests to ensure they have legal basis and are limited to such data with legal rights as obtained by the law-enforcing department for specific investigation purposes. To the extent permitted by laws and regulations, our disclosure documents are protected by encryption keys.
IV. How Do We Protect and Save your Personal Information
(I) Our technology and measures to protect your personal information
We take the security of your personal information very seriously and take every reasonable and practical measure to protect your personal information:
1. Technical measures for data security
We take safety protection measure in line with industry standards, including the establishment of reasonable system specifications and security technologies to prevent your personal information from being accessed, used and modified without authorization to avoid data damage or loss.
Network services of JD are selected for the transport layer security protocol and other encryption technologies and provide browser services by https to ensure the security of user data in the process of transmission.
JD uses the encryption technologies to store user personal information in encrypted form and isolates such information by isolation technologies.
When your personal information is used, for example, for presentation and contextual computing, we will use multiple data masking technologies including replacement of content and SHA256 to enhance the security of personal information in use.
At the same time, JD uses strict data access control and multi-identity authentication technology to protect personal information and avoid illegal use of data.
JD uses the automatic code security inspection and data access log analysis technologies to safely audit the personal information.
2. Other security measures taken to protect personal information by JD
JD establishes a data classification and grading system, data security management specification and data security development specification to manage and standardize the storage and use of personal information.
JD adopts the confidentiality agreement for persons contacting the information and the monitoring and audit mechanism to comprehensively and safely control the data.
JD establishes Data Security Commission, as well as dedicated information protection department and data security emergency response organization affiliated to the Data Security Commission, to promote and guarantee the security of personal information.
Security verification and service. The underlying cloud technology used by us to store your personal information has obtained the "Trusted Cloud" Level III Certification issued by the Data Center Alliance and the Level III Certification of Information System Security Protection issued by the Ministry of Public Security, in addition to the ISO27000 Certification.
Strengthening security awareness. We will also organize training courses of security and privacy protection to strengthen the understanding of personnel on the importance to protect personal information.
3. We only allow employees and partners of JD and its affiliates who need to know this information to access your personal information, and have set up strict access authority control and monitoring mechanism for this purpose. We also require all personnel who may have access to your personal information to fulfill the appropriate confidentiality obligations. Where such people fail to perform these obligations, they may be investigated for legal liabilities or their cooperative relationship with JD may be terminated.
4. We will take all reasonable and feasible measures to ensure that no irrelevant personal information will be collected.
5. We are also innovating in the protection of user data:
In terms of JD distribution system, a unique "smiling waybill" is adopted to avoid the exposure of users' personal information in the delivery link. Meanwhile, JD Logistics staff are provided and imposed with strengthened training and requirements on data security, to improve the awareness of logistics staff to protect users' personal information.
6. As the Internet is not an environment of absolute security and it cannot be confirmed whether or not the communication modes (including email, instant messaging and social software) with other users are fully encrypted, we suggest you use a complex password when using such tools and pay attention to the security of your personal information. When conducting a commodity or service transaction online with a third party through JD, you will inevitably disclose your personal information to the counterparty or the potential counterparty, such as contact information or mailing address. You shall properly protect your personal information and only offer the same to others where necessary.
7. Security incident handling
To deal with potential risks of disclosure, damage or loss of personal information, JD works out several systems to define the classification and grading standards and corresponding handling process of security incidents and security vulnerabilities. JD also organizes a special incident response team to handle security incidents. This team shall, in accordance with the requirement of security incident handling specifications, implement different security plans for various security incidents to stop losses, analyze, determine and prepare remedial measures, track down the origin and fight against the incident by cooperating with relevant departments.
In the event of any security incident concerning personal information, in accordance with the requirements of laws and regulations, we will immediately inform you of the basic information and potential impact of such security incident, the handling measures we have taken or will take, the recommendations you may adopt to prevent and reduce the risk and the remedial measures for you. We will also immediately inform you of relevant circumstances of such incident by email, letter, call and pushing notification. If it is difficult to inform the subject of personal information one by one, we will make an announcement by reasonable and effective means. We will also take the initiative to report the disposal condition of security incidents concerning personal information according to requirements of the regulatory authorities.
8. Although the Internet environment is not 100% secure, we will do our best to ensure or guarantee the security of any information you send to us. If our physical, technical, or management protection facilities are damaged, resulting in unauthorized access, public disclosure, tampering, or destruction of any information, we will bear corresponding legal liabilities for the damage to your lawful rights, if any.
9. If you have any questions regarding the protection of your personal information, please contact us through the contact information listed in the Privacy Policy. If you find your personal information is divulged, especially your account and password, please immediately contact us through the contact information listed in the Privacy Policy, i.e. [VIII. How to contact us], so that we can take relevant measures.
(II) Storage of your personal information
1. Your personal information will be stored in the People's Republic of China. In the event that you use the cross-border transaction service and need to transmit your personal information overseas to complete such transaction, we will separately obtain your authorized consent and request receivers to process such personal information in accordance with our instructions, the Privacy Policy and any other relevant confidentiality and security measures.
2. While you are using our products and/or services, your personal information will be stored for the period required for achieving the purposes hereof, which will be determined in accordance with the retention period compulsively required by the law. For example, as required by the E-Commerce Law of the People's Republic of China, commodity, service and transaction information shall be kept for no less than three years from the completion date of the transaction. We will delete or anonymize your personal information as required by applicable laws after the retention period expires.
3. Please note that, after you cancel your JD account successfully, we will delete or anonymize your personal information. When you delete or assist us in deleting the relevant information, we may not immediately delete the corresponding information from the backup system due to requirements of applicable laws and security technologies. Instead, we will store your personal information securely and prevent it from any further processing until the backup can be deleted or anonymized.
4. Where we terminate our services or operations, we will inform you at least thirty days in advance and delete or anonymize your personal information after termination of services or operations.
V. How Do You Manage Personal Information
JD takes concern about your personal information very seriously and makes every effort to protect your rights of access, correction, deletion and withdrawal of consent to your personal information so that you can have full capability to protect your privacy and security. Your rights include:
1. Access and correction to your personal information
Except as provided by laws and regulations, you have the right to access and correct your personal information at any time, namely:
(1) Your account information: from the PC terminal, you can check all your personal information you submit to JD in "Account Settings" in the page of "My JD". You can also update your personal information other than your real-name authentication information (i.e., your name and ID card information used for the real-name authentication) through the route aforesaid. If you need to change your real-name authentication information, you can call the service hotline - 95118 to apply for change. Route in the mobile terminal: account name and personal information: Homepage -- click "My" to enter "My JD" -- click "Settings" at the top right corner to enter "Account Settings" -- click the head portrait to enter the page of "Personal Information"; account password, phone number and security information: Homepage -- click "My" to enter "My JD" -- click "Settings" at the top right corner to enter "Account and Security"; hobbies and interests: Homepage -- click "My" to enter "My JD" -- collection goods, collection shops, and favorite contents (the specific designation is subject to the web-page content).
(2) Your receiving information: from the PC terminal, you can add, change or delete your delivery address information (including the name, delivery address, phone number or email address of the recipient) at any time through the following route: "My JD" - "Account Settings" - "Delivery Address". Route in the mobile terminal: Homepage -- click "My" to enter "My JD" -- click "Settings" at the top right corner to enter "Account Settings" -- address management. You can also set the most commonly used delivery address as the default address, so that your goods will be shipped to that default address if you do not change the delivery address the next time you make purchases.
(3) Your order information: from the PC terminal, you can view all of your orders that are completed, unpaid or waiting for after-sale service at the page of "My Order". Route in the mobile terminal: Homepage -- click "My" to enter "My JD" -- My Order / Unpaid / Shipped / Changed or Returned. You can delete your order information by deleting the completed and canceled orders, but this may render us unable to accurately judge your purchase information, making it difficult for us to provide appropriate after-sales, and the order posting and evaluation function will not be available for deleted orders.
(4) Your browse information: you may access or clear your search history, view and modify the favorites, and manage other data. Route in the mobile terminal: search history: Homepage -- click "My" to enter "My JD" -- browsing history;
(5) Your comments: from the PC terminal, you may access your personal comments or give additional comments on the commodity. Route in the mobile terminal: search history: My JD -- Uncommented - Comment Center;
(6) Your invoice information: you can access, update or clear your invoice information. Route in the mobile terminal: Homepage -- click "My" to enter "My JD" -- click "Settings" at the top right corner to enter "Account Settings" -- qualification for value-added tax special invoice.
(7) Your archival information: you can take the initiative to add your vehicle model, the nickname, gender, birthday and school-age of your baby, the device model, size and health file through "Account Settings - Archives" in the mobile terminal, making it more convenient for you to purchase related products and services and for us to recommend the products you may be interested in. You can delete and modify the above information through this route.
(8) For any other personal information that you need to access or correct in the course of using our products and/or services, please feel free to contact us. We will respond to your request in the manner and within the period set forth in the Privacy Policy.
(9) Personal information that you cannot access and correct: except for the information listed above, we are unable to provide you with access to and correction of some of your personal information, which mainly includes your Device information that is used for improving your user experience and ensuring the transaction security and the personal information generated when you use the extended functions. We will use the above information within the scope of your authorization. Although you cannot access and correct such information, you can contact us to delete or anonymize the same.
2. Deletion of your personal information
The information that you can remove or delete directly from our product and/or service pages, including order information, browse information and delivery address information.
You may request us to delete your personal information in the following circumstances:
(1) Our processing with the personal information is in violation of laws and regulations;
(2) We collect and use your personal information without your consent;
(3) Our processing with the personal information breaches the agreement with you;
(4) We terminate our services or operations.
If we decide to respond to your request for deletion, we will also notify the entities that have obtained your personal information from us and ask them to delete such information in a timely manner, unless otherwise stipulated by laws and regulations, or unless these entities are authorized by you independently. Even if we respond to your request for deletion, we cannot guarantee to delete the corresponding information from the backup system immediately, but we will delete it when the backup system is updated.
3. Changing the scope of or withdrawing your authorization
You may change the scope in which you authorize us to continuously collect your personal information or withdraw your authorization by such means of deleting the information, disabling the Device and completing the privacy setting in JD website or software. You can also withdraw all authorizations by which we continue to collect your personal information by canceling the account.
You shall understand that since the completion of each business function requires some basic personal information, after you withdraw such consent or authorization, we will be unable to further provide you with such services corresponding to such withdrawn consent and authorization and we will no longer handle the related personal information. However, your decision on withdrawal of such consent or authorization will not affect the handling of your personal information implemented under your authorization.
4. Account cancellation
You can directly apply for the cancellation of your account through our products. You can complete the account cancellation through the following route via mobile App: My - Account Settings - Account and Security - Cancellation Service. You can also complete the account cancellation through the following route via the PC terminal: My JD - Account Settings - Account Security - Account Cancellation. For details of the method and conditions to be satisfied for account cancellation, please refer to the Instructions for Cancellation of JD Account. After you cancel your account, we will stop providing our products and/or services to you, and delete your personal information as you require, unless otherwise specified by laws and regulations.
5. If you do not prefer to receive the promotion information we send to you, you can cancel the service at any time by the following means:
(1) You can cancel the email subscription for promotional information through the Email Subscription Menu at "Account Settings" of the PC terminal.
(2) You can cancel the promotional SMS sent to you at any time as instructed by the promotional SMS.
(3) You can set whether or not to accept the product and promotional information we send to you through "Notifications" by the following route via the mobile App: "Account Settings - Settings - Push Message - Notifications".
(4) We will cooperate with third party platforms or media ("Platform") to recommend personalized products to you based on your personal information. Such personal information includes the purchases in this website, access to this website and the affiliate's website, as well as the hobbies and interests shown in the Account Settings. The Platform only provides us with a window to display the commodities and the links to such display information of personalized products in JD website as managed by JD, so we will not provide any of your personal information for any advertiser. And we also provide shielding function in the recommendation window, so you can choose to shield the ads you don't like. If you are unwilling to accept the recommendation service provided by JD in a single platform, please contact the platform to disable it. You acknowledge and understand that the platform is an independent entity to which JD has no right of management.
(5) In order to protect your privacy, We will not, in any way or by any means, push you any promotional or product information related to religious beliefs, sex commodities or other sensitive products.
6. Response to your requests
If you are not able to access, correct or delete your personal information by means above, or you need to access, correct or delete any other personal information generated when you use our products and/or services, or if you believe that JD violates any laws and regulations or any of your agreements regarding the collection or use of personal information, you may contact us by emailing to privacy@jd.com or by other means set forth in this Privacy Policy. For security purposes, we may require you to provide a written request or your identification documents, and we will respond to your request within 15 days after receiving your feedback and verifying your identity. In principle, we will not charge you for your reasonable request, but we will charge a certain fee for repeated requests beyond the reasonable limit. We may reject the repeated requests which are groundless, require excessive technical means (e.g., new systems are required or existing practices need to be fundamentally changed), pose risks to the legitimate rights and interests of others, or are highly impractical (e.g., involving the information stored in the backup tape). We will not be able to respond to your request in the following circumstance:
In any of the following circumstances, in accordance with the requirements of laws and regulations, we cannot respond to your application:
(1) When it is related to the personal information controller's fulfillment of the obligations stipulated by applicable laws and regulations;
(2) When it is related to national security and national defense security;
(3) When it is related to public security, public health and major public interests;
(4) When it is related to criminal investigation, prosecution, trial and execution of judgment;
(5) When there is sufficient evidence that you have subjective malice or abuse of rights;
(6) Where, for protecting the life, property and other significant legal rights and interests of the subject of personal information or others, it is difficult to get the consent from the subject;
(7) Where a response to your application will cause serious damages to the legitimate rights and interests of you or other individuals and organizations;
(8) Where it involves trade secrets.
VI. Protection of Personal Information of Minors
1. JD takes concern the protection of the personal information of minors very seriously. If you are a minor below the age of 18, you should obtain the prior consent from your guardian before using our products and/or services. JD will protect the personal information of minors in accordance with relevant national laws and regulations.
2. We will not actively collect any personal information directly from minors. In the circumstance that we collect the personal information of minors without consent of their guardians, we will only use, share, transfer or disclose such information upon permission of the law, with the consent from the guardians, as necessary for protecting the minors.
3. If any fact proves that any minors have registered for and used our products and/or services without the consent of their guardians, we will consult with these guardians and delete related personal information as soon as possible.
4. For personal information about children under 14 years old that might be involved, we will further take the following protection measures:
(1) Besides complying with the provisions related to user's personal information in this Privacy Policy, we shall also follow the principles of legitimacy and necessity, informed consent, clear purpose, security and lawful use and strictly abide by the Regulations on the Protection of Children's Personal Information Online and requirements in applicable laws and regulations to store, use and disclose children's personal information within the necessary period for the purpose of collection and use and we will delete or perform anonymization on children's personal information after such information expires. We will specify special person to handle matters related to protection of children's personal information and have established a special email for protection on children's personal information (childprivacy@jd.com). We will also create a special internal mechanism for protecting children's personal information.
(2) If you select to use related JD services for children under custody as their guardian, we may collect personal information about the children under your custody which are necessary for us to provide services for you. If we need to collect children's personal information for specific services, we will obtain your authorization and consent in advance and will inform you of our purpose and use for information collection. If you do not provide relevant information, you will not be able to enjoy our services. In addition, you may proactively provide children's personal information to us when you are sharing related information about commodities when you are using the functions of sharing shopping list, comments and Q&A. Please be aware of this and use these functions cautiously. As guardians, you should perform guardianship obligations properly to protect the security of children's personal information. You should provide proper guidance and supervision for registration or use of our products and/or services by children themselves.
(3) Children or their guardians have the right to access and correct children's personal information at any time and can request us for correction and deletion. If you have any comments, suggestions or complaints about any matters related to children's personal information, please feel free to contact us. We're always here to help.
VII. Notification and Revision
1. For the purpose of providing better service, the Privacy Policy will be updated with the development of JD businesses. However, without your explicit consent, we will not reduce your duly rights under the Privacy Policy. We will release an update version on JD.COM and JD Mobile Terminal and remind relevant update contents via the website announcement or other appropriate methods before the update version comes into force. Please access JD.COM for getting the latest Privacy Policy in time.
2. As for material changes, we will also provide a more remarkable notice to you (we will specify details of changes of the Privacy Policy via methods including but not limited to emails, SMS or providing special tips in the browsing page, etc.).
Major changes in this Privacy Policy include but are not limited to:
(1) Major changes in our service mode, such as the purpose of personal information processing, the type of personal information processing, the use of personal information, etc;
(2) Great changes in our ownership structure, organizational architecture, etc., such as the change of owners caused by business adjustment, bankruptcy, merger and acquisition;
(3) Changes in main objects for personal information sharing, transfer or public disclosure;
(4) Material changes in your right to participate in the processing of personal information and the way of exercise;
(5) Changes in our responsible department, contact method and complaint channel for personal information security;
(6) Impact assessment report on personal information security demonstrating that there is a high risk.
3. We will also archive the old versions of the Privacy Policy for your reference.
VIII. How Do you Contact Us
1. If you have any questions, comments or suggestions about this Privacy Policy or matters related to your personal information, please feel free to contact us through the following ways:
Email of principal for protecting personal information: privacy@jd.com
Contact address: No.18 Yard, No. 11 Kechuang Street, Yizhuang Economic and Technological Development Zone, Beijing
You can also contact us anytime by accessing our online customer service system (https://help.jd.com) or dialing any of our customer service numbers.
2. Generally, we will give you the reply within 15 days. If you are not satisfied with our reply, especially in case that your legal rights are impaired due to our personal information processing action, you can give complaints or reports to the network information authority, telecommunication authority, public security authority, industry and commerce authority and other authorities.
Remarks: The version of the Privacy Policy is updated on October 13, 2020 and will formally take effect on October 20, 2020. Click here to check the old version of JD Privacy Policy.