Privacy Policy of Tianjin Weiduyun Network Technology Co., Ltd.

1. Scope of Application

1. Subject Scope: This Policy applies to the WedoMall independent website, associated mobile applications, and derivative services operated by us (collectively referred to as "Platform Services" hereinafter), covering the entire process of data processing activities such as user registration, browsing, ordering, payment, and after-sales service.

2. Geographical Scope: Whether you are located within the territory of China or overseas (such as the European Union, the United States, Southeast Asia, etc.), this Policy applies to you as long as you use the Platform Services. We will provide adaptive protection in accordance with the regulatory requirements of the region where you are located.

3. Exclusion Scope: This Policy does not apply to services provided by third-party merchants, logistics service providers, and other cooperative parties. Please refer to the privacy policies of such entities separately.

2. Information We Collect and Its Purposes

(1) Personal Information You Voluntarily Provide

1. Account Registration and Identity Verification Information

• Collected Content: Full name, email address, mobile phone number, and account password you create; if you need to complete real-name verification (e.g., required for cross-border payments), you may need to provide identification documents such as ID card/passport information.

• Purpose of Collection: Used for account creation, identity verification, login authentication, and security protection to prevent account theft or abuse.

• Compliance Basis: Based on "necessity for performing contracts" and "obtaining your explicit consent".

2. Order and Transaction Information

• Collected Content: Delivery address (including recipient's name, phone number, and detailed address), payment information (last 4 digits of bank card number, payment platform account information), order product details, transaction amount, and payment status.

• Purpose of Collection: Complete product delivery, transaction settlement, order tracking, and after-sales dispute handling; payment information is only used to verify the authenticity of transactions, and no complete bank card information is stored.

• Compliance Basis: Based on "necessity for performing contracts" and "compliance with legal and regulatory requirements".

3. Customer Service and Feedback Information

• Collected Content: Consultation content, complaint materials, contact information, and relevant supporting documents you submit through online customer service, email, phone calls, and other channels.

• Purpose of Collection: Respond to your needs, resolve issues, and improve service quality.

• Compliance Basis: Based on "obtaining your explicit consent" and "protecting our legitimate rights and interests".

(2) Information We Automatically Collect

1. Device and Access Information

• Collected Content: Device model, operating system version, browser type, IP address, access time, page browsing records, click behavior, and network status.

• Purpose of Collection: Optimize the adaptability of the Platform interface, analyze user preferences to improve product recommendations, and identify abnormal access behaviors to ensure account security.

• Compliance Basis: Based on "necessity for performing contracts" and "legitimate interests" (improving service quality).

2. Location Information (Optional)

• Collected Content: If you allow the Platform to access your location permission, we will collect your approximate geographic location (e.g., city-level).

• Purpose of Collection: Recommend products from nearby overseas warehouses and optimize logistics routes to estimate delivery time.

• Compliance Basis: Based on "obtaining your separate consent", and you can disable the permission in device settings at any time.

(3) Special Notes on Sensitive Personal Information

3. Use of Cookies and Similar Technologies

1. Types and Purposes of Cookies

• Necessary Cookies: Used to ensure the core functions of the Platform (such as shopping cart data storage and login status maintenance). These Cookies cannot be disabled; otherwise, some services will not be available.

• Functional Cookies: Used to record your preferences (such as language settings and frequently used delivery addresses) to improve the user experience.

• Analytical Cookies: Collect access data through third-party tools (such as Google Analytics) to analyze the Platform's operation effects, without associating with personal identity information.

2. Your Control Rights

4. Sharing and Disclosure of Information

1. Obtaining Your Explicit Consent: Share information with designated third parties with your authorization (e.g., you agree to share delivery information with logistics providers).

2. Necessary Sharing with Cooperative Parties:

• Logistics Service Providers: Share delivery addresses and contact information (some fields are hidden, such as the middle four digits of the mobile phone number) only for product delivery;

• Payment Service Providers: Share transaction amounts and order numbers for completing payment settlement;

• Compliance Service Providers: Share necessary information for cross-border customs clearance and tax declaration (e.g., submitting the recipient's identity information to customs).

3. Legal and Regulatory Requirements: If faced with regulatory investigations, judicial judgments, or legal subpoenas, information must be disclosed as required to fulfill legal obligations.

4. Corporate Mergers/Acquisitions: In the event of mergers, reorganizations, or other transactions, information may be transferred to the new entity. We will notify you in advance and ensure that the new entity complies with this Policy.

5. Storage and Cross-Border Transmission of Information

1. Storage Period

• Account Information: Retained for 6 months after you cancel your account (for handling subsequent disputes);

• Order and Transaction Information: Retained for 3 years after the transaction is completed (in line with the statute of limitations requirements of the Civil Code);

• Browsing Behavior and Cookie Data: Retained for 12 months after your last visit;

2. Storage Location

3. Compliance with Cross-Border Transmission

• Obtain your "separate consent";

• Adopt compliant channels such as "Standard Contractual Clauses" (SCCs) and cross-border data transfer security assessment;

• Use technical means such as end-to-end encryption and access permission control to ensure transmission security.

6. Information Security Protection Measures

1. Technical Measures

• Encrypted Storage: User passwords are encrypted using hash algorithms, and sensitive information is encrypted using the AES-256 algorithm;

• Access Control: Only authorized employees can access information, with permission classification and operation log auditing for traceability;

• Security Monitoring: Regular vulnerability scanning and penetration testing are conducted to block abnormal access behaviors in real time.

2. Management Measures

• Privacy Training: Employees must pass privacy law exams before employment and receive regular data protection training;

• Emergency Response: In case of data leakage, we will notify the regulatory authorities and affected users within 72 hours in accordance with GDPR requirements and take remedial measures;

• Third-Party Audit: Entrust independent institutions to conduct compliance audits of data processing activities every year.

7. Your Rights and How to Exercise Them

1. Right of Access and Obtaining Copies: You can query your personal information (such as order records and account information) and request to obtain copies of the information.

• Exercise Method: Log in to the Platform → "My Account" → "Privacy Settings" → "View Personal Data", or send an email to service@weiduyun.com to apply.

2. Right of Correction: If there is an error in the information (e.g., incorrect delivery address), you can apply for correction.

• Exercise Method: Modify directly in "Privacy Settings" or contact customer service to submit a correction application.

3. Right to Erasure (Right to Be Forgotten): You can request to delete information in the following scenarios:

• The information is no longer used for service purposes;

• You withdraw your consent;

• The service is terminated.

• Exercise Method: Submit an application through "Privacy Settings - Data Deletion Application" or contact customer service to handle it (except as required by laws and regulations to be retained).

4. Right to Withdraw Consent: You can withdraw your consent to the collection and use of information at any time (e.g., disable location permission, cancel marketing promotions), but this does not affect the validity of information processing based on previous consent.

5. Right to Restrict Processing (Applicable to GDPR): If you believe the information is incorrect or the processing is illegal, you can request to restrict the processing of the information.

6. Right to Complain and Report: If you believe that the processing of information infringes your rights and interests, you can contact us (service@weiduyun.com) or file a complaint with the regulatory authorities (such as the Cyberspace Administration of China, EU EDPB).

8. Policy Updates and Notifications

1. If it is necessary to update the Policy due to changes in laws and regulations or business adjustments, we will publicly display the updated content in a prominent position on the Platform's homepage and notify you via email, in-site messages, and other methods.

2. Major changes (such as expanding the scope of information collection and adjusting sharing rules) will additionally require your confirmation and consent, while non-major changes will take effect from the date of public announcement.

3. You can view historical versions through the "Privacy Policy" entry at the footer of the Platform to understand the change history.

9. Protection of Minors

10. Contact Us

• Privacy Dedicated Email: service@weiduyun.com (Priority Handling Channel)
• Customer Service Phone: +86-17695986992 (9:00-18:00 on Working Days)