2. The Personal Data We Collect From You
2.1．Personal data means any information about an individual, whether recorded in a material form or not and whether true or not, who can be identified from that data (whether directly or indirectly), or from that data and other data to which we have or are likely to have access.
2.2．During the course of your use of the Site and the provision of the Services, we may collect personal data about you, as follows:
i) Identity data, such as your name, gender, profile picture, and date of birth;
ii) Contact data, such as territory, delivery address, email address and phone numbers;
iii) Biometric data, such as voice files when you use our voice search function, and facial and other bodily features and voice of yourself and/or another person featured in your video when you upload videos onto the Site;
iv) Account data, such as bank account details, bank statements, credit card details and payment details (such account data may also be collected directly by our affiliates and/or third party payment service providers);
v) Transaction data, such as details about orders and payments, and other details of products and Services related to you;
vi) Technical data, such as Internet protocol address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and Site, device identifier, IMEI, MAC address, cookies (where applicable) and other information and technology on the devices you use to access the Site;
vii) Profile data, such as your username and password, orders related to you, your interests, preferences, feedback and survey responses;
viii) Usage data, such as information on how you use the Site, products and Services or view any content on the Site, including the time spent on the Site, items and data searched for on the Site, access times and dates, and other similar statistics;
ix) Location data, such as when you capture and share your location with us in the form of photographs or videos and upload such content to the Site;
x) Marketing and communications data, such as your preferences in receiving marketing from us and our third parties, your communication preferences and your chat, email or call history on the Site;
2.3．During the course of your use of the Site and our provision of the Services, we may receive personal data from you in the situations, as follows:
i) When you browse our Site (both website and App);
ii) When you create an account with us as buyer;
iii) When you apply for, subscribe to or otherwise use any of the Services;
iv) When you place an order to consummate a transaction regarding the Products available on the Site;
v) When you activate or use any payment-related functions available on the Site or provided by our third party service providers;
vi) When you record any user-generated content which is uploaded on the Site;
vii) When you use the chat function on the Site;
viii) When you subscribe to our publications or marketing collateral;
ix) When you enter a promotion or survey;
x) When you participate in any activity or campaign on the Site;
xi) When any other user of the Site posts any comments on the content you have uploaded on the Site or when you post any comments on other users’ content uploaded to the Site;
2.4．We may collect personal data from you, third parties (including but not limited to agents, contractors, partners and any others who provide services to us on our behalf, or with whom we collaborate, including but not limited to payment service providers, government sources of data, financial providers, credit bureaus, delivery, marketing and other service partners), our affiliates, or such data may be collected automatically when you use the Site or the Services, as set out in this section. See also section 10 below on the collection of computer data.
2.6．You must only submit personal data which is accurate and not misleading and you must keep it up to date and inform us of any changes to the personal data you have provided to us. We shall have the right to request for documentation and carry out the necessary checks to verify the personal data provided by you as part of our user verification processes or as required under law.
3. Use and Disclosure of Your Personal Data
3.1．The personal data we collect from you or via third parties may be used for certain purposes, as follows:
i) Processing your order for products;
ii) To process orders you submit through the Site;
iii) To deliver the products you have purchased through the Site. We may pass your personal information on to a third party (e.g. our shipping partner) or relevant regulatory authority (e.g. customs) in order to make delivery of the product to you;
iv) To update you on the delivery of the products;
v) To provide customer support for your orders;
vi) To verify and carry out payment transactions (including any credit card payments, bank transfers, offline payments, remittances, or e-wallet transactions) in relation to payments related to you and/or Services used by you. In order to verify and carry out such payment transactions, payment information, which may include personal data, will be transferred to third parties such as our payment service providers.
vii) To facilitate your use of the Services or access to the Site;
viii) To administer your account (if any) with us;
ix) To display your name, username or profile on the Site (including on any reviews you may post);
x) To respond to your queries, feedback, claims or disputes, whether directly or through our third party service providers;
xi) To display on scoreboards on the Site in relation to campaigns, mobile games or any other activity;
xii) To assess your application for loan facilities and/or to perform credit risk assessments in relation to application for financing services (where applicable);
xiii) To provide you with information we think you may find useful or which you have requested or subscribed from us (provided you have opted to receive such information, including information of our advertising, promotion,event or campaign, etc);
xiv) To send you marketing or promotional information of us and services on our Site from time to time (provided you have opted to receive or subscribe such information);
xv) To help us conduct marketing and advertising survey;
xvi) To promote the Services and use information that you give to us, such as user-generated content (including video content) that you can choose to upload or broadcast on our Site and will be accessible on the Internet and may be shared by the public (the latter of which is not within our control), as part of our advertising and marketing campaigns to promote the Site.
xvii) To ascertain your identity in connection with fraud detection purposes;
xviii) To process any complaints, feedback, enforcement action and take-down requests in relation to any content you have uploaded to the Site;
xix) To produce statistics and research for internal and statutory reporting and/or record-keeping requirements;
xx) To store, host, back up your personal data;
xxii) To comply with legal and regulatory requirements (including, where applicable, the display of your name, contact details and conduct details), including any law enforcement requests, in connection with any legal proceedings, or otherwise deemed necessary by us;
xxiii) Where necessary to prevent a threat to life, health or safety;
xxiv) To understand your user experience with the Services and the Site;
xxv) To improve the layout or content of the pages of the Site and customize them for users;
xxvi) To identify visitors on the Site;
xxvii) To conduct surveys, including carrying out research on our users’ demographics and behaviour;
xxviii) To improve our current technology (e.g. voice recognition tech, etc) via machine learning or other means;
xxix) To derive further attributes relating to you based on personal data provided by you (whether to us or third parties), in order to provide you with more targeted and/or relevant information;
xxx) To conduct data analysis, testing and research, monitoring and analyzing usage and activity trends;
xxxi) To further develop our products and Services;
xxxii) To know our buyers better;
xxxiii) Any other purpose to which your consent has been obtained; and
xxxiv) To conduct automated decision-making processes in accordance with any of the above purposes.
3.2．We may share your personal data with and/or transfer your personal data to third parties and/or our affiliates for the above-mentioned purposes. These third parties and affiliates, which may be located inside or outside your jurisdiction, include but are not limited to: Service providers (such as agents, contractors and partners) in areas such as payment services, logistics and shipping, marketing, data analytic, market or consumer research, survey, social media, customer service, information technology and website hosting;
3.3．In disclosing your personal data to them, we endeavour to ensure that the third parties and our affiliates keep your personal data secure from unauthorized access, collection, use, disclosure, processing or similar risks and retain your personal data only for as long as your personal data is needed to achieve the above-mentioned purposes.
3.4．We may also share personal data in connection with any proposed purchase, merger or acquisition of any part of our business, provided that we satisfy the requirements of applicable data protection law when disclosing your personal data.
4. Withdrawal of Consent to Continued Use, Disclosure, Storing and/or Processing of Personal Data
4.1．You may communicate the withdrawal of your consent to the continued use, disclosure, storing and/or processing of your personal data by contacting us, subject to the conditions and/or limitations imposed by applicable laws or regulations.
4.2．Please note that if you communicate your withdrawal of your consent to our use, disclosure, storing or processing of your personal data for the purposes and in the manner as stated above or exercise your other rights as available under applicable local laws, we may not be in a position to continue to provide the Services to you or perform any contract we have with you, and we will not be liable in the event that we do not continue to provide the Services to, or perform our contract with you. Our legal rights and remedies are expressly reserved in such an event.
4.3．You may unsubscribe from receiving marketing information at any time in our mobile application settings. We may use your contact information to send newsletters from us and from our related companies.
5. Updating Your Personal Data
5.1．It is important that the personal data you provide to us is accurate and complete for you to continue using the Site and for us to provide the Services. You are responsible for informing us of changes to your personal data, or in the event you believe that the personal data we have about you is inaccurate, incomplete, misleading or out of date.
5.2．You can update your personal data anytime by accessing your account on the Site.
5.3．We take steps to share the updates to your personal data with third parties and our affiliates with whom we have shared your personal data if your personal data is still necessary for the above-stated purposes.
6. Accessing and Correcting Your Personal Data
6.1．You may request information about your personal data which we have collected, or enquire about the ways in which your personal data may have been used, disclosed, stored or processed by us via the personal account information setting on our Site or by contacting us using the contact details below. You may also request correction of any error or omission in your personal data which we have collected in the same way. In order to facilitate processing of your request, it may be necessary for us to request further information relating to your request. Where permissible under law, we may refuse such correction requests if deemed vexatious or unreasonable.
7. Security of Your Personal Data
7.1．To safeguard your personal data from unauthorized access, collection, use, disclosure, processing, copying, modification, disposal, loss, misuse, modification or similar risks, we have introduced appropriate administrative, physical and technical measures such as:
i) Restricting access to personal data to individuals who require access;
ii) Maintaining technology products to prevent unauthorized computer access;
iii) Using advance encryption technology when processing your financial details; and/or Implementing other security measures as required by applicable law.
7.2．You should be aware, however, that no method of transmission over the Internet or method of electronic storage is completely secure. While security cannot be guaranteed, we strive to protect the security of your information and are constantly reviewing and enhancing our information security measures.
8. Retention of Personal Data
8.1．We will only retain your personal data for as long as we are either required or permitted to by law or as relevant for the purposes for which it was collected.
8.2．We will cease to retain your personal data, or remove the means by which the data can be associated with you, as soon as it is reasonable to assume that such retention no longer serves the purposes for which the personal data was collected, and is no longer necessary for any legal or business purpose.
9. How to delete or cancel HIBOBI Account?
You cannot delete your HIBOBI account on your own. Please contact HIBOBI customer support for assistance and provide them with the reason for your deletion request.
You can follow the steps below to contact customer support: [Account] - [Customer Service] - [Support]
10.1．Hibobi does not sell products to minors (which is to be determined based on the applicable law), nor does we intend to provide any of the Services or the use of the Site to minors. We do not knowingly collect any personal data relating to minors.
10.3．As a parent or legal guardian, please do not allow minors under your care to submit personal data to hibobi.
10.4．We will not be responsible for any unauthorized use of the Services on the Site by yourself, users who act on your behalf or any unauthorized users. It is your responsibility to make your own informed decisions about the use of the Services on the Site and take necessary steps to prevent any misuse of the Services on the Site.
11.2．When you visit the Site through your computer, mobile device, or any other device with Internet access, our company servers will automatically record data that your browser sends whenever you visit a website, such as the technical data and usage data outlined in Section 2 above.
11.3．This data is collected for analysis and evaluation in order to help us improve our website and the services and products we provide, as well as to help us to personalize the content to match your preferred interests more quickly. The data is also collected to make the Services and the Site more convenient and useful to you, and to provide more relevant advertising related to market products, services and features to you.
11.4．Cookies are small text files (typically made up of letters and numbers) placed in the memory of your browser or device when you visit a website or view a message. They allow us to recognize a particular device or browser. Web beacons are small graphic images that may be included on our Services and the Site. They allow us to count users who have viewed these pages so that we can better understand your preference and interests.
11.5．You may be able to manage and delete cookies through your browser or device settings. However, certain cookies are required to enable core functionality, so please note that changing and deleting cookies may affect the functionality available on the Site or through our Services.
12. Questions, Feedback, Concerns, Suggestions or Complaints
12.1．If you have any questions on personal data protection or data privacy, please refer to our feature of Help Center.
Discontinuation & Deletion of Personal Information
You have the right to request that we stop processing your personal information and/or delete the information that we hold about you by contacting customer support. If you request the deletion or erasure of personal information (hereinafter referred to as "Discontinuation") because the information allegedly was handled in a manner exceeding the purpose of collection, or was acquired through deceit or other unlawful means, HIBOBI shall, upon confirming that the person making the request is the identified individual, conduct any necessary investigation without undue delay and, based on its results, perform the Discontinuation free of charge as far as this is possible for HIBOBI and notify you. However, we may retain a copy of your personal information where we are required or permitted to do so by law.
Once the purpose of collection/use of the personal information is achieved, we destroy your personal information without delay; provided, however, that certain information that must be retained for a statutorily-prescribed period and is destroyed after the expiration of such period. Personal information that is separately stored in such case is not used for any other purpose unless provided for under a law.
For electronic data files, we employ technical methods to destroy them so that the subject data cannot be restored or reconstructed. For hard copies and paper documents, we destroy them through incineration or shredding.
For residents of the European Economic Area and the UK, the following shall apply:
- Rectification or erasure of personal data: You have the right to have us rectify inaccurate personal data concerning you without undue delay and the right to have us complete any incomplete personal data (Article 16 of the GDPR). Also, if certain conditions are satisfied, you will have the right to have us delete personal data concerning you without undue delay (Article 17 of the GDPR).
- Restriction on processing of personal data: If certain conditions are satisfied, you will have the right to have us restrict processing of personal data concerning you (Article 18 of the GDPR).
- Objection to processing of personal data: If certain conditions are satisfied, you will have the right to object to processing of personal data concerning you (Article 21 of the GDPR).
- Not to be subject to automated decision-making: If certain conditions are satisfied, you will have the right not to be subject to solely data-based, automated decision-making (including profiling) that produces any legal or similar material effect on you (Article 22 of the GDPR).
For residents of South Korea, the following shall also apply:
If we use consent as the legal ground to process personal information, after you withdraw your consent to the processing, we will then stop processing your personal information unless there is another legal basis for such processing (e.g. statutory retention periods).
For residents of California, the following rights shall also apply:
You have the right to opt out of the sale of your personal information to third parties. Please note, we do not sell your personal information at this time.
You also have the right to request the deletion of your personal information, subject to certain legal exceptions.
California residents have the right not to be discriminated against for exercising these rights. If you would like to exercise these California rights, please contact us using the contact information provided in Article 21. You may also designate an authorized agent registered with the California Secretary of State to make a request on your behalf. The authorized agent must have written permission to submit requests on your behalf. Whenever feasible for verification, we will match the identifying information provided by you to the personal information already maintained by us. If, however, we cannot verify your identity from the information already maintained by us, we may request additional information.
Your account information and access to our Services are sometimes accessible only through the use of an individual user ID and password. To protect the confidentiality of personal information, you must keep your password confidential and not disclose it to any other person. Please note that we will never ask you to disclose your password in an unsolicited phone call or email. HIBOBI IS NOT RESPONSIBLE FOR ACTIONS TAKEN REGARDING YOUR ACCOUNT WHILE A USER IS LOGGED IN USING YOUR USER ID AND PASSWORD.
Transmission of information about the Services
We may send you communications or data regarding the Services, including but not limited to (i) notices about your use of the Services, including any notices concerning violations of use, (ii) updates, and (iii) information or materials regarding transactions, products, and/or services that you may have purchased or selected.
HIBOBI TECHNOLOGY LIMITED
Address: UNIT 1101 B, 11F., LIPPO SUN PLAZA, 28 CANTON ROAD, TSIM SHA TSUI, KL, Hong Kong