Online Store Privacy Policy
Our Privacy Policy was updated and became effective on July 23, 2025.
Please take some time to familiarize yourself with our Privacy Policy. If you have any questions, please contact us.
Introduction
This online store is an account registration, login, and management service provided to you by Baishang Technology Co., Ltd. (hereinafter referred to as "the Store" or "we").
We attach great importance to the protection of your personal information and privacy. This "Online Store Account Privacy Policy" (hereinafter referred to as "this Privacy Policy") is our statement and commitment regarding the privacy of your Store account.
This Privacy Policy was developed with your needs fully considered. It is crucial that you fully understand our practices for collecting and using personal information, and that you ultimately control the personal information you provide to us. This Privacy Policy specifies how we collect, use, disclose, process, and store the information you provide to us when using our Store account.
Note that for the rules on the collection and use of personal information for the corresponding products and/or services after you log in to your Store account, please refer to the privacy policy of that product and/or service. Under this Privacy Policy, "personal information" refers to information data that can identify a specific individual through the information itself or by associating it with other information. We will strictly comply with this Privacy Policy in processing and using this information.
I. What Information We Collect and How We Use It
(I) Circumstances Where You Must Authorize Us to Collect and Use Your Personal Information
The purpose of collecting personal information is to provide you with products and/or services applicable to your online store account, and to ensure that we comply with applicable laws, regulations, and other normative documents. You have the right to choose whether to provide this information, but in most cases, if you do not provide it, we may not be able to provide you with the corresponding services or respond to any questions you may encounter.
We will only collect and use the personal information you provide for the purposes described in this Privacy Policy. We may process your relevant personal information in specific ways when providing the following service functions, including:
1. Providing Basic Account Functions
(1) Registration or Login
When registering, you need to provide us with your mobile phone number or email address as your online store account name. You can also set a password for your online store account. Your account and password will be encrypted and stored on the server. We recommend that you keep your password information safe and prevent your online store account from being stolen by others. After you successfully register your online store account, you can log in to the online store at any time using your online store account.
To provide a convenient login experience, you can choose to automatically fill in your mobile phone number when registering or logging in. To this end, we need to obtain your SIM card IMSI, ICCID, device model, system version information, and network status. These functions may require you to grant us network permissions and WLAN status permissions on your device to enable the collection and use of the information involved in these functions.
(2) Complete Account Information
During your use of our various services, you can obtain better service and experience by completing basic information such as avatar, nickname, and gender. Not providing this information will not affect the basic functions of your online store account.
2. Functions Necessary for Ensuring Registration and Login Security
To improve the security of our system when you use our products and/or services, and to more accurately prevent phishing website fraud and protect account security, we will also verify your identity via SMS, email, password, or security questions.
For risk control purposes, we will also collect your registration/login time, device-related information (such as device IMEI/OAID (on Android Q), device model, operating system version), Bluetooth address, and network information (such as WLAN SSID, frequently used login IP address). Therefore, we need to obtain your device information permissions and collect your device IMEI/OAID to ensure the security of your registration or login environment. In addition, we will provide your mobile phone number to third parties (such as mobile phone number risk level databases or secondary number verification services from mobile operators) for verification to ensure the security of your account.
(II) Situations where you can choose whether to authorize us to collect and use your personal information
To improve your experience using your Xiaomi account, we may collect and use your personal information in the following additional functions. If you do not provide this personal information, you can still use your Xiaomi account, but you may not be able to use these additional functions.
(III) You fully understand that we do not need your consent to collect or use your personal information in the following circumstances:
1. Related to national security or defense security;
2. Related to public safety, public health, or major public interests;
3. Related to criminal investigation, prosecution, trial, and execution of judgments;
4. Necessary to protect the life, property, or other significant legitimate rights and interests of the personal information subject or other individuals, but it is difficult to obtain the individual's consent;
5. The personal information collected has been voluntarily disclosed to the public by the personal information subject;
6. Your personal information collected from legally publicly disclosed information, such as legitimate news reports or government information disclosure channels;
7. Necessary for signing a contract at your request;
8. Necessary for maintaining the safe and stable operation of the products and/or services provided, such as detecting and handling product and/or service malfunctions;
9. Necessary for legitimate news reporting;
10. Necessary for academic research institutions to conduct statistical or academic research based on public interests, and when providing the results of academic research or descriptions to the public, the personal information contained in the results will be de-identified. (iv) Circumstances Where We Obtain Your Personal Information from Third Parties
Where permitted by law, we may obtain your personal information from third parties. For example, you may authorize a third-party account to bind your mall account and log in to use the mall's services, or authorize the import of your information such as avatar and nickname from a third-party platform. For risk control purposes, we may use third parties (such as mobile phone number risk level databases or secondary number verification services from mobile operators) to check the security of your mobile phone number to understand whether your current registration/login environment is secure.
(v) Non-Personal Information
We may also collect other information that cannot identify a specific individual (i.e., information that is not personal information), such as statistical data generated when you use specific services, such as your login/logout records, interaction records, or error records when using the mall account service. The purpose of collecting such information is to improve the services we provide to you. The categories and amount of information collected depend on how you use our products and/or services. We will aggregate such information. For the purposes of this Privacy Policy, aggregated data is considered non-personal information. If we combine non-personal information with personal information, such information will be considered personal information during the period of combined use.
II. How We Share, Transfer, and Publicly Disclose Your Personal Information
(I) Sharing
We will not sell any personal information to third parties.
We may sometimes share your personal information with third parties (as defined below) to provide or improve our products and/or services, including providing products and/or services upon your request.
1. Sharing Related to National Security and Defense Security, which you actively choose
We may share information within the scope of your authorization with third parties designated by you, with your explicit consent or active choice.
2. Sharing Information with Our Group
In order to conduct business smoothly and provide you with the full functionality of our products and/or services, we may from time to time share your personal information with other affiliated companies of the online store.
3. Sharing Your Personal Information with Third-Party Service Providers
When you log in using your online store account on a third-party website or application, we will obtain your authorization. The authorization page will display the specific authorized recipient and the type of authorized information. After you authorize and agree, we will transfer your authorization information (depending on the nature of the third party's services and products) to that third party. If you do not agree to the third party obtaining your personal information, please do not agree to the authorization.
Please note that we will take measures such as encryption to protect your information security, but your personal information held by third parties will be subject to the privacy policies of those third parties. We recommend that you carefully read the privacy policies of third parties, just as you would read this privacy policy.
(II) Transfer
We will not transfer your personal information to any company, organization, or individual, except in the following circumstances:
1. Transfer with explicit consent: We will transfer your personal information to other parties after obtaining your explicit consent;
2. When it is necessary to transfer your personal information due to reasons such as merger, division, dissolution, bankruptcy declaration, or acquisition, we will inform you of the name and contact information of the recipient. We will require the recipient to continue to fulfill the obligations of a personal information processor. If the recipient changes the processing purpose or processing method stipulated in this privacy policy, it shall obtain your personal consent again in accordance with the regulations.
(III) Public Disclosure
We will only publicly disclose your personal information in the following circumstances:
1. After obtaining your explicit consent;
2. Disclosure based on law: We may disclose your personal information to the aforementioned regulatory authorities when required by law, legal process, litigation, or mandatory requirements of government authorities.
III. How We Store and Protect Your Personal Information
(I) Security Measures
We are committed to ensuring the security of your personal information. To prevent unauthorized access, disclosure, or other similar risks, we have implemented all legally required physical, electronic, and administrative measures to protect the information we collect from your mobile devices. We will ensure that your personal information is protected in accordance with applicable laws.
Your personal information is stored securely on servers and protected in controlled facilities. We categorize your information according to its importance and sensitivity and ensure that your personal information has an appropriate security level. Similarly, we have specific access controls for our cloud-based data storage, and we regularly review our information collection, storage, and processing practices, including physical security measures, to prevent any unauthorized access and use.
We will conduct due diligence on third-party service providers and business partners to ensure they are capable of protecting your personal information. We will also check whether third parties have adopted appropriate security standards by implementing appropriate contractual restrictions and, where necessary, conducting audits and assessments. Furthermore, we guarantee that employees and third-party service providers and business partners who use this information to help provide you with products and/or services adhere to strict contractual confidentiality obligations.
We will conduct security and privacy protection training courses and tests to enhance our employees' awareness of the importance of protecting personal information. We will take all feasible and legally required measures to protect your personal information. However, you should be aware that internet use is not always secure; therefore, we cannot guarantee the security or integrity of any personal information transmitted bidirectionally over the internet.
We will handle the leakage of personal information in accordance with applicable data protection regulations and, where necessary, promptly notify relevant regulatory agencies and data subjects of the data breach.
(II) What can you do? You can prevent the disclosure of your login password or account information to anyone (unless that person has your explicit authorization) to protect your account security on the online store. You can set a unique password for the online store to prevent other websites from disclosing your password and compromising your account security. Never disclose the verification codes you receive to anyone (including those claiming to be customer service representatives). Whenever you log in to the online store as an account user, especially on someone else's computer or a public internet terminal, you should always log out at the end of the session.
We are not liable for security breaches caused by third-party access to your personal information due to your failure to maintain its privacy. Notwithstanding the foregoing, you should immediately notify us if any other internet user uses your account without authorization or if any other security breach occurs.
Your assistance will help us protect the privacy of your personal information.
(III) Retention Policy
We retain personal information for the period necessary for the purposes described in this Privacy Policy, or to comply with applicable legal requirements. Personal information will cease to be retained and will be deleted or anonymized after the collection purpose is completed, after we confirm your deletion or cancellation request, or after we terminate the operation of the corresponding products and/or services. If it is for public interest, scientific, historical research, or statistical purposes, we will continue to retain the relevant data in accordance with applicable laws, even if further data processing is unrelated to the original collection purpose.
(IV) Service or Account Cancellation
If you need to cancel your online store account, you can submit a cancellation request in Settings > Personal Profile and follow the prompts to complete the cancellation process.
To protect your or others' legitimate rights and interests, we will determine whether to support your cancellation request based on your usage of the various products and/or services in the online store. Before canceling, please confirm that all services related to your online store account have been properly handled; otherwise, we cannot immediately support your cancellation request. To ensure that the user is the one applying to cancel their account, we may collect and verify your personal identification information (such as the mobile phone number linked to your store account). We strictly comply with laws and administrative regulations regarding personal information protection. The above information will only be used for this account cancellation service.
Please note that canceling your store account is irreversible. Once you cancel your store account, you will no longer be able to use our store. We will delete or anonymize all information related to your store account. We advise you to carefully consider canceling your account.
VI. How We Protect the Personal Information Security of Minors
We value and pay attention to the protection of minors' personal information. We will not collect minors' personal information knowingly and without authorization. If we discover that we have collected personal information of minors without verifiable parental or guardian consent, we will attempt to delete the relevant information as soon as possible.
VII. Third-Party Service Description
The products and/or services in the store may contain links to third-party websites, products, and services. The products and/or services in the store may also use or provide products and/or services from third parties. All links containing third-party websites, products, and services are provided solely for user convenience. Please note that this third party may process your relevant information. We recommend that you carefully read and fully understand their relevant personal information protection rules before using their products and/or services.
VIII. How This Privacy Policy is Updated
We will periodically review this Privacy Policy based on business and technological changes, applicable laws, and best practices, and may update it. If we make significant changes to this Privacy Policy, we will notify you through reasonable means such as in-system pop-ups so that you can understand the information we collect and how we use it. Such Privacy Policy will apply from the specified effective date. We recommend that you periodically check this page for the latest information on our personal information processing practices. Your continued use of your Xiaomi account and logging into Xiaomi-related system applications or services will be considered as acceptance of the updated Privacy Policy. When we collect more personal information from you or use or disclose your personal information for new purposes, we will obtain your consent again in accordance with applicable legal requirements.