YaBuyBuy Privacy Policy

 

YaBuyBuy (KOSEI, K.K.) (hereinafter referred to as "YaBuyBuy" or "we") attaches great importance to the privacy and personal information protection of users. When you use our related services, we may collect and use your relevant information. Through this "Privacy Policy" (hereinafter referred to as "this Policy"), we would like to explain to you how we collect, use, transfer, and share this information when you use our services, as well as how we provide you with access to, update, control, and protect this information.

 

To better protect your personal information, please read and fully understand this Policy before using our products and services. Once you use or continue to use our products and services, it means that you agree to our processing of your relevant information in accordance with this Policy. Once you agree to provide your personal information, we will process your personal information for the purposes and in the manner described in this Policy. We use your personal information to realize the functions related to our products and services. You have the right to refuse to provide us with personal information, but refusing our collection and use of such information may affect your ability to use relevant functions.

 

We would like to especially remind you:

 

1.We are committed to creating a variety of products and services to meet your needs. Since we offer a wide range of products and services, and different users may choose different specific products/services, the corresponding basic/additional functions and the types and scope of personal information collected and used may differ. Please refer to the specific product/service features.

 

2.To provide you with a better product and service experience, we continuously strive to improve our products, services, and technologies. Accordingly, we may from time to time launch new or optimized functions, which may require the collection and use of new personal information or changes in the purposes or methods of using personal information. In such cases, we will provide detailed explanations through updates to this Policy, pop-up windows, or on-page notices, and offer you the option to choose whether to consent. We will only begin collecting and using such information after obtaining your explicit consent. If you have any questions, comments, or suggestions during this process, you may contact us through the contact information provided at the end of this Policy, and we will respond as soon as possible.

 

This Privacy Policy will help you understand the following:

 

一、  How we collect and use your personal information

 

二、  How we use Cookies and similar technologies

 

三、How we share, transfer, and publicly disclose your personal information

 

四、How we protect and store your personal information

 

五、How you manage your personal information

 

六、How we handle personal information of minors

 

七、Scope of application of this Policy

 

八、How to contact us

 

一、How we collect and use your personal information

 

Personal information refers to various types of information recorded electronically or by other means that can identify a specific natural person either alone or in combination with other information, or reflect the activities of a specific natural person. This includes, but is not limited to, the following: your name, age, gender, date of birth, ID number/passport number, phone number (including mobile), WeChat, QQ and other social media accounts, email address, bank account information, etc., which are provided by you or obtained by us for the purposes described below.

 

(一)We will collect and use your personal information only for the following purposes:

 

1.Registration: We provide you with basic user services through a YaBuyBuy APP account. While you may browse product information anonymously when accessing our app, you must register as a YaBuyBuy platform user to place orders and access other user services.

 

2.Order placement and transaction fulfillment: You need to provide information such as the recipient’s name, delivery address, contact phone number, email address, and ID number (mandatory for shipments to China), so we can help you complete transactions smoothly and ensure transaction security.

 

3.Customer service and dispute resolution: When providing you with customer support or handling dispute resolution services, we need to collect and process your necessary information to verify your identity, respond to your inquiries, and follow up on the service quality provided by our staff.

 

When you contact us or submit a request regarding sales support, after-sales service, or dispute resolution, we need you to provide the necessary personal information to verify your user identity in order to protect your account and system security.

 

To facilitate communication with you, help resolve your issues as quickly as possible, or record the resolution and outcomes of relevant problems, we may retain the communication records between you and us, including messages, emails, and related content (such as account information, order details, other information you provide to verify facts, or your contact information). If you make inquiries, complaints, or suggestions regarding a specific order, we will use your account and order information.

 

For the reasonable purpose of providing and improving our services, we may also use other information you provide when communicating with customer service, as well as responses you submit through questionnaires or surveys.

 

4.Comments, sharing, and other information publishing: You may choose to use the comment or other information publishing features to share your shopping experience with other users.

 

5.Security protection: To ensure the security of your account and transactions, we need to collect and process your device information. We may collect your device name, device type, model and version, operating system version, IP address, device serial number, device identifiers (such as IMEI, IMSI, MAC address, Android ID), OAID, application ID, network type, etc. This information may also be used to prevent various types of illegal use or activities that infringe on the legitimate rights and interests of others.

 

6.We will access the accelerometer and gyroscope data of your device, as provided by you, to detect the portrait or landscape orientation of your device and adapt the display to suit your device model.

 

You understand and agree that additional services may require you to enable access permissions on your device for location information (geolocation), camera, photo album (image gallery), microphone (voice), contacts, calendar, and/or phone status in order to collect and use the information associated with these permissions. You may review the status of these permissions in your device settings and choose to enable or disable them at any time.Please note that enabling any of these permissions means you authorize us to collect and use the relevant personal information to provide the corresponding services. Once you disable any of these permissions, it means you have withdrawn your authorization, and we will no longer collect or use the corresponding personal information based on that permission, nor will we be able to provide the service related to that permission. However, your decision to disable a permission will not affect any information collection and use that occurred based on your prior authorization.

 

If we obtain your information indirectly from a third party, we will obtain your lawful authorization before providing your personal information. Except in cases explicitly permitted by law, we will only collect your personal information from a third party after confirming that the third party has obtained your authorized consent. If the scope of authorization granted to the third party does not cover our purposes for processing and use, we will either obtain your consent ourselves or require the third party to do so before processing your personal information.At the same time, our professional security team will implement enhanced security measures for personal information (including sensitive information reporting, encrypted storage of sensitive information, access permission control, etc.). We will protect indirectly obtained personal information using protection methods and measures that are no less stringent than those we apply to personal information collected directly from our own users.

 

Other Additional Features:

 

Most of the personal information mentioned above is actively provided by you to us. Some of it is obtained by us through SDKs and similar technologies during your use of our products or services, and a portion is indirectly acquired from third parties.

 

We hope you understand that we cannot provide all of the above services solely by ourselves. In many cases, we need to work together with our affiliated companies and other service providers to deliver these services to you. Therefore, to fulfill the necessary requirements for providing the above services, we need to share or entrust the processing of part of your personal information to our affiliates, partners, and other third parties. We will take necessary technical and administrative measures to protect your personal information to the greatest extent possible.

 

(二)Other Uses

 

If we intend to use your information for purposes not explicitly stated in this Policy, we will obtain your consent in advance.

 

(三)Exceptions to Obtaining Authorized Consent

 

According to relevant laws and regulations, we are not required to obtain your consent for the collection and use of your personal information under the following circumstances:

 

1.When it is related to national security or national defense security;

 

2.When it is related to public safety, public health, or significant public interest;

 

3.When it is related to criminal investigation, prosecution, trial, or enforcement of court judgments;

 

4.When it is necessary to protect the life, property, and other major lawful rights and interests of the personal information subject or other individuals, and it is difficult to obtain the individual's consent;

 

5.When the personal information collected is disclosed to the public by the personal information subject themselves;

 

6.When personal information is collected from legally disclosed information, such as lawful news reports or government information disclosure channels;

 

7.When it is necessary to sign or perform a contract at the request of the personal information subject;

 

8.When it is necessary to maintain the safe and stable operation of the products or services provided, such as discovering and handling product or service failures;

 

9.When it is necessary for legitimate news reporting;

 

10.When it is necessary for academic research institutions to conduct statistical or academic research in the public interest, and the personal information in the results provided externally has been de-identified;

 

11.Other circumstances as stipulated by laws and regulations.

 

(四)Explanation of SDK Integration Within the App

 

We conduct strict reviews of third-party SDKs integrated into our app and will inform you in a timely manner of the latest status regarding SDK integration. For specific details, please refer to the official privacy policies of the respective third-party SDKs:

 

1.com.appsflyer (AppsFlyer): (AppsFlyerSDK) Used to record app installations and uninstalls, and to collect statistics on in-app events such as registration, login, order placement, and payment. Also collects gyroscope sensor and accelerometer data, device serial number, Android_ID. Third-party SDK privacy policy: (View)

 

2.Tencent TPNS Push: Delivers message content to users via the mobile phone’s notification bar (status bar). Third-party SDK privacy policy: (View)

 

3.com.shubao (xinstall): We collect your device name, device type, model and version, system version, IP address, device serial number, device identifiers (such as IMEI, IMSI, MAC address, Android ID), OAID, app ID, network type, etc. Used for parameterized app installation to help bind upper and lower levels without user awareness. Third-party SDK privacy policy: (View)

 

4.Tencent Cloud Live: Live streaming functionality. Third-party SDK privacy policy: (View)

 

5.com.alipay (Alipay): Collects Android ID and OAID for Alipay login and payment. Third-party SDK privacy policy: (View)

 

6.com.netease (NetEase; Qiyu): Provides online customer service to users. Third-party SDK privacy policy: (View)

 

7.com.xiaomi.mipush (Xiaomi; Xiaomi Push): Delivers message content to users via the mobile phone’s notification bar (status bar). Third-party SDK privacy policy: (View)

 

8.com.heytap.mcs (OPPO; OPPO Push): Delivers message content to users via the mobile phone’s notification bar (status bar). Third-party SDK privacy policy: (View)

 

9.com.heytap.msp (OPPO; OPPO Push): Delivers message content to users via the mobile phone’s notification bar (status bar). Third-party SDK privacy policy: (View)

 

10.com.xiaomi.push (Xiaomi; Xiaomi Push): Delivers message content to users via the mobile phone’s notification bar (status bar). Third-party SDK privacy policy: (View)

 

二、How we use Cookies and similar technologies

 

(一)Cookies

 

1.We will send one or more small data files called Cookies to your computer or mobile device. The Cookies assigned to you are unique and can only be read by the web server of the domain that issued the Cookies. We send Cookies to you to simplify your repeated login steps, store the items in your shopping cart, and help determine your login status and account or data security.

 

2.We will not use Cookies for any purposes other than those described in this Privacy Policy. You may manage or delete Cookies according to your preferences. You can clear all Cookies stored on your computer. Most web browsers automatically accept Cookies, but you can usually modify your browser settings to refuse Cookies according to your needs. You may also delete all Cookies stored within the app. However, if you do so, you may need to manually adjust user settings each time you visit the site, and previously recorded relevant information will be deleted, which may impact the security of the services you use.

 

(二)Other Similar Technologies

 

In addition to Cookies, we also use other similar technologies such as web beacons and pixel tags on our website to help us understand your product or service preferences and improve customer service.

 

三、How we share, transfer, and publicly disclose your personal information

 

(一)Sharing

 

1.We may share your order information, account information, device information, and location information with partners or other third parties to ensure the smooth delivery of the products and services we provide to you. However, we will only share your personal information for legitimate, lawful, necessary, specific, and clear purposes, and only share the personal information necessary to provide the relevant services. Our partners are not authorized to use the shared personal information for any other purposes. Our partners include the following types:

 

(1) Suppliers of products or technical services: We may share your personal information with suppliers that support our functionality. Such support includes supplying goods, providing infrastructure and technical services, logistics and delivery services, payment services, data processing, and more. We share this information in order to realize the core shopping functionalities of our products and/or services. For example, we must share your order information with logistics service providers to arrange delivery. If the goods or services you order are shipped or provided directly by a supplier, we need to share your order and delivery information with that supplier to instruct them to fulfill the delivery or service.

 

(2) Financial institutions and third-party payment providers: When you place an order, request a refund, or purchase insurance, we may share certain order information with financial institutions or third-party payment providers. If we determine that it is necessary for the purpose of fraud detection and prevention, we may further share additional necessary information, such as your IP address, with the relevant financial institutions.

 

(3) Business partners: We may jointly provide products or services to you with our business partners. These include communications services, customer support, marketing, advertising, technical services, identity verification services, consulting services, and more.

 

(4) Affiliated companies: We may share your personal information with our affiliated companies to enable us to provide you with information on other products and services. These affiliated companies are required to adopt protection measures no less strict than those described in this Privacy Policy. "Affiliated companies" refers to any individual, partnership, organization, or entity that directly or indirectly controls, is controlled by, or is under common control with us (through one or more intermediaries or contractual arrangements). "Control" refers to the ability to directly or indirectly influence the management of the entity mentioned, whether through ownership, voting shares, contracts, or other means recognized by the people's court.

 

2.Apart from the circumstances described in item 1 above, we will not share your personal information with any company, organization, or individual, except in the following cases:

 

(1) With your prior explicit authorization or consent: We will share your personal information with other parties after obtaining your explicit consent.

 

(2) Sharing under legal circumstances: We may share your personal information as required by applicable laws and regulations, legal procedures, litigation/arbitration, governmental mandatory orders, or regulatory requirements.

 

(3) When required or permitted by law, in order to protect your or the public’s interests, property, or safety from harm, we may need to provide your personal information to third parties (including consumer rights protection departments or similar industry organizations).

 

(4) When it is necessary to protect national security, public security, or the significant legitimate rights and interests of you or other individuals.

 

(5) When your personal information has been publicly disclosed by yourself, or when we can obtain it from other lawful and publicly available sources.

 

(二)Transfer

 

We will not transfer your personal information to any company, organization, or individual, except in the following circumstances:

 

1.With your prior explicit consent or authorization;

 

2.When required to be provided in accordance with applicable laws, regulations, legal procedures, or mandatory administrative or judicial requirements;

 

3.When necessary to provide in accordance with relevant agreements signed with you (including electronically signed agreements and corresponding platform rules) or other legal documents;

 

4.In the event of a merger, acquisition, asset transfer, or similar transaction involving the transfer of personal information, we will require the new company or organization holding your personal information to continue to be bound by this Privacy Policy; otherwise, we will require that company or organization to obtain your authorization and consent again.

 

(三)Public Disclosure

 

We will only publicly disclose your personal information under the following circumstances:

 

1.After obtaining your explicit consent;

 

2.Disclosure based on law: We may publicly disclose your personal information when required by laws, legal procedures, litigation, or mandatory requests from competent government authorities.

 

四、How we protect and store your personal information

 

(一)Technical measures for data protection

 

We have adopted industry-standard and reasonably practicable security measures to protect your information and prevent unauthorized access, public disclosure, use, modification, damage, or loss of personal information. We use trusted security mechanisms to protect personal information from malicious attacks, and we implement access control systems to ensure that only authorized personnel can access personal information.

 

(二)Organizational measures for data protection management

 

We have established an advanced, data-centric security management system based on the data lifecycle. This system enhances data protection through multiple dimensions including organizational structure, policy design, personnel management, and product technology.

 

(三)We will take reasonable and practicable measures to avoid collecting irrelevant personal information. We will only retain your personal information for the period necessary to fulfill the purposes described in this Policy, unless otherwise required by law.

 

(四)Personal information security: We regularly conduct security and privacy protection training sessions to strengthen employee awareness of the importance of personal information protection.

 

(五)The Internet is not an absolutely secure environment. When using YaBuyBuy services, we strongly recommend that you do not transmit your information using communication methods not recommended by YaBuyBuy. You may communicate and share information with others through our services.

 

五、How you manage your personal information

 

You can manage your personal information in various ways, such as deleting items from your shopping cart, updating your personal information, or canceling your account. If you encounter any issues while managing your personal information, you can also contact us using the contact details provided at the end of this Policy, and we will respond to your request within 7 days. However, please understand that we may not be able to fully comply with your request due to legal and regulatory obligations or the necessity of providing our services.

 

Please properly safeguard your personal information and only share it with others when absolutely necessary. If you discover that your personal information—especially your account or password—has been compromised, please contact YaBuyBuy customer service immediately so we can take appropriate action upon your request.

 

Please note that the information you voluntarily share or publicly disclose while using our services may involve personal information or even sensitive personal information of yourself or others. Please carefully consider whether to share or disclose such information when using our services.

 

Please use a complex password to help ensure the security of your account. We will do our utmost to protect the security of any information you send to us.

 

六、How we handle personal information of minors

 

(一)We attach great importance to the protection of minors’ personal information. Our products, websites, and services are primarily intended for adults. Minors under the age of 18 are not permitted to create their own user accounts without the consent of their parents or guardians.

 

(二)In cases where we collect personal information of minors with parental consent, we will only use or publicly disclose such information when permitted by law, with the explicit consent of the parent or guardian, or when necessary to protect the minor.

 

七、Scope of application of this Policy

 

Please note: This Policy applies to the various products and services provided to you by the YaBuyBuy service provider through its website, client application, and any new forms that may emerge with technological development. If our products or services or those of our affiliated companies use YaBuyBuy products or services but do not have a separate privacy policy, then this Policy also applies to those products or services. If our affiliated companies have separate privacy policies for the products or services they provide to you, then the respective products or services shall be governed by their respective privacy policies.

 

八、How to contact us

 

If you have any questions, comments, suggestions, or personal concerns regarding this Policy, please contact us via the following methods:

 

Phone number: Japan +81 5055323600

Email address: Service@yabuybuy.com

 

Effective date of this Policy: January 1, 2021

Validity: Long-term