Version: V1.0
Effective Date: 15 November 2025
This Shipay Privacy Policy (hereinafter referred to as this “Policy”) is formulated and published by Guangzhou Shipay Technology Co., Ltd. (hereinafter referred to as “Shipay Technology” or “we/us”). It applies when you use the Shipay website (shipay.co) and the “Shipay” mobile application (Shipay App), and explains how we collect, use, store, share and protect your personal information.
We understand the importance of personal information and will use our best efforts to protect its security. This Policy explains:
Please read this Policy carefully and fully understand it before using Shipay. If you do not agree with any part of this Policy, please stop using Shipay services immediately.
When you visit shipay.co, download or use the Shipay App, register an account, or otherwise use Shipay services, you are deemed to have read, understood and agreed to this Policy.
We only collect and use your personal information for the purposes described in this Policy and follow the principle of data minimization. We will not collect information that is not relevant to the services we provide.
To help you create and manage your Shipay account, we may collect the following information:
This information is mainly used to comply with legal requirements, prevent fraud and ensure transaction security.
If you refuse to provide the above information, you may not be able to register or use certain functions, but it will not affect your ability to browse general public pages.
To display local life information and enable access to third-party services, we may collect and use:
Purpose: To recommend nearby restaurants, hotels, transportation and other services, or to provide city-specific content based on your location.
You can manage your location permission in your device settings. If you disable location services, it may affect the accuracy of nearby recommendations, but will not affect basic browsing.
Purpose: To help you quickly locate historical content, to recommend services that may interest you, and for statistics and product optimization.
Purpose: To show your order details, enable order history queries and provide after-sales support.
When you connect to third-party merchants through Shipay and make payments:
When you contact us or third-party merchants through online customer service, phone, email or other means, or when you file complaints/disputes, we may collect:
Purpose: To verify your identity, troubleshoot issues, provide responses and solutions, and improve our service quality.
To ensure the proper functioning and security of Shipay’s website and App, we may collect the following log information:
Purpose: System maintenance, security auditing, prevention of attacks, troubleshooting failures and performance optimization.
Subject to applicable laws and regulations, we may de-identify or anonymize the collected information and then use it for:
When we use de-identified or anonymized data for statistics and analysis, we will not attempt to re-identify you.
With your authorization, we may use the following channels:
In-app messages, pop-ups, App push notifications, SMS, email and similar means,
to send you:
Important notifications such as service updates, functional changes, and updates to agreements/policies;
Marketing messages such as promotions, discounts, special offers and new service recommendations.
If you do not wish to receive marketing messages, you may unsubscribe or disable them by:
However, we may still send you necessary messages related to order status, service changes, security alerts or other notifications that could have a significant impact on your rights and obligations.
In the following circumstances, we may process your personal information without your prior consent in accordance with applicable laws and regulations:
To ensure the normal operation of the website and App and to improve your experience, we may use cookies, SDKs, pixel tags, local storage and similar technologies on shipay.co and the Shipay App.
You can manage or delete cookies in your browser or device settings. The specific procedures vary by browser and device. However, if you disable cookies, some functions may not work properly.
For third-party SDKs used for analytics, advertising, location services and similar purposes, we will, as far as possible, inform you of their providers, the types of data they collect and their purposes, and we will evaluate their compliance.
We will keep your personal information strictly confidential. Except as described in this Policy, we will not share, transfer or publicly disclose your personal information to third parties.
We will only share your personal information under the following circumstances, and will only share the necessary information:
Sharing with affiliated companies
To facilitate unified management and coordinated services, we may share necessary personal information with our affiliated companies. We will require them to comply with confidentiality and security obligations no less stringent than those in this Policy.
Sharing with partner merchants / service providers
To complete your orders and provide related services, we may share necessary information with relevant third-party merchants, logistics service providers, customer service vendors and similar parties, for example:
Sharing with third-party technical service providers
To achieve data storage, SMS delivery, payment processing, risk control, analytics and other functions, we may share necessary information with cloud service providers, SMS service providers, payment institutions, risk control service providers and others.
Sharing based on legal or legitimate requirements
We may disclose necessary information in accordance with laws and regulations or the lawful requirements of administrative or judicial authorities, or when it is necessary to safeguard public interests or to protect the rights and safety of our users or employees.
In the above sharing scenarios, we will use commercially reasonable efforts to ensure that the recipients take strict data protection measures and will not use personal information for unauthorized purposes.
We generally do not transfer your personal information to third parties. If transfer is necessary (e.g. in case of mergers, divisions, reorganizations or asset transfers), we will:
We will not publicly disclose your personal information unless:
Under normal circumstances, we will store and process your personal information within the territory of the People’s Republic of China. Where cross-border storage or access is necessary, we will explain this in Section VII below.
We will retain your personal information only for the period necessary to achieve the purposes set out in this Policy or for the minimum retention period required by laws and regulations:
After the retention period expires, we will delete or anonymize your personal information, unless otherwise required by laws, regulations or regulatory authorities.
We adopt a variety of technical and organizational security measures to prevent your personal information from being lost, improperly used or accessed without authorization, including but not limited to:
Please understand that although we take reasonable measures to protect your personal information, no method of transmission over the Internet or electronic storage is completely secure. If a personal information security incident occurs, we will take remedial measures in accordance with applicable laws and regulations, promptly inform you of relevant circumstances in a reasonable manner, and report to regulatory authorities where required.
During your use of Shipay, we strive to provide you with personal information management functions to safeguard your statutory rights, including:
Right to access and review
You have the right to access and review your basic personal information, order information and similar data. You may do so via your account center, order pages or by contacting customer service.
Right to rectification and supplementation
If you find that your personal information is inaccurate or incomplete, you have the right to request rectification or supplementation. You may modify such information through personal profile pages or by contacting customer service.
Right to erasure
You may request the deletion of your personal information in the following situations:
When we decide to respond to your deletion request, we will also, as far as possible, notify third parties that have obtained your personal information from us to delete it, unless otherwise required by laws and regulations or where such third parties have obtained your separate authorization.
Right to withdraw consent
If we process your personal information based on your consent, you have the right to withdraw such consent at any time. After you withdraw consent, we will stop processing the relevant personal information. Your withdrawal of consent will not affect the validity of any processing conducted prior to the withdrawal.
Right to account cancellation
You may apply to cancel your account through the channels provided by Shipay. After account cancellation, we will stop providing you with services and will delete or anonymize your personal information in accordance with laws and regulations, except where otherwise required by laws, regulations or regulatory authorities.
Right to obtain a copy of your personal information (if applicable)
Subject to applicable laws and regulations, you may request a copy of your personal information through reasonable means, and we will provide data export services where technically feasible.
Rights relating to automated decision-making (if applicable)
If we make significant decisions affecting you through automated decision-making (such as profiling or personalized recommendations), you have the right to request an explanation and to refuse decisions made solely by automated means, subject to applicable laws and regulations.
We will handle your requests as soon as reasonably possible. In general, we will respond within fifteen (15) working days. For complex or unreasonable requests, we may extend the processing time within the limits permitted by law.
Shipay is mainly intended for users with full civil capacity. If you are under 18 years old, you should use our services only under the consent and guidance of your guardian.
If we become aware that we have collected personal information from a minor without the consent of his/her guardian, we will take steps to delete or anonymize such information as soon as possible.
If you are the guardian of a minor and believe that we may have collected the minor’s personal information, please contact us promptly using the contact details provided in this Policy.
Under normal circumstances, we store and process your personal information within mainland China.
If, due to business needs, it becomes necessary to provide your personal information to recipients outside of China (for example:
Before cross-border transfer of personal information, we will, within the scope required by law, inform you of the purpose of the transfer, the type of recipient and the type of data involved, and, where necessary, obtain your separate consent.
We may revise this Policy from time to time to reflect changes in laws and regulations, updates to our services or for other reasons.
The revised Privacy Policy will be notified by updating the version number and publishing it in a prominent position on shipay.co or in the Shipay App, and will take effect from the date of publication.
If revisions involve significant changes in the purpose, method or type of personal information processing, we will provide additional notices via pop-up windows, in-app messages or other reasonable means, and, where necessary, obtain your renewed consent.
If you do not agree to such changes, you should stop using Shipay services immediately and may apply to cancel your account. If you continue using Shipay, you will be deemed to have accepted the updated Policy.
If you have any questions, comments or complaints about this Policy or Shipay services, or have any concerns regarding personal information protection, you may contact us using the following details:
We will handle and endeavour to respond to your questions, comments or complaints within a reasonable time after receiving them, generally within fifteen (15) working days.
Note: This English version of the Privacy Policy is provided for your convenience. In case of any inconsistency or ambiguity between the Chinese version and this English version, the Chinese version shall prevail.
版本号：V1.0
生效日期：2025年11月15日
本《Shipay 隐私政策》（以下简称“本政策”）由广州适培科技有限公司（以下简称“适培科技”或“我们”）制定并发布，适用于您在使用 Shipay 网站（shipay.co）及 “Shipay” 移动应用程序（Shipay App） 时，我们如何收集、使用、存储、共享和保护您的个人信息。
我们深知个人信息对您的重要性，也会尽最大努力保护您的个人信息安全。本政策将向您说明：
请您在使用 Shipay 之前，仔细阅读并充分理解本政策全部内容。如果您不同意本政策的任何内容，请立即停止使用 Shipay 相关服务。
当您访问 shipay.co、下载或使用 Shipay App、注册账号或以其他方式使用 Shipay 服务时，即视为您已阅读、理解并同意本政策。
我们仅会出于本政策所述的以下目的，收集和使用您的个人信息。我们会遵循最小必要原则，不会收集与提供服务无关的信息。
为帮助您创建并管理 Shipay 账号，我们可能会收集以下信息：
账号注册信息：
身份核验（如适用）：
在某些需要根据法律法规或平台安全要求进行实名认证的场景，我们可能收集：
如您拒绝提供上述信息，可能导致您无法注册或使用部分功能，但不影响您浏览一般公开页面。
为向您展示本地生活信息并提供第三方服务入口，我们可能会收集和使用：
位置信息（在您授权的情况下）：
浏览与搜索记录：
订单与预约信息（如您通过 Shipay 下单或跳转下单）：
当您通过 Shipay 触达第三方商家并完成支付时：
支付相关信息
风险控制与防欺诈
当您通过在线客服、电话、电子邮件或其他方式与我们联系，或向第三方商家发起投诉 / 争议时，我们可能会收集：
用途：核实身份、查询问题、提供答复与处理结果、改进我们的服务质量。
为保障 Shipay 网站和 App 的正常运行与安全，我们可能会收集以下日志类信息：
设备信息：
网络信息：
操作日志：
用途：用于系统维护、安全审计、防止攻击、故障排查与性能优化。
在遵守法律法规的前提下，我们可能对收集的信息进行脱敏或匿名化处理，用于：
在使用去标识化、匿名化数据进行统计分析时，我们不会尝试将其重新与您的真实身份关联。
在获得您授权的前提下，我们可能通过：
站内消息、弹窗、App 推送、短信、电子邮件等方式，向您发送：
如果您不希望接收营销类信息，您可以通过如下方式退订或关闭：
但与订单状态、服务变更、安全提示及其他对您权利义务可能有重大影响的通知，我们仍可能在必要时向您发送。
根据法律法规规定，以下情形中我们处理您的个人信息无需征得您的事先授权同意：
为确保网站和 App 的正常运转、提升您的访问体验，我们可能在 shipay.co 和 Shipay App 中使用 Cookie、SDK、像素标签、本地存储等同类技术。
Cookie 的用途包括但不限于：
您可以通过浏览器或设备设置管理或删除 Cookie。不同浏览器和设备的操作方法有所不同，但如果您拒绝 Cookie，可能会影响部分功能的正常使用。
对于接入的第三方统计 / 广告 / 位置服务等 SDK，我们会尽量向您说明其提供方、收集的类型及用途，并对其收集行为进行合规性评估。
我们会对您的个人信息进行严格保密，除本政策所述情形外，不会向第三方共享、转让或公开披露您的个人信息。
我们仅在以下情形下共享您的个人信息，且仅共享必要信息：
与关联公司共享
为便于统一管理与协同提供服务，我们可能与本公司的关联公司共享必要的个人信息。我们会要求关联公司履行不低于本政策标准的保密与安全保护义务。
与合作商家 / 服务提供者共享
为便于完成您的订单和提供相关服务，我们可能向相应第三方商家、物流服务提供者、客服外包商等共享必要的信息，例如：
与第三方技术服务商共享
为实现数据存储、短信发送、支付结算、风控审计、统计分析等功能，我们可能与云服务厂商、短信服务商、支付机构、风控服务商等共享必要的信息。
基于法定情形或合法要求的共享
根据法律法规规定、行政或司法机关的合法要求，或为维护社会公共利益、保护我们的用户或员工的权利与安全，我们可能在法律要求范围内提供相应信息。
在上述共享情形中，我们会尽商业上合理的努力，要求接收方采取严格的数据保护措施，不得将个人信息用于未经授权的用途。
我们一般不会将您的个人信息转让给第三方。如确需转让（例如因合并、分立、重组、资产转让等），我们会：
我们不会公开披露您的个人信息，除非：
在正常情况下，我们会在 中华人民共和国境内存储和处理您的个人信息。若因业务需要确有跨境存储或访问的情形，我们将在第七条中另行说明。
我们仅在实现本政策所述目的所必需的时间内或法律法规要求的最短期限内保存您的个人信息：
超过保存期限后，我们将删除您的个人信息或进行匿名化处理，但法律法规另有规定或监管机关要求保留的除外。
我们采取多种安全技术和管理措施，以防止个人信息丢失、被不当使用或未经授权访问，包括但不限于：
尽管已经采取上述措施，请您理解：任何通过互联网传输或电子存储的方式都不能保证绝对安全。如发生个人信息安全事件，我们将按照法律法规的要求，及时采取补救措施，并以合理方式向您告知相关情况，必要时向监管部门报告。
在您使用 Shipay 期间，我们尽力为您提供对个人信息的管理功能，以保障您对个人信息的各项法定权利，包括：
查询和访问权：
您有权查询、访问您的基本个人信息、订单信息等，可通过账号中心、订单页面等入口查看，或通过客服渠道提出查询请求。
更正和补充权：
如您发现我们处理的您的个人信息存在不准确或不完整的情况，您有权要求更正或补充，可通过个人资料编辑页面或联系客服进行修改。
删除权：
在以下情形中，您可以要求我们删除您的个人信息：
撤回同意权：
对于基于您同意而处理的个人信息，您有权随时撤回同意。撤回同意后，我们将停止相应处理，但撤回同意不影响此前基于您的授权而开展的处理行为的有效性。
账号注销权：
您可以通过 Shipay 提供的渠道申请注销账号。注销账号后，我们将停止提供服务并删除或匿名化处理您的个人信息，但法律法规或监管机关另有要求的除外。
获取个人信息副本的权利（如适用）：
在符合法律法规的前提下，您可以通过合理方式申请获取您的个人信息副本，我们将为您提供在技术可行情况下的数据导出服务。
自动化决策的约束权（如适用）：
如我们通过自动化决策（如用户画像、个性化推荐等）对您产生重大影响的，您有权要求我们予以解释，并有权拒绝我们对您作出仅基于自动化决策的决定。
我们将尽快处理您的请求。一般情况下，我们将在 十五（15）个工作日内给予回复；对复杂或超出合理范围的请求，我们也可能在法律允许期限内合理延长处理时间。
在正常情况下，我们将在中国境内存储和处理您的个人信息。
如因业务需要，确有必要将您的个人信息提供给境外的接收方（例如：
在涉及个人信息跨境传输前，我们会在法律要求的范围内，向您明确告知信息出境的目的、接收方类型和数据种类，并在必要时征得您的单独同意。
如您对本政策或 Shipay 服务有任何疑问、意见或投诉，或对个人信息保护存在任何疑虑，您可以通过以下方式联系我们：
我们将在收到您的问题、意见或投诉后，在合理时间内予以处理并尽力回复，一般不超过 十五（15）个工作日。
Note / 声明：In case of any inconsistency or ambiguity between the English and
Chinese versions on this page, the Chinese version shall prevail.
如本页面英文与中文内容存在不一致或歧义，以中文版本为准。