This Privacy Policy ("Privacy Policy" or "Policy") explains why and how UnionPay International Co., Ltd. ("UnionPay International" or
"We") processes your personal data when you browse, register on, and use UnionPay Cross-Border B2B Payment & Service Platform.
To register on and use UnionPay Cross-Border B2B Payment & Service Platform, you must agree to this Privacy Policy.
1. What is "personal data" or "personal information"?
Personal data refers to any information directly or indirectly associated with an identified or identifiable individual.
2. What is "UnionPay International"?
UnionPay International is a company established in accordance with the laws of the People's Republic of China ("China"). Its registered
address is 2-7F, No. 6, Dongfang Road, Pudong New Area, Shanghai, China.
UnionPay International is a multinational company with branches in many countries and regions around the world.
If you have any questions about data protection, you can write to the preceding address or call the UnionPay hotline 95516 (in
mainland China) or overseas service hotline (http://www.unionpayintl.com/cn/serviceCenter/hotline/).
3. Why does UnionPay International need to process personal data?
As a card association, UnionPay International provides payment-related services and processes payment transactions.
4. What role does UnionPay International play when handling and processing your personal data?
UnionPay International determines the purposes and methods of processing your personal data. This Privacy Policy is intended to
explain how such personal data is used.
5. What key information is contained in this Privacy Policy?
You will learn about the relevant information concerning our processing of your personal data, the purposes and legal basis of
processing such data, and your rights. For any matters not covered in this Privacy Policy, you can refer to the Privacy Policy displayed
on the UnionPay International website.
6. Under certain circumstances, we, as the data processor, process relevant transaction information in accordance with the instructions
of UnionPay International members and other partners as data controllers. For more information about the processing of your
personal information under the preceding circumstances, please see the respective privacy policies of the data controllers.
You will find that UnionPay International may process your personal information for the following purposes:
1) Review the qualification of users to complete user registration. The aforementioned users refer to the merchants who have
registered on UnionPay Cross-Border B2B Payment & Service Platform and use our services.
2) For record keeping. It means that your personal information will be kept by UnionPay International.
The types of personal data we collect and process include:
1) User's legal representative’s certificate and identity information (will vary depending on the country or region where
you are located, for example, the legal representative's identity documents, such as photos showing the front and back of the legal
representative's passport, as well as the legal representative's name, email, passport number, and mobile number, or mobile number
of the person in charge).
2) User's contact information (will vary depending on the country or region where you are located, for example, the contact's name,
email, and phone number) and location.
The following is the legal basis for personal data processed by UnionPay International:
1. Process your personal data for one or more specific purposes with your consent (for example, direct marketing);
2. Fulfill existing contracts between you and UnionPay International or a third party (especially a UnionPay International member) or
take measures based on your personal requirements before signing a contract (for example, using credit cards issued by UnionPay
International members);
3. Comply with laws that apply to us worldwide;
4. We have legitimate rights and interests in processing your personal data, unless your rights and interests take precedence over
those rights and interests (for example, compliance with foreign legal obligations, internal research, reporting, and analysis).
Depending on the applicable laws in different countries, you may have the following rights:
Access your personal data
1. We understand that you may want to know what kind of personal data we have stored about you. We are happy to provide timely
assistance. However, to protect your personal data, we ask you to prove your identity to us at the time of your request. You can
contact us in writing by email or letter containing your signature and a signed copy of the government-issued certificate of
identification.
2. UnionPay International reserves the right to refuse your request for access to your personal data under certain circumstances
permitted by law. If your personal data is not disclosed to you, we will provide you with a reason for such non-disclosure.
Other rights
Depending on the country or region where you are located, you also have the right to:
1. Refuse personal data processed by UnionPay International;
2. Refuse personal data processed by UnionPay International for direct marketing purposes;
3. Request personal data processing restrictions;
4. Request personal data correction and/or deletion;
5. Withdraw your consent for personal data processed by UnionPay International (in cases where UnionPay International processes
your personal data with your consent);
6. File complaints;
7. When you are given the option to choose whether to share your personal data with UnionPay International, you are always able to
refuse such sharing.
If you refuse to allow us to process your personal data, or you have already consented to personal data processed by us but
subsequently decided to withdraw that consent, we will respect your decision.
This may mean that we will be unable to perform the necessary operations to achieve the purposes of personal data processing as
described above (see Article 3), and you may be unable to use our services.
After you choose to withdraw your consent, UnionPay International maintains the right to continue processing your personal data
within the scope required or permitted by law.
Your personal data (as described in Article 4) may be shared and transferred. The recipients include:
1. UnionPay International's employees, subsidiary bodies, and affiliated bodies, which may use your personal data to process
transactions, develop and improve services, and achieve other purposes described in this Privacy Policy. However, we will only share
necessary personal information and be subject to the purposes stated in this Privacy Policy. If our affiliated bodies need to change
the purposes of processing your personal information, they will ask for your authorization again.
Such recipients shall take all necessary measures to protect your personal data.
1. UnionPay International has installed a strict security system to prevent any unauthorized persons (including UnionPay International
staff) from accessing your personal data. We have minimized the scope of authorized access and trained employees on how to
process personal data. Therefore, all employees that have access to your personal data and any third parties that have access to your
personal data will be required to comply with confidentiality obligations.
2. We have already taken appropriate technical and other necessary measures to prevent unauthorized or illegal processing of your
personal data and to deal with accidental or illegal destruction, loss, alteration, and unauthorized disclosure of or access to your
personal data that has been transmitted, stored, or processed by other means.
1. To provide you with smoother and easier experience, we may identify you by using a small data file "cookie" when you use the
UnionPay Cross-Border B2B Payment & Service Platform to help you reduce the times and frequency of information input or
determine the security status of your account. Cookies usually contain identifiers, site names, numbers, and characters. By using
cookies, websites can store data such as your preferences.
We will not use cookies for any purposes except those stated in this Privacy Policy. The cookie that stores your data is unique. Most
web browsers have the function of blocking cookies, which can only be read by the web server that publishes the cookies to your
domain. You can manage or delete cookies according to your preferences and clear all cookies saved on your device at any time. If
you clear the cookies, you must complete user settings again each time when you use your device to visit related websites and
browse products.
2. In addition to cookies, we also use the electronic image technology called Web Beacon. We may use Web Beacon to collect
statistics on anonymous access, which are used to calculate the number of user visits, stay time, accessed page URLs, and display
settings in order to provide you with more personalized services. These statistics do not include your personal information.
1. We will store your personal data in the People's Republic of China within the period required by applicable laws. This may involve
storing information after a transaction is completed. Once the aforementioned information processing purposes have been
achieved, your personal data will be deleted. UnionPay International is a multinational company with branches in many countries
and regions around the world. Therefore, it may transmit your personal information to China and other countries and regions. Such
cross-border transmission is necessary for UnionPay International to provide relevant services. Compliance with additional legal
requirements is required when your personal information is transmitted to or accessed from other countries and regions. UnionPay
International will transmit personal information to other countries and regions only when such transmission complies with
applicable personal information protection laws.
2. To determine a storage period for your personal data, we will comprehensively consider the usage and function of the information,
the types of products and services, and the storage period requirements stipulated by applicable laws and regulations.
1. For your use of UnionPay Cross-Border B2B Payment & Service Platform, we presume that you have the corresponding civil
capacity. If you are a minor, we require you to ask your parents or guardian to read this Privacy Policy carefully, and use our services
or provide information to us with the consent of your parents or guardian.
2. In the case of collecting personal information of minors who use our products or services with the consent of their parents
or guardians, we will only use, share, transmit, or disclose such information as permitted by laws and regulations, explicitly agreed
by their parents or guardian, or necessary to protect minors.
3. If you are the parent or guardian of a minor, please pay attention to whether the minor under your custody uses our services after
obtaining your authorization and consent. If you have any questions about the personal information of the minor under your
custody, please contact us by using the contact information stated in Article 1 or Article 14 of this Privacy Policy.
You may find links to other companies' websites on some pages. Since this Privacy Policy does not apply to the information or
personal data you provide to a third-party service provider or other entities, you should fully understand the features and privacy
protection policy of any third-party before using it. Since this Privacy Policy does not apply to the personal data processed by other
websites and links, and UnionPay International is not responsible for personal data processed by external websites, we recommend
that you read the privacy policies of these websites, links, or applications.
After a personal information security incident occurs, we will inform you of the following content in accordance with relevant laws and
regulations: the basic information and possible impact of the incident, the measures we have taken or will take, the suggestions that
help you prevent and mitigate risks, and the remedial measures for you. We will also report the handling progress of personal
information security incidents as required by regulatory authorities.
We will update this Privacy Policy from time to time, especially in response to changes in laws, regulatory guidelines, or internal
policies of UnionPay International. If we need to change or extend the purposes of personal information processing, we will provide
you with the updated Privacy Policy. In the case of major changes to this Privacy Policy, we will publish a notice on our website and
display the updated Privacy Policy on a web page, and may seek your consent under certain circumstances.
The circumstances that constitute major changes include but are not limited to:
1. Major changes have taken place in the scope and mode of services provided by us, such as the purposes of collecting and using
personal information, the types of processed personal information, and the ways of using personal information.
2. Major changes have taken place in our business entity, organizational structure, and ownership structure, such as changes in owners
due to business adjustment, merger, acquisition, and reorganization.
3. Major changes have taken place in your right to participate in personal information processing and the way in which you exercise
the right.
4. Changes have taken place in the ways and main objects of personal information sharing, transmission, or public disclosure.
5. The personal information risk assessment report indicates the existence of high risks.
6. Changes have taken place in our department responsible for personal information security and its contact information and
complaint channels.
7. Other changes that may have a significant impact on your rights and interests of personal information.
1. If you have any questions, suggestions, and complaints about data protection or want to exercise any of your rights at any time, you
can call the UnionPay hotline 95516 (in mainland China) or overseas service
hotline (http://www.unionpayintl.com/cn/serviceCenter/hotline/).
2. If you are not satisfied with our reply, especially if our personal information processing behavior has hampered your legitimate
rights and interests, you can file a complaint or report.
Release and effective date of this Privacy Policy: October 15, 2020
About Us China UnionPay UnionPay International Terms of Service Privacy Policy Contact Us Business Guide
2024 Copyright UnionPay International