Signature Workshop Privacy Policy

Welcome to use our products and services! We are well aware of the importance of personal information to you, and your trust is very important to us. We will strictly abide by laws and regulations in accordance with the principles of legality, legitimacy and minimum necessity, and adopt corresponding security protection measures to strive to protect your personal information. Safe and controllable. Based on this, we have formulated this Privacy Policy to help you fully understand when you use our products and During the service process, how we will collect, use, share, store and protect your personal information and how you can manage your personal information so that you can better make appropriate choices.

Before you start using our products and services, please be sure to carefully read and understand this policy. In particular, you should focus on reading our terms marked in bold/bold underline to ensure that you fully understand and agree before you start using it. We try our best to explain the professional terms involved in this policy in concise and popular terms to facilitate your understanding. If you have any questions, comments or suggestions about the content of this policy, you can contact us through the contact information at the end of this policy.

Your agreement to the Privacy Policy means that you have understood the basic functions provided by our products and services, as well as the necessary personal information required to operate the basic functions, and have given the corresponding collection and use authorization. However, it does not mean that you have separately agreed to enable additional functions, including To enable additional functions, we will separately seek your consent based on your actual usage. If you refuse to turn on additional functions and for us to collect non-essential personal information, it will not affect your use of basic functions.

This privacy policy will help you understand the following:

Scope of application
Information collection and use
Partners involved in data use and transfer and disclosure of personal information
Storage of information
Policy updates

1. Scope of application

This policy applies to products and services with basic online shopping functions provided to you in the form of websites, clients, mini-programs, and new forms that emerge with the development of technology.

2. Information collection and use

In order to realize the basic functions of providing you with our products and/or services, you must authorize us to collect and use the necessary information. If you refuse to provide corresponding information, you will not be able to use our products and/or services normally.

2A. Identity verification

[Real Name/Real Person Authentication] Verification of users based on the transaction of special types of goods or services, application for membership roles that require additional identity authentication (such as sellers, content creators), and other laws and regulations such as the “Internet User Account Information Management Regulations” In situations where your true identity is necessary (including protecting the rights and interests of minors in accordance with the law, combating telecommunications and network fraud, withholding and paying personal income tax, identifying relevant parties in administrative law enforcement or judicial proceedings), you need to perform real-name or real-person authentication. In order to achieve the purpose of authentication, you need to proactively provide relevant real identity information (name, ID number and other ID information or facial recognition information, which may vary depending on the actual situation, subject to page prompts) and authorize us to pass the national authoritative trusted identity authentication

2B. Search

When you use the search function (including image, voice search), we will collect your search history, including search content (search words, images, voice information), browsing history/time, search time/number of times, and collect the information based on the time you use. If the function is necessary, apply for microphone permission, camera permission or the picture you provide. In order to provide efficient search services, some of the aforementioned information will be temporarily stored on your local device and the search history will be displayed to you.

2C. Payment and delivery of goods or services

When you purchase goods or services, in order to help you complete the order payment or complete the order payment on your behalf and successfully receive the purchased goods or services, we or the third party that provides the service will collect your order information and delivery information.

2D. Shopping cart

When you use the shopping cart function, we will collect your additional purchase information of products and use your order information to optimize your shopping experience (such as price reduction/discount reminders, filtering of frequently purchased products, and sharing of specific shopping carts). Linked recommendations, etc.).

When you order specific goods and/or services from our products and/or services, we will generate an order for you to purchase the goods and/or services through the system. During the order process, you need to provide at least your consignee’s name, delivery address, and consignee’s contact number. For some special types of goods and services, you also need to provide other information necessary for the goods or services, such as When making cross-border transactions, you need to provide your ID information to complete customs clearance . You can fill in/select more additional information including other contact numbers and delivery time to ensure accurate delivery of goods or services. If you need to issue an invoice, you also need to provide the invoice title, taxpayer identification number and the email address for receiving the invoice.

At the same time, the order will contain information about the goods and/or services you purchased, the specific order number, the order creation time, the discounts you have used, the amount payable, and your remarks. We collect this information to help you successfully complete transactions, ensure the security of your transactions, facilitate you to query order information, provide customer service and after-sales services, conduct reconciliations, and tax declarations corresponding to preferential information (if necessary) and other things we have clearly informed you Purpose.

2E. Customer service and dispute resolution

When you contact us or submit an application for sale, after-sales, or dispute resolution, in order to protect the security of your account and system, we need you to provide necessary personal information to verify your membership status.

In order to facilitate contact with you, help you solve the problem as soon as possible, or record the solutions and results of related problems, we may save your communication with us, communication/call records and related content (including account information, order information, and your order information to prove the relevant Other information provided by the facts, or the contact information you left). If you make inquiries, complaints or provide suggestions for a specific order, we will use your account information and order information.

In order to reasonably need to provide services and improve service quality, we may also use other information about you, including the relevant information you provide when you contact customer service, and the questionnaire response information you send to us when you participate in the questionnaire.

We will use deep learning technology to provide you with intelligent question and answer dialogue and intelligent voice customer service services. De-identify your communication with us, communication/call records and related content, and use them for intelligent customer service algorithm model training when your identity cannot be identified. When you receive intelligent customer service, we will give you prominent reminders. We will continue to improve the service quality of smart customer service based on your smart customer service usage records.

2F. Provide you with safety protection

We are committed to providing you with a safe and trustworthy e-commerce transaction environment. In order to ensure the order and security of e-commerce transactions, prevent and manage telecommunications network fraud, maintain the normal and stable operation of the network, prevent illegal and criminal activities on the Internet, effectively respond to network security incidents, and protect the personal and property safety of you or other users or the public from infringement.

We may use your above information, account information, service log information, and information that our affiliates and partners have obtained your authorization or can provide to us in accordance with the law to determine account security, transaction security, identity verification, Identify violations of laws and regulations, detect and prevent safety incidents, and take necessary recording, analysis, and disposal measures in accordance with the law.

2G. Additional services based on system permissions

Among the basic functions we provide you, we may collect and use your personal information . For example, in order to ensure the realization of related product or service functions, we will provide you with information when you want to quickly fill in the delivery and shipping address, recommend nearby product or service information and content in the same city, help you add a location to the information you publish, and use membership code products. Request location permissions and collect your location information.

2H. Transfer

If we need to transfer personal information due to merger, division, dissolution, or declaration of bankruptcy, we will inform you of the name and contact information of the recipient. The receiving party will continue to comply with this Policy and other legal obligations. If the receiving party changes the original processing purpose and processing method, it will obtain your consent again.

2J. Cease operations

If we stop operating products and/or services, we will promptly stop collecting your personal information. We will deliver notices one by one or send you notice of the cessation of operations in the form of announcements, and the personal information we hold related to the closed products and/or services will be processed in accordance with this Privacy Policy [Storage of Information – Storage Deletion or anonymization by the methods in [Period] and [Your Rights – Deletion].

3. Partners involved in data use and transfer and disclosure of personal information

1. Basic principles

When we cooperate with our partners, we will adhere to the following principles:

Principle of legality, legitimacy and minimum necessity: Data processing should have a legal basis, have a legitimate purpose, and be limited to the minimum scope to achieve the purpose of processing.
The principle of maximizing the user’s right to know and decide: During the data processing process, the user’s right to know and decide on the processing of their personal information is fully respected.
The principle of maximizing security assurance capabilities: We will take necessary measures to ensure the security of the personal information we process, carefully evaluate the purpose of data use by partners, conduct a comprehensive assessment of the security assurance capabilities of these partners, and require them to comply with the cooperation agreement relevant requirements.

2. Scope of partners

If specific functions and scenarios involve services provided by our affiliates or third parties, the scope of partners includes our affiliates and third parties.

3. Entrusted processing

We may entrust authorized partners to process your personal information so that the authorized partners can provide you with certain services or perform functions on our behalf. We will only entrust them to process your information for the legal, legitimate, necessary, specific and clear purposes stated in this policy. Authorized partners can only have access to the information they need to perform their duties, and we will require them through agreements not to Use this information for any other purpose beyond the scope of the commission. If our authorized partners use your information for purposes not entrusted by us, they will obtain your consent separately.

4. Joint processing

For scenarios where we jointly process personal information, we will sign relevant agreements with our partners in accordance with legal provisions and stipulate their respective rights and obligations to ensure that we comply with relevant legal provisions and protect data security in the process of using relevant personal information.

4. Storage of information

Storage period

We will only retain your personal information for the period necessary to achieve the purposes stated in this policy, unless there are mandatory retention requirements by law. For example, the “Electronic Commerce Law of the People’s Republic of China” requires that product and service information and transaction information be retained for the period from the transaction. Not less than three years from the date of completion.

We determine the storage period of personal information mainly based on the following standards:

Complete the transaction purposes related to you, maintain corresponding transaction and business records, and respond to your possible inquiries or complaints;
Ensure the safety and quality of the services we provide you;
Do you agree to a longer retention period;
According to the relevant needs of the statute of limitations;
Whether there are other special agreements or legal and regulatory provisions regarding the retention period.

After the retention period has expired, we will delete or anonymize your personal information as required by applicable law.

Storage location

In principle, the personal information we collect and generate within the territory of the People’s Republic of China will be stored within the territory in accordance with the requirements of applicable laws. We will only provide your personal information overseas for the purposes necessary to perform our contract with you or for other legal processing reasons. For example, if you purchase cross-border e-commerce goods/services provided to you by overseas sellers and other third-party partners through us or our affiliate platforms, or you sell goods overseas as a Signature Workshop seller. In order to fulfill your cross-border transactions, cross-border logistics delivery and collection, customs clearance and after-sales service needs, we or our affiliates will transfer the necessary transaction-related information in your order information, including the delivery address, overseas. Sellers/buyers and other third-party partners. Such foreign countries/regions may have different or no data protection laws. In such cases, we will, in accordance with the requirements of Chinese law, evaluate and do our best to ensure that your personal information is protected at the same level as in China, for example, by de-identifying and encrypting the waybill information transmitted across the border. transfer, regularly assess and audit the security capability level of the recipient, and enter into a data processing agreement/clause. If we really need to transfer your personal information overseas due to business needs, we will comply with the requirements of laws, regulations and relevant regulatory authorities and inform you of the name and contact information of the overseas recipient in the relevant service agreement or specific function page authorization agreement. , processing purposes, processing methods, types of personal information, and the methods and procedures by which you can exercise relevant rights to overseas recipients, etc., and obtain your separate consent (if applicable). For specific overseas seller information, you can view the announcement on the specific store page. Before providing your personal information overseas, we will take measures such as security assessment, personal information protection certification by a professional organization, or enter into a contract with the overseas recipient in accordance with the standard contract formulated by the national cyberspace department to comply with the provision of personal information overseas. legal conditions.

Storage security

Data protection technical measures
We have adopted reasonable and feasible security measures that comply with industry standards to protect your information and prevent personal information from unauthorized access, public disclosure, use, modification, damage or loss. For example, we will use encryption technology to improve the security of personal information. When exchanging data between your browser and the server, it is protected by SSL protocol encryption. We provide HTTPS protocol secure browsing; we will use trusted protection mechanisms to prevent personal Information is subject to malicious attacks; we will deploy access control mechanisms and try our best to ensure that only authorized personnel can access personal information. At present, our important information systems have passed the level 3 or above assessment of network security level protection.
Organizational measures for data protection management
We have established an advanced data security management system in the industry that is centered on data and revolves around the data life cycle to improve the security of personal information from the dimensions of organizational construction, system design, personnel management and product technology. We have set up a dedicated personal information protection department and designated a dedicated person responsible for the protection of children’s personal information. We continue to enhance our employees’ awareness of the importance of protecting personal information through training courses and examinations.
Response to personal information security incidents
If our physical, technical or management protection facilities are damaged, resulting in unauthorized access, public disclosure, tampering or destruction of information, resulting in damage to your legitimate rights and interests, we will promptly activate the emergency plan and take reasonable and necessary measures. To minimize the impact on you personally. If a personal information security incident occurs, we will also, in accordance with the requirements of laws and regulations, inform you of the basic situation and possible impact of the security incident, the handling measures we have taken or will take, suggestions for you to prevent and reduce risks on your own, and suggestions for you. remedies. We will inform you through text messages, phone calls, push notifications and other reasonable channels. If it is difficult to inform you one by one, we will issue announcements in a reasonable and effective manner. At the same time, we will also report the handling of personal information security incidents in accordance with the requirements of regulatory authorities.

5. Policy updates

In order to bring you a better product and service experience, we continue to work hard to improve our products, services and technology. When new services and business processes change, we may update our privacy policy to inform you of the specific changes. However, we will not limit your rights under this policy without your explicit consent. We will post any changes to this policy on a dedicated page.

For major changes, we will also provide more prominent notifications (including notifications through Taobao announcements or providing you with pop-up reminders).

Major changes referred to in this policy include but are not limited to:

The product’s business model has undergone major changes. Such as the purpose of processing personal information, types of personal information processed, and how personal information is used;
Changes in the subject of the privacy policy caused by business adjustments, transactions and mergers, and the new subject recipient changes the original processing purpose and method;
The main objects of personal information sharing or public disclosure change;
Significant changes in users’ personal information rights and their exercise methods;
When the contact information and complaint channels of the person responsible for handling personal information protection change;
When the personal information protection impact assessment report shows that the existence of the product has a significant impact on personal rights and interests.

We will also archive the old version of this policy on a dedicated page on Taobao for your review.