Alipay Payment Privacy Policy
Release date of this version: Sep 23, 2025
Effective date: Oct 23, 2025
Overview
We understand the importance of personal information to you and thank you for placing your trust in us. Through this Policy, we will explain to you how Alipay will collect, store, protect, use and disclose your information, as well as your rights. The key points are as follows:
1. In order to facilitate your understanding of the types and purposes of information we need to process when you use our services, we will provide detailed explanations to you in connection with specific services.
2. In order to provide services to you, we will process your information in accordance with the principles of legality, legitimacy, necessity and good faith.
3. If it is necessary to share your information with a third party in order to provide services to you, we will evaluate the legality, legitimacy and necessity of information collection by such third party. We will require such third party to take appropriate measures to protect your information and strictly comply with relevant laws, regulations and regulatory requirements. In addition, according to the requirements of laws, regulations and national standards, we will obtain your consent or confirm that the third party has obtained your consent by means of confirmation agreement, document confirmation under specific scenarios, pop-up prompts and so on.
4. If we need to obtain your information from a third party in order to provide services to you, we will require such third party to explain the source of the information and guarantee the legality of the information provision; if the personal information processing activities required for our business are beyond the scope of your authorization when you originally provided personal information to the third party, we will obtain your express consent.
5. You may access and manage your information, set up privacy functions, cancel your Alipay account or make complaints and reports by the means introduced in this Policy.
You may read the relevant sections according to the following indexes to further understand the specific provisions of this Policy:
I. How We Collect Information
II. How We Use Cookie, Beacon, Proxy and Other Technologies
III. How We Store and Protect Information
IV. How We Use Information
V. How We Disclose Information
VI. How You Exercise Your Rights on Your Own Information
VII. How We Protect Information of Minors
VIII. Application and Update of this Policy
IX. Description of Key Words in this Policy
Alipay Payment Technology Co., Ltd. (registered address/principal office address: 15/F, 447 North Nanquan Road, China (Shanghai) Pilot Free Trade Zone; contact number 95188; “We” or “Us”) will respect and protect your privacy. When you use our services, we will collect, store, use and disclose your information in accordance with the Alipay Payment Privacy Policy (the “Policy”). At the same time, we will explain to you in this Policy how we provide you with services to access to, update, manage and protect your information. This Policy is closely related to your use of our services, and we recommend that you carefully read and understand this Policy in its entirety and make a choice you deem appropriate. We strive to use plain and concise language, and to use bold characters to mark clauses and Personal Information in this Policy that are of great concern to your rights and interests, so as to call your attention to them.
In order to comply with national laws, regulations and regulatory requirements (such as real-name management, anti-money laundering duties, financial payments compliance duties and security management), as well as to provide services to you and improve the quality of services, we need to collect, store, use and disclose your information. We will process your information in accordance with this Policy, so that you can enjoy high-quality, convenient and personalized services, and better protect your account and asset security.
How We Collect Your Information
In accordance with relevant laws and regulations and national standards, we may process your personal information in the following circumstances:
(1) when we obtain your consent;
(2) when it is necessary for the conclusion and performance of the contract;
(3) when it relates to our performance of legal obligations, such as the necessary information required by laws and regulations about anti-money laundering, anti-terrorist financing, anti-telecom and online fraud and real-name management;
(4) when it is directly related to national security or national defense;
(5) when it is necessary to respond to public health emergencies, or to protect the life, health and property safety of natural persons in an emergency;
(6) when it is directly related to a criminal investigation, prosecution, trial or execution of judgments;
(7) when the personal information is disclosed to the public by yourself;
(8) when the personal information is collected from public information that has been legally disclosed, such as legitimate news reports, government information disclosure, etc.;
(9) when it is necessary for the maintenance of secure and stable operation of the services provided, e.g., to discover and deal with failure in the products or services;
(10)other circumstances provided in laws and regulations.
Please note that when we process your personal information in above circumstance (2) – (10), we may not need to obtain your consent in accordance with applicable laws and regulations.
In the process of using the following business functions of Alipay Payment (the “Services”), we need to collect some information about you to provide the Services to you, improve the quality of our services, ensure the security of your account and asset, and comply with national laws, regulations and regulatory requirements:
1. Perform anti-money laundering obligations, anti-telecom and online fraud obligations and real-name management according to laws, regulations and regulatory requirements
(1) When you register your Alipay Payment account (the “payment account”) through Alipay Clientware (the “clientware” ) or other channels, you need to provide your mobile number or email address as the login name of your paymentaccount. You are required to provide basic identity information, including name, nationality, gender, occupation, address, contact information, as well as type, number and expiry date of valid identity documents, in accordance with the requirements of the Administrative Measures for Online Payment Business of Non-banking Payment Institutions, the Anti-Telecom and Online Fraud Law of the People’s Republic of China, Administrative Measures for the Anti-Money Laundering and Counter-Terrorist Financing of Payment Institutions, etc. As basic identity information includes sensitive personal information, if you fail to provide the above information, you may not be able to register the paymentaccount or use the payment services. According to relevant laws and regulations, you are required to pass multiple cross-validation of basic identity information before you can increase the cumulative limit for balance payment transactions or use the account balance to purchase financial products such as investment and financial planning products. The external authentication channels of basic identity information include government departments’ databases, commercial banks’ information systems and commercial databases. If you choose to authenticate basic identity information via a commercial bank’s information system, you are required to provide your relevant bank account information and bank-reserved mobile number, in order to complete authentication. The foregoing information is your sensitive personal information, and if you fail to provide the foregoing information, you may not be able to use some of the services that require multiple cross-validation, but such failure will not affect your use of other services provided by us;
(2) According to the Administrative Measures on Anti-money Laundering and Anti-terrorism by Payment Institutions and other laws, regulations and regulatory requirements relating to anti-money laundering, we are required to remind you to provide timely colour photocopies or photos of valid identity documents for us to check and retain;
(3)To improve your user experience, if you have provided the foregoing indentity information when you previously using the services provided by our affiliated companies, we might collect such information from our affiliated companies, so that you do not have to submit the information repeatedly; the foregoing information includes your sensitive personal information, and if you fail to provide the foregoing information, you may not be able to use some of the services related to the regulatory requirements, but such failure will not affect your use of other services provided by us.
2. Balance payment
In order for you to use the balance payment service for consumption, fund transfer, or purchasing financial products such as investment and financial planning products (to the extent supported by the payment account type), we need to record the balance information and transaction information of your payment account. The foregoing information includes your sensitive personal information, and it is our legal obligation to record the aforementioned information.
3. Fast payment
In order for you to use the fast payment service torecharge the balance of your payment account or withdraw money from the balance and make purchases, perform fund transfers and purchase financial products such as investment and financial planning products by using the bank card,you are required to provide or confirm your bank card information, name, ID number and bank-reserved mobile number. The foregoing information includes your sensitive personal information, and we will verify the above information with the card issuing bank. When you use the fast payment service, we need to record your transaction information. The foregoing information includes your sensitive personal information, and if you fail to provide the above information, you may not be able to use the fast payment service, but such failure will not affect your use of other services provided by us.
4. Transfer
In order to execute your payment instructions accurately, when you transfer money to another person’s payment account, you need to enter or confirmthe account of the payee, part of the name of the payee and the amount transferred according to the prompts on the page; when you transfer money to someone else’s bank card, you need to enter or confirmthe name of the payee, the card number and the account bank; the foregoing information includes sensitive personal information of the payee, and if you do not provide the above information, the transfer may not be possible, but this will not affect your use of other services provided by us.
5. Red packets
When you send red packets to others, you may follow the page prompts to enter the value of red packets, the number of red packets and the recipients; the foregoing information includes your sensitive personal information, and if you do not provide the above information, the red packets may not be sent, but this will not affect your use of other services provided by us. You can also choose different themes of red packets and/or insert blessings, but failure to do so will not prevent you from sending the red packets.
6. Go Dutch
When you initiate a collection request via Go Dutch service, you can enter the total amount and the total number of payers according to the prompts on the page; the foregoing information includes your sensitive personal information, and if you do not provide the above information, you may not be able to initiate Go Dutch, but this will not affect your use of other services provided by us. At the same time, you may also choose to insert the reason for collection, but failure to do so will not prevent you from initiating Go Dutch.
7. Purchases
When you make a purchase at a merchant, we need to manage the merchant in accordance with laws, regulations and regulatory requirements in order to prevent the risk of cashing out or fraud. Therefore, we will collect your transaction information, including transaction amount, transaction counterparty, transaction commodity , transaction time, delivery information (if any) either directly or through the merchant. The foregoing information includes your sensitive personal information,and it is our legal obligation to record the foregoing information.
8. Credit card repayment
When you use the credit card repayment service, you are required to provide the card number, card issuing bank, name and amount of repayment for the relevant credit card; the foregoing information includes your sensitive personal information, and if you fail to provide the above information, you may not be able to use the credit card repayment service, but such failure will not affect your use of other services provided by us.
9. Transaction query
You may view the details of your payment account transaction bill on the transaction page of clientware. You may modify the transaction categories, or add labels and remarks. The foregoing information includes your sensitive personal information, and failure to take the initiative to provide the foregoing information will not prevent you from viewing the transaction details.
10. Identity authentication
(1) Login Authentication
In order for you to log in payment account more securely and conveniently, you may choose the Face Login service provided by us, and provide us with your face image or video to verify your identity; if your device and clientware both support fingerprint or face ID function, you may choose to use fingerprint login or face ID login service. You need to input your fingerprint information or Face ID information onto your device, and you need to complete information verification on your device when you sign in with your fingerprint or Face ID. We only receive verification results and do not collect your fingerprint or face ID information. Face image or video is your sensitive personal information, and if you do not want to use the face Login, fingerprint login or face ID login service, you can also choose password login, SMS verification code login and other means;
(2) Authentication of Important Operations
In order to ensure the security of your account and asset, we need to verify your identity when you perform some important account operations (such as retrieving your password, reporting the loss of your account, finding your account, freezing the transactional asset, and issuing certificates related to account and asset). For this purpose, you may be required to provide us with information of your identity documents, photocopies of your identity document, photo of you holding your identity card, transaction vouchers, biometric identification information (if face recognition for identity verification is needed)and other identification documents collected based on your consent in the process of conducting specific business. The foregoing information is your sensitive personal information, and if you do not agree to provide the above information, you will be unable to complete the specific operations, but this will not affect your use of other services provided by us;
(3) Authentication of Payment Instructions
When you use the payment account for transactions, we need to verify your identity to ensure the security of your account and asset. We may provide you with a variety of authentication methods, and you can choose to use your static password, digital certificate, electronic signature, one-time password or biometric identification information to complete the authentication process; when the level of security risk increases, we may remind you of re-authentication. The foregoing information is your sensitive personal information, and if you do not agree to provide the foregoing information, you may not be able to complete the transaction, but this will not affect your use of other services provided by us. In order to enable you to use the payment service more securely and conveniently, you can choose to use the fingerprint payment or face ID payment service, provided that both your device and clientware version support the fingerprint or face ID function. You need to input your fingerprint information or face ID information onto your device, and you need to complete the information verification on your device when you make fingerprint payment or face ID payment. We only receive verification results and do not collect your fingerprint or face ID information. If you do not want to use fingerprint verification or face ID verification, you can still make payment by other means.
11. Security management
In order to ensure the security of your payment account and asset and the safe and stable operation of the payment service and other services, to prevent computer virus, Trojan virus or other malicious programs/ websites, and to fulfil our legal obligations such as anti-money laundering, anti-terrorist financing and anti-telecom and online fraud, during your service time,we need to recordyour changeable unique device identifier, basic device information, network information, LBS, application installation list and other log information related to clientware services. The foregoing information includes your sensitive personal information, and if you do not allow us to record the foregoing information, the security verification of the transaction environment may fail or be affected, but you can still complete other operations or use other services provided by us.
12.Permissions Requestedby the Alipay APP
In order to provide you with payment services and protect your account and funds security, we may need to collect information through requesting the following clientware permissions from you to the extent necessary (e.g., collect device information through requesting device/phone status permission, and collect location information through requesting location permission, and upload locations to server for controlling transaction risks, collect pictures or video through requesting camera/album/storage permission for scanning code to pay, collect audio through requesting microphone permission for sending transaction orders, collect contact information through requesting contact permission for choosing counter party, collect clipboard content through requesting clipboard permission for filling the counter party conveniently.
For details of the descriptions and the usage scenarios of the clientware permissions, please refer toNotice on Permissions Requested and Used by the Alipay APPandNotice on Sensor use scenarios by the Alipay APP.
13. Customer services
In order to provide you with better customer services, we will collect your operation records when using the payment services, the information you provided when contacting the customer service team and the information you sent to us when participating in a questionnaire survey. At the same time, to guarantee the quality of service, we may need to record the content of customer service calls, but we will give you necessary notification before the recording to fully protect your right to know and right to choose. The foregoing information is your sensitive personal information, and failure to provide the foregoing information will not affect your use of other services provided by us.
14. Miscellaneous
Please understand that the services we provide to you are constantly being updated and evolving. If you choose to use any other service that is not covered in the foregoing description and we need to collect your information based on such service, we will separately explain the scope and purpose of information collection to you through page prompts, interactive process or by agreements. We will use, store, disclose and protect your information in accordance with this Policy and the corresponding user agreement; if you choose not to provide the foregoing information, you may be unable to use one or some of the services, but this will not affect your use of other services provided by us.
How We Use Cookie, Beacon, Proxy and Other Technologies
In order to make your access experience more comfortable, when you visit the Alipay website or clientware to use the payment services provided by Alipay, we may identify you through small data files, which can help you avoid the repeated steps of entering payment account login information or help determine the security status of your account. These data files may be Cookie, Flash Cookie, or other local storages provided by your browser or associated application (“Cookie”). Please understand that some of our services can only be provided by using Cookie. If permitted by your browser or browser add-on services, you may modify your acceptance level of Cookie or reject website/clientware Cookie. The “Help” section in most browser toolbars will tell you how to prevent your browser from accepting new Cookie, how to set your browser to notify you when you receive a new Cookie, or how to disable Cookie completely. In addition, you can disable or delete Flash Cookie and similar data used by browser add-ons by changing the settings of browser add-ons or by visiting the provider’s web pages. However, this action may affect your safe access to Alipay website and use of Alipay payment services.
Our website may also contain some electronic images ( “Network Beacon”), which can help the website calculate the number of users browsing the web page or access certain Cookie. We will collect information about your web browsing activities through the Network Beacon (such as the page address you visited, the location of the reference page you accessed earlier, your browsing environment, and display settings).
How We Store and Protect Information
1. The personal information collected and generated by us in the People’s Republic of China will also be stored in the country. If some of the services involve cross-border business and we are required to transfer the relevant personal information collected in China to overseas institutions, we will follow the provisions of laws, regulations and the requirements of relevant regulatory authorities, explain to you the purpose of transferring the personal information overseas and the type of personal information involved. Furthermore, we will require such foreign institutions to keep your personal information confidential by means of agreements, on-site inspection and other effective measures. We will retain your personal information only for such periods as may be necessary for the purposes described in this Policy and for such periods as may be required by laws, regulations and regulatory authorities. We will retain your identity information and transaction records according to the time limit stipulated in the Administrative Measures on Anti-Money Laundering and Anti-terrorism by Payment Institutions.
2. In order to protect your information security, we will take all reasonable and necessary measures to protect your information after collecting such information. For example, in a technology development environment, we use only de-identified information for statistical analysis; when providing a research report to external parties, we will de-identify the information contained in the report. We will store the de-identified information separately from the information that can be used to re-identify an individual, so as to ensure that the individual is not re-identified in the subsequent processing of the de-identified information.
3. We undertake to achieve industry-leading security standards in terms of our information security protection. To protect your information security,we are committed to using a variety of security technologies and supporting management systems to minimize the risk of your information being leaked, damaged, misused, or being accessed or disclosed without authorization, or altered.For example, we will use network security sockets layer (SSL) for encrypted transmissions and encrypted storage of information, and will strictly restrict the access to data centers.When transmitting and storing sensitive personal information (including biometric identification information), we will adopt security measures such as encryption, permission control and de-identification/anonymization.
4.We have set up a department responsible for personal information protection, which will assess personal information security impact in respect of the processing of personal information. At the same time, we have established a relevant internal control system and follow the principle of minimum use authorization for staff who may have access to your information. We will conduct systematic monitoring on the staff’s processing of your information, continuously train the staff on relevant laws and regulations, privacy and safety standards and strengthen the promotion of security awareness among the staff, and arrange for all staff to participate in the security examination every year. In addition, our corresponding network/system has passed the national evaluation of network security level protection. We will also hire an external independent third party to evaluate our information security management system every year.
5.We have developed a contingency plan for personal information security incidents, and regularly organized relevant internal personnel to conduct emergency response training and emergency drills, so as to enable them to master their post responsibilities and emergency response strategies and procedures. After a personal information security incident occurs, we will, according to the requirements of laws and regulations, promptly inform you of the following: the basic situation and possible impact of the security incident, the measures we have taken or will take to handle the incident, the suggestions on how you can take the initiative to prevent and reduce risks, the remedial measures for you, etc. We will promptly inform you of relevant information through APP push notification, email/SMS and other means. If it is difficult to inform the personal information subjects one by one, we will take reasonable and effective ways to release an announcement. At the same time, we will also, in accordance with the requirements of the regulatory authorities, take the initiative to report the information about the handling of personal information security incidents. If your legitimate rights and interests are thus damaged, we will assume the corresponding legal liability.
6. Please be sure to properly keep your payment account login name and other identity elements. When you use the payment services, we will identify you by your login name and other identity elements. In case you disclose the foregoing information, you may suffer losses and consequences that may be detrimental to you. If you discover that your payment account login name and/or other identity elements may be or have been leaked, please contact us immediately so that we can take appropriate measures in time to avoid or reduce relevant losses.
7. After your termination of the use of Alipay payment services, we will stop the collection and use of your information, except as otherwise provided by laws, regulations or regulatory authorities. If we cease operations, we will stop collecting your personal information in a timely manner and notify you of the cessation of operations in the form of personal delivery or announcement, and we will delete or anonymize your personal information in our possession.
How We Use Information
1. In order to comply with national laws, regulations and regulatory requirements, provide services to you and improve the quality of services, or ensure the security of your account and asset, we will use your information under the following circumstances:
(1) to achieve the purposes stated in the section “How We Collect Information” in this Policy.
(2) in order to keep you informed of the status of the use of payment services, we will send service reminders to you. You could manage your notices from “Me-Setting-New Notices” or “Notifications” via Alipay APP. In order to protect the security of your account and asset, you cannot unsubscribe the payment messages.
(3) in order to ensure the stability and security of the services, to safeguard your account and your fund, and to perform statutory obligations such as anti-money laundry，we will use your information for authentication, security protection, fraud/ theft/ suspicious transactions monitoring, prevention or prohibition of illegal activities, risks reduction/ prevention of risk spreading, archiving and backup purposes.
(4) to report to relevant departments according to laws, regulations or regulatory requirements.
(5) to invite you to participate in any customer survey related to our services.
(6) we will use desensitization, de-identification/anonymization and other methods to conduct comprehensive statistical analysis and processing of your information, so as to provide you with more accurate, personalized, smooth and convenient services, or help us evaluate, improve or design the services and operating activities.
(7) in accordance with applicable laws, we may anonymize your personal information through technical and other necessary measures and use the processed data for research, statistical analysis and forecasting, to support products or services for business decisions, and to improve our products and services (e.g., for machine learning or model algorithm training), etc. We may use such processed data without separate notice to you and your consent.
(8) we may work with our advertising and content delivery partners to entrust them to process information related to the coverage and effectiveness of their ads, but we will not share information that identifies you personally unless we have your permission to do so, or we will only provide partners with processed information that does not identify you personally to help them increase the effective coverage of their content without identifying you personally.
2. When we want to use the information for other purposes not specified in this Policy, we will seek your consent again in the form of confirmation agreement, document confirmation under specific scenarios and otherwise as required by laws, regulations and national standards.
How We Disclose Information
1. Sharing
(I) Queries by Other Users
In order to ensure the accuracy of the target of fund transfer or collection and avoid asset loss caused by wrong account number input, others can search your email address or mobile number to find you via clientware, and view the desensitized clientware login name corresponding to your account and the corresponding nickname, profile photo, status of real name verification and region, so that they can transfer money to you, collect money from you. You can use “Me→Settings →User Protection Center → Privacy Protection→ Common Privacy Settings” in Alipay APP to disable the function of finding you by searching email address or mobile number.
(II) Dealing with Complaints
When you complain against others or are the subject of complaints by others, in order to protect the legitimate rights and interests of you and others alike and maintain a green shopping environment, we may provide your name, valid ID number, contact information and complaint-related content to the competent consumer rights protection agencies and regulatory authorities so that such complaints can be promptly resolved, except as explicitly prohibited by laws and regulations.
(III) Sharing for Business Purposes
We undertake to keep your information strictly confidential. Except as otherwise provided by laws, regulations and regulatory authorities, we will only share your information with third parties, including our Affiliates, financial institution partners and other partners, under the following circumstances. If it is necessary to share your information with a third party in order to provide services to you,we will evaluate the legality, legitimacy and necessity of the information collection by such third party. We will require such third party to take measures to protect your information and strictly comply with relevant laws, regulations and regulatory requirements. In addition, we will obtain your consent by means of confirmation agreement, document confirmation under specific scenarios, pop-up prompts and so on in accordance with the requirements of laws, regulations and national standards, or confirm that the third party processes your personal information in accordance with related laws and regulations.
(1) in order for you to complete the transaction and realize the purpose of the transaction, we need to provide the transaction number and relevant payment information to your transaction counterparty. Meanwhile, your transaction counterparty can view part of your registration information during the payment process or after successful payment;
(2) certain products or services may be provided by third parties or provided by us jointly with third parties. Therefore, only by sharing your information can we provide the products or services you need;
(3) if you choose to participate in a lottery, contest or similar promotion campaign jointly organized by us and a third party, we may share with such third party the information generated in the process of the campaign and required to complete the campaign, so that the third party can promptly offer prizes or provide services to you. If there are tax declarations to be fulfilled as the rewards obtained, the organizers or its cooperative parties shall get your information (i.e identification information, rewards amount) for the tax declare in accordance with the requirements of tax laws and regulations.In accordance with the requirements of laws and regulations or national standards, we will, on the campaign rules page or by other means, expressly inform you of what information we need to provide to the third party;
(4) with your express prior consent, we will share your information with third parties according to the scope of your authorization, to the extent permitted by laws and regulations and not against public order and good customs.
You can click and readNotice on Alipay's Sharing of Personal Information to Third Partiesto learn more.
2. Transfer
We will not transfer your personal information to any company, organization or individual, except under the following circumstances:
(1) with your express prior consent;
(2) according to laws and regulations or mandatory administrative or judicial requirements;
(3) in the event where asset transfer, acquisition, merger, reorganization or bankruptcy liquidation is involved, if personal information transfer is involved, we will inform you of the situation and require the new company and organization holding your personal information to continue to be bound by this Policy. In case of any change of the purposes or patterns of use of personal information, we will require the company or organization to obtain your express consent once again.
3. Public disclosure
In principle, we will not make public disclosure of your information except that we may desensitize and display winners’ mobile numbers or payment account login names according to therules of specific activitieswhen announcing the list of winners. If public disclosure is absolutely necessary, we will inform you of the purpose of public disclosure, the type of information disclosed and the sensitive information that may be involved, and obtain your express consent.
4. Entrusted processing
In order to improve the efficiency of information processing, reduce the cost of information processing, or improve the accuracy of information processing, we might entrust our competent Affiliates or other professional organizations to process information on our behalf. We will, through written agreement, on-site audit and other means, require the entrusted company to comply with strict confidentiality obligations and take effective confidentiality measures, and prohibit the use of such information for purposes not authorized by you. Upon termination of the entrustment relationship, the entrusted company will no longer keep any personal information, and we undertake to be responsible therefor.
How You Exercise Your Rights on Your Own Information
During your use of payment services, in order to facilitate your access to and management of your information and protect your right to cancel your account, we provide you with corresponding operation settings in the client portal. You can follow the instructions below for your operations.
1. Managing your information
After log-in and necessary identification confirm procedure, you can manage your personal information through performing the following operations in “Account Management” and “Service Hall → Self-service” from the Alipay official website, or via Alipay APP and perform the following operations in “Me → My Account”, “Me → Settings” or “User Protection Center → Privacy Protection”:
(1) view your identity information, transaction information, account information, login device and the information of the bank card linked to your account. To ensure the security of your personal information, your identity card number and bank account will be displayed after desensitization. To protect the security of your information, you can select the page to be unlocked in “Me → Settings → Account and Security → Unlock Settings” in Alipay APP. After completing the settings, you must complete the fingerprint, face ID or gesture unlocking before entering the corresponding page;
(2) if you identify any error in your information, you can modify your information according to the prompts on the page, and you can also contact our customer service number 95188 or request correction through online customer service. For the sake of security and identification or pursuant to laws, regulations and regulatory requirements, you are required to pass verification before modifying your authenticated name or mobile number linked to the account;
(3)you can delete the information of one of your transactions or manage the bank card linked to the account;
(4) You can download personal information via “Me→Settings→User Protection Center→Collected Personal Info→Identity Info”, and you can apply for the issuance of an electronic receipt of fund transfer or transactionlogstatements and download the foregoing materials via the Alipay APP, or and the official website of Alipay.
2. Managing your scope of authorization
If you want to modify the scope of authorization, you may do so through the mobile phone permission settings and “Me →Settings→User Protection Center→ Privacy Protection → Common Privacy Settings” in the Alipay APP, such as: whether to display your real name to friends, whether to enable birthday reminder, etc. You can also manage the collection of information of device related applications/application installation list by making a request to our online customer service or customer service hotline.
3. You can cancel your payment account through the following paths:
Operation path of Alipay official website: open www.alipay.com, log in payment account and go through the path “Service Hall → Self-service → Account Self-service → Account Cancellation”.
Operation path of Alipay APP: open the Alipay APP, log in the payment account, and initiate the cancellation process via “xiaohu”(Chinese Pinyin for “account cancellation”) service.
Within 15 business days after you complete the necessary steps for account cancellation, your corresponding service account will be cancelled and we will delete all your personal information relating to the account in accordance with laws,and if the retention period of relevant personal information as required by laws and regulations has not expired or there are other circumstances in which personal information shall not be deleted according to laws, we will cease the processing activities of such personal information, except for storage and taking necessary security protection measures.
4. If you find that we collect or use your personal information in violation of laws and regulations or the agreement with you, you can contact us through our customer service hotline 95188 or online customer service, requiring the deletion of the corresponding information.
5. Notwithstanding the foregoing, we may not be able to respond to your request under any of the following circumstances in accordance with applicable laws and regulations or national standards:
(1) directly related to national security and defense;
(2) directly related to public safety, public health and major public interests;
(3) directly related to criminal investigation, prosecution, trial and enforcement of judgment;
(4) there is sufficient evidence that you have subjective malice or abuse your rights;
(5) responding to your request will cause serious damage to the legitimate rights and interests of other individuals and organizations.
6. We have set up a privacy protection office equipped with special personnel in charge of personal information protection. If you have any question about this Policy, or would like to file any complaint about or make any comment on the processing of your personal information, please contact us through the following channels:
(1) customer service hotline 95188
(2) online customer service “My Customer Service”
(3) Personal Data Protection Officer email address: privacy-protection-officer@service.alipay.com
(4) mailing address: Privacy Protection Office, A Space, No. 569, Xixi Road, Xihu District, Hangzhou
The customer service department will reply to you promptly together with the privacy protection office. We recommend you to use the aforementioned customer service hotline or online customer service to contact us so that we can respond to your requests in a timely manner.
To protect your information security, we need to verify your identity and credentials. We have established a customer complaint management mechanism, including a follow-up process. Generally speaking, we will finish the processing within three working days after successful verification, and in special cases, we will reply within no more than 15 days or within the time limit provided by laws and regulations. If you are not satisfied with our reply, you can also complain to the competent consumer rights protection department or file a lawsuit before a court of competent jurisdiction.
To ensure that you can exercise your rights regarding the personal information through the Alipay User Protection Center, please make sure to use the latest version of the Alipay APP.
How We Protect Information of Minors
1. We are committed to protecting the information of minors. We expect parents or guardians to direct minors to use our services. We will protect the confidentiality and security of minors’ information according to relevant national laws and regulations.
2. If you are a minor, you are advised to ask your parents or guardians to read this Policy and use our services or provide your information to us with the consent of your parents or guardians. In the case of collecting your information with the consent of a parent or guardian, we will use or publicly disclose the information only when permitted by law, expressly agreed by the parent or guardian or when it is necessary to protect your rights and interests. If your guardian does not allow you to use our services or provide us with information in accordance with this Policy, please terminate your use of our services immediately and promptly inform us so that we can take appropriate measures.
3. If you are the parent or guardian of a minor, when you have any question about the processing of the information of the minor under your custody, please contact us through the contact information above.
4. Special note: Children under the age of 14 and their guardians should read our Personal Information Protection Rulesfor Children, which is especially issued for children, below carefully before registering Alipay accounts for children. Children should make sure that their guardians have given their consent to the Personal Information Protection Rulesfor Childrenbefore starting use our services.For more information, please refer to Personal Information Protection Rules for Children.
Application and Update of this Policy
1. The definition of “payment account” /”payment services” could be referred to theAlipay payment service agreement, and the “clientware” could be referred toClientware licensing and service agreement.
2. We will update this Policy as and when any of the following material changes occurs:
(1) there is a change in our basic situation, such as a change of ownership arising from a merger, acquisition or restructuring;
(2) there is a change in the scope, purposes or rules of collecting, storing and using personal information;
(3) there is a change in the object, scope or purposes of disclosure of personal information;
(4) there is a change in the way you access and manage personal information;
(5) there is a change in data security capability or information security risks;
(6) there is a change in the channels and mechanisms for user inquiries and complaints, as well as external dispute resolution agencies and contact information;
(7) other changes that may have a material impact on your entitlement to personal information.
3. Due to the large number of payment users, in case of any update of this Policy, we will notify you by clientware push notification, pop-up prompt, email/SMS or announcement on the official website of Alipay. The updates will become effective on the date specified in the aforementioned notice. In order for you to receive notification in a timely manner, it is recommended that you promptly notify us when your contact information is updated. If you do not accept the updated Policy, you are entitled to stop using the relevant services.
4. You can view this Policy on the homepage of the official website of Alipay, or through the path “Me → Settings” in the Alipay APP. We encourage you to check our privacy policy every time you use Alipay payment service.
5．For the avoidance of doubts, this policy has a former name of Alipay Privacy Policy, unless otherwise specified, the Alipay privacy Policy quoted in other documents means the Alipay Payment Privacy Policy
Definitions of Key Terms in this Policy
1. Definitions of key concepts:
(1) Changeable unique device identifier: the unique device identifier that can be reset, changed or turned off tracking by users, such as Android ID, OAID, GAID,SSID ,BSSID and CAID.
(2) Basic device information: information related to the device model, usually used for functional adaptation, stability and other functions, such as system settings, system attributes, device model, device brand and operating system.
(3) Network information: such as IP address, network type, carrier information, Wi-Fi/WLAN status, Wi-Fi/WLAN parameters and Wi-Fi/WLAN list.
2.“Our affiliated companies” in this Policy means: (1) Ant Group Co., Ltd.; (2) companies directly or indirectly controlled by Ant Group Co., Ltd.; (3) companies that Ant Group Co., Ltd. directly or indirectly invests in or has business cooperation relationship with, and constitute affiliated parties of Ant Group Co., Ltd.
The affiliated companies include: AntGroup Co., Ltd., Alipay (Hangzhou) Digital Service Technology Co., Ltd., Zhima Credit Management Co., Ltd., Jifenbao Nanjing Enterprise Management Co., Ltd., Ant Zhixin (Hangzhou) Information Technology Co., Ltd., Ant Xinghe (Chongqing) Information Technology Co., Ltd., Ant Yikang (Guangzhou) Information Technology Co., Ltd., Hangzhou Huijuyi Information Technology Co., Ltd., Hangzhou Zhisheng Information Technology Co., Ltd., Hangzhou Ant Shangshu Information Technology Co., Ltd., Ant Financial (Hangzhou) Network Technology Co., Ltd., Ant Yuntong (Shanghai) Information Technology Co., Ltd., Ant (Hangzhou) Fund Sales Co., Ltd., Ant Wealth (Shanghai) Technology Services Co., Shanghai Zhiyi Financial Consulting Co., Ltd. ,Ltd., Ant Insurance Agency Co., Ltd., Ant Shengxin (Shanghai) Information Technology Co., Ltd., Qiantang Credit Co.,Ltd ,Zhixin (Shanghai) Network Technology Co., Ltd., Hangzhou Huanyao Technology Co., Ltd., Ant Blockchain Technology (Shanghai) Co., Ltd, Ant Double chain Technology (Shanghai) Co., Ltd., Ant Chain (Shanghai) Digital Technology Co., Ltd., Changsha Digital Tianma Information Technology Co., Ltd., Zhejiang E-Commerce Bank Co., Ltd., Chongqing Ant Consumer Finance Co., Ltd., etc.
The definition of “affiliated party” in the preceding sentence is consistent with that provided inAccounting Standards for Enterprises No. 36 – Disclosure of Affiliated Parties.
3. The “identity elements” in this Policy refer to the information elements we use to identify you identity, including but not limited to your user identification, payment account, password, digital certificate, SMS verification code, USB key, phone number, mobile number, ID number and biometric identification information (such as face recognition information, voiceprint information), etc.
4. “Sensitive personal information” in this Policy refers to personal information that once leaked or illegally used, may easily lead to the infringement of the personal dignity of a natural person or may endanger his/her personal safety or property security, including information such as biometric identification information, religious belief, specific identity, medical health status, financial accounts, and the person's whereabouts, as well as the personal information of a minor under the age of 14.
The Chinese version of this Policy shall prevail if there is any inconsistency between the English version and the Chinese version of this Policy.