隐私政策
发布日期：2021年12月6日
生效日期：2021年12月6日
引言
SHOPASTRO产品与/或服务平台（以下简称“SHOPASTRO”或“本平台”）是由星盘起航（杭州）网络技术有限公司（注册地址：【 浙江省杭州市滨江区施强广场1号楼1902室 】）及其关联公司（以下统称“我们”）拥有并经营，并通过SHOPASTRO网站 www.shopastro.com 向卖家用户（以下简称“用户”“您”或“卖家”）提供网店建站、流量、支付和物流完整解决方案的SaaS平台。
您在使用我们的平台时，我们可能会收集和使用您（包括员工和/或代表您操作业务的人员）的相关信息以及受您委托处理您终端用户（以下合称“个人信息主体”）的个人信息。我们深知个人信息对个人信息主体的重要性，我们根据适用的法律法规，制订《SHOPASTRO隐私政策》（以下简称“本政策”），并致力于保护您和/或您终端用户的个人信息安全。
我们希望通过本政策向个人信息主体说明SHOPASTRO在提供产品与/或服务过程中，如何收集、使用、存储、共享、转让、公开批露个人信息的目的、方式、范围和信息安全保护措施，以及使个人信息主体实现管理其个人信息的权利和方法。请您结合《SHOPASTRO用户协议》 阅读本政策。以下是我们的特别提示，请您重点关注：
- SHOPASTRO主要为企业客户提供服务，故本政策仅适用于SHOPASTRO直接处理企业客户的员工以及授权操作人员的个人信息。此外，如果我们的企业客户在他们的产品中嵌入了我们的服务（如我们的建站服务等），受企业客户委托，在其向终端用户提供产品过程中需要处理该终端用户个人信息的，我们仅作为个人信息处理者，按照与企业客户达成的协议，处理其终端用户的个人信息。企业客户作为个人信息控制者向其终端用户承担所有责任，并负有义务向终端用户披露如何处理、保护终端用户的个人信息。您应向您的终端用户展示隐私政策的具体内容，并向其提供咨询和权利请求的响应。
- 所有重点内容，我们采用“加粗”或“加粗并加下划线”的书写方式进行提示。对个人敏感信息，我们用“加粗斜体”的书写方式进行特别提醒，希望您在阅读时特别关注。在您向我们提供您的任何个人敏感信息前，您已慎重考虑并在此确认该等提供是适当的，您在此同意您的个人敏感信息可按照本政策所述的目的和方式进行处理。
- SHOPASTRO仅面向年满十八（含）周岁以上的用户提供服务。针对18周岁以下未成年人，我们不采集也不会向其提供任何本平台产品和/或服务。在使用我们的产品和/或服务前，请确认使用者已经符合年龄要求，并仔细阅读、了解了本政策中的详细信息。我们不会在明知的情况下收集未满十八周岁未成年人的个人信息。如果您发现我们无意收集了未成年人的个人信息，请您立即通知我们，我们会尽快设法删除相关数据。
- 我们为您提供的个人信息权利实现方式包括但不限于访问或更正、删除您的个人信息、注销账号、撤回同意和及时得到响应等，以确保您实现对您个人信息的控制权。
- 在使用本平台前，请您务必仔细阅读并透彻理解本政策，在确认充分理解并同意后使用本平台相关产品与/或服务。我们建议您使用本平台产品和/或服务时，对您提供的相关个人信息主体的信息已经得到合法授权并做出了明智的决策。如果您不同意本政策任何内容，您应立即停止使用SHOPASTRO。
- 为了便于相关个人信息主体阅读及理解，我们用尽可能简单易懂的语句进行表述，并对下述关键术语进行了定义，请参见本政策“附录：关键词定义”。
本政策将帮助您了解以下内容：
一、我们如何收集和使用个人信息主体的个人信息
二、我们如何使用Cookie及其他同类追踪技术
三、我们如何委托处理、共享、转让、公开披露个人信息主体的信息
四、如何使您拥有管理个人信息的权力
五、如何保存和保护个人信息
六、如何保护未成年人的个人信息
七、如何更新本政策
八、管辖与法律适用
九、如何联系我们
十、关键词定义
一、如何收集和使用个人信息主体的个人信息
我们根据合法、正当、必要的原则，为实现本政策下述的各项功能，收集和使用您在使用本平台过程中主动提供的、因您使用本平台而产生的以及我们从第三方获取的相关个人信息主体的个人信息。无论通过上述何种方式收集和使用相关个人信息主体的个人信息，我们只会在征得您授权的情况下进行。请您确保您已获得您终端用户的同意，除非在某些情况下，基于法律义务或者可能需要保护您或其他人的重要利益向相关个人信息主体收集个人信息。
请您理解，由于商业策略的变化，本平台产品和/或服务的功能也可能进行更迭和发展。如果我们要将相关个人信息主体的个人信息用于本政策未载明的其它用途，或基于其他特定目的而收集、使用相关个人信息主体的个人信息，我们将以合理的方式告知您，并在收集、使用前再次征得您的同意。
（一）向您提供产品与/或服务过程中，您主动提供的个人信息
1.注册/登录账号
为使用平台您首先需要注册一个SHOPASTRO账号以成为我们的用户。基于此，您需要向我们提供注册账号所需的电子邮箱、中国大陆地区的手机号、登录密码和我们发送给您的验证码来验证您的身份是否有效。
完成注册后，您可以选择通过手机号码+验证码或电子邮箱+登录密码的方式进行登录，后以注册用户身份浏览和使用SHOPASTRO。
2.创建试用店铺
在创建试用店铺过程中，如果您还希望其他运营人员使用邮箱登录店铺进行店铺管理的，需要提供店铺运营人员的电子邮箱。请您确保在提供其他人员的个人信息时，已获得其本人同意。
3.客户管理
创建店铺后，您可以导入已注册/下单客户信息，以便进行店铺运营和客户管理。请您确保在您所导入的其他人员个人信息，在收集时已获得以该方式使用其个人信息的同意。
4.付费功能
当您使用SHOPASTRO的付费功能时，我们会收集您的付费记录，以便您在平台中可以查询已发生的交易记录，同时尽最大程度保护您的财产、虚拟财产安全。上述信息属于敏感个人信息，请您不要随意向第三方提供。收集上述信息为实现相关功能所必须，否则将无法完成交易。
5.上传/发布内容
我们会收集您通过本平台自行上传或发布的内容信息，包括文字、共享照片、录音、录像及该类信息的日期、时间和地点。当您使用上述功能时，我们会向您请求授权使用您终端设备中的摄像头、相册、麦克风和位置权限。您可以自行选择是否向我们提供该等授权，如果拒绝，将无法使用相关功能，但不影响您使用 SHOPASTRO的其他功能。
6.广告代投
为了帮助您更好地提升店铺流量，实现客户增长，我们会提供广告代投服务，以您的名义在相关广告投放平台代为投放您的店铺/商品/服务的广告。在该功能下，我们可能会向广告投放平台传送您的相关信息和/或使用您提供的店铺页面内的图片、文字、视频等素材，请您确保相关素材并未包含您或用户的个人信息。如包含相关个人信息，请您确保已获得个人信息主体的同意。如您无法确保素材中是否含有个人信息或者无法获取授权的，请您不要使用此项功能，但不影响您使用 SHOPASTRO的其他功能。
7.商品推荐
当您需要在商品详情页推荐商品时，为了达到更为精准的推荐效果，我们会收集您的终端用户浏览数据和行为数据。请您在选择该服务时，确保已经向终端用户告知相关信息收集及使用情况并获取其同意。如果您无法确保您的最终用户已经同意被采集其上述信息，请您不要使用此项功能，但不影响您使用 SHOPASTRO的其他功能。
8.添加色板
当您使用添加色板功能（包括色板管理、色板创建/编辑、自定义商品色板、色斑外观配置）时，我们会收集使用您的店铺数据（包括卖家ID和店铺ID），以将您所添加色板的操作对应到您的店铺。如果拒绝提供此类信息，请您不要使用此项功能，但不影响您使用 SHOPASTRO的其他功能。
9.添加购物车
当您的最终用户使用“添加购物车”功能时，为了使其操作对应到您的店铺，我们会收集并使用您的店铺ID，以此来完成您与您最终用户的交易。如您拒绝提供此类信息，请您不要使用此项功能。我们提示您，您建站的效果会由此受到影响，但不影响您使用 SHOPASTRO的其他功能。
10.信用卡支付
当您或您的最终用户使用信用卡、储蓄卡进行付款时，我们会收集并使用您或您的最终用户的卡相关信息,以此来完成您或您最终用户的付款动作。上述信息属于敏感个人信息，请您不要随意向第三方提供。收集上述信息为实现相关功能所必须，否则将无法完成交易。如您拒绝提供此类信息，请您不要使用此项功能。我们提示您，您建站的效果会由此受到影响，但不影响您使用 SHOPASTRO的其他功能。
11.客服
为了改进服务质量，在与我们客服团队联系时，我们可能会要求您提供电话、微信账号和姓氏信息，以便为您进行客服交流和服务。
（二）向您提供平台服务过程中我们主动收集的个人信息
在符合法律法规的前提下，为了更好地为您提供服务以及保障账号的安全，当您在SHOPASTRO进行浏览和搜索时，我们会收集和使用您在使用我们的产品与/或服务过程中产生的设备信息和日志信息，具体如下：
设备信息：我们会收集您的个人常用设备信息，包括IP地址、设备型号、设备识别码、操作系统、分辨率、电信运营商。
日志信息：我们会自动收集您使用本平台的详细信息并作为网络日志进行保存，包括网络诊断、卡顿信息、点击事件、关卡成功或失败情况、浏览记录、点击记录和潜在风险的URL，并根据相关法律要求进行保存。
（三）终端用户个人信息的授权与同意
您十分清楚，为了使用平台之目的，您需要我们收集、存储、加工来自于您产品终端用户的个人信息。因此，您必须承诺：
1）您已经获得终端用户充分必要的授权、同意和许可，允许使用我们履行服务所需的目的直接收集和使用其个人信息；
2）您已经获得终端用户充分必要的授权、同意和许可，允许我们和合作方对已收集的终端用户个人信息进行去标识化的分析与聚合性的处理；
3）您已经遵守并将持续遵守适用的法律、法规和监管要求，包括但不限于制定和公布有关个人信息保护和隐私保护的相关政策；
4）您已向终端用户提供易于操作的选择机制，告知终端用户如何以及何时可以行使选择权，并说明行使选择权后如何以及何时可以修改或撤回该选择，使得用户可以选择同意或不同意为商业目的而收集和使用其个人信息。
5）您已经向终端用户告知如何向您行使终端用户权利（如何访问、更正其个人信息、行使删除权、更改其授权同意的范围等操作）。您的终端用户不会因为我们按照本政策处理其个人信息而对我们产生任何形式的诉求、诉请、投诉等。如向我们提出，您将负责为终端用户进行解决。
如因您违反上述承诺导致您的终端用户对我们主张任何形式的索赔或权利要求，或导致我们被卷入到法律或行政程序，您将负责全面解决，并赔偿我们因此可能遭受的任何形式的损失。
（四）征得授权同意的例外
根据法律法规，以下情形中收集和使用的个人信息无需征得个人信息主体的同意：
- 与履行法律法规规定的义务相关的；
- 与国家安全、国防安全直接相关的；
- 与公共安全、公共卫生、重大公共利益直接相关的；
- 与刑事侦查、起诉、审判和判决执行等直接相关的；
- 出于维护个人信息主体或其他个人的生命、财产等重大合法权益相关但又很难得到本人授权同意的；
- 所涉及的个人信息是个人信息主体自行向社会公众公开的；
- 根据个人信息主体要求签订和履行合同所必需的；
- 从合法公开披露的信息中收集个人信息的，如通过合法的新闻报道、政府信息公开等渠道；
- 维护提供我们平台的安全稳定运行所必需的，例如发现、处置我们平台产品与/或服务的故障；
- 法律法规规定的其他情形。
二、如何使用Cookie及其他同类追踪技术
（一）什么是Cookie
Cookie是个人信息主体登录网站或浏览网络内容时，网站服务器存放在个人信息主体的电脑、移动电话或其他智能终端设备内的小型文件，通常包含标识符、站点名称以及一些号码和字符。当个人信息主体再次访问相应网站时，网站就可通过 Cookie 识别个人信息主体的浏览器。Cookie可能会存储用户偏好及其他信息。
（二）如何使用Cookie
当个人信息主体使用我们网站时，我们可能通过Cookies或同类技术收集个人信息主体的设备型号、操作系统、设备标识符、登录IP地址信息，以及缓存个人信息主体的浏览信息、点击信息，以查看个人信息主体的网络环境。通过Cookies，我们可以在个人信息主体访问网站时识别个人信息主体的身份，并不断优化网站的用户友好程度，并根据个人信息主体的需要对网站做出调整。个人信息主体也可以更改浏览器的设置，使浏览器不接受我们网站的Cookies，但这样可能会影响个人信息主体对网站的部分功能的使用。
在SHOPASTRO网站，借助于Cookie和其他类似技术，我们可以在个人信息主体每次使用我们产品与/或服务时识别个人信息主体是否属于我们的用户或者终端用户，而不必在每个页面上重新登录和验证。
（三）如何管理Cookie
个人信息主体可根据自己的偏好管理或删除某些类别的追踪技术。很多网络浏览器均设有“禁止追踪”（Do Not Track）功能，该功能可向网站发布“禁止追踪”的请求。
除了我们提供的控件之外，个人信息主体还可以选择在Internet浏览器中启用或禁用Cookie。大多数互联网浏览器还允许个人信息主体选择是要禁用所有Cookie还是仅禁用第三方Cookie。默认情况下，大多数互联网浏览器都接受Cookie，但这可以更改。有关详细信息，请参阅Internet浏览器中的帮助菜单或设备随附的文档。
以下链接提供了有关如何在所有主流浏览器中控制Cookie的说明：
- Google Chrome：https://support.google.com/chrome/answer/95647?hl=en
- IE：https://support.microsoft.com/en-us/help/260971/description-of-cookies
- Safari（桌面版）：https://support.apple.com/kb/PH5042?locale=en_US
- Safari（移动版）：https://support.apple.com/en-us/HT201265
- 火狐浏览器：https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer?redirectlocale=en-US&redirectslug=Cookies
- Opera：https://www.opera.com/zh-cn/help
如个人信息主体使用其他浏览器，请参阅浏览器制造商提供的文档。
在我们网站，个人信息主体可以通过清除缓存的方式删除已有的追踪技术。
当个人信息主体在非登录状态下浏览页面时，为向个人信息主体提供相应服务，我们会收集实现浏览功能所必需收集 Cookie 信息，但会在一个月内删除这些Cookie信息。
请个人信息主体知悉，倘若个人信息主体拒绝使用或清除已有的追踪技术，则需要在每一次访问时亲自更改用户设置，并且，我们可能无法向个人信息主体提供更加优质的使用体验，部分服务亦可能会无法正常运作。
三、我们如何委托处理、共享、转让、公开披露个人信息主体的信息
（一）委托处理
为了向您提供更完善、更优质的产品和服务，某些功能可能由我们的技术服务合作方提供，我们可能会委托合作方 （包括技术服务提供方）处理个人信息主体的某些个人信息。（例如您在使用SHOPASTRO一些付费或自动扣款功能时，或您的终端用户通过您在SHOPASTRO建立的网点进行付款操作时，我们可能会委托第三方支付公司处理您的某些个人信息。）对我们委托处理个人信息的公司、组织和个人，我们会与其签署严格的保密协定，明确数据处理事项、处理期限、处理性质、处理目的以及双方责任等，要求合作方仅按照我们的要求、本政策的规定以及其他任何相关的保密和安全措施来处理个人信息。如果您拒绝我们的供应商在提供服务时收集为提供服务所必需的个人信息，将可能导致您或您的终端用户在使用我们产品与/或服务的过程中无法享受该供应商提供的服务。例如我们会聘请服务提供商来协助我们完成实名认证。
（二）共享
除非存在以下一种或多种情形，否则我们不会与任何第三方公司、组织或个人共享个人信息：
- 基于个人信息主体自行提出的要求、或事先获得个人信息主体的明示授权或同意；
- 与我们履行法律法规规定的义务相关的；
- 与国家安全、国防安全直接相关的；
- 与公共安全、公共卫生、重大公共利益直接相关的；
- 与刑事侦查、起诉、审判和判决执行等直接相关的
- 出于维护个人信息主体或其他个人的生命、财产等重大合法权益但又很难得到本人同意的；
- 个人信息主体自行向社会公众公开的您的个人信息；
- 从合法公开披露的信息中收集个人信息的，如通过合法的新闻报道、政府信息公开等渠道。
- 与我们关联公司及合作伙伴进行必要信息的共享：我们仅会出于合法、正当、必要、特定、明确的目的共享个人信息，并且只会共享为您或您的终端用户提供服务所必要的个人信息。我们不会共享可以识别个人信息主体身份的个人信息，除非法律法规另有规定。与委托处理下的合作方不同，该等共享的合作方为数据控制者，其将以自己的名义获得个人信息主体的同意后处理个人信息。合作方可能有其独立的隐私政策和用户服务协议，我们建议您阅读并遵守共享合作方的用户协议及隐私政策。以下为我们与第三方共享信息的详细情况：
- A.与关联公司间共享：为便于我们基于SHOPASTRO账号向您提供平台产品和/或服务，推荐您可能感兴趣的信息，识别用户账号异常，保护SHOPASTRO关联公司或其他用户或公众的人身财产安全免遭侵害，经过您和您终端用户的同意，您和您终端用户的个人信息可能会与我们的关联公司共享。我们只会共享必要的个人信息，且受本政策中所声明目的的约束，如果我们共享了个人敏感信息或关联公司改变个人信息的使用及处理目的，将再次征求您和您的终端用户的授权同意。
- 与授权合作伙伴共享：
（1）广告类授权合作伙伴。除非得到您的授权，否则我们不会将您终端用户的个人信息向提供广告服务的合作伙伴共享。我们会向这些合作伙伴提供有关其广告覆盖面和有效性的信息，但不会提供您终端用户的个人身份信息，或者我们将这些信息进行汇总，以便它不会识别到终端用户个人。这类合作伙伴可能将上述信息与他们合法获取的其他数据相结合，以进行广告或决策建议。
（2）统计分析服务类的授权合作伙伴。除非得到您的授权，否则我们不会将您终端用户的个人信息与提供统计分析服务的合作伙伴共享。我们会向这些合作伙伴提供汇总后的信息，以便它不会识别到终端用户个人。这类合作伙伴可能将上述信息与他们合法获取的其他数据相结合，以进行统计分析。
（3）支付合作类的授权合作伙伴。在您为使用SHOPASTRO的某些付费或订阅功能而需使用信用卡、借记卡、或届时其他平台所支持的在线支付方式进行扣款时，扣款服务将通过合作的银行或第三方支付公司等进行提供。我们会向这些合作伙伴提供为实现扣款功能所提供的必要信息，不会提供额外个人信息。
（4）其他供应商、服务提供商和其他合作伙伴。我们将信息发送给支持我们业务的其他供应商、服务提供商和其他合作伙伴，这些支持包括提供技术基础设施服务、提供客户服务、支付便利或进行学术研究和调查。我们会与其约定严格的数据保护措施，令其按照我们的说明、本政策以及其他任何相关的保密和安全措施来处理个人信息。
提示您注意，本平台可能包含第三方提供的功能或第三方提供的网站和服务的链接。本政策所描述的规定与程序不适用于第三方网站。您向第三方网站或服务提供的任何信息都将直接提供给这些服务的运营商，即使通过本平台进行访问，也须遵守该运营商适用的隐私政策和用户协议（如有）。对于第三方网站或服务的内容、个人信息和安全措施和政策，我们概不负责。我们建议您在向第三方提供信息之前先了解其隐私政策和用户协议。
（三）转让
原则上我们不会将个人信息控制权向其他公司、组织或个人进行转让，但以下情况除外：
- 基于个人信息主体自行提出的要求、或事先获得您的明示授权或同意；
- 与我们履行法律法规规定的义务相关的；
- 与国家安全、国防安全直接相关的；
- 与公共安全、公共卫生、重大公共利益直接相关的；
- 与刑事侦查、起诉、审判和判决执行等直接相关的；
- 出于维护个人信息主体或其他个人的生命、财产等重大合法权益但又很难得到本人授权同意的；
- 个人信息主体自行向社会公众公开的您个人信息；
- 从合法公开披露的信息中收集个人信息的，如通过合法的新闻报道、政府信息公开等渠道；
- 发生公司收购、兼并、重组、破产，运营主体变更时的转让。
请您知悉：如具备上述事由确需转让，我们将在转让前向您告知转让信息的目的、类型、信息受让方（如涉及敏感信息，我们还将告知涉及的敏感信息的内容），并在征得您同意后再转让，但法律法规另有规定的除外。变更后的运营主体将继续履行个人信息控制者的责任和义务；如公司发生破产或者停运且无承接方的，我们将对您的个人信息做删除或者匿名化处理。
（四）公开披露
原则上我们不会向社会或不特定人群发布您的个人信息，但基于与您的约定或根据法律法规应当披露的除外。
四、如何使您拥有管理个人信息的权利
（一）访问和更正个人信息
您有权随时登录并访问您SHOPASTRO账号，查看您的个人信息。如您发现我们收集、存储、使用、披露的您的个人信息有错误或不完整的，或者在法律法规规定的其他情况下，您可以通过登录 www.shopastro.com ，并进入“个人中心”后进行更正或补充完善您的个人信息。
如您希望访问或更正您的其他个人信息，或在行使上述权利过程中遇到困难，您可以通过本政策第九条所述的方式联系我们，我们将在核实您的身份后及时响应您的请求，但法律法规另有规定的或本政策另有约定的除外。
（二）删除个人信息
在以下情形中，您可以通过本政策第九条所述的方式联系客服，向我们提出删除您个人信息的请求，但已做数据匿名化处理或法律法规另有规定的除外：
- 我们违反法律、行政法规的规定或与您的约定，收集、使用个人信息的；
- 我们违反法律法规规定或违反与您的约定向第三方共享、转让个人信息，我们将立即停止共享、转让的行为，并通知第三方及时删除；
- 我们违反法律法规规定或违反与您的约定向第三方共享、转让个人信息，我们将立即停止共享、转让的行为，并通知第三方及时删除；
- 您通过注销等方式终止使用本平台产品与/或服务的；
- 法律法规等规定的其他情形。
在删除相关信息前，我们可能会要求您进行身份验证，以保障账户安全。当我们决定响应您的删除请求时，我们将尽快从SHOPASTRO产品与/或服务器中删除您的信息。但出于监管机关打击犯罪、维护国家安全的要求，我们会在法律允许的期限内对您的通讯信息和交易记录进行保存，但我们不会进行任何使用行为。请您知悉，我们可能不会将您需要删除的信息立即从备份系统中删除，但会在备份系统更新时删除。
（三）注销账号
除非法律法规另有规定或本政策另有约定，您可以通过本政策第九条所述的方式联系客服来注销您的SHOPASTRO账号。
请您理解并知悉，注销您的本平台账号将导致您永久失去对账户和账户中数据的访问权。我们将在验证您的身份并与您协商处理完您账户中的资产后，为您提供账户注销服务。为了向您提供更加便捷的注销方式，我们后续会不断优化我们的产品，并且通过页面公告向您告知。在注销账号后，除非根据法律规规定需要留存个人信息的，我们将及时删除您的个人信息或对其作匿名化处理。
您注销账号的行为是不可逆的，一旦您的账号被注销，我们不再收集您的个人信息，也将不再为您提供我们的产品和/或服务，因此我们建议您谨慎选择注销账号。
（四）约束信息系统自动决策
在本平台某些业务功能中，我们可能依据信息系统、算法等在内的非人工自动决策机制作出决定。如果这些决定显著影响您的合法权益，您有权要求我们作出解释，您可以通过本政策第九条提供的方式联系我们。
（五）响应请求
为实现本条所述的用户权利，或您存在任何疑问、投诉、意见或建议的，您可以通过本政策第九条提供的联系方式与我们联系。为确保安全，我们可能会先要求验证您用户的身份，然后再处理您的请求。对于您的请求，原则上将在收到您请求后的15 个工作日内验证您的用户身份并做出答复。
对于您合理的请求，我们原则上不收取费用。对于一定时期内多次重复的请求，我们将视情况收取一定成本费用；对于需要过多技术手段（例如，需要开发新系统或从根本上改变现行惯例）、或存在其他显著困难的请求，我们将为您提供替代方法。
存在以下情形时，我们将拒绝您提出的请求：
- 履行法律法规规定的义务相关的；
- 与国家安全、国防安全直接相关的；
- 与公共安全、公共卫生、重大公共利益直接相关的；
- 与刑事侦查、起诉、审判和执行判决等直接相关的；
- 有充分证据表明用户存在主观恶意或滥用权利的；
- 出于维护用户或其他个人的生命、财产等重大合法权益但又很难 得到本人授权同意的；
- 响应用户的请求将导致用户或其他个人、组织的合法权益受到严重损害的；
- 涉及商业秘密的。
请知悉，针对使用本平台产品和/或服务的终端用户（而不是本平台的直接客户）提出的请求，我们建议您直接响应。除非我们接到您的请求予以协助，否则我们会将收到的您的终端用户的请求转发您或者请终端用户直接找您寻求帮助。
五、我们如何保存和保护个人信息
（一）个人信息的保存
１. 保存期限
您在使用SHOPASTRO产品和／或服务期间，我们将持续为您保存您和您终端用户的个人信息。我们承诺，除非法律法规另有要求，我们对您和您终端用户个人信息的存储时间限于实现您和您终端用户授权使用目的所必需的最短时间，法律法规另有规定或者用户另行授权同意的除外。
如果您注销账号、主动删除上述信息、我们因经营不善或其他原因出现停止运营的情况，我们将依据法律法规规定停止对您个人信息进行收集，同时删除已收集到的个人信息或对其做匿名化处理。
２. 保存地域
原则上我们会将在中国境内运营所收集和产生的个人信息存储在中国境内，不会进行跨境传输。请您知悉，为协助第三方服务商完成其服务，我们可能会将您的个人信息传输至位于境外的第三方服务商。在此情况下，我们会确保您的个人信息得到在中国境内足够同等的保护，并且在进行跨境数据传输前实施去标识化等措施。
（二）个人信息的保护
我们十分重视您的个人信息安全，为此我们采用了符合行业标准的安全技术措施及配套的组织架构和管理体系等多层面保护措施，以最大程度防止您的个人信息被泄露、毁损、误用、未授权访问、未授权披露或更改，具体包括：
- 1. 数据安全技术措施
为保障信息安全，我们努力采取各种合理的安全技术措施来保护个人信息，使您和您终端用户的个人信息不会被泄漏、毁损或者丢失。我们采用了如SSL等加密传输技术，保护数据在其传输过程中的安全，并使用妥善的保护机制以防止数据遭到恶意攻击。我们对个人信息采取加密存储和数据权限控制机制，防止您和您终端用户的个人信息遭遇未授权的访问、公开披露、使用、修改、人为或意外的损坏或丢失等。
２. 数据安全组织和管理措施
根据有关法规要求，我们任命了个人信息保护负责人和个人信息保护工作机构。我们还建立了相关的内控管理流程，以最小授权为原则，对可能接触到您和您终端用户个人信息的工作人员，严格设定信息访问权限，控制个人信息的知悉范围。
我们建立了数据安全使用的内部规范制，对可能接触到您和您终端用户的信息的员工或外包人员也采取了严格管理，包括但不限于根据岗位的不同采取不同的权限控制，与他们签署保密协议，监控他们的操作情况等措施。
我们组织员工参加安全与隐私保护相关培训并要求其完成规定的考核，加强员工对于保护个人信息重要性的认知。
３. 合作协议条款保证
在我们从第三方间接收集您的个人信息前，我们会明确以书面形式（如合作协议、承诺书）要求该第三方在已经取得您明示同意后收集以及处理您和您终端用户的个人信息，并要求第三方对个人信息来源的合法性和合规性以书面协议的形式作出承诺，如第三方有违反行为的，我们会明确要求对方承担相应的法律责任。
在我们向合作伙伴共享您和/或您终端用户的个人信息前，我们会严格要求合作伙伴承担信息保护义务与责任。为此，我们会在合作之前要求生态伙伴签署数据处理协议或在双方签署的合作协议中列明有关数据保护的条款。协议严格约定合作伙伴对用户信息的保密义务，包括信息的保管、使用和流转等均应满足我们的管控要求，接受我们的审核、监督和审计，一旦有任何违反，我们会要求对方承担相应的法律责任。
４. 安全事件处理
如不幸发生了个人信息安全事件，我们将立即启动应急预案，采取补救措施，记录事件内容，按照适用法律法规的有关规定及时上报。若可能会给您和/或您终端用户的合法权益造成严重损害的，如造成个人敏感信息的泄露，我们将向您告知该安全事件的基本情况和其可能的影响、我们已采取或将要采取的处置措施、您可选择的防范和降低风险的建议、我们针对您和/或您终端用户提供的补救措施以及个人信息保护负责人和个人信息保护工作机构的联系方式等。我们将及时将以上事件相关情况以邮件、信函、电话或推送通知等方式告知您，难以逐一告知时，我们会采取合理、有效的方式发布警示公告。
请您知悉并理解，互联网并非绝对安全的环境，我们强烈建议您通过安全方式、使用复杂密码，协助我们保证您的账号安全。如您发现自己的个人信息泄密，尤其是您的账号或密码发生泄露，请您立即根据本政策第九条提供的联系方式联系我们，以便我们采取相应措施来保护您的信息安全。
六、如何保护未成年人的个人信息
本平台仅面向十八周岁（含）以上用户提供产品和/或服务。我们不会在知情的情况下收集未成年人的个人信息。如果我们不小心收集到了未成年人的信息，我们在知情后会尽快删除。如果您认为我们可能不当地持有关于未成年人的信息，请依照本政策第九条所述方式联系我们。
七、如何更新本政策
我们可能适时修订本政策的条款，该修订构成本政策的一部分。如该等修订造成您在本政策下权利的实质减少，我们将在修订生效前通过在主页上显着位置提示或向您发送电子邮件或以其他方式通知您。在该种情况下，如果您不同意本政策，或对本政策修改、更新的内容有异议，您可以选择停止使用我们的产品与/或服务或者注销您的账号。但请您知悉，您账号注销之前、停止使用本服务之前的行为和活动仍受本政策的约束。
若涉及重大、实质性变更，我们会依据具体情况，以显著的方式通知您。
重大、实质性变更的情形包括但不限于以下情形：
- 我们的服务模式发生重大变化。如处理个人信息的目的、处理的个人信息类型、个人信息的使用方式等；
- 您参与个人信息处理方面的权利及其行使方式发生重大变化；
- 我们在所有权结构、组织架构等方面发生重大变化。如业务调整、破产并购等引起的所有者变更等；
- 个人信息共享、转让或公开披露的主要对象发生变化；
- 我们负责处理个人信息安全的责任部门、联络方式及投诉渠道发生变化时；
- 个人信息安全影响评估报告表明存在高风险时。
八、管辖与法律适用
本隐私政策的成立、生效、履行、解释及纠纷解决，适用中国法律，并明确排除其冲突法规范的适用。
若您和我们发生任何纠纷或争议，首先应友好协商解决；协商不成的，您同意将纠纷或争议提交杭州市互联网法院通过诉讼解决。
九、如何联系我们
如对本政策内容有任何疑问、意见或建议，您可以通过以下方式与我们联系：1）个人信息保护专职部门邮箱：contact@shopastro.com ；或2）将信件寄至：常用办公地址： 浙江省杭州市滨江区施强广场1号楼1902室收。
十、关键词定义
您：指注册并使用SHOPASTRO的卖家用户和/或其员工和/或授权操作本平台的其他人员。
个人信息：指以电子或者其他方式记录的能够单独或者与其他信息结合识别特定自然人身份或者反映特定自然人活动情况的各种信息。本政策中涉及的个人信息包括姓名、出生日期、身份证件号码、个人生物识别信息、住址、通信通讯联系方式、通信记录和内容、密码、财产信息、交易信息等。
个人敏感信息：指一旦泄露、非法提供或滥用可能危害人身和财产安全，极易导致个人名誉、身心健康受到损害或歧视性待遇等的个人信息，包括身份证件号码、个人生物识别信息、银行账户、财产信息、征信信息、行踪轨迹、健康生理信息、交易信息。
去标识化：指通过对个人信息的技术处理，使其在不借助额外信息的情况下，无法识别或者关联您的过程。
删除：指在实现日常业务功能所涉及的系统中去除个人信息的行为，使其保持不可被检索、访问的状态。
匿名化：指通过对个人信息的技术处理，使得您无法被识别或者关联，且处理后的信息不能被复原的过程。
中国大陆或中国大陆境内：指中华人民共和国大陆地区（仅为本政策之目的，不包含香港特别行政区、澳门特别行政区和台湾地区）。
注：本政策以中文书就，其他语言的翻译版本仅作参考。若本协议的任何语言的翻译件与中文版本有不一致的，以中文版本为准。
Privacy policy
Release Date: 2021 6 of December
Effective date: 2021 6 of December
Introduction
SHOPASTRO product and/or service platform (hereinafter referred to as “SHOPASTRO” or “Platform”) is owned and operated by ShopAstro (Hangzhou) Network Technology Co., Ltd. (registered address: Room 1902, Building 1, Shiqiang Plaza, Binjiang District, Hangzhou City, Zhejiang Province) and its affiliates (hereinafter collectively referred to as "we"), providing online shops to seller users (hereinafter referred to as "users", "you" or "sellers") through SHOPASTRO website www.shopastro.com address A SaaS platform with complete solutions for site building, traffic, payment and logistics.
When you use our platform, we may collect and use relevant information about you (including employees and/or those who operate business on your behalf) and the processing personal information of your end users (hereinafter collectively referred to as "personal information subjects") entrusted by you. We are well aware of the importance of personal information to the subject of personal information. We have formulated the "SHOPASTRO Privacy Policy" (hereinafter referred to as the "Policy") in accordance with applicable laws and regulations, and are committed to protecting the personal information security of you and/or your end users.
We hope to use this policy to explain to the subject of personal information how SHOPASTRO collects, uses, stores, share, transfer, and publicly discloses the purpose, method, scope and information security protection measures of personal information in the process of providing products and/or services, and enable personal information subjects to realize the rights and methods to manage their personal information. Please read this policy in conjunction with the "SHOPASTRO User Agreement". The following are our special tips, please pay attention:
1. SHOPASTRO mainly provides services for corporate customers, so this policy is only applicable to SHOPASTRO's direct processing of personal information of corporate customers' employees and authorized operators. In addition, if our corporate customers embed our services in their products (such as our website building services, etc.), entrusted by the corporate customers, they need to process the end user’s personal information in the process of providing products to the end user, we acting only as a personal information processor, processing the personal information of its end users in accordance with agreements reached with corporate customers. As the personal information controller, corporate customers assume all responsibilities to their end users and are obliged to disclose to end users how to handle and protect the personal information of end users. You should display the specific content of the privacy policy to your end users and provide them with consultation and response to rights requests.
2. For all key content, we use the " bold " or " bold and underline " writing method for prompting. For personal sensitive information, we use the " bold italic " writing method to make special reminders, and we hope you will pay special attention to it when you read it. Before you provide us with any of your personal sensitive information , you have carefully considered and hereby confirm that such provision is appropriate. You hereby agree that your personal sensitive information can be processed in accordance with the purposes and methods described in this policy.
3. SHOPASTRO only provides services to users who are 18 or older. For minors under the age of 18, we do not collect and will not provide any products and/or services of this platform to them. Before using our products and/or services, please confirm that users have met the age requirements, and carefully read and understand the detailed information in this policy. We will not knowingly collect the personal information of minors under the age of 18. If you find that we have unintentionally collected personal information of minors, please notify us immediately and we will try to delete the relevant data as soon as possible.
4. The ways we provide you with the realization of your personal information rights include, but are not limited to, access or correction, deletion of your personal information, account cancellation, withdrawal of consent, and timely response, etc., to ensure that you achieve control over your personal information.
5. Before using this platform, please be sure to read and thoroughly understand this policy, and use the relevant products and/or services of this platform after confirming your full understanding and consent. We recommend that when you use the products and/or services of this platform, you have obtained legal authorization and made wise decisions about the relevant personal information subject information you provided. If you disagree with any content of this policy, you should stop using SHOPASTRO immediately.
6. In order to facilitate the reading and understanding of relevant personal information subjects, we use sentences that are as simple and understandable as possible and define the following key terms. Please refer to the "Appendix: Keyword Definitions " of this policy.
This policy will help you understand the following:
1. How we collect and use personal information of personal information subjects
2. How do we use cookies and other similar tracking technologies
3. How do we entrust the processing, sharing, transfer, and public disclosure of personal information subjects' information
4. How to enable you to have the power to manage personal information
5. How to save and protect personal information
6. How to protect the personal information of minors
7. How to update this policy
8. Jurisdiction and application of law
9. How to contact us
10. Keyword definition
1. How to collect and use personal information of personal information subjects
In accordance with the principles of lawfulness, fairness and necessity, in order to realize the functions described in this policy, we collect and use the information that you proactively provide during the use of this platform, the information generated by your use of this platform, and the information we obtain from third parties. Personal information of relevant personal information subjects. Regardless of the above-mentioned methods to collect and use the personal information of the relevant personal information subject, we will only proceed with your authorization. Please ensure that you have obtained the consent of your end users, unless under certain circumstances, based on legal obligations or may need to protect your or other people's important interests, collect personal information from relevant personal information subjects.
Please understand that due to changes in business strategies, the functions of the platform's products and/or services may also undergo changes and developments. If we want to use the personal information of the relevant personal information subject for other purposes not specified in this policy, or collect and use the personal information of the relevant personal information subject for other specific purposes , we will inform you in a reasonable manner, and Obtain your consent again before collection and use.
(1) In the process of providing you with products and/or services, you actively provide personal information
1) Register/Login Account
In order to use the platform, you first need to register a SHOPASTRO account to become our user. Based on this, you need to provide us with the email address required to register your account, the mobile phone number in mainland China, the login password and the verification code we sent to you to verify your identity.
After completing the registration, you can choose to log in via mobile phone number + verification code or email + login password, and then browse and use SHOPASTRO as a registered user .
2) Create a trial shop
In the process of creating a trial store, if you also want other operators to use their mailbox to log in to the store for store management, you need to provide the e-mail address of the store operator. Please ensure that you have obtained the consent of other persons when providing their personal information.
3) Customer Management
After creating a store, you can import registered/ordered customer information for store operation and customer management. Please ensure that the personal information of other persons imported by you has obtained the consent to use their personal information in this way at the time of collection.
4) Paid features
When you use SHOPASTRO's payment function, we will collect your payment records so that you can check the transaction records that have occurred on the platform, while doing our best to protect the safety of your property and virtual property. The above information is sensitive personal information , please do not provide it to a third party arbitrarily. The collection of the above information is necessary to realize the relevant functions, otherwise the transaction will not be completed.
5) Upload/publish content
We will collect content information that you upload or publish on this platform, including text, shared photos, audio, video, and the date, time and location of such information. When you use the above functions, we will ask you for authorization to use the camera, photo album, microphone and location permissions in your terminal device. You can choose whether to provide us with such authorization. If you refuse, you will not be able to use the relevant functions, but it will not affect your use of other functions of SHOPASTRO.
6) Advertising agency investment
In order to help you better increase store traffic and achieve customer growth, we will provide advertising agency services, and place your store/product/service advertisements on relevant advertising platforms in your name. Under this function, we may transmit your relevant information to the advertising platform and/or use the pictures, text, videos and other materials in the store page provided by you. Please make sure that the relevant materials do not contain your or user's personal information . If relevant personal information is included, please ensure that you have obtained the consent of the subject of personal information. If you are not sure whether the material contains personal information or cannot obtain authorization, please do not use this function, but it will not affect your use of other functions of SHOPASTRO.
7) Product recommendation
When you need to recommend products on the product detail page, in order to achieve a more accurate recommendation effect, we will collect your end user browsing data and behavioral data . When choosing this service, please ensure that you have informed the end users of the collection and use of relevant information and obtained their consent. If you are unable to ensure that your end user has agreed to the collection of the above-mentioned information, please do not use this function, but it will not affect your use of other functions of SHOPASTRO.
8) Add swatches
When you use the add swatch function (including swatch management, swatch creation/editing, custom product swatches, and color spot appearance configuration), we will collect and use your store data (including seller ID and store ID) to Correspond the operation of your added color palette to your shop. If you refuse to provide such information, please do not use this function, but it will not affect your use of other functions of SHOPASTRO.
9) Add shopping cart
When your end user uses the "add shopping cart" function, in order to make the operation correspond to your store, we will collect and use your store ID to complete the transaction between you and your end user. If you refuse to provide such information, please do not use this feature. We remind you that the effect of your website construction will be affected, but it will not affect your use of other functions of SHOPASTRO.
10) Credit card payment
When you or your end user uses a credit or debit card to make a payment, we will collect and use card-related information of you or your end user to complete the payment action of you or your end user. The above information is sensitive personal information , please do not provide it to a third party arbitrarily. The collection of the above information is necessary to realize the relevant functions, otherwise the transaction will not be completed. If you refuse to provide such information, please do not use this feature. We remind you that the effect of your website construction will be affected, but it will not affect your use of other functions of SHOPASTRO.
11) Customer Service
In order to improve the quality of service, when contacting our customer service team, we may ask you to provide phone number, WeChat account number and surname information in order to communicate and serve you with customer service.
(2) Personal information we actively collect in the process of providing platform services to you
Under the premise of complying with laws and regulations, in order to better provide you with services and protect the security of your account, when you browse and search in SHOPASTRO, we will collect and use the products and/or services you generate during the use of our products and/or services. The device information and log information are as follows:
Device information: We will collect your personal commonly used device information, including IP address, device model, device identification code, operating system, resolution, and telecom operator.
Log information: We will automatically collect detailed information about your use of this platform and save it as a network log, including network diagnosis, stuck information, click events, level success or failure, browsing records , click records, and URLs of potential risks, and Keep in accordance with relevant legal requirements.
(3) Authorization and consent of personal information of end users
You know very well that for the purpose of using the platform, you need us to collect, store, and process personal information from end users of your products. Therefore, you must commit to:
1) You have obtained sufficient and necessary authorizations, consents and permits from end users to allow us to directly collect and use their personal information for the purpose of performing our services ;
2) You have obtained sufficient and necessary authorization, consent and permission from the end user to allow us and our partners to perform de-identification analysis and aggregate processing of the collected personal information of the end user;
3) You have complied with and will continue to comply with applicable laws, regulations and regulatory requirements, including but not limited to formulating and publishing relevant policies on personal information protection and privacy protection;
4) You have provided end users with an easy-to-operate selection mechanism to inform end users how and when they can exercise their options, and explain how and when they can modify or withdraw the options after exercising their options, so that users can choose to agree or not Agree to collect and use their personal information for commercial purposes.
5) You have told the end user how to exercise the rights of the end user to you (how to access, correct their personal information, exercise the right to delete, change the scope of their authorization and consent, etc.). Your end users will not have any form of appeals, petitions, complaints, etc. against us because we process their personal information in accordance with this policy. If you ask us, you will be responsible for solving the problem for the end user.
If you violate the above commitments and cause your end users to claim any form of claims or claims against us, or cause us to be involved in legal or administrative procedures, you will be responsible for a full settlement and compensation for any form of damage we may suffer as a result loss.
(4) Exceptions for obtaining authorization and consent
According to laws and regulations, personal information collected and used in the following situations does not require the consent of the personal information subject:
- Related to fulfilling obligations stipulated by laws and regulations;
- Directly related to national security and national defense security;
- Directly related to public safety, public health, and major public interests;
- Directly related to criminal investigation, prosecution, trial, and execution of judgments;
- It is related to protecting the life, property and other major legal rights of the personal information subject or other individuals, but it is difficult to obtain the authorization and consent of the person;
- The personal information involved is disclosed by the subject of personal information to the public;
- Necessary for signing and performing contracts according to the requirements of the subject of personal information;
- Collecting personal information from legally publicly disclosed information, such as through legal news reports, government information disclosure, etc.;
- Maintaining what is necessary for the safe and stable operation of our platform, such as discovering and disposing of malfunctions of our platform products and/or services;
- Other circumstances stipulated by laws and regulations.
2. How to use cookies and other similar tracking technologies
(1) What is Cookie
A cookie is a small file stored in the personal information subject’s computer, mobile phone or other smart terminal device by the website server when the personal information subject logs on to the website or browses the network content. It usually contains identifiers, site names, and some numbers and characters. When the subject of personal information visits the corresponding website again, the website can identify the browser of the subject of personal information through cookies. Cookies may store user preferences and other information.
(2) How to use cookies
When personal information subjects use our website, we may collect the personal information subject’s device model, operating system, device identifier, and login IP address information through Cookies or similar technologies, and cache the personal information subject’s browsing information and click information to view The network environment of the subject of personal information. Through cookies, we can identify the identity of the personal information subject when the personal information subject visits the website, and continuously optimize the user-friendliness of the website, and make adjustments to the website according to the needs of the personal information subject. The subject of personal information can also change the settings of the browser so that the browser does not accept cookies on our website, but this may affect the use of some functions of the website by the subject of personal information.
On the SHOPASTRO website, with the help of cookies and other similar technologies, we can identify whether the personal information subject belongs to our user or end user each time the subject of personal information uses our products and/or services, without having to log in again on each page And verification.
(3) How to manage cookies
Personal information subjects can manage or delete certain types of tracking technologies according to their own preferences. Many web browsers have a "Do Not Track" function, which can issue a "Do Not Track" request to a website.
In addition to the controls we provide, personal information subjects can also choose to enable or disable cookies in the Internet browser. Most Internet browsers also allow the subject of personal information to choose whether to disable all cookies or only third-party cookies. By default, most Internet browsers accept cookies, but this can be changed. For details, refer to the help menu in the Internet browser or the documentation provided with the device.
The following link provides instructions on how to control cookies in all major browsers:
-Google Chrome: https://support.google.com/chrome/answer/95647?hl=en
-IE: https://support.microsoft.com/en-us/help/260971/description-of-cookies
-Safari (desktop version): https://support.apple.com/kb/PH5042?locale=en_US
-Safari (mobile version): https://support.apple.com/en-us/HT201265
-Firefox browser: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer?redirectlocale=en-US&redirectslug=Cookies
-Opera: https://www.opera.com/zh-cn/help
If the subject of personal information uses other browsers, please refer to the documentation provided by the browser manufacturer.
On our website, the subject of personal information can delete the existing tracking technology by clearing the cache.
When the personal information subject browses the page without logging in, in order to provide the corresponding service to the personal information subject, we will collect the cookie information necessary to realize the browsing function , but the cookie information will be deleted within one month.
Personal information subjects are requested to be aware that if they refuse to use or clear existing tracking technology, they need to personally change user settings during each visit, and we may not be able to provide personal information subjects with a better experience, some services It may also not work properly.
3. How do we entrust the processing, sharing, transfer, and public disclosure of personal information subjects' information
(1) Entrusted processing
In order to provide you with more complete and higher-quality products and services, certain functions may be provided by our technical service partners, and we may entrust partners (including technical service providers) to process certain personal information of personal information subjects . (For example, when you use SHOPASTRO number when paying or automatic debit function, or your end users to make payments through outlets operating in SHOPASTRO you created, we may entrust a third party payment companies handle some of your personal information.) On For companies, organizations and individuals that we entrust to process personal information, we will sign strict confidentiality agreements with them to clarify data processing matters, processing periods, nature of processing, processing purposes, and responsibilities of both parties, etc., and require partners to only follow our requirements and this policy And any other relevant confidentiality and security measures to handle personal information. If you refuse our suppliers to collect personal information necessary to provide services when providing services, you or your end users may not be able to enjoy the services provided by that supplier while using our products and/or services. For example, we will hire service providers to assist us in completing real-name authentication.
(2) Sharing
Unless one or more of the following circumstances exist, we will not share personal information with any third-party company, organization or individual:
- Based on the request made by the personal information subject, or the express authorization or consent of the personal information subject obtained in advance;
- Relevant to our fulfillment of obligations stipulated by laws and regulations;
- Directly related to national security and national defense security;
- Directly related to public safety, public health, and major public interests;
- Directly related to criminal investigation, prosecution, trial, and execution of judgments
- In order to protect the life, property and other major legal rights of the personal information subject or other individuals, but it is difficult to obtain the consent of the person;
- Personal information that the subject of personal information discloses to the public on his own initiative;
- Collecting personal information from legally publicly disclosed information, such as through legal news reports, government information disclosure, and other channels.
- Sharing necessary information with our affiliates and partners: We will only share personal information for legal, legitimate, necessary, specific, and clear purposes, and will only share individuals who are necessary to provide services to you or your end users information. We will not share personal information that can identify the subject of personal information, unless otherwise stipulated by laws and regulations. Different from the partners under entrusted processing, the shared partners are data controllers who will process personal information after obtaining the consent of the personal information subject in their own name. The partner may have its own independent privacy policy and user service agreement. We recommend that you read and abide by the user agreement and privacy policy of the shared partner. The following is the details of the information we share with third parties:
A. Sharing with affiliated companies: In order to facilitate us to provide you with platform products and/or services based on your SHOPASTRO account, recommend information that may be of interest to you, identify abnormal user accounts, and protect the personal and property safety of SHOPASTRO affiliates or other users or the public To avoid infringement, the personal information of you and your end users may be shared with our affiliated companies with the consent of you and your end users. We will only share necessary personal information and are bound by the purpose stated in this policy. If we share sensitive personal information or the affiliate company changes the purpose of using and processing personal information, we will again seek authorization from you and your end users agree.
B. Share with authorized partners:
1) Authorized partners for advertising. Unless authorized by you, we will not share the personal information of your end users with partners that provide advertising services. We will provide these partners with information about the coverage and effectiveness of their advertising, but we will not provide personally identifiable information about your end users, or we will aggregate this information so that it will not identify individual end users. Such partners may combine the above information with other data they obtain legally for advertising or decision-making recommendations.
2) Authorized partners of statistical analysis services. Unless authorized by you, we will not share the personal information of your end users with partners that provide statistical analysis services. We will provide aggregated information to these partners so that it does not identify individual end users. Such partners may combine the above information with other data they obtain legally for statistical analysis.
3) Authorized partners of payment cooperation. When you need to use a credit card, debit card, or an online payment method supported by other platforms to use some of SHOPASTRO’s payment or subscription features for deduction, the deduction service will be through a partner bank or third-party payment company, etc. Provide it. We will provide these partners with the necessary information to achieve the deduction function, and will not provide additional personal information.
4) Other suppliers, service providers and other partners. We send information to other suppliers, service providers, and other partners that support our business. This support includes providing technical infrastructure services, providing customer services, payment convenience, or conducting academic research and surveys. We will agree strict data protection measures with them, and order them to process personal information in accordance with our instructions, this policy and any other relevant confidentiality and security measures.
You are reminded that this platform may contain functions provided by third parties or links to websites and services provided by third parties. The regulations and procedures described in this policy do not apply to third-party websites. Any information you provide to third-party websites or services will be directly provided to the operators of these services. Even if you access through this platform, you must comply with the privacy policies and user agreements (if any) applicable to the operators. We are not responsible for the content, personal information and security measures and policies of third-party websites or services. We recommend that you understand the privacy policy and user agreement of a third party before providing information.
(3) Transfer
In principle, we will not transfer the control of personal information to other companies, organizations or individuals, except in the following cases:
- Based on a request made by the subject of personal information, or your express authorization or consent obtained in advance;
- Relevant to our fulfillment of obligations stipulated by laws and regulations;
- Directly related to national security and national defense security;
- Directly related to public safety, public health, and major public interests;
- Directly related to criminal investigation, prosecution, trial, and execution of judgments;
- In order to protect the life, property and other major legal rights of the personal information subject or other individuals, but it is difficult to obtain the authorization and consent of the person;
- Personal information that the subject of personal information discloses to the public on his own initiative;
- Collecting personal information from legally publicly disclosed information, such as through legal news reports, government information disclosure, etc.;
- Transfer in the event of company acquisition, merger, reorganization, bankruptcy, or change of the operating entity.
Please be aware that if the transfer is really necessary for the above reasons, we will inform you of the purpose, type, and transferee of the information before the transfer (if sensitive information is involved, we will also inform the content of the sensitive information involved), and Transfer after obtaining your consent, except as otherwise provided by laws and regulations. After the change, the operating entity will continue to perform the responsibilities and obligations of the personal information controller; if the company goes bankrupt or shuts down and there is no takeover party, we will delete or anonymize your personal information.
(4) Public disclosure
In principle, we will not release your personal information to the society or unspecified groups of people, except for those that should be disclosed based on an agreement with you or in accordance with laws and regulations.
4. How to enable you to have the right to manage personal information
(1) Access and correction of personal information
You have the right to log in and access your SHOPASTRO account at any time to view your personal information. If you find that your personal information that we collect, store, use, and disclose is incorrect or incomplete, or under other circumstances as required by laws and regulations, you can log in www.shopastro.com and enter the "Personal Center" "After correcting or supplementing your personal information.
If you wish to access or correct your other personal information, or encounter difficulties in exercising the above rights, you can contact us through the methods described in Article 9 of this policy, and we will respond to your information in a timely manner after verifying your identity. Request, except as otherwise provided by laws and regulations or otherwise provided for in this policy.
(2) Delete personal information
In the following situations, you can contact customer service through the methods described in Article 9 of this policy to request us to delete your personal information, unless the data has been anonymized or otherwise provided by laws and regulations:
- We have collected and used personal information in violation of laws, administrative regulations, or agreements with you;
- If we violate laws and regulations or violate the agreement with you to share or transfer personal information to a third party, we will immediately stop sharing or transfer, and notify the third party to delete it in time;
- If we violate laws and regulations or violate the agreement with you to share or transfer personal information to a third party, we will immediately stop sharing or transfer, and notify the third party to delete it in time;
- You terminate the use of the products and/or services of this platform by means of cancellation, etc.;
- Other circumstances stipulated by laws and regulations.
Before deleting relevant information, we may require you to verify your identity to protect your account security. When we decide to respond to your deletion request, we will delete your information from SHOPASTRO products and/or servers as soon as possible. However, due to the requirements of the regulatory authorities to fight crime and maintain national security, we will keep your communication information and transaction records within the time limit permitted by law, but we will not conduct any use. Please be aware that we may not delete the information you need to delete from the backup system immediately, but will delete it when the backup system is updated.
(3) Cancel account
Unless otherwise provided by laws and regulations or otherwise agreed in this policy, you can contact customer service through the methods described in Article 9 of this policy to cancel your SHOPASTRO account.
Please understand and be aware that canceling your account on this platform will cause you to permanently lose access to the account and the data in the account. We will provide you with account cancellation services after verifying your identity and negotiating with you to process the assets in your account. In order to provide you with a more convenient way to log out, we will continue to optimize our products in the future and inform you through page announcements. After you cancel your account, unless you need to retain personal information in accordance with laws and regulations, we will delete or anonymize your personal information in a timely manner.
Your cancellation of your account is irreversible. Once your account is cancelled, we will no longer collect your personal information and will no longer provide you with our products and/or services. Therefore, we recommend that you choose to cancel your account carefully.
(4) Constrain the automatic decision-making of the information system
In some business functions of this platform, we may make decisions based on non-manual automatic decision-making mechanisms including information systems and algorithms. If these decisions significantly affect your legal rights, you have the right to request an explanation from us, and you can contact us through the methods provided in Article 9 of this policy.
(5) Responding to the request
In order to realize the user rights described in this article, or if you have any questions, complaints, comments or suggestions, you can contact us through the contact information provided in Article 9 of this policy. To ensure security, we may ask to verify the identity of your user before processing your request. For your request, in principle, your user identity will be verified and a reply will be made within 15 working days after receiving your request.
For your reasonable request, we do not charge fees in principle. For repeated requests within a certain period of time, we will charge a certain cost depending on the situation; for requests that require too many technical means (for example, the need to develop a new system or fundamentally change the current practice) or other significant difficulties, we Will provide you with an alternative method.
We will reject your request under the following circumstances:
- Relevant to fulfilling the obligations stipulated by laws and regulations;
- Directly related to national security and national defense security;
- Directly related to public safety, public health, and major public interests;
- Directly related to criminal investigation, prosecution, trial and execution of judgments;
- There is sufficient evidence to show that the user has subjective malice or abuse of rights;
- To protect the life, property and other major legal rights of users or other individuals, but it is difficult to obtain the authorization and consent of the person;
- Responding to the user's request will cause serious damage to the legitimate rights and interests of the user or other individuals or organizations;
- Involving trade secrets.
Please be aware that we recommend that you respond directly to requests made by end users (not direct customers of this platform) who use the products and/or services of this platform. Unless we receive your request for assistance, we will forward the request received by your end user to you or ask the end user to directly find you for help.
5. How do we save and protect personal information
(1) Preservation of personal information
1) Shelf life
During your use of SHOPASTRO products and/or services, we will continue to store personal information about you and your end users for you. We promise that, unless otherwise required by laws and regulations, our storage time for you and your terminal users' personal information is limited to the shortest time necessary to achieve the purpose of authorized use by you and your terminal users, unless otherwise stipulated by laws and regulations or otherwise authorized by the user. .
If you cancel your account, voluntarily delete the above information, or we stop operations due to poor management or other reasons, we will stop collecting your personal information in accordance with laws and regulations, and delete the collected personal information or make it anonymous化处理。 Treatment.
2) Conservation area
In principle, we will store personal information collected and generated during operations in China, and will not transmit it across borders. Please be aware that in order to assist third-party service providers to complete their services, we may transfer your personal information to third-party service providers located overseas. In this case, we will ensure that your personal information is sufficiently and equally protected in China, and implement de-identification and other measures before cross-border data transmission.
(2) Protection of personal information
We attach great importance to the safety of your personal information. For this reason, we have adopted multi-level protection measures such as safety technical measures in line with industry standards and supporting organizational structures and management systems to prevent your personal information from being leaked, damaged, or misused to the greatest extent possible , Unauthorized access, unauthorized disclosure or modification, including:
1) Data security technical measures
In order to ensure information security, we strive to take various reasonable security technical measures to protect personal information, so that the personal information of you and your end users will not be leaked, destroyed or lost. We use encrypted transmission technologies such as SSL to protect the safety of the data during its transmission, and use proper protection mechanisms to prevent malicious attacks on the data. We adopt an encrypted storage and data authority control mechanism for personal information to prevent unauthorized access, public disclosure, use, modification, man-made or accidental damage or loss of personal information of you and your end users.
2) Data security organization and management measures
In accordance with the requirements of relevant laws and regulations, we have appointed a person in charge of personal information protection and a personal information protection agency. We have also established a related internal control management process, based on the principle of minimum authorization, strictly set the information access authority for the staff who may be exposed to the personal information of you and your end users, and control the scope of personal information knowledge.
We have established an internal standard system for the safe use of data, and have also adopted strict management of employees or outsourced personnel who may have access to the information of you and your end users, including but not limited to adopting different authority controls according to different positions, and signing with them Confidentiality agreement, monitoring their operations and other measures.
We organize employees to participate in security and privacy protection related trainings and require them to complete the required assessments to strengthen employees' awareness of the importance of protecting personal information.
3) Guarantee of terms of cooperation agreement
Before we collect your personal information indirectly from a third party, we will expressly require the third party to collect and process the personal information of you and your end users in written form (such as cooperation agreement, letter of commitment) after obtaining your express consent . And require the third party to make a commitment in the form of a written agreement on the legality and compliance of the source of personal information. If the third party violates the behavior, we will explicitly require the other party to bear the corresponding legal responsibility.
Before we share the personal information of you and/or your end users with our partners, we will strictly require our partners to undertake information protection obligations and responsibilities. To this end, we will require eco-partners to sign a data processing agreement or set out the terms of data protection in the cooperation agreement signed by both parties before cooperation . The agreement strictly stipulates that partners’ confidentiality obligations for user information, including the storage, use and circulation of information, should meet our management and control requirements and accept our review, supervision and audit. Once there is any violation, we will require the other party to bear the corresponding legal liability.
4) Security incident handling
In the unfortunate event of a personal information security incident, we will immediately activate an emergency plan, take remedial measures, record the content of the incident, and report it in a timely manner in accordance with applicable laws and regulations. If it may cause serious damage to the legitimate rights and interests of you and/or your end users , such as the disclosure of sensitive personal information, we will inform you of the basic situation of the security incident and its possible impact, and what we have taken or will take The disposal measures, the suggestions you can choose to prevent and reduce risks, the remedial measures we provide for you and/or your end users , and the contact information of the person in charge of personal information protection and the personal information protection agency. We will promptly inform you of the above incidents by email, letter, telephone or push notification. If it is difficult to inform you one by one, we will adopt a reasonable and effective way to issue a warning notice.
Please know and understand that the Internet is not an absolutely secure environment. We strongly recommend that you use a secure method and use a complex password to help us ensure the security of your account. If you find that your personal information is leaked, especially your account or password, please contact us immediately according to the contact information provided in Article 9 of this policy so that we can take corresponding measures to protect your information.
6. How to protect the personal information of minors
This platform only provides products and/or services to users who are over 18 years old (inclusive). We will not knowingly collect personal information of minors. If we accidentally collect information about minors, we will delete it as soon as we know it. If you believe that we may improperly hold information about minors, please contact us in accordance with the methods described in Article 9 of this policy.
7. How to update this policy
We may revise the terms of this policy in due course, and this revision forms part of this policy. If such amendments result in a substantial reduction of your rights under this policy, we will notify you through a prominent position on the homepage or send you an email or other means before the amendment takes effect. In this case, if you do not agree to this policy, or object to the modification or update of this policy, you can choose to stop using our products and/or services or cancel your account. However, please be aware that the behavior and activities before your account is cancelled and before you stop using the service are still subject to this policy.
If it involves major and substantive changes, we will notify you in a significant way based on specific circumstances.
Significant and substantial changes include but are not limited to the following situations:
1) Our service model has undergone major changes. Such as the purpose of processing personal information, the type of personal information processed, the way of using personal information, etc.;
2) Your right to participate in the processing of personal information and how to exercise it has undergone major changes;
3) Significant changes have taken place in our ownership structure and organizational structure. Such as changes in owners caused by business adjustments, bankruptcy mergers, etc.;
4) Changes in the main objects of personal information sharing, transfer or public disclosure;
5) When our department responsible for handling personal information security, contact information and complaint channels change;
6) When the personal information security impact assessment report shows that there is a high risk.
8. Jurisdiction and application of law
The establishment, effectiveness, performance, interpretation and dispute resolution of this privacy policy shall be governed by Chinese laws, and the application of its conflict of laws and regulations shall be clearly excluded.
If there is any dispute or dispute between you and us, you should first settle it through friendly negotiation; if the negotiation fails, you agree to submit the dispute or dispute to the Hangzhou Internet Court for settlement through litigation.
9. How to contact us
If you have any questions, comments or suggestions about the content of this policy, you can contact us in the following ways: 1) email: contact@shopastro.com ; or 2) Mail the letter to: Common office address: Room 1902, Building 1, Shiqiang Plaza, Binjiang District, Hangzhou City, Zhejiang Province.
10. Keyword definition
You: Refers to seller users and/or their employees and/or other persons authorized to operate this platform who have registered and used SHOPASTRO.
Personal information: refers to various information recorded electronically or in other ways that can identify a specific natural person alone or in combination with other information or reflect the activities of a specific natural person. The personal information involved in this policy includes name, date of birth, ID number, personal biometric information , address, communication contact information, communication records and content, passwords, property information, transaction information, etc.
Personal sensitive information: refers to personal information that, once leaked, illegally provided or abused, may endanger personal and property safety, and easily lead to personal reputation, physical and mental health damage, or discriminatory treatment, including ID number, personal biometric information, bank account , Property information, credit information, whereabouts, health and physiological information, transaction information.
De-identification: refers to the process of technical processing of personal information to make it impossible to identify or associate you without additional information.
Deletion: Refers to the act of removing personal information from the system involved in the realization of daily business functions, so that it can be kept in a state where it cannot be retrieved or accessed.
Anonymization: refers to the process of technical processing of personal information so that you cannot be identified or associated, and the processed information cannot be restored.
Mainland China or Mainland China: refers to the Mainland of the People's Republic of China (for the purpose of this policy only, excluding Hong Kong Special Administrative Region, Macau Special Administrative Region and Taiwan Region).
Note：This Policy is prepared Chinese and translations in other languages are for reference purpose only. If there is any discrepancy between the Chinese version and any translation in other language, the Chinese version shall prevail.
shopastro 官方公众号