Personal Data Protection Privacy Statement

Effective date: February 29, 2024

Your trust is very important to us. YunExpress and its operating group, subsidiaries, and branches (hereinafter referred to as "YunExpress" or "we") are committed to providing you with high-quality services. We are dedicated to protecting your privacy and the security of various information related to identified or identifiable natural persons recorded electronically or otherwise (excluding anonymous information, hereinafter referred to as "personal data"). In light of this, we have formulated this Personal Data Protection Privacy Statement (hereinafter referred to as "this Privacy Statement"), which aims to explain how we collect, use, process, store, share, and transmit your personal data when you visit our website, consult, or use our services.

When this Privacy Statement mentions “YunExpress”, “we”, “us”, it is referring to the YunExpress company that is decided on the purposes and means of the processing of your Personal Data under this Privacy Statement. When you are using our services in Mainland China, your Personal Data is controlled by Shenzhen Qianhai YunExpress Logistics Co., Ltd.. When you are using our services in other countries or regions to arrange your parcels to move from China to other countries or regions worldwide, your Personal Data is controlled by HONGKONG YUNEXPRESS LOGISTICS LIMITED.

contact information:

Shenzhen Qianhai YunExpress Logistics Co., Ltd.

Attn: Legal Department

17th Floor, Chuang Hui International Center, Bantian Residential District, Banxuegang Avenue and Yongxiang Road Intersection, Longgang District, Shenzhen City, Guangdong Province, P.R.China

HONGKONG YUNEXPRESS LOGISTICS LIMITED

Attn: Legal Department

8/F OFFICE A MG TOWER NO.133 HOI BUN ROAD KWUN TONG KL

If you have any questions about our use of your personal data during or after reading this Privacy Statement, you can of course always contact us through the email of DPO@ztn.com.

This Privacy Statement will help you understand the content:

1.Does this Privacy Statement apply to you?
2.How does YunExpress collect your personal data?
3.How does YunExpress use Cookies?
4.How does YunExpress share, transfer and publicly disclose your personal data?
5.What measures does YunExpress take to protect your personal data?
6.How does YunExpress store your personal data and for how long?
7.What rights do you have with respect to your personal data?
8.How is this Privacy Statement updated?
9.How can you contact YunExpress?
Before using our products or services，please read and understand this Privacy Statement carefully,especially the sections in bold, this will help you better understand the various products and services we offer and make appropriate choices. In this Privacy Statement, if personal data is considered sensitive, we will highlight it in bold to draw your attention and obtain your separate consent. You should pay extra attention to the list of such information.

I. Whether this Privacy Statement applies to you?

1.1 This Privacy Statement applies to you if you are a customer of YunExpress or if you visit the website www.yunexpress.cn and public account platform of YunExpress (hereinafter referred to as "the Website").
1.2 Our website is for the general audience, not for children. In principle, we will not collect personal data of children under the age of 14. If you are under the age of 14 and wish to use our services, please ask your parents or guardians to assist you.
If a child under the age of 14 may disclose personal data to us, the parents or guardians can contact YunExpress, and we will delete personal data as required by you.

2. What personal data does we collect and how to use it?

In the process of business activities and service provision, YunExpress will need to process your personal data. Without your personal data, we will not be able to provide you with the services you need.
2.1 For the purpose of using our services，you provided the personal data to us voluntarily
·YunExpress collects personal data provided to us by customers or visitors to our website. If you are a YunExpress customer, we will receive your personal data directly.
·When you visit our website and wish to inquire about our service offerings or obtain a quotation, you voluntarily submit your name, phone number, email, WeChat ID, QQ number, company name, city of your company, or any other necessary information displayed on the online contact form through the website. We may use your information to contact you regarding your service needs.
·When you register as our customer, open an account on the YunExpress website, and become the account holder, you need to provide us with personal data including your name, phone number, email address, address/contact address, ID number or passport number, payment account, or bank details. This processing is necessary for fulfilling the service contract between you and YunExpress.
·To sign the service contract and fulfill specific service orders, you need to submit your name, address, and phone number to be listed as the principal. We also need to collect your order information, including the origin, destination, postal code, your goods information (product/SKU name, quantity, price, sales link), sender information (name, address, contact details), and recipient information (name, address, contact details). This processing is necessary for fulfilling the service contract between you and YunExpress.
·To comply with our legal obligations for authentication and security, you need to provide personal data including your name, ID number or passport number, mobile phone number or bank card number. This processing is necessary for us to comply with our legal obligations.
·To improve the various services you use and offer more personalized information, searches and services, we will improve our products and services based on your preference information, inquiries, complaints, communication records with us, and conduct indirect user profiling analysis. We will also show you and push information and commercial marketing ads. Your preference information includes your browsing and search habits, order shipping information (such as product/SKU name, quantity, origin, destination). If you do not want to receive such commercial marketing ads from YunExpress, you can unsubscribe via the prompt or contact YunExpress directly to cancel.
2.2 personal data we collect indirectly
·When you are not the sender and recipient of the goods, we collect from you the sender and recipient's name, telephone number, email address, address and postal code in order to perform the entrusted matters agreed in your service contract, including arranging the transportation of goods, customs declaration, customs clearance and delivery.
·When you enter into a service contract with us for authentication and signing, you provide us with your personal data, including name, telephone number, email address, address or contact address, ID card or passport number and photo, so that we can complete the authenticity verification of the account and sign the service contract with you.
·The payment account or bank information of the third party payer provided by you to us when you entrust a third party to pay the order price on your behalf.
·When YunExpress indirectly receives personal data, we rely on you to ensure its accuracy, and you have the right to provide this information to YunExpress. Therefore, you commit and guarantee that if the information you provide includes personal data from other third parties, you have informed these third parties before providing them with your personal data, and they have agreed to share their personal data with us.
2.3 Information we automatically collect
·When you visit our website, we may automatically collect certain information from your device. This will include IP address, unique device or user ID, system and browser type, date and time, content and pages you visit on our website or mobile application, the date, time, and location of the action.
·Gathering this information allows us to better understand our website visitors, where they come from, and what content on our site interests them. We use this information for internal analysis and to enhance the quality of our website and its relevance to visitors. We also need to retain logs according to Chinese laws and regulations to record our website's online activities.
·In order to improve the security of the services provided by YunExpress user terminal and to more accurately prevent phishing website fraud and Trojan viruses, YunExpress may assess the risk of your account by understanding some of your network usage habits and software information you commonly use, and may record some URLs that YunExpress considers to be risky.
·This information may be collected using cookies and similar tracking technologies. See the "How YunExpress Uses cookies" section below.
2.4 Information Collected by Our Third-Party Partners
In certain specific business scenarios, to enhance processing capabilities, improve response speed, ensure website usage security, or for other considerations, we may use software service toolkits (SDKs) provided by capable third-party service providers to serve you. The following SDKs may collect and use your personal data. By doing so, you authorize and agree to our use of the following SDKs:
Third-party real-name authentication service provider —— Hangzhou Tiangu Information Technology Co., LTD. (e-signature)
To verify your true identity and ensure the security of your account, preventing unauthorized use, we entrust a third-party real-name authentication service provider to provide you with real-name authentication services. You agree that we will provide your personal identity information (name, ID number or passport number), business information (copy of business license, social credit code or business registration number; name and ID number of the legal representative), mobile phone number (for enterprises or individuals), and bank information (owner of the bank account, opening bank/city, account type, bank account number/card number) to the third-party real-name authentication service provider for real-name verification. At the same time, you agree that the third-party real-name authentication service provider may collect the aforementioned information and biometric features (static or dynamic facial features) from you according to the verification requirements to complete the real-name verification. When you use the services of the third-party real-name authentication service provider and provide your personal data, we and the third-party real-name authentication service provider act as independent data processors, each providing real-name authentication services to you in accordance with this Privacy Statement and the privacy Privacy Statement of the third-party real-name authentication service provider. We commit to signing a personal data Protection Agreement with the third-party real-name authentication service provider to ensure that they handle your personal data within the scope of your authorization. We strongly recommend that you carefully read the privacy Privacy Statement of the third-party real-name authentication service provider during the process of completing real-name verification.
2.5 Information that may be identified as sensitive personal data
·In this Privacy Statement, sensitive personal data refers to the personal data that is likely to be infringed upon your personal dignity or personal and property safety once it is disclosed or illegally used, including biometric identification, religious belief, specific identity, medical health, financial account, whereabouts track and other information.
·We will ensure that the processing of your sensitive personal data is direct and necessary to achieve the specific purposes described in this Privacy Statement. We will take strict security measures for the processing of your sensitive personal data and in a manner that minimizes the impact on your personal rights and interests.
·Among the information we have collected above, the following may be considered sensitive personal data:
Your identity information (ID number or passport number), biometric information (facial recognition information), and bank information (account owner, bank card number/account number) are processed for the purpose of fulfilling the service contract between the two parties.
2.6 Principles for processing personal data
We will adhere to the principles of legality, propriety, and necessity. For the purposes outlined in this Privacy Statement, we will collect and use personal data that you provide voluntarily or that is automatically generated due to your use of our services when visiting our website or using our services. If we need to use your personal data for purposes not specified in this Privacy Statement, or if we need to use information collected for a specific purpose for any other purpose, we will inform you appropriately and obtain your consent again before using.
2.7 Legal basis for processing personal data
Please be fully aware that we may collect and process your personal data under the following circumstances. The legal basis may vary depending on the type of information, the business activities and services to be conducted, and the requirements of Chinese law.
Within the maximum scope permitted by Chinese law, we will rely on the following legal basis for processing without your consent:
·The processing of personal data necessary for the conclusion or performance of a contract in which the individual is a party;
·The processing of personal data is required to perform legal duties or obligations;
·personal data needs to be processed in order to respond to public health emergencies or to protect the life, health and property safety of natural persons in emergency situations;
·Processing personal data within a reasonable scope for public interest activities such as news reporting and public opinion supervision;
·personal data voluntarily disclosed by individuals or other personal data disclosed according to law and processed within a reasonable scope in accordance with relevant laws and regulations;
·Other circumstances prescribed by laws and administrative regulations.
If our collection and processing of your personal data requires your consent, we will base our actions on your agreement, which must be provided in the form required by laws, regulations, and national standards. This consent provides a legal basis for us to collect and process your personal data, and you have the right to withdraw it at any time. Upon receiving your notification to withdraw the consent, YunExpress will promptly stop further processing of your personal data, but this will not affect the legality of the processing conducted before the consent was withdrawn.

3. How does YunExpress use Cookies?

3.1 To provide you with a more convenient access experience, when you visit the YunExpress user end or use its services, YunExpress may identify your identity through small data files. This is to save you the step of repeatedly entering account information or to help assess the security of your account. These data files may be Cookie, Flash Cookie, or other local storage provided by your browser or associated applications (collectively referred to as "Cookie").
3.2 Please understand that certain services of YunExpress can only be realized by using "Cookie." If your browser or browser add-on allows it, you can modify your acceptance of Cookie or refuse YunExpress 'Cookie. For more details, please refer to www.aboutCookies.org, but this action may affect your secure access to YunExpress' client and use of services in some cases. You can find more information in our cookies Policy.

4. How does YunExpress share, transfer and disclose your personal data?

4.1 We will not share your personal data with third parties unless we have obtained your explicit consent or it falls under the circumstances where "sharing, transferring, or disclosing your personal data does not require prior consent." We may share your personal data with related companies, partners, and other third parties to ensure the smooth completion of services provided to you; however, we will only share your personal data for legal, proper, necessary, specific, and clear purposes, and only the personal data necessary for providing the service will be shared. These third parties have no right to use the shared personal data for any other purpose. For companies, organizations, and individuals with whom we share personal data, we will enter into strict confidentiality agreements, requiring them to handle your personal data according to our agreement and this Privacy Statement, as well as take appropriate confidentiality and security measures. YunExpress will share your personal data with third parties under the following circumstances:
·Share your personal data with related parties of YunExpress. In order to facilitate YunExpress to provide services to you based on the YunExpress website and identify whether the YunExpress account is abnormal, your personal data will be shared with related parties of YunExpress.
·Commissioned Processing: We will entrust external suppliers to assist us in providing relevant services to you. Under this commissioned processing method, the third parties receiving personal data are only authorized to provide services on our behalf according to our instructions. We assume responsibility for their entrusted actions within the scope of the commission. For example, we may entrust suppliers supporting our business, service providers, and other partners to offer technical services (such as SMS verification), transportation, warehousing, customs clearance, last-mile delivery, payment, data storage, or data analysis services.
·Provided to other personal data processors: To fulfill the contract with you or for other reasonable purposes, we may provide some of your personal data to other personal data processors. We will inform you and obtain your separate consent in accordance with the law. The recipient has the right to process the personal data within the scope of the processing purpose, method, and types of personal data that we have informed you about. If the recipient changes the original processing purpose or method, they must obtain your consent again.
4.2 It is important to note that if you authorize a third party to request us to provide all or part of your personal data generated during your use of YunExpress services, you agree that we have the right to verify your identity and the authenticity of the authorization from you and the third party based on our own experience. We also have the right to independently decide whether to agree or refuse to provide such personal data, unless you give us a separate instruction through the contact methods mentioned in this Privacy Statement. For example, if you authorize a third-party financial institution or credit rating agency to obtain specific personal data from you, and they request us to provide your personal data based on this authorization, we will respond to their request and provide it within the scope of your authorization.
4.3 YunExpress will not transfer your personal data to any company, organization or individual, except in the following cases:
·After obtaining your explicit consent, YunExpress will transfer your personal data to other parties;
·Provided as required by applicable laws and regulations, legal procedures, mandatory administrative or judicial requirements;
·In the event of a merger, acquisition or bankruptcy liquidation, if the transfer of personal data is involved, we will require the new company or organization that holds your personal data to continue to be bound by this Privacy Statement, otherwise we will require the company or organization to seek authorization from you again.
4.4 YunExpress will disclose your personal data only under the following circumstances:
·After obtaining your explicit consent, disclose the personal data you designate in accordance with the disclosure method you explicitly agree to;
·In the case of legal requirements, legal procedures, litigation, or mandatory requests from government authorities, we may publicly disclose your personal data. When receiving such disclosure requests in compliance with laws and regulations, we will require the corresponding legal documents, such as summonses or investigation letters. We firmly believe that information requested from us should be as transparent as possible within the bounds of the law. We carefully review all requests to ensure they have a legitimate basis and are limited to data that law enforcement agencies can legally obtain for specific investigative purposes.
·If YunExpress determines that you have violated laws and regulations or seriously breached the relevant agreements and rules of YunExpress, or to protect the personal and property safety of YunExpress' vast number of customers or the public from infringement, YunExpress may disclose your personal data in accordance with laws and regulations, including your illegal acts and the measures taken by YunExpress against you.
4.5 If any of the following circumstances occur, YunExpress does not need to obtain your prior consent to share, transfer or disclose your personal data:
·To fulfill the statutory duties or obligations necessary, such as those directly related to national security, defense security, criminal investigation, prosecution, trial and execution of judgment, or to submit your personal data and goods information to the postal administration in accordance with relevant laws;
·To respond to public health emergencies or protect the life, health and property safety of natural persons in emergency situations;
·To protect your or other individuals' major legitimate rights and interests such as life and property, but it is difficult to obtain your consent;
·Process your personal data that you have disclosed by yourself, or other personal data that has been legally disclosed (such as legal news reports, government information disclosure and other channels);
·According to the law, if YunExpress takes technical measures and other necessary measures to process your personal data, so that the data receiver cannot re-identify specific individuals and cannot be restored, then the sharing, transfer and disclosure of such processed data does not need to notify you separately and obtain your consent;
·Only by sharing your personal data can we deal with disputes or controversies between YunExpress and others or between you and others caused by your actions, such as the goods you shipped infringe the intellectual property rights of a third party, and the right holder requires YunExpress to provide your identity information, contact information, shipment volume and price;
·To protect the personal and property safety of YunExpress, its affiliates, logistics partners, users or the public from infringement;
·Other circumstances prescribed by laws and regulations.

5. What measures does YunExpress take to protect your personal data?

5.1 YunExpress has implemented industry-standard, reasonable, and feasible security measures to protect your personal data, preventing unauthorized access, public disclosure, use, modification, damage, or loss of your personal data. For example, data exchanged between your browser and the server is encrypted using the SSL protocol; we provide secure HTTPS browsing on our website; we use encryption technology to enhance the security of sensitive personal data; we employ trusted protection mechanisms to prevent malicious attacks on personal data; we deploy access control mechanisms to ensure that only authorized personnel can access personal data; and we conduct security and privacy training courses to strengthen employees' awareness of the importance of protecting personal data.
5.2 The important information system of YunExpress has passed the evaluation of China's national information security level protection, and implemented the information security management system and privacy management system based on ISO/IEC 27001 and ISO27701 international standards.
5.3 Your account has security protection features; please keep your account and password information safe. YunExpress will ensure that your information is not lost, misused, or altered through measures such as backing up to other servers and encrypting user passwords. Although these security measures are in place, we also ask you to understand that there is no such thing as "perfect security" on the internet. YunExpress recommends that you take proactive steps, including using complex passwords, changing your password regularly, and not disclosing your account and password information to others. If you discover any leakage of your personal data, especially if your account and password have been compromised, please contact YunExpress immediately so that we can take appropriate action.
5.4 In the event of an unfortunate personal data security incident, YunExpress will inform you according to legal and regulatory requirements: the basic situation and potential impact of the security incident, the measures already taken or planned by YunExpress for handling it, suggestions for you to independently prevent and mitigate risks, and remedial actions available to you. YunExpress will notify you through email, letter, phone call, push notifications, etc., regarding the incident. If it is difficult to individually inform each affected individual, YunExpress will issue a public announcement in a reasonable and effective manner. Additionally, YunExpress will report the handling of the personal data security incident as required by regulatory authorities.

6. How does YunExpress store your personal data and for how long?

6.1 In general, the personal data about you legally collected by YunExpress within the territory of the People's Republic of China will be kept within the territory of the People's Republic of China.
6.2 Due to the nature of our business and the services we provide to you, we may need to transfer your personal data to our affiliates or subsidiaries located outside the People's Republic of China to fulfill our agreements with you or to achieve the purposes outlined in this Privacy Statement. In any case where we transfer personal data, we will ensure that such transfers are protected by appropriate measures no less stringent than those required by applicable Chinese law. Before cross-border transmission or remote access, we will complete the necessary procedures in accordance with relevant personal data protection laws and regulations.
6.3 Unless otherwise permitted or required by applicable laws or regulations, we will only retain your personal data for the purposes of achieving our collection objectives, fulfilling legal obligations, accounting or reporting obligations, or resolving disputes. To determine the appropriate retention period for personal data, we will consider applicable legal requirements, the amount, nature, and sensitivity of the personal data, the risk of unauthorized use or disclosure of your personal data, the purpose for which we process your personal data, and whether these purposes can be achieved through other means. If the retention period exceeds the legal limit, we will delete or anonymize the information. In certain circumstances, we may anonymize your personal data so that it no longer relates to you. We reserve the right to use such anonymized and de-identified information for any legitimate commercial purpose without further notice to you or obtaining your consent.
6.4 YunExpress has a clear retention period for your personal data collected internally according to relevant laws and regulations, and strictly complies with the storage period requirements required by laws and regulations. If you have any questions about the specific retention period, please contact us.

7.What rights can you exercise regarding your personal data?

According to the laws applicable to the use of your personal data, you may have rights related to your personal data. Please note that in some cases, we do not need to fully comply with your requests because such rights may be conditional, or because we must balance your rights with our obligations to process your personal data and protect the rights and freedoms of others. The rights you enjoy in China regarding your personal data are as follows:
Right of access
You have the right to access your personal data at any time, except in cases where laws and regulations provide otherwise. If you wish to exercise this right, you can contact us through the methods specified in this Privacy Statement at any time. The personal data you need to access is usually provided to you electronically. We may require you to verify your identity before providing the necessary information.
Right to rectification
We take reasonable measures to ensure that the information about you we hold is accurate and complete. However, if you believe that the personal data about you we process is incomplete or inaccurate, you may contact us at the contact information specified in this Privacy Statement and request that we modify any incomplete or inaccurate personal data about you.
If we decide to respond to your request for correction, we will also notify the entity from which we received your personal data and require it to correct and supplement it in a timely manner, unless otherwise required by laws and regulations.
Right to erasure
You may have the right to request that we delete your personal data, for example, when the personal data we collect is no longer needed for its original purpose, the personal data has become outdated, we have ceased providing the service, or you have withdrawn your consent (if we are processing your personal data based on consent). However, this requires balancing with other factors. For instance, due to certain legal or regulatory obligations, we may not be able to comply with your request.
If the retention period prescribed by laws and administrative regulations has not expired, or it is technically difficult to delete personal data, we will stop processing except for storage and necessary security measures.
Right to object
You may have the right to object our processing of your personal data for legitimate interests. You have the right to refuse the processing of your personal data for marketing purposes at any time. When you notify us to stop using your personal data for marketing purposes, YunExpress will immediately stop using your personal data.
When you object based on your position in a specific situation, we will no longer process your personal data for other purposes of our legitimate interests unless we have a strong legal basis. Please note that if we cannot process the required personal data for that purpose, we may not be able to provide you with certain services.
Right to withdraw consent
In certain circumstances, we may seek your consent to process your personal data. When we do so, you have the right to withdraw your consent at any time. After you withdraw your consent, YunExpress will stop further processing as soon as possible. However, this does not affect the legality of any processing that has already been carried out before your consent was withdrawn.
Please use the contact information specified in this Privacy Statement to make requests regarding these rights. To ensure security, you may need to provide a written request or otherwise verify your identity. We may first require you to verify your identity before processing your request. We will respond within thirty days.
We will not be able to respond to your request in the following circumstances:
·The information requested is relevant to our legal obligations;
·The information required is directly related to national interests and national defense;
·Require information that is directly related to the public interest, public health and safety;
·The information required is directly related to criminal investigation, prosecution, trial and execution of judgment;
·We have reasonable evidence that you are malicious or intend to abuse your data subject rights;
·The response to the data subject's request will lead to infringement of the legitimate rights and interests of the data subject or other individuals or organizations;
·The information requested is related to trade secrets.

8.How does YunExpress update this Privacy Statement?

8.1 YunExpress may make changes or modifications to this Privacy Statement at any time. Without your explicit consent, we will not reduce the rights you enjoy under laws and regulations. When YunExpress needs to make changes or modifications to this Privacy Statement, it will notify you through announcements.
8.2 If this Privacy Statement undergoes significant changes or modifications, YunExpress will provide more prominent notifications (including push notifications and pop-ups). When we collect additional personal data from you or use or disclose your personal data for new purposes, we will seek your consent again in accordance with applicable legal requirements.
8.3 The material changes referred to in this Privacy Statement include but are not limited to:
·Our service mode has changed significantly. Such as the purpose of processing personal data, the type of personal data processed, the way personal data is used;
·We have undergone major changes in ownership structure, organizational structure and other aspects. Such as business adjustment, bankruptcy and merger and acquisition, etc., which cause changes in ownership;
·The main object of personal data sharing, transfer or public disclosure changes;
·Significant changes in your rights and the way you exercise them with respect to personal data processing;
·When the department responsible for handling personal data security, contact information and complaint channels change;
·When the personal data security impact assessment report indicates a high risk.
8.4 We will also archive the old version of this Privacy Statement for your reference.
8.5 The establishment, execution, interpretation and dispute settlement of this Privacy Statement shall be governed by the laws of the People's Republic of China (excluding Hong Kong, Macao and Taiwan), excluding the application of conflict rules.
8.6 If any provision of this Privacy Statement is wholly or partially invalid or unenforceable for any reason, or is in violation of any applicable law, such provision shall be deemed to be deleted. However, the remaining provisions of this Privacy Statement shall remain valid and binding.

9.How can you contact YunExpress?

9.1 We have set up a special department for personal data protection. If you have any questions, comments or suggestions about this Privacy Statement, you can contact us through the following ways: DPO@ztn.com
9.2 In general, we will reply within 30 days. When we receive requests for rights related to your personal data, questions and inquiries, or when your questions themselves involve significant matters, we may require verification of your identity.
9.3 If you are not satisfied with our reply, especially if our personal data processing behavior infringes on your legitimate rights and interests, you can also seek solutions from Chinese Internet, telecommunications, public security and industrial and commercial regulatory authorities.
9.4The Privacy Statement is written in English and Chinese. And if there is any conflict, the Chinese version shall prevail.