Privacy and Personal Data Policy
Last updated: 5 November 2026. This policy explains how 1688buyer collects, uses, retains, and shares data when you visit the website, create an account, or use our services. It applies together with applicable personal data protection and consumer protection laws.
1. Data we process
Depending on how you use the service, data may include your phone number and OTP verification status; display name and email (if provided); recipient name, phone number, and delivery address; viewed or carted products, orders, support conversations, and complaints; balance, deposits/withdrawals, and transaction references; and technical data needed for security, such as session cookies and access logs.
We will not ask you to disclose a one-time OTP to staff. Do not send full payment card details, bank passwords, or unnecessary sensitive information through chat or email.
2. Purposes and grounds for processing
We use data to create and secure accounts; send and verify OTPs; receive purchasing requests; manage carts, addresses, orders, payments, delivery, and after-sales support; respond to enquiries and complaints; prevent fraud and protect systems; and meet recordkeeping, accounting, or lawful authority requirements.
We process data based on your choices or consent where required, to provide a service you request, to protect security and legitimate interests, or where permitted or required by law. If you do not provide data needed for verification or an order, some features may not work.
3. Sharing data
We share only the data needed with relevant staff and service providers to operate the website, deliver OTPs, process payments, source goods, store or ship orders, support customers, or resolve incidents. Depending on an order, recipients may include suppliers/sellers in China, warehouse or shipping providers, payment gateways/banks, OTP providers, and technology infrastructure providers.
We do not sell personal data. Data may be disclosed to competent authorities when required by law, or as necessary to protect rights and safety or resolve disputes. Recipients should use the data for the relevant purpose and apply appropriate safeguards.
4. Processing or transfer outside Vietnam
Purchasing goods from China may require sharing minimum order, recipient, or delivery details with suppliers, warehouses, or carriers outside Vietnam. Some OTP, payment, or infrastructure providers may also process data where their systems are located. Cross-border processing or transfers are limited to what is needed and handled under applicable legal requirements.
5. Retention and security
We retain data while an account is active and as needed to provide services, handle transactions or complaints, maintain security, reconcile records, or meet legal retention duties. When no longer needed, data will be deleted, destroyed, or de-identified through appropriate procedures, except where it must be retained for legal requirements or dispute resolution.
We use appropriate organizational and technical safeguards to reduce unauthorized access, loss, or misuse. No transmission or storage method is completely secure. If a data incident occurs, we will respond and notify as required by law.
6. Your rights and choices
Under applicable law, you may have the right to be informed; access, review, correct, or update data; give, refuse, or withdraw consent where permitted; request deletion or restriction, or object to processing where grounds apply; and lodge a complaint or seek protection of your rights. Withdrawal does not invalidate processing lawfully completed earlier and may affect features that depend on the data.
To make a request, email [email protected] or call 039.246.1688. Describe your request and account details; we may need to verify your identity. Some requests may be limited where data must continue to be processed or retained by law.
7. Cookies and session technologies
The website uses cookies or session storage needed to maintain sign-in, protect requests, and preserve cart state. Blocking these essential technologies in your browser may prevent some features from working. If non-essential analytics or marketing tools are introduced, relevant choices and notices will be provided as required by law.
8. Children, changes, and contact
The service is not intended for children to create transactions on their own. If you are a parent or guardian and believe a child has submitted personal data, contact us so we can review the request.
We may update this policy when our operations or legal requirements change. The current version and update date will appear on this page. For privacy questions or requests, contact [email protected] or 039.246.1688.