Privacy notice

Preface

YTO Express (Philippines) Technology Group Corporation (hereinafter referred to as 'YTO(Philippines)') is devoted to maintaining the privacy and security of your personal data. This privacy notice explains how we collect, use, share and protect your personal data.

It attaches great importance to read this privacy notice in order to understand how and why we use your personal data.

Contents

Definition of personal data

How we collect and use (process) your personal information

If you do not provide personal data

Does our website use network analysis technology?

Contract performance

Storage and retention period of data

How do we share data with third parties

Cross-border transfer of data

Rights of data subject

Privacy notice for children

How to protect data security

Contact us

Update of privacy notice

Questions, concerns and complaints

Definition of personal data

Personal data means all types of personal information (any information), recorded in physical or non-physical form, from which the entity holding the information can see the personal identity, or reasonably and directly determine the personal identity, or determine the personal identity directly and definitely when put together with other information.

How we collect and use (process) your personal information?

We collect information to provide details and information about our products, services and promotions to you. We process information to make response to your inquiries or manage future interactive user functions. Generally, the types of common data that YTO(Philippines) collect from you include:

l Register and login an account

Ø When you register to use any of our services, we may collect the following kind of your personal data: personal contact information and device information, such as name, address, phone number, device ID;

Ø Nationality and country of residence.

l Offer the delivery service

Ø Information that enables your shipment to be picked up and delivered. e.g.: name, address, phone number, commodity information, status of your shipment, shipment document and shipment number of the recipient and the sender;

Ø You need to provide the information about ID card and customs clearance to verify your identity and import and export declaration when your goods need to be transported across the border.  

l Contact you

Ø We may use your personal information to satisfy your request, send service message or respond to your consultation if you ask for information or consultation about any of our services.

l Collection and use of device access information

Ø To inquire about YTO(Philippines)’s service points and use the navigation function to get the current location information to help you enter the shipper address, we need to apply to enable geographical location access.

Ø We will verify that your identity is valid by sending SMS verification codes, and we will read the SMS content with your permission.

Ø We need to apply to enable camera and photo album access when you scan the code for sending shipments, making payment, inquiring status of your shipments.

What counts is that your personal information we hold needs to be accurate and up-to-date. Please inform us in a timely manner if your personal information changes during our service period.

Under some circumstances, we may anonymously process your personal data to make it not associated with you any more. In this case, we may use this information without further notification to you.

We collect your data in the following ways:

Ø Fill in our forms (such as feedback form, resume form, contact form, supplier certification form, remittance / cashing form, etc.);

Ø Disclose your personal information through chat tools, telephone, email, SMS or oral communication with our authorized representative;

Ø Social media services (such as Jobstreet, Facebook, Twitter, LinkedIn). We may also collect your personal information from social media platforms and public comments;

Ø Register our other digital services, such as applications, in-station POS machines and other digital interfaces that require digital registration procedures.

If you do not provide personal information

We may not be able to perform the contract we signed or attempted to sign with you (for example, providing products or services to you) if we are legally required to collect personal data, or you fail to provide the data as required in accordance with the terms of the contract we signed with you. In this case, we may have to cancel the products or services you signed with us, but when it happens, we will inform you in time.  

Does our website use network analysis technology?

When you visit our website, the following data will be collected: IP address, host name of access computer, the website you visit, date and duration of visit, notification of successful visit, data volume, identification data information about browser type and operating system. During your visit, temporary storage of the data is necessary so that the website can be delivered to you. Further storage in the log file is to ensure the function of the website and the security of our IT system.

Unless you voluntarily provide the data, other personal information, like your name, address, phone number, or email address, will not be collected.

Once the data is no longer needed for the purpose of data collection, the data will be deleted.

We will use the data to provide you with location-based services (for example, the location of the nearest branch, packaging station, etc.) only if you start geolocation in your browser.  

Use of Cookies

Cookies and similar technologies are applied (hereinafter referred to as "technology") to enable us to confirm the frequency and number of visitors to our Internet pages, so as to configure our services to maximize convenience and efficiency, and give support to our marketing.

For the purpose of legitimate business

We may also use your personal data for the purpose of our legitimate business. This is for our legitimate interests to operate as an enterprise, monitor and improve the services we provide. Where possible, we will anonymize this information. For more information, please contact us through the contact information in this privacy notice.

Contract performance

We will only use your personal data if permitted by law. Most commonly, we will use your personal data in the following cases:

Ø Where we need to perform the contract signed with you;

Ø Where we need to abide by legal obligations;

Ø Where it is necessary for our legitimate interests (or the interests of third parties), and your interests and fundamental rights are no higher than these interests.

We may also use your personal data in the following cases, which may not be common:  

Ø Where we need to protect your important interests (or the interests of others);

Ø Where it is necessary for public interest or official purposes.

Storage and retention period of data

All data are maintained according to the company's retention policy and/or the requirements of specific laws or regulations.

Personal data are stored in our facilities in Singapore and retained pursuant to the above policies, industry standards, laws and regulations, unless you require immediate deletion of your personal data from our systems and databases. Once deleted, your personal data will no longer be searched or included in anonymous searches and will be deleted completely from all storage locations.

Nevertheless, YTO(Philippines) may determine not to approve the access, correction or deletion of information according to the requirements of laws and regulations, and send a notice to the individuals, explaining the reasons for rejection.

Your personal information will be stored in our background system for a period, which will be determined according to the type of such personal information, the requirements of laws and regulations and the compliance with the purpose set forth herein.

How do we share data with third parties

Unless required by law, for contractual purposes, or with your explicit consent, YTO(Philippines) will not share, sell, transfer or disseminate your personal data to third parties now or in the future. For example, it is necessary for you to pass your address and order data to our contractor when ordering products.

However, in the scope of data processing in this privacy notice and under the corresponding legal basis, we will transmit your data to the following categories of recipients:

Ø Our service provider(s). We may share your personal data with other companies that provide certain services on our behalf. These services may include processing payments, customer service and marketing assistance, business and sales analysis, advertising, analysis, information search, credit reference, and support to our website and IT functions. These service providers may obtain or access your personal data only for the purpose of providing these services to us or on our behalf.

Ø Our business partner(s). We may share your personal data with business partner(s) who has/have signed contracts with us related to the services we provide.

Ø Agent(s). If you choose an agent or authorized representative to arrange the performance of the services you apply, we may share your personal data with them.

Ø Our affiliate(s) and subsidiary(ies). As part of our regular performance reporting activities, we may share your personal data with other entities of our Group in business restructuring or Group restructuring, or for system maintenance support and data hosting.

Ø Law enforcement agencies and public institutions. Transfer is required by applicable law (e.g. performance of legal obligations during freight handling).

Third-party SDK list

We may use the services provided by the associated APPs, or access the software development kit (SDK) provided by a third party and the products provided by other third-party suppliers to achieve the above purpose in order to ensure the stable operation of the application or realize relevant functions. The third party we access may be involved in the collection of user information. The functions and services of the third-party SDK are constantly updated and developed. The data types and other contents may change due to the adjustment of functions or strategies. Please refer to the introduction of personal information publicized by third parties. The providers of these third party websites, application programs, products and service and us shall respectively take independent responsibility for personal information protection based on laws and agreements between the parties.

Cross-border transfer of data

In performance of our agreement with you, we need to transfer the personal data you provided to us to other countries in consideration of our business size and the location of our shareholders, other business partners, customers and other service providers.

In order to ensure that your personal data is processed in accordance with the provisions of this privacy notice, we will take proper measures, including the establishment of appropriate contractual mechanisms. For more information, please contact us through the contact information in this privacy notice.

Rights of data subject

You have the following rights:

Ø You can ask for information about what personal data is stored;

Ø You can request us to correct, delete or block your personal data, provided that these actions are allowed by law and meet the existing contract conditions;

Ø You can request to receive your personal data in a structured, common and machine-readable format.

Ø You have the right to raise objections if we process your personal information for the purpose of direct marketing;

Ø You have the right to withdraw your consent at any time in the future;

Ø You can ask that your personal data be transferred to another party, subject to the law and existing technology.

Please contact us in writing through the contact information in this privacy notice when you want to review, verify, correct or request the deletion of your personal data, object to the processing of your personal data, or require us to transfer a copy of your personal information to another party.

We may need to ask you for specific information to help us identify you and ensure that you have right to access to information (or exercise any other rights you have). This is another proper security measure to ensure that personal information is not disclosed to anyone who has no right to receive.

We may charge you a minimum and reasonable fee based on the administrative fees to cover the cost of verifying information requests and finding, retrieving, reviewing and copying any requested material.

Privacy notice for children

YTO(Philippines) is very sensitive to privacy issues and will never directly collect children's personal data without the consent of parents or guardians. Where personal information of a minor is collected for using our products or services with the consent of the parents or guardian, YTO(Philippines) will use, share, transfer or disclose such information only if permitted by law and regulations, with the express consent of the parents or guardian, or if necessary for the protection of the minor. If we find ourselves having collected personal information of children without getting approval of provable parents in advance, we will try to delete related data as soon as possible.

How to protect data security

We take proper measures to ensure that the personal data we collect, use or disclose is accurate, complete and up-to-date. In order to protect your personal data from loss, abuse, modification, unauthorized or accidental access or disclosure, change or destruction, we take strict measures to enforce this privacy notice within YTO(Philippines). We have implemented technical, organizational and physical security measures. In addition, we restrict access to your personal information, which can only be known to those who have legitimate needs, including relevant employees, service providers, business partners, agents and other third parties. They only process your personal information in a secure manner with the obligation of confidentiality according to our instructions or other agreements.

The Internet environment is not 100% secure, and we will try our best to ensure or guarantee the security of any information you send to us.In the event of an unfortunate personal information security incident, we will promptly inform you of the situation in accordance with the requirements of laws and regulations.We will also proactively report the disposition of personal information security incidents in accordance with regulatory requirements.

If you notice that your personal information is being disclosed, please contact us immediately through the contact information specified in this Policy so that we can take appropriate action in a timely manner.

Contact us

Data Protection Officer

Name of DPO: Eric Swell

Contact phone: (02) 845-99999

E-mail address: ytoexpressphilippines@gmail.com

Address: the Finance Center 26th St. cor 9th ave. BGC TAGUIG City, Philippines

You have the right to complain to NPC at any time. However, please contact us first since we expect to have a chance to address your problem before you contact NPC.  

Update of privacy notice

We reserve the right to update this privacy notice at any time. When we make any substantive update, we will provide you with a new privacy notice. Any changes to this privacy notice will be officially announced on this website. We encourage data subjects to check for such updates on a regular basis. Changes shall not be retroactive or change the way we process previously collected personal data without your consent only if required by law. Maybe we inform you of the processing of your personal information in other ways from time to time.

Questions, concerns and complaints

Please contact us in the way listed in this notice when you have any question, concern, complaint or would like to exercise your rights.