Antom, leading provider of tailored payment solutionsAntom, leading provider of tailored payment solutions

Alipay’s PayFac Data Handling Notice

PayFac Data Handling Notice


The Ant Group provides certain payment facilitation services to our merchants (the “PayFac Services”). These services facilitate e-commerce transactions for those merchants and help them manage their e-commerce businesses.

This “Data Handling Notice” describes what personal data we handle about you, how we use it, how we share it, and your rights and choices. References to “Alipay”, “we”, “us” or “our” in this Data Handling Notice refer to the relevant company(ies) in the Ant Group that are involved in providing the PayFac Services to our merchant(s). Depending on your location, this may include Alipay US, Inc., Alipay (Europe) Limited S.A. and/or ALIPAY (UK) LIMITED (each, a member of the “Ant Group”).  References to “you” or “your” refer to you as the individual shoppers whose personal data we receive when providing the PayFac Services to our merchants. 

When we process your personal data to provide the PayFac Services, we do so in the capacity of a “service provider” on behalf of the merchants making the sale to you.  The merchants are the “business” with respect to your personal data. This means that those merchants are responsible under applicable data protection laws and regulations for ensuring that your privacy rights are respected, including ensuring appropriate disclosures are made to you about data collection and use that happens in connection with the merchants’ products and services.

For information about how the merchant you transact with uses or shares your data, or otherwise about their privacy practices and controls, and your choices and privacy rights, please refer to the applicable merchant’s privacy notice.

Information about how your personal data is handled by Alipay if you use other services provided by the Ant Group is available on our website (https://intl.alipay.com/open and https://global.alipay.com).

1.   WHAT PERSONAL DATA WE COLLECT ABOUT YOU

When providing the PayFac Services to merchants, we collect the following personal data about you:

  • contact information, including name, email address, phone number, billing address, and shipping address;
  • information about your transactions with a merchant, such as payment method, payment card details, payment amount, product/order information, transaction time;
  • records of your complaints relating to a merchant, such as chargebacks and refund information; and
  • identity and verification information for purposes of fraud prevention and identity authentication, such as your age (when purchasing age restricted goods), authorization to use a payment method, government identification numbers, and your image (selfie).
  • device and technical information as below for purpose of fraud prevention and risk control:

1)   information about the device you use to interact with us, and

2)   information from your check-out page via websites or mobile applications, collected automatically through tracking tools. This information includes IP address, device ID and other unique identifier of device, browser/platform type and version, internet service provider, operating system, device operations, and other information regarding your interaction with check-out page.

 

2.   HOW WE USE YOUR PERSONAL DATA

We use your personal data for the following purposes:

  • providing the PayFac Services to, and as instructed by, our merchant customers, including processing e-commerce payment transactions, calculating applicable sales tax, invoicing and billing, and helping customers calculate revenue, pay bills, and perform accounting tasks;
  • sharing your personal data with the respective merchants where instructed to do so by such merchants (including to provide them with analytics to help them troubleshoot and improve their offering);
  • verifying your identity, reducing fraud, and enhancing security in accordance with the instructions of the relevant merchants; and
  • complying with our own legal obligations to prevent fraud, money laundering, and other illegal activity, and to fulfill compliance reporting obligations.

3.   WITH WHOM WE SHARE YOUR PERSONAL DATA

We share your personal data in accordance with the instructions of our merchant customers (for example, to complete the transaction you request, we share your information with card schemes, banks and other financial institutions) and otherwise where legally required to do so (for example, in respect of anti-money laundering, sanction screening and fraud or illegal activity prevention). Please refer to the relevant merchant’s privacy notice for further information about how they share (and instruct us to share) your personal data.

4.   YOUR CHOICES AND PRIVACY RIGHTS WITH RESPECT TO YOUR PERSONAL DATA

The relevant merchant from whom you make a purchase is the “controller” or “business” with regard to your personal data processed through the PayFac Services. They (rather than us) decide how and why your personal data is collected, used and shared, and how long it is retained. As a result, to make a request about your personal data, please contact the relevant merchant directly. If you send a request to us, we will forward that request to the relevant merchant and, where applicable, support them in meeting your request. Please note that your privacy rights under applicable data protection laws are not absolute and are subject to certain exceptions and qualifications that mean they may not always apply.