1.IN A NUTSHELL

This privacy notice (the “Privacy Notice” or “Notice”) explains why and how UnionPay International Co. Ltd (“UPI” or “we”) may process your personal data.

•What does “personal data” mean?

Personal data means any information that can be linked directly or indirectly to identified or identifiable individuals.

•Who is UPI?

UPI is a company incorporated under the laws of the People’s Republic of China (“PRC”) with its registered office at Floor 2-7, No.6 Dongfang Road, Pudong New District, Shanghai, PRC.

UPI is an international company established in numerous countries/regions across the world.

If you have any questions in relation to data protection matters, you can write to us at the abovementioned address.

•Why does UPI process personal data?

UPI operates a card scheme for payment services and processing payment transactions. 

•What is UPI's role in relation to your personal data?

In some cases, UPI determines the purposes and means of how your personal data will be processed and this Privacy Notice is intended to explain how such personal data will be used.

•What is the key information contained in this Privacy Notice?

You will find relevant information on the personal data we process about you, the purposes and legal bases for the processing of this data and your rights.

2.COLLECTION AND PROCESSING YOUR PERSONAL DATA   

You will find that we collect and process your personal data for the following type of service:

• helping you get “U-Plan” e-coupons;

• showing discounts or privileged services offered by merchants near you.

3.THE PURPOSES AND SCENARIOS OF THE PROCESSING OF YOUR PERSONAL DATA

Your personal data will be used for the following purposes and scenarios:

-Registering an account and getting “U-Plan” e-coupons.

4.THE CATEGORIES OF DATA SUBJECTS AND OF PERSONAL DATA WE PROCESS ABOUT YOU

The main types of personal data we process are the following: 

• Collecting and processing the following personal data when you getting “U-Plan” e-coupons: 

-identification information (date of birth, gender)

-contact information (email address, phone number); 

-electronic identification data (username, password, IP address, device type, serial number of the device, operation system, Wechat Open ID, Union ID).

• Collecting and processing the following personal data when showing you discounts or privileged services offered by merchants nearby:

-your positioning latitude and longitude.

5.THE LEGAL BASES ON WHICH WE PROCESS YOUR DATA

UPI processes personal data on the following legal bases:

• With your consent to the processing of your personal data for one or more specific purposes (example: in case of use of cookies or direct marketing);

• To fulfil a contract with you or between you and a third party (in particular a UPI Member), or in order to take steps at your request before entering into a contract (example: in case of use 

of a credit card issued by a UPI Member);

• To comply with the laws that are applicable to us worldwide; and/or

• When we have legitimate interests in processing your data, except where such interests are overridden by your interests or fundamental rights and freedoms (example: compliance with a 

legal obligation under a foreign state, internal research, reporting and analysis).

6.YOUR RIGHTS

Accessing your personal information

We understand that you may like to know what personal data we hold about you. We are happy to assist you with your request. To protect your personal data, however, we require that you 

prove your identity to us at the time your request is made: you can contact us in writing via email or letter including your signature and a copy of a signed government issued identification 

document.

UPI reserves the right to decline access to your personal information under certain circumstances as permitted by law. If your personal data is not disclosed to you, you will be provided with 

the reasons for this non-disclosure.

Other rights

You may also be entitled to:

-object to the processing of your personal data;

-opt out from processing of your personal information for direct marketing purposes;

-request the restriction of the processing of your personal data;

-request the correction and/or deletion of your personal data;

-withdraw your consent to the processing of your personal data (where UPI is processing your personal information based on your consent);

-request the receipt or transmission to another organisation, in machine-readable form, of the personal information you may have provided to UPI;

-request de-registration of your account;

-lodge a complaint with a supervisory authority; and

Where you are given the option to share personal information with UPI, you can always choose not to do so.

If you do not wish to receive marketing information from UPI, you may contact us via phone number 95516. You will always have the ability to accept or decline any form of communication 

from UPI. You may unsubscribe from electronic marketing communications at any time by selecting the “unsubscribe” link included in such communications.

If you object to the processing of your personal information, or if you have provided your consent to processing and you later choose to withdraw it, we will respect that choice.

This could mean that we will be unable to perform the actions necessary to achieve the purposes of processing data for you as described above (see article 2) and that you may be unable 

to use our services.

After you have chosen to withdraw your consent, UPI may be able to continue to process your personal information to the extent required or otherwise permitted by law.

If at any time you wish to exercise any of these rights, you can do so by contacting us via phone number 95516

7.THE  RECIPIENTS OF YOUR PERSONAL DATA

Your personal data (as described in Article 4) will be shared and transferred. The recipients of your personal data are:

• UPI’s staff, establishments and affiliates: these are located all around the world; 

• All other necessary parties for the network to function efficiently and to foster innovation.

Such recipients shall undertake all necessary measures to keep your personal information confidential.

8.SECURITY

UPI has installed a strict security system to prevent any access to your personal data by any unauthorized persons, including the staff of UPI. We have minimized authorised and train 

staff for processing personal data. As such, all staff of UPI and any third party who are authorized to have access to your personal data will be required to strictly comply with the 

non-disclosure obligations.

Appropriate technical and organisational measures have been implemented to prevent from unauthorised or unlawful processing of your personal data and against accidental or unlawful 

destruction, loss, alteration, unauthorised disclosure of, or access to personal data transmitted, stored or otherwise processed. 

9.COOKIES

For further information, please refer to UPI’s cookie policy.

10.DATA RETENTION

Your personal data will be stored within the People’s Republic of China for the period of time required by applicable law. This may involve retaining data following your transaction. 

We will delete your personal data once it is no longer required for any of the purposes described above.

In order to determine the amount of time we will store your personal data we take into consideration the role and function of the information, type of products and services, nature 

of the relationship between you and us and statutory requirement of retention period made by applicable laws and regulations.

11.LINKS TO OTHER WEBSITES

You may find links to access the websites of other companies on our official website or in the material we provide to you. We recommend that you read the privacy policies of these 

other websites, as this Privacy Notice does not apply to the processing of your personal data by them and UPI is not responsible for the processing of your personal data on external 

websites.

12.CHANGES IN PRIVACY NOTICE

We may update this Privacy Notice from time to time – in particular in case of change of law, of guidance from competent authorities or of UPI’s internal policies. In that case, we 

will share with you the updated Privacy Notice through our website, and, in certain circumstances, we may seek your consent.