Privacy Policy

Legal

Privacy Policy

Back to home
Draft for review. This document is a template and does not constitute legal advice. It should be reviewed by a qualified Australian legal practitioner before publication. Text in [SQUARE BRACKETS] are placeholders to be completed.

Last updated: [EFFECTIVE DATE]

[COMPANY LEGAL NAME] (ABN [ABN]) (we, us, our or Yiwu Market Australia) operates the Yiwu Market Australia platform (the Platform), a business-to-business marketplace connecting overseas suppliers with Australian and regional retailers. We are committed to protecting your privacy and handling personal information in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the thirteen Australian Privacy Principles (APPs).

This Privacy Policy explains what personal information we collect, how we use and disclose it, and how you may access or correct it. By using the Platform you agree to the handling of your personal information as described in this Policy.

1. The information we collect

The types of personal information we collect depend on your role on the Platform (platform staff, supplier organisation, or retailer organisation) and may include:

  • Account information — name, email address, username and a securely hashed password.
  • Business and organisation details — company name, business address, contact details, and the role and membership of users within an organisation.
  • Compliance and product information — product listings, certifications (such as CE, RoHS, ISO or ASTM), and compliance documents you upload (for example business licences, insurance, factory audits or export licences).
  • Order information — orders, quantities, pricing, and fulfilment and shipping details.
  • Payment information — payments are processed by our third-party payment provider (Stripe). We do not store full card numbers on our systems; we may retain a record of transactions and limited payment metadata.
  • Communications — correspondence with us, including support and verification emails.
  • Technical and usage information — IP address, device and browser information, and information collected through cookies and similar technologies.

2. How we collect personal information

We collect personal information:

  • directly from you when you register, complete forms, upload documents or contact us;
  • automatically as you use the Platform (for example, through cookies and server logs); and
  • from third parties where reasonable and practicable, such as our payment provider or your organisation.

3. Why we collect, hold and use personal information

We collect, hold and use personal information to:

  • create and administer accounts and organisations;
  • operate the marketplace and facilitate orders between suppliers and retailers;
  • verify supplier compliance and product certifications;
  • process payments and issue tax invoices;
  • communicate with you, including service, security and verification messages;
  • maintain the security and integrity of the Platform; and
  • comply with our legal and regulatory obligations.

4. Disclosure of personal information

We may disclose personal information to:

  • Other Platform participants — for example, disclosing order and contact details to a supplier and retailer as reasonably necessary to fulfil an order;
  • Service providers — including our payment provider (Stripe), hosting and infrastructure providers, and email delivery providers, who handle personal information on our behalf;
  • Regulators and authorities — where required or authorised by law; and
  • Professional advisers and parties involved in a corporate transaction (such as a sale of business), subject to confidentiality.

We do not sell your personal information.

5. Overseas disclosure (APP 8)

Because the Platform connects overseas suppliers with Australian retailers and operates across multiple regions, personal information may be disclosed to, or accessible from, recipients located outside Australia, including [DATA HOSTING LOCATION], the People's Republic of China and Singapore. Where we disclose personal information overseas, we take reasonable steps to ensure recipients handle it consistently with the APPs.

6. Direct marketing

We may send you marketing communications about the Platform and related services where you would reasonably expect this or where you have consented. You may opt out at any time using the unsubscribe facility in our messages or by contacting us. We handle electronic marketing in accordance with the Spam Act 2003 (Cth).

7. Cookies

We use cookies and similar technologies to keep you signed in, remember preferences and understand how the Platform is used. You can control cookies through your browser settings, although some features may not function correctly if cookies are disabled.

8. How we keep personal information secure (APP 11)

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These steps include encryption in transit, hashing of account passwords, access controls, and automatic logout of idle sessions. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Data retention

We retain personal information only for as long as necessary for the purposes described in this Policy or as required by law. When personal information is no longer required, we take reasonable steps to destroy or de-identify it.

10. Notifiable Data Breaches

We comply with the Notifiable Data Breaches scheme under the Privacy Act. If we become aware of an eligible data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required.

11. Accessing and correcting your information (APP 12 and 13)

You may request access to the personal information we hold about you and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. To make a request, contact us using the details below. We may need to verify your identity before acting on a request, and in limited circumstances permitted by law we may decline access, in which case we will explain why.

12. Children

The Platform is a business-to-business service and is not directed at, or intended for use by, children. We do not knowingly collect personal information from children.

13. Complaints

If you have a privacy concern or complaint, please contact us using the details below. We will acknowledge and investigate your complaint and respond within a reasonable time. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at www.oaic.gov.au.

14. Changes to this Policy

We may update this Privacy Policy from time to time. The current version will always be available on the Platform, and the date at the top indicates when it was last updated.

15. Contact us

For privacy enquiries, access or correction requests, or complaints, please contact:

  • Privacy Officer, [COMPANY LEGAL NAME]
  • Email: [PRIVACY CONTACT EMAIL]
  • Address: [REGISTERED ADDRESS]