Privacy Policy
X BAG (hereinafter referred to as "we", "us", "our") is committed to complying with the requirements of the Hong Kong Personal Data (Privacy) Ordinance ("Privacy Ordinance") to protect the personal data and privacy of all users of this mobile application ("Application") and website (hereinafter referred to as "User" or "you").
Please read this Privacy Policy carefully to understand how we collect, use and protect your personal data when you use our services through our products (including our websites, applications, etc.). When you use the products and services we provide, you agree that we collect, use, store, transfer and process your personal data in accordance with this Privacy Policy.
1.About Us and Contact Us
We are XISHI HONG KONG COMPANY LIMITED, located at Room 2705, 27/F, China Resources Building, 26 Harbour Road, Wan Chai, Hong Kong, China. If you have any questions about this Privacy Policy or the way we handle your personal data, please contact us by email at support@xbag.life .
2.We respect your privacy rights
You have legal rights to your personal data. You are free to choose whether to use our services and what personal data to provide to us. For the purpose of providing services and ensuring the performance of the contract, some personal data is necessary to use our services.
When you use our services, you can enjoy the following rights:
Right of access: You have the right to request access to the personal data we hold about you.
Right to correction: You have the right to request that we correct your personal data held by you to ensure its accuracy.
Withdraw direct activity authorization: If you do not want to receive our event information, you can unsubscribe at any time. In this case, we will not be able to send you promotional information such as advertisements, and you may miss out on activities and offers.
If you wish to exercise the above rights, you can log in to the application and access your account to do so by yourself, or you can submit your above rights or other requests through the support email, and we will respond to your request as soon as practicable. We will need a reasonable amount of time (depending on the complexity of the request) to process your request, and may require you to provide further information to verify your identity and confirm that you have the right to make the request. Please note that depending on the nature and scope of your request, we may not be able to continue to provide you with services; if your request may violate laws and regulations or infringe on the legitimate rights and interests of other third parties, we may not be able to meet the request. We may also charge a reasonable fee for your request, but we will inform you of the specific amount of the fee in advance.
You can delete your personal information by contacting us or by self-service. You can delete your account by clicking [ Settings ], [ Deregister Account ]. You can also contact us by email to help you delete your personal information.
3.Personal data we collect from you
Personal data refers to information directly or indirectly related to you, including your name, mobile phone number, email address, etc. We will provide you with services and conduct business operations through this application , website or other necessary tools and systems. We will collect, process and store the following categories of your personal data when providing relevant services.
1.Personal information you actively provide to us. When you register an account, use our services or contact us, we will collect the information you provide to us, such as your name, location, contact information (such as email, phone number), identification information (such as date of birth), payment details (such as bank card information, etc.), account information (nickname, social media links), content published through this application , etc.
2.Your device information. Depending on the specific scenario, we will collect technical information from the device you use and statistical data on the use of our services through the device, such as your location information, log information, IP address, and the operating system version, language, screen size and other device hardware and software features you use.
3.Your order records when using the App. When you use this App , we will collect order records related to you, such as the selected bakery , store, restaurant , comments on the order, bag collection status, payment method information, etc.
4.Any combination, derivative or updated version of the above-mentioned actively provided information, device information and other personal information, as well as other information that you may provide (automatically or manually) or collect by us when using specific functions of this application.
5.In order to enable you to share password content or participate in activities, we may access the content in your device clipboard with your permission, including text, images and videos. For example, if you choose to actively share content from a third-party platform, or choose to paste the content you copied from the clipboard to the platform, we will access the information stored in your clipboard.
6.If you have submitted personal information of a third party when using the application , please confirm that you and the third party have read and agreed to this privacy policy before providing personal information. Once you provide such information in the process of using our services, we will consider that you have the right to process such information and there is no reason/defect/scenario that violates any laws, regulations or infringes on the legal rights of any third party.
7.In order to complete identity verification, ensure account security, confirm transaction status and provide you with after-sales and dispute resolution, we may obtain your personal information from a third party after you authorize us (for example, through the transaction object you choose and the third-party information system and payment institution directly involved in the transaction to collect your transaction, payment and other information related to the transaction progress, so that we can process your order and ensure the smooth completion of the service, or better prevent fraud, false orders and other malicious behaviors).
4.Use of your personal data
We will use your personal data for the following purposes described in this Policy in accordance with relevant laws and regulations and based on the principles of legality, necessity and appropriateness.
1. Help you become our user
When you register as our user, you need to provide your name or nickname, contact information (including but not limited to email address and phone number) to create an account, and complete relevant online identity identification information (such as avatar, nickname and login password, etc.). If you choose to authorize the use of a third-party account to log in, we will obtain your shared account information (such as nickname, avatar, third-party user ID, email address, gender, etc.) from the third party for quick login. We will use your personal information in accordance with the agreement with the third party and in compliance with relevant laws and regulations.
2. Provide you with information display based on geographic location
In order to provide you with display and search services for surrounding goods/services and improve our service performance, efficiency and functions, we will collect location information, log information, etc. generated during your use of our services with your authorization. Such information will be used to protect your service experience, such as estimating the actual distance between the merchant and you to facilitate your consumption decision, recommending nearby categories and discount information, displaying various exclusive activities you can participate in and surrounding merchant stores participating in the activities, etc. You can turn off the location permission in the system of your mobile device to stop us from collecting your location information, but you may not be able to use the services we provide to you based on your geographic location, or you may not be able to achieve the expected results of the relevant services.
3. Provide you with order placement and order management functions
When placing an order, you need to provide the mobile phone number, contact information (such as name, mobile phone number, etc.), location information, service preferences, etc. corresponding to your account according to the type of service you choose. When an order is canceled or an abnormal situation occurs, we may send you information so that you can know the situation in time. In order to show you the order information of your account and facilitate your management of order information, we will collect the order information generated during your use of our services.
4. Provide you with collection and sharing functions
In order to help you manage your preferences, find users with common interests, get an easier access experience, share with third parties, etc., you can collect merchants you are interested in and share information with third parties through functional components. We will collect the log information generated when you use the above functions for displaying to you on your personal homepage, enabling online management, initiating sharing, and recommending users with common interests to you.
5. Provide you with delivery services
You need to provide the recipient's name, mobile phone number, and delivery address so that your order can be delivered and completed safely and accurately.
6. Provide you with the function of writing reviews and other information publishing
When you actively comment on a merchant's products/services or post other content, we will collect the information you post and display your nickname and posted content, etc. If you choose to post your review anonymously, we will not display your nickname.
7. Help you complete payment
When you pay for an order, we need to collect your order information, reconciliation information and other necessary information required by law and share it with our third-party payment partners to confirm your payment instructions and help you complete the payment.
8. Providing you with support services
When you contact our support staff, we will use your personal information to verify your identity and provide support. When you need us to provide services related to your order, we may query your relevant order information to provide you with appropriate assistance and processing; when you need support staff to help you correct relevant information (such as your contact information, etc.), you may need to provide other information (such as image video evidence, etc.) in addition to the above information to complete the correction. If you contact us, your contact content and the above information provided may be recorded so that we can provide support services and improve our business.
9. Provide you with security
In order to improve the security of your use of our services and more accurately prevent phishing fraud and Trojan viruses, we may use or integrate your personal data (such as device data, order records), including device model, hardware serial number, device MAC location, IP location, unique device identifier (such as IMEI/MEID/IMSI/AndroidID/IDFA/IDFV/OAID, SIM card IMSI, ICCID information and other device identifiers), sensor information (such as acceleration sensor, gyroscope sensor), WIFI scan results (such as WIFI list, SSID, BSSID). We also collect application crash information, performance information, network diagnostic information, etc., and comprehensively judge your account and transaction risks based on your usage habits and commonly used software information, including identity verification, prevention, discovery, and investigation of possible fraud, network viruses, network attacks and other security risks, as well as violations of our or related party agreements, policies or rules, so as to ensure the security of your account, transaction security and system operation, meet the relevant requirements of laws and regulations and our agreement rules, and protect the legitimate rights and interests of you, other users, us or related parties. If any such decision has negative consequences for you and you disagree with those consequences, you may contact us by email. In such case, we will independently evaluate your case.
10. Other legitimate business purposes
For example, to provide you with all kinds of documents and certificates required by law, to protect the life and property safety of you and other users, to ensure the stability and security of our products and services, to protect our other legitimate rights and interests, to fulfill various obligations such as taxation required by laws and regulations, etc. We may use your personal information for other purposes, and we will provide you with specific instructions or obtain your consent at that time.
5. Disclosure and Sharing of Personal Data
We will keep your personal data strictly confidential, but we may provide such personal data to the following parties (whether in or outside Hong Kong) for the purposes set out in Article 4 above:
1. Our Affiliates. We may share your personal information with our affiliates as necessary to achieve the above purposes, including the effective use of resources, ensuring the normal operation of our business processes, assisting customer service requests, conducting legal assessments or implementing security measures for information technology and platforms.
2. Agents, contractors, professional consultants or third-party service providers (including their employees, directors and officers) hired by us, who are under a duty of confidentiality to us and who provide administrative, communications, computing, payment or other services (including but not limited to transaction processing, insurance, customer service, technical services, marketing services) in connection with our operations, maintenance and other services and products we provide.
3. Merchants and other entities related to your order, to complete bag collection services and other purposes.
4. Entities or potential entities with whom we conduct any merger, acquisition, financing transaction or joint venture. In the event of a corporate reorganization and/or merger or transfer (including part or all of assets or equity) (between us and a third party), we may disclose or transfer your personal data, which will be used, held, processed or retained by them for the purposes described in this Policy.
5. Law enforcement agencies, governments, regulators or any other organizations to whom we are obliged or expected to disclose personal data in accordance with any applicable laws, regulations or business cooperation arrangements (including cooperation arrangements with any card issuing organizations or payment networks).
In order to ensure the realization of X BAG App related functions and the stable operation of the application, we will share necessary data with third parties through the application programming interface (API) and software development kit (SDK). Different versions of third-party SDKs will be different. We will conduct strict security testing on third parties and agree on data protection measures.
6. Direct Marketing
If you agree or indicate that you do not object to receiving our promotional marketing information, we will use your contact information and other personal information to send you information about our products or services, advertisements and event information that may be of interest to you, our affiliates or partners from time to time via email, text message, telephone or other media now known or available in the future.
In order to improve our services and listen to customer opinions, we may also send you customer survey questionnaires. We sincerely ask you to provide real feedback and sincere opinions.
The above direct marketing offers, advertising information and questionnaires may be personalized, that is, we may push content to you based on your interests and dietary preferences according to your consumption history, order records, bag picking location, etc. At the same time, in order to evaluate the effectiveness of direct marketing activities, we will also record and analyze performance indicators related to direct marketing activities, such as the opening rate and click-through rate of content.
We may provide your personal data to third parties with whom we have business referrals or similar business relationships for the purpose of marketing their designated products and services to you. Such third parties include (i) our affiliated companies, and (ii) business partners.
Marketing from us , you will not receive any direct marketing information. You can choose to unsubscribe at any time. In this case, we will store your contact information in the list of people who do not agree to receive marketing to ensure that we can continue to respect your objection.
7. Push Notifications
We may also send you push notifications from time to time to provide you with account and service updates. If you do not want to receive such messages, you can turn off the relevant function on your device.
8. Cookies
To ensure the normal and efficient operation of the website and provide you with a more relaxed access experience, we will use small data files called Cookies. Cookies will help you call up your information when you browse our website in the future, simplify the process of filling in your personal information (such as one-click login, etc.); protect your information security, etc. You have the right to accept or reject Cookies. You can manage or delete Cookies according to your preferences, such as clearing all Cookies saved in your computer, mobile device or software, but you may not be able to fully experience some of our convenient and secure service features.
9. Security Measures and Data Preservation
1. We take all reasonable measures (including technical, administrative and physical protection measures) to better protect your personal information processed by us from loss, misuse and unauthorized access, disclosure, modification and destruction. Please be aware and understand that the Internet is not an absolutely safe environment. We strongly recommend that you use a safe method and complex password to help us ensure the security of your account. If you find that your personal information has been leaked, especially if your account or password has been leaked, please contact us immediately according to the contact information provided in this privacy policy so that we can take appropriate measures.
2. We will only retain your personal data for the period necessary to achieve the purposes described in this policy, unless there is a mandatory retention requirement under laws and regulations or it is in the public interest not to delete such data. We will adopt different deletion rules based on the processing purposes and specific circumstances of different data. After the retention period, we will process your personal data in accordance with the requirements of applicable laws, including deleting personal data or taking anonymization measures.
10. Third-party services
For your convenience or reference, we may provide you with links to other websites and services (including applications and applets operated by third parties). These services and websites may operate independently and may have their own privacy notices or policies. We strongly recommend that you review such notices or policies before using any of their services or conducting any activities on this website. If you visit any linked website that is not owned or controlled by us, we will not be responsible for its content, its privacy practices and its service quality.
11. Changes to this Policy
To ensure compliance with relevant laws and regulations, we reserve the right to change this privacy policy and will update it from time to time. All changes to the privacy policy will be announced on the website or application to notify you to understand and know in time. Please check this page regularly to understand our latest privacy policy. If major changes are made, we may send you a separate notice. After we issue an update notice or notification, if you continue to use our products or services, you will be deemed to have been notified and agree to the updated statement, and agree to the updates regarding the collection, use, storage, transfer and disclosure of your personal information.
Last updated: June 2024
X BAG access to third-party SDK directory
In order to ensure the realization of X BAG App related functions and the stable operation of the application, we may access the software development kit (SDK) provided by a third party to achieve related purposes. Different versions of third-party SDKs will be different. We will conduct strict security monitoring of the software tool development kit (SDK) used by our partners to obtain information to ensure data security. You can view the third-party data use and protection rules through the following link.
Third Party Company Name：Shenzhen Tencent Computer Systems Co., Ltd.
Product service：Android Location SDK
Involving personal information：OAID, system properties, operating system and version, system settings, operator base station information (Cell id), WIFI information (WiFi status, WIFI parameters, nearby WIFI list, connected WIFI, SSID, BSSID), sensor information (gravity sensor, gyroscope sensor, acceleration sensor, magnetic field sensor, rotation vector sensor), Bluetooth information, precise location information (GPS information).
scenes to be used：When the user uses the positioning function, the mobile terminal device provides the user with positioning information
purpose of usage：Provide location information to users
Sharing method：SDK local acquisition
Third-Party Links：
Third Party Company Name：Shenzhen Tencent Computer Systems Co., Ltd.
Product service：Mobile push SDK
Involving personal information：(1) Device information (mobile phone model, system type, system version, etc.) is used for labeling push and identifying whether it is a real device. Network information (network type) supports different types of push according to different network types. Application data (delivery, click, exposure, etc. generated during the push process) is used for push business data statistics. (2) (optional information, depending on the developer's settings) Account binding information (QQ number, WeChat Union ID, mobile phone number, email address, etc., depending on the push channel you choose) is used for push data processing based on account information: through de-identification, encrypted transmission and other security methods
scenes to be used：Push messages on mobile devices
purpose of usage：Provide users with notification information push function
Sharing method：SDK local acquisition
Third-Party Links：
Third Party Company Name：Huawei Software Technologies Co., Ltd.
Product service：Huawei push SDK
Involving personal information：(AppID, push service and HMS Core application version number, Huawei push SDK version number, application version number and application package name), device identifier in this application (AAID and Push Token), device hardware information (device type, device model), system basic information (system type, system version), system setting information (country code)
scenes to be used：Used to push messages on Huawei devices
purpose of usage：Provide users with notification information push function according to user models
Sharing method：SDK local acquisition
Third-Party Links：
Third Party Company Name：Guangdong HuanTai Technology Co., Ltd.
Product service：OPPO pushes SDK
Involving personal information：Device related information (OAID, User ID, Google Advertising ID, mobile phone Region settings, device model, mobile phone battery level, mobile phone operating system version and language), application information (app package name and version number, running status), push SDK version number, network related information (IP, domain name connection results, current network type), message sending results, notification bar status (notification bar permissions, user click behavior), lock screen status (whether the screen is locked, whether lock screen notifications are allowed)
scenes to be used：Used to push messages on OPPO devices
purpose of usage：Provide users with notification information push function according to user models
Sharing method：SDK local acquisition
Third-Party Links：
Third Party Company Name：Vivo Mobile Communications Co., Ltd.
Product service：VIVO push SDK
Involving personal information：Device identification information in this application (regId of vpush), application software information using push service (application package name, version number, APPKEY, PushSDK version), device type, basic system information (system type and system version)
scenes to be used：Used to push messages on VIVO devices
purpose of usage：Provide users with notification information push function according to user models
Sharing method：SDK local acquisition
Third-Party Links：
Third Party Company Name：Google LLC
Product service：Firebase CloudMessage
Involving personal information：Device information (OAID, AndroidID), network type, device model, application information (application name, application version number)
scenes to be used：Used every time a notification message is pushed to a user
purpose of usage：Provide users with notification information push function according to user models
Sharing method：SDK local acquisition
Third-Party Links：
Third Party Company Name：Beijing Xiaomi Mobile Software Co., Ltd.
Product service：Xiaomi Push SDK
Involving personal information：Device identification information (OAID, encrypted Android ID), application information (application package name, version number and running status), push message content, device information (device manufacturer, model, device memory, operating system version, Xiaomi push SDK version, location, operator name), notification bar settings, network information (ExtraInfo)
scenes to be used：Used to push messages on Xiaomi devices
purpose of usage：Provide users with notification information push function according to user models
Sharing method：SDK local acquisition
Third-Party Links：
Provider Company Name: Zhejiang Daily Interactive Network Technology Co., Ltd.
Purpose of Use: To conduct message push on mobile terminal devices.
Third-party SDK Name: GeTui Push SDK
To conduct message push on mobile terminal devices.
Types of Personal Information Collected: Device model, operating system, unique device identifiers (Android ID/OAID), MAC address, logged-in IP address, WeChat software version number, ways of accessing the network, types and status of the network, device accelerators, operation logs, service logs information.