Privacy Policy

Butik – Shanghai Yuta Information & Technology Co., Ltd. (“Butik”) takes the protection of the personal information and privacy of our clients and of the users of our websites and applications seriously. This Privacy Policy explains how we handle your personal information on our websites and applications, and how you can exercise your rights. Before using our services or visiting our websites and applications, please read this policy carefully and make sure you fully understand it. This English version is a translation; if it differs from the Chinese version, the Chinese version prevails.

1. The importance of your personal information

We recognise the importance of your personal information and are committed to keeping it secure. We do not collect or use your personal information unless permitted by law or unless you voluntarily provide it to us under this Privacy Policy. We comply with all laws and regulations that apply to the protection of personal information.

2. Personal information of minors

In general, we do not knowingly collect or process the personal information of children under 14 without the consent of a parent or guardian. Because of technical limitations, however, we cannot always tell a user’s age, for example when providing online services.

If you are under 14, you may use our websites and applications only when accompanied by a parent or guardian, and you should not provide us with any personal information. If you are under 14 and need to use our products or services, please ask your parent or guardian to read this Privacy Policy carefully, and use our websites, applications, products or services and provide personal information only with their consent.

If you are a guardian and find that we have collected personal information from a child under 14, you can contact us using the details in Section 10, “Questions, requests and complaints”.

3. How we handle your information

We rely on certain personal information to provide our services. If you choose to use a service, you will need to provide, or allow us to collect, the personal information related to it. We collect sensitive personal information only where specific and necessary. Sensitive personal information is information that, if leaked or misused, could easily harm a person’s dignity or the safety of their person or property. We handle sensitive personal information strictly in accordance with the laws and regulations of China, and we underline it in this policy to draw your attention to it.

Butik provides the following services and handles your personal information as described:

(1) Creating and completing a Butik account

When you use Butik’s websites and applications, we ask for your account password or mobile number to verify your identity. If you sign in with a third-party platform account, you authorise us to collect that account’s information (account, nickname and profile picture) to complete the sign-in.

(2) Displaying our services

To show you the pages you need, return relevant search results and check the security status of your account, we may collect:

• Device information: with your authorisation when you install or use our software, we receive and record information about your device (such as model, operating system, application version and language settings).
• Log information: when you browse our web pages or use our services, we automatically collect how you use them, including your searches, browser type, IP address, date and time of access and the pages you visit.
• Social media account information: when you use our services through our WeChat Mini Program or Official Account, we collect your WeChat nickname and profile picture with your authorisation.

(3) Sharing pages

• When you share a page of our WeChat Mini Program with a WeChat contact, we collect that contact’s WeChat OpenID and UnionID only after they open the shared link.
• When you share a page of our WeCom application with a WeChat or WeCom contact, we collect that contact’s WeChat OpenID, UnionID and UserID only after they open the shared link.

(4) Private livestream services

• To watch a private livestream through our WeChat Mini Program, you may need to provide your mobile number, nickname, profile picture, region, gender, WeChat UnionID and invitation code. We also collect the date and time slot you book, so that we can hold the livestream on time.
• If you select products you are interested in when booking, we collect that product information and share it with the livestream staff so they can present those products during the session.
• If you send comments in the livestream or chat privately with the host, we collect your chat records.
• If you speak with us by voice, we collect the voice records. You need to grant microphone permission on your device for this.
• If you speak with us by video, we collect the audio and video content, which may include your facial information. You need to grant microphone and camera permissions on your device for this.

(5) Subscription messages, notifications and reminders

You can subscribe to notifications from our WeChat Mini Program (such as booking confirmations and livestream start reminders) to keep track of your bookings. We collect your WeChat OpenID, UnionID, subscription time and the types of notification you subscribe to, and send those notifications through WeChat. You can turn them off in WeChat’s service notifications.

(6) Website contact form

When you contact us through the “Book a call” form on our website, we collect the name, company, job title, email address, mobile number (optional), areas of interest and message you enter. We use this information only to reply to your enquiry and arrange a call. We keep it for 180 days after our last contact and then delete or anonymise it.

4. Information we collect through automated technologies

(1) Cookies

With your consent, we may place “cookies” on your device to recognise you. Cookies are small data files sent from a server during browsing. They are usually stored on your device’s hard drive, and our websites and applications use them to simulate a continuous connection. We have taken security measures to prevent unauthorised access to user data. However, users acknowledge that Butik cannot control data transfers over electronic communication facilities (including the internet). Butik is therefore not responsible for any security breach, or unauthorised disclosure or use, of such data that occurs on the internet. You can set your browser to refuse cookies, but you may then be unable to make full use of the services on our websites and applications.

We may adjust the cookies we use from time to time to meet new service needs, and will update this policy when they change.

(2) Third-party code and plug-ins

To provide better services, we may collect personal information through third-party code or SDKs. We do our best to control and protect this collection. The third-party code we use and the data it collects are listed below.

We may adjust the third-party code and SDKs we use from time to time, and will update this list when they change.

(3) System permissions

To provide our products and services, we need your authorisation to enable certain permissions. You can check these permissions in your device settings and decide at any time whether to enable them. Enabling a permission authorises us to collect and use the related personal information to provide the function you requested. Disabling it withdraws that authorisation: we will stop collecting and using that information and can no longer provide the related function. Disabling a permission does not affect processing carried out before, based on your earlier authorisation.

• Camera: when you use our websites and applications for livestreaming, we need access to your camera to provide video services.
• Photo album: if you want to save images provided to you in a booking, we need access to your photo album so you can download them.
• Microphone: if you want to talk by voice during a livestream, we need access to your microphone.
• Storage: when you upload images while using our websites and applications, we need storage access through a third-party app (such as WeChat) to provide customer service.

5. How we entrust, share and transfer your personal information

(1) Entrusted processing

To achieve the purposes described in this policy, we may engage third-party service providers to support our operations and services. They process your personal information to deliver our service functions. They include:

• SMS service providers
• Software and system technology providers
• Marketing, research and data analysis companies
• Website and system hosting companies

(2) Sharing with third parties

To achieve the purposes described in this policy, we share your personal information with:

• Data analysis providers: to analyse and improve the service experience, we use the Sensors Data SDK and provide it with your WeChat OpenID and your browsing records in our WeChat Mini Program for processing and analysis.
• Government, regulatory, law enforcement and judicial authorities, to meet our legal obligations.

(3) Transfer of your personal information

If Butik is merged, or its assets, websites or business are transferred, we may disclose or transfer your personal information as part of that transaction. Before doing so, we will notify you of the recipient’s name and contact details and make sure your personal information remains protected in line with this policy. If the recipient changes the purpose or method of processing, we will require it to obtain your consent again.

(4) Disclosure of your personal information

If we believe it is necessary to enforce our terms of service or to protect the rights, property or safety of Butik, other Butik clients or the public, we will disclose your personal information in accordance with applicable laws and regulations.

Unless otherwise stated in this policy, and to the extent permitted by applicable laws and regulations, we will disclose specific information without your permission only where we believe in good faith that it is necessary to investigate, or protect against, suspected criminal activity directed at our clients, users, affiliates or property (including our websites) or at others.

6. How we store and transfer your personal information

We store personal information only for as long as necessary for the purposes in this policy and for the minimum period required by law. If we stop providing a service or cease operations, we will promptly stop collecting personal information from you or your end users, notify you in advance as required by law, and delete or anonymise the relevant personal information afterwards, unless laws, regulations or regulators require otherwise.

Personal information collected and generated in our operations in the People’s Republic of China is stored in China, except where:

• laws or regulations expressly provide otherwise; or
• you have given your consent.

7. Protecting your personal information

We take all reasonable steps to keep your personal information confidential and secure, using appropriate technical and organisational measures to prevent unlawful or accidental destruction, accidental loss, unauthorised disclosure or access, or other unlawful processing. In particular, we make sure our information systems are properly protected. We use specific tools to detect security issues that have occurred. When a security issue is investigated, using these tools may give our security staff access to personal information. Under applicable data protection rules, such information is collected and processed solely to manage the security issue.

In response to personal information security incidents, we will fulfil our reporting and notification obligations as required by law.

Please note, however, that because the internet is open, we cannot absolutely guarantee that personal information stored on our servers or transmitted between users will not be accessed without authorisation, damaged or intercepted, and we cannot guarantee that your information is absolutely secure in every circumstance. By using our websites and applications, you confirm that you understand and accept these risks.

8. Your rights

(1) Access and correction

You can view or change your account and booking information through your Butik account or the “Me” section of our websites and applications.

To access or correct other personal information generated while using our websites and applications, contact us using the details in Section 10.

(2) Copy

You have the right to obtain a copy of your personal information. You can contact us at any time to request one. Where legally permitted and technically feasible, we will provide a copy as requested. Please contact us in the same way as above.

(3) Withdrawing consent

To withdraw your consent to our use of your personal information, contact us in the same way as above. After withdrawing consent, you may be unable to use the related services. Withdrawing consent does not affect processing carried out before, based on your consent.

(4) Restricting or refusing processing

You have the right to restrict or refuse the processing of your personal information by others. We will provide ways to do so in accordance with applicable law. Please contact us in the same way as above.

(5) Opting out of notifications

If you no longer want to receive notifications or promotional information from us, contact us in the same way as above. Once you tell us, we will stop contacting you for those purposes, and will make reasonable efforts to do so promptly. Opting out does not: (a) prevent us from contacting you by email or other means about your current or past relationship with us; (b) prevent us (including our employees, contractors, agents and other representatives) from accessing and viewing your personal information while maintaining and improving our databases and websites; or (c) prevent us from otherwise using your personal information under this Privacy Policy.

(6) Deletion

You have the right to ask us to delete your personal information where: (a) we collected or used it in breach of laws or regulations; (b) we have no legal basis to collect it, or you have withdrawn your consent; (c) we collected or used it in breach of our agreement with you; (d) you have closed your account; or (e) we no longer provide products or services to you.

Please note that if the information you ask us to delete is necessary to provide certain services, we may be unable to continue providing them. This does not affect other services that do not rely on that information. Where we must keep information for legal reasons, we will process it only as required by law and will not use it in our day-to-day business.

(7) Closing your account

To close your account, contact us in the same way as above. We will take reasonable steps to close it and delete your personal information as you request or as required by law. Where we must keep information for legal reasons, we will process it only as required by law and will not use it in our day-to-day business.

9. Changes to this Privacy Policy

We regularly review our privacy practices in light of new technology, business practices and client needs. As our services develop, this Privacy Policy may change.

Butik may amend this Privacy Policy at any time by publishing an updated version on our websites and applications, with the date of the latest update at the end. If we make material changes, we will explain them prominently, for example through page prompts, website notices or pop-ups. Whether or not we send you specific notice of a change, if you continue to use our services, the updated Privacy Policy will be binding on both you and us. Please check our websites and applications regularly, or contact us using the details in Section 10, to stay informed of updates.

10. Questions, requests and complaints

If you have any questions about this Privacy Policy, or any questions or complaints about our services, email support@iyuta.cn or write to: Shanghai Yuta Information & Technology Co., Ltd., 1805 MOHO, 936 Jiangning Road, Jing’an, Shanghai, China.

We will make reasonable efforts to respond promptly. Once we have received your request and verified your identity, we will reply within the period required by applicable law (15 working days).

11. Definitions

• Butik: Shanghai Yuta Information & Technology Co., Ltd.
• Websites and applications: the websites and applications operated by Butik, including our official website, WeCom application, WeChat Mini Program and WeChat Official Account.