OUR COMMITMENT TO YOU
WHAT INFORMATION IS COLLECTED AND HOW DO WE USE IT?
TYPES OF INFORMATION COLLECTED
In order to provide our services to you, we will ask you to provide personal information that is necessary to provide those services to you. If you do not provide your personal information, we may not be able to provide you with our products or services.
We will only collect the information that is necessary for its specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes. We may collect the following types of information (which may or may not be personal information)
- Information you provide to us or upload (including your contact details): we may collect any and all personal information you provide to us, like your name, mobile phone number, email address, delivery address, Mi Account details (e.g. your security related information, name, birthday, gender), order, invoicing details, materials or data you may sync through Mi Cloud or other apps (e.g. photos, contact lists), information in relation to creating an account and participating in the MIUI Forum or other Xiaomi platforms, phone numbers you insert into your contacts or to send a message, feedback, and any other information you provide us.
- Device or SIM-related information: Information related to your device. For example, IMEI number, IMSI number, MAC address, MIUI version, Android version, device manufacturer details and model name, network operator.
- Information specific to you that may be assigned by us: We may collect and use information such as your Mi Account ID.
- Location information (only for specific services/functionalities): various types of information on your location. For example, country code, city code, mobile network code, cell identity, longitude and latitude information, language settings.
- Log information: information related to your use of certain functions, apps and websites. For example, cookies and other anonymous identifier technologies, IP addresses, temporary message history, standard system logs.
- Other information: environmental characteristics value (ECV) (i.e. value generated from Mi Account ID, phone device ID, connected Wi-Fi ID and location value).
We may use your personal information for the following purposes:
- Providing, processing, maintaining, improving and developing our goods and/or services to you, including after-sales and customer support and for services on your device or through our websites.
- Communicating with you about your device, service or any general queries, such as updates, customer inquiry support, information about our events, notices.
- Conducting marketing related activities, such as providing marketing and promotional materials and updates. For more information on marketing and promotional activities, please refer to the Direct Marketing section below.
- Allowing you to post comments in public forums.
- Conducting promotional activities, such as sweepstakes and Facebook events.
- Analysing and developing statistical information on use of our products and services to better improve our products and services.
- Storing and maintaining information about you for our business operations or legal obligations.
- Providing local services without communicating with our servers.
Here are more details on how we use your information (which may include personal information)
- Setting up your Mi Account. Personal information collected when creating a Mi Account on our web sites or through our mobile devices is used for creating the personal Mi Account and profile page for the user.
- Processing your purchase orders. Information relating to e-commerce orders may be used for processing the purchase order and related after-sales services, including customer support and re-delivery. In addition, the order number is used to cross check the order with the delivery partner as well as the actual delivery of the parcel. The receipt details, including name, address, phone number and postal code are for delivery purposes. The email address is used to send parcel tracking information to the user. The list of purchased item(s) is used for printing the invoice and allowing users to see what is in the parcel.
- Providing Mi Cloud and other MIUI services. Information (device or SIM card-related information including IMEI number, IMSI number, phone number, device ID, device operating system, MAC Address, device type, system and performance information and location information including mobile country code, mobile network code, location area code and cell identity) is collected for activating MIUI services, e.g. Mi Cloud, call log sync, SMS sync, Find Device, for the purposes of user authentication and activation of the services.
- Diagnosing activation failures. Location related information is used for the purpose of assessing SIM card activation failure (i.e. failure of SMS gateway and network) to identify the network operator of that service, and notify the network operator of that failure.
- Providing other MIUI services. Other information collected for each of the MIUI services may be used for performing the functions of that service, and to facilitate the provision of that service for the benefit of the user, e.g. downloading, updating, registering or performing activities related to MIUI services. For example, personal information collected by the Theme Store may be used to provide personalised theme recommendation services based on your downloading and browsing history.
- Finding your device: Xiaomi’s Find Device feature helps you find and secure your phone if it is lost or stolen. You can locate your phone on a map using location information provided by your phone, wipe your phone, or lock your phone. We may collect your location data directly from your mobile device, or in some situations, from cell towers or Wi-Fi hotspots.
- Recording location information in photos. You have the ability to record your location information while taking a photo. This information will be visible within your photos folder and the location will be put into the header of your photos. If you do not wish to have your location recording while taking a photo, you may turn this off at any time within the camera settings of the device.
- Improving user experience. Some opt-in features, such as the User Experience Program, allow Xiaomi to analyse data about how users use the mobile phone and MIUI services, so as to improve the user experience, such as sending crash reports.
- Allowing you to use Security Centre. Information collected may be used for security and system up-keeping functionalities in the Security Centre, such as advertising blocker, virus scan, power saver, blocklist, cleaner, etc. Some of these functionalities are operated by Third Party Service Providers. Information (which is not personal information like virus definition lists) is used for virus scan functions.
- Providing Push Service. Mi Account ID and IMEI numbers will also be used to provide the Xiaomi push service to evaluate advertising performance and send notifications from MIUI about software updates or new product announcements, including information about sales and promotion. You may opt out of this at any time through changing your preferences under "Settings".
- Verifying user identity. Xiaomi uses the ECV value to verify the user identity and ensure there is no log-in by hackers or unauthorised persons.
- Collecting user feedback. The feedback you choose to provide is valuable in helping Xiaomi make improvements to our services. In order to follow up on the feedback you have chosen to provide, Xiaomi may correspond with you using the personal information that you have provided and keep records.
- Sending notices. From time to time, we may use your personal information to send important notices, such as communications about purchases and changes to our terms, conditions, and policies.
- Conducting promotional activities. If you enter into a sweepstake, contest, or similar promotion, e.g. via Xiaomi’s Facebook page or other social media platforms, we may use the personal information you provide to administer those programmes.
- Conducting analysis of your device to provide better user experience. Xiaomi may conduct the hardware or software analysis, so as to further improve the performance of your device.
- We may use your name, phone number, and email address, Mi Account ID and IMEI number to provide marketing materials to you relating to goods and services of Xiaomi companies and our business partners which offer network, mobile applications and cloud products and services. To provide better user experience, we may recommend above-mentioned products, services and activities based on information about your purchase history, website browsing history, birthday, age, gender, and location. We will only so use your personal data after we obtain your prior explicit consent and involve a clear affirmative action or indication of no objection in accordance with local data protection laws, which may require separate explicit consent. You have the right to opt out of our proposed use of your personal data for direct marketing. If you no longer wish to receive certain types of email communications you may opt-out by following the unsubscribe link located at the bottom of each communication. We will not transfer your personal data to our business partners for use by our business partners in direct marketing.
COOKIES AND OTHER TECHNOLOGIES (ONLY WHEN BROWSING MI-STORE.COM.AU)
- What information is collected and how do we use them? Technologies such as cookies, tags, and scripts are used by Xiaomi and our Third Party Service Providers. These technologies are used in analyzing trends, administering the site, tracking users’ movements around the website and to gather demographic information about our user base as a whole. We may receive reports based on the use of these technologies by these companies on an individual as well as aggregated basis.
- Log Files: As true of most websites, we gather certain information and store it in log files. This information may include Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data. We do not link this automatically collected data to other information we gather about you.
- Advertising: We partner with our Third Party Service Providers to either display advertising on our website or to manage our advertising on other sites. Our Third Party Service Provider may use technologies such as cookies to gather information about your activities on this site and other sites in order to provide you advertising based upon your browsing activities and interests. If you wish to not have this information used for the purpose of serving you interest-based ads, you may opt-out by clicking here.
- Mobile Analytics: Within some of our mobile applications we use mobile analytics software to allow us to better understand the functionality of our Mobile Software on your phone. This software may record information such as how often you use the application, the events that occur within the application, aggregated usage, performance data, and where crashes occur within the application. We do not link the information we store within the analytics software to any personal information you submit within the mobile application.
- Local Storage – HTML5/Flash: We use Local Storage Objects (LSOs) such as HTML5 or Flash to store content and preferences. Third parties with whom we partner to provide certain features on our Sites or to display advertising based upon your web browsing activity also use HTML5 or Flash cookies to collect and store information. Various browsers may offer their own management tool for removing HTML5 LSOs. To manage Flash cookies, please click here.
WITH WHOM WE SHARE YOUR INFORMATION
We do not sell any personal information to third parties.
We may disclose your personal information on occasion to third parties (as described below) in order to provide the products or services that you have requested.
Disclosure may be made to Third Party Service Providers and affiliated companies listed in this section below. In each case described in this section, you can be assured that Xiaomi will only share your personal information in accordance with your consent. You should know that when Xiaomi shares your personal information with a Third Party Service Provider under any circumstance described in this section, Xiaomi will contractually specify that the third party is subject to practices and obligations to comply with applicable local data protection laws. Xiaomi will contractually ensure compliance by any Third Party Service Providers with the privacy standards that apply to them in your home jurisdiction.
SHARING WITH OUR GROUP AND THIRD PARTY SERVICE PROVIDERS
From time to time, in order to conduct business operations smoothly in providing you with the full capabilities of our products and services, we may disclose your personal information from time to time to other Xiaomi affiliated companies (in communications, social media, technology or cloud businesses), or our third party service providers which are our mailing houses, delivery service providers, telecommunications companies, data centres, data storage facilities, customer service providers, advertising and marketing service providers. Such Third Party Service Providers would be processing your personal information on Xiaomi’s behalf or for one or more of the purposes listed above. We may share your IP address with third parties when using certain mobile applications on our device in order to provide you with some of the services you requested. If you no longer wish to allow us to share this information, please contact us at email@example.com
SHARING WITH OUR GROUP’S ECOSYSTEM COMPANIES
Xiaomi works together with a cool group of companies, which together form the Mi Ecosystem. The Mi Ecosystem companies are independent entities, invested and incubated by Xiaomi, and are experts in their fields. Xiaomi may disclose your personal data to the Mi Ecosystem companies so as to provide you with and improve the exciting products and services (both hardware and software) from the Mi Ecosystem companies. Some of these products and services will still be under the Xiaomi brand, while others may use their own brand. The Mi Ecosystem companies may also share data with Xiaomi from time to time in relation to products and services under the Xiaomi brand to provide hardware and software services, and to create better functions and user experience. If Xiaomi is involved in a merger, acquisition or asset sale of all or a portion of our assets, you will be notified via email and/or a prominent notice on our website, of any changes in ownership, uses of your personal information, and choices you may have regarding your personal information.
SHARING WITH OTHERS
Xiaomi may disclose your personal information without further consent when required under applicable law.
INFORMATION NOT REQUIRING CONSENT
- We may share anonymised information and statistics in aggregate form with third parties for business purposes, for example with advertisers on our website, we may share with them trends about the general use of our services, such as the number of customers in certain demographic groups who purchased certain products or who carried out certain transactions.
- For the avoidance of doubt, Xiaomi may collect, use or disclose your personal information without your consent if it is and only to the extent it is allowed explicitly under local data protection laws.
XIAOMI’S SECURITY MEASURES
We are committed to ensuring that your personal information is secure. In order to prevent unauthorised access, disclosure or other similar risks, we have put in place reasonable physical, electronic and managerial procedures to safeguard and secure the information we collect on your mobile device and on Xiaomi websites. We will use all reasonable efforts to safeguard your personal information.
For example, when you access your Mi Account, you can choose to use our two-step verification process for better security. When you send or receive data from your Xiaomi device to our servers, we make sure they are encrypted using Secure Sockets Layer ("SSL") and other algorithms.
All your personal information is stored on secure servers that are protected in controlled facilities. We classify your data based on importance and sensitivity, and ensure that your personal information has the highest security level. We make sure that our employees and Third Party Service Providers who access the information to help provide you with our products and services are subject to strict contractual confidentiality obligations and may be disciplined or terminated if they fail to meet such obligations. We have special access controls for cloud based data storage as well. All in all, we regularly review our information collection, storage and processing practices, including physical security measures, to guard against any unauthorised access and use.
We will take all practicable steps to safeguard your personal information. However, you should be aware that the use of the Internet is not entirely secure, and for this reason we cannot guarantee the security or integrity of any personal information which is transferred from you or to you via the Internet.
WHAT YOU CAN DO
- You can play your part in safeguarding your personal information by not disclosing your login password or account information to anybody unless such person is duly authorised by you. Whenever you log in as a Mi Account user on Xiaomi websites, particularly on somebody else's computer or on public Internet terminals, you should always log out at the end of your session.
- Xiaomi cannot be held responsible for lapses in security caused by third party accesses to your personal information as a result of your failure to keep your personal information private. Notwithstanding the foregoing, you must notify us immediately if there is any unauthorised use of your account by any other Internet user or any other breach of security.
- Your assistance will help us protect the privacy of your personal information.
Personal information will be held for as long as it is necessary to fulfil the purpose for which it was collected, or as required or permitted by applicable laws. We shall cease to retain personal information, or remove the means by which the personal information can be associated with particular individuals, as soon as it is reasonable to assume that the purpose for which that personal information was collected is no longer being served by retention of the personal information.
ACCESSING OTHER FEATURES ON YOUR DEVICE
Our applications may need access to certain features on your device such as enabling emails to contacts, SMS storage and Wi-Fi network status, as well as other features. This information is used to allow the applications to run on your device and allow you to interact with the applications. At any time, you may revoke your permissions by turning these off at the device level or contacting us at firstname.lastname@example.org
YOU HAVE CONTROL OVER YOUR INFORMATION
Xiaomi recognises that privacy concerns differ from person to person. Therefore, we provide examples of ways Xiaomi makes available for you to choose to restrict the collection, use, disclosure or processing of your personal information and control your privacy settings:
- Toggle on/off for the User Experience Program and Location Access functions;
- Log in and out of the Mi Account;
- Toggle on/off for the Mi Cloud sync functions
- Delete any information stored on Mi Cloud through www.mi.com/micloud; and
- Toggle on/off for other services and functionalities which deal with sensitive or personal information.
You may obtain more details in relation to your device’s security status in the MIUI Security Centre as well.
If you have previously agreed to us using your personal information for the above mentioned purposes, you may change your mind at any time by contacting us at email@example.com
ACCESS, UPDATING OR CORRECTING YOUR PERSONAL INFORMATION
- You have the right to request access to and/or correction of any other personal information that we hold about you. When you update your personal information, you will be asked to verify your identity before we proceed with your request. Once we obtain sufficient information to accommodate your request for access to or correction of your personal information, we shall proceed to respond to your request within any timeframe set out under your applicable data protection laws.
- We normally provide such services for free but reserve the right to charge a reasonable fee for your data access request.
- If you would like to request access to your personal data held by us or if you believe any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible at the email address below. Email: firstname.lastname@example.org.
- For details relating to the personal information in your Mi Account, you may also access and change them at //account.mi.com or by logging into your account on your device.
WITHDRAWAL OF CONSENT
- You may withdraw your consent for the collection, use and/or disclosure of your personal information in our possession or control by submitting a request. This may be done by accessing your Mi Account management centre at account.xiaomi.com/pass/del. We will process your request within a reasonable time from when the request was made, and thereafter not collect, use and/or disclose your personal information as per your request.
- Please recognise that your withdrawal of consent could result in certain legal consequences. Depending on the extent of your withdrawal of consent for us to process your personal information, it may mean that you will not be able to enjoy Xiaomi’s products and services.
TRANSFER OF PERSONAL INFORMATION OUTSIDE OF YOUR JURISDICTION
To the extent that we may need to transfer personal information outside of your jurisdiction, whether to our affiliated companies (which are in the communications, social media, technology and cloud businesses) or Third Party Service Providers, we shall do so in accordance with the applicable laws. In particular, we will ensure that all transfers will be in accordance with requirements under your applicable local data protection laws by putting in place appropriate safeguards.
- We consider it the responsibility of parents to monitor their children’s use of our products and services. Nevertheless, it is our policy not to require personal information from minors or offer to send any promotional materials to persons in that category.
- Xiaomi does not seek or intend to seek to receive any personal information from minors. Should a parent or guardian have reasons to believe that a minor has provided Xiaomi with personal information without their prior consent, please contact us to ensure that the personal information is removed and the minor unsubscribes from any of the applicable Xiaomi services.
ORDER OF PRECEDENCE
DO I HAVE TO AGREE TO ANY THIRD PARTY TERMS AND CONDITIONS?
Here are third party terms and privacy policies that apply when you use these specific products:
SOCIAL MEDIA (FEATURES) AND WIDGETS
Depending on your jurisdiction, you may be able to log in to our website using sign-on services such as Facebook Connect or an Open ID provider. These services will authenticate your identity, provide you the option to share certain personal information (such as your name and email address) with us, and to pre-populate our sign up form. Services like Facebook Connect give you the option to post information about your activities on this website to your profile page to share with others within your network.