PRIVACY STATEMENT
Grobest Group Limited and its affiliates (collectively, “Grobest”, “we”, “our” or “us”) protect your Data (as defined below) in accordance with applicable privacy laws. This Privacy Statement ("Statement") explains how we collect, use, disclose, and safeguard your Data and outlines your rights regarding your Data. This Statement applies to Data provided to us, both by you or by others.
WHAT IS PERSONAL DATA?
Personal data means data that can be used to identify, or can reasonably be linked directly or indirectly to, an individual (“Data”). Identification can be by the data alone or in conjunction with any other data in our possession.
WHAT TYPES OF DATA COLLECTED?
Types of Data we collect from you may include your name, identification number, address, email address, telephone number, age, gender, date of birth, photo, marital status, employment history, academic qualifications, bank accounts, health record, medical insurance details and information obtained from your access to our website (e.g. your computer’s IP address and cookies).
WHAT ROLES DO WE PLAY IN PROCESSING YOUR DATA?
We are the data controller with respect to processing your Data. This means that we decide how your Data is processed and for what purposes. We know that you care about how Data about you is used and shared, and we appreciate your trust that we will do so carefully and sensibly.
WHEN IS YOUR DATA COLLECTED?
Your Data can be collected by us:
-
whenever you become our employee, customer or partner;
-
whenever you submit your curriculum vitae or application for a job position;
-
whenever you fill in our forms or other documents, or use our services or products;
-
whenever you contact us via the various channels we offer you; or
-
whenever you appear in surveillance footage located in or near our office premises.
DATA WE COLLECT AND THE PURPOSES OF COLLECTION
We will collect and process your Data using methods that comply with applicable laws and regulations. The chart below outlines, by the business process involved, the types of Data we collect under such process, the purpose of collection and processing, and how we process your Data. Most importantly, we describe how you can manage your Data with us.
We will use automatic or non-automatic methods permitted by the laws and regulations to collect and process your personal data. The chart below outlines, by the business process involved, the types of personal data we collect under such process, the purpose of collection and processing, and how we process your personal data. Most importantly, we describe how you can manage your personal data with us.
| Progress |
Become our customer or partner |
| Purpose of collection and processing and How we process and manage your personal data |
We use your Data to:
- Communicate with you about our products, services, and promotions through various channels.
- Process and fulfill your orders, improve our offerings, and personalize your experience.
- Draft, negotiate, and enforce contracts.
- Maintain internal customer and vendor records for service provision.
- Conduct marketing activities through online and offline channel, including sending promotional offers or newsletter.
- Personalize your experience, and improve advertising based on your preferences, including through third-party advertisements.
- Conduct research on current and potential products/services to enhance offerings.
- Maintain system security and integrity of our systems and prevent fraud.
- Share relevant contact details with our sales agents, distributors, and affiliates to facilitate service delivery and internal operations.
- Comply with legal obligations, assist law enforcement, and investigate fraud or data breaches.
- Conduct due diligence, ensure compliance, and manage risks.
- Store device and connection data for internal analytics. IP addresses are used for geo-based advertising, visitor estimation, and customer identification.
Collected data may be stored as log files or associated with your devices for analysis, research, and auditing. Data is backed up to prevent loss but retained only as per our data retention policy or deleted upon request.
|
| Progress |
Marketing Activities |
| Purpose of collection and processing and How we process and manage your personal data |
We may send you marketing communications about our products and services. Where required by law, we will only do so with your consent.
You can unsubscribe at any time by contacting us (see “How to contact us” section below). |
| Progress |
Recruitment Applicants |
| Purpose of collection and processing and How we process and manage your personal data |
We collect your Data from your application, resume/CV, interview feedback, and communications during the hiring process.
We may also obtain Data from:
- Your referrer (if applicable)
- Background checks (depending on the role)
- Verification of employment, education, and qualifications from relevant sources
- Public sources, including social media
We use your Data to assess your qualifications, communicate about your application, and manage the hiring process. Your Data may be shared internally with relevant teams and, if necessary, with third-party service providers for background checks (with your consent).
If hired, your Data will be kept in your employee record. If not, we may retain it for future job opportunities in accordance with applicable law.
|
| Progress |
Grobest Employees |
| Purpose of collection and processing and How we process and manage your personal data |
We collect, use and process Data of our employees as part of managing the employment relationship. This includes Data collected during the recruitment process, throughout the course of employment and after employment ends, where necessary.
We use your Data to:
- Recruitment and onboarding
- Payroll, tax and statutory contributions
- Administration of benefits, insurance and leave
- Disciplinary procedures and internal investigations
- Compliance with legal and regulatory obligations
- System access, security and IT management
- Post-employment matters such as issuance of references or recordkeeping
Employee personal data is retained only for as long as necessary to fulfill the purposes stated above, or as required by law.
|
WHAT IS OUR LAWFUL BASIS FOR PROCESSING YOUR DATA?
We collect and process your Data as described above upon receiving your consent. We will collect, process and use the Data for the purposes communicated to you and will not disclose it to third parties other than as mentioned in this Statement.
The lawful basis for us to process your Data is processing with your consent and as necessary for us to perform our obligations under a contractual arrangement with you or to respond to your request. If we are not able to obtain a valid consent to process your Data from you, or if you have withdrawn your consent to our processing your Data, we may still collect and process your Data based on the following legitimate and justifiable interests:
- Prevention of fraud, misuse of company IT systems, or money laundering;
- Operation of a whistleblowing scheme;
- Physical, IT and network security;
- Internal investigations; or
- Complying with governmental and judicial investigations, to initiate or defend legal claims or for the purpose of civil, criminal, or administrative proceedings, or as otherwise required by law.
In the above circumstances, provided that we are not required by law to process your data, you may object to such processing, and unless we have compelling legitimate grounds for the processing which override your interests, right and freedoms, we will refrain from processing your personal data.
PROCESSING OF CERTAIN SENSITIVE DATA
We may collect or process your sensitive Data – such as racial or ethnic origin, religious beliefs, health data or other categories, in accordance with applicable privacy laws. Where required, we will obtain your explicit consent before processing such Data.
NECESSITY TO PROVIDE US DATA
You are not under any obligation to provide us any Data. The choice is yours. However, please note that without certain Data from you, we may not able to process your online or offline applications or inquiries, undertake some or all of our obligations to you, or adequately provide you with our full range of services. If you would like to obtain more details about this, please contact us following the instructions in the “How to contact us” section below.
COOKIES
We may use cookies to collect Data whenever you visit our website. Cookies helps us improve your experience by personalizing your experience, prevent fraud, enhance the security of our website and service, and analyze website performance. You can disable or decline cookies for our website. For more details, please refer to our Cookie Policy.
RETENTION AND DELETION
We store your Data within the following periods, whichever is longer:
- within the duration necessary for fulfilling the above purposes;
- within the period we are required by applicable laws or regulations to retain the Data;
- necessary for specific legitimate business purposes such as conducting internal audits, complying with legal obligations, or managing identified risks, provided such purposes do not override the data subject’s rights; or
- as long as necessary to assist with any governmental and judicial investigations, to initiate or defend legal claims or for the purpose of civil, criminal, or administrative proceedings.
DATA TRANSFERS
Your Data will be treated as strictly confidential and shared only with the categories of recipients listed in this Statement. We will only share your Data with third-party data controllers outside of the Grobest with your consent, except where we have other lawful grounds to continue the data transfer.
We may disclose your personal data to the following recipients:
- Our affiliated entities within our global group of companies and branches worldwide, to provide you our services, or for compliance or internal administration purposes, to detect and manage data breaches, illegal activities and fraud, to maintain the integrity of our information technology systems.
- Third party service providers whom we sub-contract to work on our behalf or for us, and therefore may have access to your Data only for purposes of performing these tasks on our behalf and under obligations similar to those in this Statement, to perform functions such as information processing, auditing, credit reference, managing and enhancing customer data, providing customer service, logistics support, marketing support, informational systems technical support, to help us provide, analyze, and improve our services such as data storage, database management, web analytics, and improvement of our service features, and to assist us in detecting and dealing with data breaches, illegal activities, and fraud. The third party service providers may use their own third party sub-contractors that have access to your Data (sub-processors). It is our own policy to use only third party providers that are bound to maintain appropriate levels of security and confidentiality, to process Data only as instructed by Grobest, and to flow those same obligations down to their sub-processors.
- Our business partners, to jointly provide you our services.
- Counterparties, to merge or acquire all or a portion of our business assets where Data may be transferred as one of our business assets.
- Governments and/or government-affiliated institutions, courts, law enforcement agencies, regulators, or professional advisers, to comply with our obligations under relevant laws and regulations, enforce or defend our policies, rights or contracts with you, respond to claims, or in response to a verified request or subpoena relating to a government or criminal investigation or proceeding or suspected fraud or illegal activity that may expose us, you, or any other of our customers to legal liability.
- Third parties involved in a legal proceeding, if they provide us with a court order or substantially similar legal procedure requiring us to do so.
We may provide you with opportunities to connect with third party applications or services through our website. If you choose to do so, we may facilitate sharing of your Data. These third party applications or services may also send cookies to your device. However, we do not control these third party applications or services, nor their use of your Data, and your use of such applications and services is not governed by this Statement. Please review the terms and the privacy policies of those third parties before using their applications or services.
INTERNATIONAL DATA TRANSFERS
Grobest is a multinational group with companies and operations worldwide. By using our services and providing us with your Data, you acknowledge and agree that we may transfer your Data to the recipients listed in “Data transfer” section above, who may be in countries other than the country in which you reside. Although these countries may have data protection laws that are different to the laws of the country you reside in, we ensure appropriate safeguards in place so that your Data will remain protected in accordance with this Statement.
YOUR RIGHTS OVER YOUR DATA
In accordance with applicable data protection laws, you have the rights to:
- Access and Copy - Request to access or a copy of your Data, provided that your request will not adversely impact Grobest or others’ interests and rights.
- Correction- Request correction or supplementation of inaccurate or incomplete Data.
- Erasure- Request deletion of your Data if there are no legal grounds for Grobest to keep processing your Data.
- Withdraw Consent - Withdraw consent at any time where processing is based on your consent.
- Restrict Processing - Request restriction of processing instead of deletion if your Data have been unlawfully processed.
- Object Marketing - Object to our use of your Data for direct marketing.
- Lodge Complaint - File a complaint with the competent authority if you consider that the processing of your Data infringes the law.
To exercise your rights, please refer to the “How to contact us” section. We will verify your identity and review your request in accordance with applicable laws. In some cases, we may deny requests where legal or business obligations prevent us from fulfilling them.
To opt out of our communications, contact us (see “How to Contact Us” below). For third-party communications, please contact them directly.
SECURITY
We implement technical and organizational measures to safeguard the Data from loss, misuse, alteration or destruction. Access is limited to authorized employees and third parties who are bound by confidentiality obligation on a need to know basis.
While we take b precautions to protect our systems and Data, no transmission or storage method is completely risk-free due to the open nature of the internet and other security challenges.
HOW TO CONTACT US
If you have any questions about this Statement or intend to exercise any of your rights over your Data, you may submit the request by clicking “Contact Us” > “Send the Request”
on our website, or you may send us an email to our Privacy Department using the following mailbox: GroupLegal2025@grobest.com。
CHANGES TO STATEMENT
This Statement was last updated on 13 May 2025.
We may update this Statement any time. The latest version will always be available here, with the revision date indicating the most recent changes. We encourage you to review it periodically to stay informed about how we handle your Data.