Privacy Policy

Last Modified: 30 August 2022

Your privacy is important to us.

MeituEve International Limited (“we”, “us” or “our”) is dedicated to protecting the privacy of our users (as defined below). This Privacy Policy (this “Policy”) is meant to explain our practices regarding how we collect, store, use, manage and protect your user information (including your personal information) under applicable data protection laws during your use of MeituGenius Website including all its features (our “Services”). “users” or “you” shall mean users of our Services.

Please note that the scope of this Policy is limited solely to your user information (including your personal information) collected or received by us when you are using our Services. In this Policy, “personal information” refers to any information or combination of information that can be used to identify, contact or locate an individual to whom the collected information pertains. Such personal information may include your name, gender, phone number, email address, date of birth, images, geo-location and personal identity number.

BY USING OUR SERVICES, YOU ARE AGREEING TO THIS POLICY AND THE COLLECTION, USE, PROCESSING, RETENTION, DISCLOSURE AND SHARING OF YOUR USER INFORMATION, INCLUDING YOUR PERSONAL INFORMATION, IN THE MANNER PROVIDED IN THIS POLICY. IF YOU DO NOT AGREE WITH ANY OF THE TERMS OF THIS POLICY OR ANY SUBSEQUENT CHANGES TO THIS POLICY, PLEASE DO NOT USE OUR SERVICES.

Please note that it may be mandatory for you to provide certain categories of data (as specified at the time of collection) when using our Services. In the event that you do not provide any or sufficient data marked as mandatory, we may not be able to provide you with some of our Services. Also, please note that, unless we define a term in this Policy, all capitalized terms used in this Policy have the same meanings as in our Terms of Use. So, please make sure that you have read and understand our Terms of Use.

If you have any questions regarding this Policy or any privacy-related matters, please contact our Data Protection Officer via email at compliance@meitu.com (please quote “MeituGenius Website” in your email title) or via registered mail at Unit 8106B, Level 81, International Commerce Centre, 1 Austin Road West, Kowloon, Hong Kong (attention: Legal Department, Meitu). Please note that for all other enquiries, feedback, suggestions and/or complaints not related to privacy or intellectual property infringement (including but not limited to any technical support of MeituGenius Website), you should contact us via email at mtgenius@meitu.com. If your email is sent to an incorrect email address, relating to an incorrect subject matter, it may lead to a potential delay or failure in processing your requests properly.

THE INFORMATION WE COLLECT

In order to provide and improve our Services, we will collect and process your personal information and user information in accordance with this Policy. If you do not provide this information, we may be unable to provide you with our Services. You should ensure that all personal information and user information submitted to us is complete, accurate, true and correct. Failure on your part to do so may result in our inability to provide you with all or some of our Services.

HOW WE USE INFORMATION

In addition to the uses listed above, we collect and use your user information and/or personal information for the following purposes:

INFORMATION SHARING AND DISCLOSURE

We may share your information with third parties who provide services on our behalf to help with our business activities. These services may include:

We will not share with or disclose to third parties (other than our service providers) your personal information in whole or in part except for the purposes of:

BASES FOR USING YOUR INFORMATION

We will only collect and process personal data where we have lawful bases and we typically rely on one of the following four legal bases: -

THIRD PARTY WEBSITES AND SERVICES

Our Services may contain links to other websites and services. In addition, other websites and services may reference or link to our Services. These other domains and websites are not controlled by us, and we do not endorse or make any representations about third party websites or services. We encourage our users to read the privacy policies of each and every website and service with which they interact. Visiting these other websites or services is at your own risk.

INFORMATION SECURITY

We will take reasonable measures to prevent the loss, improper use of, unauthorized access to or disclosure of information. For example, some of our Services will use encryption techniques (such as SSL) to protect your personal information. However, you understand and accept that (in the Internet industry) even though we take reasonable security measures, we cannot always guarantee that your information is 100% secure. You understand and accept that we cannot ensure or warrant the security of any information you provide to us. We do not accept liability for unintentional disclosure. Further, you understand and accept that the system and communication network used by you to access our Services may fail due to factors beyond our control.

INFORMATION ACCESS AND CONTROL

We will take all reasonable and appropriate technical measures to ensure that you can access, update and correct your personal information or other personal information provided to us by you when using our Services. Before you access, update, correct or remove such personal information, we may verify your identity in order to protect the security of your personal information.

DATA RETENTION

Subject to applicable laws, rules and regulations and the fulfillment of our business or legal purposes, we will retain your information (including your personal information) for such period as is required for us to continue to provide you with our Services.

PRIVACY RIGHTS

In accordance with applicable law, you may have the right to: (i) request confirmation of whether we are processing your personal information; (ii) obtain access to or a copy of your personal information; (iii) receive an electronic copy of personal information that you have provided to us, or ask us to send that information to another company (“right to data portability”); (iv) object to or restrict our uses of your personal information; (v) seek correction or amendment of inaccurate, untrue, incomplete, or improperly processed personal information; (vi) withdraw your consent; and (vii) request erasure of personal information held about you by us, subject to certain exceptions prescribed by law.

If you wish to exercise your rights, you may send an email to compliance@meitu.com (please quote “MeituGenius Website” in your email title) or mail your request to Unit 8106B, Level 81, International Commerce Centre, 1 Austin Road West, Kowloon, Hong Kong (attention: Legal Department, Meitu). We will process your request in line with applicable laws within a reasonable period of time after receiving your email or mail, and will cease collecting, using and disclosing your personal information thereafter, subject to certain exceptions prescribed by law. To protect your privacy, we will take steps to verify your identity before fulfilling your request. Please note that if you withdraw your consent or delete your personal information, your use of some of our Services may be affected.

California residents have the right not to receive discriminatory treatment by us for the exercise of their rights conferred by the California Consumer Privacy Act.

INFORMATION ABOUT CHILDREN

We will not knowingly collect or request personal information from children under 16 (or any other age stipulated by law applicable to your region). If you are under 16, please do not send your personal information to us, including but not limited to your name, address, phone number or email address. If you believe we may have any information about children under 16, you may send an email to compliance@meitu.com (please quote “MeituGenius Website” in your email title) or send a registered mail to Unit 8106B, Level 81, International Commerce Centre, 1 Austin Road West, Kowloon, Hong Kong (attention: Legal Department, Meitu). If we learn that we have collected personal information from children under 16 (or any other age stipulated by law applicable to your region), we will promptly take steps to delete such information.

CROSS-BORDER DATA TRANSFERS

You understand and agree that all information collected via or by us may be transferred, processed, and stored anywhere in the world, including but not limited to, Singapore, China, the United States, the European Union, in the cloud, on our servers, on the servers of our affiliates, or the servers of our service providers (including but not limited to Google Asia Pacific Pte. Ltd. in the United States and Salesforce, Inc. in Japan), in order to provide our Services.

IF YOU ARE A RESIDENT OF CALIFORNIA

The California Consumer Privacy Act (“CCPA”) provides California residents with the right to know what categories of personal information we have collected about them:

Category of Personal Information Collected by us?
Identifiers Yes
Personal information categories listed in Cal. Civ. Code § 1798.80(e) Yes
Characteristics of protected classifications under California or federal law No
Commercial information No
Biometric information No
Internet activity or electronic network activity information Yes
Geolocation data Yes
Sensory data No
Professional or employment-related information No
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)) No
Inferences drawn from other personal information to create a profile No

We will not sell the personal information of California residents.

If you are a resident of California, every year we will provide you free of charge with an opportunity to obtain a list of third parties to which we havedisclosed or with whom we have shared your personal information for their direct marketing purposes during the previous year. If you are a resident ofCalifornia and wish to obtain this list, you may send an email with the subject “MeituGenius Website – The right to privacy of a California resident” tocompliance@meitu.com or send a registered mail to Unit 8106B, Level 81, International Commerce Centre, 1 Austin Road West, Kowloon, Hong Kong (attention: LegalDepartment, Meitu).

IF YOU ARE A RESIDENT OF NEVADA

We will not sell the personal information of Nevada residents.

GOVERNING LAW

This Policy is established, comes into force, and will be enforced and interpreted under the laws of the Hong Kong, without regard to its conflict of lawprovisions. Any disputes arising hereunder will also be resolved in accordance with the Terms of Use. We do not represent or warrant that this Policy complieswith the privacy law of any jurisdiction. Therefore, you should not interpret this Policy in accordance with such law.

AMENDMENTS TO THIS POLICY

You agree that we may update this Policy according to relevant laws and regulations or based on our business decisions, and you agree to be bound by any suchrevisions hereto. We will post any significant changes to this Policy on MeituGenius Website or notify you by other means as required by law.

FOR USERS IN THE EUROPEAN ECONOMIC AREA AND THE UNITED KINGDOM

If you are in the European Economic Area (“EEA”) or the United Kingdom (“UK”), we will not collect any ofyour information set forth above, except for your name, email address and phone number when you would like to contact us. We will also process certaininformation which enables us to verify whether you are in the EEA or the UK. We use this information to verify whether you are in the EEA or the UK and toprevent the processing operations outlined above. Where we are unable to collect such information, we will ask you whether you are in the EEA or the UK. Thelegal basis for the processing of this data or your answer to the question about your whereabouts is the performance of a contract with you (Art. 6 para. 1lit. b) of the Regulation (EU 2016/679 of the European Parliament and of the Council) and UK General Data Protection Regulation (collectively “GDPR”). Without the provision of such data, we may not be able to provide you with any Services.

As we are located in Hong Kong, we are required to transfer this information to Hong Kong or other parts of the People’s Republic of China. Please be awarethat the European Commission and the Information Commissioner’s Office have not issued an adequacy decision in relation to Hong Kong or the People’s Republicof China.

We will retain this information for as long as needed to provide you with our Services.

Controller

The controller for the purposes of Art. 4 no. 7 GDPR with respect to the processing your user information (including your personal information) outlined inthis Policy is MeituEve International Limited, Unit 8106B, Level 81, International Commerce Centre, 1 Austin Road West, Kowloon, Hong Kong. You may contact usvia registered mail at the above address (attention: Legal Department, Meitu) or via e-mail at compliance@meitu.com (please quote “MeituGenius Website” in youremail title.)

Representative

Our representative in the EEA and the UK is Rivacy GmbH and Rivacy Limited respectively. For users in the EEA, you may contact our representative via e-mail atinfo@rivacy.eu or via registered mail at Rivacy GmbH, Mexikoring 33, 22297 Hamburg. For users in the UK, you may contact our representative via e-mail atinfo@rivacy.co.uk or via registered mail at Unit G1/G2, The Imperial Laundry, 87 Warriner Gardens, London SW11 4DX, United Kingdom.

Your rights as a Data Subject

As a data subject in the EEA or the UK, you have the following rights with regard to the processing of your personal data:

Exercise of your rights under GDPR

As a data subject, you may exercise any of the rights listed above in accordance with the instructions and limitations set forth in the section “Privacy Rights” in this Policy above.

Additional Information on Your Rights as a Data Subject

For further information on your rights as a data subject please refer to Art. 12 to 21 GDPR.

FOR USERS IN JAPAN

Right to data disclosure, correction, erasure or suspension of use

If you are in Japan, as a data subject, you have the right to request the disclosure, correction, erasure or suspension of use of your personal data, and we are obliged to meet your request without undue delay. You may send your request by email to compliance@meitu.com (please quote “MeituGenius Website” in your email title) or by mail to Unit 8106B, Level 81, International Commerce Centre, 1 Austin Road West, Kowloon, Hong Kong (attention: Legal Department, Meitu).

FOR USERS IN SOUTH KOREA

International Data Transfers

To provide our Services to you, we may collect your personal information from, transfer it to, and store and process it elsewhere.

Also, we may transfer your personal information to the following third parties located outside of South Korea:

Identity of the recipient and contact information of Data Protection Officer Location of the recipient Purpose of use of personal information by the recipient Personal information to be transferred Data and method of transfer Period of retention and use of personal information by the recipient
Google Asia Pacific Pte. Ltd. http://policies.google.com/privacy USA Advertisement services Region User uid Online transfer For such period as stated in the privacy policy of the relevant third party recipient
Salesforce, Inc. https://www.salesforce.com/company/privacy/ Japan Customer Service Region name, phone number, email address, language

Whenever we share information outside of where you live, we ensure that the transfer complies with your local law so that your personal information is adequately protected.

If you do not wish to have your personal information transferred outside of South Korea, you may send an email to compliance@meitu.com (please quote “MeituGenius Website” in your email title) or mail your request to Unit 8106B, Level 81, International Commerce Centre, 1 Austin Road West, Kowloon, Hong Kong (attention: Legal Department, Meitu). We will process your request in line with applicable laws within a reasonable period of time after receiving your email or mail, and will not transfer your personal information, subject to certain exceptions prescribed by law. To protect your privacy, we will take steps to verify your identity before fulfilling your request. Please note that if you withdraw your consent or delete your personal information, your use of some of our Services may be affected.

Data Retention

Subject to applicable laws, rules and regulations and the fulfillment of our business or legal purposes, we will retain your information (including your personal information) for such period as is required for us to continue to provide you with our Services and destroy your personal information without delay when your personal information becomes unnecessary. When we destroy your personal information, we will take commercially reasonable and technically feasible measures to ensure the personal information is permanently deleted.

Department in Charge of Protecting Personal Information and Handling Complaints

MeituEve International Limited

Attn: Legal Department

Unit 8106B, Level 81, International Commerce Centre,

1 Austin Road West, Kowloon,

Hong Kong

Email: compliance@meitu.com (please quote “MeituGenius Website” in your email title)