Last Updated: 2026-05-15
If you are a user located in Australia, Brazil, Canada, Hong Kong SAR, India, Indonesia, Japan, Macao SAR, Malaysia, Mexico, Philippines, Russia, Saudi Arabia, Serbia, Singapore, South Korea, Sri Lanka, Taiwan, Thailand, Turkey, United Arab Emirates, United Kingdom, United States or Vietnam, the terms set out below under the name of your jurisdiction apply to you in addition to the terms set out in our Privacy Policy.
We have provided translations of the Privacy Policy, but in the event of any conflict between the local language version and the English version, unless otherwise prescribed by applicable law, the English version shall prevail.
Australia
This section applies to users located in Australia:
Overseas Recipients
We take reasonable steps to ensure that third party recipients of your Personal Information located outside Australia handle your Personal Information in a manner that is consistent with Australian privacy laws. However, you acknowledge that we do not control, or accept liability for, the acts and omissions of these third-party recipients.
Access
You have the right to access Personal Information we hold about you, how we use it, and who we share it with. You can access the Personal Information you have made available as part of your account by logging into your account. If you believe we hold any other Personal Information about you, please contact us via our form here.
Correction
You have the right to correct any of your Personal Information we hold that is inaccurate. You can access the Personal Information we hold about you by logging into your WeChat account. If you believe we hold any other Personal Information about you and that information is inaccurate, please contact us via our form here.
Minors
If you are under the age of 18, you undertake that you have the consent of your parent or legal guardian to register an account on and use WeChat.
Your rights
If you are dissatisfied with our response to your request for access to, or correction of, your Personal Information or your privacy complaint in respect of your Personal Information, you may contact the Office of the Australian Information Commissioner (Telephone +61 1300 363 992 or email enquiries@oaic.gov.au).
Brazil
This section applies to users located in Brazil, regarding the processing of Personal Information governed by the Brazilian General Data Protection Law (Law No. 13,709/18 – “LGPD”) and the Brazilian Digital Child and Adolescent Statute (Law No. 15,211/2025 – “ECA Digital”).
With respect to users located in Brazil, references made to “Minor” in the Privacy Policy shall generally refer to all individuals under 18 years of age. However, in specific cases where Brazilian law recognizes greater autonomy for adolescents aged 16 and over, the term “Minor” will be understood to apply to those under 16.
For purposes of this section, “Personal Information” means any information relating to an identified or identifiable natural person governed by the LGPD.
Collection and Disclosure of Personal Information
We may collect and process the following categories of Personal Information from users who are under 18 years old, as well as from their parents or legal guardians, as applicable and as required under applicable Brazilian law, including the LGPD and ECA Digital:
Identification, contact, age, and family relationship data, such as name, date of birth, user ID, email address, phone number, age-related information, and information used to establish the relationship between the Minor and a parent or legal guardian.
Parental or legal guardian consent and transaction-related data, such as contact details, payment information, records of consent for the processing of the Minor’s Personal Information, and information required to authorize and process purchases or other commercial transactions involving Minors, where permitted by law.
We may collect the Personal Information described above directly from the Minor and/or from the parent or legal guardian and may process the Personal Information for the following purposes:
To verify the age of users and confirm whether an individual accessing WeChat is a Minor.
To link certain users’ accounts to their parents or legal guardians’ account.
To contact parents or legal guardians and obtain valid consent for the processing of a Minor’s Personal Information, where required.
To enable, authorize, and process purchases and commercial transactions involving Minors, in compliance with applicable Brazilian law.
To comply with legal and regulatory obligations in Brazil.
Personal Information collected for these purposes is used exclusively for the purposes described above.
For additional information about how we process Personal Information (including types of Personal Information and retention practices) and sharing of Personal Information with third parties, see Sections 4 and 5 of the Privacy Policy.
Legal Bases for Processing
We ensure that the Processing of Personal Information subject to the LGPD is carried out based on one of the legal bases set forth in Articles 7 or 11 of the LGPD, as applicable.
Rights under the LGPD
Pursuant to the LGPD, you have the right to:
Obtain confirmation of the processing of your Personal Information. Upon request, we will inform you whether or not we process your Personal Information.
Access your Personal Information. Upon request, you may receive a report containing the Personal Information relating to you that is processed by us.
Correct incomplete, inaccurate, or outdated Personal Information. If you believe your Personal Information is incorrect, you may request correction by specifying what needs to be changed and why. We may request supporting documentation to carry out the correction.
Request anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed Personal Information. If you believe your Personal Information is being processed unnecessarily, excessively, or in violation of the LGPD, you may request that such Personal Information be anonymized, blocked, or deleted.
Request the portability of your Personal Information to another service or product provider, subject to our trade and industrial secrets and following regulation by the Brazilian National Data Protection Agency (“ANPD”). As the data subject, you may request the transfer of your Personal Information to another provider, in accordance with ANPD regulations, provided that trade and industrial secrets are respected.
Request deletion of Personal Information processed based on your consent, except where retention is permitted by law. Where your Personal Information is processed based on consent, you may request its deletion. However, the LGPD permits retention for compliance with legal or regulatory obligations; research by a research entity, where possible with anonymization; transfer to third parties; or exclusive use by the controller, provided the data is anonymized.
Obtain information about entities with whom we share your Personal Information. You may request information regarding the entities with whom your Personal Information is shared.
Obtain information about the possibility of refusing consent and the consequences thereof. When consent is used as the legal basis for processing, you have the right to be informed of the possibility of refusing consent and the consequences of such refusal.
Revoke your consent to the processing of your Personal Information. Where processing is based on consent, you may revoke it at any time. Upon revocation, any processing carried out based on consent will be discontinued.
Object to processing that violates the LGPD. If you believe your Personal Information is being processed in violation of the LGPD, you may object to such processing. Your request will be carefully reviewed and, if upheld, the non-compliant processing will be discontinued.
Request review of decisions made solely on the basis of automated processing of your Personal Information. If decisions affecting you are made exclusively through automated processing, you may request a review of such decisions.
Submit petitions regarding your Personal Information to the ANPD. If you deem it necessary, you may submit a petition to the ANPD regarding the processing of your Personal Information.
How to Exercise your Rights
If, for any reason, you need to contact us regarding matters involving your Personal Information, including to exercise your rights, please use the request form here.
Before responding to any request to exercise the rights listed above, we may request additional information to verify your identity.
Minors’ Personal Information and Safety Measures
We always strive to process the Personal Information of Minors in their best interests, in accordance with the LGPD and ECA Digital.
By default, we apply privacy and data protection settings for Minors using WeChat, that are designed to safeguard Personal Information while considering the individual’s autonomy, evolving capacities, and progressive development, and are implemented with the best interests of the Minor in mind.
We also ensure that clear, accessible, and age-appropriate information regarding the processing of Personal Information is made available to Minors, as well as to their parents or legal guardians. Such information is provided in a manner intended to support informed decision-making and to facilitate the meaningful exercise of rights under applicable data protection and Minor protection laws.
We also adopt technical and organizational security measures designed to protect Minors whenever accessing and using WeChat, as required by the LGPD and ECA Digital, including, for instance, through privacy-by-default settings, access controls, data minimization practices, and age-appropriate safeguards.
International Transfers of Personal Information
When Personal Information subject to the LGPD is transferred outside Brazil, we will adopt appropriate measures to ensure an adequate level of protection in accordance with the LGPD and ANPD regulations, including entering into appropriate data transfer agreements with third parties and adopting the standard contractual clauses approved by the ANPD (“BR SCCs”), where required.
Canada
By clicking “accept”, you consent to the cross-border transfer of your information to any country where we have databases or affiliates.
Our designated data protection officer can be contacted via our form here.
Your Rights
Consent Revocation
You may revoke consent that you have previously given for the collection, use and disclosure of your Personal Information, subject to contractual or legal limitations. To revoke such consent, you may terminate your WeChat account or you can contact us via our form here. This may affect our provision of WeChat to you.
Access
You have the right to access Personal Information we hold about you, to be provided with an account of how we use it, and to whom we disclose it. You can access your Personal Information by logging into your account or making a request in writing to us via our form here. We may require further information to verify your identity, which information will only be used for that purpose.
Correction
You have the right to correct any of your Personal Information we hold that is inaccurate. You can access your Personal Information by logging into your WeChat account. If you believe we hold any other Personal Information about you and that information is inaccurate, please contact us via our form here.
Hong Kong SAR
If you choose not to provide your Personal Information, you may not be able to use WeChat properly.
As a Hong Kong SAR data subject, you have legal rights in relation to the Personal Information we hold about you (to the extent permitted under applicable laws and regulations).
You are entitled to make a subject access request (to receive a copy of the data we process about you). You can also exercise your right to data correction as well as your right to stop to the use of your personal data for direct marketing purposes. A fee may be chargeable by us for complying with a data access request.
India
Sensitive Personal Information
“Sensitive Personal Information” means passwords, financial information (such as bank account or credit card or debit card or other payment instrument details), biometric data, data relating to physical or mental health, sex life or sexual orientation, and/or medical records or history, and similar information, but does not include information available in the public domain, or provided under Indian laws, including the Right to Information Act, 2005.
Sharing Of Your Sensitive Personal Information
In the circumstances enumerated in the Privacy Policy, where we permit any third parties to collect and use your Sensitive Personal Information, we shall (i) ensure that such third parties maintain the same security standards that are adhered to by us for the protection of your Sensitive Personal Information and (ii) take reasonable measures to ensure that the third parties do not further disclose the Sensitive Personal Information.
Correction of Your Personal Information & Withdrawal Of Consent
If you believe we hold any other Personal Information about you or a Minor you are responsible for as the parent or legal guardian, and that information is inaccurate, or you have queries regarding the processing, transfer or end-use of your Personal Information, please contact us at our form here.
You do not have the right to retrospectively retract consent or request for deletion of records required for statutory purposes but can withdraw consent to any further processing of your Personal Information or the Personal Information of a Minor you are responsible for as the parent or legal guardian.
Security Measures of Your Personal Information
In accordance with applicable data privacy laws and regulations in India, we shall take appropriate, reasonable technical and organizational measures to prevent the loss of, damage to or unauthorized access to or processing of your Sensitive Personal Information.
Age Restrictions
Parental consent is required for Minors under the age of 18 years who wish to use our services. Where the users are Minors, their parents or legal guardians understand and acknowledge that our collection, storage and processing of Personal Information shared with us, shall be used for the lawful purposes set out in the Privacy Policy and is considered necessary for us to provide the services.
Indonesia
Consent
By accepting and consenting to the Privacy Policy, you agree that we may collect, use and share your Personal Information in accordance with the Privacy Policy, as revised from time to time. If you do not agree to the Privacy Policy, you must not access or use our services and we have the right not to provide you with access to WeChat.
Accuracy of Information
You are responsible for ensuring that any Personal Information which you provide to us is accurate and up-to-date. In order to confirm the accuracy of the information, we may also verify the information you provided to us, at any time.
Parental and Guardian Consent
If you are under the age of 21, you undertake that you have the consent of your parent or legal guardian to register an account on and use WeChat.
Data Subject Rights
You have the right to access, update, correct and request erasure of Personal Information stored on WeChat from time to time in accordance with applicable data privacy laws and regulations in Indonesia.
Data Breach
In the event we fail to maintain the confidentiality of your Personal Information, we will notify you through the contact information provided by you or via WeChat, to the extent required by local laws and regulations.
Data Retention
We will retain your Personal Information in line with legal requirements.
Notification to Amendment of the Privacy Policy
In the event we amend this policy, we will post the updated Privacy Policy at this link and notify you via WeChat or other means before the change becomes effective.
Data Accuracy and Third-Party Consent
You are responsible for making sure that any personal details which you provide to us are accurate and current. In order to confirm the accuracy of the information, we may also verify the information provided to us, at any time. You hereby represent that you have secured all necessary consent(s) before providing us with any other person's Personal Information (for example, for referral promotions, if applicable), in which case we will always assume that you have already obtained prior consent, and as such, you will be responsible for any claims whatsoever from any party arising as a result of the absence of such consent(s).
Japan
Consent
By clicking “accept”, you consent to the cross-border transfer of your information to any country where we have databases or affiliates or where our service providers are located.
Your Rights
You may request that we notify you about the purposes of use of, the disclosure of, any correction to, the discontinuation of the use of or provision of, and/or the deletion of any and all of your Personal Information which is stored by us, to the extent provided for by the Act on the Protection of Personal Information of Japan. If you wish to make such a request, please contact us via our form here.
Macao SAR
You have the right not to provide your Personal Information. However, as a result, we may not be able to provide WeChat to you. As a Macao SAR data subject, you have legal rights in relation to your Personal Information (to the extent permitted under applicable laws and regulations). You are entitled to make a subject access request to request a copy of the data we process about you, to make a data correction request, and have the right to oppose the use of your Personal Information for marketing or any other form of commercial prospecting, or on any grounds of personal nature. A fee may be chargeable by us for complying with a data access request.
Malaysia
Parental and Guardian Consent
In the event you are agreeing to the Privacy Policy in order for a Minor (a person under the age of 18) to access and use WeChat, you hereby consent to the provision of Personal Information of the Minor to be processed in accordance with the Privacy Policy and you personally accept and agree to be bound by the terms in the Privacy Policy. Further, you hereby agree to take responsibility for the actions of such Minor, and that Minor's compliance with the Privacy Policy.
How We Store and Share Your Personal Information
In relation to users in Malaysia, our servers are located in Singapore and Hong Kong SAR and you consent to the transfer of your data outside of your country.
Rights of Data Subjects
Right of access: You have the right to request access to and obtain a copy of the Personal Information that we have collected and is being processed by or on behalf of us. We reserve the right to impose a fee for providing access to your Personal Information in the amounts permitted by law.
When handling a data access request, we are permitted to request certain information in order to verify the identity of the requester to ensure that he/she is the person legally entitled to make the data access request.
We will comply with data access requests within the time periods as stipulated under Malaysian data protection laws.
Right of correction: You may request for the correction of your Personal Information. When handling a data correction request, we are permitted to request certain information in order to verify the identity of the requester to ensure that he/she is the person legally entitled to make the data correction request.
Right to limit processing of your Personal Information: You may request limiting the processing of your Personal Information by using the contact details provided in the Privacy Policy. However, this may affect our provision of WeChat to you.
Contact
To protect your Personal Information and handle complaints relating to your Personal Information, we have appointed a data protection officer, responsible for the management and safety of your Personal Information, who can be contacted via our form here.
Mexico
Purposes of processing
Certain of the purposes for processing stated in the Privacy Policy are voluntary, including:
to allow you to disclose your location to a Mini Program, or find Mini Programs Nearby; and
to allow you to disclose your general location to the People Nearby and Shake functions for a limited period of time and you can choose to clear such location data at any time.
Data transfer consent
We require your consent to carry out the following transfers of data, which are detailed in the section “Who Do We Share Your Data With” in the Privacy Policy:
By using WeChat and providing us with your personal data, you agree to the data transfers detailed above that require your consent.
Age restrictions
You won’t be able to use WeChat unless you are 18 years old or you have obtained parental/guardian agreement to the Privacy Policy (both for themselves and on your behalf).
Your rights
The sub-sections entitled “Access & Correction”, “Erasure”, “Objection”, “Restriction of Processing to Storage Only”, which includes the limitation to the use and disclosure of your personal data included in the section “Your Rights” in the Privacy Policy also apply to users that are located in Mexico.
You also have the right to revoke the consent that you have provided to us to process your personal data.
To exercise any of your rights, contact us via our form here.
To know more about your rights, as well as the applicable means, procedures and requirements to exercise any of your rights, please contact us via our form here.
Philippines
Your Rights
You are entitled to the following rights:
Right to be informed. You may in certain circumstances have the right to be informed whether personal data pertaining to is being, or has been processed, including the existence of automated decision-making and profiling.
Right to object. You may in certain circumstances have the right to object to the processing of your personal information, including processing for direct marketing, automated processing or profiling.
Right to access. You may in certain circumstances have the right to seek reasonable access to, upon request, your personal information.
Right to rectification. You may in certain circumstances have the right to dispute an inaccuracy or error in your personal information and have us correct it, unless the request is vexatious or otherwise unreasonable.
Right to erasure or blocking. You may in certain circumstances have the right to suspend, withdraw or seek the blocking, removal or destruction of your personal information.
Consent
By consenting to the Privacy Policy, you consent to us:
collecting and processing your personal information as described in the section “How We Use Your Personal Information” in the Privacy Policy;
sharing your personal information with third parties, companies within our corporate group, and a third party that acquires substantially all or substantially all of us or our business, as described in the Privacy Policy and for the purposes stated herein; and
transferring or storing your personal information in destinations outside the Philippines as described in the sections “Who Do We Share Your Data With?” and “Where Do We Process Your Data?” in the Privacy Policy.
Russia
If you are using WeChat from Russia:
You confirm that you are at least 18 years old, or if you are below 18 years old, your parent or guardian has provided consent to your use of WeChat.
You consent (for the purposes of the Russian Federal Law No. 152-FZ dated 27 July 2006 “On Personal Data” (as amended) or any replacement regulations) to the processing in accordance herewith of your information. In particular, if legitimate interests, optimization of the service, carrying out of the contract or any other purposes are mentioned herein, you agree that, for the purposes of Russian law, the consent so provided can be considered an additional ground for processing (meaning that the processing is conducted with your consent). You also consent to the cross-border transfer of your information to any country where we have databases or affiliates or where our service providers are located and, in particular Singapore and Hong Kong SAR.
We will not implement any material changes hereto, unless we have notified you.
You can contact us via our form here. Please include the word “Russia” in the subject line of your response.
Saudi Arabia
You consent to the collection, use, disclosure, export and storage of your Personal Information as described in the Privacy Policy.
Serbia
Our designated local representative in Serbia is Karanovic & Partners for the purposes of compliance with the Law on Personal Data Protection, and can be contacted at local.representative@karanovicpartners.com. Please include the word “Serbia” in the subject line of your email.
Singapore
By clicking “accept”, you consent to the collection, use and disclosure of your Personal Information, for the purposes set out in the section “How do we use your information?” in the Privacy Policy, and which we will process as an “organisation” as defined under the Personal Data Protection Act 2012.
Our designated data protection officer for the purposes of compliance with the Personal Data Protection Act 2012 can be contacted at our form here.
Access
You have the right to access your Personal Information, how we use it, and who we share it with. You can access the Personal Information you have made available as part of your account by logging into your account. If you believe we hold any other Personal Information about you, please contact us at our form here.
Correction
You have the right to correct any of your Personal Information that is inaccurate. You can access the Personal Information we hold about you by logging into your account. If you believe we hold any other Personal Information about you and that information is inaccurate, please contact our form here.
South Korea
Collection and Use of Personal Information
We collect your personal information for the purposes described in the Privacy Policy. Personal information that we collect from Korea is stored in and processed on our server located in Singapore.
With regards to the legal basis of processing personal information included in the Privacy Policy – “4. How Do We Use Your Information?” the following legal provisions under the Personal Information Protection Act (“PIPA”) apply:
Subject to applicable laws, we do not allow Minors under the age of 14 to use WeChat unless their parents/guardians consent to our processing of the Minor's personal information. We do not knowingly collect Personal Information from any Minor under the age of 14 without such consent. For Minors under the age of 14, parents/guardians may exercise all the data subject's rights under the PIPA on the Minor's behalf. If you believe we hold any Personal Information about a Minor under the age of 14 without the required parental/guardian consent, please contact our Data Protection Officer so that we can promptly investigate and delete it.
Delegation/Provision of Processing and Overseas Transfer of Personal Information
To the extent necessary to provide the WeChat service, we may transfer your Personal Information (including location information) to third parties located outside Korea. Such cross-border transfer of Personal Information is conducted as set out below.
| Identity of the recipient and contact information of Chief Privacy Officer | Legal Basis | Location (and jurisdiction of the recipient or as otherwise stated in the recipient's privacy policy) | Purposes of use of Personal Information by the recipient | Items of Personal Information to be provided | Date and method of transfer | Period of retention and use of personal information by the recipient |
|---|---|---|---|---|---|---|
| Shenzhen Tencent Computer Systems Company Limited | [Delegation]; PIPA Art. 28-8(1)3 (Delegation and Retention for Contract Performance) | Chinese Mainland | Provision of remote technical support | Information collected during your usage | Transmitted from time to time | Retained for such time as stated in the section “How do we use your information?” of the Privacy Policy. |
| Shenzhen Tencent Computer Systems Company Limited | [Third-party Provision]; PIPA Art. 28-8(1)1, 17(1)1 (Consent of the Data Subject) | Chinese Mainland | Facilitate your Interoperable Interaction | Personal information that you choose to share as part of certain Interoperable Interaction (e.g. chat content when you communicate with a Weixin user). | Transmitted from time to time | Retained for such time as stated in the privacy policy of the relevant third party service (Weixin Privacy Policy. |
| Tencent Cloud International Pte. Ltd. (cloudlegalnotices@tencent.com) | [Delegation]; PIPA Art. 28-8(1)3 (Delegation and Retention for Contract Performance) | Singapore | Provision of cloud storage and other cloud services | Information collected during your usage | Transmitted from time to time | Retained for such time as stated in the section “How do we use your information?” of the Privacy Policy. |
| Adyen N.V. (dpo@adyen.com) | [Delegation]; PIPA Art. 28-8(1)3 (Delegation and Retention for Contract Performance) | Netherlands | Verifying payment card information in relation to parental / guardian consent | Payment card information | Transmitted from time to time | Retained for such time as stated in the section “How do we use your information?” of the Privacy Policy. |
| MessageBird B.V. (privacy@bird.com) | [Delegation]; PIPA Art. 28-8(1)3 (Delegation and Retention for Contract Performance) | Netherlands | SMS services | Registration and login data | Transmitted from time to time | Retained for such time as stated in the section “How do we use your information?” of the Privacy Policy. |
| Twilio Inc. (privacy@twilio.com) | [Delegation]; PIPA Art. 28-8(1)3 (Delegation and Retention for Contract Performance) | United States | SMS services | Registration and login data | Transmitted from time to time | Retained for such time as stated in the section “How do we use your information?” of the Privacy Policy. |
| Google Asia Pacific Pte. Ltd. (Privacy Policy) | [Delegation]; PIPA Art. 28-8(1)3 (Delegation and Retention for Contract Performance) | United States | Translation service | Text to be translated | Transmitted from time to time | Retained for such time as stated in the section “How do we use your information?” of the Privacy Policy. |
| Microsoft Operations Pte. Ltd. (Privacy Policy) | [Delegation]; PIPA Art. 28-8(1)3 (Delegation and Retention for Contract Performance) | United States | Translation service | Text to be translated | Transmitted from time to time | Retained for such time as stated in the section “How do we use your information?” of the Privacy Policy. |
| Operators of third-party services that allow log in via WeChat or are interoperable with WeChat via the Weixin Open Platform (e.g. Mini Program, Mini Game and Official Account operators), at your request/direction. Please refer to the privacy policy of the relevant third-party services for contact information. | [Third-party Provision]; PIPA Art. 28-8(1)1, 17(1)1 (Consent of the Data Subject) | Where the servers of the third-party services are located | Access to third party services in accordance with your request | User alias; Profile photo; Gender; Region | Transmitted from time to time | Retained for such time as stated in the privacy policy of the relevant third-party services. |
Overseas transfer is necessary for the provision of our service, so if you refuse the overseas transfer, you will not be able to use WeChat or relevant features within WeChat. If you wish to refuse overseas transfer of Personal Information, you may delete your account or contact our Data Protection Officer.
The mandatory retention periods for Personal Information required by law in Korea are as follows:
| Items | Relevant Statute | Retention Period |
|---|---|---|
| Records related to entering into and withdrawing from a contract | Act on the Consumer Protection in Electronic Commerce | 5 years |
| Records related to payment and other supplies of money | Act on the Consumer Protection in Electronic Commerce | 5 years |
| Records related to consumer complaints and dispute settlement | Act on the Consumer Protection in Electronic Commerce | 3 years |
| Records related to labelling | Act on the Consumer Protection in Electronic Commerce | 6 months |
| Service visit logs | Protection of Communications Secrets Act | 3 months |
| Telecommunication logs | Protection of Communications Secrets Act | 12 months |
Destruction of Personal Information
We destroy your Personal Information when it is no longer unnecessary, such as the expiration of its retention period and achievement of its purpose for processing, except where there is a law or regulation that requires us to retain that Personal Information. Inactive accounts may be deleted in our discretion (except if you have a positive balance in your WeChat Pay or Weixin Pay account or are the administrator of an Official Account or Mini Program).
The destruction procedure of Personal Information (including your personal location information) is as follows:
Measures to Ensure Safety of Personal Information
We highly value the safety of your Personal Information. We implement the following measures to ensure safety of your personal information:
Domestic Privacy Representative
Pursuant to Article 31-2 of the PIPA and Article 32-5 of the Act on the Promotion of the Use of the Information Network and Information Protection, the information regarding the domestic agent is as follows:
Remedies for Infringement of Rights and Interests
If you wish to seek assistance or remedies for violations of personal information rights, you may contact the following agencies:
Personal Location Information
Purposes for which your personal location information is processed: To provide location information-based services as described in our Terms and Conditions of Location-Based Service.
Period for retaining your personal location information: Retained for the minimum period necessary to provide you with location-based services.
Grounds for retaining the data verifying the collection, use and provision of location information and period of retaining the data: In accordance with Article 16(2) of the Act on the Protection and Use of Location Information (“Location Information Act”), we will automatically record data verifying the collection, use, and provision of location information in a location information system, and preserve the data for 6 months or longer.
Notification under the Article 19(3) of the Location Information Act: After you share your personal location information with a third party, we may be required to notify you of the relevant details (i.e. who will get the information, as well as the date, time and purpose of the sharing) via WeChat or other permitted methods.
Rights of the legal guardian of a protected person and methods for exercising those rights under the Article 26(1) of the Location Information Act: Where the legal guardian of any of the following persons:
gives consent to the use or provision of personal location information regarding the protected person, for the protection of the person's health or safety, we shall deem that the protected person has consented to such use or provision.
For the protection of the health or safety of the protected person, the legal guardian who intends to consent to the use or provision of personal location information of the protected person must submit a written consent to us via our form here along with a document proving that he/she is the legal guardian.
The legal guardian can exercise all of the rights of the subject of personal location information if he/she agrees to the use or provision of personal location information for a protected person.
Contact Information of International Privacy Data Protection Department, responsible for protecting personal location information:
Sri Lanka
By clicking “accept”, you consent to the terms and conditions of the Privacy Policy and permit the collection, use and disclosure of your Personal Information. However, if you are under the age of 18, you undertake that you have the consent of your parent or legal guardian to register an account on and use WeChat.
Where you request to withdraw consent or, refrain from further processing of data or, erase or, rectify or, complete your Personal Information, we will provide you with our response to the request within 21 working days.
Taiwan
We do not knowingly collect or solicit Personal Information from anyone under the age of 7 or knowingly allow such persons to register with WeChat. If you are under 7, please do not attempt to use or register for WeChat or send any Personal Information about yourself to us. No one under the age of 7 may provide any Personal Information to us while using WeChat. In the case of users located in Taiwan, persons under the age of 20 are required to obtain parental/guardian consent prior to using WeChat.
You may exercise the following rights as set forth in Article 3 of the Personal Data Protection Act: (1) access your Personal Information to check and review it; (2) have a copy of your Personal Information; (3) supplement or correct your Personal Information; (4) demand that we cease the collection, processing, or use of your Personal Information; and (5) demand that we delete your Personal Information. To the extent permitted by law, there may be limitations on our ability to comply with your request.
Thailand
By clicking “accept”, you acknowledge that you have read, understood, and agree to the Privacy Policy. If you do not agree with the Privacy Policy, you must not use WeChat.
If you are under the age of 20, you undertake that you have obtained your parent or legal guardian's consent to register an account on and use WeChat.
To the extent provided for by the Thai Personal Data Protection Act (“PDPA”), you may:
withdraw your consent to the processing of your Personal Information (only where the legal basis for our processing is consent); however, please note that where consent is required to process your Personal Information, we may not be able to deliver the expected service without it;
request us to provide you access to, make any correction to, cease any automated processing or profiling (if applicable), discontinue, restrict the use or provision of and/or erase your Personal Information;
request us to provide you or a third party with your Personal Information which is stored by us in a machine readable format; and/or
lodge a complaint to a relevant authority.
Where you wish to make such requests, please contact us via our form here.
The contact details of our designated local representative in Thailand for the purposes of compliance with the PDPA is below and can be contacted via email. Please include the word “Thailand” in the subject line of your email.
Türkiye
Our Data Controller Representative in Türkiye is Özdağıstanli Ekici Avukatlık Ortaklığı for the purpose of compliance with Turkish Law on Personal Data Protection Law (“DPL”) and its secondary regulations, and can be contacted at tencent@iptech-legal.com. Please include the word “Türkiye” in the subject line of your email.
You have legal rights, which are specified set forth Article 11 of the DPL, in relation to the personal data we hold about you. As a Turkish data subject, you may have the right to apply to the data controller (to the extent permitted under applicable laws and regulations) to:
learn whether or not your personal data has been processed;
request information about processing if your personal data has been processed;
learn the purpose of processing of your personal data;
know the third parties in the country or abroad to whom personal data has been transferred;
request rectification in the event personal data is incomplete or inaccurate;
request deletion or destruction of personal data within the framework of the conditions set forth under Article 7 of the Personal Data Protection Law (Türkiye);
object to certain processing of data, and seek certain remedies in accordance with the Personal Data Protection Law (Türkiye).
United Arab Emirates
You consent to the collection, use, disclosure, export and storage of your Personal Information as described in the Privacy Policy.
We may voluntarily report a cyber-security incident where it constitutes a crime under UAE law (e.g. under the UAE Cybercrime Law). The incident can be reported to the relevant authorities for the purpose of investigations. Please note also that voluntary reporting of a cyber-security incident can also be made to the UAE Computer Emergency Response Team (“CERT”). CERT is a security awareness organization that provides a process for logging incidents and advising on known cyber security threats in the UAE.
Minors
In the case of users located in the United Arab Emirates, the minimum age to be able to legally agree to commercial transactions is 21 (under the Hijri calendar). However, a Minor, who is between the ages of 18 and 21 may obtain a court order giving him/her permission to engage in specific commercial transactions. In addition, a Minor who is above the age of 7 years old may engage in commercial transactions subject to their guardian's approval.
United Kingdom
Our local representative in the United Kingdom is Image Frame Investment (UK) Limited, with its registered address at Suite 1, 3rd Floor 11 – 12 St. James's Square, London, United Kingdom, SW1Y 4LB. You can contact our local representative in the United Kingdom via our form here. Please include the word “United Kingdom” in the subject line of your response.
United States
California
This section applies to California residents covered by the California Consumer Privacy Act of 2018 (“CCPA”).
The CCPA provides California residents with certain legal rights such as access, deletion, disclosure, or “do not sell.” These rights are not absolute and are subject to certain exceptions.
Collection and Disclosure of Personal Information
Over the past 12 months, through your use of WeChat, we may have collected and disclosed the following categories of Personal Information from or about consumers, as defined in the CCPA:
Identifiers, such as phone number, name, alias, token, username, IP address, mobile application store user ID, mailing address, emergency contact information, and contact list. This information is collected directly from the consumer or device;
Geolocation data, including geolocation information derived from GPS coordinates, Wi-Fi access points, IP address, and public posts. This information is collected directly from the consumer or device, and we obtain consumer consent prior to collecting any “precise geolocation” data (as defined under the CCPA), which is considered “sensitive” under the CCPA;
Internet or other electronic network activity information, including your device model, network type, OS type and version, client version, call history, chat data, invitations data, call credits history, search history, log data, information related to third party accounts that you have linked to WeChat, and survey information. This information is collected directly from a device;
Commercial information, including payment card information and transaction verification information. This information is collected directly from the consumer or device;
Audio, electronic, visual, or similar information, including a profile picture. This information is collected directly from the consumer; and
Other information that is described in subdivision (e) of Section 1798.80, such as nationality and gender (this information is being collected in the consumer context rather than the employer context). This information is collected directly from the consumer.
We collect Personal Information for the following purposes:
To operate and administer WeChat;
To communicate with consumers;
To improve our services;
For security and verification purposes, including to prevent and detect fraudulent activity; and
To address and remediate technical issues and bugs.
For additional information about how each type of Personal Information is used and retained, see the main portion of the Privacy Policy.
We may disclose each of the categories of Personal Information identified in the Privacy Policy to the following types of entities:
Related group companies within our corporate group who process your Personal Information in order to operate the services (as described in the section “Who Do We Share Your Data With” of the Privacy Policy);
Other companies that provide services on our behalf who are prohibited by contract from retaining, using, or disclosing Personal Information for any purpose other than for providing such services to us;
Other users of WeChat and Weixin with respect to Personal Information you publicly post through WeChat;
Official Accounts and Mini Program operators, and other third party services which you choose to use your WeChat account for login;
Regulators and judicial authorities and law enforcement agencies; and
Entities that acquire all or substantially all of our business.
We do not sell or share personal information and in the past 12 months, we have not sold or shared personal information of California residents within the meaning of “sold” or “shared” in the CCPA. Further, we do not have actual knowledge that we “sell” or “share” personal information of residents under 16 years of age.
Rights under the CCPA
If you are a California resident and the CCPA does not recognize an exemption that applies to you or your Personal Information, you have the right to:
Request that we disclose to you free of charge the following information covering the 12 months preceding your request:
the categories of Personal Information about you that we collected;
the categories of sources from which the Personal Information was collected;
the purpose for collecting Personal Information about you;
the categories of third parties to whom we disclosed Personal Information about you and the categories of Personal Information that was disclosed (if applicable) and the purpose for disclosing the Personal Information about you; and
the specific pieces of Personal Information we collected about you;
Request that we delete Personal Information we collected from you, unless CCPA recognizes an exemption;
Request that we correct inaccurate personal information we maintain about you; and
Be free from unlawful discrimination for exercising your rights including providing a different level or quality of services or deny goods or services to you when you exercise your rights under the CCPA.
We aim to fulfill all verified requests within 45 days pursuant to the CCPA. If necessary, extensions for an additional 45 days will be accompanied by an explanation for the delay.
Please note that in order to protect your information, we will need to verify your identity before responding to any request to exercise your rights. In some cases we may need to collect additional information to verify your identity, such as a government issued ID.
How to Exercise Your Rights
First, you may wish to log into your account and manage your data from there. If you are a California resident to whom the CCPA applies, you may exercise your rights, if any, to other data by contacting us via our form here.
Under the CCPA, you may exercise these rights yourself or you may designate an authorized agent to make these requests on your behalf by contacting us at our form here. For requests by an authorized agent, we may require you to directly verify your identity with us, and confirm with us that you provided the authorized agent permission to submit the request.
Other U.S. States
This section applies to U.S. residents who live in states that have comprehensive privacy laws similar to the CCPA that apply to us. If you are a California resident, please see the section above, California, for information on your rights in relation to information that we have collected about you.
Sensitive Data Collection
For certain WeChat features, such as sharing of location via chat, geo-tagging a location in Moments and Status, People Nearby and Shake, we may collect geolocation data from U.S. residents that could be considered “precise geolocation data” under applicable U.S. state privacy laws. We do not collect such data without obtaining your consent. We may also collect information from Minors under the age of 13 who use WeChat, but only after obtaining parental/guardian consent.
Rights under U.S. State Privacy Laws
Depending on the state you live in, you may have some or all of the rights listed below in relation to information that we have collected about you. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law, including in the event you reside in a state that does not currently grant you these rights.
Right to request that we confirm whether we process information about you and give you access to that information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another business without impediment;
Right to request that we delete information we maintain about you; and
Right to request that we correct inaccurate information we maintain about you.
Note that we do not process your information for the purposes of targeted advertising, profiling in furtherance of decisions that produce legal or similarly significant effects, or selling your information (as all such terms and concepts are defined under applicable U.S. state privacy laws).
How to Exercise Your Rights
You may exercise any of these rights by contacting us via our form here. We will not discriminate against you for exercising any of these rights. We may need to collect additional information to verify your identity, such as your email address or a government issued ID. Depending on your location, you may designate, in writing or through a power of attorney document, an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us.
Right to Appeal
In addition, you may have the right to appeal our decision regarding a request related to these rights by contacting us via our form here. When you submit a request or launch an appeal, we will limit our collection of your information to only what is necessary to securely fulfil your request or process your appeal. We will not require you or your authorized agent to pay a fee for the verification of your request or appeal.
Vietnam
By accepting the Privacy Policy, you expressly agree and authorize us to collect, use, store, and process your Personal Information, including, lawfully disclosing and transferring it to third parties, as described in the Privacy Policy.
We maintain international standards and security practices for data protection. When your Personal Information is transferred within or outside your jurisdiction of residence, it will be subject to the same or higher levels of security practices and data protection by the recipient entity as adhered to by us.
Where we permit any third parties to collect and use your Personal Information, we shall take reasonable measures to ensure that the third parties do not further disclose the Personal Information.
Your Personal Information, if required to be disclosed to the competent law enforcement agencies, public authorities or other judicial bodies and organizations, will be disclosed upon receipt of written request from such organizations.
Where required by the law and regulatory requirements of your jurisdiction from time to time, we may retain all or part of your Personal Information for a period longer than described in the Privacy Policy.
You have the right to access, correct, and erase the Personal Information we hold about you. You also have the right to withdraw your consent to collect, store, process, use and disclose your Personal Information and to request us to stop processing or providing your Personal Information to a third party.