Data Protection Policy

Data Protection Policy

Purpose

Lazada is committed to protect all customers’ personal data and privacy. The purpose of this Data Protection Policy is to set out some clear guidelines on certain do’s and don’t regarding customers’ personal data.

What is ‘personal data’?

Personal Data refers to data about an individual who can be identified from that data on its own, or from that data and other information to which the organisation has or is likely to have access. For example, personal data would include names, personal contact numbers, email addresses and mailing addresses.

Sellers are granted access to customers’ personal data for the fulfillment of customers’ orders. For detailed information on your obligation with respect to personal data, please refer to the section headed “Personal Data” in your Marketplace Agreement. In the event of any conflict or inconsistency between the provisions of the Marketplace Agreement and this Policy, the provisions of the Marketplace Agreement shall prevail.

Important Rules:

1.Sellers are not permitted to use the personal data of customers for any other purpose apart from the fulfillment of customer orders. Examples of inappropriate and non-permitted use include, for example:

a.Adding customers to instant messaging (e.g. Whatsapp, LINE, etc.) or social media groups;

b.Sending mass emails to or calling customers for marketing and other purposes not authorized by Lazada

c.Mailing unsolicited packages or items to customers

2.Sellers are to employ sufficient security measures to protect and store customers’ personal data in a safe and secure manner. This includes taking all reasonable steps to ensure that customer data will only be made accessible for the purposes of fulfilling customer orders. For example, ensuring that customer lists are password protected is one way of protecting such customer data.

3.Sellers are not permitted to share, transfer or disclose customers’ personal data to unauthorized third parties without the prior written consent of customers and Lazada.

4.Sellers are to delete customers’ personal data as soon as reasonably possible after the fulfillment of the customers’ order.

5.If you suspect your computer has been hacked, or that there has been a potential data breach (e.g. you accidentally send emails or messages containing the personal data of others), you must inform us immediately at dpo@lazada.com so that we can assess the situation and offer assistance.

Consequences

Violation of this Policy may result in account restrictions, up to 48 Non-Compliance Points (NCP) and immediate store termination. Each violation is evaluated on a case-by-case basis by Lazada officers. Sellers may lodge an appeal in growth center, but Lazada reserves the right to a final decision.