Privacy Policy
Third Party Plug-in / SDK Access
Third Party Plug-in / SDK Access "To ensure reliable services, we work with our authorised business partners which provide their plug-in programs or software development kits (“SDK”), and which may process your personal information as follows:
| Name of Plug-in / SDK and its Provider | Purposes of Processing of Personal Information and Business Functions | Types of Personal Information Processed | Methods of Collecting Personal Information by Plug-in / SDK Providers | Manner of Processing Personal Information (Mobile App Functionalities Permitted to be Accessed by Plug-in / SDK Providers) | Privacy Policy of the Plug-in / SDK Provider | Mobile OS |
|---|---|---|---|---|---|---|
Gravty SDK by Loyalty Juggernaut Inc (Gravty) | This is an SDK built for our loyalty management system, which provides us with the mobile facing APIs and saves data in local storage of mobile devices. Personal information is processed for the abovementioned API integration. Applicable to all users. | All loyalty programme member details (please refer to section 1.5 of the General Terms in our Privacy Policy), offers, member account transactions and activities, member privileges; authentication tokens; device model, operating system version and app version required for API calls. | All loyalty programme data will be collected via the API by the SDK in the backend. | Processing, transferring and storing personal information via API integration; caching in the local storage of the mobile device; Internet access and network state permissions. | iOS and Android | |
| Tencent Map SDK for Android (including the Tencent Location Service positioning component) by Tencent | Provides map display, place search, geocoding, route display and "nearby" related features for users in Mainland China. Initialised only after the user's service region is resolved as Mainland China. | Location information (GPS/BeiDou coordinates, WLAN access point information, Bluetooth information, base station information); device identifiers (AndroidID, OAID, IMEI, MAC address); device model, operating system version, screen and sensor information (accelerometer, gyroscope, orientation); IP address, network type and carrier information; app package name; map interaction and search keywords. | Collected by the SDK from device sensors, network positioning and the user's interaction with the map, and transmitted to Tencent's servers. | Used for map rendering and location resolution; requires precise location, approximate location, Internet access, network state and WLAN state permissions. Location information is sensitive personal information; separate consent is required, and it is collected only after the user enters a map/location related screen. | https://lbs.qq.com/terms/privacy (Tencent Location Service Privacy Policy); Tencent group privacy: https://privacy.qq.com/ | Android |
| Tencent WUP SDK by Tencent (integrated as an embedded base component of the Tencent Map / Location Service SDK) | Tencent's base communication protocol and data reporting component, integrated together with the Tencent Map / Location Service SDK. Used for request encapsulation, data transmission and SDK operational status reporting between that SDK and Tencent's servers, in order to maintain the availability and stability of the positioning and map services. It does not provide any standalone user-facing function; its applicable region is the same as the Tencent Map SDK (Mainland China users only). | Device identifiers (AndroidID, OAID, MAC address); device model, operating system version; IP address, network type and carrier information; app package name and version; SDK operational and exception logs. | Collected and reported by the component in the backend during the initialisation and operation of the Tencent Map / Location Service SDK. | Used solely for data transmission and operational status reporting between the aforementioned SDK and Tencent's servers; requires Internet access and network state permissions. It does not separately request location, camera, contacts or other permissions. | Same as the Tencent Location Service Privacy Policy: https://lbs.qq.com/terms/privacy; Tencent group privacy: https://privacy.qq.com/ | Android |
| WeChat SDK (WeChat Open Platform OpenSDK) by Tencent | Supports WeChat Login (authorised login) and related authentication services, applicable to users holding a WeChat account. | WeChat OpenID, WeChat nickname, profile photo and public profile information, access token; device model, operating system version, app package name and signature information, and network state information required to launch the WeChat client. | Returned by WeChat after the user completes authorisation in the WeChat client. | Used for account authentication and login; requires Internet access and network state permissions, and launches the WeChat client installed on the device. Contacts, location and chat history are not collected through this SDK. | Weixin Privacy Protection Guidelines: https://weixin.qq.com/cgi-bin/readtemplate?lang=en&t=weixin_agreement&s=privacy; Tencent group privacy: https://privacy.qq.com/ | Android |
| Google Maps SDK for Android by Google | Provides map display, place search and route display for users outside Mainland China. Initialised only after the user's service region is resolved as outside Mainland China. | Location information (GPS coordinates, WLAN and base station assisted positioning information); device identifiers, device model and operating system version; IP address, network type; map interaction and search keywords. | Collected by the SDK from the device's location services, network positioning and the user's interaction with the map, and transmitted to Google's servers. | Used for map rendering and location resolution; requires precise location, approximate location, Internet access and network state permissions. Location information is sensitive personal information; separate consent is required, and it is collected only after the user enters a map related screen. Involves the provision of personal information outside China. | https://policies.google.com/privacy?hl=en-US; Google Maps Platform Terms of Service: Google Maps Platform Terms Of Service | Google Cloud | Android |
| Google Sign-In SDK by Google (described as "Google SDK" in the previous list) | Personal information is processed for accessing Google authentication services. Applicable to users who log in with a Google account. | Name, e-mail address, phone number; Google account identifier and access token. | Data is processed via the Google authentication sheet presented by the SDK, after user authorisation. | Uses and processes personal information for authentication purposes; requires Internet access and account authentication permissions. Involves the provision of personal information outside China. | https://policies.google.com/privacy?hl=en-US | iOS and Android |
| Sunshine SDK (Alliants Live Chat) by Zendesk, Inc | Personal information is processed to enable us to view a member's details during customer service live chat, and to provide customer support messaging services. Applicable to all users. | First name, last name, e-mail address, phone number, title, date of birth, loyalty membership ID; conversation message content and attachments actively uploaded by the user. | We will upload data during SDK initialisation, and the SDK will synchronise new data in the backend. | Uses and processes personal information to provide customer support and to trigger push notifications. This SDK requires the following permissions: (1) sending push notifications; (2) camera (receipt upload); and (3) photo gallery/storage (attachment upload). The camera and gallery permissions are requested only when the user actively uploads. Involves the provision of personal information outside China. | https://www.zendesk.com/company/agreements-and-terms/privacy-notice/ | iOS and Android |
| Push Notification Android ARchive library (lib-techain-release-3.6.0.0.aar) by Baidu | Personal information is processed to trigger push notifications to customers. Provides the push channel for users in Mainland China. | Name, phone number, loyalty membership ID, loyalty membership tier (tier name, start date, end date), member account transactions and activities; in addition, the SDK itself collects device identifiers (IMEI, OAID, AndroidID, MAC address), device model and operating system version, IP address, network type and carrier information, and push delivery and click status. | Member-related data is transmitted to the SDK from our backend via the API in the backend; device identifiers and network information are read locally by the SDK and reported. | Uses and processes personal information to trigger push notifications. This plug-in requires permission to send push notifications, together with Internet access and network state permissions. | https://www.baidu.com/duty/yinsiquan-policy.html | Android |
| Facebook Login SDK by Meta | Supports authentication using a Facebook account. Enabled only for users outside Mainland China (it is not initialised for users in Mainland China, and the login entry point is not displayed). | Facebook user ID, name, e-mail address (limited to the scope authorised by the user), public profile information, access token; device model, operating system version, app package name and network state information. | Returned by Meta after the user's authorisation on Facebook. | Used for account authentication and login; requires Internet access and account authentication permissions. Involves the provision of personal information outside China. | Meta Privacy Policy - How Meta collects and uses user data | Android |
| Marketing Cloud SDK by Salesforce | Supports push notifications, marketing campaign delivery, engagement analytics and customer communications. Provides the push and marketing channel for users outside Mainland China. | Push token, device identifier, device model and operating system version, IP address, app usage and engagement records (opens, clicks), user identifiers (where configured). | Collected and reported by the SDK during SDK initialisation, push registration and use of the app. | Uses and processes personal information to trigger push notifications and marketing messages; requires push notification permission, Internet access and network state permissions, and reads device identifiers. Involves the provision of personal information outside China. | https://www.salesforce.com/company/privacy/ | Android |
BRILLIANT BY LANGHAM
Connect with us on
