China Mainland

This section of the China Privacy Policy ("Section" or "Policy") supplements the Kimberly-Clark Corporation Global Privacy Policy ("Global Privacy Policy"). This Section applies to personal information collected by Kimberly-Clark (China) Co. Ltd. and its affiliates (collectively, "K-C China" or "we") in mainland China (excluding Hong Kong, Macau, and Taiwan) through a variety of online and offline channels. The sources of collection include but are not limited to, K-C China's official website, K-C and its brands' WeChat platforms (e.g., WeChat official account, WeChat mini program, etc.), and in-person events organized by K-C China. If there is a conflict between this section and other sections of the Global Privacy Policy, the agreements in this section shall prevail to the extent that this section applies.

This section is designed to help you understand how K-C China collects and uses processes, shares, transfers, publicly discloses, transmits, and protects your personal information, your privacy rights, how it handles personal information from children, how your personal information is transferred globally, how this policy is updated, and how to contact us, please read it carefully, and please refer to other sections of the Global Privacy Policy for other privacy matters. K-C will always abide by the principles of consistent authority and responsibility, clarity of purpose, choice of consent, minimum necessary, security, subject involvement, openness, and transparency, and take safe and secure technical measures to protect the security of your personal information to the best of our ability.

1. How we collect and use your personal information?

Personal information is any information that is recorded, electronically or otherwise, that can be used alone or in combination with other information to identify a natural person or reflect the activity of a natural person, excluding the information after anonymization.

Sensitive personal information refers to personal information that, once leaked, illegally provided, or abused, could endanger personal and property safety, or easily lead to damages to personal reputation, mental & physical health, or discriminatory treatment, such as personal biometric information, Religious Belief, Specific Identity, health information, bank account information, records of whereabouts, as well as personal information of minors under 14 years of age.

We generally collect and use your personal information for the following purposes. If we collect or use your personal information for purposes other than those described below, we will provide you with a full explanation of the purpose, use, content and scope of the collection and use of your relevant information and obtain your consent in advance.

The purposes of our use include but are not limited to providing you with business functions and/or services in which we collect personal information such as registering for an account, sending transaction information, processing your payments and refunds, sending you samples or freebies; providing you with the ability to view nearby stores (which requires you to enable location access); internal security controls such as security maintenance and verification, detecting threats and preventing malicious fraud, and logging interactions with consumers. In addition, if you contact our customer service staff, to serve you better, we may collect your personal information through online forms, hotlines, etc. to verify your identity, record, and provide feedback on your claims.

In some scenarios, we may collect your personal information through WeChat mini program. You can choose to refuse our collection of the corresponding personal information by turning off the permission or refusing authorization in the WeChat Mini Program settings. The information we collect through the WeChat mini program includes, but is not limited to, the user's platform nickname, avatar, gender, location, language, cell phone number, ID number, mailing address information, device location information, device connection information, user geolocation information, etc.

You may have provided us with your personal information by registering as a member on K-C or its brands' websites, WeChat mini program or other platforms, applying for trial products, using our mini app services, viewing online advertisements, agreeing to receive emails from us or contact our customer service. To enhance our products and services, we may provide the personal information you provide to our trusted partners or obtain some of your personal information (such as advertising ID) from our carefully selected vendors through legal means to continuously optimize and enhance our service capabilities.

For more information about how K-C collects and uses your personal information, please refer to the "What Personal Information We Collect" and "What We Do With Your Information" sections of our Global Privacy Policy.

2.How we entrust the processing, sharing, transfer and publicly disclosure of your personal information?

1) Entrusted processing:

Some of the specific modules or functions of the services provided by K-C China may be provided by external vendors. We will engage third-party vendors to operate the WeChat official accounts and mini programs involved in the services in question and to assist us in providing customer support, such as companies that collect and store relevant personal information, send SMS messages, and provide technical support on our behalf. We will enter into strict confidentiality agreements with vendors entrusted with the processing of your personal information, requiring them to use the personal information strictly for the purposes stated in this section and requiring them to process the personal information in accordance with our requirements, the requirements of this section, and any relevant confidentiality and security measures.

2) Sharing

We may share your personal information with external parties following laws, regulations, or regulatory requirements, or as mandated by government authorities. In addition, to the extent required or permitted by law, it may be necessary to provide your personal information to third parties to protect us and you or the public from harm to their interests, property, or safety.

In addition to the above, if we need to share your personal information for other business needs or reasonable reasons, we will inform you of the purpose of sharing your personal information, the name of the data recipient, contact information, the purpose of processing, the method of processing and the type of personal information, and obtain your separate consent.

If sensitive personal information is involved, we will also inform you of the type of sensitive personal information, the identity and data security capabilities of the data recipient and obtain your separate consent. We will only share your personal information for lawful, legitimate, and necessary purposes, and only as much personal information as is necessary to provide our services. We will enter into strict confidentiality agreements with companies, organizations, and individuals with whom we share personal information, requiring them to use the personal information strictly for the purposes stated in this section and to take relevant confidentiality measures to handle the personal information.

3) Transfer

We will not transfer your personal information to any company, organization or individual, except in the following cases: a) With your prior separate consent. At that time, we will inform you of the purpose of the transfer of personal information, the name and contact information of the data recipient, the purpose of processing, the method of processing and the type of personal information. If sensitive personal information is involved, we will also inform you of the type of sensitive personal information, the identity and data security capabilities of the data recipient, and obtain your prior express consent or authorization; b) In the event of an asset transfer, acquisition, or merger involving the transfer of personal information, we will inform you of the relevant circumstances, and we will require the new company or organization holding your personal information to continue to be bound by this Privacy Policy, or we will require the company or organization to seek your authorized consent again.

4) Public disclosure

We will not disclose your personal information to the public unless we have your separate and express consent or authorization in advance, or unless we are compelled to do so by law, legal process, litigation, or governmental authority.

5) We may not require your authorized consent to share, transfer, or publicly disclose your personal information following relevant laws, regulations, and national standards in the following circumstances:

1. a) related to the fulfillment of our obligations under laws and regulations; b) directly related to national security and national defense; c) directly related to public safety, public health, or major public interests; d) directly related to criminal investigation, prosecution, trials or execution of court decisions; e) for the purpose of safeguarding the life, property, or other significant lawful rights and interests of the subject of personal information or other individuals, and it is hard to obtain consent from the personal information subject; f) the personal information is proactively disclosed to the public by the personal information subject; g) the personal information necessary for the conclusion and performance of the contract at your request, and h) the personal information is collected from legally and publicly disclosed information, such as legal news reports and government information disclosure.
2. How we protect your personal information

We have adopted a few technical and institutional safeguards to ensure that your information is in a secure environment. We will take such measures as are reasonably necessary to protect your information given the current level of technology, taking physical, technical, and administrative security measures to reduce the risk of loss, misuse, unauthorized access, disclosure, and alteration of relevant information, including but not limited to transport layer data encryption, firewalls and encrypted storage, physical access controls, and information access authorization controls. To this end, we have security procedures in place to protect your information from unauthorized access, and all personal information is encrypted and stored within a professional firewall. At the same time, we have established systems, processes, and organizations to safeguard information security. For example, we strictly limit the scope of people who have access to information and require them to comply with confidentiality obligations, etc.

After the unfortunate occurrence of a personal information security incident, we will inform you in a timely manner of the basic situation and possible impact of the security incident, the security disposal measures we have taken or will take, suggestions for your independent prevention and risk reduction, remedial measures for you, etc. following the requirements of laws and regulations. We will promptly inform you of the event-related situation by email, letter, telephone, push notification, etc. When it is difficult to inform the subject of personal information one by one, we will take a reasonable and effective way to release the announcement. The Internet environment is not 100% secure and we will make every effort to ensure the security of any information you send us. If our physical, technical, or administrative safeguards are damaged, resulting in unauthorized access, public disclosure, falsification, or destruction of information, resulting in damage to your legitimate rights and interests, we will assume appropriate legal liability.

4. How to exercise your privacy rights?

We take your privacy rights seriously. As described in the Policy, you may request information about how we process your data as well as request access, correction, and deletion of the personal information that we have collected about you. You may also have the right to withdraw your consent to our processing (including automated decisions) of your personal information, file complaints, and delete your account. If you withdraw your consent, we may not continue to provide you with related services.

We will not charge you for your reasonable requests in principle. However, a fee to reflect the cost will be imposed as appropriate on repeated requests beyond reasonable scope. As for repeated requests that are groundless and need excessive technological means (e.g., developing a new system or fundamentally changing the current practices) to fulfill, bring about risks to others’ legitimate rights and interests or are downright impractical (e.g., involving information stored on a backup disk), we might reject.

We may not be able to respond to your requests under certain circumstances, such as those related to national security, public safety, public interest, or those that may cause serious damage to the rights and interests of others, and those involving trade secrets, as required by law or regulation.

For more information about your privacy rights, please refer to the "Your Privacy Rights" section of the Global Privacy Policy, and to better fulfill your rights, you can contact us for more help and information through the "Contact Us" part at the end of this section.

5. How we handle personal information of children

Our products or services are not generally intended for any minors under the age of 14. If we become aware that we have collected personal information from a minor without the prior verifiable consent of a guardian, we will attempt to delete the data as soon as possible.

If you are the guardian of a minor, please contact us through the “Contact Us” part at the end of this section for further assistance and information if you have questions about information of a minor in your care.

6. How your personal information is transmitted worldwide

Personal information collected in China Mainland will generally be stored within China Mainland. However, some of your personal information may be transferred to or accessed within another country/region outside of China Mainland, such as the United States. If we do, we will continue to protect your personal information in a manner consistent with what is expected under laws of China Mainland and obtain your individual consent in advance. You may choose not to provide us with your personal information. However, if you choose not to provide your personal information, you may not be able to enjoy the full range of services.

If you provide your information, we keep it according to the laws of China Mainland and generally keep it as long as we need it for business, tax or legal purposes, including the legal bases described in this Policy. After that, we either delete it or fully anonymize it.

7. Updates to the Mainland China Privacy Policy section

In order to continue to provide you with better service, the content of this section may change from time to time depending on the actual situation of the products or services we provide or in accordance with legal and regulatory requirements, and we will not reduce your rights under this section without your express consent. We will post any changes to this section on our website and platform. If such updates result in a material reduction or significant change to your rights under this Privacy Policy, we will notify you by prominently placing an alert or sending you a push message. If you continue to use our products or services, you acknowledge that you have fully read, understood, and agreed to the updated Privacy Section for Mainland China; if you do not agree to the updated content, you should immediately stop using the relevant products or services and obtain more help and information through the "Contact Us" part at the end of this section.

Material changes within the meaning of this policy include, but are not limited to:

1) Significant changes in our service model. Such as the purposes for which personal data is processed, the types of personal data processed, and the manner in which personal data is used.

2) Significant changes in our ownership structure, organizational structure, etc. such as change of ownership caused by business restructuring, bankruptcy and merger, etc.

3) A change in the primary recipient of personal data.

4) Significant changes in your rights to participate in the processing of personal data and how they are exercised.

5) When there is a change in the department responsible for handling personal data protection, our contact information and complaint channels.

6) When the personal data protection impact assessment report indicates a high risk.

8. Contact Us

If you have any questions, comments, or suggestions regarding this section of the Privacy Policy, please contact us at:

Kimberly-Clark (China)  Co. Ltd.
12F, Building A, SOHO Fuxing Plaza,
No.299 Danshui Road,
Huangpu District,
Shanghai 200025,
PRC
Phone: 8621 - 6028 8100/400-880-8096
Fax: 8621 - 6028 8435
Email: [email protected]
Individual Rights Portal