Privacy Policy

Last updated:2020-11-18 14:09:42

Kingsoft Cloud Holdings Limited and its subsidiaries, branches, as well as affiliates which, directly or indirectly, control or are controlled by the aforesaid entities by equity or control agreement (hereinafter referred to as "Kingsoft Cloud", "we", "us", or "our") are committed to providing high-quality cloud services to global customers based on the principle of putting user privacy and user information security first. This Privacy Policy is designed to explain how Kingsoft Cloud collects, uses, stores, and destroys your personal data when providing cloud services or products to you, and to remind you of your personal data rights.

This Privacy Policy applies if you register an account, use the console, or purchase a cloud computing product or service on the Kingsoft Cloud website (https://en.ksyun.com/). In particular, we have specific privacy policies for specific products or services. If our services contain links to third-party websites, applications, or services, this Privacy Policy does not apply to any products, services, websites, or content offered by third parties. If your company or other business entities provide services to your customers through our products or services, you need to develop a personal data protection policy that applies to the transaction scenarios.

Please be reminded that you should carefully read and understand this Privacy Policy before using the products and services provided by Kingsoft Cloud. By using Kingsoft Cloud products or services, you acknowledge that you have accepted and recognized the content of this Privacy Policy. If you do not agree to the terms and conditions of this Privacy Policy, you have the right to stop registering a Kingsoft Cloud account, and Kingsoft Cloud will not be able to provide services to you.

Contents:

  1. The types of personal data collected
  2. Purposes of collection and use of your personal data
  3. Use of cookies
  4. Storage, sharing, transfer, and public disclosure of your personal data
  5. Protection of your personal data
  6. Your rights to personal data
  7. Protection of minors' personal data
  8. Cross-border transfer of your personal data
  9. Update of the Privacy Policy
  10. Contact us

1. Collection of personal data

1.1 Personal data refers to all kinds of information, recorded in electronic or other means, that can be used, either alone or combined with other information, to identify a specific natural person or to reflect the activities of a specific natural person.
1.2 We will collect and use your personal data through the following channels when you purchase and use Kingsoft Cloud products or services via the Kingsoft Cloud website (especially through login to the console):
(1) Registration information. When you create an account on Kingsoft Cloud, you are required to provide your username and mobile phone number, and create a password. The mobile phone number you submit is used to receive verification codes when you register or bind an account (e.g., retrieving your password), and as the contact information you specify to receive relevant business notifications (such as notifications on new product releases, events, service changes, and other service-related matters).
Upon completion of the registration, you may continue to fill in your information on the console, including but not limited to your real name, industry, region, URL, and detailed address.
If you do not register an account, you can view the webpages or product introduction presented publicly by Kingsoft Cloud, but you will not be able to further obtain the customer services provided by Kingsoft Cloud.
(2) Real name authentication information. If you are from People's Republic of China, you are required to complete the real name authentication before purchasing and using the products and services of Kingsoft Cloud under the Cyber Security Law of China. In the course of real name authentication, you need to further improve your personal data, including but not limited to your name, identification document (identity card or passport information), bank card numbers, industry, and region. Without the real name authentication, you can view the webpages or products of Kingsoft Cloud, but you will not be able to purchase the products and services of Kingsoft Cloud.
(3) Filing-for-record service information. When using specific business functions of Kingsoft Cloud (such as the filing-for-record service), you are required, in addition to the information already included in the registration and real name authentication data, to further provide the information, including but not limited to the name, ID card, mobile phone number, and email address of the person in charge of your enterprise or website, domain name certificate, and the photo for filing, in order to comply with relevant national regulations and to provide you with the products and services. If you do not provide the above information, you will not be able to use such specific business functions, but you may use our basic products and services.
(4) Log information. In order to provide you with Kingsoft Cloud services and monitor their running status, we will collect your ID, IP address, browser type, language used, hardware device information, operating system version, network operator information, as well as the date, time, and duration of your access to the services.
(5) Customer service information. When there is a need to use Kingsoft Cloud customer service, you are required to provide your UID, username, or other information that can verify your identity, so that we can respond to your service request. Additionally, you are also required to provide your last name and mobile phone number, so that we can respond to your service request in a timely manner. We may keep your chat history and order information in order to provide you with the services required.
(6) Operation and support information. Kingsoft Cloud will organize business activities for newly launched services and functions from time to time. If you participate in the relevant business activities, we may collect your contact information (such as the mobile phone number), contact address, and transaction account information through the business activity interface for your successful participation. If you do not participate in the relevant business activities, you will not need to provide the aforementioned information.
(7) Payment information. To pay for services, you may be required to provide your payment information (such as your WeChat, Alipay, or bank information), added-value tax number, and tax identification number, which depends on the payment method specified in the service agreement between you and Kingsoft Cloud.
(8) Kingsoft Cloud collects other personal data that you authorize us to collect or provide when using our services.

2. Purposes of collection and use of your personal data

Kingsoft Cloud collects your personal data for the following purposes: Kingsoft Cloud will obtain your prior consent or authorization if we use the data collected for any purpose other than those specified in this Privacy Policy.
(1) Provide, maintain, or improve the products or services;
(2) Send you important notices in terms of system security, product or service changes, etc.;
(3) Activate or verify products or services;
(4) Promote and introduce products to you as permitted by laws and regulations;
(5) Provide you with personalized products or services or personalized user experience;
(6) Conduct internal audits, and data analysis and research to improve our products and services;
(7) Ensure the security of our products, services, and users;
(8) Comply with and implement applicable legal requirements or relevant industrial standards, and, if the law provides for real name authentication, use the information collected, including bank card numbers, only for the purpose of real name authentication; and
(9) Use the data for other purposes after obtaining your consent.
If you have any doubt on the purpose of data processing, or would like Kingsoft Cloud to stop one or more ways of using such data, please send an email to [email protected]

3. Use of cookies

3.1 In order to ensure the normal operation of the website, we store small data files called cookies on your computer or mobile device. Generally, cookies include identifiers, site names, and some numbers and characters. Kingsoft Cloud could only read cookies that we provide.
3.2 Kingsoft Cloud will enable cookies for the same purpose as most websites or Internet service providers, i.e. to improve user experience. Specifically, Kingsoft Cloud will enable cookies for the following purposes:
(1) With the help of cookies, the website may save such settings as the language of the computer or mobile device, font size, and other browsing preferences, which means that users do not need to reconfigure their preferences at each time of the access.
(2) Identification. When you visit our website, Kingsoft Cloud will generate a unique ID for you to identify your status. If a website does not use cookies with such function, the user will be treated as a new visitor each time when the user opens a webpage.
(3) Statistical analysis. For example, Kingsoft Cloud uses cookies to count the number of user visits and to understand the source of your visit.
(4) Security. Kingsoft Cloud uses cookies to keep our website secure.
3.3 Kingsoft Cloud will not use cookies for any purpose other than those described in this Privacy Policy. You may manage or delete them according to your preferences. You can clear all cookies saved on your computer, and most web browsers have a cookie-blocking feature. If you do this, however, you will need to change your user settings personally each time you visit the Kingsoft Cloud website. For more information on how to change your browser settings, please visit the related setting page of the browser you use.

4. Storage, sharing, transfer, and public disclosure of your personal data

4.1 Storage
Kingsoft Cloud will store your personal data to facilitate your smooth use of our products and services during the retention period specified by law or agreed in contract. We will delete or anonymize your data after the expiration of such retention period.
However, we may need to retain your data in whole or in part for a longer period of time under the following circumstances and only for the purposes related thereto:
(1) To comply with laws and regulations;
(2) To comply with the requirements of court decisions or rulings or other legal proceedings;
(3) To comply with the requirements of relevant government authorities or other competent authorities;
(4) We have reasons to believe that we need to comply with applicable laws and regulations; and
(5) Reasonable and necessary purposes to perform the relevant service agreements or this Privacy Policy, maintain public interests, handle complaints or disputes, or protect the personal and property safety or legitimate rights and interests of our customers, ourselves, or our affiliates, other users, or employees.
4.2 Sharing
We will not share your personal data with any company, organization, or individual other than Kingsoft Cloud, except under the following circumstances:
(1) Sharing after your explicit consent: Kingsoft Cloud may share your personal data with other parties after obtaining your explicit consent;
(2) Kingsoft Cloud may share your user data with other parties in accordance with the stipulations of laws and regulations, the needs of litigation and dispute resolution, or the requirements made by administrative or judicial authorities according to laws;
(3) Sharing with Kingsoft Cloud's affiliates: Your personal data may be shared with Kingsoft Cloud's affiliates. Kingsoft Cloud will only share necessary personal data for providing services, and will be bound by the purposes stated in this Privacy Policy. If our affiliates change the handling purpose of personal data, Kingsoft Cloud will solicit your authorization or consent again.
Kingsoft Cloud's affiliate refers to any company or legal institution that controls, is controlled by, or is under common control with Kingsoft Cloud at present or in the future. The term "control" here refers to the power of determining a company's financial and business policies, enjoying more than 50% of the management or decision-making votes of the company directly or indirectly, and receiving benefits from business activities of such company;
(4) Sharing with authorized partners: For the purpose of fulfilling the purposes specified in this Privacy Policy only, some of Kingsoft Cloud's services, such as the real name authentication service, will be jointly provided by our authorized partners. Kingsoft Cloud will share your personal data for lawful, justified, necessary, specific and explicit purposes only, and will share personal data necessary for provision of the services only. Kingsoft Cloud's partners shall have no right to use the shared personal data for any other purpose. Kingsoft Cloud will sign a strict non-disclosure agreement and data processing protocol with each of the companies, organizations, or individuals with whom we will share your personal data, and ask them to handle your personal data in accordance with our instructions, this Privacy Policy, and any other relevant confidentiality and security measures. In addition, your personal data will be transferred to the storage space of the data center through the underlying network operator. Kingsoft Cloud's services in China will use the local underlying basic network operators and the data centers located in China.
4.3 Transfer
Kingsoft Cloud will not transfer your personal data to any company, organization, or individual except under the following circumstances:
(1) Transfer after your explicit consent: Kingsoft Cloud may transfer your personal data to other parties after obtaining your explicit consent; or
(2) In case of merger, acquisition, or bankruptcy liquidation, if transfer of personal data is required, Kingsoft Cloud will request the new company or organization in possession of your personal data to be continually bound by this Privacy Policy; or, we will request such company or organization to solicit your authorization or consent again.
4.4 Public disclosure
Kingsoft Cloud may publicly disclose your personal data under the following circumstances only:
(1) Kingsoft Cloud may publicly disclose your personal data after obtaining your explicit consent or based on your proactive choice; or
(2) Disclosure based on legal requirements: Kingsoft Cloud may publicly disclose your personal data as required by laws, legal procedures, lawsuits, or mandatory requirements of government authorities.
4.5 Exceptions to authorization or consent
Kingsoft Cloud will share, transfer, or publicly disclose your personal data without obtaining your prior authorization or consent if such data is:
(1) Related to national security or national defense security;
(2) Related to public safety, public health, or major public interests;
(3) Related to criminal investigation, prosecution, trial, execution of judgment, etc.;
(4) For the purpose of safeguarding the life, property, and other significant legitimate rights and interests of you or other individuals while it is difficult to obtain your consent;
(5) Disclosed to the general public by you on your own initiative; or
(6) Collected from the information lawfully disclosed in public through such lawful channels as news coverage and government information disclosure.

5. Protection of your personal data

5.1 Kingsoft Cloud is committed to protecting the security of your personal data collected, and will take reasonable physical, electronic, and administrative safeguards to help protect your user data from unauthorized access, public disclosure, use, modification, damage, or loss. We will use the encryption technology to improve the security of user data; adopt trusted protection mechanisms to protect the user data from malicious attacks; deploy access controls to try our best to ensure that only authorized personnel have access to such data; and conduct security and privacy protection training courses to increase our employees' awareness of the importance of protecting user data. Kingsoft Cloud has passed many international and domestic security certifications, such as the Information Security Level Protection Assessment and ISO 27001:2013 Information Security Management System Certification.
5.2 Kingsoft Cloud will take all reasonable and practicable measures to ensure that no irrelevant personal data is collected. We will only retain your personal data for the period required to achieve the purposes specified in this Privacy Policy, unless otherwise specified by law, or there is an extension of the retention period required by you. The data retention period may vary based on different scenarios, products, and services, and the criteria Kingsoft Cloud uses to determine the retention period include: the time required to retain personal data for the purpose of completing the business, including that for provision of the products and services, maintenance of corresponding transaction and business records as required by laws, guarantee of the security of systems, products, and services, response to possible user inquiries or complaints, problem identification, etc.; whether users agree to extend the retention period; and whether there are special requirements for retaining the data required by laws and contracts. Beyond the above retention period of user data, Kingsoft Cloud will anonymize or delete your personal data.
5.3 You are advised to use a complex password to assist Kingsoft Cloud in keeping your account secured. We will do our best to ensure the security of any information you send. In order to secure your information more effectively, Kingsoft Cloud hopes you can strengthen your awareness of self-protection. Please keep your account and password information secured to prevent the leakage of your personal data. Kingsoft Cloud is only liable to the extent that we directly leaked your personal data. Kingsoft Cloud will be liable for unauthorized access to, public disclosure, tampering, or destruction of such data, and for the damage to your legitimate rights and interests if physical, technical, or administrative protection facilities of Kingsoft Cloud are damaged.
5.4 Since the Internet is not a 100% secure environment, we will do our best to ensure or guarantee the security of any information you send to us. In the event of a personal data security incident (leakage, loss, etc.), Kingsoft Cloud will, in accordance with the requirements of laws and regulations, promptly inform you of the basic circumstances and possible impact of such security incident, the actions we have taken or will take, recommendations for you to independently prevent and mitigate risk, remedies for you, etc. Kingsoft Cloud will promptly inform you of the incident-related situation by such means as email, letter, telephone, or push notification. When it is difficult to inform the personal data subjects one by one, Kingsoft Cloud may take a reasonable and effective approach to make a public announcement. Meanwhile, we will also report to regulatory authorities the handling of personal data security incidents in accordance with their requirements.

6. Your rights to personal data

Kingsoft Cloud has customers all over the world, so we will strictly abide by the laws and regulations of the countries where our customers are located, and try our best to protect the customers' personal data rights. For example, we strictly abide by the Civil Code of the People's Republic of China, the Personal Data Protection Act (PDPA) of Singapore, the General Data Protection Regulation (GDPR) of the European Union, and the Federal Data Protection Act (BDSG) of Germany.
In general, you are entitled to the following rights:
6.1 Right to disagree or revoke consent
As a matter of principle, we will obtain your prior consent or authorization before collecting the data about you. We will not continue to collect your personal data if you do not agree to the collection of your personal data or if you consider it necessary to revoke your consent. However, this does not affect the legality of the data collection made before you revoke your consent or authorization.
6.2 Right of access
Except as required by laws and regulations, you may log on to the account settings management page (https://account.console.ksyun.com/#/manage) to check your personal data that we hold or the types of such data.
6.3 Right to rectification
If you find that the personal data that you provide is incorrect or incomplete, you have the right to update or correct your personal data.
6.4 Right to erasure
You have the right to request us to delete the data that we have collected about you. For example:
(1) The collection or processing of your personal data is against laws and regulations;
(2) Your personal data is collected, used, shared, or transferred without your express consent;
(3) The processing of your personal data seriously breaches the agreement with you;
(4) Storing your personal data is no longer necessary under the contract between you and us; or
(5) After you deregister your account on your own initiative, we will stop providing you with the products or services, and delete or anonymize your personal data as required by applicable laws.
6.5 Right to object to processing of personal data
You have the right to request us to stop processing your personal data or stop sending marketing messages to you.
6.6 Right to restrict processing of personal data
You have the right to request us to restrict processing of your personal data under certain circumstances. For example, you believe that the personal data that we hold about you is inaccurate or illegal.
6.7 Rights related to automated individual decision making and profiling
When we adopt the automated individual decision-making technology or engage in profiling, we will obtain your consent or make an agreement with you in the contract in advance, and provide you with a manner of intervention (including but not limited to objection to profiling or marketing using your personal data), and provide access to the profiling information generated therefrom.
6.8 Right to complain to a local data protection authority
You have the right to complain to a local data protection authority if you have concerns about our collection and use of your personal data.
Specifically, if if you are from a country or region such as European Union (EU), the European Economic Area (EEA), or Singapore, you have the right to data portability. That is to say, you have the right to request us to transfer a copy of the personal data we collect about you to a third-party institution or to you directly.
To exercise any of the above rights, please send an email to [email protected]

7. Protection of minors' personal data

7.1 Generally, Kingsoft Cloud treats any individual who is under the age of 18 as a minor. If there is any different provision in your country, such provision shall apply.
7.2 Kingsoft Cloud provides products and services mainly to businesses or adults. If you are a minor, you are required to ask your parent or guardian to read this Privacy Policy carefully, and use our products and services or provide your personal data to us after obtaining consent of your parent or guardian.
7.3 If a minor uses our products or services with the consent of his or her parent or guardian, we will collect, store, use, share, transfer, or destroy the minor's personal data only to the extent permitted by laws and regulations, expressly agreed upon by the parent or guardian, or necessary for protecting the minor.

8. Cross-border transfer of your personal data

This Privacy Policy applies only to activities such as collection and processing of the personal data about you and, with respect to the user business data that you store, process, upload, or distribute using our products and services, we will comply with the processing methods, technical safeguards, and other content that are specified by you and us in a specific user agreement. As a matter of principle, you may certainly specify a region where your uploaded content or business data is stored. We will not migrate your content from the region that you select without your consent.
If we intend to transfer your personal data overseas due to business needs in accordance with applicable laws, we will obtain your consent in advance, and inform you of information about the cross-border transfer such as purpose, recipients, security measures, and security risks.
In general, if you are from a country or region such as European Union (EU), the European Economic Area (EEA), Singapore, Russia, or the United States (US), we will transfer your personal data across the border in accordance with the Standard Contractual Clauses (SCC) set by the European Commission to fully protect your personal data and privacy rights and interests. If you have a special agreement with us, such agreement shall apply.

9. Update of this Privacy Policy

9.1 Our Privacy Policy will be updated regularly according to amendments to laws or changes in business development.
9.2 We will post any change to this Privacy Policy on our official website.
9.3 We will provide more prominent notices (including, in relation to certain services, we will send the notification via email to explain specific changes to this Privacy Policy) in relation to significant changes.
9.4 Significant changes as mentioned in this Privacy Policy include but are not limited to:
(1) Significant changes in Kingsoft Cloud's service models, such as the purpose of processing personal data, types of personal data processed, and the way of using personal data;
(2) Significant changes in the ownership and organizational structures of Kingsoft Cloud, e.g., the ownership change due to the business adjustment, bankruptcy, merger and acquisition;
(3) Changes in the main objects of personal data sharing, transfer, or disclosure;
(4) Significant changes in your rights to participate in the processing of personal data and the way to exercise such rights;
(5) Changes in Kingsoft Cloud's department responsible for handling personal data security, and its contact information and channels for complaints; and
(6) High risk indicated in the personal data security impact assessment report.

10. Contact us

If you have any question or comment on this Privacy Policy, or on the practical operation of this Privacy Policy, you may contact Kingsoft Cloud through the work order in the console or feedback (log in: https://workorder.ksyun.com/index.html#!/type) or please send an email to [email protected]

Updated and Effective on November 18, 2020

Start your cloud journey with Kingsoft Cloud

Sign up