HomeCartAccount login

Privacy Policy

Last updated: 2026-10-02

These services are operated by Galaxy108 Pty Ltd (ABN 21 652 101 641). Contact: info@xituan.com.au. This policy applies to: Xituan (customer app, package au.com.xituan.customer); Xituan Merchant (merchant app, package au.com.xituan.merchant); the xituan.com.au website and related storefronts; the WeChat mini program; and the merchant CMS. References to "the platform" or "we" mean those services and the operator above.

This Privacy Policy describes how we collect, use, and protect your information when you use our platform. We collect and process the personal information below only after you have read and agreed to this Policy and the Terms of Service. By agreeing, you acknowledge and authorise us to collect, use, and store that information for the purposes, methods, and uses stated in this Policy.

1. Information we collect and purposes

We may collect the following information, only for the stated purposes (depending on the product and features you use):

  • Account and identity details (username, email, mobile number, avatar, nickname; WeChat identity and login credentials where applicable): account login, identity verification, session management, and profile display;
  • Merchant entity details (legal name, entity type, ABN/ACN, contacts — for merchant registration and CMS): merchant review, compliance, and business contact;
  • Order, payment-related metadata, and delivery/pickup information: fulfilling transactions, after-sales, and reconciliation (sensitive payment credentials are handled by the payment provider; we typically do not store full card numbers);
  • Delivery and address details: arranging delivery or pickup;
  • Device and log data (e.g. device model, OS, IP, browser or app/mini-program base library, crash/diagnostic logs): security, troubleshooting, and improvement;
  • Push notification identifiers (e.g. device push tokens): order, message, and service notices (you can disable in system settings);
  • Camera, photo library, and media content (after you grant permission): chat attachments, product/receipt image upload, barcode scanning (merchant app), and other features you initiate;
  • Location (after you grant permission): delivery-address features, sharing location in chat, or merchant fulfilment scenarios; we do not continuously track location in the background;
  • Communications you send to us or to merchants through the platform (including in-app chat): customer service, complaints, and disputes.

Your customer account is platform-wide; order and transaction records belong to the merchant you purchased from. Merchant accounts are used to operate storefronts, catalogue, orders, and fulfilment tools.

2. How we use it

  • Provide and improve platform services (login, ordering, payment-related flows, delivery/pickup, merchant operations tools, messaging);
  • Contact you about orders, logistics, account, and service notices;
  • Handle customer service inquiries, complaints, and dispute resolution;
  • Prevent fraud and protect account and transaction security;
  • Improve services and comply with law;
  • Meet legal and regulatory requirements.

We will not sell your personal information to third parties, nor use it beyond the purposes stated in this Policy without your authorisation (except where otherwise required by law).

3. Sharing

We may share information needed for fulfilment with: the payment provider (to process payments and refunds); merchants you order from or communicate with (to fulfil, deliver/pick up, and support); service providers that help us run the platform (e.g. push, cloud storage, CDN), under obligations to protect your data; and where required by law or to protect rights. Merchants may use customer information only for that order's fulfilment and after-sales. See the Merchant Agreement. We do not sell your personal information to third parties for their marketing.

4. How we protect your information

  • Store and transmit personal information with industry-standard security measures;
  • Restrict internal access to personal information on a need-to-know basis;
  • Retain personal information only for as long as necessary for the purposes above or as required by law; delete or anonymise when no longer needed;
  • No transmission over the internet is fully secure; we take reasonable technical and organisational measures;
  • If you have questions about personal information processing, contact us via the Contact section or customer service.

5. Cookies, local storage, and similar technologies

We use cookies and similar technologies on the website for essential functionality (e.g. session, preferences). Mobile apps may use local and secure storage for login sessions and preferences. You can adjust browser or system settings to limit these; some features may not work if you disable them.

6. Your rights and account deletion

Under applicable law you may have rights to access, correct, delete, or port your data, or to object to or restrict certain processing. Contact us via the details on our website or customer service to exercise them. You may also have a right to complain to a data protection authority. How to request deletion of your account and associated personal data is described on our Delete account page.

7. Related documents

Use of the platform is also subject to the Terms of Service. Refunds and cancellations are described in the Refund Policy. Merchant duties regarding customer data are in the Merchant Agreement.

8. Contact

For privacy questions or requests, email info@xituan.com.au or contact customer service.