Xiaomi Auto Global Website Privacy Policy
Our Privacy Policy was updated on 17 August 2026. Please take a moment to familiarise yourself with our privacy practices and let us know if you have any questions.
Overview
1. Introduction
2. What does personal information mean?
3. What personal information do we collect and use for what purposes?
4. What is the legal basis for processing your personal information?
5. How do we share your personal information?
6. What are our security safeguards to protect your personal information?
7. How long will your personal information be stored?
8. What are your data protection rights?
9. How to exercise your data protection rights and contact us?
10. How is your personal information transferred globally?
11. How do we protect minors’ personal information?
12. How do we update this Privacy Policy?
1. Introduction
The Xiaomi Auto Global Website, is provided by Xiaomi Technologies Limited (hereinafter referred to as "Xiaomi Auto", "we", "our", or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, transfer, protect and otherwise process any personal information that we collect from you or a third party when you use this Xiaomi Auto Global Website.
Ultimately, what we want is the best for all our users. Should you have any questions about our data processing practices as summarised in this Privacy Policy, please contact us via https://privacy.mi.com/support/?locale=en to address your specific queries. We will be happy to hear from you.
2. What does personal information mean?
Under this Privacy Policy, "personal information" means information that can be used to directly or indirectly identify an individual, either from that information alone or from that information combined with other information about that individual available to Xiaomi Auto, except as otherwise specifically provided by applicable law in your region.
3. What personal information do we collect and use for what purposes?
3.1 Collection of personal information from you
The purpose of collecting personal information is to provide you with this Xiaomi Auto Global Website and its related services. We will only collect the information that is necessary for its specified, concrete, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
3.1.1 Information you provide to us
You do not need to provide any information to browse the website. However, if you decide to contact us through the channels provided on this website, we will process the information you provide to handle your request, inquiry, or proposal as pointed out below:
Communication with Us: If you send emails to the addresses listed on Xiaomi Auto Global Website, for example, to inquire about partnerships with dealers and distributors, or to submit media inquiries, we may process the information you provide to us for managing your request, maintaining business contact with you, or as a consequence of the precontractual or contractual relationship that may be established or, alternatively, due to your consent to communicate with you, while the relationship with you subsists or until you inform us of your objection to the processing.
Resume Data: If you send your resume data to the email address listed on Xiaomi Auto Global Website, we may process the information you provide to us for evaluating and managing your job application. Upon your acceptance, your candidacy may also be included in our talent pool in case any positions that match your profile become available.
3.1.2 Information that we collect during your use of services
Information related to Your Website Usage, including network status, and information about how you use and interact with the website, content and services, such as browsing history, operation behaviours, content views and exposure, duration and frequency of content or feature interactions.
Log Information: Diagnostic, technical, error, and usage information related to your use of certain features and websites. This might include cookies and other identifier technologies, network request information, temporary message history, standard system logs, crash information, and log information generated by using a service (such as registration time, access time, activity time etc.).
3.1.3 Non-personally identifiable information
We may also collect other types of information which are not directly or indirectly linked to an individual and which may not be defined as personal information according to applicable local laws. Such information is called non-personally identifiable information. We may collect, use, transfer, and disclose non-personally identifiable information. Here are some examples of information that we collect and how we may use it in a non-personally identifiable aggregated format:
This information may include statistical data generated when you use a specific service (e.g., non-identifiable device-related information, daily usage, page visits, page access duration, and session events);
Network monitoring data (e.g., request time, number of requests or error requests, etc.);
Website crash events (e.g., the logs automatically generated after the website crashes).
The purpose of such collection is to improve the services we provide to you. The type and amount of information collected depends on how you use our products and/or services.
We aggregate this information to provide you with more useful information and understand which parts of our Xiaomi Auto Global Website and services you are most interested in. For example, we may need to know the number of users who are active in a day, but don't need to know who is active in that day, and thus aggregated data is enough for statistical analysis. We will endeavor to isolate your personal information from non-personally identifiable information and ensure that the two types of data are used separately. However, if we combine non-personally identifiable information with personal information, such combined information will be treated as personal information under applicable data protection laws and this Privacy Policy for as long as it remains combined.
3.2 How we use the personal information that we collect
We may process personal information for one or more of the following purposes:
• Handling your questions or requests, such as evaluating and responding to your inquiries, managing your requests, or maintaing contact with you.
• Internal purposes, such as data analysis, research, and development of statistical information related to the use of our website to improve it. For example, page view, click, and source, for website analysis or feature evaluation..
4. What is the legal basis for processing your personal information?
We process your personal information only where we have a valid legal basis under applicable law. Where applicable under the laws in your jurisdiction, the legal bases for processing your personal information under this Privacy Policy are:
As a result of your consent. With your consent, we may process personal information that you voluntarily provide, for example, you voluntarily send your resume or initiate inquires to our email addresses.
On the basis of Xiaomi Auto's legal obligations. In certain circumstances, we may be required by law to retain or otherwise process your personal information. In some cases (e.g., for storing your personal information as a result of a dispute or by request/inquiry of a data protection supervisory authority), the processing of your personal information will be necessary for us in order to fulfill these obligations.
Within the scope of a legitimate interest. On occasion, considering the minimum privacy impact on you, the processing of your personal information is necessary for the following legitimate interests:
Information system security, network security and cybersecurity within Xiaomi Auto.
To enhance system security, prevent phishing website fraud, and protect account security.
Corporate operations, due diligence, internal audit (in particular, related to information security and/or privacy).
Product development and enhancement (including analysis and optimization of Xiaomi Auto settings or features).
5. How do we share your personal information?
To provide you with our Xiaomi Auto Global Website and services, we may share your personal information with other Xiaomi affiliates or service providers that provide us with cloud hosting and IT maintenace services which are necessary for ensuring the proper management of this website.
In addition and to the extent necessary, the relevant personal information will be disclosed to competent public authorities, regulators, courts, tribunals or law enforcement agencies where required by applicable law or pursuant to valid legal process. Where permitted by law, we will assess the validity and scope of the request and disclose only the personal information reasonably necessary for the relevant lawful purpose.
When necessary and permitted by applicable law, your personal information will be disclosed to establish, exercise or defend legal claims, protect our rights, property, assets or services, or prevent fraud and security threats.
We may share your personal information with our accountants, auditors, lawyers or other professional external advisors where necessary for them to provide professional advice or services. Such advisors are subject to professional or contractual confidentiality obligations. We may share your personal information with investors and other relevant third parties in the event of an actual or potential sale of or other corporate transaction related to an entity in the Xiaomi Group, subject to appropriate confidentiality and data protection safeguards.
6. What are our security safeguards to protect your personal information?
We are committed to keeping your personal information secure. In order to prevent unauthorised access, disclosure or other similar risks, we have put in place all legally required physical, electronic and managerial procedures to safeguard and secure the information we collect from you. We will ensure that we safeguard your personal information in accordance with applicable law.
All your personal information is stored on secure servers, and protected in controlled facilities. We classify your information based on importance and sensitivity, and ensure that your personal information receives the required level of security. We have special access controls for cloud-based data storage, and we regularly review our information collection, storage and processing practices, including physical security measures, to guard against any unauthorised access and use.
However, you should be aware that the use of the Internet is not entirely secure, and for this reason we cannot guarantee the security or integrity of any personal information when transferred from you or to you via the Internet.
We conduct due diligence on business partners and third-party service providers to make sure that they are able to protect your personal information. We also check that appropriate security standards are maintained by these third parties by putting in place appropriate contractual restrictions, and where necessary, carrying out audits and assessments. In addition, our employees and those of our business partners and third-party service providers who access your personal information are subject to enforceable contractual obligations of confidentiality. We conduct security and privacy protection training courses and tests to enhance our employees' awareness of the importance of protecting personal information. We will take all practicable and legally required steps to safeguard your personal information.
If a personal information breach occurs, we will comply with the legal requirements under the applicable data protection law which includes, notifying the breach to the relevant data protection supervisory authority and data subjects where required.
7. How long will your personal information be stored?
As a general rule, we retain personal information for the period necessary for the purposes described in our privacy policies, or as required by applicable law. We will cease to retain and delete or anonymise personal information once the purpose of collection is fulfilled, or after we confirm your request for erasure, or after we terminate the operation of the corresponding services, except when required or permitted by applicable law, in which case, your personal information will be isolated and will not be further processed except for the attendance of legal responsibilities and other purposes permitted by applicable law. In such circumstances, your personal information could be made available exclusively to the parties permitted by applicable law. Once the corresponding retention periods have elapsed, such personal information will be deleted or anonymised.
8. What are your data protection rights?
You have certain rights in relation to personal information that we hold about you (referred here as the " request "). Please note that depending on where you are based, these rights will be subject to specific exclusions and exceptions under applicable local law:
• Right to access/obtain a report detailing the personal information we hold about you. A copy of your personal information processed by us will be provided to you upon your request free of charge. For any extra requests for relevant information, we may charge a reasonable fee based on actual administrative costs according to the applicable law.
• Right to correct your personal information. If any information we hold about you is incorrect or incomplete, you are entitled to have your personal information corrected or completed based on the purpose of use.
• Right to erase your personal information. Based on the requirements of applicable law, you have the right to request the deletion or removal of your personal information where there is no compelling reason for us to keep using it. We shall consider the grounds regarding your erasure request and take reasonable steps, including technical measures, to proceed with the erasure of your personal information. Please note that we may not be able to immediately remove the information from the backup system due to applicable law (for instance, when necessary to preserve your personal information for potential claims which may arise out of or in relation to the processing of such personal information) and/or technology limitations. If this is the case, we will securely store your personal information and isolate it from any further processing until the information can be deleted or be made anonymous.
• Right to object to the processing of your personal information. You have the right to object, on grounds relating to your situation, to the processing of your personal information which is based on Xiaomi's legitimate interest, or other legal grounds permitted by applicable law. If you object to such processing, we will no longer process your data for these grounds and purposes unless we are permitted by applicable law.You also have the right to object to processing for direct marketing at any time under applicable laws, and we will stop such processing.
• Right to restrict the processing of your personal information. You have the right to restrict the processing of your personal information by us, for instance when the processing is unlawful according to your understanding, but you oppose the erasure of your personal information. In such cases, your personal information will only be processed with your consent, for the exercise or defense of legal claims or for/under other legal purposes/grounds permitted by applicable law.
• Right to data portability. Under some circumstances provided by law, you have the right to receive the personal information concerning you in a structured, commonly used and machine-readable format and/or transmit that personal information to another data controller.
• Right to withdraw consent. In those cases where your consent is required for the processing of your personal information, you may at any time withdraw such consent. However, please note that the withdrawal of your consent or authorization will not affect the validity of our collection and processing carried out on the basis of the consent up until the point of withdrawal.
• Other rights under applicable law.
For additional information, please write to us or contact us via https://privacy.mi.com/support/?locale=en.
9. How to exercise your data protection rights and contact us?
If you have any comments or questions about this Privacy Policy or any questions relating to Xiaomi's collection, use or disclosure of your personal information, or you want to exercise your data protection rights according to the above Section, feel free to contact us by visiting https://privacy.mi.com/support/?locale=en.. When we receive questions about personal information or requests to download or access items, we have a professional team that addresses such concerns, including Data Protection Officers (DPOs), who can be contacted through https://privacy.mi.com/support/?locale=en. If your question itself involves a significant issue, we may ask you for more information. If you consult us, we will provide information on the relevant complaint channels that may be applicable based on your actual situation.
Please, make sure that you provide sufficient information to enable Xiaomi to verify your identity and ensure that you are the data subject or legally authorised to act on the data subject's behalf. Once we obtain sufficient information to confirm that your request can be processed, we shall proceed to respond to your request within any timeframe set out under your applicable data protection law.
We have the right to refuse to process requests that are not meaningful, manifestly unfounded or excessive, requests that damage others' right to privacy, extremely unrealistic requests, and requests that require disproportionate technical work, as well as requests not required under local law, regarding information that has been made public, and regarding information given under confidential conditions. If we believe that certain aspects of the request to delete or access the information may result in our inability to legally use the information for the aforementioned anti-fraud and security purposes, it may also be rejected. We will inform you of any such decision not to process your request and the grounds of this decision if required by applicable law, in the event of which we will inform you within any timeframe set out under applicable law.
If you are not satisfied with the response you received, you can hand over the concern to the relevant regulatory authority in your jurisdiction.
10. How is your personal information transferred globally?
Your use of this website may involve the transfer, storage, and processing of your personal information within and outside of your country of residence where necessary to realize the purposes described in this Privacy Policy and applicable law. For the provision of this website, Xiaomi Auto uses regional data hosting infrastructure located in Singapore.
If we need to transfer personal information outside of your jurisdiction, whether to our affiliates or third-party service providers, we will comply with related applicable law. We ensure that all such transfers are subject to the applicable legal transfer mechanism and appropriate technical and organisational measures, such as pseudonymization, encryption, access controls, and regular security assessments, to protect your information during transmission and throughout its subsequent processing. You can obtain further information about the safeguards applicable to your personal information by contacting us at https://privacy.mi.com/support/?locale=en .
If you contact us from the EEA, UK or CH, your data will be processed by the corresponding entity within Xiaomi (namely, Xiaomi Retail Germany GmbH) as data controller. However, processing your inquiry may require the access of your personal data from other regions (for example, Chinese mainland). If this occurs, Xiaomi will implement appropriate safeguards in accordance with applicable rules on international data transfers to ensure that your personal data is processed securely. In this regard, any sharing of personal information originating by you in the EEA, UK or CH to a Xiaomi Group entity, or a third-party service provider outside the EEA, UK or CH, where local law may not protect personal information to the same standards as in your country or region, Xiaomi will use EU Standard Contractual Clauses or any other safeguards provided for in the GDPR or in applicable law of UK or CH to protect your information with the highest European standards.
11. How do we protect minors’ personal information?
We are committed to protecting the personal information of minors. Parents and guardians are encouraged to guide and supervise their use of our products and services, and we will process minors’ personal information and provide appropriate safeguards in accordance with applicable laws.
If you are a parent or guardian and you believe that a minor has provided Xiaomi with personal information without appropriate authorization, please contact us via https://privacy.mi.com/support/?locale=en . We will review the matter and take appropriate steps, including deleting the information where required by applicable law.
12. How do we update this Privacy Policy?
We review this Privacy Policy periodically based on changes in our business, technology and applicable law and good practice, and we may update this Privacy Policy. If we make a material change to this Privacy Policy, we will notify you through pop-up window, or by other ways legal and available, so that you can learn about the information we collect and how we use it. Such changes to this Privacy Policy will apply from the effective date specified in the above notice. We encourage you to check this page regularly for the latest information on our privacy practices. Where required by applicable law, we will ask for your explicit consent when we collect additional personal information from you or when we use or disclose your personal information for new purposes.