Grade D — Sign with caution (score 55/100)
Shares browsing and commercial data with advertising networks without a defined retention period, while reserving broad rights to share data with law enforcement and transfer it on acquisition.
Shares data with ad networks; vague retention; broad law-enforcement sharing.
we may "share" (as defined in the CCPA) certain identifiers (i.e., IP address and online identifiers), usage data, and inferences to advertising networks, data analytics providers, operating systems and platforms, and social networks
AliExpress shares your identifiers, usage data, and inferences with ad networks and platforms for targeted advertising — even though they do not take money for it, the CCPA still calls this a 'sale/share.'
These partners may combine information they collect on our Platform with data on their platforms and data they collect from other websites or through other sources in order to conduct targeted advertising.
Ad partners can stitch your AliExpress activity together with what they know about you elsewhere to target ads at you across the web.
We will retain your personal information for as long as we have an ongoing legitimate need to do so... certain data will be retained for a length of time following termination or deletion of your account
There is no specific retention or deletion period — your data may sit in their backups for an undefined amount of time after you close your account.
To our professional advisers, law enforcement agencies, insurers, government and regulatory and other organizations where we believe it is necessary to comply with applicable laws or to exercise, establish or defend our legal rights
AliExpress may hand your data to law enforcement whenever they 'believe it is necessary,' without requiring a warrant and without telling you.
To an actual or potential buyer (and its agents and advisers) in connection with any actual or proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this Privacy Policy.
If AliExpress is bought or merges, your data goes with the deal. They promise the new owner will follow the same policy, but you get no notice and no opt-out.
Data Portability: You have the right to obtain your personal data in a portable and readily usable format.
You can request your personal data in a portable, machine-readable format — a real export right.
We implement appropriate technical and organizational measures to prevent unauthorized access to our Platform... Upon becoming aware of a data breach, we will notify you and the regulatory authorities in accordance with the timescales and scope required by applicable data protection law.
AliExpress commits to security safeguards and to notifying you (and regulators) if a data breach occurs.
Deletion: You have the right to request to delete the personal data provided by you or obtained about you.
U.S. users can request deletion of their personal data — a real, though request-based, deletion right.
you may opt out of the processing of personal data for personalized advertising purposes at any time by changing your cookies choices via our Cookie Preferences on our Platform
There is a self-serve cookie preference tool you can use to opt out of personalized advertising.
Last reviewed 2026-07-26 under rubric v3.5.