Privacy Policy

Privacy Policy

Last updated: 30 August 2026

Xafair (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.xafair.com or use our China sourcing and procurement services.

1. Information We Collect

1.1 Personal Information You Provide

When you submit a quote request, contact form, or otherwise communicate with us, we collect:

  • Full name and job title
  • Company name and website
  • Email address and phone number
  • Country of residence and shipping destination
  • Product specifications, target quantities and budgets
  • Any additional information you choose to share

1.2 Information Collected Automatically

When you visit our website, our servers and analytics providers may automatically collect:

  • IP address and approximate geolocation (country-level)
  • Browser type, version and operating system
  • Pages visited, time on page and referring URL
  • Device identifiers (advertising ID, mobile device type)

1.3 Information We Receive From Suppliers

When we engage Chinese manufacturers on your behalf, they may provide us with quotations, samples and shipping documents that contain your business name, contact information and product specifications.

2. How We Use Your Information

We use your information to:

  • Provide the China sourcing services you request (sourcing, inspection, shipping)
  • Communicate with you about your project by email, phone, or messaging apps
  • Send you quotations, invoices, and shipping documents
  • Coordinate with manufacturers, freight forwarders, and customs brokers
  • Improve our website performance and customer experience
  • Send you service-related updates and (with your consent) occasional newsletters
  • Comply with legal, tax and regulatory obligations

We will never sell or rent your personal information to third parties for marketing purposes.

If you are in the European Economic Area (EEA), our legal bases for processing your personal data are:

  • Performance of a contract — to deliver the sourcing services you have requested
  • Legitimate interests — to operate and improve our business
  • Consent — for marketing communications and non-essential cookies
  • Legal obligation — to comply with applicable laws

4. How We Share Your Information

We share your information only with parties necessary to deliver our services:

  • Chinese manufacturers — to obtain quotations and place orders on your behalf
  • Freight forwarders and customs brokers — to coordinate shipping and customs clearance
  • Payment processors — to handle invoicing and refunds
  • Professional advisors — accountants, lawyers (under confidentiality)
  • Government authorities — when required by law

All third parties are contractually required to use your information only for the agreed purpose and to apply adequate security measures.

5. Data Security

We implement industry-standard security measures to protect your information, including:

  • SSL/TLS encryption for all website traffic
  • Encrypted storage of personal data at rest
  • Two-factor authentication on business-critical accounts
  • Limited access to personal data on a need-to-know basis
  • Regular backups stored in geographically separate locations

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

  • Quotation and project records: 7 years (tax compliance)
  • Marketing communications: until you unsubscribe
  • Website analytics: 26 months (Google Analytics default)
  • Backups: 90 days rolling

After these periods, your data is either deleted or anonymized for statistical purposes.

7. Your Rights

Depending on your jurisdiction, you have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Delete your personal information (subject to legal exceptions)
  • Restrict or object to certain processing activities
  • Data portability — receive your data in a structured, machine-readable format
  • Withdraw consent at any time, without affecting prior lawful processing
  • Lodge a complaint with a supervisory authority

To exercise these rights, contact us at privacy@xafair.com. We will respond within 30 days.

8. Cookies and Tracking

Our website uses cookies and similar technologies. For details, see our Cookie Policy.

9. International Data Transfers

Because we operate from China and serve clients globally, your information may be transferred to and processed in China. We use appropriate safeguards (Standard Contractual Clauses, encryption) for transfers from the EEA, UK and Switzerland.

10. Children’s Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date reflects the most recent revision. Material changes will be notified via email or prominent notice on our website.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact:

Xafair — Data Protection
Email: privacy@xafair.com
Headquarters: Shenzhen, Guangdong, China