Privacy Policy
Last updated: 30 August 2026
Xafair (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.xafair.com or use our China sourcing and procurement services.
1. Information We Collect
1.1 Personal Information You Provide
When you submit a quote request, contact form, or otherwise communicate with us, we collect:
- Full name and job title
- Company name and website
- Email address and phone number
- Country of residence and shipping destination
- Product specifications, target quantities and budgets
- Any additional information you choose to share
1.2 Information Collected Automatically
When you visit our website, our servers and analytics providers may automatically collect:
- IP address and approximate geolocation (country-level)
- Browser type, version and operating system
- Pages visited, time on page and referring URL
- Device identifiers (advertising ID, mobile device type)
1.3 Information We Receive From Suppliers
When we engage Chinese manufacturers on your behalf, they may provide us with quotations, samples and shipping documents that contain your business name, contact information and product specifications.
2. How We Use Your Information
We use your information to:
- Provide the China sourcing services you request (sourcing, inspection, shipping)
- Communicate with you about your project by email, phone, or messaging apps
- Send you quotations, invoices, and shipping documents
- Coordinate with manufacturers, freight forwarders, and customs brokers
- Improve our website performance and customer experience
- Send you service-related updates and (with your consent) occasional newsletters
- Comply with legal, tax and regulatory obligations
We will never sell or rent your personal information to third parties for marketing purposes.
3. Legal Basis for Processing (GDPR)
If you are in the European Economic Area (EEA), our legal bases for processing your personal data are:
- Performance of a contract — to deliver the sourcing services you have requested
- Legitimate interests — to operate and improve our business
- Consent — for marketing communications and non-essential cookies
- Legal obligation — to comply with applicable laws
4. How We Share Your Information
We share your information only with parties necessary to deliver our services:
- Chinese manufacturers — to obtain quotations and place orders on your behalf
- Freight forwarders and customs brokers — to coordinate shipping and customs clearance
- Payment processors — to handle invoicing and refunds
- Professional advisors — accountants, lawyers (under confidentiality)
- Government authorities — when required by law
All third parties are contractually required to use your information only for the agreed purpose and to apply adequate security measures.
5. Data Security
We implement industry-standard security measures to protect your information, including:
- SSL/TLS encryption for all website traffic
- Encrypted storage of personal data at rest
- Two-factor authentication on business-critical accounts
- Limited access to personal data on a need-to-know basis
- Regular backups stored in geographically separate locations
While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as necessary to provide our services and comply with legal obligations:
- Quotation and project records: 7 years (tax compliance)
- Marketing communications: until you unsubscribe
- Website analytics: 26 months (Google Analytics default)
- Backups: 90 days rolling
After these periods, your data is either deleted or anonymized for statistical purposes.
7. Your Rights
Depending on your jurisdiction, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Delete your personal information (subject to legal exceptions)
- Restrict or object to certain processing activities
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time, without affecting prior lawful processing
- Lodge a complaint with a supervisory authority
To exercise these rights, contact us at privacy@xafair.com. We will respond within 30 days.
8. Cookies and Tracking
Our website uses cookies and similar technologies. For details, see our Cookie Policy.
9. International Data Transfers
Because we operate from China and serve clients globally, your information may be transferred to and processed in China. We use appropriate safeguards (Standard Contractual Clauses, encryption) for transfers from the EEA, UK and Switzerland.
10. Children’s Privacy
Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date reflects the most recent revision. Material changes will be notified via email or prominent notice on our website.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact:
Xafair — Data Protection
Email: privacy@xafair.com
Headquarters: Shenzhen, Guangdong, China