Xinyue Gifting

Xinyue Gifting · Legal

Privacy Policy

Last updated: 2026-08-20

Xinyue Gifting (we, us) operates https://xinyuegifting.com and provides B2B gifts and custom packaging services to buyers worldwide. This Privacy Policy explains what data we collect, how we use it, and your rights under GDPR / CCPA / PIPL.

1. Data We Collect

We collect the following categories of personal data:

  • Account: email address, hashed password, contact name, company name, tax ID and company role.
  • KYC / KYB: business licence, tax registration and other verification documents you upload for company approval.
  • Order: shipping / billing address, phone number, purchase history, payment references (we never store full card numbers).
  • Technical: IP address, user agent, cookies, device identifiers, page interaction events.
  • Marketing: email preferences, opt-in status, WhatsApp handle when you contact us.

2. How We Use It

  • Provide and operate the storefront, checkout, and B2B quote flow.
  • Fulfill orders (share shipping data with YunExpress and other carriers).
  • Process payments (data shared with PingPong for card and wallet payments, and with WorldFirst and correspondent banks for T/T wire transfers).
  • Send transactional emails (order status, RFQ replies, KYC decisions).
  • Fraud prevention, rate-limiting, and security monitoring.
  • Comply with legal obligations (invoicing, tax reporting).

3. Data Sharing

We share personal data with these processors under Data Processing Agreements: PingPong (card and wallet payments), WorldFirst (T/T bank transfer), YunExpress and its carrier partners (shipping and customs clearance), Resend (transactional email), DigitalOcean (application hosting and managed database, Singapore region), Cloudflare (CDN and object storage for uploaded files), Upstash (cache and rate limiting), Sentry (error monitoring). We also disclose data to professional advisers or authorities where required by law. We do not sell personal data to third-party advertisers.

4. Your Rights

  • Access and export your personal data.
  • Correct inaccurate data in your account profile, or by emailing us.
  • Delete your account (mail [email protected], we respond within 30 days).
  • Object to processing for marketing.
  • Lodge a complaint with your local data protection authority.

5. Data Retention

Account data is retained while your account is active. Order and invoicing records are retained for 7 years to satisfy tax obligations. Marketing consent is retained until you opt out.

6. International Transfers

Our application and database are hosted on DigitalOcean infrastructure in Singapore; uploaded files are stored on Cloudflare object storage and served through its global CDN. Because we are established in China and serve buyers worldwide, your data is necessarily transferred across borders. Such transfers rely on Standard Contractual Clauses or equivalent safeguards.

7. Contact

For any privacy request: [email protected]. Data controller: Xinyue Gifting, operated by Shanghai Xinyuefang Arts & Crafts Co., Ltd.

TelegramWhatsApp