Privacy Policy

Dual Compliance Notice
This Privacy Policy complies with applicable laws and regulations of both the People’s Republic of China (PRC) and the United States, including but not limited to the PRC Personal Information Protection Law (PIPL), the U.S. California Consumer Privacy Act (CCPA), and relevant FTC regulations.

Xufengdaa (“we,” “us,” or “our”) is a PRC-operated website providing products and services exclusively to consumers in the United States. By accessing or using our website (the “Site”) or purchasing our products, you agree to the terms of this Privacy Policy.

1. Information We Collect

Personal Information (Necessary for Order Fulfillment)

We may collect the following information when you place an order or contact us:

Full name
Shipping and billing address
Email address
Phone number
Payment-related information (processed by third-party payment providers only)

Non-Personal & Technical Information

We may automatically collect limited non-identifiable data, including:

Browser type and device information
IP address
Website usage data (aggregated and anonymized)

This information is used solely for website performance, security, and analytics purposes.

2. Secure Data Collection & Cross-Border Transfers

SSL Encryption: Our website uses SSL encryption to protect data transmitted during checkout and account-related interactions.
No Storage of Full Payment Data: We do not store complete credit/debit card information. All payments are processed securely through trusted third-party payment providers compliant with PCI DSS standards.
Cross-Border Data Transfers: Where cross-border data transfers are necessary, we comply with applicable PRC and U.S. data protection requirements.

3. How We Use Your Information

Your information is used strictly for the following purposes:

Processing and fulfilling orders
Arranging shipping and delivery
Sending order confirmations and tracking notifications
Providing customer support and after-sales service
Sending marketing communications only with your consent (you may unsubscribe at any time)

What We Never Do

We do not sell, rent, or trade your personal information
We do not use customer data or images for advertising without explicit consent

4. Information Sharing & Disclosure

We may share your information only with:

Trusted third-party service providers (payment processors, logistics partners, email service providers) strictly for service fulfillment
Government authorities or legal entities when required by applicable laws or regulations

All third parties are contractually required to protect your information.

5. Data Security

We implement reasonable technical and organizational measures, including:

Encrypted data transmission
Restricted internal access
Periodic security reviews

While we take reasonable steps to protect your data, no online transmission or storage system can be guaranteed to be 100% secure.

6. Your Privacy Rights

Depending on applicable laws, you may have the right to:

Access or correct your personal information
Request deletion of your data (subject to legal retention requirements)
Opt out of marketing communications at any time

To exercise your rights, please contact us using the details below. We typically respond within 15–30 business days, in accordance with applicable laws.

7. Children’s Privacy

Our website is not intended for children under the age of 13. We do not knowingly collect personal information from children. If such data is discovered, it will be promptly deleted in compliance with COPPA regulations.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date. Continued use of the Site constitutes acceptance of the revised policy.