Privacy Policy
Introduction
Xumu (Hangzhou) Cross-border E-commerce Co., Ltd. (“we,” “our,” “us,” or “the Company”) operates the website (the “Website”). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy (“Policy”) explains how we collect, use, disclose, and safeguard your information when you visit our Website.
Please read this Policy carefully. By accessing and using our Website, you consent to the practices described in this Policy. If you do not agree with the terms of this Policy, please do not access the Website.
We reserve the right to make changes to this Policy at any time. We will alert you about any changes by updating the “Last Updated” date of this Policy. It is your responsibility to review this Policy periodically for updates. Your continued use of the Website following the posting of changes constitutes your acceptance of those changes.
Information We Collect
We collect several types of information from and about users of our Website, which may include personal information. “Personal Information” is data that can be used to identify you directly or indirectly.
Personal Information You Provide to Us
We collect personal information that you voluntarily provide to us when you:
Contact Us: When you fill out a contact form, you may provide your name, email address, and any other information you include in your message.
Use Chat Features: When you use any chat window or live chat feature on our Website, we collect the contents of your messages and any contact information you provide.
Make a Purchase: When you purchase a product or service, we collect information necessary to process your order, such as your name, billing address, shipping address, email address, and phone number. Payment information is processed directly by our third-party payment processors and is not stored on our servers.
Upload Content: When you submit text or images through our forms or chat windows (User-Generated Content), we collect the content you provide.
Information Collected Automatically
When you visit the Website, we may automatically collect certain information about your device and your visit, including:
Log and Usage Data: Our servers automatically record information created by your use of the Website. This may include your IP address, browser type, operating system, referring web page, pages visited, location, your mobile carrier, device and application IDs, and search terms.
Cookies and Similar Tracking Technologies: We use cookies, pixel tags, and similar technologies to collect information about your interactions with the Website. This helps us analyze traffic, personalize your experience, and understand user behavior. You can control the use of cookies at the individual browser level.
How We Use Your Information
We use the information we collect for various business purposes, including:
To Provide and Maintain Our Website: To operate, maintain, and improve the functionality of our Website.
To Fulfill Your Orders: To process and complete your transactions, including shipping products to you and providing you with invoices and order confirmations.
To Communicate with You: To respond to your inquiries, comments, and questions submitted through our contact forms or chat features. To provide customer support and send you administrative messages.
For Marketing and Promotional Purposes: We may use your email address to send you news, special offers, and general information about other goods, services, and events we offer that are similar to those you have already purchased or inquired about, where you have not opted out of receiving such information. (You can opt-out at any time).
For Security and Fraud Prevention: To detect, prevent, and address technical issues, security breaches, and fraudulent activities.
To Comply with Legal Obligations: To comply with applicable laws, regulations, and legal processes.
Legal Basis for Processing (For EEA and UK Users)
If you are from the European Economic Area (EEA) or the United Kingdom (UK), our legal basis for collecting and using your personal information depends on the specific context in which we collect it. We typically rely on the following legal bases:
Performance of a Contract: The processing is necessary to fulfill a contract with you (e.g., to deliver the products you have purchased).
Legitimate Interests: The processing is in our legitimate interests, such as operating our Website, communicating with you, and for security and fraud prevention, and your interests and fundamental rights do not override those interests.
Consent: We rely on your consent to use your personal information for specific purposes, such as sending you marketing communications. You have the right to withdraw your consent at any time.
How We Share Your Information
We may share your information in the following situations:
Service Providers: We may share your information with third-party vendors, service providers, and contractors who perform services for us or on our behalf. These include payment processing, data analysis, email delivery, hosting services, customer service, and shipping companies.
Business Transfers: If we are involved in a merger, acquisition, asset sale, or other business transfer, your information may be transferred as part of that transaction.
Legal Requirements: We may disclose your information where required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
To Protect Our Rights: We may disclose your information to protect and defend our rights or property, or to prevent illegal activity or harm to our users or the public.
We do not sell, rent, or trade your personal information to third parties for their commercial marketing purposes.
Data Retention
We will retain your personal information only for as long as is necessary for the purposes set out in this Policy, or as required to comply with our legal obligations, resolve disputes, and enforce our agreements. For example, we will retain order information for tax and accounting purposes for the period required by law.
International Data Transfers
Your information, including Personal Information, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. Since our company is based in China and we use service providers that may be located in other countries, your information may be transferred to and processed in countries other than your own.
We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. This includes implementing appropriate contractual safeguards to protect your data when it is transferred internationally.
Your Data Protection Rights
Depending on your location, you may have the following rights regarding your personal information:
Access and Portability: The right to request copies of your personal information.
Rectification: The right to have any inaccurate or incomplete information we hold about you corrected.
Erasure (The “Right to be Forgotten”): The right to request that we delete your personal information, under certain conditions.
Restriction of Processing: The right to request that we restrict the processing of your personal information, under certain conditions.
Objection to Processing: The right to object to our processing of your personal information, under certain conditions.
Withdraw Consent: The right to withdraw your consent where we rely on your consent to process your personal information.
To exercise any of these rights, please contact us using the information provided in the “Contact Us” section below. We may need to verify your identity before responding to your request.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our Website and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Website.
Data Security
We implement appropriate technical and organizational security measures designed to protect the security of your personal information. We use secure servers and protocols to safeguard your data. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.
Children’s Privacy
Our Website is not intended for individuals under the age of 18 (“Children”). We do not knowingly collect personally identifiable information from Children. If you are a parent or guardian and you are aware that your Child has provided us with Personal Information, please contact us. If we become aware that we have collected Personal Information from a Child without verification of parental consent, we take steps to remove that information from our servers.
Third-Party Links
Our Website may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Contact Us
If you have any questions about this Privacy Policy, your data, or your rights, please do not hesitate to contact us:
By email: hangzhouxumu@gmail.com
Visit our Contact Us page
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date at the top. You are advised to review this Privacy Policy periodically for any changes.
Last Updated: [November 9, 2025]