Privacy Policy

1.1 Information You Provide Directly

• Contact information: name, company name, job title, email address, phone number, and mailing address when you submit inquiries, request quotes, or register an account.
• Business information: purchase orders, shipping details, payment information, and correspondence related to product orders or technical support.
• Communication data: messages, emails, and feedback submitted through our contact forms or directly to our sales team.

1.2 Information Collected Automatically

• Device and usage data: IP address, browser type, operating system, referring URLs, pages visited, time spent, and other standard web analytics data.
• Cookies and similar technologies: small data files stored on your device to remember preferences and improve your browsing experience (see Section 3 for details).

1.3 Information from Third Parties

• We may receive information about you from business partners, trade show organizers, or publicly available sources when you have given consent for your data to be shared.

We use the collected information for the following purposes:

• Order fulfillment: processing purchase orders, arranging shipments, issuing invoices, and providing after-sales support for our LED lighting products.
• Customer communication: responding to inquiries, providing product information, technical specifications, and quotation details.
• Product improvement: analyzing usage patterns and feedback to enhance our product range, website functionality, and customer service quality.
• Marketing (with consent): sending newsletters, product announcements, trade show invitations, and promotional offers related to our LED lighting solutions.
• Legal compliance: meeting regulatory requirements, enforcing our terms, protecting against fraud, and resolving disputes.
• Website administration: maintaining site security, diagnosing technical issues, and optimizing page performance.

Legal basis for processing (GDPR Art. 6): We process personal data based on contractual necessity, legitimate business interests, your consent, or legal obligations, as applicable.

Our website uses cookies and similar tracking technologies to enhance your experience:

• Essential cookies: required for basic site functionality such as session management and security features. These cannot be disabled.
• Analytics cookies: help us understand how visitors interact with our website (e.g., Google Analytics). Data is aggregated and anonymized.
• Functional cookies: remember your preferences such as language selection and region settings.
• Marketing cookies: used to deliver relevant advertisements and measure campaign effectiveness (only with your consent).

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect site functionality. For detailed instructions, visit aboutcookies.org.

We do not sell your personal data. We may share your information with the following categories of recipients:

• Service providers: logistics partners, payment processors, IT hosting providers, and marketing platforms that assist us in operating our business under strict data processing agreements.
• Business partners: authorized distributors and agents who help us serve customers in specific regions, only to the extent necessary for order fulfillment.
• Legal authorities: when required by law, regulation, court order, or to protect the rights and safety of XRLL, our customers, or the public.
• Corporate transactions: in connection with a merger, acquisition, or sale of business assets, where personal data may be transferred as part of the transaction.

International transfers: As a China-based manufacturer serving global customers, your data may be transferred to and processed in countries outside your jurisdiction. We implement appropriate safeguards (including standard contractual clauses) to ensure adequate protection.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of access: obtain a copy of the personal data we hold about you.
• Right to rectification: correct inaccurate or incomplete personal data.
• Right to erasure: request deletion of your personal data (“right to be forgotten”), subject to legal retention requirements.
• Right to restrict processing: limit how we use your data in certain circumstances.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interests, including profiling.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, please contact us using the details below. We will respond within 30 days of receiving your request.

We retain personal data only for as long as necessary to fulfill the purposes described in this policy:

• Customer records: retained for the duration of the business relationship and up to 7 years thereafter for tax and legal compliance.
• Website analytics data: retained in anonymized form for up to 26 months.
• Marketing consent records: retained until consent is withdrawn, plus a 3-year evidence period.

We implement industry-standard technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for all data transmitted through our website.
• Access controls and authentication for internal systems.
• Regular security reviews and vulnerability assessments.
• Staff training on data protection principles and confidentiality obligations.

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We encourage you to use strong passwords and safeguard your login credentials.

Our website and products are intended for business professionals and are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. The “Last updated” date at the top of this page indicates when the most recent revision was made. Material changes will be communicated via a prominent notice on our website or by email.

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your information, please reach out:

For EU/EEA residents, you also have the right to lodge a complaint with your local supervisory authority if you believe our processing of your data violates applicable law.