Xinqiri (Shanghai) E-Commerce Development Co., Ltd. (“XINQIRI”, “we”) is responsible for the personal data you provide on this website and in the buyer portal. For any question about your personal data, email xue@xinqiri.com.

• Account data: name, email address and password (stored in hashed form; we cannot read it).
• Contact details: phone, WhatsApp and job title, if you choose to provide them.
• Company details: company name, country, VAT number, website, annual sourcing volume and main product categories.
• Requests and project records: the sourcing requests you submit, files you upload, your messages with us, and project records such as quotes, samples, inspections and shipments.
• Technical data: your IP address (to prevent abuse and limit request rates) and the session cookie needed to keep you signed in.

• To answer your sourcing requests, assess a cooperation and provide sourcing and supply chain services: performance of a contract or steps taken at your request before entering into one.
• To manage your account, review client applications and keep you informed about your projects: as above.
• To keep the website and accounts secure and prevent abuse: our legitimate interests.
• To meet legal, tax and accounting obligations: legal obligation.

Account and business data are stored in database and file storage provided by Supabase, on servers in the European Union (Frankfurt, Germany). The website is served from Alibaba Cloud servers in China, and email is handled by Tencent Enterprise Mail. These providers process data on our instructions only.

Only the XINQIRI staff working on your projects can see your information. We do not sell your personal data, and we do not share your details with manufacturers or theirs with you. Where personal data is transferred outside the European Economic Area, we apply the safeguards required by applicable law.

• Your account is kept until you delete it. Prospective client accounts that remain unused for 24 months are deleted together with their data.
• Project records, quotes and correspondence of clients are kept after the cooperation ends for as long as contracts and the law require.
• Server access and security logs are generally kept for no more than 12 months.

You can access, correct or delete your personal data, ask us to restrict or object to its processing, ask for a copy in a common format, and withdraw consent at any time. Prospective clients can delete their account and all its data themselves on the Account page of the buyer portal; for anything else, email xue@xinqiri.com and we will reply within one month.

If you believe we have not handled your data properly, you can also complain to the data protection authority in your country, for example the Portuguese CNPD.

This website does not use advertising or analytics cookies. The buyer portal only uses the session cookie that is strictly necessary to keep you signed in; it ends when you sign out or it expires.

We protect your data with access controls, private file storage and short-lived download links. If we make material changes to this policy, we will update this page and let you know in the buyer portal or by email. The buyer portal is intended for business buyers and not for anyone under 16.