Privacy Policy

This Privacy Policy applies to GuangDong XinRunXing Crafts Co., Ltd. (hereinafter "XRX Wood Box", "we", "us", or "our"), a manufacturer of custom wooden boxes, wooden packaging, wooden jewelry display props, wooden incense burners and related wooden products, headquartered in Guangdong Province, China.

Our website is operated at https://xrxwoodbox.com/ (the "Site") and is directed to business-to-business (B2B) clients including brands, importers, trading companies, gift companies and wholesale purchasers located globally, including in the European Union, the United States, the United Kingdom, Canada, Australia and the Middle East.

We collect information in the following ways:

We use the information we collect for the following purposes:

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data under the following legal bases as defined in the General Data Protection Regulation (GDPR) and UK GDPR:

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your information only in the following limited circumstances:

• Service Providers & Technology Partners

  We use third-party service providers to operate our website (e.g., web hosting, analytics tools, email delivery, form processing). These providers access data only as necessary to perform services on our behalf and are contractually bound to protect it.

• Logistics & Freight Partners

  When processing a shipment, we share necessary consignee information (name, company, address, phone number) with freight forwarders, shipping carriers and customs brokers for the purpose of delivery and customs clearance.

• Legal & Regulatory Authorities

  We may disclose information when required by law, court order, government regulation, or to protect the rights, property or safety of XRX Wood Box, our clients or others.

• Business Transfers

  In the event of a merger, acquisition, restructuring or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

XRX Wood Box is headquartered in China. When you contact us from the European Economic Area (EEA), the United Kingdom, the United States, Canada, Australia or other regions, your personal data will be transferred to and processed in China.

China is not currently recognized by the European Commission as providing an "adequate level" of data protection equivalent to the EEA. Where we transfer personal data from the EEA or UK to China, we rely on appropriate safeguards, which may include:

• Standard Contractual Clauses (SCCs) approved by the European Commission

• Your explicit consent to the transfer, where applicable

• Necessity of the transfer for the performance of a contract between you and us (e.g., processing your order)

You may request a copy of the safeguards we rely on for international transfers by contacting us at [email protected].

We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

When data is no longer needed, we will securely delete or anonymize it in accordance with our data management procedures.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under the GDPR and UK GDPR with respect to your personal data:

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you specific rights regarding your personal information.

To submit a CCPA request, please email us at [email protected] with the subject line "California Privacy Request". We will respond within 45 days. You may designate an authorized agent to make a request on your behalf.

Our Site uses cookies and similar tracking technologies to operate the website, analyze traffic, and improve your browsing experience.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure or destruction. These measures include:

• SSL/TLS encryption for data transmitted between your browser and our Site (HTTPS)

• Access controls limiting data access to authorized personnel only

• Secure hosting infrastructure with regular security updates

• Staff awareness of data handling responsibilities

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant supervisory authorities as required by applicable law.

Our Site may contain links to third-party websites, platforms (such as Alibaba, Made-in-China, trade directories), or social media pages. This Privacy Policy applies only to our Site. We are not responsible for the privacy practices or content of any third-party sites.

We encourage you to read the privacy policies of any third-party websites you visit. Links to third-party sites do not constitute an endorsement by XRX Wood Box.

Our Site and services are directed exclusively to business professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a minor, please contact us immediately at [email protected] and we will promptly delete such information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or by a prominent notice on our Site.

We encourage you to review this Privacy Policy periodically. Your continued use of our Site after any changes constitutes your acknowledgment of the updated policy.

If you have any questions, concerns or requests regarding this Privacy Policy or our data practices, please contact us using the following information: