Privacy Policy

1. Who We Are

Xin Nuo Industry and Trading (HK) Limited is a manufacturer and supplier of furniture, wooden household products, wood crafts, and custom-manufactured products for wholesale buyers, importers, distributors, retailers, brand owners, e-commerce sellers, designers, and project customers.

For personal information collected through this website, Xin Nuo Industry and Trading (HK) Limited is the data controller.

2. Purpose of This Website

This website is a business-to-business product showcase and inquiry website. It allows potential customers to review our manufacturing capabilities, product categories, company information, and examples of products that we may manufacture or develop.

The website is not currently intended to operate as an online retail store. We do not offer public customer account registration, online checkout, or online payment processing through this website.

3. Personal Information We Collect

3.1 Inquiry and Contact Information

When you submit one of our website forms or contact us directly, we may collect:

• Your name;
• Business email address;
• WhatsApp or telephone number;
• Company name;
• Country or market;
• The type of inquiry you select;
• Your message and product requirements;
• The webpage or product link connected with your inquiry;
• Any other information you voluntarily provide.

3.2 Project and Business Communication Information

If you continue communicating with us by email, WhatsApp, telephone, or another agreed method, we may receive:

• Product reference photographs;
• Technical drawings or sketches;
• Sample information;
• Product dimensions and specifications;
• Material, structure, finish, packaging, and quantity requirements;
• Target market and destination information;
• Quotation, sampling, production, quality-control, delivery, and after-sales correspondence;
• The names and business contact details of people involved in the project.

Technical drawings, product ideas, samples, specifications, and other project materials may contain confidential business information even when they do not contain personal information.

3.3 Technical and Security Information

When you visit the website, our systems and service providers may automatically process technical information such as:

• Internet Protocol address;
• Browser type and version;
• Device type and operating system;
• Referring page or website;
• Pages visited and approximate access time;
• Cookie identifiers and website preferences;
• Server logs, error logs, and security events;
• Information used to identify spam, bots, fraud, abuse, or malicious activity.

3.4 Information From Public Business Sources

When evaluating a business inquiry, preventing fraud, or verifying a prospective customer, we may review information available from legitimate public business sources, including:

• The customer’s company website;
• Public company registration information;
• LinkedIn or other professional profiles;
• Public business directories;
• Publicly available trade or company information.

We use this information only where reasonably necessary to verify the business, understand the inquiry, protect our company, or evaluate a potential commercial relationship.

4. How We Collect Information

We may collect information:

• Directly from you through a website form;
• When you email, telephone, or message us through WhatsApp;
• During quotation, sampling, development, production, and after-sales communication;
• Automatically through cookies, server logs, security systems, and reCAPTCHA;
• From publicly available business sources;
• From a colleague or representative of your company when they include you in project communications.

5. How We Use Personal Information

We may use personal information to:

• Receive, review, and respond to inquiries;
• Understand product and project requirements;
• Prepare quotations and discuss customization options;
• Evaluate the feasibility of a product, sample, drawing, or development request;
• Communicate about samples, orders, production, quality control, delivery, and after-sales matters;
• Verify the identity and legitimacy of a business or contact person;
• Detect and prevent spam, fraud, abuse, and cybersecurity threats;
• Maintain business and communication records;
• Protect our legal rights and respond to disputes;
• Comply with legal, accounting, tax, regulatory, and customs obligations;
• Improve the operation, reliability, security, and usability of the website;
• Send relevant business follow-up communications where permitted by law.

We do not sell or rent personal information.

We do not make decisions that produce legal or similarly significant effects based solely on automated processing. Automated security tools, including reCAPTCHA, may be used to detect spam or abusive activity.

6. Legal Bases for Processing

Where applicable data protection law requires a legal basis, we may process personal information on one or more of the following grounds:

• Legitimate interests: to respond to business inquiries, communicate with prospective and existing customers, operate and secure the website, prevent fraud, maintain business records, and develop legitimate business relationships;
• Pre-contractual steps or contract performance: when processing is necessary to prepare a quotation, evaluate a project, provide a sample, enter into an agreement, or perform an agreed order;
• Legal obligation: when information must be retained or disclosed to comply with tax, accounting, customs, regulatory, court, or government requirements;
• Consent: where consent is legally required, such as for certain non-essential cookies or optional marketing communications.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

7. Website Forms and Automatic Replies

Our website contains separate inquiry forms for the homepage, FAQs page, product pages, Contact Us page, and other inquiry entry points.

Information submitted through these forms may:

• Be stored securely in the website’s form-submission system;
• Be sent to our company email address;
• Be used to send an automatic confirmation email to the email address supplied;
• Be reviewed by authorized Xin Nuo personnel for inquiry follow-up.

Submitting a form does not create a contract or require either party to proceed with a project or order.

Please do not submit passwords, payment-card details, government identification numbers, health information, or other unnecessary sensitive personal information through our website forms.

8. Google reCAPTCHA

We use Google reCAPTCHA to help protect our forms from spam, bots, abuse, and malicious submissions.

When reCAPTCHA operates, Google may process technical and usage information such as an IP address, browser and device information, website interaction data, and other information needed to assess whether a submission is made by a person or an automated system.

Use of reCAPTCHA is subject to the Google Privacy Policy and Google Terms of Service.

9. Cookies and Similar Technologies

The website may use cookies and similar technologies for purposes including:

• Essential website operation;
• Security and fraud prevention;
• Remembering display or browser preferences;
• Form protection and reCAPTCHA;
• Website performance and error diagnosis;
• Embedded maps, videos, or other third-party functions.

Strictly necessary cookies may operate without consent where permitted by law. Non-essential cookies should only be activated after consent where consent is legally required.

You can manage cookies through any cookie-consent tool provided on the website and through your browser settings. Blocking some cookies may affect the operation of certain website functions.

A separate Cookie Policy or cookie-settings panel may provide additional details about the cookies currently used.

10. WhatsApp, Maps, Social Media, and External Links

The website may contain links to or functions provided by third parties, including:

• WhatsApp;
• Google Maps;
• YouTube;
• Facebook;
• X/Twitter;
• Telegram;
• LinkedIn;
• Other external websites or platforms.

If you click one of these links or use a third-party service, that provider may collect information directly from you according to its own privacy policy. Xin Nuo does not control the privacy practices of third-party websites and services.

Communications through WhatsApp are also subject to WhatsApp’s and Meta’s applicable privacy terms.

11. How We Share Information

We may share personal information only when reasonably necessary with:

• Authorized Xin Nuo employees and personnel involved in inquiry handling, product development, quotation, production, quality control, logistics, accounting, or after-sales support;
• Website hosting, email, security, content-delivery, form-processing, spam-prevention, backup, and technical-support providers;
• Suppliers or service providers involved in a project, but only to the extent necessary to evaluate or complete the customer’s requirements;
• Shipping, logistics, customs, inspection, certification, or professional service providers where required;
• Accountants, auditors, insurers, legal advisers, and other professional advisers;
• Courts, regulators, customs authorities, tax authorities, law-enforcement bodies, or other authorities where disclosure is legally required;
• A purchaser, successor, or adviser involved in a genuine merger, acquisition, restructuring, or transfer of the business, subject to appropriate confidentiality safeguards.

We do not disclose customer drawings, specifications, samples, or confidential project materials to unrelated parties for their independent marketing purposes.

12. International Data Processing and Transfers

Xin Nuo serves international customers. Personal information may be accessed or processed in Hong Kong, mainland China, and other countries where our service providers operate.

These countries may have data protection laws that differ from those in your country. Where required by applicable law, we will use appropriate contractual, organizational, or technical safeguards for international transfers.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including business, legal, accounting, security, and dispute-resolution requirements.

Unless a longer period is required or justified:

• General inquiries that do not become active projects may normally be retained for up to three years after the last meaningful communication;
• Active project and customer correspondence may be retained for the duration of the business relationship and for a reasonable period afterward;
• Transaction, accounting, order, invoice, and other legally required business records may be retained for at least seven years, or for a longer period where required by applicable law;
• Security and server logs may normally be retained for up to twelve months, unless a longer period is necessary to investigate fraud, abuse, security incidents, or legal claims;
• Marketing contact information may be retained until you unsubscribe, object, or ask us to stop, unless another lawful reason requires retention.

When information is no longer required, we will take reasonable steps to delete, anonymize, or securely dispose of it.

14. Security and Confidentiality

We use reasonable technical and organizational measures designed to protect personal information and business communications against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include:

• Restricted access to inquiry and project records;
• Password and account controls;
• Secure website connections;
• Website security and spam-protection measures;
• Backups and system monitoring;
• Internal confidentiality requirements;
• Confidentiality agreements or non-disclosure agreements where appropriate.

No website, email system, or internet transmission can be guaranteed to be completely secure. You should avoid sending highly confidential drawings, unreleased product designs, trade secrets, or sensitive files through a basic website form.

Please contact us first if a project requires an NDA or a more appropriate method for transferring confidential materials.

15. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• Request access to the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of information where there is no lawful reason to retain it;
• Request restriction of certain processing;
• Object to processing based on legitimate interests;
• Object to direct marketing;
• Request portability of information where applicable;
• Withdraw consent where processing is based on consent;
• Lodge a complaint with an applicable data protection authority.

These rights are not absolute and may be limited where information must be retained for legal obligations, fraud prevention, contractual records, disputes, or legal claims.

To exercise a privacy right, contact xngm@xngmhk.com. We may ask for reasonable information to verify your identity and protect personal information from unauthorized disclosure.

16. European Union and United Kingdom Visitors

If the EU GDPR or UK GDPR applies to your personal information, you may contact us to exercise your applicable data-protection rights.

You may also have the right to complain to the data-protection authority in the country where you live or work. UK visitors may contact the UK Information Commissioner’s Office.

17. United States Privacy Information

Where applicable United States state privacy laws provide relevant rights, residents may request access, correction, or deletion of eligible personal information and may exercise other rights provided by applicable law.

Xin Nuo does not sell personal information and does not use personal information for cross-context behavioral advertising.

18. Children’s Privacy

This website is intended for business users and is not directed to children.

We do not knowingly collect personal information from children under the age of 16. If you believe that a child has submitted personal information to us, please contact us so that we can review and delete it where appropriate.

19. Confidential Business Information and Intellectual Property

This Privacy Policy primarily concerns personal information relating to identifiable individuals.

Product drawings, designs, specifications, samples, pricing, manufacturing methods, and other business materials may also be protected as confidential information or intellectual property under a separate agreement or NDA.

When sending project materials, you confirm that you have the authority and legal right to provide those materials to us for evaluation, quotation, development, or production.

20. Changes to This Privacy Policy

We may update this Privacy Policy when our website, services, technology, business practices, or legal obligations change.

The updated version will be posted on this page with a revised “Last updated” date. Where legally required, we will provide additional notice of material changes.

21. Contact Us

If you have questions about this Privacy Policy, how we use personal information, or wish to exercise a privacy right, please contact: