Datenschutzrichtlinie der Xiamen Jingwei Fabric Co., Ltd.

This Privacy Policy (the "Policy") explains how Xiamen Jingwei Fabric Co., Ltd. ("we," "us," or "our") collects, uses, stores, shares, and protects your personal information when you access or use our services, including our website (the "Site"), online platforms, offline interactions, and any other products or services provided by us (collectively, the "Services"). It also outlines your rights and choices regarding your personal information.

This Policy applies to all personal information collected by us through any means, whether written, electronic, oral, online, or offline, including but not limited to information submitted via the Site, email communications, customer service interactions, order placements, surveys, and trade shows.

By accessing or using our Services, purchasing our products, or providing us with your personal information, you acknowledge that you have read, understood, and agreed to the terms of this Policy and our Terms and Conditions. If you do not agree with this Policy or our Terms and Conditions, please do not access or use our Services or provide us with any personal information.

1. Definitions

Personal Information: Any information that relates to an identified or identifiable individual, including but not limited to your name, contact details, company information, payment data, and other information that can be used to identify, contact, or locate you. The definition of personal information may vary by jurisdiction, and the applicable definition in your location shall govern for the purposes of this Policy.
Anonymized/Aggregated Data: Data that has been irreversibly stripped of all personal identifiers such that it can no longer be linked to you, even when combined with other information. Such data is not considered personal information under this Policy.
Processing: Any operation performed on personal information, including collection, recording, organization, storage, adaptation, retrieval, use, disclosure, transmission, or erasure.

2. Scope of Application

This Policy applies to all individuals who access or use our Services, including customers, potential customers, business partners, suppliers, website visitors, survey participants, and anyone who provides personal information to us.

If you are located in the European Economic Area (EEA), the United Kingdom (UK), Switzerland, or any other jurisdiction with data protection laws (such as the General Data Protection Regulation (GDPR), UK GDPR, or similar local regulations), additional rights and obligations as required by such laws are incorporated into this Policy.

3. Personal Information We Collect

We only collect personal information that is necessary to fulfill the purposes outlined in this Policy. The types of personal information we may collect include:

3.1 Information You Voluntarily Provide

Order and Transaction Information: When you place an order for our products or services, we collect information such as your full name, company name, job title, mailing address (for delivery), billing address, email address, phone number (including mobile/WhatsApp number), payment details (e.g., credit card information, bank account details), order history, product preferences, and any special instructions related to delivery or order fulfillment.
Account Information: If you create an account on our Site, we collect your username, password (encrypted), and account preferences (e.g., communication settings).
Inquiry and Communication Information: When you contact our customer service, sales team, or other departments (via email, phone, contact form, or in person), we collect information such as your name, contact details, the content of your inquiry or communication, and any supporting documents you provide (e.g., product samples, technical drawings).
Marketing and Survey Information: If you choose to subscribe to our marketing communications (e.g., newsletters, product updates, promotional offers) or participate in surveys, we collect your email address, preferences, and survey responses.
Offline Interaction Information: When you interact with us at trade shows, exhibitions, or other offline events, we may collect your name, company name, contact details, and information about your product interests (e.g., via business card exchanges or registration forms).

3.2 Information Collected Automatically

When you access or use our Site, we may automatically collect certain technical and usage information through cookies, web beacons, and other tracking technologies. This information may include:

Device information (e.g., device type, operating system, browser type, unique device identifiers).
Usage data (e.g., pages visited, time spent on the Site, links clicked, search queries, IP address, geographic location (approximate)).
Access logs (e.g., date and time of access, referral URL, server response codes).

For more details on our use of cookies and tracking technologies, please refer to our Cookie Policy (available on the Site).

3.3 Information from Third Parties

We may collect personal information about you from trusted third parties, including:

Business partners, suppliers, or distributors (e.g., contact details for order fulfillment or collaboration).
Payment service providers (e.g., to verify payment information and process transactions).
Marketing and lead generation partners (with your prior consent, where required by law).
Publicly available sources (e.g., business directories) for the purpose of updating our customer database or contacting potential customers.

We only collect personal information from third parties if such collection is lawful and consistent with the purposes outlined in this Policy.

4. Purposes of Processing Your Personal Information

We process your personal information for the following legitimate purposes:

4.1 Order Fulfillment and Transaction Processing

Process and fulfill your orders (e.g., manufacture, package, ship, and deliver products).
Verify payment information and process payments.
Communicate with you about your order status, delivery updates, and any issues related to your purchase.
Provide after-sales support (e.g., handle returns, exchanges, or product inquiries).

4.2 Account Management

Create and manage your account on our Site.
Provide you with access to personalized features of the Site (e.g., order history, saved preferences).

4.3 Marketing and Promotions

Send you marketing communications (e.g., newsletters, product updates, promotional offers, and information about new products or services) that may be of interest to you, provided you have given your consent (where required by law).
Conduct market research and analyze customer preferences to improve our products, services, and marketing strategies.
Personalize marketing content based on your interests and usage patterns.

4.4 Customer Service and Support

Respond to your inquiries, complaints, or requests for assistance.
Resolve disputes or issues related to our products or services.
Maintain records of customer interactions for quality assurance and training purposes.

4.5 Business Operations and Improvement

Manage and optimize our business operations (e.g., inventory management, production planning, logistics).
Analyze usage data of the Site to improve its functionality, usability, and performance.
Develop new products, services, or features based on customer feedback and market trends.

4.6 Legal and Compliance Obligations

Comply with applicable laws, regulations, and legal obligations (e.g., tax, customs, and trade compliance).
Protect our legal rights and interests (e.g., defend against legal claims, enforce our Terms and Conditions).
Prevent fraud, unauthorized access, or other illegal activities (e.g., verify the identity of users, detect and investigate fraudulent transactions).

4.7 Collaboration and Partnerships

Facilitate collaboration with business partners, suppliers, or distributors (e.g., share contact details for order coordination or project management).

We only process your personal information for the purposes stated above, and we will not use it for any other purpose without your prior consent (where required by law) or as permitted by applicable data protection laws.

5. Legal Basis for Processing (For EEA/UK/Swiss Residents)

If you are located in the EEA, UK, or Switzerland, we process your personal information based on the following legal bases as required by the GDPR/UK GDPR:

Performance of a contract: To fulfill our obligations under a contract with you (e.g., order fulfillment, payment processing).
Consent: For marketing activities and other processing activities where your explicit consent is required (you may withdraw your consent at any time, as outlined in Section 7).
Legitimate interests: For processing activities that are necessary for our legitimate business interests, provided such interests do not override your fundamental rights and freedoms. Our legitimate interests include:

Managing customer relationships and providing customer service.
Improving our products, services, and marketing strategies.
Preventing fraud and ensuring the security of our Services.
Complying with internal policies and procedures.

Legal obligation: To comply with applicable laws, regulations, or legal orders (e.g., tax reporting, customs requirements).

We conduct a Data Protection Impact Assessment (DPIA) for any high-risk processing activities to ensure compliance with data protection laws.

6. How We Obtain Your Consent

Implied Consent: When you provide your personal information to complete a transaction (e.g., place an order, make a payment), schedule a delivery, or return a purchase, we assume that you consent to our collecting and using your information solely for the purpose of completing that transaction.
Explicit Consent: For any other processing activity that requires your consent (e.g., marketing communications, sharing your information with third parties for marketing purposes), we will ask for your explicit consent directly. This may be through a checkbox on a form, a separate consent request email, or verbal confirmation (for offline interactions).
Consent for Minors: We do not intentionally collect personal information from minors (individuals under the age of 18, or the age of majority in your jurisdiction). By using our Services, you represent that you are at least the age of majority and have the legal capacity to provide consent. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us to request its deletion.

7. How to Withdraw Your Consent

You may withdraw your consent to our processing of your personal information at any time, provided that such withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. To withdraw your consent:

For marketing communications: Click the "unsubscribe" link in any marketing email we send you, or contact our data protection officer (DPO) using the contact details provided in Section 16.
For other types of consent: Submit a written request to our DPO, specifying the type of consent you wish to withdraw.

We will process your withdrawal request within a reasonable time (not exceeding 30 days, or as required by applicable law) and will no longer process your personal information for the purpose for which consent was withdrawn, unless we have another legal basis to continue processing.

8. Sharing and Disclosure of Your Personal Information

We do not sell, rent, or lease your personal information to third parties for marketing purposes without your explicit consent. We may share your personal information with the following categories of third parties for the purposes outlined in this Policy:

8.1 Service Providers

We engage trusted third-party service providers to perform certain business functions on our behalf. These service providers may include:

Payment processors (e.g., credit card companies, bank payment gateways) to process transactions.
Logistics and delivery partners (e.g., shipping companies, couriers) to deliver products.
IT service providers (e.g., web hosting, cloud storage, cybersecurity providers) to maintain and secure our Site and systems.
Customer service and support providers (e.g., call centers, email management tools) to assist with customer inquiries.
Marketing service providers (e.g., email marketing platforms, analytics tools) to manage marketing campaigns and analyze customer data.

These service providers are only authorized to collect, use, and disclose your personal information to the extent necessary to perform the services they provide to us. They are required to comply with this Policy and applicable data protection laws and to implement appropriate security measures to protect your personal information.

8.2 Business Partners and Affiliates

We may share your personal information with our business partners, affiliates, or subsidiaries for the purpose of:

Fulfilling orders (e.g., if a partner is involved in manufacturing or distributing the product).
Collaborating on projects or providing joint services.
Sharing marketing opportunities (with your prior consent, where required by law).

8.3 Legal and Regulatory Authorities

We may disclose your personal information to legal or regulatory authorities if:

We are required to do so by law, regulation, or legal order (e.g., a court summons, subpoena, or tax audit).
We believe in good faith that such disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of others.
We need to report suspected illegal activities or comply with anti-fraud or anti-money laundering obligations.

8.4 Business Transfers

If we are acquired by, merged with, or sold to another company, or if we undergo a reorganization, restructuring, or asset sale, your personal information may be transferred to the new owner or successor entity as part of the transaction. We will notify you of any such transfer in advance (where required by law) and ensure that the new owner complies with the terms of this Policy.

8.5 Other Third Parties (With Your Consent)

We may share your personal information with other third parties if we have obtained your explicit consent to do so.

9. Cross-Border Data Transfers

We are based in Xiamen, China, and may transfer your personal information to countries outside of your jurisdiction, including China and other countries where our service providers or business partners are located.

If you are located in the EEA, UK, or Switzerland, we ensure that cross-border data transfers comply with applicable data protection laws (e.g., GDPR/UK GDPR) by:

Transferring data to countries that have been deemed to provide an adequate level of data protection by the European Commission (or UK authorities, as applicable).
Using standard contractual clauses (SCCs) approved by the European Commission (or UK authorities) for transfers to countries without an adequacy decision.
Obtaining your explicit consent for transfers, where required.

You may request a copy of the SCCs or other measures implemented to protect cross-border data transfers by contacting our DPO (see Section 16).

10. Data Security

We take the security of your personal information seriously and implement appropriate technical, administrative, and physical security measures to protect it from unauthorized access, use, disclosure, alteration, loss, or destruction. These measures include:

10.1 Technical Measures

Encryption of personal information in transit (e.g., via SSL/TLS) and at rest (e.g., using AES encryption for stored data).
Secure access controls (e.g., multi-factor authentication, unique user IDs, and strong password requirements) for our systems and databases.
Regular security updates and patches for our website, servers, and software.
Firewalls and intrusion detection/prevention systems to monitor and block unauthorized access.

10.2 Administrative Measures

Limiting access to personal information to only those employees, contractors, or service providers who need it to perform their job functions.
Training employees on data protection policies and procedures, including security best practices and the handling of personal information.
Conducting regular security audits and risk assessments to identify and address potential vulnerabilities.
Implementing data breach response plans to promptly address and mitigate the impact of any security incidents.

10.3 Physical Measures

Secure storage facilities for physical records containing personal information (e.g., locked cabinets, restricted access to offices).
Access controls for our physical premises (e.g., ID checks, surveillance cameras).

While we strive to protect your personal information, no security measure is 100% effective. We cannot guarantee the absolute security of your personal information, and you acknowledge and accept the inherent risks of transmitting information over the internet or through other electronic means.

If we discover a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant data protection authority (as required by applicable law) without undue delay.

11. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law (e.g., tax, legal, or regulatory obligations).

The retention period for your personal information is determined based on the following factors:

The purpose of the processing (e.g., order information is retained for 7 years after the order is completed for tax and warranty purposes).
Legal or regulatory requirements (e.g., we may be required to retain financial records for a minimum period under tax laws).
The need to resolve disputes or enforce our legal rights.

Once the retention period expires, we will securely delete or anonymize your personal information so that it can no longer be linked to you.

12. Your Rights Regarding Your Personal Information

You have certain rights regarding your personal information, subject to applicable data protection laws. To exercise these rights, please contact our DPO using the contact details provided in Section 16. We may request proof of identity to verify your request (to protect against unauthorized access to your personal information).

12.1 Right to Access

You have the right to request access to the personal information we hold about you, including details of how we collect, use, and share it. We will provide you with a copy of your personal information free of charge (we may charge a reasonable fee for additional copies, as permitted by law).

12.2 Right to Correction

You have the right to request the correction of any inaccurate or incomplete personal information we hold about you. We will update your information promptly upon verifying the correction.

12.3 Right to Erasure ("Right to be Forgotten")

You have the right to request the erasure of your personal information if:

It is no longer necessary for the purposes for which it was collected.
You withdraw your consent (and there is no other legal basis for processing).
You object to the processing (and there are no overriding legitimate interests).
The processing is unlawful.

We will comply with your request, provided that we are not required to retain the information by law or for legitimate business purposes (e.g., resolving disputes).

12.4 Right to Restriction of Processing

You have the right to request the restriction of processing of your personal information if:

You contest the accuracy of the information (for the period needed to verify its accuracy).
The processing is unlawful (and you do not want the information erased).
We no longer need the information, but you require it for the establishment, exercise, or defense of legal claims.
You have objected to processing (pending a decision on whether our legitimate interests override your rights).

If processing is restricted, we will only process your personal information with your consent or for legal claims, compliance with legal obligations, or the protection of others’ rights.

12.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit it to another data controller (where technically feasible). This right applies if the processing is based on your consent or a contract.

12.6 Right to Object

You have the right to object to the processing of your personal information for:

Direct marketing purposes (we will stop processing your information for this purpose immediately upon receiving your objection).
Processing based on our legitimate interests (we will cease processing unless we can demonstrate compelling legitimate grounds for the processing that override your rights and freedoms, or for the establishment, exercise, or defense of legal claims).

12.7 Right to Lodge a Complaint

If you believe that our processing of your personal information violates applicable data protection laws, you have the right to lodge a complaint with the data protection authority in your jurisdiction.

13. Third-Party Services

Our Site may contain links to third-party websites, services, or platforms (e.g., social media links, payment gateways). This Policy does not apply to the privacy practices of these third parties. We are not responsible for the content, privacy policies, or practices of any third-party websites or services.

We recommend that you review the privacy policies of any third-party websites or services before providing them with your personal information.

14. Changes to This Privacy Policy

We reserve the right to modify or update this Policy at any time to reflect changes in our business practices, legal obligations, or technological developments.

Minor Changes: For non-material changes (e.g., clarifications, updates to contact information), we will update the "Last Updated" date at the top of this Policy, and the changes will take effect immediately upon posting to the Site.
Material Changes: For material changes (e.g., changes to the types of personal information we collect, how we use or share it, or your rights), we will provide you with advanced notice at least 30 days before the changes take effect. This notice may be sent via email (to the email address associated with your account), a pop-up notification on the Site, or other prominent means.

If you are located outside the EEA, UK, or Switzerland, your continued access or use of our Services after the changes take effect constitutes your acceptance of the updated Policy. If you are located in the EEA, UK, or Switzerland, you may need to provide fresh consent for any material changes that require it.

We encourage you to review this Policy regularly to stay informed about how we protect your personal information.

15. Age of Consent

By accessing or using our Services, you represent and warrant that you are at least the age of majority in your jurisdiction of residence (typically 18 years old). We do not knowingly collect personal information from minors. If we become aware that we have collected personal information from a minor without the consent of a parent or guardian, we will promptly delete that information.

16. Contact Information

If you have any questions, concerns, or requests regarding this Policy, your personal information, or our data protection practices, please contact our Data Protection Officer (DPO) at:

Xiamen Jingwei Fabric Co., Ltd.

We will respond to your inquiry within 30 days (or as required by applicable law) and will work with you to resolve any issues.

17. Additional Information for Residents of Specific Jurisdictions

17.1 California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to know what personal information we collect, use, disclose, and sell.
Right to request the deletion of your personal information.
Right to opt out of the sale of your personal information (we do not sell your personal information without your explicit consent).
Right to non-discrimination for exercising your rights under the CCPA/CPRA.

To exercise these rights, please contact us using the contact details above and specify that you are a California resident requesting to exercise your CCPA/CPRA rights.

17.2 Residents of Other Jurisdictions

If you are located in a jurisdiction with additional data protection rights (e.g., Brazil’s LGPD, Canada’s PIPEDA), we will comply with the applicable laws and honor your rights as required. Please contact us for more information about your rights in your specific jurisdiction.

This Privacy Policy is governed by the laws of the People’s Republic of China, excluding its conflict of law principles. Any disputes arising out of or in connection with this Policy shall be resolved through negotiation in good faith. If negotiation fails, the dispute shall be submitted to the people’s court with jurisdiction over our company’s location for litigation.

นโยบายความเป็นส่วนตัว