Privacy Policy & Data Sovereignty

1. Scope of this Policy

This Privacy Policy explains how HONGKONG HUIHUANG INDUSTRIAL CO., LIMITED ("we", "us", or "our") and technical manufacturer SHENZHEN XTELL FUTURE TECHNOLOGY CO., LTD. handle information when you visit xmailbox.cn and purchase XMAILBOX hardware units.

2. Information Collected on our Website

We only collect the minimal information necessary to fulfill your hardware order and provide customer support:

• Order & Shipping Details: Contact name, corporate name, email address, physical delivery address, and telephone number (required exclusively by courier services like DHL/FedEx for international delivery).
• Billing & Invoicing: Tax identification number (VAT/EIN) if requesting a Proforma Invoice for corporate wire transfer.
• Technical Diagnostics (Optional): When you explicitly submit a customer support ticket, you may choose to provide system diagnostic logs to assist troubleshooting.

3. @xmailbox.email Address Reservations

When you reserve an address on our reservation page, we store:

• the address you chose and the contact email you entered;
• the time and the version of this notice you agreed to;
• your IP address, used only for rate limiting and abuse prevention and deleted after 30 days.

This data is stored on our own server in Singapore. We use your contact email only to confirm the reservation and send launch updates about XMAILBOX. Unconfirmed reservations are deleted after 48 hours. Every email we send contains a link to cancel your reservation, which deletes your contact email.

4. Website Analytics

To understand how visitors use this website, we use:

• Umami, an open-source analytics tool that we run ourselves on our server in Singapore. It does not use cookies and does not store your IP address; it records the page you visit, the referring site, your browser, device type, language and approximate country. To reduce blocking, its script and requests are served through this website's own address. If your browser sends a "Do Not Track" signal, Umami does not record your visit.
• Vercel Web Analytics and Speed Insights, provided by our hosting provider Vercel, which measure page views and page loading performance without cookies.

5. European Union GDPR Compliance

For European Union residents and organizations operating under the General Data Protection Regulation (GDPR):

• Role Definition: In relation to your email data, you are the Data Controller. We do not handle any of your email unless it is relayed through our servers, and you are free to configure your own relay server instead.
• Website Data Rights: Regarding website order data, you have the right to access, correct, or request deletion of your commercial purchase records by contacting privacy@xmailbox.cn.

6. Data Retention & Third Parties

We retain commercial order records solely to fulfill statutory accounting and international trade warranty obligations. We do not sell, rent, or trade your contact details with any third-party marketing entities.

7. Data Protection Officer Contact