Legal & Compliance

Privacy Policy

Effective Date: January 1, 2025  ·  Last Updated: January 1, 2025

Hefei Xinhui Magnet Co., Ltd ("XHMAG", "we", "us", or "our") operates the website xh-magnet.com. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website or contact us for business purposes. By using our website, you agree to the practices described in this policy.

Information We Collect

1.1 Information You Provide Directly

When you submit an inquiry form, request a quotation, or contact us by email or phone, we may collect:

  • Full name and job title
  • Business email address and phone number
  • Company name, country, and industry
  • Technical specifications, product requirements, and order details you share with us
  • Any other information you voluntarily include in your message

1.2 Information Collected Automatically

When you visit our website, we may automatically collect certain technical data, including:

  • IP address and approximate geographic location (country/region level)
  • Browser type, version, and operating system
  • Pages visited, time spent on pages, and referring URLs
  • Device identifiers and cookie data (see Section 10)

1.3 Information from Third Parties

We may receive business contact information from trade show participation, industry directories, or referrals. Such information is used solely for B2B communication purposes.

How We Use Your Information

We use the information we collect for the following purposes:

Responding to Inquiries

Processing and responding to quotation requests, technical questions, and sample orders within 24 business hours.

Order Fulfillment

Managing orders, production scheduling, shipping logistics, and delivering required quality documentation.

Legal & Compliance

Meeting export compliance obligations, maintaining business records, and fulfilling applicable legal requirements.

Website Improvement

Analyzing aggregated usage data to improve website performance, content relevance, and user experience.

Business Communications

Sending relevant product updates, technical bulletins, or trade show invitations to existing business contacts. You may opt out of marketing communications at any time by replying to any email with "Unsubscribe" or contacting us directly.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

Legal Basis for Processing (GDPR)

For individuals in the European Economic Area (EEA) or United Kingdom, we process personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

Contractual Necessity (Art. 6(1)(b)): Processing required to respond to your inquiry, prepare a quotation, or fulfill an order you have placed.
Legitimate Interests (Art. 6(1)(f)): B2B marketing communications, website analytics, and fraud prevention, where our interests do not override your fundamental rights.
Legal Obligation (Art. 6(1)(c)): Retaining records required by Chinese export regulations, tax law, or other applicable legal obligations.
Consent (Art. 6(1)(a)): Where we rely on your consent (e.g., optional newsletter subscription), you may withdraw consent at any time without affecting the lawfulness of prior processing.

Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following limited circumstances:

Service Providers

Third-party vendors who assist with website hosting, email delivery, analytics, or CRM services. These providers are contractually bound to process data only on our behalf and in accordance with this policy.

Logistics and Freight Partners

Shipping agents and freight forwarders who require your business address and contact details to arrange delivery of your order.

Legal and Regulatory Authorities

Where required by applicable law, court order, or government authority, including Chinese export control regulations and customs authorities.

Business Transfers

In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction. We will notify affected individuals before data is transferred and becomes subject to a different privacy policy.

Data Retention

We retain personal information only as long as necessary for the purposes described in this policy or as required by law:

Data Type Retention Period
Inquiry and quotation records 3 years from last contact
Order and transaction records 7 years (legal/tax obligation)
Export compliance documentation As required by applicable regulation
Website analytics data 26 months (aggregated)
Marketing contact lists Until opt-out or 2 years of inactivity

After the applicable retention period, data is securely deleted or anonymized.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include: