Last updated: 12 August 2026
1. Controller
Fuzhou Xiong Xiaoer Import & Export Co., Ltd.
Unit 1703-3, Building A, Fukang Building, No. 3 Chuangye Road, Shangjie Town, Minhou County, Fuzhou, Fujian 350000, China
Email: [email protected]; phone: +86 153 9610 1895
2. Website access data
Hosting and security systems may process IP address, access time, requested page, referrer, browser/device data and technical status to deliver and secure the site and prevent abuse. The legal basis is legitimate interest under Article 6(1)(f) GDPR. Technical logs are kept only as needed and typically for no more than 30 days unless a security incident or legal duty requires longer retention.
3. Contact and business enquiries
When you contact us by email or phone, we process the name, contact details, organisation, message and attachments you provide to respond, assess a project or perform a contract. The legal basis may be Article 6(1)(b), (f) or (c) GDPR. General business correspondence may be retained for up to three years after closure; statutory periods apply to commercial and tax records.
4. Transfers to China and other third countries
The company is based in China, so an enquiry may be processed outside the EEA. Depending on the case, transfers use appropriate safeguards under Article 46 GDPR or a relevant Article 49 derogation, including where necessary for a contract or pre-contractual steps requested by you. Send only data needed for the project.
5. Recipients
Where necessary, hosting and IT providers, logistics or compliance specialists, accounting/legal advisers and authorities may receive data. Processors act only within contractual instructions.
6. Your rights
Subject to legal conditions, you may request access, rectification, erasure, restriction, portability, object to processing and withdraw consent. You may also complain to the supervisory authority where you live or work, or where the alleged infringement occurred. Use the email above for requests.
7. Automated decision-making
This site does not use solely automated decisions or profiling producing legal or similarly significant effects.
8. EU representative and updates
Whether an EU representative is required under Article 27 GDPR must be confirmed against the company’s actual EU sales and processing activity. Confirmed details must be published here. This notice will be updated for material changes in operations, hosting or law.