Privacy Policy Bags

Privacy Policy

Your trust is our priority. Learn how we protect your personal data.

Last Updated: August 23, 2025 | Effective Date: August 23, 2025

Our Commitment

XhomeClean Luxury Handbags ("we", "us") respects your privacy and complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other global privacy laws. This policy explains how we collect, use, and protect your personal information when you use our services.

Core Principle: We minimize data collection to only what's necessary, never sell your data, and implement military-grade encryption for all sensitive information.

Scope: Applies to our website (www.xhomeclean.com), mobile apps, physical stores, and social media platforms.

Information We Collect

1. Directly Provided Data

When you:

  • Create an account: Name, email, encrypted password
  • Make a purchase: Shipping address, phone number, payment token (processed by PCI-DSS compliant gateways)
  • Join loyalty programs: Birth date, style preferences

2. Automatically Collected Data

Through cookies and similar technologies:

  • Device information: Model, OS version, unique identifiers
  • Usage data: IP address, browsing history, interaction time
  • Location: City-level approximation (only with explicit consent)
Data Category Collection Context Legal Basis
Contact Details Order processing & shipping Contractual necessity
Payment Data Transaction processing Legal obligation
Style Preferences Personalized recommendations Explicit consent

How We Use Your Information

Core Service Delivery

  • Process orders and arrange global shipping
  • Authenticate accounts and prevent fraud
  • Provide customer support via email/chat

Service Enhancement

Requires separate consent:

  • Personalized product recommendations based on browsing history
  • New collection announcements (opt-out anytime)
  • Website optimization through anonymized analytics

Anonymization Guarantee: All data used for analytics is pseudonymized using SHA-256 hashing, ensuring it cannot be linked back to individual identities.

Data Sharing Practices

1. Trusted Service Partners

Third Party Shared Data Safeguards
Logistics Providers
(DHL, FedEx)		 Recipient name, address, phone Data Processing Agreements (DPA)
Payment Processors
(Stripe, PayPal)		 Transaction ID, amount PCI-DSS Level 1 encryption
Analytics Services
(Google Analytics)		 Anonymized behavior data Data anonymization clauses

2. Legal Requirements

We may disclose data when legally compelled:

  • Court orders or regulatory investigations
  • Fraud prevention and security threat mitigation
  • Protection of our legal rights or user safety

No Sale Policy: We have never and will never sell customer data to third-party advertisers or data brokers.

Your Privacy Rights

Right to Access

Request a copy of your personal data in machine-readable format (JSON/CSV)

Right to Rectification

Update inaccurate information through your account dashboard

Right to Erasure

Permanently delete all personal data (excludes legal transaction records)

Right to Object

Opt-out of marketing communications with one click

Exercising Your Rights

Submit requests via:

  • Online portal: Privacy Dashboard
  • Email: privacy@xhomeclean.com (response within 72 hours)
  • Phone: +86 20 8888 9598 (9:00 AM - 6:00 PM GMT+8)

Security Measures

Technical Protections

  • TLS 1.3 encryption for all data transmissions
  • AES-256 encryption for stored sensitive data
  • Biometric access controls for internal systems

Organizational Practices

  • Quarterly employee privacy training
  • Annual ISO 27001 compliance audits
  • 72-hour breach notification protocol

Contact Our Data Team

For privacy requests or policy questions:

Email: dpo@xhomeclean.com

Phone: +86 20 8888 9598

Postal Address: Data Protection Office, XhomeClean HQ, Changsha, Hunan, China

Send Message