Privacy Policy

1. Privacy Policy and Data Controller

The data controller and operator of this website is:

XDL CO., LIMITED, based in Hong Kong

We respect your privacy and are committed to handling your personal information in accordance with applicable privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) where applicable.

This Privacy Policy explains what personal information we collect, how we collect and use it, how we disclose and protect it, and how you can access or correct your personal information or make a privacy complaint.

2. Collection and Storage of Personal Information

We may collect personal information that you provide to us or that is collected automatically when you use our website.

The types of personal information we may collect include:

• First and last name
• Delivery and billing address
• Email address
• Telephone number, where provided
• Date of birth or other information required for age verification, where applicable
• Order and transaction information
• Payment-related information
• IP address
• Browser type and operating system
• Information about how you use our website
• Information submitted through our contact forms or customer service channels

We only collect personal information that is reasonably necessary for our business functions and activities or as otherwise permitted or required by law.

a) When Visiting the Website

When you access our website, your browser may automatically send certain information to our website server. This information may be temporarily recorded in server log files.

This may include:

• IP address of the requesting device
• Date and time of access
• Name and URL of the accessed file
• Website from which you accessed our website (referrer URL)
• Browser type
• Operating system and device information

We may use this information to:

• Ensure the website operates properly;
• Maintain website security and stability;
• Improve website performance and functionality;
• Detect and prevent fraud, abuse or unauthorised activity;
• Analyse website usage and performance; and
• Perform necessary administrative and technical functions.

b) When Ordering From Our Shop

When you place an order, we may collect:

• First and last name
• Delivery address
• Email address
• Telephone number, where required for delivery
• Date of birth or other age-verification information, where applicable
• Order details
• Payment-related information

Payment information may be transmitted directly to our third-party payment providers, such as PayPal, Stripe or other payment service providers.

We use this information to:

• Process and fulfil your order;
• Arrange delivery;
• Process payments;
• Handle returns, refunds and customer service requests;
• Communicate with you regarding your order; and
• Conduct age verification where required or reasonably necessary.

c) When Contacting Us

If you contact us by email, contact form or other customer service channels, we may collect and retain the information you provide, including your name, email address and the contents of your enquiry.

We use this information to respond to your enquiry, provide customer support and maintain appropriate records of customer communications.

3. How We Use Your Personal Information

We may collect, hold, use and disclose your personal information for purposes including:

• Processing and fulfilling orders;
• Verifying customer information and age where applicable;
• Processing payments;
• Arranging shipping and delivery;
• Handling returns, refunds and exchanges;
• Providing customer service and responding to enquiries;
• Maintaining and improving our website;
• Maintaining website security;
• Detecting and preventing fraud or unauthorised transactions;
• Sending service-related communications;
• Where permitted by law, sending marketing communications and promotional offers;
• Analysing website performance and customer interactions; and
• Complying with applicable legal and regulatory obligations.

We will generally only use or disclose personal information for the purpose for which it was collected, for a related purpose that you would reasonably expect, where you have consented, or where otherwise permitted or required by law.

4. Disclosure of Personal Information

We may disclose personal information to third parties where reasonably necessary to operate our business and provide our services.

These third parties may include:

• Shipping and logistics providers, such as DHL or other delivery companies;
• Payment service providers, such as PayPal, Stripe or other payment processors;
• Website hosting, technology and IT service providers;
• Customer service and communication service providers;
• Fraud prevention and security service providers; and
• Government agencies, regulators, tax authorities or law enforcement bodies where required or authorised by law.

We do not sell your personal information as part of our ordinary business operations.

5. Overseas Disclosure of Personal Information

Because our business and service providers may operate internationally, your personal information may be disclosed to recipients located outside Australia.

Our data controller is based in Hong Kong, and certain service providers may also operate in other countries.

Depending on the services used to operate our website and fulfil your order, personal information may be disclosed to overseas recipients in countries such as Hong Kong and other countries where our relevant service providers operate.

Where required by applicable Australian privacy law, we will take reasonable steps in relation to overseas disclosures of personal information.

Australian Privacy Principle 8 generally requires an APP entity to take reasonable steps before disclosing personal information to an overseas recipient to ensure the recipient does not breach the APPs, subject to applicable exceptions.

6. Cookies

Our website uses cookies and similar technologies.

Cookies are small text files that may be stored on your device by your browser.

We may use cookies to:

• Maintain essential website functionality;
• Operate shopping cart and checkout functions;
• Remember your preferences;
• Improve website performance;
• Understand how visitors use our website;
• Maintain website security; and
• Where permitted, support advertising and marketing activities.

You may be able to manage or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality of some parts of our website.

7. Marketing Communications

Where permitted by applicable law, we may use your personal information to send you information about our products, promotions, special offers or other marketing communications.

You can opt out of receiving marketing communications at any time by:

• Clicking the unsubscribe link included in our marketing emails; or
• Contacting us using the details provided below.

Opting out of marketing communications will not affect essential communications relating to your orders, transactions, account or customer service requests.

Australian Privacy Principle 7 contains specific requirements concerning the use or disclosure of personal information for direct marketing.

8. Your Privacy Rights

Subject to applicable law, you may have the right to:

• Request access to personal information we hold about you;
• Request correction of personal information that is inaccurate, out of date, incomplete, irrelevant or misleading;
• Ask questions about how we handle your personal information;
• Make a complaint about our handling of your personal information; and
• Opt out of certain marketing communications.

Australian Privacy Principles 12 and 13 provide rights relating to access to and correction of personal information for APP entities.

Accessing or Correcting Your Information

If you would like to access or correct your personal information, please contact us at:

[email protected]

We may need to verify your identity before processing an access or correction request.

We will generally respond to requests within a reasonable period and in accordance with applicable privacy laws.

9. Privacy Complaints

If you believe that we have mishandled your personal information or breached applicable privacy obligations, please contact us first so that we can investigate and attempt to resolve your concern.

Please send your privacy complaint to:

[email protected]

We will review your complaint and take reasonable steps to address it.

If you are not satisfied with our response, or if your complaint is not resolved, you may be able to contact the Office of the Australian Information Commissioner (OAIC) or another relevant privacy regulator, depending on the circumstances.

The OAIC recommends that individuals generally raise a privacy complaint with the organisation first before escalating the matter.

10. Data Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure.

We may use technical and organisational security measures, including SSL (Secure Socket Layer) encryption and other security technologies, where appropriate.

However, no method of transmitting or storing information online can be guaranteed to be completely secure.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, to provide our services, maintain business and transaction records, resolve disputes, comply with legal obligations, or for other legitimate business purposes.

When personal information is no longer required, we will take reasonable steps to delete, destroy or de-identify it where appropriate and permitted by law.

12. Third-Party Services and Websites

Our website may use third-party services, including payment processors, shipping providers, analytics services and other technology providers.

Our website may also contain links to third-party websites.

Third-party websites and services have their own privacy policies and practices. We are not responsible for the privacy practices or security of third-party websites that we do not control.

We encourage you to review the privacy policies of relevant third parties before providing them with your personal information.

13. Age Verification and Children's Privacy

Our products are intended only for customers who are legally permitted to purchase and use them.

Where required or reasonably necessary, we may collect information such as date of birth or other information for age-verification purposes.

Our website is not intended for persons who are not legally permitted to purchase age-restricted products.

We do not knowingly collect personal information from individuals where collecting such information would be unlawful.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, services, technology or applicable privacy laws.

Any updated version will be posted on this page with a revised Last Updated date.

We recommend reviewing this Privacy Policy periodically to remain informed about how we handle personal information.

15. Contact Us

If you have any questions, requests or concerns regarding this Privacy Policy or the handling of your personal information, please contact us:

XDL CO., LIMITED
Hong Kong

📧 [email protected]