1. Overview of this policy
This Privacy Policy explains how Kunming Xintun E-commerce Co., Ltd. collects, uses, stores and protects personal information when you browse our website, engage our systems design services, contact our team or use any of the commerce platforms we engineer. It also sets out the choices you have regarding your data and the ways you can reach us with questions or requests.
The services described on this site are developed and operated by the developer Xin Tun Ecom, a trading name that belongs to Kunming Xintun E-commerce Co., Ltd. The registered business is located at Room 2410, Building F2, Hexie Jiayuan Residential Quarter, No.581 Hongyuan Road, Hongyun Subdistrict, Wuhua District, Kunming - 650000, China (CN). Whenever this document mentions the company, the developer or Xin Tun Ecom, it refers to that single corporate entity that is responsible for your information.
This policy applies to all individuals who interact with our public website, subscribe to our communications, submit project enquiries, request proposals, or receive services from us as a client, supplier, partner or visitor. By using this site or our services, you agree to the practices described here. If you do not agree, you should stop using the site and contact us before sharing any further data.
2. Data we collect about you
We collect information that you provide directly, information that is generated automatically while you use our site, and in a small number of cases information that you give us in the course of a business relationship. The exact data we hold always depends on how you interact with us and never exceeds what is needed for the purpose.
Information you provide directly includes your name, email address, telephone number, company name, job title, postal address and the content of any message you send through our contact form or our listed email and phone channels. When you request a proposal or begin an engagement, we may also collect project details, technology inventories, integration credentials, business contracts and other material that you voluntarily share so we can perform the work.
Information collected automatically includes technical logs such as your Internet Protocol address, browser type and version, operating system, pages visited, referring website, time and date of each request, and approximate geographic region inferred from the network address. We may also collect usage statistics about how often our pages are opened and how long a visitor stays, gathered through cookies described later in this policy.
3. How we use your information
We use personal information for clear and lawful purposes, each of which is described openly. The primary use is to answer your enquiries, prepare scope and cost proposals, and deliver the computer systems design, integration and management work you have asked for. Without this data we cannot evaluate your project or provide the service.
We also use information to operate and secure this website. This includes diagnosing faults, monitoring network traffic for attack patterns, generating anonymised usage reports, and keeping the site fast and reliable. Where you have given consent or where the law allows, we use your email address to send service updates, technical advisories or occasional news about our capabilities, always with a simple way to unsubscribe.
In addition, we use contact details and correspondence records to administer our business relationship. That means sending invoices, managing agreements, resolving disputes, providing support and maintaining records for accounting and tax obligations. In every case we process the minimum information required and keep it only for as long as the purpose genuinely requires.
4. Legal basis for processing
We rely on several recognised legal bases for processing personal data, depending on the situation. The most important is that processing is necessary to perform a contract with you or to take steps at your request before entering into a contract, such as when you ask us to carry out a discovery session or begin a systems build.
Second, we rely on our legitimate interests as a business when the processing is beneficial to you and to us and does not override your rights. This covers security monitoring, fraud prevention, website improvement and reasonable follow-up after an enquiry, because you would reasonably expect a systems provider to respond and to protect its infrastructure.
Third, we rely on your consent where the law requires it, most commonly for marketing emails and for non-essential cookies. Consent can always be withdrawn at any time through the contact channels listed in this policy or through the consent controls on our site. Finally, we process some data to comply with legal obligations such as tax, accounting, consumer protection and record-keeping rules that apply to a company operating from Kunming, China.
5. Cookies and similar technologies
Our website uses cookies and analogous technologies to remember your preferences, understand how the site is used and keep it secure. A cookie is a small text file placed on your device when you visit. Some cookies are strictly necessary and enable core functions such as navigation and secure form submission; these do not require consent because the site cannot work without them.
Other cookies are functional or analytical in nature. They help us remember choices, measure which pages are popular and improve the experience. We use privacy-respecting analytics that aggregate data and do not build intrusive advertising profiles. Any cookie that is not strictly necessary is only placed after we obtain your consent through a clear banner or settings control.
You can manage cookies in your browser by blocking third party cookies, clearing stored data after each visit or switching to private browsing. Please note that disabling necessary cookies may prevent some parts of the site from working correctly. You can learn more about each cookie we use by contacting our team, who will gladly explain the purpose and lifetime of every one.
6. Sharing data with third parties
We never sell your personal information. We only share data with carefully selected third parties when it is required to deliver a service you requested or to comply with the law, and we always set limits on what those parties may do with it.
Service providers that may receive limited data include website hosting and content delivery providers, email and communication tools, analytics providers, accounting and invoicing platforms, and sub-contractors who assist with engineering work under our control. Each provider receives only the categories of data needed for its specific task and is bound by contract to protect it and to use it solely on our instructions.
We may also share information with professional advisers such as lawyers and auditors when necessary to protect our legal rights, and with authorities when disclosure is mandated by a court order, regulation or other lawful demand. Where a merger, sale or reorganisation of our business occurs, customer data may be transferred to the new owners, who will continue to be bound by this policy or will offer you a new notice.
7. International data transfers
Our operations are based in China, and Kunming Xintun E-commerce Co., Ltd. is a Chinese company. As a result, personal data collected through this website or our services may be processed, stored and accessed in mainland China. When you contact us from another country, the information you send will cross borders to reach our servers.
We recognise that different jurisdictions have different data protection rules. Where your data is transferred outside your own country or region, we take reasonable and appropriate measures to protect it, including encryption in transit, controlled access and contractual safeguards with any partner who handles the data on our behalf.
Because we serve clients across many regions, we aim to make our safeguards technology-neutral and strong regardless of local law. We keep data transfers to the minimum required to deliver the service, we document where information resides, and we respond to any access or deletion request that you send under whichever rule applies to you, within the timeframe the law allows.
8. How long we keep your data
We retain personal information only for as long as necessary to fulfil the purposes described in this policy and to satisfy legal, accounting and reporting duties. When we no longer need a record, we delete it securely or transform it into an anonymous form that can no longer identify you.
Contact form messages and related correspondence are kept for the period needed to answer and, where relevant, to open a project. Business and accounting records are retained for the longer periods required by tax and company law, typically several years, because the law obliges us to keep proof of transactions for that duration.
Technical logs collected automatically are kept on a rolling basis, usually for a few weeks, to monitor security and diagnose faults. Backup copies may persist for a short additional period while they cycle out of rotation. In all cases our retention periods are reviewed regularly and kept as short as the underlying purpose and legal constraint allow.
9. Your privacy rights
Depending on where you live, you have a range of rights regarding your personal data. These commonly include the right to access a copy of the data we hold about you, the right to ask us to correct inaccurate or incomplete information, and the right to request deletion of data we no longer have a lawful reason to keep.
You may also have the right to restrict or object to certain processing, to ask for a portable copy of data you supplied, and to withdraw any consent you gave previously. Where processing is based on legitimate interest, you can object on grounds relating to your situation and we will stop unless we can demonstrate compelling lawful reasons that override your interest.
To exercise any of these rights, contact us using the email or address at the end of this policy. We will verify your identity with reasonable care before acting, and we will respond within the period required by law. You may also have the right to lodge a complaint with your local data protection authority if you believe we have handled your data incorrectly.
10. Privacy of children
Our website and services are directed at businesses and professional audiences, not at children. We do not knowingly collect personal information from anyone below the age of thirteen, or below the age of digital consent in the jurisdiction that applies to them. We do not market our systems design services to minors.
If a child has provided personal data through our forms without the permission of a parent or guardian, the parent or guardian should contact us promptly. We will review the information and take reasonable steps to remove it from our systems where no lawful need to keep it exists.
Parents and guardians are encouraged to supervise young users online and to report any concern to our team. Our controls treat any enquiry involving a project, purchase or account as a business action intended for an adult acting on a company behalf, and we therefore do not design experiences that appeal to children or encourage them to share data.
11. Security of your data
We treat the security of personal information as a core engineering responsibility, consistent with the way our company helps clients build secure commerce systems. We apply technical and organisational measures that include encryption, access controls, monitoring and regular review so that data is protected against accidental loss and unauthorised access.
Data transmitted between your browser and our servers is encrypted in transit using modern transport security. At rest, sensitive records are protected by access rules that grant the smallest privilege needed for each role and by audit trails that record who touched what and when. We keep software patched and we review our own website for known weaknesses.
No method of storage or transmission is completely secure, and we cannot guarantee absolute protection. If we become aware of a security incident involving your data, we will investigate, take remedial action and notify you and any relevant authority as required by law. We encourage you also to protect the device and accounts you use to communicate with us.
12. Third party services on our platform
This website and the systems we build may at times reference, link to or embed services that are owned by third parties, such as updated payment pages, document viewing tools or external help documentation. These third parties operate under their own privacy policies, which we encourage you to read before you share information with them.
When you follow a link from our site to an external resource, that destination is outside our control. We try to link only to reputable providers, but we cannot be responsible for their content, their collection practices or their security. The presence of a link does not imply an endorsement of that site privacy approach.
For platforms we integrate on behalf of clients, each party honours its own agreements with the client. Our Privacy Policy describes how Xin Tun Ecom handles personal data; it does not replace any agreement between a client and its own software vendors. You should refer to the relevant provider policy for how that provider treats your information.
13. Automated decision making
We do not use your personal data for automated decision making that produces legal effects on you or that significantly affects you in the ways that trigger special rules. We do not run automated eligibility engines over your enquiry, and we do not use profiling to deny you services.
Some of the commerce systems we build for clients may contain automated components, such as fraud screens, stock triggers or recommendation logic, but those operate under the client own policies and agreements rather than under this policy. When we act as an engine builder, the resulting decisions belong to the client system, not to us as the vendor.
If you believe an automated decision taken in connection with our services has caused you harm and you wish to request human review, please contact us. We will investigate the matter and, where it concerns our own processing, we will arrange for a person with appropriate authority to reconsider the outcome and to correct any error.
14. Controller and processor roles
In most situations where you contact us directly through this website, Kunming Xintun E-commerce Co., Ltd. acts as a controller. This means we decide how and why your personal information is processed, and we take responsibility for protecting it and honouring your rights.
When we perform engineering work on a platform that belongs to a client, we may act as a processor on that client behalf. In that role we handle personal data only in line with documented instructions from the client, and we rely on data processing agreements that set out our duties, confidentiality and security commitments.
If you have a question about personal data you shared with one of our clients rather than with us directly, you should first contact that client, because they will normally be the controller of that information. We will cooperate with any legitimate request made by a client or an authority to address such enquiries.
15. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our services, in technology, or in the law that governs how companies must handle personal data. Any changes will appear on this page, and the date at the top of the document will tell you when the latest revision was made.
If a change is important, for example because it affects the way we share data or the rights available to you, we will make reasonable efforts to notify you, including by posting a clear notice on this site or by email where we have your address. Continued use of our services after a revision means you accept the updated policy.
We encourage you to review this page periodically so that you always know what information we collect, how we use it and what choices you have. Older versions of the policy remain relevant only until the date they are replaced, and we keep an internal log of revisions to ensure our records stay accurate.
16. Jurisdiction and governing law
This Privacy Policy is governed by the laws of the People Republic of China, without regard to its conflict of law principles. The company operates from its registered office in Kunming, and questions of interpretation are addressed under the rules that apply to companies established in China.
Nothing in this policy restricts the rights you may hold under the privacy law of the country where you reside. Where you enjoy stronger protections under your own local law, those protections are not removed by this document, and we will honour reasonable requests made under such rules to the extent the technology and law permit.
If any part of this policy is found to be void or unenforceable, the remaining parts continue in full force. This section is intended to give clarity about the legal home of the policy while still respecting the different expectations that users in many countries may bring to a global systems partner.
17. Contact information
If you have any question, concern or request regarding this Privacy Policy or the way your personal information is handled, please contact the company through any channel below. Our privacy team makes every effort to respond promptly and to resolve matters fairly.
- Company: Kunming Xintun E-commerce Co., Ltd.
- Email: team@xintunecom.mom
- Phone: +12707788555
- Address: Room 2410, Building F2, Hexie Jiayuan Residential Quarter, No.581 Hongyuan Road, Hongyun Subdistrict, Wuhua District, Kunming - 650000, China (CN)
When you write to us about your data, please describe your request clearly and tell us how we can verify that you are the person concerned. This helps us act quickly and avoid disclosing personal information to anyone who is not entitled to receive it.