1. Introduction
This Privacy Policy explains how Tongshan County He Xiaoli Trading Co., Ltd. (referred to in this document as the Company, we, us, or our) collects, uses, stores, shares, and protects information about people who visit this website, use the services described on it, or contact us through it. The website at https://www.hexiaoli.lat and the computer systems design, computer integrated systems design, and related services described on the website are developed and operated by the developer HeXiaoLi on behalf of the Company.
We take the protection of personal information seriously. We wrote this policy in plain language so that anyone can understand what happens to their information from the moment they arrive at our site. Please read the whole document, because each part works together with the others. If anything in this policy is unclear, or if you have a question that is not answered here, please contact us using the details in Section 18 before you provide any information to us.
By using this website or our services, you acknowledge that you have read and understood this Privacy Policy, and that you agree to the collection and use of information as described in this document. If you do not agree with any part of this policy, please do not use the website or the services, and do not send us personal information through the contact form or any other channel.
2. Scope of This Privacy Policy
This Privacy Policy applies to information collected through this website, including the homepage, the services page, the contact page, and any forms or features hosted on the same domain. It also applies to information you send to us by email, by telephone, by post, or in person, where that information relates to our business, our services, or your relationship with us.
This policy does not apply to websites operated by other companies, even where those websites can be reached through links placed on our pages. When you leave our website and visit a third-party site, the privacy policy of that site governs your information from that point onward. We encourage you to read the privacy policy of every website you visit, because each website sets its own rules.
The policy also does not cover information that is not about you as an identifiable person. Information that has been fully anonymised, aggregated, or statistically processed so that it cannot reasonably be connected back to any individual is outside the scope of this policy and may be used freely for business analysis and improvement of our services.
3. About the Company
The Company is a commercial entity registered in China, operating from Tongshan County in Xianning City, Hubei Province. Our full registered company name is Tongshan County He Xiaoli Trading Co., Ltd. The registered address of the Company is No. 137, Group 2, Shibixia Village, Dalu Township, Tongshan County, Xianning City - 437000, China (CN).
Our business focuses on computer systems design and related professional, scientific, and technical services, including computer integrated systems design. We also operate a trading and supply business that moves daily goods, grocery staples, farm produce, and bulk orders between producers and the market. Both sides of the business are supported by the same office, the same records, and the same commitment to honest dealing.
The website was developed and is operated by the developer HeXiaoLi. When this policy refers to activities of the Company, those activities may be carried out by HeXiaoLi or by other staff and contractors acting under the direction and control of the Company. All such people are bound by the commitments set out in this policy.
4. Information We Collect
We collect only the information that we genuinely need to run the website, answer enquiries, deliver services, and keep our records accurate. We do not collect information for its own sake, and we do not buy personal data from data brokers. The information we collect falls into two broad groups: information that you give us directly, and information that is collected automatically as you use the website.
The first group includes things such as your name, your email address, your telephone number, the subject and content of your message, and any other details you choose to include when you write to us. The second group includes technical details such as your internet protocol address, the type of browser and device you use, the pages you view, the time and date of your visit, and the website that referred you to us.
In some circumstances we may also collect information about your transactions with us, such as the products or services you order, the quantities, prices, delivery addresses, and payment references. This information is needed to fulfil your orders and to comply with our legal obligations relating to business records and tax.
5. Information You Provide Directly
You provide information to us directly when you use the contact form on the website, when you send an email to any of our addresses, when you telephone us, when you write to us by post, when you place an order, or when you deal with us in person at our premises or at a market location. The information you choose to provide is entirely up to you, and you can decide what to include in any message.
The contact form on this website asks for your name, your email address, a subject line, and a message. We ask for your name so that we can address you properly in our reply. We ask for your email address so that we can respond to you. The subject and message fields exist so that you can describe your enquiry in your own words. None of these fields are mandatory in the sense that you are forced to contact us; the form is voluntary, and you are free not to use it.
Please do not send us sensitive information through the contact form or by email unless it is genuinely necessary. Sensitive information includes such things as government identification numbers, financial account details, health information, and any information about your private life that is not needed for the purpose of your enquiry. If you need to share such information later in a transaction, we will tell you the safest way to do so.
6. Information Collected Automatically
When you visit this website, certain technical information is generated and recorded automatically by the server and by standard web technologies. This includes your internet protocol address, the date and time of your request, the page or resource you requested, the type of browser software you use, the operating system of your device, the screen size of your device, and the address of the website that linked you to us, if any.
We use this automatic information for technical purposes. It helps us to keep the website working correctly, to diagnose faults, to defend the site against attacks, to measure how many visitors we receive, and to understand in general terms which pages are useful and which are not. In most cases we look at this information in aggregate form, meaning that we look at patterns across all visitors rather than at any single visitor.
Internet protocol addresses and similar identifiers are considered personal information under some privacy laws, because in theory they can be linked to a particular device and household. We therefore treat them with the same care as other personal information, we keep them only for as long as needed, and we restrict access to them to the people who need them to run the website.
7. Cookies and Similar Technologies
This website may use cookies and similar technologies to help it function correctly and to understand how it is used. A cookie is a small text file that a website places on your device so that the site can remember information between your visits or during a single visit. Some cookies are strictly necessary: without them the website or a feature on it would not work.
We use strictly necessary cookies for basic operation of the site. We may also use simple analytics to count visits and measure which pages are popular; where such analytics are used, the information is collected in a way that respects your privacy and is not used to build a profile of you for advertising purposes. We do not use advertising cookies, and we do not allow third-party advertising networks to place tracking cookies on this website.
Most browsers let you control cookies. You can set your browser to refuse cookies, to warn you before a cookie is placed, or to delete cookies after each session. If you disable strictly necessary cookies, some parts of the website may not work as well, but you will still be able to read all the content and to contact us.
8. How We Use Your Information
We use the information we collect only for legitimate purposes connected with our business. The main purposes are set out below. We process information no more than is necessary to achieve these purposes, and we stop processing information once the purpose has been fulfilled and the retention period has ended.
First, we use your information to respond to your enquiries. If you contact us through the form, by email, or by telephone, we use the contact details you gave us to reply to your question and to follow up where needed. Second, we use your information to deliver services and fulfil orders, including designing computer systems, integrating systems, arranging deliveries, issuing invoices, and providing support. Third, we use your information to keep our accounts and records accurate and complete, as required by law.
Fourth, we use your information to keep the website secure and to protect the Company, our staff, our suppliers, and our customers from fraud and abuse. Fifth, we use your information in an aggregated and anonymised form to understand the performance of the website and to plan improvements. We do not sell your personal information, we do not rent it, and we do not share it with anyone for their own marketing purposes.
9. Legal Bases for Processing
Privacy laws in various jurisdictions require us to explain the legal grounds on which we process personal information. We rely on several grounds depending on the situation. Each ground is described below so that you can understand why our processing is lawful.
The first ground is your consent. When you send us an enquiry, you freely choose to give us your contact details so that we can reply. You may withdraw your consent at any time by contacting us and asking us to stop processing your information, subject to our legal obligations. The second ground is performance of a contract. When you place an order with us, we need to process the information necessary to deliver the goods or services you ordered and to handle payment.
The third ground is our legitimate interests. We have a legitimate interest in running an efficient and honest business, which includes answering enquiries, keeping records, preventing fraud, and improving our website and services. We always balance this interest against your rights and freedoms. The fourth ground is legal obligation. Where Chinese law or another applicable law requires us to retain records, such as accounting records, we process the information necessary to comply with that law.
10. Sharing and Disclosure of Information
We do not sell, rent, or trade your personal information. We share personal information only in the limited circumstances described in this section, and only to the extent necessary for the specific purpose involved.
We may share information with service providers who help us run the Company. These include providers of website hosting, email services, accounting software, delivery and logistics services, and similar business tools. These providers act on our instructions and are not permitted to use your information for their own purposes. We may also share information with our professional advisers, such as accountants and legal counsel, where it is needed to advise us or to comply with the law.
We may disclose information to government authorities, regulators, or courts where we are required to do so by law, by a lawful order, or by an investigation. We may also disclose information in connection with a merger, sale, or transfer of all or part of the Company, in which case the information will remain subject to protections at least as strong as those in this policy. In every case, we share only what is necessary.
11. International Data Transfers
The Company is based in China, and our offices and principal records are located in Xianning City, Hubei Province. If you are located outside China, your information may be transferred to, stored in, and processed in China, where the privacy laws may differ from those in your country.
When information is transferred to China, we take steps to ensure that it is handled with care consistent with the spirit of this policy. We limit the information transferred to what is necessary, we apply appropriate security measures, and we rely on your consent and on the performance of the contract between us as the legal grounds for the transfer, together with any lawful transfer mechanism available.
By sending us information from outside China, you understand and agree that the information will be processed in China as described in this policy. If you are not comfortable with this, please do not send us personal information, and contact us instead to discuss your enquiry without revealing personal details.
12. Data Retention
We keep personal information only for as long as it is needed for the purpose for which it was collected, or for as long as the law requires. When the purpose is complete and no law requires us to keep the information, we delete or anonymise it so that it can no longer be linked to you.
Enquiries are kept only for as long as needed to answer them and to deal with any follow-up. This is normally a matter of months. Records relating to orders, invoices, payments, and other business transactions are kept for the periods required by Chinese law for accounting and tax purposes, which may be several years. Technical logs and server records are kept for a limited period, usually no more than a few months, unless a security incident requires them to be kept longer.
We review our retention periods from time to time and we dispose of information securely when it is no longer needed. If you would like us to delete information about you earlier than the periods described above, please contact us using the details in Section 18. We will consider your request and comply where the law permits us to do so.
13. Data Security
We apply reasonable and appropriate technical and organisational measures to protect personal information from loss, misuse, unauthorised access, alteration, and disclosure. Security is a standing part of how we work, not an afterthought, and it applies to paper records, digital records, and all of our systems.
Technical measures include access controls on our accounts and systems, firewalls and monitoring on our servers, encrypted connections where appropriate, regular backup of important records, and secure disposal of information that is no longer needed. Organisational measures include limiting access to personal information to the people who need it for their work, training our staff on the safe handling of information, and having clear rules about when and how information may be shared.
No method of transmission over the internet and no method of storage is completely secure. While we work to protect your information, we cannot guarantee its absolute security, and we cannot be responsible for information that you send to us over channels that are outside our control. If you become aware of any security problem, please tell us promptly so that we can act.
14. Your Privacy Rights
Depending on the law that applies to you, you may have a number of rights regarding your personal information. We support these rights and we will respond to requests promptly and without charge, unless the law allows us to charge a reasonable fee for an unreasonable or repetitive request.
These rights may include the right to access the information we hold about you, the right to correct inaccurate or incomplete information, the right to request deletion of information, the right to object to processing, the right to restrict processing, the right to data portability, and the right to withdraw consent where processing is based on consent. Where the law gives you these rights, you may exercise them by contacting us using the details in Section 18.
Before we respond to a request, we may need to verify your identity to make sure that we are not disclosing information to the wrong person. This is a safety measure. We aim to respond to all valid requests within the time limits set by the applicable law. If you are not satisfied with our response, you may have the right to complain to the relevant data protection or consumer protection authority.
15. Privacy for Children
This website and the services described on it are intended for adults and for businesses. They are not directed at children, and we do not knowingly collect personal information from children. Our contact form, our services, and our trading operations are all designed for users who are old enough to make business decisions on their own behalf.
If you are a parent or guardian and you believe that your child has provided personal information to us without your knowledge, please contact us using the details in Section 18 and tell us. We will take reasonable steps to remove the information from our systems and to stop any processing of it, subject to any legal obligation to keep the information.
We encourage parents and guardians to supervise their children use of the internet and to talk to them about what personal information is and why it should not be shared online. We do not use the website to target children with marketing, and we do not offer any content or services that require a child to register or provide information.
16. Third-Party Services and External Links
This website may contain links to external websites and services that are not operated by us. These may include government websites, industry associations, payment processors, delivery partners, and other useful resources. We provide these links for your convenience, but we do not control these external services and we are not responsible for their content or for their privacy practices.
When you follow a link to an external website, your information is subject to the privacy policy of that website, not to this policy. The external website may collect information about you, set cookies on your device, or track your activity. We encourage you to review the privacy policy of every external site you visit and to decide for yourself whether to trust it with your information.
This policy applies only to information collected on or through the HEXIAOLI website and the services we operate directly. The presence of a link on our website does not mean that we endorse the linked site, and we cannot accept responsibility for the way third parties handle the information you give them.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, changes in technology, or changes in the law. When we make changes, we will post the updated policy on this page and change the last updated date at the top of the document. The updated policy will apply to all information we hold at the time of the change, unless we say otherwise.
If we make changes that significantly affect how we process your information, we will draw attention to the change at the top of the policy and, where appropriate, we will contact you directly so that you are aware of what changed. We recommend that you check this page from time to time so that you stay informed about how we handle your information.
Your continued use of the website and our services after changes are posted will mean that you accept the updated policy. If you do not accept the updated policy, you should stop using the website and our services and contact us if you want to discuss your information.
18. Contact Information
If you have any questions about this Privacy Policy, about the information we hold about you, or about how we process personal information, please contact us. We will do our best to answer your questions clearly and honestly, and to resolve any concern you have.
You can reach us by email at reply@hexiaoli.lat, by telephone at +13093012499, or by post at the registered address of the Company: No. 137, Group 2, Shibixia Village, Dalu Township, Tongshan County, Xianning City - 437000, China (CN). Please include enough detail in your message so that we can identify the matter and help you efficiently.
We aim to respond to all privacy enquiries within a reasonable time and in any event within the time limits required by the applicable law. If you believe that we have not handled your information properly, you are welcome to raise the matter with the relevant privacy or consumer protection authority in your jurisdiction.