Legal

Privacy Policy

This Privacy Policy explains how Xiaoman ("we", "us", or "our") collects, uses, discloses, and safeguards information when you visit our website or use our services. This is a general policy draft intended for illustrative purposes and should be reviewed and adapted to reflect your actual data practices and applicable legal requirements before publication.

By accessing or using our website and services, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms described here, please do not use our website or services.

Information We Collect

Types of data we may process

We may collect and process the following categories of information in connection with your use of our website and services:

Account and contact information Name, email address, phone number, and similar details you provide when creating an account, subscribing to updates, or contacting us.
Usage and device information Information about how you interact with our website, including pages visited, time spent, browser type, device identifiers, and IP address.
Communications Records of correspondence if you contact us via forms, email, or other channels, including the content of your messages.
Cookies and similar technologies Data collected through cookies, local storage, and comparable technologies used to operate and improve our website, as described further below.

How We Use Data

Purposes of processing

Service delivery

To provide, maintain, and improve the features and functionality of our website and any tools we offer.

Communication

To respond to inquiries, send account-related notices, and provide information you have requested.

Security and integrity

To detect, prevent, and address technical issues, fraud, or unauthorized access to our systems.

Analytics and improvement

To understand usage patterns and improve the content, structure, and performance of our website.

Legal Basis

Grounds for processing

Where applicable data protection law requires a legal basis for processing personal data, we rely on one or more of the following: your consent, the necessity of processing to perform a contract with you, compliance with a legal obligation, or our legitimate interests in operating and improving our website and services, provided such interests are not overridden by your rights and freedoms.

Sharing of Information

When we disclose data

We do not sell personal information. We may share information in the following limited circumstances:

Service providers With third parties who perform functions on our behalf, such as hosting, analytics, or communication tools, under appropriate confidentiality obligations.
Legal requirements Where disclosure is required to comply with applicable law, regulation, legal process, or governmental request.
Business transfers In connection with a merger, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.
With your consent Where you have explicitly agreed to the sharing of your information for a specified purpose.

Cookies and tracking technologies

Our website may use cookies and similar technologies to operate core functionality, remember preferences, and gather analytics about usage. You can typically manage or disable cookies through your browser settings; however, doing so may affect the availability or functionality of certain features. We do not currently display a dedicated cookie consent mechanism on this draft site, and this section should be updated to reflect the specific cookies used and applicable consent requirements in your jurisdiction.

Data Retention

How long we keep information

We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy, including any legal, accounting, or reporting requirements. Retention periods may vary depending on the type of data and the context in which it was collected.

Data Security

How we protect information

We implement reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, or alteration. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Your Rights

Choices available to you

Depending on your jurisdiction, you may have rights regarding your personal information, which may include the ability to:

Access Request confirmation of whether we process your personal data and obtain a copy of it.
Correction Request correction of inaccurate or incomplete personal data.
Deletion Request deletion of your personal data, subject to certain legal exceptions.
Objection or restriction Object to or request restriction of certain processing activities.

To exercise any of these rights, please contact us using the details provided on our Contact page. We may need to verify your identity before responding to such requests.

Children's Privacy

Use by minors

Our website and services are not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

International Transfers

Cross-border processing

Depending on where you are located, your information may be transferred to and processed in countries other than your own. Where such transfers occur, we aim to ensure appropriate safeguards are in place in accordance with applicable law.

Policy Updates

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We encourage you to review this page periodically. Continued use of our website after changes take effect constitutes acceptance of the revised policy.

Questions

Contact us about this policy

If you have questions or concerns about this Privacy Policy or our data practices, please get in touch via our Contact page.