Privacy Policy

1. Data Controller

This website (https://www.xctrustcare.com) is operated by Xiangcheng TrustCare Trading Co., Ltd., acting as the data controller. We are the wholly-owned international trade subsidiary of Henan Nightingale Apparel Co., Ltd.

Company Name	Xiangcheng TrustCare Trading Co., Ltd.
Unified Social Credit Code	91411681MAK13GTR6A
Registered Address	Room 2601, Unit 2, Building 1, Ruizhi New World, Xiangcheng City, Zhoukou City, Henan Province, P.R.China
Factory & Operating Address	Room 101, Building 7, China (Xiangcheng) Medical Clothing Industry Demonstration Park, No. 19 Ping'an Avenue, Dongfang Street, Xiangcheng City, Zhoukou City, Henan Province, China 466200
Data Protection Contact	Chaojie Niu (tc@xctrustcare.com / +86 130 3397 2122)

2. Information We Collect

(1) Business inquiry details you provide: When you submit our Contact form, we collect your name or company name, email address, inquiry message, and optional fields such as country/region, estimated order quantity, and product category of interest.

(2) Automated security & anti-spam metadata: To prevent automated spam, our server records browser User-Agent, page locale and time zone, referrer URL (including UTM parameters), form completion time, coarse country code, and a one-way salted SHA-256 hash of your IP address (we do not store raw IP addresses).

3. Purposes & Legal Basis (GDPR Art. 6)

(1) Responding to inquiries & pre-contractual steps (GDPR Art. 6(1)(b)): To reply within 12 working hours with quotations, catalogs, or sampling proposals based on your medical uniform customization or bulk purchasing requirements.

(2) Website security & spam prevention (GDPR Art. 6(1)(f) legitimate interests): Using honeypot checks, submission timing, and anonymized IP hashes to rate-limit abusive traffic (up to 5 valid inquiries per IP per hour) and protect our communication channels.

(3) No bulk marketing: We never sell, rent, or share your contact details with third parties for marketing, nor do we send unsolicited promotional newsletters.

4. Cookies & Browser Local Storage

This website does not use any third-party advertising cookies, behavioral tracking pixels, or cross-site trackers.

Only when you type in the inquiry form does your browser temporarily save an unsent draft in localStorage (which you can clear anytime via the Reset button) and a one-time idempotency token in sessionStorage to prevent duplicate submissions. These items remain strictly on your device.

5. Data Processors & International Transfers

To ensure reliable global access and email delivery, we engage only compliant infrastructure processors: Cloudflare, Inc. (global CDN hosting, security protection, and encrypted D1 database storage) and Resend, Inc. (transactional email delivery forwarding your inquiry to tc@xctrustcare.com).

As our sales and engineering teams operate in Xiangcheng, Henan Province, P.R.China, your inquiry data is transferred to China for quotation and order follow-up under strict access controls.

6. Data Retention Period

Inquiry records submitted via our web form are retained in our Cloudflare D1 database for up to 24 months and are automatically purged thereafter. If our communication progresses to sampling or formal trade contracts, related correspondence and commercial documents are archived in accordance with international trade and tax regulations.

7. Your Privacy Rights & How to Exercise Them

You have the right to request access to, rectification, export, or erasure of the personal data we hold about you, or to restrict or object to further business follow-up at any time.

To exercise these rights, please email tc@xctrustcare.com with the subject line "Privacy Request". After verifying your sender identity, we will process your request free of charge within 15 working days.