Privacy Policy

1. Introduction

We respect your privacy and are committed to protecting the personal data you provide to us through this website and related communications. This policy describes what personal information we collect, why we collect it, how we use and share it, how long we keep it, and your rights regarding your personal information.

Our website is intended for business-to-business (B2B) use only. If you are acting as a consumer (non-business), please contact us before submitting any personal data.

2. Personal Data We Collect

We only collect information that is reasonably necessary to provide our B2B quotation and partnership services. Specifically, we may collect the following categories when you submit a form or correspond with us:

• Contact information: full name, job title, company name, country, email address, WhatsApp / phone number.
• Inquiry content: product requirements, quantity estimates, project details, and any information you freely provide in the "Requirements Description" or application form fields.
• Business profile: business type (store / interior / contractor / wholesaler / etc.), years of industry experience, estimated first order value, monthly sales volume (only if you choose to provide them in agent application).
• Technical & analytics data: approximate country-level IP location (never the exact address), browser type, device type, pages visited, referrer URL. IP is anonymized in Google Analytics 4 by default.
• Language preference: if you manually switch our website language, we store your preference in browser localStorage (not sent to server).
• Cookies & similar technologies: essential, analytics, and cookie-consent cookies only. See Section 7 below.

We do NOT intentionally collect sensitive personal data such as race, religion, political opinion, health, financial (credit card), or government ID numbers. Please do not submit any such information through our forms.

3. How We Use Your Personal Data

We use the data we collect for the following legitimate business purposes, performed either with your consent or because it is necessary for the performance of a contract (pre-contractual steps at your request):

• Respond to RFQ & inquiries: to prepare and send you quotations, product specifications, MOQ information, and follow-up questions related to your sourcing needs.
• Agent application review: to evaluate your agent / distributor application and contact you with partnership proposals and pricing tiers.
• Order & shipping execution: if you proceed with an order, to process payment instructions, production scheduling, quality reports, shipping documents, and after-sales support.
• Customer relationship: to send you occasional product updates, new SKU announcements, marketing catalogs, and seasonal promotions — you can opt out at any time by clicking "unsubscribe" link or replying STOP.
• Website improvement & analytics: aggregated anonymous statistics to improve our website performance, SEO content relevance, and user experience in SEA markets.
• Legal & compliance: to comply with applicable laws, regulations, tax audit requirements, and legitimate business record-keeping obligations in China.
• Security & anti-abuse: to detect, investigate, and prevent spam submissions, fraudulent inquiries, or unauthorized access attempts.

4. Data Sharing & Disclosure

We do not sell your personal data to any third party for marketing purposes. We may share your data only in the following strictly limited circumstances:

• Within our company: your data is accessible only by authorized sales, export logistics, and customer support employees who need it to perform their jobs. All staff are bound by internal confidentiality obligations.
• Service providers (processors): trusted third-party vendors that help us operate this website and deliver services, under written data processing agreements: (a) Google Analytics 4 — anonymized website analytics; (b) our website hosting & email service providers; (c) international freight forwarders and logistics partners only when you proceed with a shipment.
• Legal & government: if required by Chinese law, court order, or binding request from competent authorities (e.g. customs, tax authorities), or to protect our legal rights, property, or safety.
• Business transfer: in the unlikely event of a merger, acquisition, or asset sale, your data may transfer subject to standard confidentiality protections and you will be notified via website notice.

International data transfer: Our primary servers and operations are based in the People's Republic of China. If you are located outside China (MY/TH/PH/ID/SG), your submitted form data may be transferred to and stored in China. By submitting a form, you acknowledge this transfer. We apply appropriate organizational and technical safeguards to protect your data regardless of location.

5. Data Retention Period

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and for legitimate legal/accounting record-keeping obligations: (a) Active customer / partner records: retained for the duration of the business relationship plus 5 years after last contact to fulfil warranty, tax, and customs requirements. (b) Non-customer inquiry / RFQ records: retained for 2 years from the date of last communication, after which they are anonymized or securely deleted. (c) Agent applications (rejected or not responded): retained for 1 year for re-engagement before deletion. (d) Website analytics log data: retained for 14 months then auto-deleted by Google Analytics 4.

6. Your Data Subject Rights

We respect the personal data protection principles reflected in the EU GDPR, Singapore PDPA, Malaysia PDPA, Thailand PDPA, Philippines DPA, and Indonesia PDP Law — even though our primary establishment is in China. Depending on your jurisdiction, you may be entitled to exercise the following rights in relation to your personal data, free of charge unless requests are manifestly excessive:

• Right of Access: obtain confirmation as to whether or not we hold personal data concerning you, and a copy of such data.
• Right to Rectification: request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure ("Right to be Forgotten"): request deletion of your personal data in certain circumstances (e.g. data no longer necessary, consent withdrawn).
• Right to Restriction of Processing: request suspension of processing in certain scenarios (e.g. accuracy contested, processing unlawful).
• Right to Data Portability: receive personal data you provided to us in a structured, commonly used, machine-readable format.
• Right to Object: object to processing of personal data based on legitimate interests or direct marketing purposes at any time.
• Right to Withdraw Consent: if processing is based on your consent (e.g. marketing emails), you can withdraw it at any time, without affecting lawfulness of prior processing.
• Right to Lodge a Complaint: without prejudice to any other administrative or judicial remedy, you may complain to your local data protection authority (e.g. Malaysia PDP Commissioner, Singapore PDPC, Thailand PDPC Office, Philippines NPC, Indonesia Kominfo) if you consider our processing infringes applicable local law.

To exercise any of these rights, please send your request to mxoho@mxoho.com with subject line "Data Subject Rights Request". We will acknowledge within 5 business days and respond substantively within 30 calendar days. Reasonable identity verification may be required.

7. Cookies & Similar Technologies

Our website uses cookies to enhance your browsing experience. When you first visit, a cookie consent banner powered by Cookie Consent script is displayed, allowing you to accept or decline non-essential cookies. Categories of cookies we may use: (a) Essential / Strictly Necessary Cookies: required for basic site navigation, security features, form submission, and service worker PWA caching. These cannot be switched off. (b) Analytics Cookies: Google Analytics 4 cookies to collect anonymized aggregated information about how visitors use our site (e.g. page views, country-level location, traffic source). These help us improve our content for SEA B2B audiences. We set GA4 anonymize_ip = true, so full IP addresses are never stored. (c) Preference Cookies: used to remember your selected display language (via localStorage). You can control and delete cookies through your individual browser settings. Blocking certain cookies may affect parts of site functionality. For more details, see the "Cookie Settings" button at the bottom of the website or in your browser.

8. Third-Party Links

This website may contain links to external third-party websites and services (e.g. WhatsApp wa.me link, LinkedIn company page, Google Fonts CDN, YouTube search results). We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services. We strongly advise you to review the privacy policy of every site you visit before submitting any personal data.

9. Children's Privacy

Our website and services are directed exclusively at business customers and are not intended for children. We do not knowingly collect or solicit personal information from anyone under the age of 16 (or the applicable age of majority in your jurisdiction). If you believe we have collected information from a child in violation of this policy, please contact us immediately and we will take prompt steps to delete such information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offering. Material changes will be posted on this page with the revised "Last updated" date prominently displayed above. For significant changes affecting how we use previously collected personal data, we will make reasonable efforts to notify you via email or prominent on-site notice. Your continued use of our services after the effective date of the revised policy constitutes acceptance of those changes.

11. How to Contact Us / Data Protection

If you have any questions, concerns, or complaints about this Privacy Policy or our data handling practices, or wish to exercise your data subject rights, please contact our designated data handling representative: