Privacy Policy
Last updated: June 15, 2026
1. Who We Are
iExcellents Import & Export Co., Ltd. is a China-based global sourcing and export company established in 2014, with headquarters in Zhongshan, Guangdong (Greater Bay Area) and a branch office in Chenghai, Shantou. We operate three domain names that all resolve to our primary website:
- https://iexcellents.com — Primary website (global sourcing & export)
- https://ilumen.cn — Redirects to iexcellents.com
- https://jeanstailor.com — Redirects to iexcellents.com
When you use any of these domains, this Privacy Policy applies.
2. Scope of This Policy
This Privacy Policy explains how iExcellents Import & Export Co., Ltd. ("iExcellents," "we," "us," or "our") collects, uses, discloses, and safeguards your personal data when you visit our websites, use our services, or communicate with us. It applies to all visitors, clients, suppliers, and partners across the regions we serve, including the European Economic Area (EEA), the United Kingdom, the Gulf Cooperation Council (GCC) states, Southeast Asia, and the People’s Republic of China.
We are committed to protecting your privacy in compliance with:
- The Personal Information Protection Law of the People’s Republic of China (PIPL)
- The EU General Data Protection Regulation (GDPR)
- The California Consumer Privacy Act (CCPA), as amended by the CPRA
- The Saudi Arabian Personal Data Protection Law (PDPL)
- Other applicable data protection laws in the jurisdictions we operate
3. Data Controller
The data controller for personal data collected through our websites and services is:
iExcellents Import & Export Co., Ltd.
Zhongshan, Guangdong Province, People’s Republic of China
Email: [email protected]
Website: https://iexcellents.com
For matters relating to data protection, you may contact our Data Protection Point of Contact at the email address above. We will respond to your inquiry within the timeframe required by applicable law.
4. What Personal Data We Collect
4.1 Information You Provide to Us
| Category | Examples | How We Collect It |
|---|---|---|
| Contact & Inquiry Data | Name, email address, phone number, company name, job title, country, product interest details, order requirements | Contact form submissions, email correspondence, trade show sign-ups, phone calls |
| Account Data | Username, display name, email address, password (hashed), profile information | User registration on our website (if applicable) |
| Communication Data | Message content, attachments, correspondence history | Email, WhatsApp, WeChat, and other messaging platforms |
| Transaction Data | Purchase orders, invoices, shipping details, payment information | Business transactions, procurement documentation |
| Survey & Feedback Data | Responses to surveys, feedback forms, testimonials | Voluntary submission |
4.2 Information Collected Automatically
| Category | Examples | Purpose |
|---|---|---|
| Device & Browser Data | IP address, browser type and version, operating system, device type, screen resolution | Site functionality, security, analytics |
| Usage Data | Pages visited, time spent, referring URL, click patterns, download activity | Site improvement, user experience optimization |
| Cookie Data | Session cookies, preference cookies, analytics cookies | See our Cookie section below |
4.3 Information from Third Parties
We may receive personal data about you from:
- Trade show organizers — when you express interest in our services at exhibitions
- Business partners and referrals — when someone refers your company to us
- Public sources — company registration databases, professional networks (e.g., LinkedIn) for business verification purposes
5. How We Use Your Personal Data
We process your personal data only for legitimate business purposes. The table below explains our processing activities and legal bases:
| Processing Purpose | Data Categories Used | Legal Basis (GDPR) | Legal Basis (PIPL) |
|---|---|---|---|
| Responding to sourcing inquiries and providing quotations | Contact & Inquiry Data | Legitimate interests / Contractual necessity | Consent / Performance of contract |
| Managing supplier matching and procurement | Contact & Inquiry Data, Transaction Data | Contractual necessity | Performance of contract |
| Quality control and logistics coordination | Contact & Inquiry Data, Transaction Data | Contractual necessity | Performance of contract |
| Communicating updates, industry news, and trade show invitations | Contact & Inquiry Data | Legitimate interests / Consent (where required) | Consent |
| Website improvement and analytics | Device & Usage Data | Legitimate interests | Consent |
| Fraud prevention, security monitoring, and compliance | Device Data, Account Data | Legal obligation / Legitimate interests | Legal obligation |
| Complying with export control and customs regulations | Transaction Data, Contact Data | Legal obligation | Legal obligation |
6. Cookies and Tracking Technologies
6.1 What Cookies We Use
Our website uses cookies and similar technologies to enhance your browsing experience. Here is a detailed breakdown:
| Cookie Type | Purpose | Duration | Category |
|---|---|---|---|
| Session Cookie | Maintains your session state as you navigate through the site | Session (browser close) | Strictly Necessary |
| WordPress Login Cookie | Authenticates registered users | 2 days (or 2 weeks if "Remember Me" is checked) | Strictly Necessary |
| WordPress Screen Options Cookie | Remembers display preferences for admin users | 1 year | Strictly Necessary |
| Comment Cookie | Stores name, email, and website for convenience when leaving comments | 1 year | Functional |
| SITE_TOTAL_ID Cookie | Site security and visitor identification | Persistent | Strictly Necessary |
6.2 Third-Party Cookies
Our website may embed content from third-party services (e.g., YouTube videos, Google Maps). These third parties may set their own cookies. We do not control these cookies. Please refer to the respective third-party privacy policies for more information.
6.3 Cookie Consent
Where required by applicable law (including GDPR and ePrivacy Directive requirements), we will obtain your consent before placing non-essential cookies on your device. You can manage your cookie preferences at any time through your browser settings.
Note: Our website currently does not use analytics or advertising cookies that require consent. Should we implement such tools in the future, we will update this policy and implement appropriate consent mechanisms.
7. Embedded Content from Other Websites
Pages on this site may include embedded content (e.g., videos, images, articles, maps). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
8. International Data Transfers
As a China-based company serving international clients, your personal data may be transferred to, stored in, and processed in the People’s Republic of China. When we transfer personal data from the European Economic Area, the United Kingdom, Saudi Arabia, or other jurisdictions with data transfer restrictions to China, we ensure appropriate safeguards are in place:
- Standard Contractual Clauses (SCCs) — For transfers from the EEA/UK to China, we rely on the European Commission’s Standard Contractual Clauses or the UK International Data Transfer Agreement, as applicable.
- Data processing agreements — We enter into data processing agreements with our business partners that include appropriate data protection provisions.
- Cross-border data transfer security assessment — We comply with China’s PIPL requirements for cross-border data transfers, including, where applicable, passing the security assessment organized by the Cyberspace Administration of China (CAC) and obtaining your separate consent.
- GCC data localization — Where required by Saudi PDPL or other GCC data protection laws, we ensure that personal data is processed in compliance with local data localization and transfer restrictions.
If you have questions about the specific safeguards applied to your data, please contact us.
9. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Contact & Inquiry Data | 3 years after last contact, or until you request deletion | Business relationship management |
| Transaction Data | 7 years after transaction completion | Tax, customs, and legal obligations (Chinese law) |
| Communication Records | 3 years after last communication | Business correspondence continuity |
| Account Data | Until account deletion, plus 30 days for backup purging | Account management |
| Website Usage Data | 26 months (if applicable) | Analytics (Google Analytics recommendation) |
| Cookie Data | Per individual cookie duration (see section 6) | Technical functionality |
When we no longer need your personal data, we will securely delete or anonymize it.
10. How We Protect Your Data
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:
- Encryption in transit — All data transmitted between your browser and our servers is encrypted using TLS/SSL (HTTPS).
- Access controls — Access to personal data is restricted to authorized personnel on a need-to-know basis, with role-based permissions.
- Server security — Our websites are hosted on secured infrastructure with firewalls, intrusion detection, and regular security updates.
- Regular backups — Data is backed up regularly to ensure availability and disaster recovery.
- Staff training — Our team receives data protection and privacy awareness training.
- Vendor due diligence — We assess third-party service providers for data protection compliance before engaging their services.
11. Data Breach Notification
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will:
- Notify the relevant supervisory authority within 72 hours (where required by GDPR or PIPL).
- Notify affected individuals without undue delay, providing information about the nature of the breach, likely consequences, and measures taken or proposed.
- Document all breaches, including facts, effects, and remedial actions taken.
12. Your Rights
12.1 Your Rights Under GDPR (European Economic Area & UK)
If you are located in the European Economic Area or the United Kingdom, you have the following rights under the GDPR:
| Right | What It Means |
|---|---|
| Right of Access | You can request a copy of the personal data we hold about you. |
| Right to Rectification | You can ask us to correct inaccurate or incomplete data. |
| Right to Erasure ("Right to be Forgotten") | You can request deletion of your personal data, subject to certain exceptions. |
| Right to Restrict Processing | You can ask us to limit how we use your data in certain circumstances. |
| Right to Data Portability | You can request a machine-readable copy of your data to transfer to another controller. |
| Right to Object | You can object to processing based on legitimate interests or direct marketing. |
| Rights Related to Automated Decision-Making | We do not engage in automated decision-making or profiling that produces legal effects concerning you. |
12.2 Your Rights Under China’s PIPL
If you are located in China, the Personal Information Protection Law grants you additional rights:
- Right to know and decide — You have the right to be informed about how your personal information is processed and to consent to or refuse such processing.
- Right to access and copy — You may request access to and a copy of your personal information.
- Right to rectification and completion — You may request correction of inaccurate or incomplete personal information.
- Right to deletion — You may request deletion of your personal information when the processing purpose has been achieved, the retention period has expired, or consent has been withdrawn.
- Right to explanation — You may request an explanation of our personal information processing rules.
- Right to withdraw consent — You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
- Right to data portability — Where conditions prescribed by PIPL are met, you may request the transfer of your personal information to a designated recipient.
- Right to lodge a complaint — You may lodge a complaint with the relevant authorities if you believe we have violated PIPL.
12.3 Your Rights Under CCPA (California Residents)
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, grants you the following rights:
- Right to Know — You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purpose for collection, and the categories of third parties with whom we share the information.
- Right to Delete — You may request deletion of your personal information, subject to certain exceptions.
- Right to Correct — You may request correction of inaccurate personal information.
- Right to Opt-Out of Sale/Share — We do not sell or share your personal information for cross-context behavioral advertising. We have no actual knowledge of selling or sharing personal information of minors under 16.
- Right to Non-Discrimination — We will not discriminate against you for exercising your CCPA rights.
12.4 Your Rights Under Saudi PDPL
If you are located in Saudi Arabia, the Saudi Personal Data Protection Law grants you the following rights:
- Right to be informed about the collection and use of your personal data.
- Right to access your personal data held by us.
- Right to request correction of inaccurate personal data.
- Right to request destruction of your personal data in certain circumstances.
- Right to restrict processing in certain circumstances.
12.5 How to Exercise Your Rights
To exercise any of your rights, please contact us at [email protected]. We will respond to your request:
- Within 30 days (GDPR, CCPA)
- Within 15 working days (PIPL, extendable by 15 working days if necessary)
- Without undue delay (Saudi PDPL, generally within 30 days)
We may need to verify your identity before processing your request. We will not charge a fee for exercising your rights unless the request is manifestly unfounded or excessive.
13. Who We Share Your Data With
We may share your personal data with the following categories of recipients for legitimate business purposes:
| Recipient Category | Purpose | Data Shared | Location |
|---|---|---|---|
| Manufacturing partners (factories) | Supplier matching, order processing, quality control | Company name, product requirements, order specifications | China |
| Logistics and freight providers | Shipping, export documentation, container loading | Company name, contact details, shipping address, order information | China / Global |
| Testing and certification partners (TÜV SÜD, TÜV Rheinland, Intertek, SGS, Bureau Veritas) | Product testing, certification coordination | Product specifications, order details, company name | Global |
| IT service providers | Website hosting, email services, CRM | As necessary for service delivery | China / Global |
| Government and regulatory authorities | Customs clearance, export documentation, legal compliance | As required by applicable law | China / Destination countries |
We do not sell your personal data to third parties. We do not share your data for third-party direct marketing purposes.
14. Automated Spam Detection
Visitor comments and contact form submissions may be checked through automated spam detection services. These services process the submitted data (including IP address, user agent, and message content) to determine whether the submission is legitimate.
15. Children’s Privacy
Our services are directed exclusively to businesses and professional entities. We do not knowingly collect personal data from individuals under the age of 18 (or the age of majority in your jurisdiction). If you believe that a minor has provided us with personal data, please contact us immediately so that we can delete it.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will:
- Update the "Last updated" date at the top of this page.
- Post a notice on our website for a reasonable period.
- Where required by applicable law, seek your renewed consent.
We encourage you to review this Privacy Policy periodically.
17. Complaints and Supervisory Authorities
If you are dissatisfied with our response to a privacy concern, you have the right to lodge a complaint with the relevant supervisory authority:
| Jurisdiction | Supervisory Authority |
|---|---|
| European Economic Area | Your local Data Protection Authority. Contact details: https://edpb.europa.eu/about-edpb/about-edpb/members_en |
| United Kingdom | Information Commissioner’s Office (ICO): https://ico.org.uk |
| China | Cyberspace Administration of China (CAC): https://www.cac.gov.cn |
| California, USA | California Privacy Protection Agency (CPPA): https://cppa.ca.gov |
| Saudi Arabia | Saudi Data & Artificial Intelligence Authority (SDAIA): https://sdaia.gov.sa |
18. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
iExcellents Import & Export Co., Ltd.
Data Protection Point of Contact
Email: [email protected]
Website: https://iexcellents.com
Location: Zhongshan, Guangdong Province, People’s Republic of China
We will acknowledge receipt of your inquiry within 5 business days and respond substantively within the timeframe prescribed by applicable law.
This Privacy Policy was prepared with reference to the General Data Protection Regulation (EU) 2016/679, the Personal Information Protection Law of the People’s Republic of China (2021), the California Consumer Privacy Act (Cal. Civ. Code § 1798.100 et seq.), and the Saudi Arabian Personal Data Protection Law (2021). It is provided for informational purposes and does not constitute legal advice. We recommend that you consult with legal counsel regarding your specific compliance obligations.