1.Who We Are

X-Raypad ("X-Raypad", "we", "us" and "our") operates the websites x-raypad.com and shop.x-raypad.com (the "Website"), selling standard and custom-printed mouse pads and related accessories. This Privacy Policy explains what personal data we collect, why we collect it, and the choices you have. By using the Website or placing an order, you acknowledge the practices described in this Policy.

2.Information We Collect

2.1 Information you provide to us

• Order and contact information: your name, email address, shipping address, billing address, and phone number, provided at checkout or when contacting us.
• Account information: if you create an account, your username, email address, and password (stored only in encrypted/hashed form).
• Uploaded content: the images, artwork, and files you upload for custom products (see Section 4).
• Communications: messages you send us via email, contact forms, or customer support channels.

2.2 Information collected automatically

• Log data: like most websites, our web server automatically records your IP address, browser type, referring page, and time of visit.
• Cookies and similar technologies: used to keep your cart and session working and to remember your preferences (see Section 6).

2.3 Compliance records

When you place an order for a custom product, we record your confirmation of the Custom Content & IP Warranty statement together with the time of confirmation, your order number, and your IP address. We keep this record to demonstrate that the required confirmation was given, as described in our Terms and Conditions.

3.How We Use Your Information

We use the information we collect to:

• process and fulfill your orders, including production, payment processing, shipping, and delivery updates;
• provide customer support and respond to your inquiries;
• create and manage your account (if you register);
• send you service-related messages (order confirmations, proofs for approval, shipping notices);
• send you news or offers about our products, only where permitted and with the ability to unsubscribe at any time;
• meet legal, tax, accounting, and compliance obligations (including the compliance records described in Section 2.3);
• maintain the security and performance of the Website, and prevent fraud and abuse.

We do not sell, rent, or lease your personal data to third parties.

4.Your Uploaded Custom Images

Images and artwork you upload for a custom product are used solely to produce your order (including generating your digital proof and printing your product). We do not use your uploaded images for marketing, display them as samples, or reproduce your order, without your explicit consent.

Uploaded files are stored on our production systems for as long as needed to complete your order and handle any after-sales issues (such as a reprint), after which they may be deleted in the ordinary course of system maintenance. If you would like an uploaded image deleted sooner, contact us (Section 14) and we will delete it, provided production of any related order is complete.

5.Payment Information

Payments are processed by our third-party payment providers (such as PayPal and Stripe). Your full payment card details are entered directly on the provider's secure pages and are never stored on our servers. We only receive and retain the information needed to confirm and reconcile your payment (such as transaction ID, payment status, and partial card metadata where provided by the processor).

The payment providers' handling of your data is governed by their own privacy policies, which we encourage you to review.

6.Cookies

Cookies are small files stored by your browser that allow the Website to function and remember your preferences. We use:

• Essential cookies: required for the cart, checkout, and account login to work (for example, WooCommerce session cookies). The Website will not function properly without them.
• Preference cookies: remember choices such as your region or display settings.
• Analytics cookies (if enabled): help us understand how visitors use the Website in aggregate form, so we can improve it.

You can block or delete cookies through your browser settings, but doing so may prevent you from using certain features, including checkout.

7.Who We Share Information With

We share personal data only as needed to run our business, with:

• Payment processors (e.g., PayPal, Stripe) — to process your payment;
• Shipping carriers and logistics partners — your name, address, and phone number, to deliver your order and support customs clearance;
• Production partners — uploaded images and order specifications, solely to manufacture your custom product;
• Service providers who host or maintain our Website and email systems, under confidentiality obligations;
• Authorities or rights holders, where required by law, legal process, or to protect our legal rights (for example, in response to a valid intellectual-property complaint).

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

8.International Data Transfers

We are based in the Hong Kong / mainland China region, and orders are produced and shipped from China. Your personal data will therefore be transferred to and processed in these jurisdictions, whose data-protection laws may differ from those of your country. By placing an order, you acknowledge this transfer. We limit transfers to what is necessary to fulfill your order and apply the safeguards described in this Policy.

9.Data Retention

We keep personal data only for as long as needed for the purposes described in this Policy:

• Order records (including invoices): retained for the period required by applicable tax and accounting laws;
• Account information: kept while your account is active, and deleted or anonymized upon account closure, subject to legal retention duties;
• Uploaded custom images: see Section 4;
• Compliance records (IP Warranty confirmations): retained for as long as the related order records are kept;
• Support correspondence: typically up to 24 months, then deleted or anonymized.

10.Your Rights

Depending on where you live, you may have some or all of the following rights regarding your personal data:

• to access the personal data we hold about you, and receive a copy;
• to correct inaccurate or incomplete data;
• to request deletion of your data, subject to legal retention requirements (for example, tax records);
• to object to or restrict certain processing, including marketing;
• to data portability for data you provided to us;
• to withdraw consent at any time where processing is based on consent, without affecting prior processing.

To exercise any of these rights, contact us at support@x-raypad.com. We may need to verify your identity before acting on your request, and we aim to respond within 30 days. If you are in the EEA, UK, or Switzerland, you also have the right to lodge a complaint with your local data-protection authority. California residents: we do not sell or "share" (for cross-context behavioral advertising) your personal information as those terms are defined under the CCPA/CPRA.

11.Security

We use reasonable technical and organizational measures to protect your personal data, including encrypted connections (HTTPS), hashed password storage, and access controls on production and order systems. No method of transmission or storage is 100% secure; if we become aware of a data breach affecting your personal data, we will notify you and the relevant authorities where required by law.

12.Children

The Website is not directed at children, and you must be of legal age (18 in most places) to place an order. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us and we will delete it.

13.Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always posted on this page with its revision date. Material changes will be highlighted on this page before they take effect.