Privacy Notice
Last updated: 23 August 2026
X&X is the public-facing brand used for the current Phase 1 operations of X&X Non-Specialized Wholesale Trading, a DTI-registered Philippine sole proprietorship. This notice explains the current website privacy approach and the intended handling of business inquiries during Phase 1.
Current website inquiry workflow
The Buyer, Supplier/Partner, and Contact forms transmit information submitted by a visitor to an X&X server-side inquiry endpoint hosted on Cloudflare infrastructure. The endpoint is used to deliver the inquiry to X&X's designated business email inbox.
The information received may then be processed by X&X to evaluate, respond to, document, and follow up on the business inquiry.
Information a visitor may choose to provide
Depending on the inquiry, this may include a name, business or organization name, role, email address, telephone or messaging contact supplied by the visitor, country, product or sourcing requirement, quantity, destination, supplier capability, website, lead time, MOQ, and other information voluntarily included in the message.
Purpose of processing
Information received by email may be used to evaluate and respond to buyer requirements, supplier introductions, sourcing requests, commercial opportunities, strategic partnership inquiries, due-diligence requests, or related business correspondence; to maintain appropriate business records; and to comply with applicable legal or regulatory obligations.
Data minimization
Visitors should provide only information reasonably necessary for the inquiry and should not send passwords, full banking credentials, highly sensitive personal data, or confidential documents unless X&X has specifically requested them through an appropriate and verified channel.
Hosting and technical data
The website is currently hosted using third-party infrastructure. As is typical for hosted websites, the hosting provider may process standard technical request information needed to deliver, secure, and troubleshoot the service, such as IP address, request time, browser or device information, and requested resource. X&X has not activated a separate advertising or behavioral analytics program for this Phase 1 website.
Disclosure and service providers
Any future material changes involving marketing technology, analytics, file uploads, automated profiling, or broader data-sharing should be separately assessed and reflected in this notice.
Retention
Business correspondence should be retained only for as long as reasonably necessary for the stated business, recordkeeping, legal, regulatory, dispute-resolution, or due-diligence purpose. A formal retention schedule remains subject to professional review.
Privacy rights
Individuals may have rights under applicable Philippine data-protection law concerning their personal data, including rights relating to information, access, objection, correction, erasure or blocking, portability, complaint, and damages, subject to the conditions and limitations of applicable law.
Privacy inquiries
Until a dedicated privacy contact is formally designated, privacy-related website inquiries may be sent to [email protected].