Privacy Notice
Last updated: 23 August 2026
X&X is the public-facing brand used for the current Phase 1 operations of X&X Non-Specialized Wholesale Trading, a DTI-registered Philippine sole proprietorship. This notice explains the current website privacy approach and the intended handling of business inquiries during Phase 1.
Current website inquiry workflow
The Buyer, Supplier/Partner, and Contact forms currently operate as client-side email composers. Information entered into those forms is not submitted to or stored in an X&X website database. When a visitor chooses the email action, the browser prepares an email in the visitor's own email application. The visitor may review, edit, or cancel that email before sending it.
If the visitor sends the email, the information contained in that message is then processed through the visitor's email provider, X&X's email provider, and X&X for the purpose of reviewing and responding to the business inquiry.
Information a visitor may choose to provide
Depending on the inquiry, this may include a name, business or organization name, role, email address, telephone or messaging contact supplied by the visitor, country, product or sourcing requirement, quantity, destination, supplier capability, website, lead time, MOQ, and other information voluntarily included in the message.
Purpose of processing
Information received by email may be used to evaluate and respond to buyer requirements, supplier introductions, sourcing requests, commercial opportunities, strategic partnership inquiries, due-diligence requests, or related business correspondence; to maintain appropriate business records; and to comply with applicable legal or regulatory obligations.
Data minimization
Visitors should provide only information reasonably necessary for the inquiry and should not send passwords, full banking credentials, highly sensitive personal data, or confidential documents unless X&X has specifically requested them through an appropriate and verified channel.
Hosting and technical data
The website is currently hosted using third-party infrastructure. As is typical for hosted websites, the hosting provider may process standard technical request information needed to deliver, secure, and troubleshoot the service, such as IP address, request time, browser or device information, and requested resource. X&X has not activated a separate advertising or behavioral analytics program for this Phase 1 website.
Disclosure and service providers
Business inquiry information may be accessible to X&X personnel or professional advisers who reasonably need it for the inquiry and may be processed by service providers supporting email, hosting, security, or professional services. X&X does not intend to sell personal information. Any future data-sharing, marketing, analytics, or server-side form workflow should be separately reviewed and appropriately disclosed before activation.
Retention
Business correspondence should be kept only for as long as reasonably necessary for the stated business, recordkeeping, legal, regulatory, dispute-resolution, or due-diligence purpose. A formal retention schedule should be confirmed before any server-side collection of website form data is enabled.
Privacy rights
Individuals may have rights under applicable Philippine data-protection law concerning their personal data, including rights relating to information, access, objection, correction, erasure or blocking, portability, complaint, and damages, subject to the conditions and limitations of applicable law.
Privacy inquiries
Until a dedicated privacy contact is formally designated, privacy-related website inquiries may be sent to [email protected].