1. Our Privacy Promise

At Xdeal, we value your trust. Our privacy policy is built on transparency and security.

• Data Minimisation: We only collect the data we need to fulfill your orders and improve your experience.
• Security First: We protect your data using industry-standard encryption and never sell your personal information to third parties.

2. About Us & Your Data Controller

Xdeal is the trading name of CLFF TRADING LIMITED

• Data Controller: CLFF Trading Limited is the controller responsible for your personal data.
• Registered Address: 167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF

3. The Information We Collect

We collect and process the following categories of personal information:

• Identity & Contact Data: Name, shipping address, billing address, email, and phone number.
• Transaction Data: Details about payments to and from you and products purchased.
• Technical Data: IP address, browser type, and location data used to show correct pricing/currency.
• Security Data: As part of our fraud prevention, we may verify order details against security footage at our dispatch centers.

4. Lawful Basis for Processing

Under the UK GDPR, we rely on the following legal grounds to process your data:

• Contractual Necessity: To process and deliver your orders.
• Legitimate Interests: For fraud prevention, website optimization, and security.
• Consent: For sending marketing communications (which you can withdraw at any time).
• Legal Obligation: To comply with tax and consumer laws.

5. Data Security & Payment Safety

• Encryption: Our website is protected by SSL (Secure Socket Layer) technology.
• Payment Processing: We do not store raw credit/debit card details. All payments are handled by PCI-DSS compliant third-party processors (e.g., PayPal, Stripe) using secure tokenization.

6. Sharing Your Information

We share your data only with essential partners required to provide our services:

• CLFF Trading Limited (Our family company).
• Service Providers: Courier/Logistics partners (to deliver your goods) and warehouse facilities.
• Professional Tools: Google (for analytics/GMC), hosting providers, and encrypted marketing platforms.
• Legal Authorities: Only when required by law to prevent fraud or criminal activity.

7. International Data Transfers

As a global company, your data may be transferred to and stored in locations outside the UK (such as Hong Kong). We ensure all such transfers are protected by Standard Contractual Clauses (SCCs) or other legal safeguards recognized under UK law to ensure your data receives an equivalent level of protection.

8. Cookies & Tracking

We use cookies to enhance your experience:

• Essential: For cart functionality and site login.
• Performance: To understand how users interact with our site via Google Analytics.
• Targeting: To show you relevant tech deals on other platforms. 

9. Your Legal Rights

Under UK Data Protection law, you have the right to:

• Access: Request a copy of the data we hold about you.
• Rectification: Ask us to correct any inaccurate information.
• Erasure: Request that we delete your data (the "Right to be Forgotten").
• Withdraw Consent: Unsubscribe from marketing at any time.