Privacy Policy

Last updated: 18 March 2026

1. Introduction

This Privacy Policy describes how Xfinite Trading Pte. Ltd. (UEN: 202609065H) ("we", "us", or "our") collects, uses, discloses, and protects your personal data when you visit our website at www.xfinitetrading.com (the "Website").

We are committed to protecting your personal data in accordance with applicable data protection laws, including:

  • Singapore Personal Data Protection Act (PDPA)
  • EU General Data Protection Regulation (GDPR)
  • UK GDPR
  • California Consumer Privacy Act (CCPA/CPRA)
  • Brazil Lei Geral de Proteção de Dados (LGPD)

Xfinite Trading Pte. Ltd. acts as the data controller for personal data collected through this Website.

2. Contact Information

If you have any questions regarding this Privacy Policy or your personal data, please contact:

Privacy Contact: enquiry@xfinitetrading.com

3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide Voluntarily

When you submit a contact form, we collect the following required information:

  • First name
  • Last name
  • Company name
  • Designation / job title
  • Company email address
  • Business enquiry category
  • Message content

We require this information to effectively assess, prioritise, and respond to business enquiries. We collect only the information necessary to establish and manage business communications and do not request sensitive personal data through our contact form.

3.2 Automatically Collected Data (With Consent)

Subject to your consent, we collect:

  • IP address (anonymised where applicable)
  • Device type and browser information
  • Pages visited and time spent
  • Interaction data (clicks, scrolling behaviour)
  • Approximate location (country/city level)

This data is collected via Google Analytics 4 and Microsoft Clarity.

3.3 Cookies and Local Storage

We store your cookie consent preferences in local storage. We do not set non-essential cookies unless you provide consent.

4. Purposes of Processing

We process your personal data for the following purposes:

Purpose Description
Respond to enquiries To communicate with you regarding your request
Business operations To support potential or ongoing business relationships
Website improvement To analyse usage and improve functionality
Security and monitoring To maintain website performance and security

5. Legal Basis for Processing

Where applicable under GDPR and similar regulations, we rely on the following legal bases:

Data Type Legal Basis
Contact form data Legitimate interest (Art. 6(1)(f)) and/or performance of a contract (Art. 6(1)(b))
Analytics data Consent (Art. 6(1)(a))
Website security Legitimate interest

You may withdraw consent at any time without affecting prior lawful processing.

6. Cookies and Tracking Technologies

We use cookies and similar technologies only with your consent.

Service Purpose Provider Privacy Policy
Google Analytics 4 Website analytics Google LLC View
Microsoft Clarity Session recordings and UX analysis Microsoft Corporation View

If you decline cookies:

  • No analytics scripts will be loaded
  • No tracking cookies will be placed

You may reset your preferences by clearing your browser storage.

7. Third-Party Services

We use trusted third-party service providers:

  • Web3Forms — Contact form processing
    https://web3forms.com/privacy
  • Google Analytics 4 — Website analytics
    https://policies.google.com/privacy
  • Microsoft Clarity — Behavioural analytics
    https://privacy.microsoft.com
  • Google Fonts — Web font delivery
    https://developers.google.com/fonts/faq/privacy
    Google Fonts are loaded directly from Google's servers to render our Website. When your browser requests font files, Google may receive and log your IP address. This occurs upon page load and is not dependent on cookie consent, as it is necessary for the Website to display correctly. No personal data beyond your IP address is collected by Google through this service.
  • Tailwind CSS CDN — Front-end styling delivery (no personal data collected)

These providers process data under contractual safeguards.

8. Data Retention

We retain personal data only as long as necessary:

Data Type Retention Period
Contact form data Until enquiry is resolved and for legitimate business purposes
Analytics data Google Analytics: up to 14 months; Clarity: up to 30 days
Cookie preferences Until manually cleared by the user

9. International Data Transfers

Your data may be transferred outside your jurisdiction, including to:

  • United States (Google, Microsoft)
  • Singapore (Xfinite Trading Pte. Ltd.)

We ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs)
  • Data processing agreements with vendors
  • Compliance with Singapore PDPA

10. Your Rights

Depending on your jurisdiction, you may have the following rights:

Under GDPR / UK GDPR

  • Access your personal data
  • Correct inaccurate data
  • Request deletion
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent
  • Lodge a complaint with a supervisory authority

Under CCPA/CPRA

  • Know what personal data is collected
  • Request deletion
  • Opt out of sale/sharing (we do not sell personal data)
  • Non-discrimination

Under Singapore PDPA

  • Access your personal data
  • Correct your personal data
  • Withdraw consent

Under LGPD (Brazil)

  • Confirm processing
  • Access, correct, or delete data
  • Data portability
  • Information on data sharing

To exercise your rights, contact: enquiry@xfinitetrading.com

We will respond within 30 days of receiving your request. Under CCPA/CPRA, the response period is 45 days. Extensions may apply where permitted by applicable law, and we will notify you accordingly.

11. Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significant effects on you.

12. Children's Privacy

Our Website is intended for business use and is not directed at individuals under the age of 16 (or equivalent age under applicable law). We do not knowingly collect personal data from children.

13. Data Security

We implement industry-standard technical and organisational measures to protect personal data, including:

  • HTTPS encryption
  • Secure data transmission
  • Access controls
  • Trusted third-party service providers

However, no system is completely secure.

14. Data Breach Notification

In the event of a data breach, we will take appropriate steps to mitigate the impact and notify affected individuals and relevant authorities where required by applicable law.

15. Do Not Track

Our Website does not respond to browser "Do Not Track" (DNT) signals. Instead, your tracking preferences are determined by your cookie consent choice. If you decline cookies via our consent banner, no analytics or tracking scripts will be loaded regardless of your browser's DNT setting.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last updated" date.

17. Contact Us

For any privacy-related enquiries or requests:

Sections