Privacy Notice

Privacy Notice

Effective Date: April 28, 2026

This Privacy Notice strictly complies with the Personal Information Protection Law of the People’s Republic of China and the Cybersecurity Law of the People’s Republic of China, while also referencing major global data protection standards. It explains how we process personal information of individuals who interact with us externally, including customers, website visitors, recipients of our products or services, and personnel of corporate clients and suppliers (collectively referred to as “you”). This Privacy Notice applies to all MAXBY brands and platforms, as well as any websites or applications that reference or link to this Privacy Notice.

We may update this Privacy Notice from time to time to reflect changes in our information processing practices. If we make any material revisions, we will provide notice on this website prior to the effective date of such revisions and obtain your consent again where required. Unless otherwise specified, all changes shall take effect from the date of publication. We recommend that you review this page periodically to stay informed of the latest updates to our privacy practices.

Important Notice

Our platform may contain links to third-party e-commerce platforms or online stores. Once you click such links, your personal information will be processed in accordance with the privacy policies of those third parties. We do not control, nor do we assume legal responsibility for, the collection or processing of your personal information by such third parties. We strongly recommend that you carefully review their privacy policies before proceeding.

1. Collection of Personal Information

1.1 Depending on how you use our website, we may lawfully collect your personal information from the following sources:

1.1.1 Information You Provide Voluntarily: When you contact us via email, subscribe to our communications, or submit online inquiry forms, we collect the information you voluntarily provide.

1.1.2 Automatically Collected Information: When you access our website, read our emails, or otherwise interact with us, we automatically collect information that you provide to us as well as information relating to your access to and use of our website. We typically collect such information through various tracking technologies, including (i) cookies or small data files stored on your device, and (ii) other related technologies such as web beacons, pixels, embedded scripts, mobile SDKs, location-identification technologies, and logging technologies (collectively, “Tracking Technologies”). We may also use third-party partners or technologies to collect such information. The information automatically collected about you may be combined with other personal information that we collect directly from you or obtain from other sources.

1.1.3  Third-Party Sources (where applicable): With your authorization, we may obtain your data from third-party authentication providers, social media platforms, partners, or other data processors (such as authentication tokens).

1.1.4  Publicly Available Information (where applicable): We may collect personal information that you have published or otherwise made explicitly public, including comments or content that you post about us through our website and other platforms, your social media accounts, or any other public platforms.

1.2 We may create records of your personal information, such as records of your interactions with us and details of your past interactions with us.

2. Categories of Personal Information We Process

2.1 Contact and Inquiry Information:

When you contact us, subscribe to our communications, or submit an online inquiry form, we may collect identity information that you voluntarily provide, including your name, date of birth/age, company name, nickname, country/region, language preference, communication preferences, email address, telephone number, and avatar, as well as account credentials, one-time passwords, and authentication tokens.

2.2 Interaction Data:

This includes click records, navigation paths to third-party platforms, visit frequency, email open rates, and your browsing behavior within our website.

2.3 Device and Network Information:

This includes device brand and model, operating system, IP address, browser type, device MAC address, and unique device identifiers (such as IDFA and Android ID).

2.4 Geolocation Information: Approximate geographic location derived from your IP address.

2.5 Community Interaction Information: This includes any videos, audio, photographs, images, 3D design files, or other files that you upload, as well as any posts, comments, or messages you share within our website’s community forums. It may also include your username, profile picture, and any public activities related to community services, such as likes, follows, and shared content.

2.6 Feedback and Support Information: This includes the content of customized messages sent through forms, email addresses, or other contact methods we provide to customers, as well as submitted photos and videos, recordings of calls with us (where permitted by law), and any comments, opinions, or feedback about us that you publicly post on social media platforms or on our website or applications.

2.7 Device Permission Access: In order to collect certain types of personal information described above, we may request access permissions from your mobile device. You may control the permissions granted to us and may modify such permissions at any time through your device settings.

3. Purposes of Processing Personal Information

3.1 Subject to applicable laws, we may use the personal information we collect for the following purposes:

3.1.1 To perform our contractual obligations and provide the website, products, services, and promotional activities you request, including assisting you in sending messages to other users or groups, and conducting account and contract management (including sales, finance, supplier engagement, customer support, and customer preferences).

3.1.2 To promote our website, products, and services to businesses and individuals, including through in-person promotion, our website, products and services, email, direct mail, telephone or video calls, SMS, push notifications, social media, or online advertising.

3.1.3 To manage and improve our website, products, and services, including displaying content, features, and advertisements tailored to individual interests, identifying users and remembering their information when they return to our services, and analyzing our customer base.

3.1.4 To conduct market research and engage with users to obtain their opinions regarding our website, products, and services.

3.1.5 To exercise our contractual rights, including, where permitted by applicable law, enforcing product service terms, any supplemental terms, or other applicable terms (if any).

3.1.6 To detect, prevent, investigate, or provide notice of violations of policies or terms, fraud, threats of harm, or illegal or criminal activities.

3.1.7 To comply with legal and regulatory obligations; and to fulfill any other purposes for which you provide personal information or to which you have consented.

4. Legal Basis for Processing Personal Information

4.1 Processing Based on Legitimate Interests:

Without overriding your fundamental rights and freedoms, we may process certain data based on our legitimate business interests or those of third parties for the following purposes:

4.1.1 Service Optimization and Monitoring:

Analyzing usage status and system logs to diagnose technical issues and improve website stability and user experience.

4.1.2 Security Protection:

Maintaining the security of our assets and the integrity of our technical networks, and preventing malicious attacks or unauthorized access to our servers.

4.1.3 Compliance and Risk Control:

Enforcing our service terms, resolving legal disputes, conducting internal audits, and preventing, investigating, or reporting activities involving fraud, abuse of storage resources, or unlawful conduct.

4.1.4 Protection of Rights:

Protecting our legitimate commercial interests as a brand owner, as well as the lawful rights and interests of other users.

4.2 Consent:

In certain specific scenarios (such as personalized marketing, collection of precise geolocation data, or access to certain sensitive system permissions), we will obtain your explicit consent in advance. You have the right to withdraw your consent at any time. However, withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.

4.3 Compliance with Legal Obligations:

As a globally operating storage service provider, we are required to comply with applicable laws and regulations in the jurisdictions in which we operate. We may collect or retain your personal information in the following circumstances:

4.3.1 Regulatory Compliance:

To comply with data retention requirements under tax laws, commercial laws, anti-money laundering regulations, and similar obligations (e.g., retaining financial transaction records).

4.3.2 Cooperation with Law Enforcement:

To respond to court judgments, regulatory authority instructions, or other legally binding requests from administrative authorities.

5. Disclosure of Personal Information

5.1 We may share, transfer, disclose, grant access to, or otherwise provide your personal information to third parties in the following circumstances:

5.1.1 Brand Holding / Operating Entities:

We may share personal information among legal entities that own or operate the brand for legitimate business purposes and to provide you with our website, products, and services, in compliance with applicable laws. These entities may use your personal information in accordance with this Privacy Notice.

5.1.2 Legal Requirements:

Where we reasonably believe in good faith that it is necessary, we may disclose personal information to third parties (such as legal advisors, law enforcement agencies, regulatory authorities, or other competent authorities):

(a) in connection with establishing, exercising, or defending legal claims;

(b) to comply with applicable laws or respond to lawful requests and legal processes;

(c) to protect our rights and property, or the rights, personal safety, and property of others, including enforcing our agreements and policies;

(d) to detect, prevent, or investigate fraud or other criminal activities; or

(e) as otherwise required by applicable laws.

5.1.3 Third-Party Processors:

We may share personal information with third-party contractors and service providers under appropriate confidentiality obligations, including email service providers, marketing and advertising providers, telecommunications providers, video shopping support and showroom service providers, SMS service providers, venue operators, payment service providers, logistics companies, and postal carriers (if applicable). These processors are authorized to process personal information only as necessary and in accordance with our instructions.

5.1.4 Advertising Networks and Partners:

To effectively promote our products and services, including delivering advertisements and personalized content across our website, applications, products, services, other websites, and devices, we may share personal information with advertising networks and partners. These partners may automatically collect information from your browser or device through cookies and similar technologies when you access our services. Such information is used to deliver targeted advertisements and provide related services such as reporting, attribution, analytics, and market research.

5.1.5 Independent Advisors:

We may disclose personal information to our independent advisors (such as accountants, auditors, consultants, lawyers, and other external professional advisors), subject to binding contractual, legal, or professional confidentiality obligations.

5.1.6 Other Disclosures:

We may also disclose your personal information to any other third party or publicly disclose it with your prior consent or at your direction.

5.2 Where we engage third-party processors to process your personal information, such processors shall be subject to binding contractual obligations, including: (i) processing personal information only in accordance with our prior written instructions; and (ii) implementing measures to protect the confidentiality and security of personal information, as well as complying with any other requirements under applicable laws. Please note that third parties and business partners may process your personal information in accordance with their own privacy policies and service terms.

6. International Transfer of Personal Information

6.1 Due to the international nature of our business, we may transfer personal information to our brand holding/operating entities and the third parties described above for the purposes set out in this Privacy Notice. Accordingly, your personal information may be transferred to countries or regions whose laws and data protection standards may differ from those in your country of residence, including China.

6.2 Where such transfers occur, we will ensure that appropriate safeguards are in place to protect your personal information and that it is transferred only to jurisdictions recognized as providing an adequate level of data protection.

7. Retention of Personal Information

7.1 We have implemented processes to ensure that your personal information is processed only for the minimum period necessary to achieve the purposes set out in this Privacy Notice. The criteria used to determine retention periods include:

7.1.1 We will retain personal information in an identifiable form only for as long as:

(a) we maintain an ongoing relationship with you (e.g., you are a user of our services or you have been lawfully included in our mailing list and have not unsubscribed); or

(b) it is necessary for legitimate purposes described in this Privacy Notice and we have a valid legal basis for doing so (e.g., your personal information is included in a contract between you and us, and we have a legitimate interest in processing such data to conduct our business and fulfill our obligations; or we are subject to legal obligations to retain your data).

7.1.2 Duration:

(a) any applicable statutory limitation period, including legally required retention periods or any period during which claims may be brought against us in relation to your personal information; and

(b) an additional period of two (2) months following the expiration of the applicable limitation period (to ensure that, in the event a claim is initiated at the end of such limitation period, we have a reasonable amount of time to identify any personal information relevant to that claim).

7.1.3 If any legal claims are initiated, we will continue processing personal information until such claims are fully resolved.

7.2 During the periods described above, processing of your personal information will be restricted to storage and maintenance, except where required for legal claims or compliance obligations.

Upon the expiry of the retention periods specified in Section 7.1 above (where applicable), we will take one of the following actions:

(a) permanently delete or destroy the personal information;

(b) anonymize or de-identify the personal information.

8. Your Privacy Rights

8.1 Subject to applicable laws, you may have the following rights:

8.1.1 The right not to provide personal information to us;

8.1.2 The right to access and obtain a copy of your personal information and related information about its processing and disclosure;

8.1.3 The right to request correction of inaccurate or incomplete personal information;

8.1.4 The right to request restriction of processing based on legitimate grounds;

8.1.5 Where applicable, the right to data portability in a structured, commonly used, and machine-readable format;

8.1.6 The right to request deletion of your personal information, unless we have a lawful basis to retain it. Please note that due to legal or technical constraints, we may not be able to immediately delete such information from backup systems. In such cases, we will isolate the data and cease further processing until deletion or anonymization is possible;

8.1.7 Where we process your personal information based on your consent, you have the right to withdraw such consent at any time (please note that such withdrawal shall not affect the lawfulness of any processing carried out prior to the date on which we receive notice of such withdrawal).

8.2 If you wish to exercise one or more of the rights described above, or if you have any questions regarding these rights, any other provisions of this Privacy Notice, or our processing of your personal information, please contact us using the contact details provided in Section 12 below. Please note that:

8.3 In certain cases, we may require identity verification before fulfilling your request.

8.4 If your request requires the verification of additional facts (for example, to determine whether any processing does not comply with applicable laws), we will investigate and respond within a reasonable period of time.

9. Cookies, Analytics, and Personalized Advertising

9.1 When you access or use our website and services, we and our third-party partners may use cookies and similar technologies to automatically collect certain personal information in order to improve navigation experience, analyze trends, manage the website, track user activity, collect demographic information, and support marketing and customer service efforts. You may control the use of cookies at the browser level; however, disabling cookies may limit certain functionalities.

9.2 You may adjust your preferences regarding cookies and similar technologies. These preferences are device- and browser-specific and must be set separately for each device and browser you use. You may also stop data collection by ceasing use of our services.

9.3 You may further restrict the use of cookies through third-party tools or browser settings. Most browsers allow disabling or deleting cookies, and in some cases blocking future cookies. You may also manage permissions on your mobile device or browser to control privacy-related features, such as location services.

10. Children’s Privacy

Our services are not directed to children under the age of 14 (or the minimum legal age in your jurisdiction). If you are under such age, please cease using this website immediately. We do not knowingly collect personal information from such children. If a parent or legal guardian becomes aware that a child has provided personal information without consent, please contact us at info@maxby.global. We will promptly delete such data upon verification.

11. Information Security

We have implemented technical and organizational measures in accordance with legal requirements to protect personal information, including encryption, access controls, security audits, and incident response mechanisms, to prevent unauthorized access, disclosure, alteration, loss, or damage.

12. Contact Us

If you have any questions regarding this Privacy Notice, please contact us at:

Email: info@maxby.global