Xiafy · Group Est. 2026

Xiafy Group

Privacy Policy

Effective Date: September 2, 2026

Xiafy Group runs xiafy.com and, over time, will operate a group of clothing and fashion brands under the same company. In this policy, "Xiafy," "we," "us," and "the site operator" all mean the same thing.

This policy covers the personal information we collect through xiafy.com and any brand we operate, why we collect it, who we share it with, and what say you have over it. If you're visiting from the EU, the UK, or California, we've written this with your specific rights in mind, and we've marked where those apply.

Information We Collect

We collect a few different kinds of information, depending on how you interact with us.

  • Contact information. If you reach out through a contact form or send us an email, we collect your name, your email address, and whatever you tell us in your message.
  • Order and payment information. Once our brands are live, placing an order means we collect your shipping address, billing address, order history, and confirmation that payment went through. We don't store your full card number. That's handled by our payment processor directly.
  • Device and browser information. When you visit any of our sites, some information gets collected automatically: your IP address, browser type, device type, operating system, the page that referred you, and which pages you looked at.
  • Cookies and similar technologies. We use cookies to run the site and, eventually, to understand how people use it. Our separate Cookie Notice covers this in detail.

We don't ask for or knowingly collect sensitive categories of information, like health data or government ID numbers, unless a specific transaction genuinely requires it, and we'll tell you plainly if that's ever the case.

Why We Collect It

We collect this information to actually run the business: to answer the questions people send us, to process and ship orders once our brands launch, to keep the site working properly and secure, and to understand which pages and products people are actually interested in so we can make better decisions. If you sign up for marketing emails from us or one of our brands, we'll use your email address for that too, and you can opt out any time.

We don't collect information for its own sake. If we're not using something to do one of the things above, we try not to collect it in the first place.

How We Store and Secure It

Your information is stored with reputable service providers rather than on our own servers. That includes our ecommerce platform provider once our brands launch, our email provider for anything you send us, and our hosting provider for the main site. We put reasonable technical and administrative safeguards in place, and we limit access to people who actually need it to do their jobs.

No system is completely immune to a breach, and we can't promise perfect security. What we can promise is that we take it seriously and we're not careless with it.

Who We Share It With

We don't sell your personal information to anyone. We do share it with a limited set of companies that help us actually run the business:

  • Payment processors, such as Stripe or PayPal, to process your transactions securely.
  • Our ecommerce platform provider, which hosts our brands and the order and customer data tied to them.
  • Shipping carriers, so your order actually gets to you.
  • Email and marketing tools, if you've subscribed to updates from us or a brand.
  • Analytics providers, if and when we add them. We're not currently using any analytics tools beyond what's built into our ecommerce platform and hosting provider, but if that changes, we'll update this section.

We may also share information if we're required to by law, if we believe it's necessary to protect our rights or someone's safety, or as part of a business transaction like a merger or sale of assets, in which case your information would typically transfer along with the business.

International Data Transfers

Because our visitors come from all over and our service providers operate in different countries, your information may be processed or stored outside the country you're in, including in the United States. Data protection laws vary by country, and where you're located may not have the same protections as, say, the EU or UK. Where legally required, we rely on service providers that offer appropriate safeguards for these transfers, such as standard contractual clauses.

How Long We Keep Your Information

We keep contact form and email inquiries for as long as we need them to actually respond to you, generally no more than a couple of years, unless there's a reason to keep them longer. Order and payment records are kept as long as required for accounting, tax, and legal purposes, which is typically several years. Information tied to cookies is covered separately in our Cookie Notice.

When we no longer have a reason to keep something, we delete it or anonymize it.

Children's Privacy

Our site isn't directed at children, and we don't knowingly collect personal information from anyone under 13. If you're a parent or guardian and believe your child has given us information without your consent, contact us at [email protected] and we'll delete it.

Your Rights

Depending on where you live, you have certain rights over your personal information.

If you're in the EU or UK, the General Data Protection Regulation (GDPR) gives you the right to access the information we hold about you, correct it if it's wrong, ask us to delete it, restrict how we use it, object to certain uses, and request a copy in a portable format. You also have the right to file a complaint with your local data protection authority if you think we've mishandled your information.

If you're a California resident, the California Consumer Privacy Act and California Privacy Rights Act (CCPA and CPRA) give you the right to know what personal information we've collected about you, request that we delete it, correct inaccurate information, and opt out of the sale or sharing of your personal information. As noted above, we don't sell your information, and we're not currently sharing it for cross-context behavioral advertising either. We also won't discriminate against you for exercising any of these rights.

To exercise any of these rights, email us at [email protected]. We may need to verify your identity before acting on a request, and we'll respond within the time required by applicable law, generally within 30 to 45 days.

Changes to This Policy

We'll update this policy as the business grows, particularly once our brands launch, if we add tools like analytics or advertising, or if we become a formally registered company. When we make a material change, we'll update the effective date at the top and, where appropriate, let you know directly. We'd encourage checking back here occasionally, especially if you've shared information with us before.

Contact Us

For anything related to your personal information or this policy, email [email protected].