# Privacy policy [Source]() Language: en-US How X-Whale collects, uses and shares personal information, including website cookies and authorized Google Ads data, and how to exercise your privacy rights. Last updated: 2026-10-08 ## About this policy X-Whale is operated by Hangzhou Lanjing Zhimao Technology Co., Ltd. (杭州蓝鲸智贸科技有限公司). Registered address: Room C0119, Building 1, Nos. 124–144 (even numbers), Yuhang Road, Yuhang Subdistrict, Yuhang District, Hangzhou, Zhejiang, China. This privacy policy explains how X-Whale ("we", "us" or "our") collects, stores, uses and shares personal information when you visit www.x-whale.com, contact us, book a meeting or use our website design, search optimization, ecommerce and integration services. X-Whale is responsible for deciding how the information covered by this policy is used. For questions, contact contact@x-whale.com. This policy also covers Google Ads account data used for our own business and customers who authorize us to manage their accounts. Browsing this website does not require Google sign-in. Accepting website analytics does not authorize access to a Google account or advertising account. ## What information do we collect? The information we process depends on the services you request, the information you provide and your privacy choices. Please keep the contact information you provide accurate. We do not ask for sensitive personal information; do not include passwords, payment-card details or unnecessary sensitive information in an enquiry. - Information you provide: your name, email address, company and message when you contact us. The website contact form opens a draft in your email application; we receive its contents when you send the email. - Meeting bookings: your name, email address, selected meeting time, time zone and language, processed through our booking provider to arrange the meeting and send an invitation. - Information needed to deliver and protect the website: technical request data such as IP address, requested URL, browser details and access times, processed by hosting and delivery providers. - Optional analytics: after you accept analytics, pages visited, referral and campaign information, device/browser information, performance measurements and interactions such as booking confirmations. Session replays capture interactions such as clicks, scrolling and page changes, with input values and page text masked. Contact-form field values are excluded from analytics events; please do not include personal information in URL parameters. - Authorized third-party information: Google Ads account and campaign data received from Google for the advertising work you authorize, as described in the Google Ads section below. ## How do we use your information? We process information to provide and administer requested services, answer enquiries, arrange meetings, manage authorized advertising work, protect our services, resolve disputes and comply with applicable legal obligations. With your analytics consent, we also evaluate website performance, usage and the effectiveness of our promotional campaigns to improve the experience. Where applicable, we rely on your request or our service agreement, consent for optional analytics, legitimate interests in operating and securing our services, or a legal obligation. Declining analytics does not prevent you from browsing, contacting us or booking a meeting. ## When and with whom do we share information? Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors, or agents ("third parties") who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with our third parties, which are designed to help safeguard your personal information. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will also not share your personal information with any organization apart from us. They also commit to protect the data they hold on our behalf and to retain it for the period we instruct. The categories of third parties we may share personal information with are as follows: Data Analytics Services; Communication & Collaboration Tools. We may disclose information when required by law, to respond to lawful requests, or to establish, exercise or defend legal rights and protect people or systems. Information may also be shared in connection with a merger, financing, sale of assets or acquisition, subject to applicable law and any restrictions on the data concerned. The Google Ads section describes additional limits for Google account data. Our providers may process information outside your country, including in the United States, where privacy laws may differ. Where applicable law requires safeguards for an international transfer, those requirements apply. You can contact us for information about the providers and transfers relevant to your data. ## Google Ads account data For authorized advertising services, X-Whale accesses Google Ads data only for our own accounts and customer accounts whose owners have granted the relevant permissions. We use this data to manage campaigns, review performance, troubleshoot account issues and prepare reports for the agreed service. Depending on the authorized work, data includes account identifiers and settings, campaigns, ad groups, ads, keywords, budgets, and performance measures such as impressions, clicks, cost and conversions. Google Ads authorization does not give us access to Gmail messages, Google Drive files or your Google password. Account records and reports are handled by the people and service systems needed for the authorized work. They are shared with the relevant account owner or authorized customer contacts, Google to perform requested account operations, and providers needed to deliver the agreed service. Use and sharing remain limited to that service and applicable Google API requirements; account data is not part of this website's visitor analytics. We retain account records and reports for the service purposes and legal obligations described in the retention section. Account owners can remove our user or service-account access, or unlink a manager account, in Google Ads. When authorization ends, we stop accessing the account. Contact us to request deletion of retained copies; removing access does not erase records already held by Google or reports previously delivered to you. Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including applicable Limited Use requirements. [Google API Services User Data Policy]() [Google Ads account access]() ## Cookies and other tracking technologies We use cookies and browser storage to remember preferences and, with your permission, measure website use. Necessary storage saves your cookie choice in this browser, including selected categories, a consent identifier, timestamps, language and the policy revision. This record lasts up to 182 days unless you clear it or a new revision requires another choice. We do not send it to a consent-management service. PostHog analytics and Google Tag Manager load only after you accept analytics. PostHog may use cookies and local or session storage to recognize visits and record usage events. Its analytics cookies have a default lifetime of up to one year; local storage can remain until cleared. This website keeps Google advertising storage, advertising user data and ad personalization consent disabled. Analytics permission does not authorize remarketing. Choose necessary cookies only to decline or withdraw analytics consent. We stop new analytics collection, disable PostHog analytics persistence and update Google's consent settings. Withdrawal does not erase events providers have already received; contact us about deletion. Your choice applies to this website in the current browser. You can also remove cookies and local storage through your browser settings, which may reset saved preferences. ## How long do we keep your information? We keep personal information only as long as necessary for the purposes in this policy, including responding to enquiries, arranging meetings, providing services, resolving disputes and meeting tax, accounting or other applicable legal obligations. The period depends on the type of record and the service; there is no single retention period for all information. When information is no longer needed for these purposes, it is deleted or anonymized, subject to applicable legal retention requirements. Analytics retention also depends on the provider's project settings. Cookie and consent-record lifetimes are described separately above and are not the retention periods for server-held analytics or service records. Contact us about the retention or deletion of a specific record. ## How do we keep your information safe? We use reasonable technical and organizational measures to protect personal information and restrict access to people and systems that need it for the stated purposes. No internet transmission or storage method can guarantee complete security. Please use a secure device and connection when sharing information with us, and do not send unnecessary sensitive information. ## Information about minors Our business services are not directed to people under 18, and we do not knowingly collect their personal information or market to them. If you believe a person under 18 has provided information to us, contact contact@x-whale.com so we can review it and take reasonable steps to delete it where required. ## What are your privacy rights? Depending on the law applicable to you, you may have rights to access, correct, delete or receive a copy of your personal information, restrict or object to processing, request portability, withdraw consent and complain to a data protection authority. These rights may be subject to exceptions or limits under applicable law. Where processing relies on your consent, you can withdraw it at any time. This does not affect the lawfulness of processing before withdrawal or processing based on other lawful grounds. Use the cookie controls on this page for website analytics, Google Ads account permissions for advertising access, or contact us for other requests. [Manage cookie preferences]() [Make a privacy request]() ## Do Not Track controls Some browsers offer a Do Not Track (DNT) setting. Our PostHog analytics is configured to respect that browser signal. DNT does not save a cookie choice for you or revoke Google Ads account access. To decline optional website analytics, use the cookie preferences on this page. ## Updates to this policy We may update this policy to reflect changes to our practices or legal requirements. The date above indicates the latest revision. We will bring material changes to your attention where required, and request consent before introducing new optional data uses that require it. ## Access, correction and deletion requests To ask about your information or request access, correction or deletion, email contact@x-whale.com or use our contact page. Describe your request and the interaction or service it concerns. We may ask for information needed to verify your identity or authority to act for the relevant person or advertising account. Please do not send passwords or identity documents unless we specifically request appropriate verification. We will consider requests and respond within the period required by applicable law. If a legal requirement or exception prevents us from fulfilling a request, we will explain it as required. [Contact X-Whale]() ## Contact us about this policy [contact@x-whale.com]()