Privacy Policy

Last updated: 16 October 2026

This Privacy Policy explains how XTZ Padel collects and uses personal information through xtzpadel.com, project enquiries, Facebook and Instagram lead forms, email and WhatsApp communications.

1. Who is responsible for your information?

XTZ Padel is operated by Hangzhou Xintianzan Technology Co., Ltd., based in China. We are responsible for the enquiry information we receive and use for our business.

For privacy questions or requests, email info@xtzpadel.com with the subject “Privacy Request”.

2. Information we collect and where it comes from

• Website enquiries: the name, email address, country, court quantity, preferred court type and project details you submit through our quotation form.
• Facebook and Instagram lead forms: the contact details and project answers you choose to submit, which may include your name, email, phone or WhatsApp number, company or business role, project location, planned court quantity and purchase timeframe. Some contact fields may be prefilled by Meta; you can review them before submitting.
• Email and WhatsApp: your contact or profile details, messages, correspondence history and any specifications, drawings or other files you send us.
• Website activity and security information: information such as IP address, browser and device details, pages visited, referral source, timestamps, cookie identifiers and signals used to detect automated or abusive requests.

Providing enquiry information is voluntary. Without enough contact and project details, we may be unable to respond or prepare a relevant quotation. Please avoid sending sensitive personal information or information about other people that you are not authorised to share.

3. How we use information

We use information to respond to enquiries, discuss project requirements, recommend court specifications, prepare quotations, follow up a requested project, provide customer support, operate and protect our website, and understand the performance of our website and advertising.

Where data protection law requires a legal basis, this may be steps requested before a contract, performance of a contract, our legitimate interests in handling business enquiries and securing our services, compliance with legal obligations, or consent where required. For business contacts acting for an organisation, our legitimate interest is communicating with that organisation about its enquiry.

Submitting an enquiry is not blanket consent to unrelated promotional messages. Any promotional use must follow the permissions and requirements that apply to the relevant channel and location. You can ask us to stop promotional contact at any time.

4. Email and WhatsApp enquiry records

We receive, store and follow up enquiries using business email and WhatsApp. Correspondence may remain in our mailboxes, WhatsApp conversation history, work devices and associated backups. When you provide contact details for an enquiry, we may use email or WhatsApp to discuss that enquiry and its next steps.

WhatsApp is a separate service provided by a Meta company. Its handling of account, device and service information is described in the WhatsApp Privacy Policy. Email delivery also involves our email service providers. A deletion request to XTZ Padel concerns the records we control; providers may retain separate records under their own policies or legal obligations.

5. Cookies, analytics, advertising and form protection

Our website uses the following services:

• Google Analytics: helps us understand website visits and usage. Google can receive page URLs, IP and device information and cookie or other identifiers. See how Google uses information from partner sites.
• Meta Pixel: records page views and related technical signals to measure advertising and support advertising audiences. Information can include the page URL, browser and device information, IP address, timestamps and Meta-related identifiers. Depending on Meta settings, matching features may also process hashed contact identifiers. Meta may associate information with a Facebook or Instagram account and use it under its Privacy Policy. Hashing does not necessarily make information anonymous.
• Cloudflare Turnstile: helps protect enquiry forms from bots and abuse by processing browser, device, network and interaction signals. See Cloudflare’s Privacy Policy.
• Website functions: cookies or similar storage may support language choices, security and administrative sessions.

You can manage or delete cookies through your browser, use content-blocking tools, and review Meta advertising preferences and Google advertising preferences. Google also provides an Analytics opt-out browser add-on. These controls have different scopes and do not necessarily block every request or remove data already collected.

Website tracking services can run when a page loads unless blocked by applicable browser or site controls. This notice explains data use; reading it or continuing to browse is not, by itself, consent to advertising tracking where separate consent is required.

6. Who may receive information

Information may be available to the XTZ Padel team handling your enquiry and to providers of website hosting, email delivery, communications, analytics, advertising, security and backup services as relevant to their functions. Meta processes information submitted through its lead forms before making the submitted lead available to us.

If a project proceeds, information needed to carry out your instructions may also be shared with providers involved in the agreed service or delivery. We may disclose information where required by law or reasonably necessary to address fraud, security issues or legal claims. Third-party platforms may also process information for purposes described in their own privacy policies.

7. International processing

Our business operates from China, so enquiries and correspondence can be accessed and handled there. Our technology and communication providers may process information in other countries, including the United States. Privacy protections and legal requirements may differ from those where you live.

The providers linked above explain their own international processing and transfer arrangements. Contact info@xtzpadel.com if you need information about processing locations or safeguards relevant to your enquiry. This policy does not represent that every destination has the same legal protections as your home country.

8. How long we keep information

Retention depends on the purpose and circumstances. Enquiry correspondence is kept while needed to handle the request, follow an active project and maintain relevant business records. Contract, accounting and dispute-related records may need longer retention under applicable obligations. Security logs, analytics records and backups have separate operational or provider retention cycles.

When deciding whether information is still needed, we consider the status of the enquiry, the last relevant contact, any continuing business relationship, applicable record-keeping duties and the need to establish or defend legal claims. You may request deletion; some information may need to be retained for a permitted purpose or remain in backups until their normal replacement cycle.

9. Your choices and privacy requests

Depending on applicable law, you may have rights to access, correct or delete personal information, restrict its use, obtain a portable copy, withdraw consent, or object to certain processing. Withdrawal does not affect processing lawfully carried out before withdrawal. You may also complain to the appropriate data protection authority.

You can object to direct marketing and ask us to stop promotional contact at any time. Reply to our email or WhatsApp message, or email info@xtzpadel.com. You can also state which channel you prefer for continuing a requested project discussion.

For other requests, describe what you need and identify the email address or phone number used for your enquiry. We may request proportionate information to verify your identity. We will handle requests within the time required by applicable law. Requests concerning a Meta, WhatsApp or Google account may also need to be made directly to that provider.

10. Security, children and changes

Our website uses HTTPS. No transmission or storage method is completely secure; please send only information relevant to your enquiry. Our commercial project services are intended for adults, and our forms are not designed to collect information from children. If you believe a child has provided information, contact us so we can review it.

We may update this policy to reflect changes in our services or data practices. The date at the top identifies the latest version. For questions, contact Hangzhou Xintianzan Technology Co., Ltd. / XTZ Padel at info@xtzpadel.com.