Who we are
This website, xml-cnc.com, is operated by Shenzhen Xinmingliang Technology Co., Ltd. (“XML CNC”, “we”, “us”), a precision CNC machining manufacturer with a production facility in Guangming District, Shenzhen, Guangdong, China.
- Contact for privacy matters: [email protected]
- Telephone: +86 180 2878 3722
- Business scope: custom CNC machining, sheet metal fabrication, die casting and metal finishing services supplied to business customers (B2B).
This policy explains what personal data we collect through this website, why we collect it, how long we keep it, and what rights you have. It applies to visitors and to business contacts who submit enquiries through our forms.
What data we collect and why
1. Information you give us through forms
Our quote request form asks for your name, company, email address, phone number, the service you need, your project details, and optionally a drawing or 3D file. We use this information solely to prepare and send you a quotation, to answer technical questions, and to follow up on an enquiry you initiated.
Legal basis: performance of a contract or steps taken at your request before entering a contract (GDPR Art. 6(1)(b)), and our legitimate interest in responding to business enquiries (Art. 6(1)(f)).
Files you upload are used only to assess manufacturability and to price the part. We do not share customer drawings with third parties and we do not use them in marketing material without written permission.
2. Information collected automatically
Like most websites, our server logs record your IP address, browser type, referring page, pages visited and timestamps. We use these logs to keep the site secure, diagnose faults and understand aggregate traffic. Server logs are retained for up to 90 days.
3. Cookies and similar technologies
We use a small number of cookies. The table below lists what is set and why.
| Category | Purpose | Examples | Set by |
|---|---|---|---|
| Strictly necessary | Keep the site working: session handling, form protection, security, and remembering your cookie choice. | WordPress session cookies, spam-protection cookies, cache cookies | xml-cnc.com |
| Analytics | Understand how visitors use the site so we can improve it. Collected in aggregate; not used to identify individuals. | Google Analytics 4 (_ga, _ga_*) | Google LLC |
| Advertising | Measure which advertisements and keywords led to an enquiry, and show relevant advertising on other sites (remarketing). | Google Ads conversion tags, Meta Pixel (_fbp) | Google LLC, Meta Platforms |
Strictly necessary cookies are set because the site cannot work without them. Analytics and advertising cookies are only set after you accept them through the cookie banner. If you decline, the site continues to work normally and no analytics or advertising cookies are written.
4. Advertising platforms
When you arrive from an advertisement, our analytics and advertising tags record that a visit occurred and, if you submit an enquiry, that a conversion occurred. These platforms may combine this data with information they already hold about you under their own privacy policies. We do not receive your personal identity from them — only aggregate and campaign-level reporting.
- Google: policies.google.com/privacy
- Meta: facebook.com/privacy/policy
Who we share data with
We do not sell personal data. We share it only with service providers who help us operate the business, and only as far as necessary:
- Email and hosting providers that transmit and store our correspondence.
- Analytics and advertising platforms listed above, in aggregate or hashed form.
- Our internal CRM, used by our sales engineers to handle your enquiry.
- Authorities, where we are legally required to disclose.
Where data is transferred outside your country (for example to our China-based engineering team), we rely on appropriate safeguards such as standard contractual clauses.
How long we keep your data
| Data | Retention |
|---|---|
| Quote enquiries and correspondence | Up to 3 years from last contact, so we can pick up a project where it left off |
| Customer project files and drawings | For the duration of the supply relationship plus 3 years |
| Server access logs | Up to 90 days |
| Analytics data | Up to 14 months |
| Advertising conversion data | As configured in the platform, typically 14 months |
Your rights
Depending on where you live, you may have the right to:
- Ask what personal data we hold about you and receive a copy.
- Have inaccurate data corrected.
- Ask us to delete your data, where we do not have a legal obligation to keep it.
- Object to processing based on legitimate interests, including direct marketing.
- Ask us to restrict processing while a complaint is investigated.
- Receive your data in a portable format.
- Withdraw consent for analytics or advertising cookies at any time, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, email [email protected] with “Privacy request” in the subject line. We respond within 30 days. You also have the right to complain to your local data protection authority.
How to control cookies and advertising
You can change your cookie choice at any time using the cookie settings link in the footer of every page. You can also control cookies through your browser settings — most browsers let you block or delete cookies for specific sites.
To opt out of personalised advertising specifically:
- Google: adssettings.google.com
- Meta: facebook.com/adpreferences
- Industry-wide (US/EU): optout.aboutads.info or youronlinechoices.eu
You can also enable the “Do Not Track” or “Global Privacy Control” signal in your browser; we honour these signals where technically possible.
Security
The site is served over HTTPS. Access to enquiry data is restricted to the sales and engineering staff who need it to answer you. We keep our software patched and use server-level protections against malicious traffic.
Children
This is a business-to-business website. We do not knowingly collect data from anyone under 16. If you believe a child has submitted data, contact us and we will delete it.
Changes to this policy
If we change how we handle personal data, we update this page and revise the date below. Material changes affecting existing enquiries will be communicated by email where we hold an address.
Last updated: 29 October 2026
