XFL collects inquiry details such as name, company, email, phone, WhatsApp, country, product interest, quantity, and message so our team can respond to PET cup and packaging requests.

For marketing analytics, the system is designed to store page views, sessions, country, referrer, and UTM data. Raw visitor IP addresses should not be stored. If IP-derived country detection is used, IP values must be hashed or anonymized before storage.

Customer and inquiry data must not be sold. Access to CRM data is restricted to authorized administrators. Production secrets, mail credentials, auth secrets, and database URLs must remain in environment variables.

Visitors may contact XFL to request correction or deletion of submitted inquiry information where applicable.