Privacy policy

Last updated: August 26, 2026

This Privacy Policy explains how personal information is collected, used, retained, transferred, and disclosed when you visit, communicate with, or make a purchase from masterxigift.com.

1. Data Controller

GALAXY STONE CO., LIMITED, operating under the trade name Master Xi, is the data controller responsible for the personal information described in this Privacy Policy, except where a payment provider, ecommerce platform, carrier, advertising platform, or another service provider independently determines how it processes personal information under its own privacy notice.

2. Personal Information We Collect

Depending on how you interact with the website, we may collect:

  • Identity and contact information: name, email address, telephone number, billing address, delivery address, and account details;
  • Order and transaction information: products viewed or purchased, order number, order value, returns, exchanges, refunds, delivery status, and communications about an order;
  • Payment-related information: payment method, payment status, transaction reference, and limited payment details made available by the payment processor. Full payment-card details are generally processed by the applicable payment provider rather than stored directly by Master Xi;
  • Communications: messages, support requests, return evidence, photographs, reviews, survey responses, and other information you choose to provide;
  • Device and usage information: IP address, browser type, device identifiers, operating system, pages viewed, referral source, approximate location, cookie identifiers, and interactions with the website; and
  • Marketing preferences: newsletter subscriptions, consent records, unsubscribe requests, cookie choices, and advertising opt-out preferences.

3. How We Collect Information

We may collect personal information directly from you; automatically through cookies and similar technologies; from payment, ecommerce, delivery, fraud-prevention, analytics, advertising, customer-support, and other service providers; and from another person where that person lawfully provides information in connection with a gift, delivery, authorized request, or business transaction.

4. How We Use Personal Information

We use personal information where reasonably necessary to:

  • process payments and fulfill, dispatch, track, deliver, return, exchange, or refund orders;
  • provide customer service and communicate about purchases, accounts, requests, and policy updates;
  • operate, secure, troubleshoot, personalize, measure, and improve the website and our services;
  • detect, investigate, and prevent fraud, misuse, security incidents, and unlawful activity;
  • send marketing communications where permitted and manage communication preferences;
  • measure advertising and understand website activity, subject to applicable consent and opt-out requirements;
  • maintain business, tax, accounting, warranty, product, delivery, and dispute records; and
  • comply with legal obligations, lawful requests, and enforceable agreements.

5. Legal Bases Where Required

Where applicable law requires a legal basis, we process personal information as necessary to perform a contract with you, comply with legal obligations, pursue legitimate business interests that are not overridden by your rights, protect vital or legal interests, or act with your consent. You may withdraw consent at any time where processing is based on consent, without affecting processing that occurred before withdrawal.

6. How We Disclose Personal Information

We may disclose personal information only as reasonably necessary to ecommerce, hosting, payment, fraud-prevention, information-technology, cloud-storage, analytics, advertising, communication, customer-support, fulfillment, shipping, tracking, and professional service providers; banks, payment networks, customs authorities, carriers, delivery partners, and other parties involved in completing an order; government authorities or other parties where required or permitted by law; professional advisers and insurers; and a purchaser or successor in connection with a proposed or completed business transaction.

We do not sell personal information in exchange for money. Some privacy laws may define certain advertising-related disclosures as a “sale,” “sharing,” or use for targeted advertising. Where those laws apply, you may exercise the opt-out choices described below.

7. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, local storage, and similar technologies for essential website operation, security, checkout, preferences, analytics, and advertising.

Where required, non-essential technologies are used based on your consent or another lawful basis. You may manage available choices through the website’s cookie controls, your browser settings, or the opt-out methods below. Blocking essential cookies may prevent parts of the website or checkout from working correctly.

8. Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and for legitimate legal, accounting, security, fraud-prevention, warranty, customer-service, and dispute-resolution needs.

  • Order, payment, tax, and accounting records are retained for the period required by applicable tax, accounting, and commercial laws.
  • Account information is generally retained while the account remains active and afterward only where required for security, fraud prevention, legal compliance, or dispute resolution.
  • Customer-service, return, warranty, and dispute records are retained until the request is resolved and for any additional period reasonably necessary to document the resolution or address a related claim.
  • Marketing information is retained until you unsubscribe, withdraw consent, or the information is no longer reasonably needed. We may retain a limited suppression record so that we can respect an unsubscribe request.
  • Cookie and device information is retained according to the applicable cookie’s duration or until it is no longer needed for the stated purpose.

When information is no longer required, we take reasonable steps to delete, anonymize, or securely isolate it, unless continued retention is required or permitted by law.

9. International and Cross-Border Processing

Master Xi is operated by a company in Hong Kong SAR and serves customers in the United States and Singapore. Personal information may therefore be transferred to, stored in, or processed in Hong Kong SAR, the customer’s delivery country, and other countries where our service providers, payment processors, technology providers, carriers, or professional advisers operate.

Privacy and data-protection laws may differ between countries. Where applicable law requires it, we use recognized safeguards such as contractual protections, legally approved transfer mechanisms, consent, or transfers to jurisdictions recognized as providing adequate protection.

10. Your Rights

Depending on your location and applicable law, you may have the right to request access, correction, deletion, or a portable copy of certain personal information; object to or request restriction of certain processing; withdraw consent where processing is based on consent; opt out of certain targeted advertising, sale, or sharing activities; and complain to an applicable privacy authority.

These rights are not absolute. We may need to verify your identity and may retain information where permitted or required by law.

11. Marketing and Advertising Opt-Out Choices

  • Email marketing: Use the unsubscribe link in a marketing email or contact service@masterxigift.com. Unsubscribing from marketing does not prevent transactional messages about an order, account, security issue, or service request.
  • Targeted advertising or data sharing: Where applicable, use our Data Sharing Opt-Out page.
  • Cookie choices: Use the website’s available cookie controls or browser settings.
  • Global Privacy Control: Where required by applicable law and technically recognized by the website, an enabled Global Privacy Control signal will be treated as an opt-out request for the applicable browser or device.
  • Consent withdrawal or privacy request: Email service@masterxigift.com.

12. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no website, transmission method, or storage system can be guaranteed to be completely secure. Do not send full payment-card details or other highly sensitive information through ordinary email or messaging channels.

13. Children

The website is not directed to children, and we do not knowingly collect personal information from children below the minimum age required by applicable law. A parent or guardian who believes a child has provided personal information may contact us to request review and deletion.

14. Third-Party Websites

The website may link to third-party websites or services. Their own privacy notices apply when you use them. We are not responsible for the privacy or security practices of an unaffiliated third party.

15. Policy Changes

We may update this Privacy Policy to reflect changes in our practices, services, or legal obligations. We will publish the revised version on this page, update the “Last updated” date, and provide any additional notice required by applicable law.

16. Contact and Privacy Requests

Data controller: GALAXY STONE CO., LIMITED
Trade name: Master Xi
Address: 3 Tai Yau Street, San Po Kong, Kowloon, Hong Kong SAR
Email: service@masterxigift.com
Phone / WhatsApp: +65 9800 7789
Customer service hours: Monday–Friday, 9:00 AM–6:00 PM, Singapore Time (SGT, UTC+8)
Response time: Within 1 business day