Magical Flavour Factory
Privacy notice
Last updated: 5 October 2026
This notice explains how Magical Flavour (Xiamen) Co., Ltd. handles personal information in connection with this website, business inquiries, and supplier-to-business communications.
Who to contact
Magical Flavour (Xiamen) Co., Ltd. is the business responsible for the information described here. For privacy questions, requests, or to stop marketing messages, email [email protected]. You may also reply directly to an email from us.
Our contact address is Room 301, 3rd Floor, Building 2, No. 829, 2nd East Fangshan Road, Xiamen, China.
Information and sources
We handle names, business email addresses, company names, roles, business contact details, inquiry contents, product interests, and correspondence that you provide by email, chat, WhatsApp, or other business communication.
For relevant B2B supplier inquiries, we may obtain business contact information from a company's public website, trade directories, exhibition listings, public business profiles, or previous business correspondence. A public listing is not treated as consent to receive marketing. You can ask us for the source of the contact details used to contact you.
How information is used
We use information to answer inquiries, identify an appropriate purchasing or formulation contact, discuss flavour samples and product documents, prepare quotations, support orders, and maintain business correspondence. Where permitted by applicable rules, we may contact relevant businesses about our flavour ingredients and services.
Where data-protection law requires a lawful basis, the relevant basis depends on the activity: taking requested steps toward a contract or performing a contract; legitimate interests in responding to relevant business inquiries and maintaining business relationships, subject to the individual's rights and reasonable expectations; consent where required; or a legal obligation. A privacy notice does not replace any consent required for electronic marketing.
Your choices and marketing objections
You can object to direct marketing at any time, without charge, by replying to our message with “unsubscribe” or “do not contact”, or emailing [email protected]. Please identify the email address or business contact that should no longer receive marketing.
We record opt-outs in a do-not-contact list to avoid contacting that address again. A minimal suppression record may be kept even when other prospect information is removed. Messages necessary to answer your own request or handle an existing order are separate from marketing.
Website, email, and chat services
The website's inquiry form prepares an email in your own email application. It does not submit the inquiry to a website database. Review the prepared message and send it yourself if you wish to contact us. Once sent, the message is handled through email services.
The website is delivered through Cloudflare and includes a Chatway live-chat widget. These services may process technical information such as IP address, device or browser information, request logs, browsing activity (such as pages viewed, links clicked, and interactions), and cookies or similar storage needed for delivery, security, or chat. Information you enter into live chat is handled through Chatway. Email, hosting, and communication providers may process information to deliver their services.
You can manage cookies through your browser settings. Blocking cookies or similar storage may affect chat functionality. WhatsApp links open a separate third-party service; its own privacy terms apply to your use of that service. See the providers' notices: Cloudflare, Chatway, and WhatsApp.
Handling of customer contact details
Business correspondence is handled through our business email and communication services. Customer and prospect contact records may also be kept in business spreadsheets or other record-keeping tools. Contact details are used for the business purposes described above; this notice does not publish individual customer names, email addresses, or telephone numbers.
Our handling policy requires access to be limited to team members who need the information for sales inquiries, customer support, order administration, or privacy requests, and to service providers supporting those activities. Contact records should contain only information needed for those purposes. Copies and exports must be considered when correcting or deleting information.
When we receive a marketing objection, our policy is to stop marketing to the identified contact, record the objection, and check the do-not-contact record before further marketing. A deletion request does not remove the minimal record needed to prevent future marketing. A new public listing or an import of contact details does not override an existing objection.
Retention periods and review
From 5 October 2026, our standard retention policy uses the periods and criteria below. These are our business retention rules, not a claim that the same period is required by law for every record. Information should be removed or anonymised earlier if it is no longer needed. A necessary legal obligation, ongoing order, dispute, or privacy request may require relevant records to be kept longer, with the reason recorded.
| Record type | Standard period or review trigger | Treatment when no longer needed |
|---|---|---|
| Prospective business contacts from public sources | Up to 12 months from collection if there is no substantive business exchange. A reply about an inquiry, quotation, or sample moves the relevant information into the inquiry category. | Delete or anonymise unnecessary contact information. Sending further unanswered marketing messages does not restart this period. |
| Inquiries, quotations, and sample discussions without an order | Up to 24 months after the last substantive business exchange, to support follow-up questions and sample or quotation discussions. | Delete or anonymise when no active inquiry or other necessary retention reason remains. |
| Customer relationship contact details | During the business relationship, then review at least annually after it ends for any remaining order, support, or legal need. | Remove outdated or unnecessary contact details. Records needed for transactions are assessed separately. |
| Contracts, orders, invoices, and related transaction records | For the applicable accounting, tax, contractual, or legal retention period, taking account of the record type and jurisdiction. | Delete or anonymise after the relevant obligation and any necessary dispute retention end. There is no single universal period for all transaction records. |
| Marketing objections and do-not-contact records | Keep the minimum necessary identifier, objection date, and scope while relevant marketing continues; review necessity at least annually. | Use only to respect the objection and prevent renewed marketing. Remove unrelated prospect details when no longer needed. |
| Chat records, technical logs, and backup copies | Depends on the service, account settings, security purpose, and applicable backup cycle. A business inquiry copied from chat into our contact records follows the relevant inquiry or customer rule above. | Review business copies under this schedule and address provider-held information through the relevant service. Contact us for the arrangements applicable to your interaction. |
This policy calls for a review of contact records at least annually and when a retention period expires or a privacy request is received. Reviews may be manual; publication of this notice does not mean that automatic deletion is enabled or that all historical records have already been reviewed.
Deletion, copies, and backups
For an accepted deletion request, our handling policy is to identify the relevant business email, customer-contact records, spreadsheets, chat records, and copies under our control, and remove or anonymise information that no longer needs to be retained. Where a service provider holds relevant information, the request must also be addressed through that service's available procedures.
Some information may need to remain to meet a legal obligation, resolve a dispute, or respect a marketing objection. If this applies to your request, we will explain the relevant reason and retention criteria. Retaining such a record does not by itself permit further marketing.
Backup copies may not support immediate deletion of individual records. Where this is the case, our policy requires deleted information to be kept out of ordinary business use until the applicable backup is overwritten or expires, and the deletion or suppression to be reapplied if a backup is restored. We do not promise immediate erasure from every provider system or backup; you can ask us about the relevant backup arrangements.
Privacy requests
Depending on applicable law, you may have rights to request access, correction, deletion, restriction, or portability of your personal information, object to its use, and withdraw consent where processing relies on consent. Withdrawal does not affect processing already carried out. You may also complain to the relevant data-protection authority, including your local authority where applicable.
Send requests to [email protected]. Include enough information to identify the relevant correspondence. We may need to verify your identity before disclosing personal information. Please do not send sensitive identity documents unless requested through an appropriate channel.
The business team responsible for the relevant correspondence handles privacy requests received at this address. Our request-handling policy is to identify the records and services involved, verify identity where necessary, assess the request, and explain the action taken or any information that must be retained. Requests are to be handled within the time limit required by applicable law; if clarification or a permitted extension is needed, we will explain this.
Changes to this notice
Updates will be published on this page with a revised date.