Privacy Policy
Xicart (“we”, “us”) sells mobile device parts and accessories through xicart.com. This policy explains what personal data we collect, why we collect it, who we share it with, and the choices you have. It applies to this website and to orders placed through it.
Last updated: 30 October 2026.
1. What we collect
- Account and order data. Name, email address, billing and shipping addresses, telephone number, and the contents of your orders. This is what we need to take payment and deliver goods.
- Payment data. Payments are processed by our payment providers. We receive a confirmation, the last four digits of the card where applicable, and the transaction reference — we never store full card numbers.
- Technical data. IP address, browser type, device type, pages viewed and referring URL, collected through cookies and server logs.
- Communications. Emails, contact-form messages and support conversations with us.
- Marketing preferences. Whether you have opted in to our newsletter.
2. Why we use it
- To process and deliver your orders, and to handle returns, warranties and refunds.
- To create and secure your account, and to let you view your order history.
- To answer support requests and resolve disputes.
- To detect and prevent fraud, abuse and unauthorised access.
- To send you service messages about your orders — these are not marketing and you cannot opt out of them while you have an active order.
- To send marketing email only where you have subscribed. You can unsubscribe at any time using the link in every email.
- To understand how the site is used so we can improve it, using aggregated analytics.
3. Legal bases
Where the GDPR or similar law applies, we rely on: contract (to fulfil your order), legitimate interests (fraud prevention, site security, service improvement), consent (marketing email, non-essential cookies) and legal obligation (tax and accounting records).
4. Cookies
We use strictly necessary cookies to keep your cart and session working, and — where you allow it — analytics cookies to measure site usage. You can block or delete cookies in your browser settings; blocking necessary cookies will break the cart and checkout.
5. Who we share data with
We share the minimum necessary with:
- Payment providers, to process your payment.
- Shipping carriers and fulfilment partners, to deliver your order — this includes your name, address and phone number.
- Email and hosting providers that operate our infrastructure.
- Professional advisers and authorities, where the law requires it or where necessary to establish or defend a legal claim.
We do not sell your personal data.
6. International transfers
We ship worldwide and some of our service providers operate outside your country. Where data leaves your region we rely on appropriate safeguards such as standard contractual clauses.
7. How long we keep it
Order and invoice records are kept for as long as tax and accounting law requires (typically 6–10 years depending on jurisdiction). Account data is kept while your account is open. Marketing preferences are kept until you unsubscribe. Support correspondence is kept for up to 3 years.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing, and to withdraw consent. To exercise any of these, email admin@xicart.com. We will respond within 30 days. You also have the right to complain to your local data protection authority.
You can update your name, addresses and password at any time from My Account.
9. Security
We use HTTPS across the site, hash account passwords, and restrict access to order data to staff who need it. No system is perfectly secure; if a breach affects your data we will notify you and the relevant authority as required by law.
10. Children
Our store is not directed at children under 16 and we do not knowingly collect their data.
11. Changes and contact
We may update this policy; the version published here applies. Questions? Email admin@xicart.com or use our contact form.