GDPR Notice

2. Data controller

The controller for personal data processed through this service is:

• Xiangshui Racing Pigeon Network
• Services: Online racing pigeon auction and fixed-price trading platform
• Email: [email protected]
• Phone: (+886) 0909-256-829
• Data protection contact: Xiangshui Privacy Team

3. Legal bases for processing

Under Article 6 GDPR we rely on the following bases, depending on the purpose:

• Performance of a contract: creating and maintaining your account, and running bidding, auction close, payment, and settlement.
• Legal obligation: keeping accounting and tax records and responding to competent authorities.
• Legitimate interests: preventing fraud, bid rigging, and account takeover, and keeping the marketplace secure.
• Consent: the newsletter, and any non-essential cookies we may introduce in future. You can withdraw consent at any time; withdrawal does not affect processing carried out beforehand.

4. Our current cookie position

This site currently sets only the strictly necessary cookie that keeps you signed in. There are no tracking, analytics, or advertising cookies, and no Google Analytics, advertising pixels, or cross-site tracking tools embedded anywhere on the site.

The cookie banner shown on your first visit exists to record your choice about non-essential cookies. Because there are none today, choosing "decline non-essential cookies" changes nothing about how the site works — it simply stores your preference. If we ever introduce non-essential cookies, we will update this page and the Privacy Policy first, and enable them only after obtaining consent.

5. Your rights under the GDPR

• Access: confirm whether we process your data and obtain a copy.
• Rectification: have inaccurate or incomplete data corrected.
• Erasure (right to be forgotten): have your data deleted, except where we must retain it by law.
• Restriction: have processing paused in certain circumstances.
• Portability: receive the data you provided in a structured, commonly used, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: withdraw any consent you previously gave, at any time.
• Complain: lodge a complaint with your local data protection supervisory authority.

6. How to exercise your rights

Email [email protected] with "GDPR request" in the subject line, telling us which right you want to exercise and the email address registered with your account. To avoid disclosing data to the wrong person we may need to verify your identity first. We aim to respond within 30 days of receiving a request; complex cases may be extended, and we will tell you within the original period if that happens. There is no charge, though we may charge a reasonable fee or refuse to act on manifestly unfounded or excessive requests.

7. International transfers

Our servers and database are located in secure cloud data center regions. If you use the site from the EU or UK, your data is transferred there for processing. For such transfers we apply appropriate safeguards required by Chapter V GDPR (including standard contractual clauses and end-to-end encryption).

8. Automated decision-making

We do not carry out solely automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you. Auto bidding only raises bids up to the maximum you set yourself — it acts on your instruction and does not score or categorise you.

9. Complaints to a supervisory authority

If you believe our processing breaches the GDPR you can contact us directly, and you also have the right to lodge a complaint with the data protection supervisory authority where you live, where you work, or where the alleged infringement took place.