1Who we are
X-Hub Distribution, operated by H Global Commerce, Inc., is a third-party logistics (3PL) provider incorporated in California, United States. We operate fulfillment warehouses in Fontana, California and Clifton, New Jersey.
Our customers are businesses — e-commerce sellers and importers who store inventory with us and ask us to receive, store, pick, pack and ship their goods.
We are a service provider acting on our customers' instructions. We do not sell products to consumers, and we do not build consumer profiles.
Contact for privacy matters: info@x-hub.com
2What information we handle
2.1 Business customer information
Company name, contact names, business email addresses and phone numbers, billing details, and the login credentials of the staff accounts we issue.
2.2 Recipient information (from our customers' orders)
To ship a parcel we necessarily handle the recipient's name, delivery address, and where provided a contact phone number or email. This information reaches us in one of two ways:
- our customer uploads or enters it when placing an order with us, or
- we retrieve it, with that customer's explicit authorization, from the sales channel where
the order was placed (for example the Amazon Selling Partner API, Shopify, or TikTok Shop).
We handle this information solely to fulfil and deliver that specific order.
2.3 Operational records
Inventory counts, rack locations, scan history, shipment tracking numbers, invoices, and system audit logs.
2.4 What we do NOT collect
We do not collect payment card numbers, bank account numbers of consumers, government identifiers, biometric data, precise device location, or any special-category personal data. We do not use cookies or trackers for advertising.
3Why we handle it, and on whose instruction
We process recipient information only as a service provider, on the documented instructions of the customer who owns that order. Specifically, we use it to:
- print the carrier shipping label required to deliver the parcel;
- hand the parcel to the carrier (FedEx, UPS, USPS or a regional carrier) selected for it;
- return the resulting tracking number to the customer and to the sales channel, so the
buyer can track their delivery;
- investigate delivery exceptions, returns and claims for that order;
- meet our own legal, tax and record-keeping obligations.
We never use recipient information for marketing, never sell or rent it, never share it with data brokers, and never use it to build profiles or train models.
4Who we share it with
| Recipient | What they receive | Why |
|---|---|---|
| The shipping carrier for that parcel | Only what is printed on the shipping label: recipient name, delivery address, and where required a phone number | To deliver the parcel |
| The customer who owns the order | Their own order data | It is theirs |
| The sales channel (e.g. Amazon) | The carrier and tracking number | To mark the order shipped |
We do not share recipient information with any other third party. We do not transfer it outside the United States except as needed to deliver an international parcel.
If we are ever compelled to disclose information by law, we will disclose only what is legally required, and where legally permitted we will notify the affected customer first.
5How long we keep it
| Data | Retention |
|---|---|
| Recipient name, address, phone | Purged 90 days after the order ships, automatically and daily |
| Order number, dates, amounts, tracking number | Retained for accounting and tax purposes |
| System audit logs (including records of who accessed recipient data) | 13 months |
| Business customer account records | For the duration of the business relationship, then per our legal obligations |
Purging is automated and irreversible: after the retention period, the recipient's name, address and phone number no longer exist in our systems. The remaining order record contains no personal data.
6How we protect it
- In transit: all connections to our systems use TLS (HTTPS).
- At rest: integration credentials are encrypted with AES-256. Databases are not reachable
from the public internet.
- Access control: every employee has an individual named account — shared logins are not
permitted. Access is granted by role, and recipient information is visible only to the staff who need it to fulfil that order. Elevated permissions are limited to a small named group.
- Audit: every access to recipient information is logged with the account, timestamp and
volume. These logs are reviewed regularly and retained for 13 months.
- Least data: we request only the data fields required to ship an order, and we purge them
on schedule (section 5).
No system is perfectly secure, but we design for the smallest possible exposure: hold the least data, for the shortest time, visible to the fewest people.
7Your rights
If you are a buyer whose parcel we shipped: we hold your information only because the seller you bought from asked us to deliver your order. Please contact that seller first — they are the controller of your data and can instruct us directly. You may also write to us at info@x-hub.com and we will assist the seller in responding.
If you are our business customer: you may request access to, correction of, or deletion of the data we hold on your behalf at any time, and you may revoke any sales-channel authorization you granted us (for example from Manage Your Apps in Amazon Seller Central). When you revoke, we stop retrieving new data immediately.
Depending on where you live, you may have additional rights under the California Consumer Privacy Act (CCPA/CPRA) or other laws. We do not sell or share personal information as those terms are defined under the CCPA.
8Data incidents
We maintain a documented incident response plan. If we become aware of a security incident affecting personal information, we will investigate immediately, contain it, and notify the affected customers — and where the incident involves data obtained through a sales-channel integration, that channel — without undue delay and within the timeframe required by our agreements and applicable law.
9Changes to this policy
We will post any changes on this page and update the "Last updated" date above. Material changes affecting our business customers will also be communicated to them directly.
10Contact
H Global Commerce, Inc. (X-Hub Distribution) Email: info@x-hub.com · Phone: +1 909-969-3727 Web: https://www.x-hub.com