Product & Listing Restrictions

Prohibited Items & Restricted Products Policy — XB2BX.COM
Prohibited Items & Restricted Products Policy
v2.0 — 2026 Enforced
Legal & Compliance · Global Marketplace Policy · 180+ Countries

Prohibited Items
& Restricted
Products Policy

XB2BX-POL-PRP-2026-02 · Effective 1 June 2026 · All Jurisdictions

XB2BX.COM is the global B2B marketplace connecting buyers, suppliers, and manufacturers across 180+ countries. This Policy defines, with binding legal force, all goods, services, digital content, and activities that are absolutely prohibited, conditionally restricted, or subject to mandatory licensing on the Platform. It protects XB2BX LTD, its users, and the integrity of global trade.

Zero-Tolerance CategoriesAbsolute Ban
Pre-Approval RequiredRestricted
Licence & DocumentationConditional
Jurisdictional Coverage180+ Nations
Enforcement TriggerImmediate / Automatic
Policy Sections15 Sections
ISO 27001 GDPR Compliant CCPA/CPRA UK GDPR US EAR OFAC Sanctions EU DSA CITES WTO TRIPS AML / KYC DMCA Kimberley Process
Classification → Absolute Prohibition Restricted — Pre-Approval Conditional — Licence Required Permitted with Documentation
Document ID
XB2BX-POL-PRP-2026-02
Effective
1 June 2026
Jurisdiction
Global — 180+ Countries
Governing Law
England & Wales
Review Cycle
Quarterly
UNEU DSAUK GDPR US OFACInterpolWTO CITESDMCA
PRP-01

Scope & Purpose

Policy

This Prohibited Items & Restricted Products Policy ("Policy") is issued by XB2BX Global Commerce Ltd. ("XB2BX", "we", "us"), registered in England and Wales, and applies to every account, listing, transaction, message, and data record on XB2BX.COM ("Platform"). It binds all registered Sellers, Buyers, agents, intermediaries, and any third party accessing the Platform regardless of jurisdiction.

This Policy exists to: (i) ensure compliance with applicable international trade law, export controls, and sanctions regimes; (ii) protect intellectual property and personal data; (iii) maintain marketplace integrity and trust; (iv) prevent fraud, abuse, scams, and compliance risks; (v) limit legal exposure of the Company and its users; and (vi) establish clear and enforceable marketplace standards.

This Policy is incorporated by reference into the XB2BX.COM Terms of Service, Global Seller Agreement, and Global Buyer Agreement. Accepting any of these constitutes full acceptance of this Policy. Ignorance of applicable local, national, or international law is not a defence against enforcement action.
Three-Tier Classification System
CategoryClassificationConsequence of BreachAppeal
Category 1 Absolute ProhibitionImmediate permanent ban, funds frozen, law enforcement referralNo
Category 2 RestrictedListing removed, account suspended, possible legal actionYes — 14 days
Category 3 ConditionalListing held pending licence verification. Removed if unresolved within 7 daysYes — 30 days
Governing Frameworks

This Policy is designed to comply with: EU Regulation (EU) 2021/821 (Dual-Use), EU Digital Services Act (DSA), US Export Administration Regulations (EAR), OFAC Consolidated Sanctions List, UN Security Council Sanctions, WTO TRIPS Agreement, GDPR (EU) 2016/679, UK GDPR, CCPA/CPRA, UK Modern Slavery Act 2015, CITES, Kimberley Process Certification Scheme, DMCA, EU DSA, UK Online Safety Act, and all applicable local consumer protection, trade, and financial regulations.

Jurisdictional Application

XB2BX applies the most restrictive applicable standard across all relevant jurisdictions. Where an item is legal in the Seller's country but prohibited under the laws of any potential destination country, the item is treated as restricted for cross-border transactions. Users are solely responsible for verifying the legality of items in all relevant jurisdictions.

PRP-02

Weapons, Firearms & Munitions

Absolute Prohibition
Zero tolerance. No exceptions. Immediate permanent account termination, funds frozen, and mandatory referral to relevant national and international law enforcement upon detection.
Absolutely Prohibited — Category 1
PRP-02-A
Firearms & Handguns
All pistols, revolvers, rifles, shotguns, automatic weapons, and deactivated models marketed for reactivation
Absolute
PRP-02-B
CBRN Weapons
Chemical, biological, radiological, and nuclear weapons, precursors, or components — zero exceptions under any circumstance
Absolute
PRP-02-C
Explosives & Munitions
Military explosives, grenades, anti-personnel landmines, cluster munitions, IED components, and blasting agents
Absolute
PRP-02-D
Firearm Components
Silencers/suppressors, untraceable "ghost gun" parts, illegal conversion kits, high-capacity magazines where prohibited
Absolute
PRP-02-E
Military-Grade Equipment
Body armour, military-grade night-vision, military drones, and hardware without requisite export licence
Absolute
PRP-02-F
Knives & Edged Weapons
Knives prohibited by law (gravity knives, switchblades, push daggers). Lawful kitchen and hunting knives permitted with age-gate.
Restricted
PRP-03

Narcotics, Drugs & Psychoactive Substances

Absolute Prohibition
Zero tolerance. Mandatory referral to relevant national drug enforcement authority and INTERPOL upon detection.
Absolutely Prohibited — Category 1
PRP-03-A
Controlled Narcotics
Cocaine, heroin, methamphetamine, MDMA, and all Schedule I/II equivalents and global analogues
Absolute
PRP-03-B
Cannabis & THC
All cannabis and THC products (CBD may qualify under Category 3 with documentation in permitted jurisdictions)
Absolute
PRP-03-C
Novel Psychoactives
Synthetic cannabinoids, bath salts, designer drugs, and structural analogues of controlled substances
Absolute
PRP-03-D
Precursor Chemicals
Ephedrine, pseudoephedrine, acetic anhydride, and UN Table I/II listed chemicals used in drug manufacture
Absolute
PRP-03-E
Drug Paraphernalia
Items marketed or predominantly used for drug consumption or manufacture
Absolute
PRP-03-F
Khat & Plant Psychoactives
Khat (Catha edulis), kratom, and plant-based psychoactive substances scheduled in key jurisdictions
Absolute
PRP-04

Human Exploitation & Trafficking

Absolute Prohibition
XB2BX has zero tolerance for any goods, services, or content that facilitates, profits from, or enables the exploitation of human beings. All such listings are immediately removed and reported to the National Crime Agency (UK), UNODC, and relevant international authorities.
Prohibited Items — Category 1
  • Human Trafficking Services: Any service facilitating the transport, harbouring, recruitment, or control of persons through force, fraud, or coercion for any purpose including labour or sexual exploitation.
  • Forced Labour Products: Goods manufactured using forced labour, prison labour, or under conditions constituting modern slavery as defined under the UK Modern Slavery Act 2015 and equivalent international standards (ILO Convention 182).
  • Debt Bondage Services: Financial products or services designed to trap individuals in debt bondage or indenture arrangements.
  • Organ Trade: The sale, brokerage, or procurement of human organs, tissues, or bodily fluids outside of regulated medical institutions.
  • Deceptive Recruitment: Job listings or service offers constituting fraudulent recruitment for the purpose of trafficking or exploitation.
  • Child Labour Products: Goods produced in violation of ILO Convention 182 regarding the worst forms of child labour.
PRP-05

Child Safety & Exploitation Material

Absolute Prohibition
Non-negotiable, zero-exception absolute prohibition. Any content, goods, or services that sexually exploit, endanger, or harm children will trigger immediate removal, permanent ban, and reporting to NCMEC, Internet Watch Foundation (IWF), and relevant national law enforcement without prior notice.
Prohibited Items & Content — Category 1
  • Child Sexual Abuse Material (CSAM) in any format — photographic, video, illustrated, AI-generated, or written.
  • Grooming aids, scripts, or guides targeting minors in any context.
  • Content or products designed to facilitate unsupervised access to children.
  • Products or services marketed to minors that contain explicit, adult, or dangerous content.
  • Any goods, collectibles, or digital content that sexualises minors, including fictional or illustrative form.
Mandatory Reporting Obligation

XB2BX operates automated and human-reviewed detection systems. Detection triggers immediate: (1) content removal; (2) account termination; (3) preservation and submission of all account data to law enforcement; (4) reporting to NCMEC CyberTipline, IWF, and INTERPOL. XB2BX cooperates fully with all subsequent investigations.

PRP-06

Counterfeit, Pirated & Stolen Goods

Absolute Prohibition

XB2BX employs automated IP screening, brand protection partnerships, and human review to detect and remove infringing listings. The Platform participates in the EU Brand Protection Programme and operates notice-and-takedown procedures compliant with DMCA, EU DSA, and UK Digital Markets Act.

Prohibited Items — Category 1
PRP-06-A
Counterfeit Goods
Goods bearing unauthorised trademarks, logos, or branding of any registered trademark holder
Absolute
PRP-06-B
Pirated Software & Media
Unlicensed copies of software, games, films, music, and cracked/patched commercial software
Absolute
PRP-06-C
Stolen Property
Goods acquired through theft, burglary, robbery, fraud, or any criminal means whatsoever
Absolute
PRP-06-D
Fake Credentials & Certificates
Forged identity documents, academic qualifications, professional certifications, and regulatory approvals
Absolute
PRP-06-E
Stolen Data & Credentials
Databases of stolen personal data, leaked credentials, payment card data, or account access details
Absolute
PRP-06-F
Currency Counterfeiting
Reproduction of any national currency, bearer instrument, or monetary instrument; counterfeiting equipment
Absolute
IP Rights Holders: Submit takedown notices to ip@xb2bx.com. Valid notices are actioned within 24 business hours. Enrol in the XB2BX Brand Registry for proactive monitoring and automated takedowns.
PRP-07

Sanctioned Goods, Persons & Jurisdictions

Absolute Prohibition

XB2BX operates a real-time sanctions screening programme covering all Sellers, Buyers, and transactions. Screening is performed at registration, listing creation, and at each transaction against all major sanctions lists.

Screened Sanctions Regimes & Restricted Territories
Sanctions Lists Screened
  • UN Security Council Consolidated List
  • UK HM Treasury (OFSI) Sanctions List
  • EU Consolidated Financial Sanctions List
  • US OFAC SDN & Blocked Persons List
  • US BIS Entity List & Denied Persons List
  • INTERPOL Red Notices & Diffusions
Current Restricted Territories
  • North Korea (DPRK) — total embargo
  • Iran — comprehensive sanctions
  • Syria — broad trade restrictions
  • Russia — sector-specific restrictions
  • Belarus — targeted restrictions
  • + additional per live OFAC/OFSI lists
Conflict Minerals & Blood Diamonds
  • Blood Diamonds: Diamonds not certified under the Kimberley Process Certification Scheme (KPCS) are prohibited.
  • Conflict Minerals (3TG): Tin, tantalum, tungsten, and gold sourced from conflict-affected areas without OECD Due Diligence-compliant certification.
  • Embargoed Goods: Any goods subject to UN, EU, UK, or US trade embargoes regardless of the Seller's or Buyer's location.
  • Terrorism Financing: Products, services, or transactions that directly or indirectly finance terrorist organisations or activities.
PRP-08

Pharmaceuticals & Medical Devices

Restricted
Most pharmaceutical products require pre-approval from XB2BX Compliance before listing. Counterfeit medicines are treated as Category 1 — Absolute Prohibition.
Absolutely Prohibited
  • Prescription-only medicines sold without valid prescription and licensed pharmacy authorisation.
  • Counterfeit, falsified, or substandard medicines including diluted active pharmaceutical ingredients.
  • Unapproved experimental drugs not authorised by the FDA, EMA, MHRA, or equivalent national authority.
  • Any product making unsubstantiated medical claims that violate applicable advertising standards.
Conditionally Permitted — Documentation Required
PRP-08-C1
OTC Medicines
Over-the-counter approved medicines. Valid pharmacy or distributor licence required.
Licensed Only
PRP-08-C2
Class I Medical Devices
Low-risk devices with CE/FDA 510(k) clearance. Registration and declaration required.
Licensed Only
PRP-08-C3
Class II/III Devices
Higher-risk devices require XB2BX Compliance pre-approval plus full regulatory certification.
Pre-Approval
PRP-08-C4
Veterinary Medicines
Licensed veterinary pharmaceuticals. Appropriate veterinary supply authorisation required by jurisdiction.
Pre-Approval
PRP-09

Hazardous Materials & Dangerous Goods

Restricted
All hazardous materials must comply with UN Model Regulations, IATA DGR, IMDG Code (maritime), and ADR/RID (road/rail). Misdeclaration of dangerous goods is a criminal offence in most jurisdictions.
Status by UN Hazard Class
UN ClassCategoryStatusRequired Documentation
Class 1ExplosivesProhibitedNot permitted — see PRP-02
Class 2Flammable/Toxic GasesRestrictedADR licence, SDS, packaging certification
Class 3Flammable LiquidsRestrictedSDS, flash point declaration, certified packaging
Class 4Flammable SolidsConditionalSDS, compliance declaration
Class 5Oxidising SubstancesConditionalSDS, storage & transport certificates
Class 6Toxic SubstancesRestrictedPre-approval + SDS + REACH compliance
Class 7Radioactive MaterialProhibitedNot permitted without XB2BX Enterprise agreement
Class 8/9Corrosives / Misc.ConditionalSDS, packaging standard declaration
PRP-10

Wildlife, Protected Species & CITES

Restricted

XB2BX is a signatory to the Coalition to End Wildlife Trafficking Online and applies the CITES framework to all wildlife-related listings. The EU Timber Regulation (EUTR) and US Lacey Act govern all timber and plant products.

Absolutely Prohibited — CITES Appendix I
  • Live specimens or products from CITES Appendix I species: elephants (ivory), tigers, rhinos (horn), gorillas, chimpanzees, all critically endangered species.
  • Shark fins, bear bile products, pangolin scales, and all wildlife products from CITES Appendix I/II-scheduled species.
  • Birds of prey, parrots, and wild-caught protected species without full CITES documentation.
  • Illegal timber and timber products in violation of EUTR or US Lacey Act.
  • Protected coral, marine species, and any products derived from protected freshwater or marine ecosystems.
Conditionally Permitted — CITES Appendix II/III

Trade in CITES Appendix II and III species may be permitted where the Seller provides: (i) valid CITES export permit; (ii) proof of captive breeding or legal acquisition; (iii) destination-country import compliance documentation. All documentation must be submitted to compliance@xb2bx.com before listing.

PRP-11

Dual-Use Goods & Export Controls

Conditional

Dual-use goods have both civilian and potential military applications. The EU Dual-Use Regulation (2021/821), UK Export Control Order 2008, US EAR (Export Administration Regulations), and equivalent national frameworks apply to all cross-border transactions on XB2BX.

Categories Requiring Pre-Approval & Export Licence
PRP-11-A
Advanced Electronics
High-performance semiconductors, EAR-controlled chips, signal jamming equipment, encryption hardware (>64-bit)
Licence Required
PRP-11-B
Surveillance Technology
Intrusion software, IMSI catchers, facial recognition systems, and tools for mass surveillance
Licence Required
PRP-11-C
Industrial Chemicals
Chemicals on the Australia Group control list or CWC Schedule 2/3; ammonium nitrate (>16%)
Licence Required
PRP-11-D
Aerospace Components
Propulsion systems, guidance components, and aerospace materials listed under USML or CCL
Licence Required
PRP-11-E
Nuclear Materials
Isotopes, reactor components, and materials listed under NSG (Nuclear Suppliers Group) Guidelines
Licence Required
PRP-11-F
Drones & UAVs
Commercial drones above 250g. EASA/CAA registration required. Drones >25 kg MTOW require full export licence review.
Conditional
Submit Export Licence Applications and supporting licences to dualuse@xb2bx.com. Review takes 5–10 business days. Listings may not go live until written approval is received.
PRP-12

Digital Goods, Cybersecurity & Illegal Services

Conditional
Absolutely Prohibited
  • Malware & Exploit Kits: Ransomware, trojans, worms, keyloggers, rootkits, and software designed to compromise systems without authorisation.
  • Hacking-as-a-Service: DDoS-for-hire, credential stuffing tools, botnet access, and unauthorised system-access services.
  • Deepfake & Fraud Tools: AI tools designed to create fraudulent identity documents, impersonation content, or non-consensual intimate imagery.
  • Spam & Phishing Infrastructure: Email lists acquired without consent, phishing kits, spoofing tools, and bulk unsolicited messaging services.
  • Illegal Gambling Services: Online gambling services operating without a valid licence from the applicable regulatory authority.
  • Pyramid & Ponzi Schemes: Any product, service, or investment opportunity constituting a pyramid or Ponzi structure under applicable law.
Conditionally Permitted — Cybersecurity Tools

Legitimate penetration testing software, vulnerability scanners, and cybersecurity research tools may be listed by verified cybersecurity professionals. Sellers must: (i) be registered cybersecurity businesses; (ii) include clear end-use restrictions; (iii) implement purchaser verification. Contact cybersec@xb2bx.com for pre-authorisation.

PRP-13

Financial Instruments, Currency & Precious Metals

Conditional
Absolutely Prohibited
  • Unlicensed Financial Products: Securities, bonds, or investment contracts offered without authorisation from FCA, SEC, or equivalent national financial regulator.
  • Money Laundering Vehicles: Products or services structured to facilitate money laundering, terrorist financing, or tax evasion.
  • Unregistered Crypto Exchange Services: Crypto-to-fiat exchange services not registered with the relevant AML/CFT authority (FCA in UK, FinCEN in US).
Conditionally Permitted — Documentation Required
PRP-13-C1
Bullion & Precious Metals
Gold, silver, platinum. Dealer licence, AML/KYC compliance, and conflict-mineral certification required for transactions >$10,000.
Conditional
PRP-13-C2
Digital Assets / NFTs
Utility NFTs and digital collectibles permitted. Securities-like NFTs require regulatory review.
Conditional
PRP-13-C3
Trade Finance / Invoice
B2B invoice discounting and trade finance. Provider must hold FCA or equivalent authorisation.
Conditional
PRP-14

Food, Agriculture, Alcohol & Regulated Consumables

Conditional

Food and agricultural products require phytosanitary, food safety, labelling, and import certification compliance across all destination jurisdictions.

Requirements by Sub-Category
PRP-14-A
Packaged Food
FDA/FSA business registration, ingredient compliance, accurate nutritional labelling per destination jurisdiction
Licensed
PRP-14-B
Fresh Produce
Phytosanitary certificate, USDA/EU plant health certification, and country-specific import permits
Licensed
PRP-14-C
Alcohol & Spirits
Alcohol trading licence, age-restricted sale compliance, country-of-origin certification. B2B wholesale only in many jurisdictions.
Pre-Approval
PRP-14-D
Tobacco & Nicotine
Tobacco retail licence, health warning compliance, strict age verification. No cross-border sales to heavily regulated markets without licence.
Pre-Approval
PRP-14-E
Agricultural Chemicals
Pesticide, herbicide, and fertiliser registrations required. EU biocide regulation and EPA compliance mandatory.
Pre-Approval
PRP-14-F
Seeds & Plant Material
Phytosanitary certificate, invasive species check, CITES documentation for protected plant species
Licensed
PRP-15

Seller & Buyer Obligations

Compliance
Seller Obligations
  • Listing Accuracy: Sellers must provide complete, accurate, non-misleading product descriptions including correct HS tariff codes, country of origin, material safety data sheets, and all certifications required by the destination market.
  • Sanctions Screening: Sellers must screen all buyers, shipping addresses, and end users against OFAC SDN, EU Consolidated Sanctions, UN Security Council Sanctions, and applicable national lists before accepting any order.
  • Export Controls: Sellers must obtain all required export licences prior to transaction completion and retain export documentation for a minimum of seven (7) years, providing copies to XB2BX within five (5) business days upon request.
  • Intellectual Property: Sellers must ensure they hold all necessary IP licences, distribution rights, and authorisations for all listed products.
  • KYC/AML: Sellers must complete Enhanced Verification (EV) for controlled categories, including business registration, export licences, manufacturing authorisation, and distributor agreements.
Buyer Obligations
  • Import Compliance: Buyers are responsible for ensuring that imported goods comply with all destination-country regulations and that applicable import permits are obtained before confirming orders.
  • End-Use Declarations: For dual-use goods and controlled technologies, buyers must complete a binding End-Use Declaration stating exact intended use and certifying goods will not be diverted to weapons programmes or prohibited parties.
  • KYC Requirements: Buyers transacting above USD $10,000 per calendar quarter, or in any controlled category, must complete full KYC verification including UBO (Ultimate Beneficial Ownership) disclosure.
  • Re-export Controls: Buyers must not re-export goods to prohibited destinations or end-users without obtaining all required re-export licences.
Platform Compliance Certification
By activating an account on XB2BX.COM, you certify under penalty of account termination and civil liability that all listings and transactions comply with this Policy, that you hold all required licences and authorisations, and that you will not knowingly transact with sanctioned entities, embargoed territories, or parties engaged in prohibited end-uses.
PRP-16

Enforcement & Penalties

Enforcement

XB2BX employs automated listing review, AI-assisted image and text scanning, real-time sanctions APIs, manual compliance review, and third-party audit mechanisms to detect Policy violations.

Detection Methods
  • Automated Scanning: AI-powered listing analysis, keyword detection, image recognition, and metadata screening running continuously against all active listings.
  • Real-Time Sanctions Screening: API integration with OFAC, OFSI, UN, and EU databases applied at registration, listing creation, and each transaction.
  • Community Reporting: Any user may report suspected violations via report@xb2bx.com. All reports are triaged within 24 business hours.
  • Regulatory Cooperation: XB2BX cooperates proactively with Customs, national law enforcement, INTERPOL, EUROPOL, and WCO.
Enforcement Tiers
SeverityExample BreachImmediate ActionOngoing Consequence
Critical Prohibited product, CSAM, sanctions breach Immediate suspension, funds frozen, law enforcement referral Permanent ban — no appeal; civil/criminal referral
High Counterfeit goods, false classification, unlicensed controlled sale Listing removal, 30-day suspension, escrow hold Repeat = permanent ban; IP holder notified
Medium Missing certifications, inaccurate HS codes, incomplete EUC Listing paused; 14-day cure period Failure to cure = listing removal; trust score reduced
Low Incomplete descriptions, minor labelling errors Correction notice; 7-day cure period Persistent non-compliance reduces search ranking
XB2BX is legally obligated to report suspected violations of export control law, sanctions regulations, and criminal trade law to relevant authorities including OFAC, Europol, Interpol, and national customs agencies. Voluntary self-disclosure may mitigate, but does not eliminate, regulatory consequences.
PRP-17

Appeals Process

Process

Users who believe an enforcement action was taken in error may submit a formal appeal within 14 calendar days of the enforcement notice. Appeals after this window will not be considered except in exceptional circumstances.

1

Submit Appeal

File via appeals@xb2bx.com or the Appeals Portal at compliance.xb2bx.com/appeals, providing account ID, enforcement notice reference, written statement, and supporting documentation including all licences and certifications.

2

Acknowledgement within 48 Business Hours

XB2BX acknowledges receipt and assigns a case reference number. The assigned compliance officer reviews within 10 business days.

3

Compliance Review Panel Decision

The Compliance Review Panel issues a written decision. For Critical and High severity cases, decisions are reviewed by a senior compliance officer not involved in the original enforcement action.

4

Final Escalation to CCO

If unsatisfied with the panel decision, users may escalate to the XB2BX Chief Compliance Officer within 7 days of the panel decision. The CCO decision is final and binding for Category 2 enforcement actions.

5

External Dispute Resolution

Category 3 determinations may be further escalated to LCIA arbitration under the applicable Seller or Buyer Agreement. Arbitration for EU users is governed by ICC Rules, seated in London.

PRP-18

Intellectual Property & Brand Protection

IP Rights
IP Rights Holder Programme

Verified IP rights holders may enrol in the XB2BX Brand Registry to receive proactive monitoring, automated listing takedowns, and priority escalation. Registration requires proof of trademark registration or pending application in at least one jurisdiction. Contact ip@xb2bx.com.

Notice & Takedown

Any party who believes their intellectual property rights are being infringed may submit a takedown notice to ip@xb2bx.com including: identification of the IP right, evidence of ownership, identification of the infringing material, and a good-faith statement. XB2BX acts on valid notices within 24 business hours. The procedure complies with DMCA, EU DSA, and UK Digital Markets Act.

Counter-Notice

Sellers who believe a takedown was issued in error may submit a counter-notice within 10 business days. XB2BX will reinstate the listing within 14 business days of a valid counter-notice unless the IP rights holder initiates legal proceedings.

Original Designs Protected: XB2BX respects sellers' original product designs and trademarks equally. Abuse of the takedown system to suppress legitimate competition is itself a Policy breach and may result in the complainant's account being suspended.
PRP-19

Data Privacy & Security

GDPR / CCPA

XB2BX processes personal data as both a Data Controller (account and platform data) and Data Processor (transaction data on behalf of sellers). All processing is governed by the XB2BX Privacy Policy and the following binding commitments.

Data Collected & Retention
CategoryData ElementsLegal BasisRetention
Account DataName, email, business details, UBO infoContract performance5 years post-closure
Transaction DataOrder details, payment references, shipping infoLegal obligation (tax/AML)7 years
Compliance DataKYC documents, EUC declarations, sanctions checksLegal obligation7 years
Behavioural DataClick data, search history, session logsLegitimate interestAnonymised at 24 months
Marketing DataEmail preferences, campaign interactionsConsentDeleted on withdrawal
Security Standards
  • All personal data encrypted at rest (AES-256) and in transit (TLS 1.3).
  • ISO 27001 certification maintained with annual third-party penetration testing.
  • Role-based access controls and multi-factor authentication enforced platform-wide.
  • Data breaches affecting EU/UK residents notified to supervisory authorities within 72 hours of discovery.
  • International data transfers outside the EEA/UK covered by Standard Contractual Clauses (SCCs) or UK IDTAs.
XB2BX does not sell or share personal data with third parties for commercial purposes. California users (CCPA/CPRA) have the right to opt out of data sharing and to limit the use of sensitive personal information at any time.
PRP-20

User Rights

Rights

Registered users and data subjects have the following rights regarding personal data processed by XB2BX. Exercise rights by submitting a verified request to privacy@xb2bx.com. All requests receive an initial response within 30 calendar days.

πŸ‘οΈ
Right of Access
Obtain a copy of all personal data held, including processing purposes and any third-party disclosures.
✏️
Right to Rectification
Correct inaccurate or incomplete personal data. Requests actioned within 30 days (extendable to 90 days for complex requests).
πŸ—‘οΈ
Right to Erasure
Request deletion of personal data where no overriding legal obligation requires retention. AML and tax data is subject to mandatory retention periods.
πŸ“¦
Data Portability
Receive account and transaction data in a structured, machine-readable format (JSON/CSV) for transfer to another service.
🚫
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes at any time. Marketing objections actioned immediately.
⏸️
Restriction of Processing
Request processing be restricted while accuracy is contested or an objection is under consideration.
PRP-21

Contact, Reporting & Governance

Contact
Report a Violation

Suspected violations — including prohibited listings, counterfeit goods, sanctions concerns, or data misuse — can be reported through the channels below. All reports are reviewed within 24 business hours. Whistleblowers are protected from retaliation under Platform rules and applicable law including the EU Whistleblower Protection Directive.

Compliance Team
compliance@xb2bx.com
General policy breaches & pre-approval
Report a Violation
report@xb2bx.com
Monitored 24/7
IP Takedowns
ip@xb2bx.com
DMCA / DSA / UK notices
Data Privacy / DPO
privacy@xb2bx.com
GDPR / CCPA rights requests
Appeals
appeals@xb2bx.com
Category 2 & 3 enforcement appeals
Dual-Use Approvals
dualuse@xb2bx.com
Export licence review
Cybersecurity Pre-Auth
cybersec@xb2bx.com
Authorised security tools
Law Enforcement
legal@xb2bx.com
Subpoenas, court orders & requests
Emergency Hotline
+1 (800) XB2-SAFE
Critical safety incidents — 24/7
Legal Disclaimer

XB2BX acts as an intermediary marketplace platform and does not manufacture, own, store, inspect, or directly control third-party products listed by suppliers unless explicitly stated. Users remain solely responsible for: legal compliance, product legality, certifications, import/export obligations, taxes and duties, and licensing requirements in all applicable jurisdictions. XB2BX disclaims liability to the maximum extent permitted under applicable law.

Policy Governance

This Policy is owned by the XB2BX Chief Compliance Officer and reviewed quarterly by the Platform Governance Committee. Material updates are announced to all registered users via email with a minimum 30-day notice period before coming into force, except where immediate updates are required by law. The current version supersedes all prior versions. Archived versions are available upon written request.

Document Control: Version 2.0 · Effective 1 June 2026 · Next scheduled review: 1 September 2026 · Document ID: XB2BX-POL-PRP-2026-02 · Approved by: Chief Compliance Officer, XB2BX Global Commerce Ltd.

XB2BX Prohibited Items & Restricted Products Policy

This Policy forms an integral, binding component of the XB2BX Global Seller Agreement, Global Buyer Agreement, and Terms of Service. All platform users are bound by its provisions from the moment of registration. XB2BX reserves the right to update this Policy at any time in response to changes in international law, sanctions, and regulatory requirements.

Document ID: XB2BX-POL-PRP-2026-02 · Version 2.0 · Effective 1 June 2026 · Governing Law: England & Wales

XB2BX
Governing Law
England & Wales
Review Cycle
Quarterly
Enforcement
Immediate / Automatic
live chat xb2bx
Items (0)
No Record Found

Your Shopping Bag Is Empty