Privacy Policy

This policy explains how CHISA collects, uses, and protects personal data when you use our trade services. It applies to business contacts of registered and prospective trade customers.

CHISA processes business contact information to operate trade accounts, respond to quotation requests, and fulfill orders. We do not sell personal data. We do not share personal information for cross-context behavioral advertising as defined under the CCPA/CPRA.

This site is intended for business / trade users. It is not directed at children.

Account and contact details: name, business email, phone, company name, VAT or business registration number, and shipping and billing addresses.

Transactional data: quotations, orders, contracts, and communications related to your account.

Technical data: limited usage and device information collected through cookies. We use necessary cookies to operate the site and, with your consent, analytics cookies. We do not use advertising or marketing cookies.

Sources: We collect this information from you when you submit forms, create or use a trade account, place orders, or contact us. Limited technical data is collected automatically when you use the site.

We use personal data to verify trade eligibility, prepare quotations, process and fulfill orders, provide documentation, manage contracts, and communicate about your account.

Where you have consented, we use analytics cookies to understand how the site is used. You can change cookie preferences at any time through the consent banner.

Where we send business emails, you can ask to stop marketing-style messages by contacting us or using any unsubscribe link we provide.

Where the EU or UK GDPR applies, we rely on:

• performance of a contract (or steps prior to a contract) for account, quotation, and order processing;
• our legitimate interests in operating a wholesale business, securing the site, and improving our trade services;
• compliance with legal obligations (for example tax and accounting records); and
• your consent for non-essential (analytics) cookies.

We may disclose personal data to service providers who help us run the business, only as needed for those purposes. Typical categories include:

• cloud hosting and infrastructure providers (including hosting located in the United States);
• content delivery / security network providers;
• logistics and freight partners;
• payment, banking, or invoicing providers where relevant to an order; and
• professional advisers (such as legal or accounting) when required.

We do not sell personal data and do not share it for cross-context behavioral advertising.

Wenzhou Chisa Toys Co., Ltd. is established in China. Personal data collected through this site and our trade services is stored and processed in the United States.

Where the EU or UK GDPR applies, transferring personal data to the United States is an international transfer. We use appropriate safeguards required by law—such as the European Commission’s Standard Contractual Clauses (SCCs) or the UK’s equivalent transfer tools—together with technical and organizational measures designed to protect your information. You may contact [email protected] for more information about these safeguards.

GDPR (EU / UK): You have the right to access, rectify, erase, and port your data, and to object to or restrict certain processing. You may withdraw consent at any time where processing is based on consent. You also have the right to lodge a complaint with your local data protection authority.

CCPA / CPRA (California): California residents may request to know the categories and specific pieces of personal information we collect, request deletion, request correction, and opt out of any sale or sharing of personal information. CHISA does not sell or share personal information as those terms are defined under the CCPA/CPRA. We will not discriminate against you for exercising your privacy rights.

How to make a request: Email [email protected] or use our contact form. We may need to verify your identity before fulfilling a request. We aim to respond within 45 days (or within the timeframe required by applicable law). If we need more time, we will let you know.

Data is retained only as long as needed to operate your account and meet legal, tax, and contractual obligations, after which it is deleted or anonymized. Order and invoice-related records may be kept longer where tax or commercial law requires it.

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or disclosure.

We use necessary cookies to operate the site and, with your consent, analytics cookies. We do not use advertising or marketing cookies. You can manage preferences through the consent banner, which records your choices for necessary and analytics categories.

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the site after an update means you should review the revised policy.