GDPR COMPLIANT

Privacy Policy

TIOSOS is committed to protecting your privacy and ensuring transparent data practices in all our B2B sourcing activities.

Last Updated: December 2024 | Effective Date: December 2024 | Contact: [email protected]

Introduction

TIOSOS ("we," "our," or "us") operates as a China-based sourcing and supply chain support partner for global B2B clients. This Privacy Policy explains how we collect, use, process, and protect your personal information when you interact with our services, website, or business operations.

We are committed to compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) for European Union clients, and maintaining the highest standards of data security and transparency.

Information We Collect

Business Contact Information

  • Company name and business details
  • Name, title, and business email address
  • Phone number and business address
  • Product sourcing requirements and specifications

Technical Information

  • IP address and device information
  • Browser type and operating system
  • Website usage patterns and preferences
  • Communication logs and interaction history

How We Use Your Information

Legitimate Business Purposes

Provide sourcing and supply chain services
Coordinate factory communication and quality reviews
Process orders and track shipments
Respond to inquiries and provide customer support
Maintain business records and compliance
Improve our services and website functionality

Cookies and Website Analytics

Essential Cookies

Required for basic website functionality and security.

Always Active

Analytics Cookies

Help us understand website usage and improve user experience.

Optional

Communication Cookies

Enable contact forms and business communication features.

Functional

Cookie Management: You can control cookie preferences through your browser settings. Disabling certain cookies may limit website functionality but will not affect our core B2B services.

Third-Party Services

Email and Communication

  • Email Service Providers: Professional email hosting for business communications
  • Contact Forms: Secure form processing for inquiries and service requests
  • WhatsApp Business: Encrypted messaging for real-time client communication

Analytics and Security

  • Website Analytics: Privacy-focused analytics to improve user experience
  • Security Services: SSL certificates and DDoS protection
  • Cloud Storage: Secure document and file sharing for project materials

Third-Party Data Processing

We only work with third-party services that provide adequate data protection guarantees. All service providers are carefully vetted for GDPR compliance and data security standards.

Your Rights and Data Protection

Under GDPR, You Have the Right To:

Access Your Data

Request a copy of personal data we hold about you

Rectify Inaccurate Data

Correct any incorrect or incomplete information

Erase Your Data

Request deletion of your personal information

Restrict Processing

Limit how we use your personal data

Data Portability

Receive your data in a portable format

Object to Processing

Opt-out of certain data processing activities

Data Retention and Security

Retention Periods

  • Active Business Relationships: Duration of service + 7 years
  • Inquiry Records: 2 years from last contact
  • Website Analytics: 26 months maximum
  • Email Communications: 5 years for compliance

Security Measures

  • • SSL/TLS encryption for data transmission
  • • Regular security audits and updates
  • • Access controls and staff training
  • • Secure backup and disaster recovery

International Data Transfers

Cross-Border Business Operations

As a China-based sourcing partner serving global clients, TIOSOS may transfer personal data internationally to provide our services effectively. This includes coordination with:

  • Verified factories and suppliers in China
  • International shipping and logistics partners
  • Quality inspection and certification services

Protection Safeguards

Standard Contractual Clauses

EU-approved data transfer mechanisms with all international partners

Adequacy Decisions

Transfers only to countries with adequate data protection levels where possible

Additional Safeguards

Encryption, access controls, and regular compliance audits

Contact Us About Privacy

Data Protection Contact

Phone / WhatsApp

+86 18857919360

Location

China

Response Time: We respond to privacy requests within 30 days as required by GDPR.

Filing Complaints

If you believe we have not handled your personal data in accordance with data protection laws, you have the right to lodge a complaint with the relevant supervisory authority.

EU Residents

Contact your local data protection authority or the European Data Protection Board (EDPB)

Other Jurisdictions

Contact the relevant data protection authority in your country or region

Preferred Resolution: We encourage you to contact us directly first so we can address your concerns promptly and effectively.

Policy Updates

When We Update This Policy

  • Changes in data protection laws
  • Updates to our business processes
  • New service offerings or partnerships
  • Enhanced security measures

How We Notify You

Website Notice

Prominent notification on our website for 30 days

Direct Communication

Email notification for material changes affecting your rights

TIOSOS - One Partner. One Clear Process. Transparent Privacy.

Building trust through responsible data practices in China sourcing.