Privacy Policy

Last updated: 13 October 2026

TONGSOURCING INTERNATIONAL CO., LIMITED (“TongSourcing”, “we”, “us”) is a Hong Kong company with a procurement office in Shenzhen, Guangdong, China. This policy explains what personal information we collect through tongsourcing.com (the “Site”), why we collect it, who we share it with, and what rights you have.

1. Who we are

  • Legal entity: TONGSOURCING INTERNATIONAL CO., LIMITED
  • Registered address: Unit K, 4/F, Phase 4, Kwun Tong Industrial Centre, Kwun Tong, Hong Kong
  • Procurement office: Shenzhen, Guangdong, China
  • Email: tong@tongsourcing.com

For the purposes of the Hong Kong Personal Data (Privacy) Ordinance we are the “data user”, and for the purposes of the EU/UK General Data Protection Regulation we are the “controller”, of the personal data described below.

2. What information we collect

Information you give us. When you submit the enquiry form on the Site, or contact us by email or messaging app, we collect:

  • your name, company name, business email address and country or region;
  • the content of your message, including product details, specifications, drawings or documents you choose to send us;
  • any further information you provide while we are discussing or carrying out a project.

Information collected automatically. When you visit the Site, our server and statistics tool record:

  • IP address, browser type and version, device type and operating system;
  • the pages you view, the page that referred you, and approximate timestamps;
  • your language preference, stored in a cookie so the Site can show you the right language version.

We do not knowingly collect sensitive personal data, and we ask that you do not send us any (for example health, biometric or political information).

3. Why we use your information

  • to respond to your enquiry and provide the sourcing, factory audit, quality inspection, production follow-up and logistics support services you ask for;
  • to prepare quotations and manage our contractual relationship with you;
  • to communicate with suppliers on your behalf where this is necessary to deliver the service you requested;
  • to keep the Site secure and to prevent spam and abuse;
  • to understand, in aggregate, how the Site is used so that we can improve it;
  • to meet our legal, accounting and tax obligations.

We do not sell your personal data, and we do not use it for automated decision-making or profiling.

4. Our legal bases for processing

If you are in the EEA or the UK, we rely on the following legal bases:

  • Performance of a contract (or steps taken at your request before a contract) — for enquiries, quotations and service delivery.
  • Legitimate interests — in responding to business enquiries, keeping the Site secure and improving our services. We balance these interests against your rights.
  • Consent — where we specifically ask for it, for example if we ever send you marketing communications. You may withdraw consent at any time.
  • Legal obligation — for tax, accounting and record-keeping requirements.

5. Cookies and similar technologies

The Site uses a small number of cookies that are necessary for it to function:

  • Language preference cookie (set by our multilingual plugin) — remembers which language version of the Site you are viewing.
  • Functional and security cookies (set by WordPress and our plugins) — support forms, security checks and spam prevention.

For statistics we use a privacy-focused, self-hosted measuring tool configured to record aggregate page views. We do not use advertising cookies or third-party retargeting pixels, and we do not track you across other websites.

You can block or delete cookies in your browser settings. If you block the strictly necessary cookies, parts of the Site — such as the language switch and the enquiry form — may not work correctly.

6. Who we share your information with

We share personal data only where necessary, and only with organisations that handle it on our instructions:

  • Hosting provider — Hostinger (website hosting and email infrastructure);
  • Website platform and plugins — WordPress, Elementor, Astra and WPForms, used to run the Site and deliver enquiry form submissions to us;
  • Communication tools — our business email, WhatsApp or LINE, where you choose to reach us through them;
  • Professional advisers — accountants, auditors and legal advisers where required;
  • Public authorities — where we are legally required to disclose information.

We do not share your data with advertisers, data brokers or other unrelated third parties.

7. International transfers

We operate in Hong Kong and mainland China, and some of our service providers store data in other countries. Where personal data originating in the EEA or the UK is transferred outside those areas, we take steps to ensure it remains protected — for example by relying on standard contractual clauses or by transferring to jurisdictions recognised as providing an adequate level of protection. You can ask us for details of the safeguards that apply.

8. How long we keep your information

  • Enquiries that do not lead to a project: up to 24 months, so that we can pick up the conversation if you come back to us.
  • Active and completed projects: for the duration of the project and then up to 7 years, to meet accounting, tax and contractual record-keeping requirements.
  • Website statistics: aggregate only, retained in a form that does not identify individuals.

When the relevant period ends, we delete or anonymise the data.

9. How we protect your information

We use appropriate technical and organisational measures, including encrypted connections (HTTPS), access controls, and limiting access to personal data to those who need it to do their work. No system can be completely secure, but we take the protection of your information seriously and will notify you and the relevant authorities if a breach affecting your rights occurs, as required by law.

10. Your rights

Depending on where you live, you may have the right to:

  • be informed about how your data is used;
  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased;
  • restrict or object to certain processing;
  • receive your data in a portable format;
  • withdraw consent at any time, where processing is based on consent.

If you are in the EEA or the UK, you also have the right to object to processing carried out on the basis of legitimate interests, and to lodge a complaint with your local data protection authority. If you are in Hong Kong, you may contact the Office of the Privacy Commissioner for Personal Data.

To exercise any of these rights, email us at tong@tongsourcing.com. We will respond within the period required by applicable law, normally within 30 days. We may need to verify your identity before we can act on your request.

11. Children

The Site is intended for business users. It is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Links to other websites

The Site may link to third-party websites or services, for example WhatsApp. We are not responsible for their privacy practices, and we encourage you to read their privacy policies separately.

13. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of this page always shows the current version, and any material change will be highlighted here.

14. How to contact us

TONGSOURCING INTERNATIONAL CO., LIMITED
Unit K, 4/F, Phase 4, Kwun Tong Industrial Centre, Kwun Tong, Hong Kong
Email: tong@tongsourcing.com

Chat on WhatsApp
Chat on WhatsApp