How Cisilka collects, uses, shares, stores, and protects personal information across accounts, sourcing, orders, payments, delivery, and support.
This Privacy Policy explains how 图得（广州）科技有限公司 (English name registered with China Customs: Cisilka (Guangzhou) Technology Co., Ltd.) (“Cisilka”, “we”, “us”, or “our”) handles personal information.
It applies when you visit a Cisilka storefront, create or use an account, join a business workspace, request a quote, place or receive an order, submit a custom/private-label brief, use support, or otherwise interact with Cisilka online.
Cisilka is the personal information handler or data controller for the activities described here unless a separate notice identifies another party. A third-party website or service linked from Cisilka is governed by that party’s own privacy terms.
Depending on how you use Cisilka, we may collect:
Some payment, identity, customs, tax, or claim information may be sensitive personal information under applicable law. We process it only where it is necessary for a stated purpose and apply any separate notice or consent required by law.
We obtain personal information:
If you provide information about another person, you must be authorized to do so and give that person any notice required by applicable law.
We process personal information to:
The applicable basis may be performance of a contract or steps you request before a contract, compliance with law, your consent, the protection of persons or property, or another basis permitted by applicable law. Where processing relies on consent, you may withdraw it without affecting processing already completed lawfully.
If we materially change a processing purpose, we will provide any further notice or obtain any further consent required by law before using the information for that new purpose.
We use account information to create and secure the account, remember preferences, connect activity to the correct customer, and provide account tools.
A business workspace may show relevant member details, roles, permissions, quotes, orders, invoices, and documents to authorized members of that business. Business administrators may invite, manage, or remove members within the permissions available to them. Cisilka does not make private account-manager contact details public.
You are responsible for keeping account details accurate. You can review available profile and business settings from your account.
We use transaction information to price and review requests, reserve or source products, create orders, issue trade documents, coordinate production, arrange delivery, provide tracking, handle returns or claims, and maintain a reliable transaction record.
For custom/private-label work, the information you supply may be shared internally and with selected factories, material suppliers, printers, embroiderers, packaging providers, quality-control providers, or other production partners only as needed to assess or fulfil the confirmed request.
For delivery, we provide carriers and logistics partners with the recipient, address, telephone number, order and parcel details, and any tax, identity, or import information reasonably required for the selected service. Read Shipping & Delivery for the current operational routes.
Available payment methods depend on the order. We may send PayPal, a bank, or another confirmed payment provider the amount, currency, order reference, products, payer details, and billing or delivery information needed to initiate, authenticate, reconcile, refund, or investigate the transaction.
Eligible card details are entered in PayPal-hosted fields. Cisilka does not store the complete card number or card security code. Payment providers process those details under their own privacy terms.
For bank transfer, we may collect a payment receipt, payer name, transaction reference, amount, bank information, and verified beneficiary details needed to confirm a payment or arrange a refund. Read Shopping Security for the current payment routes and verification guidance.
We retain support and quote communications so we can respond, keep the conversation connected to the relevant account or transaction, investigate issues, and maintain an auditable record.
Live chat is provided through Cisilka’s Chatwoot-based support system. When you open or use chat, the system may process a session identifier, account identity when signed in, messages, attachments, device information, and conversation history. If you choose WhatsApp or another external channel, that provider also processes the information under its own terms.
Transactional messages about security, quotes, orders, payments, documents, delivery, or account administration are not marketing. Marketing email is sent only where permitted and according to your choice. You may update an available marketing preference, use an unsubscribe method in the message, or contact us.
Cisilka is established in mainland China and serves customers in multiple countries. Personal information may therefore be processed in mainland China, the delivery destination, and locations where payment, hosting, support, production, customs, or logistics providers operate.
Some cross-border transfers are necessary to complete a cross-border purchase, payment, delivery, return, or request you initiate. Where applicable law requires more, we will provide information about the overseas recipient, purpose, method, data categories, and rights route, and obtain separate consent or use another lawful transfer mechanism.
This policy does not replace a transaction-specific cross-border notice or consent where one is legally required.
We retain personal information for the shortest period reasonably necessary for the stated purpose, taking account of the transaction lifecycle, legal recordkeeping duties, security, disputes, and enforceable claims.
| Information | Retention method |
|---|---|
| Account and business profile | While the account or business relationship is active, then only as needed for closure, security, legal duties, or disputes. |
| Quotes, orders, payments, tax and trade documents | For the applicable accounting, tax, customs, audit, warranty, dispute, and statutory recordkeeping periods. |
| Custom specifications and approvals | For fulfilment, repeat or related work you request, quality review, and the period in which an order claim may arise. |
| Support, returns, claims, and evidence | Until the matter is resolved, then for a reasonable record and dispute period. |
| Security, device, and consent records | For the shortest period needed to secure the service, investigate incidents, demonstrate choices, and meet legal requirements. |
When retention is no longer justified, we delete, anonymize, or isolate the information unless continued storage is required by law. Backup copies may remain for a limited restoration cycle and are protected from ordinary use.
We use proportionate administrative, organizational, and technical safeguards designed to protect personal information, including access controls, account authentication, transport security, logging, provider controls, and incident procedures. No online service can guarantee absolute security.
Some storefront rules automatically determine which account, payment, shipping, return, or order actions are available based on factors such as authentication, business role, order value, currency, destination, payment state, fulfilment state, and remaining quantity. These rules support transaction and security controls; contact support if you need an outcome reviewed.
If an automated decision has a significant legal or similar effect and applicable law gives you a right to an explanation or human review, you may exercise that right using the contact route below.
Subject to the law that applies to you, you may have rights to be informed, access or obtain a copy, correct or complete, delete, restrict or object to processing, withdraw consent, transfer eligible information, close an account, and request an explanation of our processing rules.
You can exercise available choices by:
We may need to verify your identity and authority before acting. Certain information cannot be deleted immediately where retention is required for an order, tax, customs, security, fraud, dispute, or other legal obligation. If we cannot fulfil a request, we will explain the applicable reason where required.
You may also complain to the competent personal information, consumer, or data-protection authority in accordance with applicable law.
Cisilka accounts and purchasing services are intended only for people aged 18 or older. If we learn that information was submitted by a person who does not meet this requirement without a valid legal basis, we will take appropriate steps to restrict or delete it.
We may update this policy when our services, providers, or legal duties change. The revised page will show a new “Last updated” date, and we will provide additional notice where a material change requires it.
The English version is the controlling version. Other-language versions are provided for convenience. This language rule does not reduce any mandatory notice or personal information right under applicable law.
For privacy questions or rights requests, contact support@cisilka.com. For order or service assistance, you may also use the Contact page.