Privacy policy

Last updated: July 16, 2026

Operated by CISFLOW TRADING (HONGKONG) LIMITED

This Business Customer Privacy Policy explains how CISFLOW TRADING (HONGKONG) LIMITED, operating under the CISFLOW brand ("we", "us", or "our"), collects, uses, discloses, stores, and protects personal data in connection with cisflow.net, business inquiries, quotations, samples, orders, supplier and service-provider relationships, and other business-to-business activities.

This policy applies to individuals acting for businesses, including owners, employees, representatives, buyers, sourcing agents, designers, freight forwarders, suppliers, and other professional contacts. It does not create consumer purchasing rights, because our website is intended for business customers only.

1. Who We Are

CISFLOW TRADING (HONGKONG) LIMITED

RM A5, 7/F, ASTORIA BUILDING

NO. 34 ASHLEY ROAD

TSIM SHA TSUI

HONG KONG

Business Registration Number: 80654940-000-06-26-9

Email: contact@cisflow.net

Telephone: +86 131 2910 3233

Products are primarily manufactured, packed, and shipped from Mainland China. Personal data may therefore be handled in Hong Kong, Mainland China, the United States, and other locations involved in a project or shipment.

2. Personal Data We May Collect

Depending on how you interact with us, we may collect the following categories of information:

• business contact information, such as name, job title, company, business address, email address, telephone number, and preferred language;

• company and account information, such as company registration details, tax information, resale or exemption documentation, authorized buyers, account credentials, and business references;

• inquiry and transaction information, such as quotation requests, product interests, purchase orders, invoices, payment status, delivery instructions, order history, and communications;

• customization and production information, such as logos, artwork, designs, photographs, specifications, measurements, labels, packaging files, samples, approvals, and quality requirements;

• shipping and logistics information, such as consignee details, delivery address, freight forwarder, customs information, and carrier records;

• payment and financial information processed directly or through payment providers, banks, or other financial service providers;

• website and device information, such as IP address, browser type, device identifiers, operating system, pages viewed, referral source, cookie information, and website interaction data; and

• other information you choose to provide during business discussions or project execution.

3. How We Collect Personal Data

We may collect personal data:

• directly from you through forms, email, telephone, messaging platforms, meetings, sample requests, account applications, quotations, orders, and contracts;

• from your employer, colleague, sourcing agent, distributor, customer, freight forwarder, or another person involved in the business relationship;

• automatically through our website, cookies, analytics tools, security logs, and similar technologies;

• from Shopify and other service providers used to operate our website and business systems; and

• from lawful public or commercial sources, such as company websites, trade directories, business registries, or professional networking platforms.

4. Why We Use Personal Data

We may use personal data to:

• respond to inquiries and assess whether we can support a proposed project;

• verify business customers, authorized representatives, and account access;

• prepare quotations, samples, specifications, pro forma invoices, sales confirmations, contracts, and shipping documents;

• develop, manufacture, inspect, package, ship, deliver, and support custom products;

• communicate about artwork, samples, approvals, production, payments, logistics, claims, and account matters;

• process or reconcile payments and manage credit risk, where applicable;

• coordinate with factories, suppliers, printers, embroiderers, packaging providers, inspection providers, freight forwarders, customs agents, carriers, banks, and professional advisers;

• operate, secure, maintain, analyze, and improve our website, services, records, and business processes;

• detect fraud, misuse, security incidents, sanctions concerns, or unlawful activity;

• comply with legal, regulatory, tax, accounting, customs, export, import, and recordkeeping requirements;

• establish, exercise, or defend legal claims; and

• send relevant business communications or marketing, subject to applicable law and your communication choices.

5. Required and Optional Information

Some information is optional. However, if information is required to verify a business, prepare an accurate quotation, manufacture a product, process payment, arrange shipping, comply with law, or investigate a claim, we may be unable to proceed if the information is not provided.

6. Custom Artwork, Designs and Confidential Project Files

We may use buyer-supplied artwork, trademarks, designs, samples, photographs, measurements, and specifications only as reasonably necessary to evaluate, quote, develop, manufacture, inspect, package, ship, or support the relevant project, and as otherwise authorized by the buyer.

We may share these materials with factories, subcontractors, suppliers, inspection providers, and logistics partners that need them to perform the project. Confidentiality obligations may also be stated in a separate non-disclosure agreement or order-specific contract.

7. Disclosure of Personal Data

We may disclose personal data to the following categories of recipients where reasonably necessary:

• Shopify and providers of website hosting, customer accounts, forms, analytics, security, communications, cloud storage, and business software;

• factories, material suppliers, printers, embroiderers, weaving providers, packaging providers, sample makers, and quality-control or inspection providers;

• freight forwarders, customs brokers, carriers, warehouses, fulfillment providers, and delivery partners;

• banks, payment processors, insurers, accountants, auditors, lawyers, consultants, and other professional advisers;

• government, regulatory, customs, tax, law-enforcement, or judicial authorities where required or lawfully requested;

• a buyer, investor, lender, successor, or adviser in connection with a proposed or completed financing, reorganization, merger, acquisition, sale, or transfer of all or part of our business; and

• other parties where you direct us to disclose information or where disclosure is otherwise permitted by applicable law.

We do not disclose personal data to unrelated third parties for their own purposes unless we have a lawful basis or appropriate authorization to do so.

8. International Data Transfers

Our business is cross-border. Personal data may be transferred to, accessed from, processed in, or stored in Hong Kong, Mainland China, the United States, and other countries where our customers, suppliers, factories, technology providers, logistics partners, banks, and professional advisers operate.

Data protection laws may differ between locations. Where required, we use contractual, organizational, or other appropriate measures to protect personal data during international processing and transfer.

9. Shopify and Third-Party Services

Our website is hosted on Shopify. Shopify and other third-party services may process information under their own privacy terms when they provide website, account, security, analytics, communication, payment, or related services. We encourage users to review the privacy information made available by those providers.

10. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, local storage, log files, and similar technologies to operate the website, remember preferences, support customer accounts, maintain security, measure performance, understand website usage, and improve business communications. Available cookie choices may depend on your location, browser, and the technologies implemented on the website.

11. Business Marketing Communications

We may send relevant business communications about products, samples, capabilities, events, quotations, or services. You may ask us to stop sending promotional emails by using an unsubscribe method provided in the message or by contacting us. We may still send non-promotional communications relating to an inquiry, account, quotation, order, payment, shipment, legal obligation, or existing business relationship.

12. Sale or Sharing of Personal Data

We do not sell personal data for monetary consideration. Some analytics or advertising technologies may be treated as a sale, sharing, or targeted advertising under certain laws, depending on how they are configured and used. Where a law that applies to us requires an opt-out mechanism, we will provide an appropriate method for submitting the request.

13. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including managing business relationships, completing projects, maintaining production and approval records, handling claims, meeting tax, customs, accounting, legal, and compliance obligations, resolving disputes, and enforcing agreements.

Retention periods vary according to the type of record, legal requirements, and business need.

14. Data Security

We use reasonable administrative, technical, and organizational measures intended to protect personal data against unauthorized access, use, alteration, disclosure, loss, or destruction.

No system or transmission method is completely secure, and we cannot guarantee absolute security. Please avoid sending highly sensitive financial or identity information through unsecured channels unless specifically requested and appropriately protected.

15. Your Privacy Rights

Subject to applicable law and available exceptions, you may request access to or correction of personal data we hold about you.

Depending on your location and the law that applies, you may also have rights to request deletion, obtain a copy, restrict or object to certain processing, withdraw consent where processing is based on consent, or opt out of certain sales, sharing, targeted advertising, or marketing communications.

To make a request, contact us using the details below and describe the request. We may need to verify your identity, authority, company relationship, and the scope of the request before responding.

Authorized agents may be required to provide evidence of authority. We will not unlawfully discriminate against an individual for exercising an applicable privacy right.

16. California and Other U.S. State Privacy Notices

This section applies only to the extent a U.S. state privacy law applies to us and to the relevant personal data.

Eligible individuals may have rights to know or access categories and specific pieces of personal information, request correction or deletion, obtain a portable copy, opt out of certain sales, sharing, or targeted advertising, limit certain uses of sensitive personal information, and appeal a denied request.

Available rights and exceptions vary by state and circumstances.

We will describe any additional required notices or request methods on the website if and when they apply to our processing activities.

17. Children’s Privacy

Our website and services are intended for business representatives and are not directed to children.

We do not knowingly collect personal data from children for the purpose of selling products to them. If you believe a child has provided personal data to us, please contact us so that we can review the matter.

18. Changes to This Policy

We may update this policy to reflect changes in our business, website, service providers, or legal obligations.

The revised version will be posted with a new “Last updated” date. Material changes may also be communicated through the website or other reasonable means.

19. Contact and Privacy Requests

Questions, access or correction requests, marketing opt-outs, and other privacy requests may be sent to: