Privacy Policy

Effective Date: November 11, 2026

1. Privacy Follows the Customer Journey

A visitor who reads a product page, someone who subscribes to news, and a customer arranging a return engage with Tolseni in different ways. Each step can involve a different combination of personal information. This notice follows those steps rather than treating all visitors as though they complete a purchase. It explains what may be processed through https://tolseni.com/ , who is responsible, how information may reach another organization, and the choices available to you.

2. Data Controller and Point of Contact

Data Controller: Wuhan Maojiji Trading Co., Ltd.
Unified Social Credit Code (USCC): 91420114MAKBYFQD1P

For the personal information whose processing purposes and essential methods we determine in operating Tolseni, Wuhan Maojiji Trading Co., Ltd. acts as the Data Controller. This includes decisions about using customer contact details to administer orders, address questions, and keep required business records. A Data Controller is responsible for decisions about why and how relevant personal information is used and for handling rights requests under applicable privacy law.

Questions about our processing activities or your personal information can be sent to service@tolseni.com. Our full company identification appears at the end of this notice. The fact that another organization supports the website does not automatically make it a controller of every record; different legal roles can apply to different processing activities.

3. Browsing: Information That Comes From a Connection

When your browser communicates with the storefront, technical information may be processed so a page can be delivered. This can include an internet protocol address, browser version, device characteristics, language and display preferences, broad region inferred from a network connection, requested URLs, date and time, and identifiers associated with cookies or similar technologies. These details can support page delivery, debugging, basic analytics where enabled, shopping-session continuity, and security monitoring.

Information about website use may come directly from the browser or from infrastructure supporting the store. Browsing without entering a name does not necessarily mean that no personal information is processed, because some technical identifiers may constitute personal information under relevant laws.

4. Shopping Choices Before Payment

A shopping cart may store selected items, quantities, options, and a session identifier so you can continue browsing. If an account feature is offered, account-associated details may help provide access to order history or other available functions. Cart information is distinct from a completed order: placing an item in a cart does not itself mean a payment has been accepted or that an item has been dispatched.

5. Checkout and the Order Record

For a purchase, we may need the customer or recipient name, email, contact telephone number, shipping and billing details, items and quantities, price, selected delivery method, transaction reference, and order status. Some information is provided by you, while other details arise when payment is confirmed or a delivery status is received. We use these records to administer the purchase, arrange fulfillment, communicate about shipment, and address returns or refunds.

Information essential for payment or delivery may be required in order to complete the requested transaction. We do not ask you to email a full payment-card number, card security code, or password. Sensitive payment credentials should be entered only through the relevant secure checkout flow.

6. Information From a Payment Service

The payment method selected at checkout determines which payment service is involved. We may receive a payment result, limited transaction identifier, fraud-related status, or refund confirmation needed to administer the order or comply with bookkeeping requirements. Payment providers may separately process data for their own legal duties, including financial regulation or security. Their own notices address independent processing for which they are responsible.

7. Conversations, Forms, and After-Sales Records

If you use the Contact page or send us an email, your correspondence may contain a name, return address, telephone number, order reference, and the message itself. A delivery problem may require shipping details or photographs that you choose to supply. We use the relevant information to answer the request, investigate an issue, keep track of an agreed remedy, and manage a possible dispute or legal obligation. Please avoid including details unrelated to the question.

8. Mailing Lists and Optional Communications

Our catalog provides a sign-up form for email updates. If you choose to subscribe, your email address, subscription choice, and information needed to administer that request may be processed so that we can send updates you requested. Consent is used where applicable law requires it for marketing. You may stop promotional messages using an unsubscribe instruction in an email or by contacting service@tolseni.com.

Choosing not to receive promotional messages does not prevent essential communications about an order, refund, service inquiry, or privacy request. Those messages fulfill different purposes from advertising.

9. Matching Each Purpose to Its Legal Basis

Where a legal basis must be identified, it depends on the processing in question. Information needed to take an order or arrange delivery may be processed for contract performance or steps requested before purchase. Required tax, accounting, and legal records may be processed to satisfy legal obligations. Site protection, investigation of fraud, and proportionate service administration may involve legitimate interests, subject to any required balancing of your rights. Optional email marketing or nonessential tracking may rely on consent or another lawful ground where the relevant law allows it.

A withdrawal of consent applies to the processing based on that consent. It does not automatically erase an order that must still be fulfilled or records that must be kept under law.

10. Recipients and Processing Roles

The online store uses Shopify technology. Depending on the feature or transaction, organizations that assist with payments, delivery or fulfillment, customer correspondence, hosting, and security may process the data necessary for their specific task. A carrier, for example, needs appropriate delivery information, whereas a payment service handles information associated with a charge. Not all recipients access the same information, and a recipient may act on our instructions or independently determine certain purposes.

We may also disclose relevant information to professional advisers for a legitimate claim, to an authority in response to a valid legal requirement, or as part of a lawful corporate transaction subject to applicable safeguards. We do not treat a business relationship with a vendor as authorization to disclose unrelated records.

11. Cookies and Similar Technologies

Some technologies are necessary to maintain a session, remember cart selections, or defend the site against misuse. Others, where enabled, may be used to measure website interactions or support interest-based advertising. Your browser settings and available site privacy controls can provide choices about these technologies. Restricting essential tools may prevent some functions from working properly. The use of optional cookies or similar tools is subject to applicable consent requirements.

12. Advertising Disclosures and Your Privacy Choices

Our website hosts a dedicated Your Privacy Choices page at https://tolseni.com/pages/data-sharing-opt-out. All placeholder template text has been removed from this page, and it now contains complete, compliant disclosures for advertising-related data practices. The page explains how we handle recognized opt-out preference signals such as Global Privacy Control (GPC), and details your rights regarding interest-based advertising and data sharing.

Under applicable privacy laws, certain uses of browsing identifiers for interest-based advertising may be classified as the "sale" or "sharing" of personal information, or as targeted advertising. Where you hold a statutory right to opt out of such practices, you may exercise your right through any of the following channels:

• Use the interactive privacy controls directly on the Your Privacy Choices page;
• Enable a supported opt-out preference signal (e.g., GPC) via your browser or device settings;
• Submit a written request to the Data Controller at service@tolseni.com, including sufficient information to verify your identity and the scope of your request.

Valid opt-out requests will be processed within the timeframe required by applicable law. Opting out of interest-based advertising does not impact your ability to browse the site, place orders, or receive essential service communications. You may continue to see generic, non-personalized advertising after submitting an opt-out. We do not assume that every optional advertising technology is active for every visitor.

13. What Happens When Information Crosses Borders

Our primary data storage and core processing operations are located within the People's Republic of China. As a cross-border ecommerce service supported by global third-party providers, your personal information may be transferred to, stored in, or processed in jurisdictions outside your country of residence — including but not limited to the United States, Canada, and Singapore — where our service partners maintain operational infrastructure.

Cross-border data transfers only take place when necessary for the performance of our contract with you, the delivery of website functionality, or compliance with legal obligations. We implement appropriate and legally recognized safeguards for all cross-border transfers, which may include:

• Executing standard contractual clauses (SCCs) or other approved data transfer agreements with third-party recipients;
• Conducting due diligence to verify the receiving party’s data protection capabilities and compliance level;
• Deploying technical safeguards such as end-to-end encryption, access restriction, and pseudonymization for data in transit and at rest.

Our status and responsibilities as Data Controller remain unchanged regardless of the physical location of data processing.

14. Retention Is Not a Single Clock

We retain personal information only for the period necessary to fulfill the stated processing purposes and satisfy applicable legal, tax, and regulatory requirements. Retention periods are defined separately by data category:

• Order and transaction records: Retained for a minimum of 3–5 years from the date of final order completion, to comply with statutory tax filing, financial accounting, warranty, and dispute resolution obligations.
• Customer service and after-sales records: Retained for 1–3 years from the date the inquiry or issue is fully closed, for quality management, compliance auditing, and potential legal claim handling.
• Marketing subscription data: Retained for the duration of your active subscription. Following an unsubscribe request, we retain a minimal opt-out preference record for up to 3 years to honor do-not-contact requirements and prevent unsolicited re-engagement.
• Technical logs and security monitoring data: Retained for 3–12 months for system troubleshooting, fraud prevention, security defense, and performance optimization.

When personal information is no longer required for its original purpose and no mandatory legal retention obligation applies, we will securely delete, anonymize, or de-identify the information in accordance with applicable law. Where applicable law mandates a longer retention period, the statutory requirement shall prevail.

15. Security and Access Controls

We use reasonable organizational and technical precautions suited to the information and services involved. Access should be limited to people and providers with a legitimate role in performing a task. No online service can guarantee that transmission and storage are entirely free of risk, so protect your account credentials and tell us if you suspect unauthorized access to information relating to you.

16. Privacy Requests, Verification, and Complaints

Your rights depend on the laws that apply to you and may include access to information, correction, deletion, a copy in a portable form, restricting processing, objection to particular uses, or withdrawal of consent. Certain laws also provide opt-out rights concerning targeted advertising, an appeal mechanism, or a right to complain to an appropriate data protection regulator. Some requests may be limited by lawful exceptions, for example where transaction records must be preserved.

To submit a request, contact service@tolseni.com, state the right or concern, and give enough context to identify the relevant information. We may need to verify your identity reasonably before disclosing or altering personal information. We will respond within the period required by applicable law and explain lawful restrictions when necessary.

17. Children, Independent Sites, and Changes

Tolseni is a general-audience online shopping service intended for users who are at least 18 years of age (or the age of legal majority in their jurisdiction). We do not knowingly collect personal information from children under the age of 13 (or the applicable age threshold under local child privacy laws) without verifiable parental consent. If you become aware that personal information of a child has been submitted to us inappropriately, please contact us immediately and we will take prompt steps to delete the relevant data.

Websites reached through external links may have their own privacy notices and practices, which should be reviewed separately. We do not assume responsibility for the privacy policies and operations of third-party linked sites.

We may update this notice when the service, technology arrangements, or legal requirements change. The current notice will be provided through the website, and additional notice will be given where required by law.

18. Business Identity and Privacy Contact

Data Controller: Wuhan Maojiji Trading Co., Ltd.
Website: https://tolseni.com/

Business and Contact Information

Operating Company: Wuhan Maojiji Trading Co., Ltd.
Unified Social Credit Code (USCC): 91420114MAKBYFQD1P
Company Address: Factory Building 6-1184, No. 91 Huayuanwan 2nd Street, Daji Street, Caidian District, Wuhan, Hubei Province
Support Email: service@tolseni.com
Contact Phone: +86 13058472916
Business Hours: Monday to Friday: 9:00 AM - 5:00 PM (UTC+8, China Standard Time)