Privacy Policy

Privacy Policy

Shenzhen Sisland Technology Co., Ltd. ("SISLAND," "we," "us," or "our") respects your privacy and is committed to protecting the personal

 information you share with us. This Privacy Policy explains how we collect, use, disclose, store, and protect your information when you visit our websites

 (www.sisland.com and www.sislandtoys.com) or interact with our services.

1. Who We Are

SISLAND is a China-based toy manufacturer specializing in children's DIY craft toys,

 slime & putty, sand toys, clay & dough, squeeze toys, fidget toys, PU toys, outdoor sports toys, STEM kits, plush toys, and board games. 

We offer OEM/ODM services and wholesale supply to retailers, toy stores, boutiques, gift shops, and distributors worldwide. 

Our minimum order quantity is 1 carton per product (quantity per carton varies by SKU; you may mix available scents/colors within a carton).

Data Controller: Shenzhen Sisland Technology Co., Ltd. Room 1301, Dongsen Commercial Building, No. 19 Longgang Road, Longgang District,

 Shenzhen, Guangdong, China Email: privacy@sisland.com Phone: +86 755-89258129

2. Information We Collect

2.1 Information You Provide Directly

Data Category Examples When Collected

Identity & Contact Name, email address, phone/WhatsApp number, company name When you submit a wholesale inquiry,request a quote, or contact us via any form  Account Credentials Email, password (encrypted)When you register for a website account to view pricing and product detailsBusiness Information Company name, business type, country, target market, desired standards (EN71, ASTM F963, etc.)When you submit an OEM/ODM customization form or place an order

Project Files Product design images, 3D/CDR/AI drawings, reference documents (up to 5MB each)

When you upload files through our Customization & OEM form

Order & Payment Data Product item numbers, quantities, shipping address, payment method (T/T or PayPal)

When you place a wholesale or OEM order

Communication Records Messages exchanged with our sales team via email, WhatsApp, or website chat

When you communicate with us about inquiries, orders, or support

2.2 Information Collected Automatically

Data Category Examples Purpose

Device & Usage Data IP address, browser type, operating system, screen resolution,

 referring URL To maintain website security and analyze aggregate traffic patterns

Cookies & Similar Technologies Session cookies, analytics cookies, functionality cookies

To remember your login session, language preference, and shopping cart contents. See Section 7 for details.

2.3 Information from Third Parties

We may receive limited information from:

Payment processors (e.g., PayPal): transaction confirmation status only; we do not receive your full financial account details.

Social media platforms (if you use social login or interact with our social pages): public profile information you have made available.

3. How We Use Your Information

We use your personal information for the following lawful purposes:

Purpose Legal Basis (GDPR) Data Used

Processing your wholesale or OEM/ODM orders Contract performance (Art. 6(1)(b))

Identity, contact, business info, order & payment data, project files

Communicating with you about inquiries, quotes, orders, and shipments Contract performance / Legitimate interest

Identity, contact, communication records

Providing customer service and handling quality claims Legitimate interest (Art. 6(1)(f)) Identity, contact, order data

Maintaining your website account Contract performance Account credentials, identity

Improving our website and services (aggregate analytics) Legitimate interest Device & usage data (anonymized/aggregated)

Complying with legal obligations (export compliance, product safety tracking) Legal obligation (Art. 6(1)(c)) Identity, order data, business info

Sending promotional updates about new products or trade shows (only with your consent) Consent (Art. 6(1)(a)) Email, name

You may withdraw marketing consent at any time by clicking "unsubscribe" in any marketing email or contacting us at privacy@sisland.com.

4. How We Share Your Information

We do not sell your personal information to third parties. We share your information only in the following circumstances:

Recipient Purpose Data Shared

Logistics & shipping partners (e.g., DHL, FedEx, UPS) To deliver your orders Name, shipping address, phone number

Payment processors (e.g., PayPal) To process your payments Transaction amount; PayPal handles financial data directly on its secure platform

Cloud hosting providers (China-based servers) To host our website and store data All data stored on our platform

Analytics tools To understand website traffic patterns Anonymized/aggregated usage data only

Legal authorities When required by law, regulation, or legal process As required by applicable law

We require all third-party service providers to maintain appropriate security standards and process your data only for the purposes we specify.

5. Cross-Border Data Transfer

As a China-based manufacturer serving customers in the United States, European Union, United Kingdom, 

Middle East, and Asia, your personal information will be transferred to and processed in China.

 We ensure such transfers comply with applicable laws:

GDPR (EU/EEA): We rely on Standard Contractual Clauses (SCCs) approved by the European Commission for transfers of personal data to China. We will provide a copy of the relevant SCC upon request.

PIPL (China): Where required, we complete the security assessment or standard contract filing with the Cyberspace Administration of China (CAC) for cross-border data processing.

UK GDPR: We extend equivalent safeguards as required under the UK Data Protection Act 2018 and UK International Data Transfer Agreement (IDTA) where applicable.

By using our services, you acknowledge that your data will be transferred to and processed in China.

6. Data Retention

We retain your personal information only as long as necessary for the purposes described in this policy:

Data Type Retention Period

Inquiry & quote data 2 years after last contact, then deleted

Account data While your account is active + 1 year after account closure

Order & transaction records 5 years (for legal, tax, and product safety compliance purposes)

Communication records 2 years after last contact

Cookie data As specified in your cookie settings (typically 6–12 months)

Project files (OEM/ODM designs) 2 years after project completion, unless you request earlier deletion

When the retention period expires, we securely delete or anonymize your data, except where retention is required by applicable law.

7. Cookies and Tracking Technologies

We use the following types of cookies:

Cookie Type Purpose Duration Can Be Disabled?

Strictly Necessary Maintain login session, shopping cart, language preference Session / up to 1 year No (required for site functionality)

Analytics Understand website traffic and usage patterns (e.g., Google Analytics) Up to 13 months Yes

Functional Remember your preferences (e.g., currency, region) Up to 1 year Yes

Marketing Display relevant product promotions Up to 1 year Yes (only set with your consent)

You can manage your cookie preferences at any time through the cookie banner on our website or through your browser settings. 

Disabling certain cookies may affect your website experience.

8. Your Rights

8.1 Rights for All Users

Regardless of your location, you may:

Access the personal information we hold about you

Correct inaccurate or incomplete information

Request deletion of your data (subject to legal retention requirements)

Object to processing based on legitimate interest

Request data portability (receive your data in a structured, machine-readable format)

To exercise any of these rights, contact us at privacy@sisland.com. We will respond within 30 days.

8.2 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following additional rights:

Right Description

Right to Know You may request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months

Right to Delete You may request deletion of your personal information, subject to legal exceptions

Right to Opt-Out of Sale/Sharing We do not sell personal information. You have the right to opt out if we ever were 

to share data for cross-context behavioral advertising

Right to Non-Discrimination We will not discriminate against you for exercising your CCPA rights

Right to Limit Use of Sensitive Personal Information We do not collect sensitive personal information as defined under CPRA

How to exercise your CCPA rights: Submit a request to privacy@sisland.com or call +86 755-89258129. 

We will verify your identity before processing your request. You may also designate an authorized agent to submit a request on your behalf.

CCPA Disclosure (Past 12 Months):

Category Collected? Source Disclosed for Business Purposes? Sold?

Identifiers (name, email, phone) Yes You directly Yes (to shipping partners as needed) No

Commercial information (orders, purchases) Yes You directly Yes (to payment & shipping partners) No

Internet activity (website usage) Yes Automatic collection No No

Inferences drawn from above No — — No

8.3 Rights Under GDPR (EU/EEA/UK)

If you are in the European Economic Area or the United Kingdom, in addition to the rights in Section 8.1, you have the right to:

Lodge a complaint with your local supervisory authority (e.g., the Information Commissioner's Office in the UK, or your national Data Protection Authority in the EU)

8.4 Rights Under PIPL (China)

If you are a PRC resident, you have the right to:

Require us to explain the rules for processing your personal information

Request restriction or refusal of processing by third parties

Lodge a complaint with the Cyberspace Administration of China (CAC)

9. Children's Privacy

Our products are designed for children, but our website and services are directed to business customers (retailers, distributors, wholesalers) and adults only. 

We do not knowingly collect personal information from children under 13 years of age.If you are under 13, please do not submit any personal information through our website. 

If we become aware that we have inadvertently collected personal information from a child under 13, we will promptly delete it from our systems. If you believe this has occurred, please contact us at privacy@sisland.com.

COPPA Compliance Statement: Our website does not target children under 13, does not offer child-directed activities,and does not collect age-related data from child end-users. COPPA requirements therefore do not apply to our business-to-business platform. However, as a toy manufacturer, we maintain this policy as a precautionary measure.

10. Data Security

We implement industry-standard measures to protect your personal information, including:

SSL/TLS encryption for all data in transit

Encrypted password storage using industry-standard hashing algorithms

Access controls limiting data access to authorized personnel on a need-to-know basis

Regular security assessments and vulnerability monitoring

Employee training on data protection and information security

Secure file upload handling for OEM/ODM project files (5MB size limit, file type validation)

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. 

We encourage you to use strong passwords and to contact us immediately if you suspect unauthorized access.

11. EU Representative

As a non-EU/EEA establishment serving EU customers, we are required to designate an EU representative under GDPR Article 27:

EU Representative: [To be appointed — contact privacy@sisland.com for current representative details]

Once appointed, their contact information will be listed here. In the interim, you may direct all GDPR-related inquiries to privacy@sisland.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, 

or other factors. When we make material changes, we will:

Update the "Last Updated" date at the top of this policy

Post the updated policy on this page

For significant changes that affect your rights, we will provide notice via email or a prominent notice on our website

We encourage you to review this Privacy Policy periodically.

13. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Channel Details

Privacy Email: privacy@sisland.com

General Inquiry Email: sislandtoys@sisland.com

WhatsApp: +86 13827465413

Phone: +86 755-89258129

Mailing Address: Room 1301, Dongsen Commercial Building, No. 19 Longgang Road, Longgang District, Shenzhen, Guangdong, China

We aim to respond to all privacy-related inquiries within 30 days. For California residents exercising CCPA rights, 

we will respond within 45 days as required by law.