Privacy Policy

1. Who We Are

Qianlan Toothpaste Manufacturer is an OEM and private label toothpaste manufacturer supplying importers, distributors, wholesalers and brand owners worldwide. This Privacy Policy applies to personal data we handle through toothpasteoem.com, related inquiry forms, email, and the commercial activities connected to our manufacturing and export services.

For the purpose of data protection law, the data controller is Qianlan Toothpaste Manufacturer, with registered business address at Building 06, No.740, Helong 1st Rd, Baiyun District, Guangzhou, China.

2. Information We Collect

We collect only what we need to respond to inquiries, quote projects, and fulfill orders:

• Identifiers & contact details you provide: name, company, country, email, phone / WhatsApp, and any message you send (corresponds to CCPA categories: identifiers; customer records).
• Commercial information: product specifications, volumes, target markets, quotations, orders, and branding files (CCPA: commercial information).
• Order & account data: contracts, invoices, shipping details, and correspondence once we work together.
• Internet activity: IP address, browser type, device, pages visited, and referral source collected automatically through cookies (CCPA: internet/network activity).
• Communication records: emails, chat logs, and call notes kept to serve your request accurately.

We do not collect special-category (sensitive) personal data such as health, religion, or political information through this website, and we do not "sell" personal information for money.

3. How We Use Your Information

We use your data to:

• Reply to inquiries and prepare OEM / private label quotations and free samples.
• Manage orders, production, quality control, shipping and after-sales support.
• Send relevant product updates, certifications and capacity news where you have opted in.
• Improve the website, content and user experience through anonymized analytics.
• Comply with export, tax, anti-fraud and legal obligations.

4. Legal Bases (GDPR / PIPL)

We process personal data on the following lawful bases:

• Legitimate interests (GDPR Art. 6(1)(f)): responding to B2B inquiries, quoting, and improving our services.
• Performance of a contract (GDPR Art. 6(1)(b)): when you place or negotiate an order.
• Consent (GDPR Art. 6(1)(a) / PIPL Art. 13): marketing emails, non-essential cookies, and cross-border transfer where separate consent is required.
• Legal obligation (GDPR Art. 6(1)(c)): export control, customs, tax and accounting records.
• Under China PIPL, we rely on consent, contract necessity, or legal obligation, and obtain separate consent for cross-border transfers and for processing sensitive contexts.

You may withdraw consent at any time without affecting prior lawful processing.

5. Cookies & Tracking

We use a small number of cookies to keep the site working and to understand traffic:

• Essential cookies: required for basic navigation and form submission (always on).
• Analytics cookies: aggregated, anonymous statistics on page views and sources (set only with consent in GDPR/PIPL regions).
• Preference cookies: remember language and region choices.

In the EEA, UK and China we request consent before placing non-essential cookies via our cookie banner. You can disable non-essential cookies in your browser settings; the site will still function.

6. How We Share Information

We do not sell your personal data, and we do not "share" it for cross-context behavioral advertising. We disclose it only with:

• Service providers: freight forwarders, labs, IT hosts and payment partners who need it to deliver the service, under confidentiality (processors under GDPR Art. 28).
• Authorities: where required by export control, customs, tax or law.
• Professional advisers: legal or audit parties bound by confidentiality.

Any processor we use is required to protect your data to the same standard described here.

7. International Data Transfers

As a global OEM exporter, your inquiry may be processed by our team in China and by regional partners. We apply appropriate safeguards depending on the destination:

• To the EEA / UK: where personal data is transferred out of the EEA or UK, we rely on the European Commission Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum, supported by transfer risk assessments.
• From China: cross-border transfers follow China PIPL mechanisms — including the CAC security assessment, certification, or a standard contract filed with the CAC — and we obtain your separate consent before such transfer.
• To the United States: transfers from the EEA/UK may use SCCs; US recipients may rely on their own compliance frameworks where applicable.

8. Data Retention

We keep personal data only as long as needed:

• Inquiry data with no follow-up: usually deleted within 24 months.
• Active customer data: for the duration of the relationship plus the legal retention period (commonly 5–7 years for tax / trade records).
• Analytics: aggregated and anonymized, kept without time limit.

9. Regional Privacy Laws

We aim to honor the privacy rights recognized in the regions where our visitors and customers are located. Key frameworks we address:

10. Your Rights

Depending on your location, you may have some or all of the following rights:

• Access — get a copy of the personal data we hold about you (GDPR Art. 15; CCPA; PIPL).
• Rectification / correction — fix inaccurate or incomplete data (GDPR Art. 16; PIPL).
• Erasure / deletion — request deletion where the law allows (GDPR Art. 17; CCPA/CPRA; PIPL).
• Restriction / objection — limit or object to certain processing, including direct marketing (GDPR Art. 18/21).
• Portability — receive your data in a structured, machine-readable format (GDPR Art. 20; PIPL).
• Opt-out of sale/sharing & sensitive-use limit — US state residents (CCPA/CPRA and equivalents).
• Withdraw consent — at any time, without affecting prior lawful use (GDPR Art. 7; PIPL).
• Lodge a complaint — with your local data protection authority (GDPR Art. 77; ICO; CAC).

To exercise any right, contact us at sales@toothpasteoem.com. We respond within the timeframe required by law (generally 30 days under GDPR/CCPA; PIPL provides its own statutory period). We may verify your identity before acting.

11. Children's Privacy

This website is a B2B manufacturing site intended for business users. We do not knowingly collect personal data from children under 16 (or under the higher age set by local law, e.g. under 16 in the EEA). If you believe a minor has contacted us, email us and we will delete it.

12. Data Security

We protect data with technical and organizational measures: encrypted connections (HTTPS), access controls, staff confidentiality, and limited retention. No method of transmission is 100% secure, but we work to keep your information safe and review our controls regularly.

13. Contact Us

Questions about this policy, your data, or a regional request? Reach our privacy team:

14. Changes to This Policy

We may update this policy as our services or laws change. The "Last updated" date at the top shows the current version. For material changes we will post the revised policy on this page and, where required, notify affected users.