Legal
Privacy policy
How CHISA collects, uses, and protects business contact information, and your rights under GDPR and CCPA.
Last updated: January 2025
1. Scope
This policy explains how CHISA collects, uses, and protects personal data when you use our trade services. It applies to business contacts of registered and prospective trade customers.
CHISA processes business contact information solely to operate trade accounts, respond to quotation requests, and fulfill orders. We do not sell personal data.
2. Information we collect
Account and contact details: name, business email, phone, company name, VAT or business registration number, and shipping and billing addresses.
Transactional data: quotations, orders, contracts, and communications related to your account.
Technical data: limited usage and device information collected through cookies, subject to your consent for non-essential categories.
3. How we use information
We use personal data to verify trade eligibility, prepare quotations, process and fulfill orders, provide documentation, manage contracts, and communicate about your account.
Where you have consented, we use analytics and marketing cookies to measure usage and personalize content. You can change these preferences at any time.
4. Legal bases (GDPR)
Where processing is subject to the General Data Protection Regulation (EU/UK), we rely on the performance of a contract, our legitimate interests in operating a wholesale business, compliance with legal obligations, and your consent for non-essential cookies and marketing.
5. Your rights
GDPR (EU/UK): you have the right to access, rectify, erase, and port your data, and to object to or restrict processing. You may withdraw consent at any time.
CCPA (California): California residents may request disclosure of the categories of personal information collected, request deletion, and opt out of any sale of personal information. CHISA does not sell personal information.
To exercise any of these rights, contact our data team through your account manager.
6. Retention & security
Data is retained only as long as necessary to operate your account and meet legal, tax, and contractual obligations, after which it is deleted or anonymized.
We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or disclosure.