Privacy at a glance
How Tonmit handles website and business-contact information
Tonmit (“Tonmit,” “we,” “our,” or “us”) operates tonmit.com and the related online services that link to this Privacy Policy. This notice describes how we handle personal information when you browse the website, submit an inquiry, request a quotation, request product or compliance documentation, discuss packaging or private-label requirements, or otherwise communicate with us through our online channels.
The website is intended primarily for business users, including pharmacies, clinics, distributors, healthcare supply organizations, procurement teams and other commercial customers interested in medical consumables and supply-related services.
Business inquiries
We collect information needed to respond to sourcing, quotation, documentation and fulfillment requests.
No patient records
Do not submit patient medical records, protected health information, prescriptions or insurance information.
No sale for money
Tonmit does not sell personal information in exchange for money.
Location-based rights
Your privacy choices and legal rights depend on where you live and which laws apply.
01
Scope of This Privacy Policy
This Privacy Policy applies to personal information collected through tonmit.com, forms hosted on or linked from the website, email communications initiated through the website, downloadable-resource requests and related digital services directly controlled by Tonmit.
It does not govern the independent privacy practices of third-party websites, logistics providers, marketplaces, social networks or other services that maintain their own privacy notices.
For purposes of applicable privacy laws, Tonmit is responsible for the personal information it collects through these services unless another notice identifies a different responsible entity.
02
Information We Collect
Information you provide directly
We may collect information that you voluntarily provide when you:
- Submit a contact form or request a quotation;
- Request product information, samples, availability or specifications;
- Request quality, regulatory, packaging or compliance-related documentation;
- Discuss private-label, OEM, labeling, packaging or fulfillment requirements;
- Subscribe to business updates or marketing communications;
- Communicate with us by email, phone or another approved channel.
The information may include:
- Name and business contact details;
- Company or organization name;
- Job title or professional role;
- Business address and shipping details;
- Product interests and sourcing requirements;
- Specifications, quantities and packaging requirements;
- Quotation, sample, order or fulfillment information;
- Documents, files and other information you choose to submit.
Information collected automatically
When you visit the website, we or our service providers may automatically collect technical and usage information, including:
- IP address and approximate location derived from it;
- Browser, operating system and device type;
- Cookie identifiers and similar online identifiers;
- Pages viewed and navigation activity;
- Date, time and duration of visits;
- Referring pages, links and campaign parameters;
- Website errors, security events and performance data.
Information from other sources
We may receive business-contact or transaction-related information from service providers, referral partners, suppliers, logistics or fulfillment partners, publicly available business sources, professional directories or other parties involved in responding to your request.
03
Information You Should Not Submit
Please do not submit:
- Patient medical records or protected health information;
- Prescription details or patient identifiers;
- Insurance or payment-card information through general inquiry forms;
- Government identification numbers;
- Sensitive medical, financial or personal information not required for a business inquiry.
When discussing product use in a clinical or institutional setting, remove patient-specific details. If sensitive information is submitted unintentionally, we may delete, restrict or securely route it as appropriate.
04
How We Use Personal Information
We may use personal information to:
- Respond to inquiries and provide customer support;
- Prepare quotations and evaluate sourcing requests;
- Confirm product specifications, packaging, documentation and availability;
- Coordinate samples, orders, logistics, warehousing and fulfillment;
- Support private-label, OEM and custom-packaging projects;
- Maintain business, transaction and communication records;
- Operate, analyze, secure and improve the website;
- Detect fraud, misuse, security incidents or technical problems;
- Send requested information and permitted business communications;
- Comply with legal obligations and protect our rights.
We may also use aggregated, anonymized or de-identified information for analytics, product planning, website improvement and business development, provided the information is not used to identify an individual.
We do not currently use personal information collected through this website to make decisions that produce legal or similarly significant effects solely through automated processing.
05
Legal Bases for Processing
Where applicable law requires a legal basis, we may process personal information based on:
Contract and pre-contract steps
To respond to quotations, product requests, orders and other steps requested before or during a business relationship.
Legitimate interests
To operate our business, respond to professional inquiries, maintain relationships, improve the website and protect our systems.
Consent
Where you choose to receive optional marketing or accept non-essential cookies and consent is required.
Legal obligations
To meet tax, accounting, trade, compliance, security, regulatory or lawful-request requirements.
08
International Data Transfers
Tonmit works with customers, suppliers and service providers in multiple countries. Personal information may therefore be processed or stored outside the country where you live, including in jurisdictions with different data-protection laws.
Where required, we use reasonable contractual, organizational or other safeguards for international transfers. You may contact us for additional information about safeguards relevant to your personal information.
09
Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy. The period depends on the nature of the information and the reason it was collected.
Inquiry and relationship records
Retained while an inquiry or business relationship is active and for a reasonable follow-up period.
Orders and transaction records
Retained as needed for fulfillment, warranty, dispute, tax, accounting, trade and legal obligations.
Marketing records
Retained until you opt out or until they are no longer needed, subject to suppression-list requirements.
Technical and security data
Retained according to website-tool settings and for a reasonable period needed for analytics, security and troubleshooting.
When information is no longer required, we may delete, anonymize, de-identify or securely archive it where retention is legally required.
10
Data Security
We use reasonable administrative, technical and organizational measures designed to protect personal information from unauthorized access, disclosure, alteration, misuse, loss or destruction.
No website, email, online form or electronic storage system can be guaranteed completely secure. Avoid sending sensitive, patient-specific, confidential or payment information through general website forms unless we provide an appropriate secure channel.
11
Your Privacy Choices and Rights
Depending on your location and applicable law, you may have the right to:
- Request access to personal information;
- Request correction of inaccurate information;
- Request deletion of eligible information;
- Request a portable copy of certain information;
- Object to or restrict certain processing;
- Withdraw consent where processing relies on consent;
- Opt out of marketing communications;
- Opt out of sale, sharing or targeted advertising where applicable;
- Appeal a denied request where applicable;
- Lodge a complaint with an applicable data-protection authority.
To submit a request, email info@tonmit.com with the subject line “Privacy Request.” Describe the right you wish to exercise and the website interaction or business relationship involved.
We may need to verify your identity, authority or relationship with Tonmit before completing a request. Authorized agents may be required to provide evidence of authorization. Rights may be limited by applicable exceptions, legal obligations, security needs, recordkeeping requirements or contractual rights.
12
California Privacy Notice
This section applies only if Tonmit is subject to the California Consumer Privacy Act, as amended, for the processing at issue. California residents may have rights to know, access, delete, correct and obtain a portable copy of personal information, and to opt out of certain sale or sharing. California law also prohibits discrimination for exercising covered privacy rights.
Categories handled in the preceding 12 months
| Category | Examples | Sources and purposes | Categories of recipients |
|---|---|---|---|
| Identifiers and customer records | Name, business email, phone, address, IP address and online identifiers. | Collected from you, your organization and website technologies to respond to inquiries, operate the site and support transactions. | IT, CRM, communications, supplier, logistics and professional-service providers. |
| Commercial information | Product interests, quotations, samples, orders, packaging and fulfillment requirements. | Collected from you and business partners to evaluate requests, prepare quotations and manage supply activities. | Suppliers, manufacturers, packaging, warehousing, fulfillment and advisory providers. |
| Internet or network activity | Pages viewed, clicks, referring pages, cookie IDs, device and browser information. | Collected through website technologies for operation, security, analytics and performance. | Hosting, security, analytics and website-service providers. |
| Professional information | Company, job title, department and business role. | Collected from you, your organization, referrals or public business sources to manage B2B communications. | CRM, communications, sales-support and professional-service providers. |
| Approximate geolocation | General location inferred from IP address. | Collected automatically for security, localization, analytics and fraud prevention. | Hosting, security and analytics providers. |
Sale, sharing and targeted advertising
Tonmit does not sell personal information for monetary consideration. Depending on the tools enabled on the website and how California law applies, certain analytics or advertising technologies may be treated as “sharing” or a “sale” even when no money is exchanged.
Where applicable, information about cookie-related choices is available through our Cookie Preferences page. Tonmit processes recognized opt-out preference signals, such as Global Privacy Control, where required by applicable law and technically supported by the website configuration.
Sensitive personal information
The website is not intended to collect sensitive personal information such as patient health records, account passwords, government identifiers, precise geolocation or payment-card details through general inquiry forms. Please do not submit such information unless specifically requested through an appropriate secure process.
13
Marketing Communications
If you choose to receive updates, we may send business communications about products, sourcing support, documentation resources or service updates. You may unsubscribe using the link in a marketing email or by contacting us.
Even after you opt out of marketing, we may continue to send non-marketing messages related to an inquiry, quotation, order, documentation request, transaction, security issue or existing business relationship.
14
Third-Party Websites and Services
The website may link to third-party websites, social platforms, tools or resources. Tonmit does not control and is not responsible for their independent privacy, security or content practices. Review the privacy notice of each third-party service before providing personal information.
15
Children’s Privacy
The website is intended for business users and is not directed to children. We do not knowingly collect personal information from children under 13, or a higher minimum age where required by applicable law. Contact us if you believe a child has submitted personal information so that we can take appropriate action.
16
Changes to This Privacy Policy
We may update this Policy to reflect changes in our website, service providers, business operations, legal obligations or privacy practices. We will revise the “Last updated” date when changes are published. Material changes may be communicated through the website or another appropriate channel where required.
17
Privacy requests and questions
Contact Tonmit
Contact us with questions about this Privacy Policy or to exercise an applicable privacy right.
Tonmit14/F, The Belgian Bank Building
Nos. 721–725 Nathan Road
Kowloon, Hong Kong
info@tonmit.com Email a Privacy Request