Privacy Policy

1. Who we are

Shanghai Toko Technology Co., Ltd. operates tokoalloy.com under the TOKO ALLOY brand. TOKO ALLOY is the nickel and specialty alloy arm of TOKO TECH. For any question about this policy or about your personal data, contact us using the details on our contact page.

2. What we collect

We collect only what you type into the enquiry form on our contact page: your name, company, email address, telephone number and the content of your message. Providing these is voluntary, but we cannot prepare a quotation without at least an email address and a description of what you need.

Our hosting provider records standard server logs (IP address, requested URL, timestamp, user agent) for security and troubleshooting. These logs are not used to build profiles of visitors.

3. Why we process it, and on what legal basis

We use your enquiry data to answer you, prepare quotations, and correspond about an order. Under the GDPR the legal basis is the performance of pre-contractual measures at your request (Art. 6(1)(b)), and our legitimate interest in responding to business enquiries (Art. 6(1)(f)).

We do not use your data for automated decision-making or profiling, and we do not send marketing email unless you separately ask us to.

4. Who else sees it

Form submissions are delivered to us through Web3Forms (api.web3forms.com), which acts as a processor and transmits the content to our mailbox. Our website is hosted on Hostinger, which stores the server logs described above.

We do not sell, rent or trade personal data. We disclose it to third parties only where a processor is needed to run the site or answer you, or where we are legally required to do so.

5. Cookies

This website does not set analytics, advertising or tracking cookies. It does not run Google Analytics, a tag manager, or any session-replay tool.

Your language preference is carried in the URL path (/es/, /ru/) rather than in a cookie. Your browser may store assets in its own cache; that is under your control, not ours.

6. How long we keep it

Enquiries that do not lead to an order are deleted within 24 months. Where an enquiry becomes an order, the associated commercial records are kept for the period required by applicable tax and contract law.

Server logs are retained by the hosting provider for a short operational period and then rotated out.

7. Your rights

You may request access to the personal data we hold about you, ask us to correct it, ask us to delete it, object to our processing, or ask for a copy in a portable format. Write to us using the contact details on our contact page and we will respond within one month.

If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the data protection authority in your country of residence.

8. Changes to this policy

If the way we handle personal data changes — for example if we add analytics or a newsletter — this page will be updated and the date at the top will change with it.