Send a Requirement
Privacy

Privacy notice

This notice explains how MASHA TOOLS CO., LTD. / 原盛有限公司 ("MASHA TOOLS") handles personal information submitted through this website, email and related B2B sourcing or quotation communications.

Last updated: 28 August 2026.

1. Who is responsible for the information

MASHA TOOLS CO., LTD. / 原盛有限公司, Taiwan Unified Business No. 24602544, is the business responsible for inquiry information described in this notice. Privacy or data-rights questions can be sent to masha@masha-tools.com.

2. Information we may receive

When you contact MASHA, we may receive company and business-contact information such as company name, country, contact person, email address and company website; sourcing information such as product references, quantities, target price, target market, timing and origin preference; and any messages, photos, drawings, specifications, spreadsheets or other files that you choose to provide.

Please avoid sending personal information that is not necessary for the business request. If a drawing or specification is highly confidential, pre-NDA, or should not yet be shared with potential suppliers, contact MASHA before sending it.

3. Why the information is used

MASHA uses inquiry information to understand and respond to your request, evaluate sourcing or customization options, communicate about samples or quotations, coordinate suppliers and related service providers, maintain business records, protect the website and communications, and meet applicable legal or regulatory obligations.

Where data-protection law requires a legal basis, the basis may include taking steps at your request before entering a business arrangement, performing an existing business relationship, MASHA's legitimate interests in responding to B2B inquiries and maintaining necessary business records, compliance with legal obligations, or consent where consent is specifically required.

The current website does not use automated decision-making or profiling to decide whether MASHA will accept or quote a sourcing request.

4. Period, area, recipients and methods of use

  • Period: information is kept while an inquiry, quotation, sourcing project or business relationship is active and afterward only for the period reasonably needed for follow-up, dispute handling, security, accounting, tax or other applicable record-keeping obligations.
  • Area: information may be processed in Taiwan and, when a project requires it, in countries where relevant suppliers or service providers operate.
  • Recipients: MASHA personnel, selected suppliers and service providers may receive only the information reasonably needed for the relevant sourcing, quotation, testing, packaging, logistics, hosting, email, file-handling, security or professional-service purpose.
  • Methods: information may be handled electronically or in ordinary business records, including through website forms, email, file transfer, quotation records and supplier-coordination communications.

5. Suppliers, service providers and international transfers

A sourcing request may require MASHA to share relevant product requirements with potential or selected external suppliers. Website, email, form-processing, file-storage or security providers may also process information for MASHA. MASHA limits those disclosures to information reasonably needed for the relevant purpose.

Because MASHA is established in Taiwan and serves international buyers, information submitted from another country may be transferred to or processed in Taiwan. A sourcing project may also involve suppliers or service providers in other countries. Where applicable law requires safeguards for an international transfer, MASHA will use the transfer mechanism or safeguard required for the relevant processing arrangement.

6. Your choices and rights

Subject to applicable law, you may ask MASHA to provide information about personal data held about you, give access or a copy, correct incomplete or inaccurate data, stop certain collection, processing or use, or delete data when the applicable conditions are met. Where GDPR applies, additional rights may include restriction, portability, objection and the right to lodge a complaint with the competent data-protection supervisory authority.

To exercise a privacy right, email masha@masha-tools.com and describe the request. MASHA may need reasonable information to verify the requester before acting on the request.

7. What happens if you do not provide information

Providing inquiry information is generally voluntary. MASHA needs enough contact and product-request information to understand and answer the request. If required contact details or sufficient product information are not provided, MASHA may be unable to evaluate the request, prepare a quotation or continue the sourcing discussion. Optional commercial details can be omitted and supplied later.

8. Browser inquiry list

The website can store selected product item numbers and estimated quantities in your own browser so an inquiry list remains available while you browse. This browser-stored list is not sent to MASHA unless you include it in a sourcing or quotation request. You can remove individual items or clear the list at any time.

9. Security and confidential project material

MASHA takes reasonable measures appropriate to the way inquiry information is handled. No Internet or email transmission can be guaranteed completely secure. Do not use the standard website workflow for material that requires a specific NDA, restricted supplier access or another confidential-transfer arrangement unless that process has first been agreed with MASHA.

10. Website and service providers

Website hosting, email, form processing, file handling and security may involve third-party service providers. MASHA reviews the providers and processing arrangements used for the live website and updates this notice when a material change affects how inquiry information is handled.

11. Contact and complaints

Questions or requests regarding personal information can be sent to masha@masha-tools.com. If a law that provides a regulatory complaint right applies to you, you may also contact the competent privacy or data-protection authority for your jurisdiction.