1. About This Policy
This Policy explains how Hunan Kama Musical Instrument Manufacturing Co., Ltd. (“we”, “us”, or “Kepma”) collects, uses, stores, and protects your personal information when you visit kepmaguitar.com and its language versions.
We do not offer account registration, comments, or content uploads. The personal information we collect is therefore limited, consisting mainly of enquiry forms you submit voluntarily and technical data generated automatically as the website operates.
2. Who We Are
| Item | Details |
|---|---|
| Data controller | Hunan Kama Musical Instrument Manufacturing Co., Ltd. |
| Registered address | Haixin Road, Ningxiang Economic and Technological Development Zone, Changsha, Hunan Province, China |
| Contact email | contact@kepmaguitar.com |
| ICP filing | 湘 ICP 备 2024041061 号-2 |
3. Information We Collect
3.1 Information you provide
When you contact us through the enquiry form on our website, we collect the information you enter, which typically includes: your name, email address, telephone number or instant-messaging ID, country or region, company name (for dealer enquiries), and the content of your enquiry.
Which fields are mandatory is indicated on the form itself. You may choose not to provide optional information, although this may affect our ability to respond to your enquiry.
3.2 Information collected automatically
When you visit our website, we and our service providers automatically record: IP address, browser type and version, operating system, time of access, pages viewed and time spent, referring page, device type and screen resolution, and language preference.
This data is used to keep the website secure, analyse traffic, and improve our content. It is not used to identify you personally.
4. Cookies and Similar Technologies
| Cookie | Source | Purpose | Duration |
|---|---|---|---|
acw_tc | Alibaba Cloud ESA | CDN traffic routing | 1 hour |
cdn_sec_tc | Alibaba Cloud ESA | CDN security protection | 1 hour |
_ga | Google Analytics | Distinguishes visitors | 2 years |
_ga_86H39EVSHY | Google Analytics | Maintains session state | 2 years |
XSRF-TOKEN | DingTalk Forms | Cross-site request forgery protection | Session |
pll_language | Polylang | Remembers your language choice | 1 year |
You can refuse or delete cookies through your browser settings. Disabling essential cookies may prevent certain features — such as language switching and form submission — from working correctly.
5. Third-Party Services We Use
| Service | Provider | Purpose | Data destination |
|---|---|---|---|
| Google Analytics 4 | Google LLC (USA) | Website traffic analysis | United States and Google’s global servers |
| DingTalk Forms | Alibaba (China) | Hosts our contact form | Mainland China |
| Alibaba Cloud ESA | Alibaba Cloud (China) | Content delivery and security | Global edge nodes |
| Feishu Enterprise Mail | Beijing ByteDance (China) | Receives and stores enquiry emails | Mainland China |
Important: Our contact form integrates the DingTalk Forms service via an embedded iframe. Information you enter into that form is submitted directly to DingTalk’s servers and is also governed by DingTalk’s own privacy policy.
6. How We Use Your Information and Our Lawful Basis
| Purpose | Lawful basis under the GDPR |
|---|---|
| Responding to product enquiries, dealership applications, and after-sales requests | Steps prior to entering into a contract / Legitimate interests |
| Sending you product materials you have requested | Performance of a contract |
| Analysing website traffic to improve our products and content | Legitimate interests |
| Preventing fraud, abuse, and cyberattacks | Legitimate interests / Legal obligation |
| Complying with applicable laws and regulations | Legal obligation |
We do not use your personal information for automated decision-making or profiling, and we do not sell your personal information.
7. Sharing Your Information
We share your information only in the following circumstances:
- Authorised dealers: Where your enquiry concerns local purchase, trying an instrument, or after-sales service, we may forward your contact details to the authorised dealer in your country or region so that they can contact you directly. If you prefer that we do not, please say so in your enquiry.
- Service providers: The technical providers listed in Section 5, strictly to the extent necessary to provide their services to us.
- Legal requirements: In response to lawful requests from judicial or regulatory authorities, or to protect our rights or the rights of others.
8. International Data Transfers
Our servers and principal data-processing facilities are located in the People’s Republic of China.
If you access this website or submit an enquiry from outside China — including from the European Economic Area, the United Kingdom, Japan, or South Korea — your information will be transferred to, stored in, and processed in China.
For users in the EEA and the UK: China has not received an adequacy decision from the European Commission. We rely on【Standard Contractual Clauses (SCCs) / your explicit consent / the necessity of performing a contract】as the basis for these transfers. You may request further information about the safeguards in place.
9. Retention Periods
| Type of data | Retention period |
|---|---|
| Enquiry form content and email correspondence | 3 years after last contact |
| Contact details of established dealer partners | Duration of the relationship plus 5 years (tax and contractual requirements) |
| Server access logs | 6 months |
| Google Analytics data | 14 months |
Data held beyond these periods is deleted or anonymised.
10. Your Rights
Wherever you are located, you may ask us to: access the personal information we hold about you, correct inaccurate information, delete your personal information, and withdraw any consent you have previously given.
If you are located in the EEA or the UK, you additionally have the following rights under the GDPR: the right to restriction of processing, the right to data portability, the right to object to processing (in particular processing based on legitimate interests), and the right to lodge a complaint with the data protection supervisory authority in your country.
To exercise these rights, please email contact@kepmaguitar.com. We will respond within 30 days of receiving your request. We may need to verify your identity first in order to protect your information.
11. Children
This website is intended for adults and professional musicians. We do not knowingly collect personal information from children under 14 (under 16 in the EEA). If you believe we have inadvertently done so, please contact us and we will delete it promptly.
12. Information Security
We protect your information through technical and organisational measures including site-wide HTTPS encryption, HSTS enforcement, least-privilege access controls, and security review of our service providers. Please understand, however, that no method of transmission or storage over the internet is completely secure.
13. Changes to This Policy
We may update this Policy from time to time. Material changes will be announced prominently on this page, and the “Last updated” date at the top will be revised. We encourage you to review this page periodically.
14. Contact Us
For any questions, comments, or complaints regarding this Policy:
Email: contact@kepmaguitar.com
Address: Hunan Kama Musical Instrument Manufacturing Co., Ltd., Haixin Road, Ningxiang Economic and Technological Development Zone, Changsha, Hunan Province, China