Privacy Policy

1. Controller and scope

JIANGSU KAMAX INTERNATIONAL IMP AND EXP CO.,LTD (“KAMAX”) is the controller of personal information processed through quotations and business inquiries on kamaxglobal.com.

Representative: 张美婵

Privacy contact: support@kamaxglobal.com

This policy applies to the English-language KAMAX website and its online request-for-quotation (“RFQ”) service. The website is intended for business-to-business use. External websites and email services selected by a visitor are governed by their own policies.

2. Personal information we process

Required fields: company name, contact name, email address, telephone number, product of interest, consent to collection and use, and separate consent to cross-border transfer.

Optional fields: specifications and quantity, inquiry details, and one attachment. If an attachment is submitted, KAMAX also processes its file name, type, size, and private storage reference. Do not include sensitive information that is not necessary for the inquiry.

Automatically processed information: submission ID, selected locale, request time, and security-verification data. The connection IP address is used by Cloudflare for rate limiting and Turnstile verification and is sent with the Turnstile verification request, but it is not stored in KAMAX's RFQ inquiry record.

3. Purposes and basis of processing

Validate input and accept the inquiry

Review quotations, provide sales support, and follow up

Send the customer an acknowledgement and submission ID

Deliver an attachment securely

Prevent automated abuse, spam, and anomalous requests

Manage inquiry status and respond to privacy-rights requests

KAMAX processes RFQ information on the basis of the individual's explicit consent. You may refuse or withdraw consent, but the online RFQ cannot be submitted without the processing and cross-border transfer that are required for this service. Withdrawal does not affect processing lawfully carried out before withdrawal.

4. How information is processed and accessed

A validated inquiry is stored in a Payload CMS/D1 queue accessible only to authenticated administrators. An optional attachment is stored in a private R2 bucket, while D1 stores only its metadata. The sales notification may contain the inquiry details and a signed attachment link valid for no more than seven days. The customer acknowledgement contains only general guidance, the submission ID, and the public contact address; it does not contain RFQ fields or attachment data.

Operational logs contain only the submission ID, locale, processing stage, outcome code, and latency. They do not contain RFQ field values or attachment names. Authorized KAMAX personnel in China and South Korea may access RFQ information solely to review quotations and respond to inquiries. KAMAX manages inquiry copies only in Payload CMS/D1 and the final Gmail mailbox; it does not copy or forward them to Excel, WeChat, a CRM, Slack, personal computers, suppliers, or other partners.

5. Retention and deletion

Payload/D1 inquiry record and RFQ attachment: 90 days from submission

Signed attachment-download link: no more than seven days after creation

KAMAX-controlled copies of sales notifications and customer acknowledgements: permanently deleted within 90 days after receipt

At the end of the retention period, KAMAX deletes the D1 record, removes the attachment through the R2 lifecycle policy, and permanently deletes controlled mailbox copies. KAMAX cannot delete an acknowledgement that has already been delivered to the customer's own mailbox.

6. Processors and cross-border transfers

KAMAX uses the following services to operate the website, verify security, store inquiries, and deliver email. Separate cross-border-transfer consent is obtained when processing occurs outside the visitor's country.

Cloudflare, Inc. (United States; 101 Townsend Street, San Francisco, CA 94107, USA; dpo@cloudflare.com): Workers, Turnstile, D1, and R2 process requests, verify security, store inquiries, and hold attachments. Data may include RFQ fields, submission ID, locale, attachment, and the IP address used for security verification, and is transferred over encrypted networks when submitted. D1 inquiry records and R2 attachments are retained for 90 days. Turnstile tokens expire after five minutes and Free-plan analytics are available for up to seven days. The contracting recipient is in the United States; R2 is configured with an APAC location hint, which does not guarantee storage in a specific country.

Plus Five Five, Inc., operating as Resend (United States; 2261 Market Street #5039, San Francisco, CA 94114, USA; privacy@resend.com): sends sales notifications and customer acknowledgements. Contact details, RFQ content, submission ID, and a signed attachment link may be transferred through an encrypted API immediately after acceptance. Under the current Free plan, email content and logs are retained for 30 days and backup copies for seven days.

Google LLC, Gmail (United States; 1600 Amphitheatre Parkway, Mountain View, California 94043, USA; policies.google.com/privacy): receives sales inquiries for follow-up and processes RFQ information and signed attachment links. KAMAX permanently deletes its controlled mailbox copies within 90 days. Google permanently deletes messages that remain in Trash for 30 days; copies in customer mailboxes are outside KAMAX's control.

If you refuse cross-border transfer, you cannot submit the online RFQ. KAMAX requires appropriate security and rights-protection measures from recipients and complies with cross-border requirements under applicable law.

7. Security measures

KAMAX uses administrator authentication and access restrictions, encryption in transit, private attachment storage, expiring signed links, validation of input and file type and size, Turnstile verification, rate limiting, minimal non-identifying operational logs, scheduled deletion, and version history. If an incident occurs or is suspected, KAMAX investigates its impact and performs required remediation and legal notification.

8. Your rights and how to exercise them

Subject to applicable law, you may ask whether and how KAMAX processes your information; request access or a copy; request correction, completion, or deletion; restrict or object to processing; withdraw consent; request an explanation of the processing rules; and make a complaint.

Send requests to support@kamaxglobal.com. KAMAX will reasonably verify the requester and respond within the periods and exceptions set by applicable law. An authorized representative may be asked to provide proof of authority. For deletion requests, KAMAX will explain any copy outside its control, such as a customer's mailbox.

9. Children's information

This business-to-business website is not intended for children under 14. KAMAX does not knowingly collect children's personal information. If KAMAX learns that information about a child was submitted without guardian consent, it will verify and delete that information.

10. Cookies and security technology

KAMAX currently does not use advertising or audience-tracking analytics on the public website. Turnstile and Cloudflare may process essential technical signals to secure the site and prevent abuse. This processing is not used by KAMAX for advertising profiling.

11. Changes and languages

KAMAX updates this policy when its processing or legal obligations change and displays the effective date on each language page. Material changes will be communicated by reasonable means before they take effect. The Korean, English, and Simplified Chinese documents are maintained with the same intended meaning and are not automatic fallback translations. If a discrepancy is found, KAMAX will correct it to reflect applicable law and actual processing and will provide clarification on request.

12. Contact

Questions about processing, rights requests, or complaints: support@kamaxglobal.com

Controller: JIANGSU KAMAX INTERNATIONAL IMP AND EXP CO.,LTD

Representative: 张美婵