Who we are

This Privacy Policy says which personal data we collect on this website, what we do with it, and what you can do.

The company that is responsible for this website and for the data described here (the controller) is KKBC Corporation, 3285 Gibson Rd NW, Salem, OR 97304, United States. In this policy, “we” and “KKBC” mean KKBC Corporation. The KKBC group has companies in Japan, Hong Kong, China, Korea, Singapore, India, Indonesia, Australia, the United Kingdom and the United States.

Privacy contact: kkbc-ga-legal-data-privacy-officer@kkbc.co

Read these four points first:

• A record for each browser. If you click Accept on the cookie banner, we keep a record for your browser. It holds what you open, click and search, your network address (IP), and the city and organisation that the address belongs to. It is more than a count of visits.
• No time limit. We set no time limit for visitor records and enquiries. We keep them until a person at KKBC deletes them or until you ask us to delete them.
• Stored in the United States. We store your data on our servers in the United States. KKBC staff in other countries can read an enquiry that is sent to them to answer.
• Reject does not remove everything. If you change from Accept to Reject, some data of a linked enquiry stays until you ask us to remove it. See “How long we keep it”.

Children

This website is for businesses. It is not meant for children. We ask persons under 16 not to send a form.

What you give us

We collect what you enter in a form on this website. Depending on the form, this is:

• about you: your name, e-mail address, telephone number, and job title or role;
• about your company: its name, industry, location, website, and years in business;
• what you ask for: the service, your intent, your marketing goal, the range of your annual spend, the range of your yearly revenue, how you heard of KKBC, and whether you are already a client;
• your message;
• the files that you attach.

You decide whether you send a form. Fields marked * are needed to send that form. On the Client form, the telephone number is such a field.

Our forms do not ask for your gender, date of birth or marital status. They do not ask for photographs or recordings.

Documents with a one-time code

To open some documents, the site asks for your e-mail address and sends a one-time code to it.

What we collect on the site

Before you choose, and after Reject

We send nothing to Google Analytics and nothing to our visitor record system. There is one exception: if you change from Accept to Reject, your browser sends a request that asks for the deletion, as described under "How long we keep it". We set only the cookies marked "Strictly necessary" in the Cookie Notice.

When you click Accept or Reject, our website stores a record of your choice: a random number, the choice, the version of the banner, the time and the language of the page. This record holds no name.

A content delivery network, BunnyCDN (bunny.net, a company in Slovenia), delivers the pictures, scripts and style sheets of this website. For this delivery it receives your network address (IP), with and without a cookie choice. Before your choice, a page contacts no other outside service.

At all times, our web servers keep a log of requests: the time, the address of the page, the network address and the browser name. We use the log for security and to find faults. We keep it on our own servers. We set no fixed period for it.

After Accept: our visitor record

Our visitor record system keeps one record for each browser on each KKBC country site. This is more than totals: it is a record of what one browser does. It keeps:

• the pages you open and when;
• the site you came from and the campaign tags in the link;
• the languages and the time zone of your browser;
• the type and model of your device, the operating system and its version, the browser and its version, and the size of the screen and the window;
• the browser number and the session number of Google Analytics;
• if you arrived from an advertisement, the click number of the advertising network (Google, Microsoft, Facebook, LinkedIn, TikTok or X);
• your network address (IP), stored exactly as we receive it;
• the buttons and links you click (for a link to another website, the domain of that website) and your clicks on contact links;
• the files you open (the file name) and the videos you start and end;
• how far you scroll on a page and for how many seconds you use it;
• the words you type into the site search. We drop them when they hold "@" or four digits in a row;
• how you use a form: that you started it, the name of the last field you touched when you leave without sending, and the names of fields with an error;
• when you send a form: which form it was, the kind of enquiry, the stage and the service you chose.

The record never keeps the text that you type into a form field. The record has no name and no e-mail address.

After Accept: place and organisation

From your network address (IP) we add the country, the region, the city, and the organisation or internet provider that the address belongs to. We do this to see which companies and regions read our site. We take this from MaxMind GeoLite2 data that we keep on our own server, and from the public reverse name (DNS) of the address. To get this name, our server sends the address in a question to the public name servers of the internet. MaxMind receives nothing.

This product includes GeoLite Data created by MaxMind, available from https://www.maxmind.com

After Accept: Google Analytics

Google Analytics receives the page views and the same events, with a random browser number. It does not receive the words of the site search. Google sees the network address (IP) of the request. We switched off the settings that share this data with Google's own products and with benchmarking. We use no advertising features.

Careers pages

The pages of the careers section count in the visitor record like other pages. We do not link them to a job application.

How we use it

Statistics

We use Google Analytics and our visitor record to see how our site is used and which companies and regions read it.

KKBC marketing staff and IT staff read the visitor records that are not linked to an enquiry. They read them in reports that show which pages, regions and organisations read the site.

Your enquiry

Your enquiry goes to our customer system (CRM). A program sorts it by your form answers and passes it to a salesperson at the KKBC company that serves your country or your topic. A person reads it and decides how we answer you. The program makes no decision that has a legal effect, or a similar effect, on you.

The link between your visits and your enquiry

We make this link only if you clicked Accept on the cookie banner and you also tick the optional box at the form. The box is never ticked for you.

If you tick it, your enquiry gets four things:

• a link number to your visitor record;
• the dates of your first and last visit;
• the number of your visits;
• your first source (a campaign or the site you came from).

With the link number, a salesperson can open your visitor record and see which pages you read and when. This includes pages that you read before the enquiry.

If you do not tick the box, we make no link. The visitor record still holds the event "a form was sent" with its time. We do not use it to match a visitor record to an enquiry.

Marketing e-mail

We send you marketing e-mail only if you tick the marketing box at the form. See "Marketing e-mail" below.

Legal basis

We use one legal basis for each purpose. "No time limit" means: until a person at KKBC deletes the data or until you ask us to delete it.

Purpose	Data	Legal basis	Who receives it	How long
Statistics with Google Analytics, and the transfer of this data to Google	Page views and events, a random browser number, the network address (IP) of the request	Your consent (cookie banner)	Google	Google deletes its records of single events after 14 months
Our visitor record	What one browser opens and does on the site, device and browser data, the network address (IP)	Your consent (cookie banner)	KKBC marketing staff and IT staff	No time limit, or until you change to Reject
Look-up of place and organisation	The network address (IP); from it the country, region, city, and the organisation or internet provider	Your consent (cookie banner)	KKBC. The public name servers of the internet receive the address in the question for its name.	No time limit, or until you change to Reject
Link of the visitor record to an enquiry	A link number, the dates of the first and last visit, the number of visits, the first source; through the link, the pages read and when	Your consent (tick box at the form)	The salesperson at the KKBC company that answers you	No time limit
Answering an enquiry and passing it to the right person	What you enter in the form, your message, your files	Our legitimate interest in answering a business enquiry. You can object.	Staff of the KKBC company that serves your country or your topic. Twilio SendGrid sends the confirmation e-mail.	No time limit
Marketing e-mail	Your e-mail address	Your consent (marketing box at the form)	KKBC. Twilio SendGrid sends the e-mail.	We send it until you stop it
Giving you a document that you asked for (documents with a one-time code)	Your e-mail address	Our legitimate interest in giving you the document at your request	KKBC. Twilio SendGrid sends the code.	No fixed period is set
Record of your cookie choice	A random number, the choice, the version of the banner, the time, the language of the page	Our legal duty to be able to show your consent	KKBC	No time limit
Showing the site that you asked for, and remembering your cookie choice and the language	The strictly necessary cookies; for the delivery of files by BunnyCDN, the network address (IP)	Our legitimate interest in running the site. We need no consent for these.	KKBC; BunnyCDN for the delivery of files	Cookies: see the table in the Cookie Notice
Security of the website and finding faults	A log of requests: the time, the address of the page, the network address, the browser name	Our legitimate interest in a secure website	KKBC	No fixed period is set

You can withdraw each consent at any time. See "Your rights" for how.

Marketing e-mail

We send you marketing e-mail only if you tick the marketing box at the form. The box is optional.

Each marketing e-mail has a link to stop it. You can also write to kkbc-ga-legal-data-privacy-officer@kkbc.co. If you object to marketing, we always stop.

Who receives your data

• Google. After you click Accept, Google Analytics receives the page views and events, a random browser number and the network address (IP) of the request. Read How Google uses information from sites or apps that use our services.
• BunnyCDN (bunny.net, a company in Slovenia). It delivers the pictures, scripts and style sheets of this website and receives your network address (IP) for that delivery.
• Twilio SendGrid (United States). It sends the e-mails of this website: the confirmation of an enquiry, the one-time code, and marketing e-mail. It receives your e-mail address and the text of the e-mail.
• The company that rents us the servers (HostRush, United States). We operate the servers ourselves.
• KKBC group companies. An enquiry goes to a salesperson at the KKBC company that serves your country or your topic. The group has companies in Japan, Hong Kong, China, Korea, Singapore, India, Indonesia, Australia, the United Kingdom and the United States.

MaxMind receives nothing: its data file is on our own server. To get the public reverse name of a network address, our server sends the address in a question to the public name servers of the internet.

The visitor record system and the customer system (CRM) run on our own servers.

Courts and authorities

We give personal data to a court or an authority only when the law requires it.

We do not sell your data

KKBC does not sell personal data. KKBC does not share it for advertising on other websites. This website uses no advertising cookies and no advertising features.

Other countries

We store your data in the United States. Our website, our visitor record system and our customer system (CRM) run on servers in Dallas, Texas.

KKBC staff in these countries can open an enquiry that is sent to them to answer: Japan, Hong Kong, China, Korea, Singapore, India, Indonesia, Australia, the United Kingdom and the United States. If you ticked the box at the form, they can also open the visitor record that is linked to the enquiry.

Google may process data in the United States and in other countries. Twilio SendGrid, which sends our e-mails, is in the United States.

The laws of the United States and of the other countries named here can give less protection than the law of your country. Authorities there can ask for data under their laws.

If you are in the European Economic Area (EEA), the United Kingdom or another region with rules for the transfer of personal data, this is the basis on which we transfer your data:

• Statistics. Your consent, which you give with the cookie banner. The banner tells you that this data can be kept in the United States.
• An enquiry. You send it to KKBC Corporation in the United States to get an answer. The KKBC company that serves your country or your topic gets it for the same reason: to answer you.
• The web server log, the delivery of files and the e-mails of this website. They are needed to show you the site and to send you the e-mail that you asked for.

Other KKBC sites

KKBC has a website for each of several countries. Each country site asks for your cookie choice again and keeps its own visitor record. A choice on one site does not change another site.

If you clicked Accept and you move to another KKBC country site by a link, the link carries your Google Analytics browser number, so that Google counts one visitor.

Where we keep it

We keep the website, the visitor record system and the customer system (CRM) on servers that we rent and operate ourselves in Dallas, Texas, United States.

A visitor record has no name and no e-mail address. We keep the network address (IP) in it exactly as we receive it.

Our web servers keep a log of requests: the time, the address of the page, the network address and the browser name. We use the log for security and to find faults. We keep it on our own servers. We set no fixed period for it.

Security

• All pages use an encrypted connection (https).
• KKBC operates the servers.
• Staff sign in with a personal account. They get access only to what their work needs.

How long we keep it

We set no time limit for visitor records and enquiries. We keep them until a person at KKBC deletes them, or until you ask us to delete them. We also delete a visitor record when you change from Accept to Reject, as described below.

• Record of your cookie choice: no time limit. We keep it as proof of your choice.
• Google Analytics: Google deletes its records of single events after 14 months.
• Log of requests on our web servers: no fixed period is set.
• Cookies: see the table in the Cookie Notice.

What happens when you change from Accept to Reject

• We delete the statistics cookies in your browser. We collect nothing new. Your browser keeps your visitor number and your Google Analytics browser number in one value (kkbc_withdraw) until the deletion is confirmed, 14 days at most.
• Your browser tells our website. A job then deletes the visitor record of this browser on this country site from our visitor record system, usually within 10 minutes.
• The same job asks Google to delete the Google Analytics events of this browser. Google does this in its own time. This can take up to about 2 months.

What a change to Reject does not remove. If you ticked the box at an enquiry form, that enquiry keeps four things: the link number (it then points to nothing), the dates of your first and last visit, the number of your visits, and your first source. We remove them only when you ask us. The enquiry itself also stays.

When the automatic deletion does not work. It works only while your browser still holds its visitor cookie. This cookie ends after 6 months without a visit, or when you clear your cookies. It also covers only this browser on this country site. In all other cases, write to kkbc-ga-legal-data-privacy-officer@kkbc.co.

What we need to find your visitor record. A visitor record has no name. We can find it in three ways:

• by your visitor number, which is the value of the cookie kkbc_cdp. Your browser shows it in its settings for this site, in the list of cookies, as the value of kkbc_cdp;
• through an enquiry that was linked to it;
• by your network address (IP) together with the date and time of a visit. This way is less sure, because several people can share one address.

If you ask for deletion by e-mail, give us one of these. If you can give us none of these, we cannot find your record and we cannot delete it for you. So change to Reject before you clear your cookies.

Your rights

To use a right, write to our privacy contact: kkbc-ga-legal-data-privacy-officer@kkbc.co. We answer within one month.

• Access. You can ask whether we hold data about you, and ask for a copy.
• Correction. You can ask us to correct data that is wrong.
• Deletion. You can ask us to delete your data. This includes an enquiry, a visitor record, and the visit data on a linked enquiry. A visitor record has no name. To find it, we need one of three things: your visitor number (the value of the cookie kkbc_cdp), an enquiry that was linked to it, or your network address (IP) together with the date and time of a visit. If you can give us none of these, we cannot find your record and we cannot delete it for you. See "How long we keep it".
• Restriction. You can ask us to limit how we use your data.
• Objection. You can object to our use of your data. This includes our use of your enquiry to answer it and to pass it to the right person. If you object to marketing, we always stop.
• Portability. You can ask for your data in a form that you can give to another service.
• Withdrawal of your cookie consent. Use "Cookie settings" at the bottom of each page and click Reject. You can do this at any time.
• Withdrawal of the link to your enquiry. Write to kkbc-ga-legal-data-privacy-officer@kkbc.co. This is the only way today: the website has no button for it. A click on Reject does not remove the visit data from a linked enquiry.
• Withdrawal of your marketing consent. Use the link in each marketing e-mail, or write to kkbc-ga-legal-data-privacy-officer@kkbc.co.
• Complaint. You can complain to the data protection authority of the country where you live or work.

California

If you live in California, we offer you these rights:

• Know. You can ask which personal information we collect about you and how we use it.
• Delete. You can ask us to delete it.
• Correct. You can ask us to correct it.
• No retaliation. We do not treat you worse because you use these rights.

KKBC does not sell personal information. KKBC does not share it for cross-context behavioural advertising.

To use a right, write to kkbc-ga-legal-data-privacy-officer@kkbc.co.

Changes to this policy

When we change this policy, we change the date at the top of this page.