§Legal information
Privacy Policy
How Kehong handles information submitted through this website.
This policy describes the information flows implemented on the Kehong website. It is written for the public-facing business identity shown on this site.
Who we are
The website presents Foshan Kehong Paper Products Co., Ltd. and its paper materials and custom packaging services.
What information we collect
Depending on how you use the site, we may receive inquiry details such as your name, company, email, phone or WhatsApp, country, product or SKU, quantity, dimensions, material, printing, shipping, message and the files you choose to upload.
Inquiry and contact information
We use information submitted through the contact and quote forms, or sent through the displayed email, telephone, WhatsApp or WeChat links, to understand and reply to a business request.
Files users upload
Uploaded reference images, drawings, specifications and office documents are checked for type, size and count before being attached to the inquiry email. Do not upload information that you are not authorised to share.
Technical and analytics information
The site reads the referrer, user agent and trusted request headers only where the implementation needs them. For visitor behavior summaries, the server normalizes a public IP, derives an HMAC hash for grouping and temporarily stores the raw IP in a short-lived digest queue so the administrator can receive a scheduled report. The browser cannot submit or read that IP, and it is not sent to analytics, cookies or browser storage. No IP-to-company or enrichment provider is used. The browser may store language preference cookies, selected products and attribution in browser storage. Vercel Analytics and Speed Insights remain statistical services with a footer opt-out.
Why we use information
We use information to answer inquiries, confirm product context, prepare quotations, review files, protect the service from abuse, remember selected products during a visit and measure site performance when you allow analytics.
Service providers
Customer inquiry data and uploaded files, and the short-lived visitor digest containing raw IP and browsing behavior, are sent to Resend's email API for delivery to the configured Kehong sales mailbox. Hosting and approved observability services may process technical data as part of serving and measuring the site. We do not send names, email addresses, phone numbers, WhatsApp details, attachment names or inquiry text to custom analytics events.
International processing and transfers
Resend, hosting and observability providers may process data in locations outside your country. Their processing locations and safeguards are governed by the provider terms and account settings that apply to the services used for this website.
Data retention
Visitor digest values containing raw IP are retained in short-lived Redis for up to 48 hours. A sent-window marker prevents duplicate delivery, and expired values are removed by TTL cleanup; this is not a long-term visitor or company history. Inquiry email retention follows business, legal, security and provider requirements. Browser attribution is held in sessionStorage until the browser session or site data is cleared; the analytics opt-out preference is kept in localStorage until it is cleared or changed.
Security
The site validates inquiry fields and attachments, limits attachment size and count, escapes email content, uses server-only provider credentials and applies rate limiting and idempotency checks. No online system can guarantee absolute security.
Your rights
Where applicable, you may have rights to access, correct, delete, restrict or object to processing, or to request a copy of information. Contact us using the address below so the request can be assessed against the relevant law and records.
Cookies and similar technologies
The site uses strictly necessary preference cookies named NEXT_LOCALE and kehong_locale to keep a selected language on later visits. It does not use marketing cookies. Analytics and performance measurement are statistical, non-essential technologies that can be disabled from the site footer. You can clear cookies or browser storage at any time.
Children
This is a B2B website and is not directed to children. If a child has submitted personal information, a parent or guardian may contact us to request review or deletion where applicable.
Changes to this policy
We may update this policy when the website, services or information practices change. The current version is published on this page.
Contact
Questions about this policy or an inquiry can be sent to the displayed general contact email.
Visitor behavior digest
If explicitly enabled, the server may process a public IP, an HMAC hash for grouping, and privacy-safe behavior events for a short-lived scheduled administrator digest. It does not identify companies or individuals, use IP-to-company enrichment, advertising, cross-site tracking, or fingerprinting.