Privacy Policy
This Privacy Policy explains what information Kong Group LLC, a limited liability company registered in Wyoming, United States ("Kong Group", "we", "us" or "our") collects when you visit www.konggroup.net, together with the pictures, films and brand files it loads from cdn.konggroup.net and brand.konggroup.net (the "Site"); what we do with it; who processes it for us; and the choices you have. Kong Group LLC is the controller of this information. This policy does not cover the websites of the Group’s companies and products.
Effective 21 October 2026
1. What We Collect
The Site has no accounts or sign-ups, and you can read every page without telling us who you are. Its one form is the contact form. It collects information in five ways.
When you email us. The Site’s contact links open your own email program. If you write to us, we receive what you send: your name and email address, the message, and any attachments.
When you use the contact form. It asks for your first and last name, your email address and your mobile number; your company or organisation, if you give it; what your enquiry is about, your message, and any files you attach; and that you agree to this policy. Our server sends all of it, as one email with your files attached, to the mailbox for your kind of enquiry, and sends you an acknowledgement with a reference number. To keep automated spam out, the form runs Cloudflare Turnstile: before you send, it checks in the background, from signals in your browser, that a person is sending, and our server checks its answer once with Cloudflare. The email to our team also records the IP address your message came from and the country Cloudflare places it in, your browser’s user-agent string, and what your browser reports about itself (its name and version, your operating system and its version, and your device’s model and type). The server keeps no copy of your message. To stop the form being flooded, it counts in its memory, for one hour, how many messages each IP address sends; it writes no IP address to its logs.
When your browser asks for a page or a file. Every request passes through Cloudflare, which receives your IP address, your browser’s user-agent string, the address requested and the page that referred you, as any web server does.
When something fails. If a page fails while it runs in your browser, it sends a short error report to our server: the error message, where in our code it occurred, the page’s path (without any query or fragment) and your browser’s user-agent string. Our server writes the report to its own log, without your IP address, and logs its own errors there the same way, with the path and user-agent string of the request that caused them.
Through Google Analytics, which runs on every page. "Analytics and Cookies" below says exactly what it collects.
The Site is not directed at children under 16, and we do not knowingly collect their information. If you believe a child has written to us, contact us and we will delete the message.
2. How We Use It, and Why
We use your email, or what you send through the contact form, to reply to you and to deal with what you ask, and we keep it as part of our business records. We rely on our legitimate interest in answering the people who write to us or, where you write about a possible agreement with us, on taking the steps you ask for before entering into it.
We count the contact form’s messages per IP address only to keep automated traffic and abuse away from the form. We rely on our legitimate interest in a form that people, not machines, can use.
We record the IP address and browser details sent with a contact-form message to tell genuine enquiries from abuse and fraud, and to answer them properly. We rely on our legitimate interest in a form that is safe to answer.
We use request information to deliver the Site and to protect it from abuse and attack, and error reports only to find and fix faults. We rely on our legitimate interest in running a secure website that works.
We use Google Analytics to see, in aggregate, which pages are read and how people reach them, so that we can improve the Site. We rely on our legitimate interest in understanding how the Site is used; we do not ask for your consent first.
We do not sell personal information and we do not use it to make automated decisions about you. Apart from the Google Analytics data described under "Analytics and Cookies", we do not share it with anyone for advertising.
3. Who Processes It for Us
A small number of service providers process information on our behalf, each under its own data-processing terms:
Cloudflare, Inc. (United States) carries every request to the Site across its global network and through an encrypted tunnel to our server, protects the Site from attack, stores and serves our pictures, films and brand files, and runs Turnstile, the contact form’s spam check.
UpCloud Ltd (Finland) hosts our web server in its data centre in Amsterdam, the Netherlands.
Google LLC (United States) hosts our email in Google Workspace and delivers the contact form’s messages: our server hands each message, with its attachments, to Gmail, which delivers it to our mailbox and sends you its acknowledgement. The messages you send us, by email or through the contact form, are stored in Google Workspace.
Google LLC (United States) provides Google Analytics, which "Analytics and Cookies" describes.
We also share information with professional advisers, such as lawyers and accountants, where they need it to advise us, and with courts, regulators or other authorities where the law requires it.
5. How Long We Keep It
Emails: for as long as we need them to deal with your message and anything that follows from it, and after that only for as long as our legal, tax and accounting obligations require.
Contact-form messages, their attachments and the sender details recorded with them: our server keeps no copy; they are kept in our mailboxes as emails are, above. The count of messages per IP address: in our server’s memory, for one hour.
Our server’s logs: they record start-ups, errors and health checks, not visitors’ IP addresses, and are deleted within 15 days.
Error reports: in our server’s logs, so deleted within 15 days with them.
Request information at Cloudflare: kept by Cloudflare only for as long as its data-processing terms allow.
Google Analytics: event-level data from your visits is kept for no more than 14 months. Reports that only count visits, without identifying anyone, may be kept for as long as our Google Analytics account exists.
6. Where It Is Processed
Kong Group LLC is a United States company, and our team may read and answer email from any of the countries in which the Group works. Our web server is in the Netherlands. Cloudflare usually answers each request from its data centre nearest to you. Google stores our email, sends the contact form’s emails and processes analytics data in the United States and other countries.
Where personal information from the European Economic Area, the United Kingdom or Switzerland goes to a country those laws do not recognise as offering adequate protection, the transfer relies on the safeguards in the provider’s data-processing terms, such as the European Commission’s standard contractual clauses.
7. Your Rights
Depending on where you live, you may have the right to ask for a copy of the personal information we have about you; to have it corrected or deleted; to receive it in a portable form; to restrict or object to how we use it, including any use that relies on our legitimate interests; and to withdraw any consent you have given.
If you are in the European Economic Area, the United Kingdom or Switzerland, you may also complain to your data-protection authority. Residents of California and other US states with privacy laws may have the right to know what personal information we have about them, to have it corrected or deleted, and to opt out of its sale or its sharing for advertising. We will not treat you differently for using any of these rights.
To use any of these rights, write to [email protected]. We may ask you to confirm your identity first, and we will answer within the time the law that applies to you allows.
8. Security
The Site is served only over HTTPS, and browsers are told to use nothing else. Our web server accepts no connections from the internet: it is reached only through Cloudflare’s encrypted tunnel.
The contact form travels to our server over HTTPS, and from our server to Gmail over an encrypted (TLS) connection.
No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. If we learn of a security incident affecting personal information, we will notify the people affected and the authorities where the law requires it.
9. Changes to This Policy
When we change this policy, we change the effective date at the top of this page. If a change materially affects how we use information we already have, we will say so on the Site before it takes effect.
10. Contact
Privacy enquiries: Kong Group LLC, a limited liability company registered in Wyoming, United States. Email [email protected].