Privacy Policy

1. About This Policy

KY Automation ("the platform", "we", "us") operates kyautomation.com, a sourcing platform connecting buyers of industrial automation components with qualified suppliers. This Privacy Policy explains how we collect, use, share, and protect your personal information. By using this website, you agree to the terms of this policy.

Data controller: KY Automation. Contact details are provided in Section 14.

This website is not intended for individual consumers. All personal information we collect comes from business representatives — procurement officers, engineers, and maintenance personnel — acting in their professional capacity.

2. Information We Collect

Information you provide voluntarily:

• Contact and company information — name, email address, phone number, company name — submitted when you request a quote or contact us through a web form.
• Inquiry content — manufacturer, full part number, quantity, and application details.
• Order registration information — when you forward your order confirmation email to us after accepting a quote, this includes both parties' details, part numbers, order value, date, and warranty or return terms.
• Communication records — email correspondence between you and us.

Information collected automatically:

• Technical data — IP address, browser type and version, operating system, device type, time zone setting.
• Usage data — pages visited, time on page, referring URL, bounce rate. Collected via Google Analytics; does not contain personally identifiable information.
• Cookie data — see our Cookie Policy.

What we do not collect:

• Payment information — we do not collect or store credit card numbers, bank account details, or any financial credentials. Payment is handled directly between buyer and supplier.
• Account credentials — we do not require you to create an account, set a password, or log in.

3. How We Use Your Information

• Match you with suppliers. When you submit an inquiry, we distribute it to suppliers in our network who can potentially supply the part. This is the core of what the platform does — getting you quotes so you can compare and decide.
• Register your order. When you forward your order confirmation email after accepting a quote, we keep it on file. If an after‑sales issue arises later, we have a record and can step in to help.
• Stay in touch. Quote progress, order registration confirmation, after‑sales support — we keep you informed by email about things you need to know.
• Improve the website. We use Google Analytics to understand which pages work and which don't, so we can make the site better. This does not identify you personally.
• Comply with the law. Court orders, regulatory requests, fraud prevention — we process data when the law requires it.
• Business changes. If the platform is acquired or merged in the future, your data may transfer as a business asset. We'll let you know if that happens.

We do not use automated decision‑making or profiling. No algorithm is scoring, categorising, or making predictions about you behind the scenes.

If you are located in the European Economic Area or the United Kingdom, the legal bases for the above processing are: pre‑contractual steps taken at your request (supplier matching), contract performance (order registration), legitimate interest (email communications, website analytics, business transfers), and legal obligation. Our legitimate‑interest processing has been assessed and does not override your rights. You may object at any time — see Section 7.

4. Who We Share Your Information With

We share your personal information only with the following categories of recipients:

Supplier network. Your inquiry submission — including company name, contact person, email address, phone number, and the items you are sourcing — is shared with suppliers who have passed our vetting process. Sharing is limited to suppliers who can potentially supply the requested part, and solely for the purpose of providing you with a quote. Supplier agreements expressly prohibit the use of your information for any purpose beyond the quote.

Service providers. The following third parties provide technical services under written contract and may access data only to the extent necessary:

• Website hosting and email infrastructure provider.
• Google Analytics (Google LLC) — receives page‑view events, traffic source data, and device type information. No names or email addresses are sent. IP addresses are anonymised before transmission.

Legal and regulatory. When required by law — court orders, lawful requests by law enforcement or regulatory authorities, prevention of fraud or crime, protection of personal or public safety.

Business transfers. In the event of a merger, acquisition, restructuring, or sale of assets, your information may be transferred as a business asset. The recipient will be required to continue complying with this Privacy Policy. Where required by applicable law, we will notify you and obtain your consent before the transfer.

5. Data Retention

After the applicable period, data is securely deleted or anonymised. Where there is an unresolved legal dispute or statutory requirement, relevant data is retained until the matter is concluded. You may request early deletion at any time (see Section 7).

6. Cookies & Tracking

Full details are in our Cookie Policy. In summary, this site uses one category of browser cookie — Google Analytics (_ga, _ga_*) — for anonymous usage statistics. You can decline these via the cookie banner on your first visit.

Your consent preference is stored in localStorage (not a cookie) so the banner doesn't reappear on every visit. The site does not use advertising cookies, targeting cookies, or cross‑site tracking. To change your preference, clear your browser cookies and reload the site — the banner will appear again.

7. Your Rights

Depending on your jurisdiction, you may exercise the following rights. We may need to verify your identity before processing a request, to prevent unauthorised access.

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete information.
• Right to erasure (right to be forgotten) — request deletion of your data, subject to statutory retention obligations and unresolved disputes.
• Right to restriction of processing — request that we limit how we process your data in specified circumstances.
• Right to data portability — request export of the data you provided to us in a structured, commonly used, machine‑readable format.
• Right to object — object to processing based on legitimate interest (see Section 3).
• Right to withdraw consent — withdraw previously given consent; this does not affect the lawfulness of processing carried out before withdrawal.
• Right to opt out of sale (CCPA) — we do not sell personal information. California residents may confirm this and request that we refrain from doing so.

To exercise any of these rights, use the contact details in Section 14. We will respond within 30 days. For complex requests, we may extend this by a further 30 days and will inform you of the reason. If we cannot fully comply with a request — for example, because deletion would breach a statutory retention obligation — we will explain why.

If you are dissatisfied with our response, you have the right to lodge a complaint with the data protection authority in your jurisdiction — for EEA users, the DPA of your member state; for UK users, the Information Commissioner's Office; for China users, the Cyberspace Administration; for California users, the California Privacy Protection Agency.

8. International Data Transfers

Our servers are located in the People's Republic of China. If you access the site from outside China, your information will be transferred to and processed in China. We take the following safeguards:

• EU Standard Contractual Clauses (SCCs) or equivalent mechanisms with any overseas service providers.
• Only the minimum data necessary for the purposes in Section 3 is transferred.
• Encryption is applied to data in transit and at rest.

9. Data Security

We implement reasonable technical and organisational measures — SSL/TLS encryption, server access controls with audit logging, and periodic security reviews — to protect your personal information against unauthorised access, alteration, disclosure, or destruction.

No method of electronic transmission or storage is 100% secure. If a data breach involving your personal information occurs and is likely to result in a high risk to you, we will notify you and the relevant supervisory authority within the timeframe required by applicable law.

10. Data Breach Notification

If a security incident involving your personal information occurs — such as unauthorised access, disclosure, alteration, or destruction — and the incident is likely to present a high risk to your rights, we will notify you and report to the relevant supervisory authority within 72 hours where required by applicable law. The notification will describe: the nature of the incident, categories of data affected, likely consequences, measures we have taken or plan to take, and steps we recommend you take to protect yourself.

11. Third‑Party Links

This website may contain links to third‑party websites — supplier sites, Trustpilot, social media platforms. Once you leave our site, we are not responsible for the privacy practices of those third parties. We encourage you to read the privacy policy of every website you visit.

12. Children's Privacy

This website is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such data, we will delete it promptly.

13. Policy Updates

We may revise this Privacy Policy from time to time. The updated version is identified by the "Last Updated" date at the top of the page and takes effect upon publication. Material changes — where the purposes of processing, the categories of recipients, or your rights are substantively affected — will be announced via a notice on the website. Where required by law, we will obtain your consent before the change takes effect.

14. Contact Us

For questions about this Privacy Policy or to exercise your data rights:

Last Updated. July 2026.