Legal
Privacy Policy
This policy explains what personal data we collect through kvagrid.com, why we collect it, who else sees it, how long we keep it and what you can ask us to do with it. It covers the public website and the enquiry form on it.
Last updated: 26 September 2026.
Controller
Who is responsible for your data
KVA Grid, referred to below as “we”, “us” or “our”, is the controller of the personal data described in this policy. We supply diesel generator sets to projects in the Gulf, Africa and South Asia, and we operate from Dubai, United Arab Emirates.
| Company | KVA Grid |
|---|---|
| Operating from | Dubai, United Arab Emirates |
| zhangyi1236540@gmail.com | |
| WhatsApp / Phone | +86 159 3759 6863 |
We do not publish a street address on this website. If you need a postal or registered address for a contract, a tender or a courier, ask us by email and we will confirm it in writing.
What we collect
What we collect and how we get it
When you send an enquiry
The request a quote form asks for six items. Five of them are required by the form so that we can answer at all; the company or project field is optional. There is no account to create and no password to set.
| Field | Required | What it is used for |
|---|---|---|
| Your name | Yes | To address the reply to the right person. |
| Company or project | No | To understand the context and to put the quotation in the correct name. |
| Yes | To send the quotation and the documents you ask for. This address also receives the automatic acknowledgement of your enquiry. | |
| Phone or WhatsApp | Yes | To ask a short follow-up question when waiting for a written answer would cost you time. |
| Country of delivery | Yes | To work out the freight, the voltage and frequency convention, and any document the destination requires. |
| What the set has to do | Yes | The rating, the duty, the load list and anything else you choose to describe. |
What happens to a submitted enquiry: one copy is emailed to our sales desk, a second copy is emailed to the address you gave, and the enquiry is stored in this website’s database so that we can find it again when you reply. The form also carries a hidden anti-spam field, which is never shown to you and is used only to reject automated submissions.
When you contact us another way
If you email us, or message us on WhatsApp, we receive what you send: your contact details and the content of the message. WhatsApp is operated by Meta, so a message sent through it is also processed by Meta under Meta’s own terms and privacy policy.
What the server records automatically
Like every web server, ours writes an access log for each request. That log contains the IP address the request came from, the page requested, the time, and the browser identification string. It also contains an error log. We use these logs for security and troubleshooting only.
What we do not collect
No accounts
There is no public registration, no customer login and no user profile. Comments are switched off site wide.
No payment data
The online shop is not open yet. No card number, bank detail or payment credential is collected anywhere on this website today.
No advertising profiles
There is no advertising pixel, no social media pixel and no cross-site advertising tracker on this site.
No special categories
We do not ask for, and do not want, health, biometric, religious or political data. Please leave it out of the enquiry form.
Why we use it
Why we use your data and on what basis
| What we do | Data involved | Basis |
|---|---|---|
| Answer your enquiry and prepare a quotation | The six form fields, plus whatever you send by email or WhatsApp | Steps taken at your request before entering a contract |
| Supply the equipment and support it afterwards | Order, delivery, installation and contact details | Performance of the contract with you |
| Keep the website available and defend it against abuse | IP address, requested page and browser string in the server logs | Our legitimate interest in running a secure service |
| Understand which pages are useful, so the site can be improved | Aggregate analytics data described below | Our legitimate interest, or your consent where the law requires it |
| Keep invoices, tax records and warranty records | Invoice, payment and equipment serial details | A legal obligation that applies to us |
We do not make automated decisions about you, we do not profile you for advertising, and we do not sell or rent personal data to anyone.
Sharing
Who else sees your data
We share personal data only with the service providers that make this website and our email work. They act on our instructions, and we do not allow them to use your data for their own marketing.
| Provider | What it does for us | Where it operates |
|---|---|---|
| Cloudflare, Inc. | Content delivery network, DNS and the security filtering in front of this site. It handles the request, including the IP address, in order to pass it to our server. | A global network of data centres |
| Google Ireland Limited and Google LLC | Google Analytics 4, reached through the Google tag, and the Google mailbox that receives and stores enquiry emails. | Ireland and the United States |
| Our hosting provider | Runs the virtual server, the web server and the database that hold this website and the enquiries sent through it. | The virtual server that runs this website |
| Meta Platforms, Inc. | Only if you choose to write to us on WhatsApp. The message is delivered through Meta’s service. | Ireland and the United States |
If the online shop opens, orders placed through it will also involve WooCommerce and the payment provider configured for it, and the payment card data will be handled by that payment provider rather than by us. This page will be updated before the shop goes live. We also share data where the law compels us to, for example with a customs broker or a tax authority.
Cookies
Cookies and similar technologies
When you open a public page on this site for the first time, our server sets no cookie at all. The cookies described below are the ones this site and its providers can set during a visit.
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
| wordpress_test_cookie | This site | Confirms that your browser accepts cookies. It is only set when the WordPress login screen is opened and it holds no personal data. | Until you close the browser |
| wordpress_logged_in_*, wordpress_sec_* | This site | Keeps a signed-in user signed in and protects the session. These are only set for the staff accounts that log in to administer the site. | Session, up to 14 days |
| _ga, _ga_* | Google Analytics 4, loaded through the Google tag | Distinguishes visitors and sessions so that traffic and campaigns can be measured. | Up to 2 years |
| sbjs_*, wc_order_attribution_* | WooCommerce order attribution, on this site | Records how a visitor arrived, including campaign parameters and the referring site, so that an order can be attributed to its source. It also stores the browser string. | Session, up to 30 minutes |
| __cf_bm, cf_clearance | Cloudflare | Set only when Cloudflare needs to check that a request comes from a real browser rather than an automated client. They contain no marketing information. | Up to 30 minutes and up to 1 year |
We do not set advertising cookies, and we do not set cookies that follow you across other websites.
Analytics and consent
Analytics, and the choice you have
We use Google Analytics 4, loaded through the Google tag, to count visits and to see which pages and which search terms bring people to the site. The Google tag also carries Google’s consent mode, which is set as follows.
| Region | Default state | What it means |
|---|---|---|
| European Economic Area, United Kingdom and Switzerland | Denied | Analytics and advertising storage are switched off before the tag loads, so no analytics cookie is written until consent is given. |
| Everywhere else, including the Gulf | Not restricted | Google Analytics may write its cookie and measure the visit. You can block this in your browser. |
This website does not currently display a cookie banner, because the non-essential cookies it uses are limited to the analytics and order attribution cookies listed above.
How to control cookies yourself
- Every mainstream browser lets you block third-party cookies and delete the cookies already stored, usually under Settings, then Privacy and security, then Cookies.
- Google publishes a browser add-on that stops its analytics tag from sending data: tools.google.com/dlpage/gaoptout.
- If you block cookies, the site still works. Only the measurement stops.
Analytics data is held in Google Analytics under the retention setting of our property, which Google allows to be set to a maximum of 14 months for user and event level data. Aggregate reports, which do not identify anyone, may be kept longer.
Retention
How long we keep your data
| What | How long |
|---|---|
| Enquiries that do not lead to an order | 24 months from the last contact, so that a project that goes quiet can be picked up again. Ask us to delete yours sooner and we will. |
| Quotations, orders, invoices and warranty records | For the life of the contract and the warranty, and then for as long as tax and accounting rules require us to keep them. |
| Server access and error logs | A short period, only as long as needed for security and troubleshooting. |
| Google Analytics data | Up to 14 months for user and event level data, as described above. |
When data is no longer needed we delete it or, where deletion is not possible immediately, we stop using it and restrict access to it until it can be deleted.
Security
How we protect it
- The site is served over HTTPS with a valid certificate; the connection between your browser and our server is encrypted.
- Traffic passes through Cloudflare, which filters common attacks before they reach the server.
- Administrator access is restricted to named accounts with strong passwords and key-based server access, and the login screen is rate limited.
- Enquiries are stored in the website database on a server we control, and they are emailed over an encrypted connection.
- The server keeps daily backups, so a mistaken deletion can be reversed.
No system is perfect. If we ever become aware of a breach that affects your personal data, we will tell the people affected and the relevant authority as the law requires.
Your rights
What you can ask us to do
| Right | What it means |
|---|---|
| Access | Ask for a copy of the personal data we hold about you. |
| Correction | Ask us to fix data that is wrong or incomplete. |
| Deletion | Ask us to delete your data. We will, unless we have to keep it for a contract, a warranty claim or an accounting obligation. |
| Restriction | Ask us to stop using your data while a question about it is being resolved. |
| Objection | Object to processing that we justify by our legitimate interest, including the analytics described above. |
| Portability | Ask for the data you gave us in a structured, machine-readable file. |
| Withdraw consent | Where processing rests on your consent, withdraw it at any time. Withdrawing it does not affect what was done before. |
To exercise any of these rights, email zhangyi1236540@gmail.com or send a WhatsApp message to +86 159 3759 6863. Say which right you are using and which data it concerns. We answer within 30 days, and we will not charge you for a normal request.
If you are not satisfied with our answer, you can complain to the data protection authority in your country. In the United Arab Emirates the relevant regulator is the UAE Data Office.
The small print
Children, transfers and changes to this policy
Children
This is a business website for industrial equipment. It is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has sent us data, tell us and we will delete it.
Transfers outside your country
Our providers, including Cloudflare and Google, operate global networks, so data may be processed outside the country you are writing from, including in the United States. Where that happens, we rely on the safeguards those providers put in place for international transfers, such as the standard contractual clauses, and on your own request when you ask us for a quotation.
Changes to this policy
If our practice changes, we will update this page and change the date at the top. If a change is significant, we will say so on the page rather than quietly editing it.
Language
This policy is published in English and in Arabic. If the two differ, the English version governs.
A question about your data?
Write to zhangyi1236540@gmail.com with the subject line “Privacy”, or send a WhatsApp message, and we will answer it the same way we answer a technical question.