Privacy
This independent documentation website is designed to avoid non-essential tracking. This notice explains contact-form and owner-report data handling under UK GDPR.
Who operates this site
This website is operated as KK13 Excavator Review. It is not affiliated with Shandong Gaohe J.M. Machinery Co., Ltd, United J.M. Machinery, Alibaba or JMMachineryWorld.com.
Privacy questions can be sent via the contact form or to rory@retiringgroup.co.uk.
What we collect
Contact and right-of-reply forms
If you use the contact or right-of-reply form, the site collects the information you submit (such as name, organisation, email address and message). That information is emailed to the site operator. It is not stored in a database by this application.
Machine problem reports
If you use the report a machine problem form, the site may collect:
- Purchaser details (name, email, country, optional telephone, preferred public name and name-publication preference)
- Seller and sales-representative details you supply
- Machine details (model, serial number, engine information, dates, hours, purchase price, new/used)
- Failure categories and narrative answers
- Uploaded evidence files (stored privately, not in a public directory)
- Declarations and publication permission choices
- Technical metadata needed for security (for example submission time and IP used for rate limiting)
Serial numbers and private contact details are treated as confidential by default and are not published unless there is a specific, justified reason and appropriate permission.
Why we collect it (purposes)
- To verify your email address and identity as a purchaser where needed
- To review, redact and (only with permission) publish an edited owner account
- To contact you about evidence, factual checking, corrections or the status of your report
- To offer the seller a right of reply and to handle corrections
- To protect the site against spam and abuse
Lawful bases (UK GDPR)
- Consent — for optional publication of an edited report and approved evidence, and where you ask us to process a voluntary submission.
- Legitimate interests — reviewing submissions, preventing fake or misleading reports, security (CSRF, rate limits), and corresponding about verification, where those interests are not overridden by your rights.
- Legal obligation — where we must retain or disclose information to comply with law.
You may withdraw publication consent by contacting the operator. Withdrawal does not affect processing already carried out lawfully, and private review copies may still be retained as described below.
Who we may share data with
- Email delivery provider (SendGrid) to send verification and notification messages
- Hosting provider, solely as necessary to store private report files
- Professional advisers (for example a solicitor) if needed to assess publication risk
- The seller or their representative, only to the extent needed for a fair right of reply and without sharing your private email, telephone or home address unless you expressly agree
- Law enforcement or regulators if required by law
We do not sell personal data.
Retention
Contact-form emails are retained in the operator’s inbox according to normal email practice. Machine problem reports and private uploads are retained for as long as needed to complete verification and moderation, and thereafter for a reasonable period to handle disputes, corrections and legal claims (typically up to six years for potential limitation periods, unless a shorter period is appropriate). Rejected or withdrawn submissions may be deleted earlier once any security and dispute needs have ended. Published case pages retain only the redacted public content.
Sessions and cookies
A session cookie may be set when you use a form. It is used for CSRF protection and basic rate limiting. It is not used for advertising or analytics.
Analytics
This site does not include third-party analytics code.
Evidence materials
Published evidence is intentionally redacted to avoid displaying private residential addresses, telephone numbers, bank details, signatures and identity documents.
Your rights
Under UK GDPR you may have rights of access, rectification, erasure, restriction, objection and data portability, and the right to complain to the Information Commissioner’s Office. Contact the operator to exercise these rights.
Related policies
Reporting and moderation policy · Terms of submission · How reports are verified