Privacy Policy

1. Scope and controller

This policy applies to mokadigitalmarketing.com, its inquiry forms and first-party server access logs. The personal information handler/controller is Zhuhai Moka Technology Co., Ltd. For privacy, data rights or website questions, contact info@mokadigitalmarketing.com.

2. Information we collect

When you submit an inquiry, we collect your name, any company or brand you choose to provide, email, telephone number, preferred contact method, service interest, target market, inquiry details, consent time and source page. At least one of email or telephone is required. Please do not submit identity numbers, bank card details, health data or other sensitive information unrelated to your inquiry.

To prevent automated abuse, the server may temporarily use a one-way processed network identifier for rate limiting. It is not retained as part of the formal lead record.

When a browser or web crawler requests a website page, our server in Guangzhou, Mainland China generates a first-party access log. It may include access time, normalised page path, HTTP method and status, referrer domain, browser or device information, request duration, IP address and crawler type. The analytics log does not record URL query parameters, request bodies, inquiry form fields, or visits to static assets such as images, fonts, CSS and JavaScript.

3. Purposes and basis of processing

We use this information only to understand and respond to your inquiry, assess service fit, arrange follow-up communication, secure the form and meet applicable legal obligations. Consent for this inquiry is separate from any newsletter, ongoing marketing or advertising remarketing consent.

First-party access logs are used to deliver and protect the website, investigate errors, aggregate page views and sources, distinguish human traffic from search or AI crawlers, and assess page and inquiry conversion performance. We do not use these logs for personalised advertising or cross-site tracking.

4. Storage and notification

Form data is submitted over HTTPS to a same-origin POST endpoint. The authoritative record is stored in MOKA’s production database environment in Guangzhou, Mainland China. After the record is saved, MOKA’s Tencent Enterprise Mail account sends an inquiry notification to authorised personnel. Email notification is not the authoritative database.

Inquiry records that do not become an ongoing business relationship are normally retained for no more than 180 days and then deleted from the authoritative database. We may retain information longer where necessary to perform a contract, resolve a dispute or meet a legal obligation. Copies in email and backups follow the relevant system deletion and rotation processes.

Raw first-party access logs are retained for no more than 14 days. Network identifiers used to estimate traffic trends are one-way processed with a periodically rotated salt during aggregation. Weekly reports contain aggregate figures only and do not include IP addresses, full browser identifiers or visitor-level details. Aggregate statistics are normally retained for no more than 24 months and are then deleted or further anonymised.

Once a week, the system uses MOKA's Tencent Enterprise Mail to send an aggregate traffic report to authorised personnel. The email is not a raw-log or personal-information database and does not include raw access logs.

5. Recipients, service providers and cross-border processing

Information and internal analytics reports are accessible only to authorised MOKA personnel with a business need. We use a cloud server and database in Mainland China and Tencent Enterprise Mail to operate the site, process inquiries and deliver aggregate traffic reports. We do not sell personal information. Disclosure may occur where required by law, needed to protect legitimate rights, or covered by applicable authorisation.

The current inquiry flow does not use an overseas CRM, overseas email service or overseas backup as a formal processing step. Before introducing overseas analytics, advertising data features, CRM, email, backup or other overseas processors, we will assess the data flow and update the disclosure and required mechanisms to reflect the real setup.

6. Cookies, analytics and advertising technology

Current traffic measurement is performed by MOKA's own server from first-party access logs. The website does not load Google Analytics, Baidu Analytics or another third-party browser analytics script, does not set analytics cookies, and does not use the analytics function for Enhanced Conversions, Customer Match, Remarketing or personalised advertising. The website therefore does not display a non-essential cookie banner for basic server-log analytics.

If client-side analytics, advertising data features, non-essential cookies or other identification technologies are introduced later, we will update this policy before launch and provide notices and choices appropriate to the actual technology stack.

7. Security

We use measures including HTTPS, access restrictions, data minimisation, server-side validation, rate limiting, database permission controls, log rotation, short raw-log retention and de-identification of aggregate reports. No internet service can guarantee absolute security. If an incident may affect your rights, we will respond and notify as required by applicable law.

8. Your rights

You may contact us to request access, correction, a copy or deletion of relevant personal information, withdraw consent-based processing, or ask questions about our handling. Withdrawal does not affect processing lawfully completed before withdrawal. We may need to verify your identity and the scope of your request.

9. Updates

We will update this policy when data flows, service providers or applicable requirements change and will state the effective date on this page. Material changes will be communicated in a reasonable manner.