What you provide
The enquiry form asks for photographs, approximate dimensions, one contact method—email or a WhatsApp number—and confirmation that your information may be used for the enquiry. Expected price and a short note are optional. It also submits the interface language.
Please send only information relevant to the object. Avoid identity documents, financial records, sensitive personal information or photographs showing unrelated people. You do not need to provide a maker, date, material, condition report, provenance or object type at first contact.
Why information is processed
The information is used to review what you have shown, respond through your chosen contact method, request further details where useful and discuss a possible next step. If you choose to proceed, separate correspondence or transaction records may be needed.
The website also processes technical information needed to deliver requests and protect the submission route. The current upload system uses a daily submission counter keyed to a hash of an IP address. Hashing does not make this a blanket promise of anonymity.
Website infrastructure and notifications
The website and upload endpoint use Cloudflare infrastructure, including Pages, Workers and private R2 object storage. Uploaded files and form data are stored privately rather than in a public image gallery. Access to the review view requires a private token-bearing link.
A signed request to Google Apps Script triggers a Gmail notification for Kempini. That notification contains the enquiry details, the number of photographs and the private review link. It does not contain the photographs as email attachments, but the link can provide access to them while the stored submission remains available. Please treat a review link as private.
If you contact Kempini by email or choose WhatsApp, the relevant communication service also handles that communication under its own service arrangements. Provider processing is not limited solely by the physical location of the private upload store.
Storage and retention: what 30 days means
Uploaded photographs and form data in the private R2 website store are scheduled for automatic deletion after 30 days. That schedule applies to the stored website submission; it does not mean every copy of related information disappears from every system on day 30.
Google/Gmail notifications, replies, separately saved information and records needed for an agreed continued review or transaction are outside that R2 lifecycle rule. Their retention must be considered separately, including any legal record-keeping requirements. Continuing a conversation does not by itself extend the lifetime of the original R2 files.
To ask about information held in connection with your enquiry, or request earlier deletion, email [email protected]. Information may need to be retained where applicable law requires it.
Privacy and security
The upload path uses HTTPS. The image store is private, and the review route checks the token associated with a submission. These are protective measures, not a guarantee that transmission or storage can never be compromised. Keep personal information to what is needed for the enquiry.
Technical service providers process information to operate the site, store uploads, protect the service and deliver notifications. Your submission is not offered for sale as personal data and is not used for unrelated marketing.
Your choices and rights
You can decide not to submit an enquiry. Photos, dimensions, a contact method and privacy confirmation are needed if you use the form; expected price and the note are not.
Subject to applicable law, you may request access, correction, deletion, restriction or portability of personal data, and object to relevant processing. Where processing relies on consent, you may withdraw it for the future; withdrawal does not affect processing already carried out lawfully. Legal duties and other lawful exceptions can affect what must be retained.
Send requests to [email protected], identifying the enquiry sufficiently for it to be located without including unnecessary sensitive information. You may also complain to a competent data-protection authority, including the Datenschutzstelle Liechtenstein, where applicable.
Contact and company information
For questions about this notice or your enquiry: [email protected].
Supplied company registration details are set out discreetly under Company information. Return to the private enquiry form if you wish to send photographs.