Privacy Policy

Effective Date: August 6, 2026

1. Introduction

DK Kitchen, operating under the registered Canadian business Dk Grt Kitchener Ltd with its registered office located at 415 Westforest Trail, Kitchener, Ontario N2N 3L8, Canada, is fully committed to protecting the privacy and safeguarding the personal data of every individual who interacts with our website, www.dkkitchen.autos, and our computer integrated systems design services. We recognize that the trust you place in us when sharing your information is fundamental to our relationship, and we take that responsibility with the utmost seriousness.

This Privacy Policy provides a comprehensive and transparent explanation of how we collect, use, store, disclose, and protect your personal information. It applies to all visitors to our website, prospective clients, current clients, business partners, job applicants, and any other individuals whose data we may process in the course of delivering our professional services. We encourage you to read this policy carefully to understand our practices regarding your personal data and how we will treat it. By accessing or using our website and services, you acknowledge that you have read and understood the terms of this Privacy Policy.

We have designed this policy to comply with applicable privacy legislation, including the Personal Information Protection and Electronic Documents Act of Canada, the General Data Protection Regulation of the European Union where applicable, and other relevant data protection laws. Our commitment extends beyond mere legal compliance; we strive to embed privacy-by-design principles into every system and process we build, both for ourselves and on behalf of our clients.

2. Information We Collect

We collect several categories of information to provide, maintain, and improve our services. The types of information we gather depend on the nature of your interaction with DK Kitchen and the services you engage us to deliver. We collect this information through various means, including direct interactions with you, automated technologies when you visit our website, and from third-party sources where permitted by law and with your consent where required.

Personal Identification Information. When you fill out a contact form, request a consultation, subscribe to our communications, or engage our services, we may collect personal identifiers including your full name, email address, telephone number, company name, job title, and physical mailing address. This information is voluntarily provided by you and is necessary for us to respond to your inquiries, deliver our services, and maintain our business relationship. We may also collect business-related information such as the industry sector of your organization and project requirements during our initial discovery and assessment conversations.

Technical and Device Information. When you visit our website, our servers automatically collect certain technical data about your device and connection. This includes your Internet Protocol address, browser type and version, operating system, device type, screen resolution, referring and exit pages, and the date and time of your visit. This information is collected through server logs and automated tracking technologies and is used primarily for security, diagnostic, and analytical purposes.

Usage and Behavioral Data. We collect information about how you navigate and interact with our website, including the pages you visit, the links you click, the amount of time you spend on each page, your scrolling behavior, and other engagement metrics. This data helps us understand which content is most relevant to our audience, optimize the user experience, and improve the performance and design of our digital presence. We may also collect information about the websites that referred you to dkkitchen.autos and the search terms you used to find us.

Communication Records. When you correspond with us by email, telephone, through our contact forms, or via any other communication channel, we retain records of those communications, including the content of your messages, our responses, and any attachments or supporting documentation you provide. These records are maintained to ensure continuity in our conversations, to improve our service quality, and to establish a clear record of instructions and agreements related to projects.

Service-Related and Project Information. In the course of delivering our computer systems design, network engineering, software integration, cybersecurity, and managed operations services, we may collect technical data about the existing IT infrastructure of our clients, their network architecture, their security posture, their business processes, and their operational requirements. This information is collected under the terms of our client services agreements and is subject to strict confidentiality and data handling obligations. Access to this information is limited to project team members who require it to perform their assigned tasks.

3. How We Use Your Information

We use the information we collect for a range of business and operational purposes, all of which are grounded in our legitimate need to deliver high-quality professional services and to maintain and grow our business responsibly. We do not use your personal information for purposes that are incompatible with those disclosed in this policy without first notifying you and, where required, obtaining your consent.

Service Delivery and Client Engagement. The primary purpose for which we collect and use your information is to deliver the computer integrated systems design and related services you have requested from us. This includes using your contact details to schedule consultations, assess your requirements, prepare proposals and project plans, allocate resources, execute project milestones, conduct system testing and validation, and provide ongoing managed support. Without this information, we would be unable to fulfill our contractual obligations or provide the level of service you expect.

Communication and Relationship Management. We use your contact information to respond to your inquiries, provide you with requested information about our services, send you project updates and status reports, notify you of changes to our policies or terms, and maintain our general business relationship. We may also use your information to send you newsletters, industry insights, and information about services that may be relevant to your business interests, but only where you have provided consent or where permitted by applicable law.

Website and Service Improvement. We analyze aggregated and anonymized usage data to understand how visitors interact with our website, identify areas for improvement, develop new features and content, and measure the effectiveness of our marketing efforts. This analysis helps us make informed decisions about our digital strategy and ensures that we continue to provide a relevant and user-friendly experience.

Legal Compliance and Business Protection. We may use your information as necessary to comply with applicable laws, regulations, and legal processes, including responding to lawful requests from government authorities, enforcing our contractual rights, protecting the security and integrity of our systems, preventing fraud and unauthorized access, and defending against legal claims or disputes. We also process data to maintain appropriate business records for tax, accounting, and corporate governance purposes.

4. Legal Bases for Processing

DK Kitchen processes personal information on the basis of specific legal grounds, in accordance with Canadian data protection legislation and, where applicable, the General Data Protection Regulation and other international privacy frameworks. We do not process personal data unless we have identified and can rely upon a valid legal basis for doing so.

Consent. In many cases, we process your personal information based on your explicit and informed consent. This applies particularly where we send marketing communications, use certain types of cookies and tracking technologies, or process special categories of data. You have the right to withdraw your consent at any time, and we provide clear mechanisms for doing so. The withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Contractual Necessity. We process personal information where it is necessary to perform a contract to which you are a party, or to take pre-contractual steps at your request. This includes processing your data to provide the services you have engaged us to deliver, to assess your project requirements, and to manage the ongoing client relationship under the terms of our service agreements.

Legitimate Interests. We may process your data where it is necessary for the purposes of our legitimate business interests, provided that those interests are not overridden by your data protection rights. Our legitimate interests include improving and optimizing our website and services, ensuring the security of our IT systems and data, conducting business development and marketing activities, and analyzing usage trends to inform our strategic decisions. We carefully balance our interests against your rights and freedoms before relying on this basis.

Legal Obligation. In certain circumstances, we may be required to process your personal information to comply with a legal obligation, such as a court order, regulatory requirement, tax reporting obligation, or other binding legal mandate. In such cases, we process only the minimum amount of data necessary to satisfy the specific legal requirement and inform you of the processing where permitted by law.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their independent marketing purposes. We may share your information only in the specific circumstances described below, and we require all third parties with whom we share data to respect the security of your personal information and to treat it in accordance with applicable law.

Service Providers and Business Partners. We engage trusted third-party service providers to perform functions and provide services on our behalf, including website hosting and analytics, email delivery services, cloud storage and computing infrastructure, customer relationship management platforms, payment processing, and professional advisors such as lawyers and accountants. These service providers are contractually bound to process personal data only in accordance with our documented instructions and to implement appropriate technical and organizational measures to protect the data. We conduct due diligence on all service providers before engagement and review their compliance periodically.

Legal and Regulatory Disclosures. We may disclose your personal information where required to do so by law, regulation, or legal process, or in response to valid requests by public authorities including courts, law enforcement agencies, and regulatory bodies. We may also disclose information where we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Business Transfers. In the event that DK Kitchen or Dk Grt Kitchener Ltd is involved in a merger, acquisition, reorganization, or sale of all or a portion of its assets, personal information held by us may be among the assets transferred or disclosed to the successor entity. You will be notified via email or a prominent notice on our website if such a transaction occurs, and you will have the opportunity to exercise your data rights before the transfer takes effect.

With Your Consent. We may share your personal information with third parties for purposes not covered by this policy when we have obtained your prior explicit consent to do so. You are under no obligation to provide such consent, and we will clearly explain the scope and purpose of any proposed data sharing before seeking your agreement.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic and usage patterns, and support our marketing efforts. A cookie is a small text file that is stored on your device by your web browser when you visit a website. Cookies allow the website to recognize your device on subsequent visits and retain certain preferences and settings.

Types of Cookies We Use. We deploy several categories of cookies on dkkitchen.autos. Essential cookies are necessary for the basic functionality of the website and cannot be disabled without impairing core features. Performance and analytics cookies help us understand how visitors use our site by collecting aggregated and anonymized information about page views, traffic sources, and user interactions. Functional cookies enable enhanced features such as remembering your preferences and settings. Targeting and advertising cookies may be used to deliver content and advertisements that are more relevant to your interests. We use both session cookies, which expire when you close your browser, and persistent cookies, which remain on your device for a set period or until manually deleted.

Managing Your Cookie Preferences. You have full control over the cookies that are placed on your device. Most web browsers allow you to manage, block, or delete cookies through their settings menus. You can configure your browser to notify you when a cookie is being set, to reject all cookies, or to delete cookies when you close your browser. Please note that disabling certain cookies may affect the functionality and performance of our website and may prevent you from accessing some features. For detailed guidance on managing cookies, we recommend visiting the help documentation for your specific browser or consulting online resources from privacy advocacy organizations.

7. Data Retention

DK Kitchen retains personal information only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our retention periods are determined based on several criteria, including the nature and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, and whether we can achieve those purposes through alternative means.

For client project data and service-related information, we retain records for the duration of the client engagement and for a reasonable period thereafter, typically seven years following the conclusion of the project or the termination of the client relationship, to comply with our legal, regulatory, tax, accounting, and reporting obligations. Communication records, including emails and correspondence, are generally retained for three to five years, depending on the nature of the communication and its relevance to ongoing or potential business. Website analytics data is retained in aggregated and anonymized form indefinitely for trend analysis, while raw identifiable logs are purged after twenty-four months.

When the retention period expires, we securely delete, destroy, or anonymize the personal information so that it can no longer be associated with an identifiable individual. We review our data retention practices at least annually to ensure that we are not holding personal data longer than necessary and that our deletion procedures remain effective and compliant with evolving legal requirements.

8. Data Security

We have implemented and maintain a comprehensive suite of technical, administrative, and physical security measures designed to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Our security posture is informed by industry-standard frameworks including the NIST Cybersecurity Framework, ISO 27001 principles, and OWASP best practices for application security.

Our technical safeguards include end-to-end encryption for data in transit using industry-standard TLS protocols, encryption at rest for sensitive databases and file stores, multi-factor authentication for access to critical systems, regular vulnerability scanning and penetration testing, intrusion detection and prevention systems, firewalls, and continuous security monitoring and logging. We maintain a formal patch management process and update all systems, libraries, and dependencies on a defined schedule to address known vulnerabilities promptly.

Administrative safeguards include rigorous access control policies based on the principle of least privilege, mandatory security awareness training for all personnel, background checks for employees with access to sensitive systems, formal incident response and business continuity plans, and regular internal and external security audits. Our employees and contractors are bound by confidentiality obligations and are trained on data protection requirements applicable to their roles. Access to personal data is restricted to authorized personnel who require it to perform their job functions, and access privileges are reviewed and updated whenever roles change.

Physical security measures at our registered office at 415 Westforest Trail, Kitchener, Ontario, include controlled access systems, surveillance monitoring, and secure storage for physical records where applicable. We also ensure that any remote working arrangements meet the same security standards we apply to our physical office environment. Despite our comprehensive security program, no method of electronic transmission or storage is one hundred percent secure, and we cannot guarantee absolute security. In the unlikely event of a data breach, we have established procedures to promptly investigate, contain, and remediate the incident, and to notify affected individuals and relevant authorities as required by law.

9. International Data Transfers

DK Kitchen is headquartered in Kitchener, Ontario, Canada, and our primary data processing activities take place within Canada. However, we engage certain service providers and technology partners who may process data in other jurisdictions, including the United States and countries within the European Economic Area. When we transfer personal information across international borders, we take appropriate steps to ensure that the data receives an adequate level of protection consistent with this Privacy Policy and applicable data protection legislation.

Where personal data is transferred from the European Union or the United Kingdom to Canada, we rely on the adequacy decisions issued by the European Commission and the United Kingdom government, which recognize Canada as providing an adequate level of data protection for personal data transferred from the European Union and the United Kingdom under the respective frameworks. Where we transfer data to countries that have not received an adequacy decision, we implement appropriate safeguards, including the use of standard contractual clauses approved by the relevant supervisory authorities, binding corporate rules, or other legally recognized transfer mechanisms. We also conduct transfer impact assessments to identify and mitigate any risks associated with the data transfer.

By using our website and services, you understand that your information may be transferred to and processed in countries outside your country of residence, which may have data protection laws that differ from those in your jurisdiction. In all cases, we ensure that your personal information is protected with equivalent safeguards regardless of where it is processed.

10. Privacy for Children

The DK Kitchen website and services are intended for business professionals and organizations and are not designed for, directed at, or marketed to children under the age of sixteen. We do not knowingly collect, solicit, or process personal information from anyone under the age of sixteen. Our services are targeted exclusively at businesses and adult professionals engaged in computer systems design, technology integration, and related fields.

If we become aware that we have inadvertently collected personal information from a child under the age of sixteen without verified parental consent, we will take immediate steps to delete that information from our records and terminate any related accounts or services. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately using the contact details provided at the end of this policy so that we can take prompt corrective action. We encourage parents and guardians to monitor the online activities of their children and to educate them about the importance of protecting their personal information.

Our age verification and data collection processes are designed to prevent the unintentional collection of data from minors. We do not use our website to target advertising to children or to collect geolocation data or device identifiers from users we know or suspect to be under sixteen years of age. In the event that any portion of our website or services becomes accessible to or appealing to minors in the future, we will update this policy and implement additional age-appropriate safeguards.

11. Your Rights and Choices

DK Kitchen respects your rights regarding your personal data and provides you with meaningful choices and control over how your information is collected, used, and shared. Depending on your jurisdiction and the applicable data protection laws, you may have the following rights, which we are committed to honoring promptly and transparently.

Right of Access. You have the right to request access to the personal information we hold about you and to receive a copy of that data in a structured, commonly used, and machine-readable format. Upon receiving a verifiable request, we will provide you with details of the categories of personal data we process, the purposes of processing, the categories of recipients with whom we share the data, the retention period, and the source of the data if it was not collected directly from you.

Right to Rectification. If you believe that the personal information we hold about you is inaccurate, incomplete, or out of date, you have the right to request that we correct or update that information. We will make the necessary corrections without undue delay and will notify any third parties to whom we have disclosed the inaccurate data, where feasible and appropriate.

Right to Erasure. You may request that we delete or remove your personal information in certain circumstances, such as where the data is no longer necessary for the purpose for which it was collected, where you withdraw your consent and no other legal basis for processing exists, or where you have successfully objected to the processing. We will comply with erasure requests unless retention is required by law or necessary for the establishment, exercise, or defense of legal claims.

Right to Restrict Processing. You have the right to request that we limit the processing of your personal data in specific situations, including where you contest the accuracy of the data, where the processing is unlawful but you oppose erasure, or where we no longer need the data but you require it for legal claims. During any period of restricted processing, we will store your data but not otherwise process it without your consent or as necessary for legal purposes.

Right to Data Portability. Where processing is based on your consent or a contract and is carried out by automated means, you have the right to receive your personal data in a portable format and to request that we transmit that data directly to another data controller where technically feasible. This right enables you to move, copy, or transfer your personal data easily from one service provider to another.

Right to Object. You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis for processing, including profiling based on those interests. You also have an absolute right to object to the processing of your personal data for direct marketing purposes at any time, and we will cease such processing upon receipt of your objection.

Right to Withdraw Consent. Where we process your personal data based on your consent, you have the right to withdraw that consent at any time. The withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal but will prevent us from continuing to process your data on the basis of consent going forward. We will inform you of any consequences of withdrawing consent where relevant.

Right to Lodge a Complaint. If you believe that our processing of your personal data infringes applicable data protection laws, you have the right to lodge a complaint with the relevant supervisory authority in your country of residence, place of work, or the location where the alleged infringement occurred. In Canada, you may contact the Office of the Privacy Commissioner of Canada. We encourage you to contact us first so that we may address your concerns directly.

To exercise any of these rights, please contact us using the details provided in the Contact Information section of this policy. We will respond to your request within the timeframe required by applicable law, typically within thirty days. We may need to verify your identity before processing your request and may ask you to provide additional information to confirm your identity. There is generally no fee for exercising your data rights, although we reserve the right to charge a reasonable fee or refuse manifestly unfounded or excessive requests.

12. Third-Party Links

Our website may contain links to third-party websites, platforms, plugins, and applications that are not owned, operated, or controlled by DK Kitchen or Dk Grt Kitchener Ltd. These third-party sites have their own independent privacy policies and data collection practices, over which we have no control and for which we assume no responsibility or liability. We encourage you to review the privacy policies of every third-party website you visit through a link on our site before providing any personal information.

The presence of a link to a third-party website on dkkitchen.autos does not constitute an endorsement, sponsorship, or recommendation of that website or its content by DK Kitchen. We provide these links for your convenience and informational purposes only. Your interactions with third-party websites, including any purchases, submissions of data, or engagements with their services, are governed by the terms and conditions and privacy policies of those third parties. We recommend that you exercise caution and read the privacy statements of each website that collects your personal information.

13. Changes to This Privacy Policy

DK Kitchen reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. We will review this policy at least annually and more frequently when significant changes in applicable law or our business operations warrant an update. When we make changes, we will revise the effective date at the top of this policy and post the updated version on this page.

Where the changes are material in nature or affect the way we use your personal data, we will provide additional notice through prominent means, which may include an announcement on our website, a direct email notification to registered users, or other communication channels as appropriate. We encourage you to revisit this policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after the effective date of any revised policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should discontinue use of our website and services and may request deletion of your personal data in accordance with the rights described herein.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, or if you wish to exercise any of your data rights, we encourage you to contact us. We are committed to addressing your privacy inquiries thoroughly and in a timely manner, and we value the opportunity to resolve any concerns directly.

You may reach our data protection team through any of the following channels. Please include sufficient detail in your communication to enable us to respond effectively to your inquiry or request.

We aim to acknowledge all privacy-related inquiries within two business days and to provide a substantive response within fifteen business days. If your inquiry requires more detailed investigation, we will inform you of the expected timeline for a complete response.