Who We Are
Kitako Security Design ("we," "us," "our") is an Ontario-based security system design and consultation business operating at kitakosecurity.com. We are committed to protecting your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy law.
This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and how we protect it.
Information We Collect
| Type of Information | How It Is Collected | Why We Need It |
|---|---|---|
| Name and email address | At checkout via Stripe, or via contact form | To deliver your project and communicate with you |
| Billing address | At checkout via Stripe | Payment processing and tax compliance |
| Payment information | Stripe (we never see or store card details) | To process your payment securely |
| Floor plans and project files | Submitted by you via email | To complete your design project |
| Project description and requirements | Provided by you at time of order | To produce an accurate design |
| Website analytics data | Automatically via Google Analytics and Microsoft Clarity | Anonymized — to understand how visitors use our website |
| Communications | Email exchanges with our team | To support your order and resolve any issues |
We do not collect sensitive personal information such as government ID numbers, health information, or financial account details. Payment card processing is handled entirely by Stripe, which is PCI-DSS compliant. We never see or store your full card number.
How We Use Your Information
We use your personal information only for the following purposes:
- To complete and deliver your security design project
- To communicate with you about your order, revisions, and delivery
- To process and verify your payment through Stripe
- To comply with Canadian tax and legal obligations
- To respond to your inquiries and support requests
- To improve our website and services using anonymized analytics data
We do not use your personal information for automated decision-making or profiling that produces legal or significant effects on you.
Who We Share Your Information With
We do not sell, rent, or share your personal information with third parties for marketing or commercial purposes. We share your information only with:
- Stripe: Our payment processor. Stripe processes and stores your payment and billing information under their own privacy policy at stripe.com/privacy. They are independently PCI-DSS compliant.
- Google Analytics: Anonymized website usage data. No personally identifiable information is shared. Google's privacy policy: policies.google.com/privacy.
- Microsoft Clarity: Anonymized session recording and heatmap data. No personally identifiable information is shared. Microsoft's privacy policy: privacy.microsoft.com.
- Government authorities: Only where required by law, court order, or legal process applicable in Canada.
How Long We Retain Your Information
We retain your personal information only as long as necessary to fulfill the purposes for which it was collected:
- Project files and floor plans: Retained until your project and any revision period (14 days post-delivery) is complete. We delete project files upon request after closure.
- Order and payment records: Retained for a minimum of 7 years to comply with Canadian tax and accounting requirements.
- Email communications: Retained for up to 2 years for support and dispute resolution purposes.
- Analytics data: Anonymized and aggregated — retained per the respective platform's data retention policies.
How We Protect Your Information
We take reasonable technical and organizational measures to protect your personal information, including:
- All data transmitted to our website is encrypted using SSL/TLS (HTTPS)
- Payment processing is handled exclusively by Stripe — card data never passes through our systems
- Email communications containing project files are transmitted over standard encrypted email protocols
- Access to your personal information is limited to authorized personnel involved in your project
- Our website hosting uses enterprise-grade security infrastructure (Hostinger)
No method of internet transmission or electronic storage is 100% secure. While we use commercially reasonable measures, we cannot guarantee absolute security. In the event of a data breach affecting your information, we will notify you as required by applicable Canadian law.
Cookies and Tracking Technologies
Our website uses the following tracking technologies:
- Google Analytics: Collects anonymized data about website traffic, pages visited, and visitor behavior to help us improve our site. No personally identifiable information is collected.
- Microsoft Clarity: Collects anonymized session recordings and heatmaps to understand how visitors interact with our website. No personally identifiable information is collected.
You may opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-On at tools.google.com/dlpage/gaoptout. You may opt out of Microsoft Clarity at clarity.microsoft.com/opt-out.
Our website does not use cookies for advertising, remarketing, or third-party tracking beyond the analytics tools listed above.
Your Rights Under PIPEDA
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:
- Access: Request a copy of the personal information we hold about you
- Correction: Request that we correct inaccurate or incomplete information
- Deletion: Request deletion of your personal information, subject to our legal retention obligations
- Withdraw consent: Withdraw consent to our use of your information, where consent is the legal basis (noting this may affect our ability to provide services)
- Complaint: File a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca or 1-800-282-1376
To exercise any of these rights, contact us at info@kitakosecurity.com. We will respond within 30 days.
Children's Privacy
Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected information from a minor, please contact us immediately at info@kitakosecurity.com and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our services after changes are posted constitutes your acceptance of the revised policy. For material changes, we will attempt to notify you by email.
Contact & Complaints
For any privacy-related questions, concerns, or requests:
- Email: info@kitakosecurity.com
- Website: kitakosecurity.com
- Response time: Within 30 days as required by PIPEDA
- Location: Ontario, Canada
If you are unsatisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada (OPC):
- Website: priv.gc.ca
- Phone: 1-800-282-1376