Privacy Policy

Effective Date: January 1, 2026

1. Introduction

Krastivo Engineering Corp. ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information in connection with our business operations, including our website, products, and services.

By accessing or using our website and services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information that you voluntarily provide to us, including:

• Contact information: name, email address, phone number, mailing address
• Business information: company name, job title, industry, organizational details
• Communication data: messages, inquiries, feedback, and support requests
• Account information: username, password, preferences, and account settings
• Payment information: billing address, payment method details (processed securely by third parties)

2.2 Automatically Collected Information

When you visit our website or use our services, we automatically collect certain technical information:

• Device information: IP address, browser type, operating system, device identifiers
• Usage data: pages visited, time spent on pages, links clicked, referral sources
• Cookies and tracking technologies: session identifiers, preferences, analytics data
• Location data: general geographic information based on IP address (not precise geolocation)

2.3 Information from Third Parties

We may receive personal information about you from third-party sources, including:

• Business partners and service providers
• Publicly available sources and databases
• Marketing and analytics providers
• Social media platforms (if you link your accounts)

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• Providing services: fulfilling your requests, delivering products, and managing your account
• Communication: responding to inquiries, sending updates, newsletters, and service notifications
• Marketing: sending promotional materials, industry insights, and product announcements (with consent)
• Improvement: analyzing usage patterns, improving website functionality, and optimizing services
• Legal compliance: meeting regulatory requirements and protecting legal interests
• Analytics: understanding user behavior, measuring performance, and detecting fraud
• Personalization: customizing content and services based on preferences
• Support: providing customer service and technical assistance

4. Legal Basis for Processing

In Canada and other jurisdictions, we process your personal information based on the following legal grounds:

• Consent: You have explicitly consented to the processing of your information
• Contract: Processing is necessary to perform a contract with you
• Legal obligation: We are required by applicable law to process your information
• Legitimate interests: Processing serves our legitimate business interests (balanced against your rights)
• Vital interests: Processing is necessary to protect your or another person's vital interests

5. How We Share Your Information

We may share your personal information with:

• Service providers: Third-party vendors who assist with hosting, analytics, payment processing, and customer support
• Business partners: Organizations we collaborate with to provide integrated services
• Legal authorities: Government agencies, courts, and law enforcement when required by law
• Corporate transactions: Entities involved in mergers, acquisitions, or asset sales
• Your consent: Third parties with your explicit permission

We do not sell your personal information to third parties for marketing purposes. We require all service providers to maintain appropriate security and confidentiality obligations.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Retention periods vary based on the type of information and its purpose:

• Account information: retained while your account is active, plus 7 years for audit purposes
• Marketing data: retained until you unsubscribe or withdraw consent
• Transaction records: retained for 7 years to comply with tax and financial regulations
• Website analytics: typically retained for 12-24 months
• Support communications: retained for 3 years after case closure

After the retention period expires, we securely delete or anonymize your personal information. In some cases, we may retain anonymized or aggregated data indefinitely for analytics and historical purposes.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

7.1 Canadian Privacy Rights

Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canadian privacy laws, you have the right to:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Withdraw consent: Withdraw consent to processing at any time
• Opt-out: Opt out of marketing communications and non-essential processing
• Complaint: File a complaint with your provincial privacy regulator

7.2 Marketing Communications

You may unsubscribe from promotional emails by clicking the "unsubscribe" link in any email or by contacting us directly. You may also manage your communication preferences through your account settings.

7.3 Cookies and Tracking

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Note that disabling cookies may affect website functionality.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (SSL/TLS) and at rest
• Secure authentication mechanisms (passwords, multi-factor authentication)
• Regular security assessments and vulnerability testing
• Access controls and role-based permissions
• Employee training on data protection and privacy practices
• Monitoring and logging of system access

While we strive to protect your personal information, no transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and are not liable for unauthorized access resulting from circumstances beyond our reasonable control.

9. Third-Party Links and Services

Our website may contain links to third-party websites and services that are not operated by us. This Privacy Policy does not apply to third-party websites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services before providing personal information.

10. Children's Privacy

Our services are not intended for individuals under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without appropriate parental consent, we will take steps to delete such information and terminate the child's account.

11. International Data Transfers

Krastivo Engineering Corp. is headquartered in Canada. Your personal information may be transferred to, stored in, and processed in Canada and other countries where we or our service providers operate. These countries may have different data protection laws than Canada. By using our services, you consent to the transfer of your information to countries outside Canada.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The updated version will be effective as of the "Effective Date" stated at the top of this policy. We will notify you of material changes by posting the updated policy on our website or, where appropriate, by sending you an email notification. Your continued use of our services after such changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Krastivo Engineering Corp.
150 Elgin St
Ottawa, ON K2P 1L4
Canada

Email: biz@krastivo.bond
Phone: +1 613 236 8815

VAT: 815920387 RT 0001

We will respond to your request within 30 days or as required by applicable law. If you are not satisfied with our response, you may lodge a complaint with your provincial privacy authority in Canada.

14. Additional Privacy Information

14.1 Data Breach Notification

In the event of a personal data breach that poses a risk to your privacy, we will notify you and relevant authorities as required by Canadian privacy laws. Notification will occur within 30 days of discovering the breach, unless law enforcement requests we delay notification.

14.2 Privacy by Design

We are committed to implementing privacy by design principles, ensuring that privacy and data protection considerations are integrated into all our business processes, products, and services from inception.

14.3 Accountability and Governance

Krastivo Engineering Corp. maintains a privacy governance framework that includes:

• Designated Privacy Officer responsible for privacy compliance
• Regular privacy impact assessments
• Privacy training for all employees
• Data processing agreements with all service providers
• Regular audits and compliance reviews