Privacy Policy

// 01Who we are & what this covers

Kluetek IT Services Inc. (“Kluetek”, “we”, “us”) provides digital forensics, incident response, and data recovery services from Toronto, Ontario. This policy explains how we handle personal information for visitors to this website and for clients who engage us, and it reflects our obligations under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

// 02Information we collect directly

When you contact us or engage our services we collect the details you provide — name, business email, phone number, organisation, and the description of the matter you bring to us. When you visit this site we also collect basic technical data such as IP address, browser type, and pages viewed. We do not ask for more than we need.

We do not knowingly collect information from children, and this site is intended for business contacts.

// 03Devices, media & evidence we examine

Forensics, incident response, and data recovery require us to receive and process the material at the centre of an engagement: physical devices and storage media, forensic images and copies, system and network logs, and files you provide or authorise us to acquire. This material frequently contains personal information about you and about third parties.

We process that material solely to carry out your engagement, only on your documented instructions, and under strict confidentiality. We act as a service provider handling this data on your behalf; you remain responsible for it as its controller.

// 04How we use information

We use information to deliver the services you engage us for — examination, analysis, recovery, incident response, and reporting — and to communicate with you, raise invoices, and meet our legal, tax, and professional obligations. We use site and enquiry data to respond to you and improve our service.

We do not sell personal information, and we never use the devices, media, or data entrusted to us for any purpose beyond the engagement they were provided for.

// 05Your authorisation

Before we examine or attempt to recover any device, medium, or dataset, you confirm that you own it or otherwise have the lawful authority and any necessary consents to submit it to us and to have us examine, image, analyse, or recover its contents. We rely on that confirmation and act on your instructions; you can find the corresponding obligation in our Terms of Service.

// 06Disclosure & subprocessors

We rely on a limited set of reputable providers to run our business — our website host, email and ticketing providers, forensic and recovery tooling vendors, and payment processing — each engaged under terms that require them to protect your data and use it only as instructed. A current list of material subprocessors is available on request.

We disclose information to these providers only as needed to deliver the service, and otherwise only where we are required to by law or valid legal process, such as a court order, subpoena, or warrant. Where we are legally permitted to do so, we will notify the affected client of such a request.

// 07Security & chain of custody

We protect information with administrative, physical, and technical safeguards appropriate to its sensitivity, including access controls, encryption, secure storage for media and evidence, and documented chain-of-custody records for material handled in forensic engagements. All personnel are bound by confidentiality obligations. No safeguard is perfect, but we work to reduce risk at every stage.

// 08Retention & secure disposal

We keep personal information and case material for as long as needed to deliver the engagement and to meet legal, evidentiary, tax, and accounting obligations, and to resolve disputes. The retention period for forensic images, working copies, and reports is set in your engagement.

When that period ends, or when you ask us to and we are not legally required to retain it, we return your material or securely wipe and destroy it, and we record that disposal.

// 09Your privacy rights

Subject to applicable law, you may ask to access the personal information we hold about you, to correct it, or to withdraw a consent you previously gave. To make a request, contact us at privacy@kluetek.com. We will respond within the timeframe required by law and may need to verify your identity first.

If you are not satisfied with our response, you have the right to complain to the Office of the Privacy Commissioner of Canada.

// 10Cookies

This website uses a small number of cookies. Some are strictly necessary for the site and our hosting platform to function; others are optional and help us understand, in aggregate, how the site is used. You can control or remove cookies through your browser settings, and disabling non-essential cookies will not stop you from using the site.

// 11Contact

Questions about this policy, or about how we handle your data, can be sent to privacy@kluetek.com, or by mail to Kluetek IT Services Inc., 850 College St, Toronto, ON M6H 1A1.