Effective Date: March 2026

K Auto Tech LLC ("Company," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website kautotech.com (the "Website") and when you interact with us.

We serve clients across the United States, Canada, and the Caribbean. This policy complies with data protection requirements in multiple jurisdictions, including the European Union (GDPR), California (CCPA), Canada (PIPEDA), and Caribbean nations with their own data protection laws.

1. Information We Collect

Contact Form Information

When you complete our contact form, we collect the following information:

  • Name - Your full name
  • Organization - The agency or company you represent
  • Email Address - Your professional email
  • Phone Number - Your contact phone (optional)
  • Project Type - The nature of your inquiry or project
  • Message - Your project description, question, or request

Website Analytics and Cookies

We use Google Analytics to understand how visitors interact with our Website. This may include:

  • Pages visited and time spent on each page
  • Click patterns and user flow through the site
  • Referral source (how you found our Website)
  • Device type and browser information
  • Geographic location (at country/region level)
  • Internet Protocol (IP) address

Device and Usage Information

We automatically collect certain information about your device and how you use the Website:

  • Browser type and version
  • Operating system
  • Device type (desktop, mobile, tablet)
  • Screen resolution
  • Pages accessed and duration of access
  • Referring website or application

Information You Provide Voluntarily

Beyond the contact form, you may voluntarily provide additional information through emails, support requests, or other communications. This information is stored securely and used only for the purposes you specified.

2. How We Use Your Information

We use the information we collect for the following purposes:

Primary Uses

  • Business Communication - Responding to your inquiry, scheduling discovery calls, and discussing your project requirements
  • Service Delivery - If you engage our services, we use your information to deliver those services, manage the relationship, and provide support
  • Proposal and Quotation Development - Preparing detailed proposals and pricing information for your project
  • Procurement and Compliance - Meeting government procurement requirements, compliance verification, and documentation
  • Performance Analytics - Analyzing Website performance and user behavior to improve our site and user experience

Secondary Uses

  • Maintaining records for business administration and accounting
  • Responding to legal requests and compliance requirements
  • Protecting against fraud, security threats, or abuse
  • Conducting business analysis and planning
  • Improving our products and services

We do not use your information for marketing purposes without your explicit consent. If you request to be added to our mailing list for industry updates or news, you may opt in and can unsubscribe at any time.

4. Cookies and Tracking Technologies

What Are Cookies?

Cookies are small text files stored on your device that help us recognize you when you return to our Website. They do not contain executable code and cannot access files on your device.

How We Use Cookies

Our Website uses cookies for the following purposes:

  • Essential Cookies - Required for website functionality, security, and basic operations
  • Analytics Cookies - Google Analytics uses cookies to track user behavior, page visits, and session duration
  • Preference Cookies - Store your preferences (language, theme, accessibility settings)
  • Security Cookies - Protect against fraud and ensure secure transmission of data

Google Analytics

We use Google Analytics to analyze Website traffic and user behavior. Google Analytics places cookies on your device and collects data about your Website usage. Google may also use this data to display advertisements on other websites based on your website activity (remarketing).

You can opt out of Google Analytics by:

  • Installing the Google Analytics Opt-Out Browser Add-on
  • Adjusting your cookie preferences in your browser settings
  • Visiting Google's privacy policy at https://policies.google.com/privacy

Third-Party Cookies

Third-party services may place cookies on your device. We do not control these cookies and encourage you to review the privacy policies of third-party providers. Currently, we work with Google for analytics services only.

Managing Your Cookie Preferences

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. However, blocking cookies may limit your ability to use certain features of the Website. For instructions on managing cookies, visit your browser's help section or settings.

5. Data Sharing and Third Parties

Who We Share Your Information With

We do not sell, rent, or lease your personal information to third parties. We only share your information in the following circumstances:

Service Providers

We may share information with trusted service providers who assist us in operating our Website and conducting our business, including:

  • Google Analytics - For website analytics and traffic analysis
  • Email Service Providers - For sending transactional emails (confirmations, responses to inquiries)
  • Cloud Hosting Providers - For storing and maintaining Website infrastructure
  • CRM Systems - For managing customer relationships and business leads

Legal Requirements and Protection

We may disclose your information when required by law or when we believe in good faith that disclosure is necessary to:

  • Comply with legal obligations, court orders, or government requests
  • Protect our rights, privacy, safety, or property
  • Protect against fraud, security threats, or illegal activity
  • Enforce our terms of service or other agreements

Business Transactions

If we are involved in a merger, acquisition, reorganization, bankruptcy, or similar transaction, your information may be transferred as part of that transaction. You will receive notice of any such change and any options you may have regarding your information.

Data Processing Agreements

All service providers who process your personal data on our behalf have entered into Data Processing Agreements (DPAs) that comply with GDPR, CCPA, PIPEDA, and other applicable data protection laws. These agreements ensure your information is processed securely and only for the purposes specified.

6. International Data Transfers

Cross-Border Data Transfers

K Auto Tech LLC is based in Houston, Texas, United States. Our Website is hosted on servers in the United States. If you are located in the European Union, Canada, or the Caribbean, your personal data will be transferred to and processed in the United States.

GDPR Compliance for EU Users

For users in the European Union, the United Kingdom, and countries with similar data protection laws, we implement the following safeguards for international transfers:

  • Standard Contractual Clauses (SCCs) - We use approved Standard Contractual Clauses for transfers from the EU to the US
  • Data Protection Adequacy Assessments - We assess the data protection standards of recipient countries
  • Limited Transfer Scope - We only transfer data necessary to provide the requested services
  • Encryption and Security - Data is encrypted in transit and at rest to protect against unauthorized access

PIPEDA Compliance for Canadian Users

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), we ensure that personal information transferred across borders to the United States is handled according to PIPEDA requirements. We maintain appropriate safeguards and security measures for all transferred data.

Caribbean Data Protection

For users in Caribbean jurisdictions with data protection laws, we comply with local requirements regarding cross-border data flows and maintain appropriate security measures equivalent to or exceeding local standards.

Your Rights Regarding Transfers

If you have concerns about your data being transferred internationally, you have the right to request more information about how we protect your data in transit and at rest. See Section 12 for contact information.

7. Data Retention

How Long We Keep Your Information

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, unless longer retention is required by law.

Data Type Retention Period
Contact form inquiries (no engagement) 12 months
Active client information Duration of engagement + 7 years
Website analytics data 26 months (Google Analytics default)
Cookie data As specified by cookie settings (typically 1-2 years)
Server logs and IP data 90 days
Email communications Duration of engagement + 7 years for compliance

Legal and Compliance Retention

We may retain certain information longer than standard periods if required by:

  • Federal, state, or local tax requirements
  • Government procurement and compliance audits (typically 5-7 years)
  • Litigation and legal disputes
  • Contractual obligations with clients

Secure Deletion

When your information is no longer needed, we delete or anonymize it securely. Deletion may include securely erasing files or rendering them unreadable while maintaining backups for business continuity purposes.

8. Your Rights

You have rights regarding your personal data under data protection laws in your jurisdiction. Below are your rights under major applicable frameworks:

GDPR Rights (EU, UK, and Similar Jurisdictions)

If you are located in the European Union or a country with equivalent data protection laws, you have the following rights:

Right of Access (Data Subject Access Request)

You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data. We will update your information promptly upon verification of the correction.

Right to Erasure ("Right to be Forgotten")

Under certain circumstances, you can request that we delete your personal data, including:

  • When the data is no longer necessary for the purposes it was collected
  • When you withdraw consent for processing
  • When you object to processing on grounds of legitimate interest
  • When the data has been processed unlawfully

Note: We may retain data when legally required or for legitimate business reasons (e.g., compliance, litigation).

Right to Restrict Processing

You can request that we limit how we use your personal data while we verify accuracy or assess our legal rights to process it.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.

Right to Object

You have the right to object to processing of your personal data when we rely on legitimate business interests. We will respect your objection unless we have compelling legitimate reasons to continue processing.

Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection authority if you believe we have violated your rights. Contact information for EU data protection authorities is available at https://edpb.ec.europa.eu/about-edpb/board/members_en.

CCPA Rights (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

Right to Know

You have the right to request what personal information we collect, use, disclose, and share about you.

Right to Delete

You can request deletion of personal information we have collected from you, subject to certain exceptions (e.g., information needed for transactions, legal compliance).

Right to Opt-Out of Sales and Sharing

While we do not "sell" personal information in the traditional sense, under CCPA's definition, you can request we do not sell or share your information for cross-context behavioral advertising.

Right to Correct

You can request correction of inaccurate personal information we maintain about you.

Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights through denial of goods/services, differential pricing, or reduced quality of service.

PIPEDA Rights (Canadian Residents)

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the following rights:

Right of Access

You have the right to request access to your personal information that we hold. We will respond within 30 days.

Right to Request Correction

You can request that we correct any inaccurate, incomplete, or irrelevant personal information.

Right to Withdraw Consent

You can withdraw consent for collection, use, or disclosure of your personal information at any time (though this may affect our ability to serve you).

Right to File a Complaint

You can lodge a complaint with the Privacy Commissioner of Canada if you believe we have violated PIPEDA requirements. Visit https://www.priv.gc.ca/ for more information.

Caribbean Data Protection Rights

If you are located in a Caribbean jurisdiction with data protection legislation, your rights under local law are recognized and protected. Common rights typically include access, correction, deletion, and lodging complaints with local data protection authorities.

How to Exercise Your Rights

To exercise any of these rights, please contact us with your request (see Section 12 for contact information). Include enough detail to help us identify your information and your specific request. We will respond within the timeframes required by applicable law.

9. Children's Privacy

Our Website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information and terminate the child's account.

For parents or guardians: If you believe your child has provided personal information to us, please contact us immediately at info@kautotech.com. We will promptly investigate and delete the information if appropriate.

Compliance with Laws

  • COPPA (US) - Children's Online Privacy Protection Act
  • GDPR (EU) - Special protections for users under 16 (or local age of digital consent)
  • PIPEDA (Canada) - Special consent requirements for minors

10. Security

Security Measures

We implement comprehensive technical, administrative, and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These measures include:

  • Encryption - Data transmitted over the internet is encrypted using HTTPS/TLS
  • Access Controls - Personal information is accessible only to authorized employees on a need-to-know basis
  • Data Minimization - We collect and retain only the minimum personal data necessary
  • Employee Training - Our staff receives regular training on data protection and privacy practices
  • Firewalls and Intrusion Detection - Our systems are protected by firewalls and monitored for intrusions
  • Regular Security Audits - We conduct periodic security assessments and penetration testing
  • Secure Backups - Data backups are encrypted and securely stored
  • Vendor Security - Third-party service providers must meet our security standards

Limitations of Security

While we maintain strong security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information. You transmit information at your own risk. We encourage you to use strong passwords and keep your login credentials confidential.

Data Breach Notification

In the event of a data breach involving your personal information, we will notify affected individuals and relevant authorities as required by law. Notifications will be made without undue delay and in accordance with GDPR, CCPA, PIPEDA, and other applicable requirements.

Your Responsibility

You are responsible for maintaining the confidentiality of your passwords and contact information. If you believe your account has been compromised, contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by:

  • Updating the "Effective Date" at the top of this policy
  • Posting the updated policy on our Website
  • Sending you an email notification if you are an active client or have specifically requested updates

Your continued use of the Website after changes become effective constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

Significant Changes

For significant changes that materially affect your privacy rights (e.g., new third-party sharing practices, new uses of data), we will provide more prominent notice and may request explicit consent.

12. Contact Information

If you have questions about this Privacy Policy, want to exercise your rights, or have privacy concerns, please contact us:

K Auto Tech LLC

Email: info@kautotech.com
Address: Houston, Texas, United States
Website: kautotech.com

Data Protection Officer / Privacy Contact

For data protection inquiries, GDPR subject access requests, and privacy concerns, please email info@kautotech.com with "Privacy Request" in the subject line.

Response Times

We will respond to privacy inquiries and data subject access requests within:

  • GDPR: 30 days (extendable by 60 days for complex requests)
  • CCPA: 45 days
  • PIPEDA: 30 days

Regulatory Authorities

If you are unsatisfied with our response to your privacy request or complaint, you have the right to lodge a complaint with your local data protection authority:

  • EU/UK: Your national data protection authority (list: https://edpb.ec.europa.eu/)
  • California: California Attorney General's Office (https://oag.ca.gov/privacy)
  • Canada: Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca/)

Last Updated: March 22, 2026