Privacy Policy

Introduction

By visiting our website at atek.io, using the ATEK Platform, downloading our applications, submitting information through our forms, or otherwise engaging with our products and services, you acknowledge that you have read, understood, and agree to the collection and use of your information in accordance with this Privacy Policy.

This Privacy Policy should be read in conjunction with the ATEK End User License Agreement, Terms & Conditions, Service Level Agreement, Confidentiality & Non-Disclosure, Cookie Policy, and Data Processing Agreement, which together form the complete agreement between you and ATEK (10007668 CANADA INC., 5490 Boulevard Thimens, Office 240, St-Laurent, Quebec, H4R 2K9, Canada).

If you do not agree with our policies and practices, please do not use our services.

1. Definitions

1.1. "ATEK"

refers to 10007668 CANADA INC., doing business as ATEK, with its head office at 5490 Boulevard Thimens, Office 240, St-Laurent, Quebec, H4R 2K9, Canada.

1.2. "Personal Data"

means any information that identifies or can be used to identify, contact, or locate a person, including name, address, email address, phone number, and any other non-public information associated with or linked to such data.

1.3. "Technical Data"

means chronological data that you post, upload, or make available through our products, services, and websites, as well as data we collect about your application, system data (such as version data, configurations, and settings), and usage patterns.

1.4. "Usage Data"

means data collected automatically when using our services, including browser type, pages visited, time spent on pages, device identifiers, IP address, and other diagnostic data.

1.5. "Anonymous Data"

means data that is not associated with or linked to your Personal Data and does not, by itself, permit the identification of individual persons.

1.6. "Platform"

refers to the ATEK web application, mobile applications, and all related software and services.

1.7. "Services"

refers collectively to the Platform, website, sensors, support, and all other products and services provided by ATEK.

2. Information We Collect

2.1. Information You Provide

We collect Personal Data when you:

• Create an account or register to use our Services
• Complete forms on our website (contact forms, demo requests, quote requests)
• Place an order or accept a commercial proposal
• Communicate with us via email, phone, or support channels
• Participate in surveys, promotions, or events

This information may include your name, email address, phone number, job title, company name, mailing address, and payment details.

2.2. Information Collected Automatically

When you access our website or use our Services, we automatically collect:

• Usage Data: Pages visited, time and date of visit, time spent on pages, referring URLs, and navigation patterns
• Device Information: Browser type, operating system, device type, screen resolution, and language preferences
• Network Information: IP address (anonymized for analytics purposes), internet service provider, and general geographic location (country/region)

2.3. Technical Data from Products and Services

When our products or Services are deployed in your environment, we may collect Technical Data including sensor readings, system configurations, alert events, calibration records, and platform usage logs.

2.4. Information from Third Parties

We may receive information about you from third-party services we integrate with, business partners, or publicly available sources, solely for the purposes of providing and improving our Services.

3. How We Use Your Information

3.1. Service Delivery

• To provide, operate, and maintain our Services
• To create and manage your account
• To process transactions and send related information
• To deliver monitoring data, alerts, and reports
• To provide technical support and respond to your requests

3.2. Service Improvement

• To understand how you use our Services and improve functionality
• To develop new features, products, and services
• To conduct internal analytics and reporting
• To perform quality assurance and testing

3.3. Communication

• To send administrative messages, updates, and security alerts
• To respond to your comments, questions, and support requests
• To send marketing communications about products and services that may interest you (with your consent, where required)

3.4. Security and Compliance

• To detect, prevent, and address technical issues, fraud, and security threats
• To enforce our terms and policies
• To comply with applicable laws and regulatory obligations
• To maintain audit trails as required by FDA 21 CFR Part 11, Health Canada GMP, and other applicable regulations

3.5. Aggregated and Anonymous Data

We may create Anonymous Data from Personal Data by excluding information that makes the data personally identifiable. We use Anonymous Data to analyze usage patterns, improve our Services, develop benchmarks, train machine learning models, and for other lawful business purposes. Anonymous Data is not subject to the restrictions of this Privacy Policy.

4. How We Share Your Information

ATEK does not sell your Personal Data. We may share your information in the following circumstances:

4.1. Service Providers

We may share your information with trusted third-party service providers who assist us in operating our Services, including cloud hosting providers, analytics platforms, payment processors, CRM systems, and communication tools. These providers are contractually bound to use your information only for the purposes we specify and to protect it in accordance with this Privacy Policy.

4.2. Business Partners

With your consent, we may share relevant information with authorized resellers, integration partners, or calibration service providers to fulfill your service requirements.

4.3. Legal Requirements

We may disclose your information if required to do so by law, court order, subpoena, or governmental request, or if we believe in good faith that such disclosure is necessary to:

• Comply with applicable laws or respond to legal process
• Protect or defend the rights, property, or safety of ATEK, our clients, or the public
• Prevent or investigate possible wrongdoing
• Enforce our terms and policies

4.4. Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4.5. With Your Consent

We may share your information for any other purpose with your explicit consent.

5. Data Hosting and Sovereignty

5.1. All data collected through the ATEK Platform is stored, processed, and served exclusively from Canadian-based servers using Google Cloud Platform (GCP) infrastructure located in Canada.

5.2. We do not transfer Personal Data or Technical Data outside of Canada without your prior written consent, except where required by law.

5.3. Our data hosting practices comply with Canadian data sovereignty requirements, PIPEDA, and Quebec's Law 25.

6. Data Security

6.1. ATEK employs industry-standard security measures to protect your information including:

• SSL/TLS encryption for data in transit
• Encryption at rest for stored data
• Role-based access controls and secure authentication
• Regular security audits and penetration testing through the Operational Cyber Defense Center (COCD)
• Secure password hashing
• SOC 2 Type II compliant infrastructure

6.2. While we strive to use commercially acceptable means to protect your Personal Data, no method of electronic storage or transmission over the internet is 100% secure. We cannot guarantee absolute security.

6.3. You are responsible for maintaining the confidentiality of your account credentials and for restricting access to your devices.

7. Data Retention

7.1. We retain Personal Data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting requirements.

7.2. Technical Data collected through the Platform is retained in accordance with your service agreement and the data retention provisions of the Terms & Conditions.

7.3. Upon termination of your service agreement, ATEK retains Platform access for sixty (60) days and provides a thirty (30)-day data extraction window, after which data is permanently deleted.

7.4. Anonymous and aggregated data may be retained indefinitely for analytics and service improvement purposes.

8. Your Privacy Rights

8.1. Access and Portability

You have the right to request a copy of the Personal Data we hold about you and to receive it in a structured, commonly used, and machine-readable format.

8.2. Correction

You have the right to request that we correct inaccurate or incomplete Personal Data.

8.3. Deletion

You have the right to request that we delete your Personal Data, subject to certain exceptions.

8.4. Withdrawal of Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time.

8.5. Opt-Out of Marketing

You may opt out of receiving marketing communications at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us at privacy@atek.io.

8.6. Complaint

You have the right to lodge a complaint with the applicable data protection authority, including the Office of the Privacy Commissioner of Canada or the Commission d'acces a l'information du Quebec.

To exercise any of these rights, please contact us at privacy@atek.io.

9. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect Personal Data from anyone under 18.

10. Do Not Track Signals

At this time, there is no uniform technology standard for recognizing and implementing Do-Not-Track (DNT) browser signals. We do not currently respond to DNT browser signals.

11. Third-Party Links

Our website and Services may contain links to third-party websites or services not operated by ATEK. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites.

12. California Residents

If you are a California resident, you may request and obtain from us, once a year and free of charge, information regarding the Personal Data we have disclosed to third parties for direct marketing purposes during the preceding calendar year. To make such a request, please submit your request in writing to privacy@atek.io.

13. Legal Compliance

Our privacy practices comply with applicable privacy laws including:

• PIPEDA (Personal Information Protection and Electronic Documents Act) - Canada
• Quebec Law 25 (An Act to modernize legislative provisions as regards the protection of personal information) - Quebec, Canada
• GDPR (General Data Protection Regulation) - European Union (where applicable)
• CCPA (California Consumer Privacy Act) - California, USA (where applicable)

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes, we will notify you by posting the updated policy on our website with a revised "Last updated" date.

15. Governing Law

This Privacy Policy is governed by the laws of the Province of Quebec and the federal laws of Canada applicable therein, without regard to principles of conflicts of laws.