Privacy Policy

1. Introduction

Jik Canada Holdings Inc., operating under the trade name JIK Holdings (hereinafter referred to as JIK Holdings, we, us, or our), is firmly committed to protecting the privacy and security of personal information entrusted to us by our clients, partners, website visitors, and all stakeholders with whom we interact. This Privacy Policy constitutes a comprehensive explanation of how we collect, use, disclose, retain, safeguard, and otherwise process information when you visit our official website at www.jikholdings.lat (the Website), communicate with us through any channel, or engage our computer systems design and technology consulting services.

JIK Holdings is a professional computer systems design and integrated solutions firm operating within the Professional, Scientific, and Technical Services sector under the North American Industry Classification System. We deliver end-to-end technology services encompassing enterprise architecture planning, integrated systems engineering, network infrastructure design, software systems development, cloud migration strategy, cybersecurity advisory, and comprehensive technology consulting. Our principal office is located at 1005-30 Humberline Drive, Etobicoke, Ontario, M9W 6K8, Canada, and we serve clients across North America and internationally.

We are subject to Canadian federal privacy legislation including the Personal Information Protection and Electronic Documents Act (PIPEDA), which governs the collection, use, and disclosure of personal information in the course of commercial activities. We also adhere to applicable provincial privacy laws, including Ontarios statutory framework, and we respect internationally recognized privacy principles such as data minimization, purpose limitation, storage limitation, accuracy, and accountability. Our privacy practices are designed to meet or exceed the standards set forth by these legal instruments while remaining practical and transparent for the individuals and organizations we serve.

By accessing our Website or using our services, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. If you do not agree with any part of this policy, we respectfully ask that you discontinue use of our Website and services immediately and refrain from submitting any personal information to us. We encourage you to review this policy carefully and contact us with any questions before proceeding. Your trust is foundational to our client relationships, and we treat the responsibility of handling your information with the seriousness it deserves.

This policy applies to all information collected through our Website, email communications, telephone interactions, in-person meetings, project engagements, and any other context in which you interact with JIK Holdings. It does not apply to information collected by third-party websites or services that may be linked from our Website, as we have no control over and assume no responsibility for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you access.

2. Information We Collect

JIK Holdings collects information through multiple touchpoints in the course of providing our professional services and operating our Website. The information we gather falls into two broad categories: information that you voluntarily provide to us directly, and information that is automatically collected through technical mechanisms when you interact with our digital properties. We are deliberate about the scope of our collection practices and collect only what is reasonably necessary for the purposes described in this policy.

2.1 Information You Provide Directly

When you contact us through our Website contact form, send us an email at help@jikholdings.lat, call us at +1 (985) 296-3485, or otherwise initiate communication with our team, we may collect a range of personal and business-related information including but not limited to your full legal name, professional email address, direct telephone number, company or organization name, job title or functional role, department, project details and scope descriptions, specific inquiry content, technical requirements documentation, timelines, budget parameters, and any other information you choose to share with us voluntarily.

When you formally engage our services, we may collect additional information that is necessary for client onboarding, project planning and execution, resource allocation, and billing administration. This may include business contact details for multiple stakeholders within your organization, organizational charts and reporting structures, technical specifications of existing systems, system architecture diagrams and documentation, network topology information, software inventory and licensing details, data flow mappings, security posture assessments, project milestones and deliverables tracking, financial information required for invoicing and payment processing including banking details for wire transfers, purchase order numbers, tax identification numbers, and contractual documentation.

We may also collect information during the course of service delivery through project status meetings, technical discovery sessions, requirements gathering workshops, progress reports, feedback surveys, and regular client communications. This enables us to tailor our services to your specific needs, ensure quality control, and maintain accurate records of our professional engagements. All information provided in these contexts is treated as confidential and is governed by our professional obligations and any applicable non-disclosure agreements.

If you apply for employment or contract opportunities with JIK Holdings, we may collect additional information through your resume or curriculum vitae, cover letter, portfolio, references, work samples, educational credentials, professional certifications, employment history, and any other information you provide as part of the recruitment process. This information is used solely for evaluating your candidacy and is retained in accordance with our recruitment privacy practices.

2.2 Information Collected Automatically

When you visit our Website, certain technical information is automatically collected through standard web server logs, analytics platforms, and related technologies that are commonplace in modern web operations. This information is collected passively as you navigate our site and does not require any affirmative action on your part beyond visiting the Website. The automatically collected information may include your Internet Protocol (IP) address and derived geolocation data at the city or regional level, browser type and full version number, operating system name and version, device type and screen resolution, referring URL and exit pages, the specific pages you visited on our Website, the date and time of your visit expressed in Coordinated Universal Time (UTC), the duration of your visit on each page, click patterns and scroll depth, mouse movement heatmap data, and other diagnostic and performance data.

We may use cookies and similar tracking technologies to enhance your browsing experience, maintain session state, remember your preferences, analyze aggregate Website traffic patterns, and understand how visitors discover and interact with our content. Cookies are small text files that are placed on your device by your web browser at the direction of the websites you visit. They serve various functions including authentication, security, preference storage, and analytics. We use both session cookies, which expire when you close your browser, and persistent cookies, which remain on your device for a defined period or until manually deleted.

You may configure your browser settings to refuse all cookies, to accept only first-party cookies, or to alert you each time a cookie is being sent. Most modern browsers provide granular cookie controls under their privacy and security settings menus. However, please be aware that disabling cookies may affect the functionality of certain features on our Website and other websites you visit. Some portions of our Website may not operate as intended without cookies enabled. We do not use cookies to track you across unrelated third-party websites or to build behavioral advertising profiles.

We may also use web beacons, also known as tracking pixels or clear GIFs, which are tiny transparent graphic images embedded in web pages and HTML-formatted email messages. These beacons allow us to understand whether you have visited a particular page, opened an email, or interacted with specific content. We use this information to measure the effectiveness of our communications and improve the relevance of the information we provide.

Our servers may also collect standard log information including the Internet service provider (ISP) you use, the protocol version used for the connection, and the amount of data transferred during your session. This information helps us diagnose technical issues, manage server capacity, and protect the security and integrity of our systems against unauthorized access attempts and malicious activity.

2.3 Information We Do Not Collect

We do not knowingly collect, process, or store sensitive personal information such as government-issued identification numbers (including social insurance numbers, drivers license numbers, or passport numbers), racial or ethnic origin, political opinions or affiliations, religious or philosophical beliefs, trade union membership, genetic or biometric data used for identification purposes, health or medical information, or information concerning an individuals sex life or sexual orientation through our Website or in the ordinary course of our consulting engagements. We kindly request that you do not submit such categories of information to us. If we inadvertently receive sensitive information, we will take steps to securely delete or de-identify it promptly upon discovery, unless we are required by law to retain it.

3. How We Use Your Information

JIK Holdings uses the information we collect for legitimate business purposes that are directly related to our professional services operations and our relationship with you. We process information based on one or more lawful grounds including the necessity to perform a contract, compliance with legal obligations, pursuit of our legitimate business interests where those interests are not overridden by your rights and freedoms, and where applicable, your explicit consent. Specifically, we use information for the following articulated purposes:

• Service Delivery and Project Execution: To respond to your inquiries in a timely and thorough manner, provide detailed information about our service offerings and capabilities, prepare customized proposals and statements of work, execute consulting engagements according to agreed-upon scope and specifications, allocate qualified personnel and resources to your projects, manage project timelines and deliverables, perform quality assurance reviews, and deliver our full range of computer systems design, integrated systems engineering, technology advisory, enterprise architecture, cloud migration, cybersecurity consulting, and network infrastructure services. This includes all activities necessary to fulfill our contractual obligations and meet the professional standards expected of a consulting firm in the technology sector.
• Client Communication and Relationship Management: To communicate with you proactively and responsively regarding active projects and ongoing engagements, provide regular status updates and milestone notifications, deliver technical documentation and system specifications in a timely manner, respond to support requests and technical inquiries with appropriate urgency, maintain productive ongoing client relationships through periodic check-ins, schedule and coordinate meetings, conference calls, and on-site visits, and ensure that all stakeholders within your organization receive relevant and actionable project communications.
• Business Operations and Administration: To manage all aspects of billing, invoicing, accounts receivable, payment processing, and financial record-keeping with accuracy and timeliness. To administer our contractual relationships including contract generation, execution tracking, amendment management, and renewal processing. To comply with tax obligations, maintain proper books of account, support internal and external audits, and meet all legal and regulatory reporting requirements applicable to a corporation operating in Ontario, Canada. To manage vendor relationships, procurement processes, and internal resource planning. To evaluate and improve our internal business processes, project management methodologies, and service delivery frameworks.
• Website Optimization and Analytics: To analyze Website usage patterns at an aggregate and individual level to understand which pages and content are most valuable to our visitors. To monitor site performance metrics including page load times, server response times, and error rates for the purpose of proactive issue resolution. To diagnose and resolve technical problems affecting the Website or its underlying infrastructure. To improve the user experience through data-driven design decisions, content optimization, and feature development based on actual usage patterns rather than assumptions. To measure the effectiveness of our search engine optimization efforts and digital presence strategy.
• Marketing and Business Development: With your consent where required by applicable law, to send you information about our service offerings, capabilities, and areas of expertise that may be relevant to your professional interests and organizational needs. This may include technical whitepapers, case studies, industry trend analyses, research reports, event invitations for webinars and conferences, newsletters, and other communications that we believe provide genuine professional value. You have the absolute right to opt out of receiving marketing communications at any time by contacting us directly or by using the unsubscribe mechanism provided within each marketing email. Opting out of marketing communications does not affect our ability to send you transactional or service-related communications necessary for ongoing engagements.
• Legal Compliance and Risk Management: To comply with all applicable federal, provincial, and municipal laws, regulations, legal processes, court orders, and legally binding governmental requests. To enforce our Terms of Service, protect our legal rights, privacy, safety, and property, and those of our clients, employees, contractors, and the general public. To detect, prevent, investigate, and address fraud, unauthorized access, security incidents, and other potentially prohibited or illegal activities. To establish, exercise, or defend against legal claims. To maintain appropriate insurance coverage. To fulfill our obligations under professional standards and codes of conduct applicable to technology consultants.
• Recruitment and Talent Acquisition: To process employment applications, evaluate candidate qualifications against position requirements, conduct background and reference checks with appropriate consent, communicate with candidates throughout the hiring process, and maintain recruitment records for future opportunities where candidates have expressed interest. To comply with employment and labor laws applicable in our jurisdictions of operation.

We do not engage in automated decision-making or profiling that produces legal effects or similarly significant effects concerning individuals. All material decisions affecting our clients, partners, and stakeholders are made with human involvement and oversight.

4. How We Share Your Information

JIK Holdings does not sell, rent, trade, lease, or otherwise disclose personal information to third parties for their independent marketing or commercial purposes. We do not operate as a data broker and we derive no revenue from the transfer of personal information to external organizations. We may share information in the following limited and carefully controlled circumstances, and only to the extent necessary to accomplish the specific purpose of the disclosure:

• Service Providers and Subprocessors: We may engage carefully vetted third-party service providers to perform specific operational functions on our behalf. These functions include website hosting and content delivery, cloud infrastructure provisioning, email delivery and communication platform services, web analytics and performance monitoring, payment processing and financial transaction handling, customer relationship management (CRM) platforms, project management and collaboration tools, document storage and file sharing services, IT support and infrastructure management, and data backup and disaster recovery services. Each service provider is selected through a due diligence process that evaluates their security practices, privacy policies, and compliance certifications. These providers are granted access to information only to the extent strictly necessary to perform their designated functions and are contractually bound through data processing agreements to maintain confidentiality, implement appropriate security measures, refrain from using the information for any purpose other than providing services to us, and comply with all applicable data protection requirements. A list of our key subprocessors is available upon request.
• Professional Advisors: We may share information with our external legal counsel, chartered professional accountants, financial auditors, tax advisors, insurance brokers, and other professional advisors as necessary for the prudent conduct of our business, the protection of our legal interests, compliance with regulatory obligations, and the maintenance of appropriate professional standards. These advisors are themselves bound by professional duties of confidentiality and ethical obligations that protect the information shared with them.
• Business Transfers and Corporate Restructuring: In the event of a merger, acquisition, consolidation, reorganization, divestiture, sale of all or a substantial portion of our assets, financing transaction, or in the unlikely event of bankruptcy, insolvency, or receivership proceedings, personal information held by JIK Holdings may be among the assets transferred or disclosed as part of that transaction. We will use reasonable efforts to ensure that any acquiring entity or successor organization agrees to be bound by terms substantially similar to this Privacy Policy with respect to the transferred information. We will notify you via email or a prominent notice on our Website before your personal information becomes subject to a materially different privacy policy as a result of such a transaction.
• Legal Requirements and Protection of Rights: We may disclose information if we have a good faith belief that such disclosure is reasonably necessary to comply with a valid legal obligation including applicable laws, regulations, court orders, subpoenas, search warrants, or other lawful requests from governmental authorities with jurisdiction over JIK Holdings. We may also disclose information when we believe in good faith that disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of our clients, employees, contractors, or the public. This includes exchanging information with other organizations for the purposes of fraud protection, security incident response, and credit risk reduction. We will make reasonable efforts to notify you of such disclosures where permitted by law, unless notification is prohibited by the legal process or would impede an ongoing investigation.
• With Your Consent or at Your Direction: We may share information with third parties when you have given us explicit consent to do so or when you have directed us to share information as part of a service engagement. For example, if you ask us to coordinate with another vendor or service provider involved in your technology ecosystem, we may share relevant project information at your direction and with your authorization. Any such sharing is documented and communicated to you.
• Aggregated or De-Identified Data: We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify an individual or organization. This may include statistical data about Website usage patterns, aggregate industry trends derived from our consulting work, or other non-personal data. Such information may be used for research, industry analysis, marketing collateral, or thought leadership publications without restriction.

5. Data Security

JIK Holdings implements and maintains a comprehensive suite of technical, administrative, and physical security measures designed to protect personal information under our control against unauthorized access, alteration, disclosure, misuse, loss, or destruction. Our security program is risk-based and continually evolving to address emerging threats and incorporate industry best practices.

Our technical security controls include encryption of data in transit using Transport Layer Security (TLS) protocol version 1.2 or higher, encryption of data at rest on storage media using industry-standard algorithms, deployment of enterprise-grade firewalls and intrusion detection and prevention systems (IDPS), regular vulnerability scanning and penetration testing conducted by qualified internal personnel or external security firms, endpoint protection across all corporate devices including antivirus and anti-malware software with real-time threat detection, multi-factor authentication (MFA) for access to systems containing personal information, role-based access controls that enforce the principle of least privilege, comprehensive logging and monitoring of system access and data modifications, secure development practices including code review and security testing for any custom software or scripts developed internally, and regular security patch management across all servers, workstations, and network devices.

Our administrative safeguards include a formal written information security policy that is reviewed and updated at least annually, mandatory employee training on data protection, privacy principles, and security best practices conducted during onboarding and refreshed periodically, confidentiality agreements signed by all employees, contractors, and third-party service providers with access to personal information, a designated privacy officer responsible for overseeing compliance with this policy and applicable laws, incident response procedures that define roles, responsibilities, and communication protocols in the event of a data breach, business continuity and disaster recovery plans that are tested regularly, vendor risk management processes that evaluate the security posture of third-party service providers, and periodic internal and external audits of our privacy and security program.

Our physical security measures include controlled access to our office premises through electronic badge systems and visitor management procedures, locked server rooms and equipment cabinets with restricted access, surveillance systems in common areas where appropriate and legally compliant, secure disposal procedures for physical documents and storage media containing personal information including cross-cut shredding and certified media destruction, and clean desk policies to minimize exposure of sensitive information.

Despite these measures, no method of electronic storage or transmission over the Internet is absolutely secure. The nature of networked systems means that no organization can provide an unconditional guarantee against all possible security breaches. While we strive to protect personal information using commercially reasonable and appropriate means, we cannot warrant or guarantee its absolute security against determined adversaries, zero-day vulnerabilities, insider threats, or sophisticated attack vectors. You acknowledge and accept that you provide personal information to us at your own risk, and we encourage you to take appropriate precautions on your end including using strong and unique passwords, keeping your devices and software updated, and being vigilant against phishing attempts.

In the event of a data breach involving personal information, we will follow our incident response plan which includes prompt investigation, containment of the breach, assessment of the risk of harm to affected individuals, and notification to affected individuals and relevant regulatory authorities in accordance with applicable legal requirements including the breach notification provisions under PIPEDA and any applicable provincial legislation. We maintain records of all data breaches regardless of whether notification was required.

6. Data Retention

JIK Holdings retains personal information only for as long as is reasonably necessary to fulfill the purposes for which it was originally collected, or as required by applicable laws, regulations, professional standards, and contractual obligations. Our retention approach is guided by the principle of storage limitation, meaning we do not hold onto information indefinitely once the legitimate purpose for its collection has been satisfied.

The specific retention period for any given category of information is determined by considering multiple factors including the nature and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the information, whether those purposes can be achieved through other means, and the applicable legal, regulatory, tax, accounting, and professional requirements that mandate minimum retention periods. Our retention schedules are documented in our internal data governance policies and are reviewed periodically to ensure continued appropriateness.

Client project records, including engagement letters, statements of work, project plans, technical specifications, system architectures, meeting notes, deliverables, communications, and all related documentation and correspondence, may be retained for a period of up to seven years following the completion or termination of the professional engagement. This retention period is designed to comply with applicable limitation periods for potential legal claims, tax and accounting record-keeping obligations under Canadian federal and provincial law, professional standards and codes of conduct applicable to consulting firms, and our own legitimate business interests in maintaining an accurate record of our professional work history.

Website analytics data and server logs are typically retained for a period ranging from fourteen months to twenty-six months depending on the specific data category and the analytics platform configuration, after which the data is either deleted or anonymized such that individual visitors cannot be identified. Financial transaction records are retained for a period consistent with tax authority requirements, which is typically seven years from the end of the relevant tax year under Canadian federal tax legislation.

When information is no longer required for the purposes described above, we take steps to securely delete, destroy, or irreversibly anonymize the information in accordance with our data disposal procedures. Physical documents are destroyed through cross-cut shredding or secure off-site destruction services. Electronic records are deleted using methods designed to prevent recovery, including secure deletion protocols for databases and file systems, cryptographic erasure where applicable, and degaussing or physical destruction of storage media at end-of-life. We maintain destruction logs documenting what was destroyed, when, by whom, and by what method.

In certain circumstances, we may retain information beyond the standard retention period if there is an ongoing legal proceeding, regulatory investigation, audit, or dispute that requires preservation of relevant records. In such cases, the information is placed under a legal hold and is not subject to routine deletion until the hold is released. We may also retain de-identified or aggregated data derived from personal information for analytical, research, or statistical purposes indefinitely, as such data can no longer be associated with any identifiable individual.

7. Your Rights and Choices

Depending on your jurisdiction of residence and the specific legal framework applicable to our processing of your personal information, you may have certain rights regarding the personal information we hold about you. JIK Holdings respects these rights and has established procedures to facilitate their exercise. While the specific scope of these rights may vary by jurisdiction, we are committed to responding to all legitimate requests in accordance with applicable law.

• Right of Access: You have the right to request confirmation of whether we process personal information about you, and to request access to that personal information along with details about the purposes of processing, the categories of information concerned, the recipients or categories of recipients to whom the information has been or will be disclosed, the envisaged retention period or criteria used to determine it, and the source of the information if it was not collected directly from you. Upon a valid access request, we will provide you with a copy of your personal information in a commonly used electronic format, subject to any applicable legal restrictions or exemptions, such as where access would reveal personal information about another individual or compromise legal privilege. The first copy will be provided free of charge; we may charge a reasonable fee for additional copies to cover administrative costs.
• Right to Rectification: You have the right to request the correction or completion of personal information that is inaccurate, incomplete, or outdated. We take reasonable steps to ensure that the personal information we hold is accurate and current, and we rely on you to inform us of any changes to your circumstances or contact details. Upon receiving a correction request, we will promptly update our records and, where appropriate, notify any third parties to whom the information has been disclosed of the correction, unless this proves impossible or involves disproportionate effort.
• Right to Erasure: You have the right to request the deletion or removal of your personal information in certain circumstances, including where the information is no longer necessary for the purposes for which it was collected, where you withdraw consent on which the processing is based and there is no other legal ground for processing, where you object to processing and there are no overriding legitimate grounds, or where the information has been unlawfully processed. This right is not absolute and may be limited by our legal obligations to retain certain records, the establishment or defense of legal claims, or other grounds recognized by applicable law. When we cannot delete information due to a legal retention requirement, we will restrict its processing to what is necessary for compliance with that requirement and will inform you of the specific reason.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal information in certain situations, including where you contest the accuracy of the information (restriction for a period enabling us to verify accuracy), where the processing is unlawful and you oppose erasure and request restriction instead, where we no longer need the information but you require it for the establishment, exercise, or defense of legal claims, or where you have objected to processing pending verification of whether our legitimate grounds override yours. During a restriction period, we will store the information but not otherwise process it except with your consent or for limited purposes permitted by law.
• Right to Data Portability: You have the right, in certain circumstances, to receive the personal information you have provided to us in a structured, commonly used, and machine-readable format such as CSV, JSON, or XML. You also have the right to request that we transmit this information directly to another organization where technically feasible. This right applies to information processed by automated means based on consent or contract.
• Right to Object: You have the right to object at any time to the processing of your personal information for direct marketing purposes, including any profiling related to such direct marketing. If you object, we will cease processing for these purposes without undue delay. You also have the right to object to processing based on our legitimate interests or those of a third party, including any profiling based on those grounds. In such cases, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or that the processing is necessary for the establishment, exercise, or defense of legal claims.
• Right to Withdraw Consent: Where our processing of your personal information is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out prior to the withdrawal. Withdrawal of consent may affect our ability to provide certain services to you, and we will inform you of the consequences at the time you exercise this right.
• Right to Complain: You have the right to lodge a complaint with a supervisory authority, such as the Office of the Privacy Commissioner of Canada or the Information and Privacy Commissioner of Ontario, if you believe that our processing of your personal information violates applicable privacy laws. We encourage you to contact us first so that we may address your concerns directly.

To exercise any of these rights, please contact us using the contact information provided in Section 10 of this Policy. We will acknowledge receipt of your request promptly and respond substantively within the timeframes prescribed by applicable law, typically within thirty calendar days. We may extend this period by an additional thirty days where necessary, taking into account the complexity and number of requests, and we will inform you of any extension within the initial thirty-day period. We may need to verify your identity before processing your request to prevent unauthorized access to your information. This may require you to provide additional information or documentation to confirm your identity. We will not discriminate against you for exercising any of your privacy rights.

If we decline to take action on your request, we will inform you of the reasons for our refusal, inform you of your right to complain to the relevant supervisory authority, and provide you with the contact information for that authority. In some jurisdictions, you may also have the right to an effective judicial remedy against a legally binding decision of a supervisory authority.

8. International Data Transfers

JIK Holdings is a Canadian corporation with our primary operations and data processing activities, to the greatest extent commercially practical, occurring within Canada. Our principal servers, IT infrastructure, and data storage facilities are located in Canadian data centers, and our core business systems are hosted within Canadian territory. However, in the course of our operations and as part of delivering technology services to clients located in various international jurisdictions, certain personal information may be transferred to, stored in, or accessed from locations outside Canada, including the United States and potentially other countries where our service providers, cloud infrastructure partners, backup facilities, or client project sites are located.

When we transfer personal information across international borders, we take appropriate safeguards to ensure that the transferred information continues to receive a level of protection that is comparable to the protections afforded under Canadian privacy law. These safeguards may include conducting transfer impact assessments to evaluate the legal framework of the destination country, entering into data processing and transfer agreements that incorporate standard contractual clauses or equivalent mechanisms recognized by Canadian and international data protection authorities, assessing the security measures and privacy practices of the receiving party, and where appropriate, implementing supplementary technical measures such as enhanced encryption or pseudonymization to further protect the information during its time in the foreign jurisdiction.

If you are accessing our Website or engaging our services from outside Canada, including from the European Economic Area (EEA), the United Kingdom, the Asia-Pacific region, the Middle East, Africa, or Latin America, please be aware that your personal information will be transferred to and processed in Canada, and potentially onward to other jurisdictions, as described in this Policy. The data protection laws in these jurisdictions may differ from, and in some cases may not provide the same level of protection as, the laws in your country of residence. By using our Website or services, you acknowledge and consent to the transfer of your information to Canada and to such other jurisdictions as may be necessary for the purposes described in this Policy.

We are aware of and monitor developments in international data transfer law, including the evolving adequacy decisions, certification frameworks, and transfer mechanisms issued by various regulatory bodies. We are committed to updating our transfer practices as legal requirements evolve, and we will implement additional or alternative transfer mechanisms if required by applicable law or regulatory guidance. Clients with specific data residency or data sovereignty requirements should discuss these during the engagement process so that we can evaluate whether appropriate accommodations can be made within the scope of our service delivery model.

Canadian privacy law, particularly PIPEDA, requires that organizations remain accountable for personal information transferred to third parties for processing, including transfers to service providers in other countries. JIK Holdings accepts this accountability and uses contractual and other means to provide a comparable level of protection while the information is being processed by a third party on our behalf.

9. Children's Privacy

Our Website and professional services are designed for and directed to business professionals, corporate clients, and organizations seeking computer systems design and technology consulting services. Our Website is not intended for, designed to attract, or directed toward individuals under the age of eighteen (18). We do not knowingly collect, solicit, maintain, or otherwise process personal information from anyone under the age of 18, and we do not offer services that would typically be relevant to or sought by minors.

If we become aware that a person under the age of 18 has provided us with personal information through our Website or any other channel, whether inadvertently or otherwise, we will take prompt and reasonable steps to delete such information from our active systems and archives to the extent technically feasible, and will not use or disclose the information for any purpose. Such deletion will occur without prior notice to the individual, as we believe proactive removal of childrens information is the responsible course of action.

If you are a parent, legal guardian, or other responsible adult and you believe that your child or a child in your care has submitted personal information to us through our Website, we urge you to contact us immediately and without delay using the contact information provided in Section 10 of this Policy. Upon verification of your identity and relationship to the child, we will work expeditiously to identify and remove the relevant information from our records and confirm the completion of this process to you. We take the protection of children's privacy very seriously and will treat any such report with the highest priority.

We do not condition a child's participation in any activity on the Website on the disclosure of more personal information than is reasonably necessary. Given the nature of our services and target audience, we do not anticipate situations in which we would legitimately need to collect information from minors, and we have designed our data collection practices accordingly. Our Website does not include features such as chat rooms, forums, or social networking functions that might attract underage users.

10. Contact Information

JIK Holdings is committed to transparency and responsiveness in our privacy practices. If you have questions, concerns, complaints, or requests regarding this Privacy Policy, our data handling practices, or your personal information rights, we encourage you to reach out to us. We welcome the opportunity to address your concerns directly and resolve any issues you may have. Please contact us through any of the following channels:

Our designated privacy contact is responsible for overseeing compliance with this Privacy Policy and applicable data protection legislation. When you contact us regarding a privacy matter, please provide sufficient detail to allow us to understand the nature of your inquiry or concern. This may include your full name, the nature of your relationship with JIK Holdings (such as current client, former client, prospective client, website visitor, or job applicant), the specific information or processing activity your inquiry relates to, and any relevant dates or context. The more specific you can be, the more efficiently we can investigate and respond.

We aim to acknowledge all privacy-related communications within two business days of receipt and to provide a substantive response within thirty calendar days. If your concern requires more extensive investigation, we will keep you informed of our progress and provide you with an estimated timeline for resolution. We treat all privacy inquiries with confidentiality and professionalism.

If you are not satisfied with our response to your privacy concern, or if you believe we have not adequately addressed your rights under applicable law, you have the right to lodge a formal complaint with the relevant data protection supervisory authority. For individuals in Canada, the primary federal authority is the Office of the Privacy Commissioner of Canada (OPC), which can be reached through their website at www.priv.gc.ca. Residents of Ontario may also contact the Information and Privacy Commissioner of Ontario (IPC). For individuals in other jurisdictions, you may have the right to complain to your local data protection authority or seek judicial remedy through the courts. We will provide you with relevant contact details for these authorities upon request. We ask that you first give us the opportunity to address your concerns directly before escalating to a regulatory body.

11. Changes to This Privacy Policy

JIK Holdings reserves the right to update, amend, or modify this Privacy Policy at any time and from time to time to reflect changes in our information practices, legal and regulatory requirements, technology platforms, service offerings, or operational circumstances. When we make changes, we will revise the Last Updated date displayed at the top of this page to indicate the date of the most recent revision. All changes will become effective immediately upon posting of the revised Privacy Policy to our Website, unless a different effective date is specified in the updated policy or in an accompanying notice.

We encourage you to review this Privacy Policy periodically, and especially before providing new personal information to us, so that you remain informed about our current information practices and your rights with respect to your personal information. The date of the last revision is always prominently displayed at the top of the policy document for your convenience and reference. Your continued use of our Website or services after the posting of any modifications constitutes your acknowledgment and acceptance of the updated Privacy Policy.

In the event of material changes to this Privacy Policy, meaning changes that significantly affect how we collect, use, share, or protect your personal information, or changes that materially expand the scope of our processing activities, we will provide a more prominent notice to draw your attention to the updates. This may take the form of a banner or notification on our Website homepage, direct email notification to clients and contacts for whom we hold current email addresses (where permitted by law and in accordance with anti-spam legislation), a pop-up notification on your next visit to the Website, or other means reasonably designed to bring the changes to your attention. We will provide this notice at least thirty days before the material changes take effect where required by applicable law, giving you an opportunity to review and understand the changes and to exercise any rights you may have.

We will maintain an archive of previous versions of this Privacy Policy, which are available upon request. If you would like to review the policy as it existed at a specific point in time, please contact us using the information in Section 10. The archived versions allow you to understand how our privacy commitments have evolved over time.

If any provision of this Privacy Policy is held to be invalid, illegal, or unenforceable by a court of competent jurisdiction, such provision shall be modified to the minimum extent necessary to make it enforceable, or severed if modification is not possible, and the remaining provisions shall continue in full force and effect. Your continued engagement with JIK Holdings following any changes to this policy indicates your acceptance of the updated terms.

12. Governing Law

This Privacy Policy and all matters arising out of or relating to it, including any disputes, claims, or controversies regarding the collection, use, disclosure, or retention of personal information by JIK Holdings, shall be governed by and construed in accordance with the laws of the Province of Ontario and the federal laws of Canada applicable therein, without giving effect to any choice-of-law or conflict-of-law principles that would result in the application of the laws of any other jurisdiction. This choice of governing law reflects our principal place of business in Etobicoke, Ontario, and the primary jurisdiction in which we conduct our operations.

Any legal action, suit, or proceeding arising out of or related to this Privacy Policy or the privacy practices of JIK Holdings shall be instituted exclusively in the courts of competent jurisdiction located in the City of Toronto, Province of Ontario, Canada. You and JIK Holdings each irrevocably submit to the personal jurisdiction of such courts and waive any objection to the laying of venue in such courts, including any objection based on forum non conveniens or improper venue. This exclusive jurisdiction provision is intended to provide certainty and predictability for all parties.

This Privacy Policy is drafted in the English language. In the event of any inconsistency between the English language version and any translation into another language, the English language version shall prevail and be controlling for all purposes. Any translation is provided solely for convenience and shall have no legal effect.

We are committed to resolving privacy disputes amicably and efficiently. Before initiating any formal legal proceedings, we encourage you to contact us directly using the information in Section 10 so that we may seek to resolve your concerns through our internal complaint handling process. Many privacy concerns can be resolved through direct communication and good faith negotiation without the need for litigation. If a resolution cannot be reached through these means, both parties retain their full rights to pursue remedies available under applicable law.