Privacy Policy

Effective Date: July 21, 2026 • Last Updated: July 21, 2026

This Privacy Policy describes how Gek Consulting Inc., operating as GEK Consult, together with its affiliates and subsidiaries (collectively referred to as GEK Consult, we, us, or our throughout this document), collects, uses, stores, shares, and protects personal data when you visit our website at www.gekconsult.buzz or engage with our computer systems design and consulting services.

We are committed to safeguarding your privacy and handling your personal information in accordance with applicable data protection laws, including the Personal Information Protection and Electronic Documents Act of Canada and the General Data Protection Regulation where applicable. This policy explains your rights and our obligations regarding the data you entrust to us.

1. Information We Collect

1.1 Information You Provide Directly

When you interact with our website or services, you may voluntarily provide us with certain categories of personal data. This includes:

• Contact and identification details — your full name, job title, company name, business email address, telephone number, and physical mailing address when you fill out a contact form, request a consultation, or subscribe to communications.
• Project and engagement data — information about your organization, technical requirements, system specifications, infrastructure details, and any documentation you share with us during the course of a consulting engagement or project inquiry.
• Communication records — the content and metadata of emails, phone calls, meeting notes, and support tickets exchanged between you and our team.
• Payment and billing information — invoicing details, billing addresses, and transaction records related to services we provide to your organization.

1.2 Information Collected Automatically

When you visit www.gekconsult.buzz, our systems automatically collect certain technical data through standard internet protocols and analytics tools. This information includes:

• Device and browser data — your IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
• Usage data — the pages you visit on our site, the date and time of each visit, the duration of your session, the referring URL that brought you to our site, and interaction events such as clicks, scrolls, and form submissions.
• Cookies and similar technologies — small text files placed on your device that help us recognize returning visitors, remember preferences, and analyze site performance. For detailed information, please see our Cookie Policy section below.

1.3 Information From Third Parties

In some circumstances we may receive personal data about you from third-party sources, including:

• Business partners and referral networks who introduce us to potential clients.
• Publicly available business directories and professional networking platforms.
• Technology vendors and service providers who support our operations, such as cloud hosting providers, analytics services, and customer relationship management platforms.

2. How We Use Your Information

We process personal data for specific, legitimate business purposes. We do not use your data in ways that are incompatible with the purposes described below without providing you with additional notice and, where required, obtaining your consent.

2.1 Service Delivery and Client Engagement

We use your personal data to deliver the computer systems design, IT consulting, and related professional services you have requested. This includes:

• Assessing your technology needs and preparing proposals, system architecture blueprints, and project plans.
• Communicating with you throughout the engagement lifecycle, from initial consultation through project delivery and post-implementation support.
• Processing invoices, managing billing relationships, and maintaining financial records in accordance with applicable accounting standards.
• Providing technical support and responding to service inquiries.

2.2 Business Operations and Improvement

We process usage data and feedback to:

• Analyze website traffic patterns and user behavior to improve the design, content, and functionality of www.gekconsult.buzz.
• Monitor the performance and security of our digital infrastructure.
• Develop new service offerings, refine existing methodologies, and conduct internal research and analysis.
• Train our team members and maintain quality assurance standards across our consulting practice.

2.3 Marketing and Communications

With your consent where required by law, we may use your contact information to:

• Send you newsletters, industry insights, case studies, and updates about our services that we believe are relevant to your interests.
• Invite you to events, webinars, and conferences hosted or sponsored by GEK Consult.
• Conduct satisfaction surveys and gather feedback about your experience with our services.

You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting us directly at support@gekconsult.buzz. Opting out of marketing will not affect service-related communications that are necessary for ongoing engagements.

2.4 Legal and Compliance

We may process personal data as necessary to:

• Comply with applicable laws, regulations, court orders, and government requests.
• Enforce our Terms of Service and other contractual agreements.
• Protect the rights, property, and safety of Gek Consulting Inc., our clients, our employees, and the public.
• Detect, prevent, and address fraud, security breaches, and other harmful or illegal activities.

3. Legal Basis for Processing

Depending on your jurisdiction and the nature of our interaction, we rely on one or more of the following legal bases to process your personal data:

• Contractual necessity — processing is required to perform a contract with you or to take steps at your request before entering into a contract.
• Legitimate interests — processing is necessary for our legitimate business interests, provided those interests are not overridden by your data protection rights. Our legitimate interests include operating and improving our business, marketing our services, and ensuring the security of our systems.
• Consent — where you have given clear, affirmative consent for a specific processing purpose, such as receiving marketing communications or the use of non-essential cookies.
• Legal obligation — processing is necessary to comply with a legal or regulatory obligation to which we are subject.

4. Data Sharing and Disclosure

4.1 Service Providers and Partners

We engage carefully vetted third-party service providers to perform functions on our behalf. These providers are contractually bound to process data only in accordance with our instructions and to implement appropriate technical and organizational security measures. Categories of service providers include:

• Cloud hosting and infrastructure providers that power our website and internal systems.
• Email delivery and communication platform providers.
• Customer relationship management and project management software vendors.
• Analytics and performance monitoring services.
• Payment processing and accounting service providers.

4.2 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, personal data held by Gek Consulting Inc. may be transferred to the successor entity as part of the transaction. We will notify you of any such change in ownership or control of your personal data.

4.3 Legal Disclosure

We may disclose personal data when we believe in good faith that disclosure is necessary to:

• Comply with a valid legal process, including subpoenas, court orders, or search warrants.
• Respond to lawful requests by public authorities, including national security or law enforcement requirements.
• Protect against liability, investigate potential violations of our policies, or defend against legal claims.

4.4 No Sale of Personal Data

Gek Consulting Inc. does not sell, rent, or trade personal data to third parties for monetary consideration. We do not share personal data with third parties for their own independent marketing purposes without your explicit consent.

5. International Data Transfers

Gek Consulting Inc. is headquartered in Toronto, Canada. Personal data we collect may be stored and processed in Canada, the United States, or other countries where our service providers maintain facilities. When we transfer personal data across international borders, we implement appropriate safeguards in compliance with applicable data protection laws, including:

• Transferring data to countries that have been recognized as providing an adequate level of data protection by relevant regulatory authorities.
• Using standard contractual clauses approved by competent data protection authorities.
• Implementing supplementary technical and organizational measures to ensure an equivalent level of protection.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our retention periods are determined based on the following criteria:

• Engagement records — retained for the duration of the client relationship plus a period of seven years following the conclusion of the engagement to comply with tax, accounting, and professional liability requirements.
• Marketing data — retained until you withdraw consent or opt out, after which your data is removed from active marketing lists within 30 days.
• Website usage data — retained in anonymized or aggregated form for analytics purposes for up to 26 months from the date of collection.
• Cookie data — retention periods vary by cookie type and are detailed in our Cookie Policy section.

When personal data is no longer required, we securely delete or anonymize it using industry-standard methods.

7. Data Security

We implement and maintain administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of personal data under our control. These measures include:

• Encryption of data in transit using Transport Layer Security protocols and encryption of data at rest using industry-standard algorithms.
• Role-based access controls and multi-factor authentication for all systems that process personal data.
• Regular vulnerability assessments, penetration testing, and security audits conducted by qualified independent professionals.
• Comprehensive incident response procedures and business continuity plans.
• Ongoing security awareness training for all employees and contractors who handle personal data.

While we strive to protect personal data, no method of electronic storage or transmission is completely secure. We cannot guarantee absolute security, but we continuously monitor and improve our security posture.

8. Your Data Protection Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

8.1 Access and Portability

You have the right to request confirmation of whether we process your personal data, access to a copy of that data, and information about how we process it. Where technically feasible, you may also request that your data be provided in a structured, commonly used, and machine-readable format for transmission to another controller.

8.2 Rectification

You have the right to request correction of inaccurate or incomplete personal data we hold about you. We will respond to rectification requests promptly and, where appropriate, notify any third parties to whom the data has been disclosed of the correction.

8.3 Erasure

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when the data has been processed unlawfully. We will evaluate each erasure request against our legal obligations and legitimate interests that may require continued retention.

8.4 Restriction of Processing

You may request that we restrict the processing of your personal data in certain situations, including when you contest the accuracy of the data, when the processing is unlawful but you oppose erasure, or when we no longer need the data but you require it for legal claims.

8.5 Objection to Processing

You have the right to object to processing of your personal data based on our legitimate interests, including profiling. You also have an absolute right to object to the processing of your personal data for direct marketing purposes at any time.

8.6 Withdrawal of Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

8.7 Exercising Your Rights

To exercise any of these rights, please contact us at support@gekconsult.buzz with the subject line Data Subject Request. We will respond to verifiable requests within 30 calendar days. We may need to verify your identity before processing your request and may ask for additional information to confirm your identity. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.

9. Cookie Policy

9.1 What Are Cookies

Cookies are small text files that websites place on your device when you visit them. They are widely used to make websites work more efficiently, to remember your preferences, and to provide information to the website operators. Cookies may be session-based (deleted when you close your browser) or persistent (remaining on your device for a set period or until manually deleted).

9.2 Types of Cookies We Use

• Strictly Necessary Cookies — these cookies are essential for the operation of www.gekconsult.buzz. They enable core functionality such as page navigation, secure access to areas of the site, and load balancing. The website cannot function properly without these cookies, and they do not require your consent under applicable law.
• Performance and Analytics Cookies — these cookies collect information about how visitors use our website, such as which pages are visited most often and whether users encounter error messages. The data collected is aggregated and anonymized. We use this information to improve how our website works and to measure the effectiveness of our content.
• Functional Cookies — these cookies allow the website to remember choices you make, such as your language preference or the region you are in, and provide enhanced, more personalized features.

9.3 Managing Cookies

Most web browsers allow you to control cookies through their settings preferences. You can typically configure your browser to block all cookies, accept only first-party cookies, or delete cookies when you close your browser. Please note that disabling strictly necessary cookies may affect the functionality of our website.

For more information about managing cookies, visit the help pages of your browser:

• Google Chrome: Settings → Privacy and Security → Cookies and Other Site Data
• Mozilla Firefox: Preferences → Privacy and Security → Cookies and Site Data
• Apple Safari: Preferences → Privacy → Cookies and Website Data
• Microsoft Edge: Settings → Cookies and Site Permissions → Manage and Delete Cookies and Site Data

10. Children's Privacy

Our website and services are not directed to individuals under the age of 16. We do not knowingly collect, use, or disclose personal data from children under 16. If we become aware that we have inadvertently collected personal data from a child under 16 without verifiable parental consent, we will take prompt steps to delete that information from our systems. If you believe that a child under 16 has provided us with personal data, please contact us immediately at support@gekconsult.buzz.

11. Third-Party Links

Our website may contain links to external websites, plug-ins, and applications operated by third parties. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit when you leave www.gekconsult.buzz.

12. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will post the revised policy on this page with an updated effective date and, where appropriate, provide notice through our website or by email to clients with whom we have an active relationship.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of our website and services after any changes to this policy constitutes your acknowledgment of the updated terms.

13. About GEK Consult

The website www.gekconsult.buzz is developed and maintained by GEK Consult, the operating name of Gek Consulting Inc., a Canadian corporation specializing in computer systems design and related professional services within the Professional, Scientific, and Technical Services sector.

14. How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please reach out to us through any of the following channels:

• Email: support@gekconsult.buzz — this is the fastest way to reach our Data Protection team.
• Mail: Gek Consulting Inc., Attention: Data Protection Officer, 215 Waverley Rd, Toronto — M4L 3T4, Canada.
• Phone: +1 (319) 666-7909 — available during regular business hours, Eastern Time.

We are committed to resolving any concerns you may have about your privacy. If you believe we have not adequately addressed your complaint, you may contact the Office of the Privacy Commissioner of Canada or your local data protection authority.