Privacy Policy

1. Who We Are and Privacy Accountability

Enksoft is a technology consulting and software development business that helps organizations design, build, improve, and deliver digital products and technology solutions.

Our services may include:

• •Software engineering and development
• •Web and application development
• •Product engineering
• •Technical consulting and software architecture
• •System integration and modernization
• •Performance and reliability improvements
• •Artificial intelligence and AI-enabled product development
• •Technical strategy and advisory services

The specific services provided to a client are defined in the applicable engagement agreement.

Enksoft is responsible for personal information under its control. We designate a Privacy Officer to oversee our privacy practices, respond to questions and complaints, and coordinate access or correction requests. The Privacy Officer can be contacted using the methods in Section 17.

2. Information We Collect

The information we collect depends on how you interact with Enksoft. We seek to collect only information reasonably necessary for the identified purposes.

2.1 Information You Provide Directly

When you contact us, request information, or discuss a potential project, you may provide:

• •Your name
• •Email address
• •Company or organization name
• •Job title or role
• •Telephone number, if you choose to provide one
• •Information about your project, business, requirements, budget, or timeline
• •Messages, correspondence, documents, or attachments
• •Any other information you choose to include in your communication

Contact-form submissions are stored in a database as described in Section 4.

Please do not send sensitive personal information unless it is necessary and we have provided an appropriate method for doing so.

2.2 Information Collected Automatically

When you visit the Website, certain technical information may be generated automatically by your browser, device, hosting provider, security services, or website infrastructure. This may include:

• •Internet Protocol address
• •Browser and device type
• •Operating system
• •Pages visited and referring page
• •Date and time of access
• •General geographic information derived from an IP address
• •Website performance, diagnostic, security, and error logs

When technically available, we may also record and store the IP address associated with a contact-form submission. We use that information to help protect the form and Website against spam, fraud, abuse, and security threats, and to investigate technical or security incidents.

We use automatically collected information to operate, secure, troubleshoot, and improve the Website. We do not use technical logs or IP addresses to identify you unless reasonably necessary for security, fraud prevention, troubleshooting, legal compliance, responding to your inquiry, or another disclosed purpose.

2.3 Cookies and Similar Technologies

The Website may use cookies or similar technologies necessary for operation, security, performance, or basic functionality.

If we introduce analytics, preferences, advertising technologies, or other non-essential cookies, we will update this Policy and provide notice or consent choices where required. You can control cookies through your browser settings, although disabling certain cookies may affect Website functionality.

2.4 Information From Business Communications

If you communicate with Enksoft about a current or potential business relationship, we may retain relevant communications and associated business contact information, such as:

• •Emails and meeting notes
• •Project discussions and requirements
• •Proposals, estimates, and statements of work
• •Technical documentation
• •Contracts and invoices
• •Client and project communications

2.5 Information From Other Sources

We may receive business contact or project information from a colleague, referral partner, client representative, publicly available professional source, or service provider. We will use that information only for purposes that are reasonable in the circumstances and permitted by law.

3. How and Why We Use Information

We may use personal information to:

• •Respond to questions and inquiries
• •Communicate with prospective and existing clients
• •Understand project requirements and assess whether we can assist
• •Prepare estimates, proposals, or statements of work
• •Provide and manage consulting or technology services
• •Operate, maintain, secure, and improve the Website
• •Diagnose technical problems and prevent fraud, abuse, or security threats
• •Manage relationships with clients, suppliers, and service providers
• •Maintain business, tax, accounting, and financial records
• •Comply with legal, regulatory, contractual, and professional obligations
• •Establish, exercise, or defend legal rights and enforce agreements
• •Manage disputes and protect Enksoft, our clients, Website visitors, or others
• •Improve our services and internal processes using information that is aggregated, anonymized, or otherwise used lawfully

We identify the purposes for collection at or before the time information is collected. We will not use or disclose personal information for a materially different purpose without additional notice, consent, or other lawful authority where required.

4. Contact Forms and Business Communications

Contact-form submissions are stored in a database. Stored records include your name, email address, and message, and may include the originating IP address. We use these records to review and respond to inquiries, maintain reasonable business records, prevent spam or abuse, and protect the Website.

Access to stored inquiry records is limited to Enksoft personnel and authorized service providers who reasonably need access for the purposes described in this Policy.

Submitting an inquiry does not:

• •Create a client or consulting relationship
• •Guarantee that Enksoft will accept your project
• •Create an obligation for Enksoft to provide services
• •Establish confidentiality beyond applicable law or an existing written agreement

If your inquiry contains confidential, proprietary, regulated, or commercially sensitive information, contact us before providing detailed materials. Where appropriate, Enksoft and a prospective client may enter into a non-disclosure agreement before exchanging sensitive information.

We may send service-related or business communications that are reasonably connected to your inquiry or relationship with us. If we send commercial electronic messages that require consent, we will seek consent and provide an unsubscribe method as required by applicable law. Unsubscribing from promotional messages will not prevent necessary transactional, security, legal, or project communications.

5. Consent and Other Lawful Authority

Where required, we collect, use, and disclose personal information with your knowledge and meaningful consent. Consent may be express or implied depending on the sensitivity of the information, your reasonable expectations, and the circumstances.

Applicable law may also permit or require us to handle information without consent, including where reasonably necessary to:

• •Respond to a request you have made
• •Take steps toward or perform a business agreement
• •Collect or recover a debt
• •Investigate a breach of an agreement or law
• •Prevent, detect, or address fraud, abuse, or security incidents
• •Respond to an emergency involving life, health, or safety
• •Comply with a court order, lawful demand, or legal obligation
• •Establish, exercise, or defend legal rights

You may withdraw consent by contacting us, subject to legal or contractual restrictions and reasonable notice. We will explain any reasonably foreseeable consequences of withdrawal where appropriate. Withdrawal does not affect handling that already occurred lawfully and may limit our ability to respond to an inquiry or provide a requested service.

6. How We Disclose Information

Enksoft does not sell personal information. We disclose personal information only as reasonably necessary for the purposes described in this Policy or as otherwise permitted or required by law.

6.1 Service Providers

We may use providers for:

• •Website hosting, domain, and DNS services
• •Email delivery and contact form processing
• •Database hosting, cloud infrastructure, and file storage
• •Security, monitoring, and diagnostics
• •Analytics, if enabled and disclosed
• •Accounting and professional advisory services
• •Project management, communication, and collaboration tools

We seek to limit disclosure to information reasonably necessary for the service. Where appropriate, we use contractual, organizational, or technical measures to require providers to protect information and use it only for authorized purposes. Enksoft remains accountable for personal information transferred to a provider for processing to the extent required by applicable law.

6.2 Professional Advisers

We may disclose information to lawyers, accountants, insurers, auditors, consultants, or other professional advisers where reasonably necessary for business, legal, risk-management, or compliance purposes and subject to applicable duties of confidentiality.

6.3 Business Transactions

Information may be disclosed in connection with a proposed or completed merger, acquisition, financing, reorganization, insolvency, sale of assets, or similar transaction. We will seek to limit the disclosure to what is reasonably necessary, use appropriate confidentiality protections, and require the recipient to handle personal information in accordance with applicable law.

6.4 Legal, Safety, and Enforcement Purposes

We may disclose information where reasonably necessary to:

• •Comply with applicable law or a lawful request, court order, subpoena, or legal process
• •Protect or enforce our rights, agreements, property, or security
• •Investigate fraud, unlawful activity, or security concerns
• •Protect the life, health, safety, or security of Enksoft, our clients, Website visitors, or others
• •Cooperate with regulators, law enforcement, or other authorized bodies

We may challenge or narrow a request where we reasonably believe it is unlawful, invalid, or overly broad.

7. Client and Project Information

During a consulting engagement, Enksoft may receive access to information belonging to a client, its employees, customers, users, systems, or business partners.

Project-related information may be governed by:

• •A consulting agreement, master services agreement, or statement of work
• •A non-disclosure or data processing agreement
• •Client security requirements, policies, or written instructions
• •Other project-specific terms

Where Enksoft processes personal information on a client's behalf, the client may be primarily responsible for deciding why and how the information is processed. Enksoft will handle that information in accordance with the applicable agreement, lawful client instructions, and applicable law.

Enksoft does not claim ownership of a client's confidential information merely because it is provided to us for consulting purposes.

8. Artificial Intelligence and Third-Party AI Services

Enksoft may provide services involving artificial intelligence, machine learning, automation, large language models, or AI-enabled software.

We do not intentionally submit confidential client information, personal information, proprietary source code, credentials, or other sensitive client material to a public or third-party AI system unless the use is authorized by the applicable agreement, client instructions, or agreed project practices.

When a third-party AI service is authorized, we seek to:

• •Limit inputs to information reasonably necessary for the task
• •Avoid including credentials or unnecessary personal information
• •Use appropriate account, privacy, security, and data-control settings where available
• •Review relevant provider terms and project requirements
• •Apply human review appropriate to the use case and associated risk

Third-party AI providers may process information in other jurisdictions and under their own terms. The use of AI in one engagement does not mean AI systems are used to process information in every engagement.

9. Processing and Storage Outside Your Jurisdiction

Some Enksoft service providers may process or store information outside British Columbia or Canada. Information handled in another jurisdiction may be subject to that jurisdiction's laws and lawful access requirements.

We take reasonable steps appropriate to the sensitivity of the information to select reputable providers, understand relevant processing locations, limit access, and use contractual or technical safeguards where appropriate. Contact our Privacy Officer if you have questions about our use of service providers outside Canada.

10. Accuracy, Retention, and Secure Disposal

We seek to keep personal information as accurate, complete, and current as reasonably necessary for the purposes for which it is used. You may request correction as described in Section 12.

We retain personal information only as long as reasonably necessary for the identified purposes or for legitimate contractual, accounting, security, dispute-resolution, or legal needs. Retention periods vary based on the nature of the information and may include:

• •Contact-form submissions, including names, email addresses, messages, and IP addresses where collected, retained for reasonable follow-up, spam prevention, security, and business record-keeping
• •Client correspondence retained during and following an engagement
• •Contracts and financial records retained for applicable legal or accounting periods
• •Technical logs retained for limited security and troubleshooting periods
• •Records retained to establish, exercise, or defend legal rights

We maintain retention and disposal practices appropriate to the information we hold. When information is no longer reasonably required, we take reasonable steps to securely delete, destroy, or anonymize it, subject to backups, legal holds, and other lawful retention requirements.

If personal information is used to make a decision directly affecting you, we will retain it for any minimum period required by applicable law so you have a reasonable opportunity to request access.

11. Information Security and Incidents

We use reasonable administrative, technical, physical, and organizational safeguards appropriate to the sensitivity, amount, format, and location of the information we handle. Depending on the circumstances, safeguards may include:

• •Access controls and authentication
• •Encryption in transit or at rest where supported and appropriate
• •Secure hosting and software updates
• •Security monitoring, logging, and backups
• •Restricted access to client and personal information
• •Confidentiality obligations and secure development practices
• •Service-provider review and incident-response procedures

No website, email service, cloud platform, transmission method, or storage system can be guaranteed to be completely secure.

If we become aware of a privacy or security incident, we will take reasonable steps to contain it, assess the risk, preserve relevant records, and meet applicable notification and reporting obligations. Where required by law, we will notify affected individuals and the appropriate regulator.

12. Your Privacy Rights and Complaints

Depending on applicable law, you may have the right to:

• •Ask whether we hold personal information about you
• •Request access to that information
• •Ask how the information has been used and to whom it has been disclosed
• •Request information about the source of the information
• •Challenge the accuracy or completeness of the information and request correction
• •Withdraw consent where applicable
• •Ask questions or complain about our privacy practices
• •Request deletion where applicable law provides that right

To protect privacy, we may ask you to verify your identity and authority before responding. Access may be limited where permitted or required by law, including where disclosure would reveal another person's information, confidential commercial information, or legally privileged material.

We will respond within the time required by applicable law. If a permitted fee may apply, we will provide an estimate before processing the request. If we refuse all or part of a request, we will explain the reason and available recourse where required.

Please contact our Privacy Officer first so we can try to resolve your concern. You may also have the right to complain to the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada, depending on which law applies.

13. Children's Privacy

The Website and our consulting services are intended for businesses, professionals, organizations, and adults seeking technology services. They are not directed to children.

We do not knowingly seek to collect personal information from children through the Website. If you believe a child has provided personal information inappropriately, contact us so we can review the matter and take appropriate action.

14. Third-Party Websites and Services

The Website may contain links to websites, platforms, or services operated by third parties. Enksoft does not control their privacy, security, availability, accuracy, or practices.

Your use of a third-party website or service is governed by that third party's own terms and privacy policy. A link from the Website does not necessarily constitute an endorsement.

15. Do Not Send Sensitive Credentials

Do not submit through the public Website or general contact form:

• •Passwords, API secrets, private keys, or authentication tokens
• •Production, cloud, or database credentials
• •Payment card information
• •Government identification documents
• •Protected health information
• •Sensitive production data
• •Other information that requires a dedicated secure process

If access to systems, data, or credentials becomes necessary during a consulting engagement, Enksoft and the client should establish an appropriate secure method and access controls.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our Website, services, providers, business practices, or legal and security requirements.

When we make changes, we will revise the "Last Updated" date. If a change is material, we will provide additional notice or seek renewed consent where required by law. Unless otherwise stated, an updated Policy applies from the date it is posted and does not reduce rights relating to information previously collected where prohibited by law.

17. Contact Us

Questions, requests, or complaints about this Privacy Policy or Enksoft's handling of personal information should be directed to:

Privacy Officer, Enksoft

Website: https://enksofttech.com/

You may use the contact form or business email address published on the Website and address your message to the Privacy Officer.

Please provide enough information for us to understand and respond to your request, but do not send credentials or confidential information through an unsecured channel.