Privacy Policy

Last Updated: January 2026
This Privacy Policy describes how Grythar Engineering Corp. ("we," "us," "our," or "Company") collects, uses, discloses, and otherwise processes personal information in connection with our website and services.

1. Introduction

Grythar Engineering Corp. (VAT: 710684925 RT 0001) is committed to protecting your privacy and ensuring you have a positive experience on our website. This Privacy Policy applies to all personal information we collect through our website, email communications, and business interactions.

Our registered office is located at 1055 Dunsmuir St., Vancouver, BC V7X 1L4, Canada. We are committed to compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and GDPR requirements where applicable.

2. Information We Collect

2.1 Information You Provide

We collect personal information that you voluntarily provide to us, including:

• Contact Information: Name, email address, phone number, company name, and physical address
• Communication Data: Messages, inquiries, support requests, and feedback you send to us
• Professional Information: Job title, industry, experience level, and business details
• Transaction Data: Invoice details, payment information, and service agreements
• Account Information: Username, password, and preferences for our services

2.2 Information Collected Automatically

We automatically collect certain information when you visit our website:

• Usage Data: Pages visited, time spent on pages, links clicked, and navigation patterns
• Device Information: IP address, browser type, device type, and operating system
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to enhance your experience
• Location Data: Approximate geographic location based on IP address (not precise)

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• To provide and improve our engineering services and support
• To respond to your inquiries and communicate with you
• To process transactions and send related information
• To send marketing communications (with your consent where required)
• To conduct analytics and understand how our website is used
• To prevent fraud and enhance security
• To comply with legal obligations and enforce our terms
• To improve user experience and develop new features
• To personalize your interactions with our company

4. Legal Basis for Processing

Under GDPR, we process personal information on the following legal bases:

• Consent: Where you have explicitly consented to processing (e.g., marketing emails)
• Contract: Where processing is necessary to perform a contract with you
• Legal Obligation: Where we are required by law to process your data
• Legitimate Interests: Where we have legitimate business interests that do not override your rights
• Vital Interests: Where processing is necessary to protect vital interests

5. Sharing Your Information

We do not sell or rent your personal information. We may share your information with:

• Service Providers: Third parties who assist us with hosting, payment processing, analytics, and customer support
• Business Partners: Partners with whom we collaborate to deliver services (only with your consent or as necessary)
• Legal Requirements: When required by law, court order, or government request
• Safety and Compliance: To protect our rights, privacy, safety, or property, and that of our users and the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets (you will be notified)

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law:

• Contact and communication data: Retained for the duration of our relationship plus 3 years
• Transaction and invoice data: Retained for 7 years (as required by Canadian tax law)
• Website analytics data: Retained for 24 months or until anonymized
• Marketing consent records: Retained until withdrawal of consent or 2 years of inactivity
• Cookie data: Retained according to cookie expiration settings (typically 1-2 years)

7. Your Rights and Choices

Depending on your location, you have the following rights regarding your personal information:

7.1 GDPR Rights (EU/EEA Residents)

• Right of Access: You can request a copy of your personal data
• Right to Rectification: You can correct inaccurate or incomplete data
• Right to Erasure: You can request deletion of your data (subject to legal obligations)
• Right to Restrict Processing: You can limit how we use your data
• Right to Data Portability: You can receive your data in a portable format
• Right to Object: You can object to certain types of processing
• Rights Related to Automated Decision-Making: You have rights regarding automated decisions and profiling

7.2 Canadian Privacy Rights

Under PIPEDA and other Canadian privacy laws, you have the right to:

• Request access to your personal information
• Request correction of inaccurate information
• Withdraw consent at any time
• Request an explanation of how your data is used
• File a complaint with privacy authorities

7.3 Exercising Your Rights

To exercise any of these rights, please contact us at tech@grythar.shop with "Privacy Request" in the subject line. We will respond within 30 days (or as required by law). We may require verification of your identity before processing your request.

8. Marketing Communications

We may send you marketing communications about our services, updates, and industry news. You have the right to:

• Opt-Out: Every marketing email includes an unsubscribe link. You can click it to stop receiving marketing communications at any time
• Manage Preferences: Contact us to customize which types of communications you receive
• Do Not Track: We honor Do Not Track signals where applicable

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and deliver targeted content:

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand how you use our site
• Marketing Cookies: Used to deliver relevant advertisements
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings and opt out of certain tracking technologies. However, disabling cookies may affect website functionality.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• SSL/TLS encryption for data in transit
• Secure password hashing and salting
• Access controls and role-based permissions
• Regular security audits and updates
• Employee training on data protection
• Incident response procedures

While we implement strong security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your personal information.

11. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence, including the United States, which may have different data protection laws. When we transfer data internationally, we implement appropriate safeguards such as:

• Standard contractual clauses approved by regulators
• Privacy Shield compliance (where applicable)
• Binding corporate rules
• Your explicit consent

12. Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify affected individuals and relevant authorities within 72 hours (or as required by law). Notifications will include information about the breach, the data affected, and steps you can take to protect yourself.

13. Children's Privacy

Our website and services are not directed to individuals under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will promptly delete it and notify the parent or guardian.

14. Third-Party Links

Our website may contain links to third-party websites and services. This Privacy Policy applies only to our website. We are not responsible for the privacy practices of third-party sites. Please review their privacy policies before providing personal information.

15. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect and how it is used
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale or sharing of your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

16. Contact Us

For privacy-related questions, requests, or concerns, please contact our Privacy Officer:

We will respond to all privacy inquiries within 30 business days. If you are not satisfied with our response, you have the right to file a complaint with the relevant data protection authority in your jurisdiction.

17. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website with a new "Last Updated" date. Your continued use of our website following the posting of changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

18. Complaint Resolution

If you have a complaint about our privacy practices:

• Step 1: Contact us at tech@grythar.shop with details of your complaint
• Step 2: We will investigate and respond within 30 days
• Step 3: If unsatisfied, you may file a complaint with your regional privacy authority