Privacy Policy
Effective Date: July 27, 2026
Last Updated: July 27, 2026
Commitment to Privacy by Design: KI Design LLC ("KI Design", "we", "us") operates with zero-third-party tracking by default, cookieless privacy-preserving analytics, and full compliance across North American and European regulatory frameworks including GDPR, UK GDPR, ePrivacy, CASL, CAN-SPAM, CCPA/CPRA, PIPEDA, and Quebec Law 25.
1. Information We Collect & Legal Basis
We strictly minimize data collection. Data is gathered only for specified, explicit, and legitimate purposes.
| Data Category | Purpose | Legal Basis (GDPR/Law 25) | Retention Period |
|---|---|---|---|
| Contact Details (Email, Name, Organization) | Responding to inquiries, enterprise proposals | Consent (Art. 6(1)(a)), Contractual Necessity (Art. 6(1)(b)) | 24 months or until request for erasure |
| Consent Preferences & Audit Logs | Regulatory compliance demonstration | Legal Obligation (Art. 6(1)(c)) | 180 days (stored locally in client storage) |
| Cookieless Aggregated Telemetry | Technical optimization, fraud detection | Legitimate Interest (Art. 6(1)(f)) | Instantly anonymized (no personal identifiers stored) |
2. Third-Party Subprocessors
We limit external processing. Below are our authorized subprocessors:
- Plausible Analytics: Privacy-friendly, cookieless web telemetry hosted on EU infrastructure. No personal identifiers or advertising profiles collected.
- Infrastructure Hosts: Encrypted web hosting servers operating under strict ISO 27001 and SOC 2 Type II controls.
3. International Data Transfers
When data is transferred across borders (e.g., between Canada, the US, and the EU), we ensure adequate protection through Standard Contractual Clauses (SCCs), Adequacy Decisions, and encrypted data processing agreements.
4. Commercial Electronic Messages (CASL & CAN-SPAM)
Under Canada's Anti-Spam Legislation (CASL) and US CAN-SPAM:
- We send commercial communications only with explicit opt-in consent or valid implied consent.
- Every email includes a single-click unsubscribe link and our physical postal address: KI Design LLC, 100 Innovation Way, Suite 400, Ottawa, ON K1P 5GW, Canada.
5. Your Data Protection Rights
Depending on your jurisdiction (EU, UK, Canada, California, Quebec), you hold the following rights:
- Right to Access & Portability: Obtain a structured JSON copy of data held about you.
- Right to Erasure (To Be Forgotten): Request complete deletion of personal details.
- Right to Rectification & Restriction: Correct inaccuracies or restrict processing.
- Right to Withdraw Consent: Revoke consent at any time without penalty.
To exercise any of these rights, visit our Data Subject Access Request (DSAR) Portal or contact our Data Protection Officer at privacy@kidesign.io.
6. Contact Details
KI Design LLC Privacy Office
100 Innovation Way, Suite 400
Ottawa, ON K1P 5GW, Canada
Email: privacy@kidesign.io