1. Overview

Nautilus Precision Inc. (“Nautilus Precision,” “we,” “our,” or “us”) respects and safeguards the privacy of all individuals whose personal information we collect or process through our website www.nautilusprecision.com and our related digital services (collectively, the “Site”).

This Privacy Policy describes:

• The types of personal information we collect;

• How we collect, use, store, and share that information;

• The lawful bases and purposes for processing;

• Your rights under Canadian, U.S., and international law; and

• How we protect and retain your data.

This Policy applies to visitors, customers, suppliers, and other stakeholders located in Canada, the United States, and other jurisdictions where Nautilus Precision conducts business.

By using our Site or communicating with us, you consent to the terms of this Privacy Policy.

2. Legal Compliance Framework

Nautilus Precision complies with:

• Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws;

• U.S. state privacy laws, including California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA);

• General Data Protection Regulation (EU) 2016/679 (GDPR) for European visitors;

• CAN-SPAM Act and Canada’s Anti-Spam Legislation (CASL) regarding marketing communications; and

• Applicable data breach notification laws.

3. Information We Collect

We may collect personal information directly, automatically, or through third parties as follows:

a. Information You Provide

• Name, title, and business affiliation

• Email address, telephone number, and mailing address

• Account login credentials (if applicable)

• Service requests, purchase history, or support tickets

• Payment or billing information (processed via secure third-party providers)

• Any communications, feedback, or survey responses

b. Information Collected Automatically

When you use our Site, cookies and analytics tools automatically collect:

• IP address, browser type, operating system, and device identifiers

• Date, time, and duration of visit

• Pages viewed, referral URLs, and navigation patterns

• Location data (approximate, derived from IP)

c. Information from Third Parties

We may receive limited personal data from partners, vendors, marketing platforms, and analytics providers consistent with applicable law.

We do not knowingly collect information from individuals under the age of 16.

4. Purposes of Collection

We collect and use personal information to:

1. Provide, manage, and improve our services and products;

2. Respond to inquiries, schedule service calls, and provide technical support;

3. Process payments and issue invoices;

4. Manage client accounts, warranties, and contracts;

5. Personalize and improve website experience and functionality;

6. Conduct marketing, remarketing, and analytics (subject to consent laws);

7. Enforce contractual obligations, protect intellectual property, and prevent fraud;

8. Meet legal, tax, and regulatory requirements.

5. Lawful Bases for Processing

Under applicable data protection laws, Nautilus Precision relies on the following lawful bases for processing:

• Consent (e.g., newsletter sign-ups, analytics cookies);

• Contractual necessity (e.g., fulfilling a service order or agreement);

• Legitimate interests (e.g., business analytics, fraud prevention, system improvement);

• Legal obligation (e.g., tax, regulatory, or compliance record-keeping).

6. Disclosure of Personal Information

We may share personal information only when necessary for legitimate business purposes, and subject to strict contractual obligations:

a. Service Providers and Processors
Third-party companies that provide:

• Website hosting, cloud storage, or CRM systems

• Analytics, advertising, and marketing tools

• Payment gateways (e.g., Stripe, PayPal, or similar)

• Technical and field service management
  These entities act as data processors and must protect information consistent with this Policy.

b. Legal and Regulatory Authorities
We may disclose personal information where required by law, regulation, subpoena, or lawful request by public authorities.

c. Business Transactions
In the event of a merger, acquisition, restructuring, or asset sale, personal information may be transferred subject to confidentiality and notice requirements.

We do not sell personal data for monetary consideration.

7. International Data Transfers

Nautilus Precision operates in Canada and the United States, and your information may be processed in either country.
All cross-border transfers are subject to:

• Contractual safeguards ensuring compliance with PIPEDA, CCPA/CPRA, and GDPR;

• Encryption in transit and at rest; and

• Storage on secure servers in data centers with restricted access.

8. Data Retention

We retain personal information only for as long as necessary to:

• Fulfill the purposes outlined in this Policy;

• Comply with legal and regulatory requirements;

• Maintain accurate records for service, warranty, or tax purposes.

After the retention period expires, data is securely deleted or anonymized.

9. Data Security

We implement technical and organizational measures to safeguard personal information, including:

• Encryption (TLS/SSL) for data in transit;

• Secure firewalls and intrusion detection systems;

• Role-based access controls and authentication protocols;

• Routine security audits and employee confidentiality training.

Despite our safeguards, no system is entirely immune to risks. We will promptly notify affected individuals and regulators of any material data breach as required by law.

10. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data and request a copy;

• Correct or update inaccurate information;

• Delete data (“Right to be Forgotten,” subject to legal exceptions);

• Restrict or object to certain processing activities;

• Withdraw consent to marketing or analytics tracking;

• Data portability, where applicable;

• Opt out of the sale or sharing of personal data (for California residents).

Requests can be submitted to Info@nautilusprecision.com. We may verify identity before processing.

11. Marketing Communications

We comply with CASL, CAN-SPAM, and other anti-spam laws.
You may unsubscribe from marketing emails at any time via the “unsubscribe” link or by contacting us directly.

12. Automated Decision-Making

Nautilus Precision does not engage in fully automated decision-making or profiling that produces legal or significant effects on individuals.

13. Third-Party Links

Our Site may contain links to external websites or tools. We are not responsible for the privacy or security practices of those entities. Please review their privacy policies before providing personal information.

14. Updates to This Policy

We may modify this Privacy Policy periodically to reflect regulatory updates, new technologies, or operational changes.
Revisions will be posted here with a new “Effective Date.” Continued use of our Site after changes constitutes acceptance.

15. Contact Information

For privacy inquiries, data access requests, or complaints, contact:

Privacy Officer
Nautilus Precision Inc.
Ontario, Canada
📧 Info@nautilusprecision.com
🌐 www.nautilusprecision.com