Privacy Policy

TK Industries ("TK Industries", "we", "us", or "our") is a privately owned cabinet box and TFL slab door manufacturer headquartered in Calgary, Alberta, Canada. We operate the website tkcabinets.com (the "Platform"), through which trade customers — including contractors, renovation companies, and remodelling businesses — place orders for cabinet products manufactured by TK Industries.

This Privacy Policy describes how we collect, use, disclose, and protect personal information in connection with the Platform and our business operations.

TK Industries is subject to:

• Alberta's Personal Information Protection Act (PIPA, SA 2003, c P-6.5) — Alberta's private-sector privacy law, which governs the collection, use, and disclosure of personal information by organizations operating in Alberta.
• Canada's Personal Information Protection and Electronic Documents Act (PIPEDA, SC 2000, c 5) — applicable to the extent our activities are not solely regulated by PIPA.

Alberta's PIPA has been recognized by the federal government as substantially similar to PIPEDA. In cases of ambiguity, we apply the more protective standard.

We collect only the personal information reasonably necessary to carry out the purposes described in Section 4. This may include:

We do not collect sensitive personal information (as defined under PIPA s.1) such as health information, financial account credentials, or government identification numbers.

We collect and use personal information for the following purposes:

• Account creation and authentication — to establish and maintain your contractor account.
• Order processing and fulfilment — to receive, process, manufacture, and deliver your cabinet orders.
• Payment processing — to collect payment for orders placed on the Platform.
• Manufacturing file generation — to produce Mozaik XML import files and door specification documents used in our production workflow.
• Order communication — to send order confirmations, status updates, and delivery notifications.
• Customer support — to respond to enquiries, address issues, and resolve disputes related to your account or orders.
• Legal and regulatory compliance — to meet obligations under applicable tax law (including GST/HST records retention), business law, and privacy law.
• Platform security and integrity — to detect, investigate, and prevent fraudulent, unauthorized, or illegal activity.

We do not use your personal information for targeted advertising, sale to third parties, or any purpose not listed above without first obtaining your consent.

By creating an account on the Platform, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. This consent is a condition of using the Platform.

For purposes beyond those listed in Section 4, or for uses that are not reasonably expected given the nature of our relationship, we will seek your express consent before proceeding.

You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may limit or prevent us from providing services to you. To withdraw consent, contact our Privacy Officer (Section 10).

We disclose personal information only to the extent required to operate the Platform and fulfil orders. Our current service providers and the data shared with each are:

All third-party service providers are required to protect your personal information consistent with their published privacy policies and applicable law. We do not sell, rent, or trade personal information.

We may also disclose personal information:

• As required or permitted by applicable law (including court orders, regulatory demands, or law enforcement requests).
• To protect the rights, property, or safety of TK Industries, our customers, or the public.
• In connection with a business transaction (merger, acquisition, or asset sale), subject to the acquirer agreeing to protect personal information under equivalent terms.

Some of our service providers (Clerk, Stripe, Supabase, Google, Resend, Vercel) process or store data in the United States or other jurisdictions. Personal information transferred outside Canada may be subject to the laws of those jurisdictions, including lawful access by foreign governments. We take reasonable contractual steps to ensure adequate protection of personal information transferred internationally.

We retain personal information only as long as necessary for the purposes for which it was collected, or as required by law.

• Account data: retained for the duration of your active account. If you close your account, we will delete or anonymize account data within 90 days, subject to legal hold obligations.
• Order records: retained for a minimum of seven (7) years from the order date to comply with Alberta tax and business record-keeping requirements.
• Payment transaction records: retained as required by Stripe's standard retention practices and applicable financial regulations.
• Server logs: retained for up to 90 days for security and diagnostic purposes.

TK Industries uses appropriate technical and organizational safeguards to protect personal information against unauthorized access, use, disclosure, loss, or destruction. These measures include:

• HTTPS encryption for all data in transit.
• Row-level security (RLS) policies on database tables.
• Access controls restricting data access to authorized personnel and automated systems only.
• Use of established third-party services (Clerk, Stripe) for credential and payment management.

No method of transmission over the internet or electronic storage is completely secure. While we take commercially reasonable precautions, we cannot guarantee absolute security. In the event of a privacy breach that creates a real risk of significant harm, we will notify affected individuals and the Office of the Information and Privacy Commissioner of Alberta (OIPC) in accordance with PIPA requirements.

Under PIPA and PIPEDA, you have the right to:

• Access — request access to your personal information held by TK Industries, subject to limited exceptions under PIPA s.24.
• Correction — request correction of inaccurate or incomplete personal information.
• Withdraw consent — withdraw consent to collection, use, or disclosure, subject to legal and contractual constraints (see Section 5).
• Complain — file a complaint with the Office of the Information and Privacy Commissioner of Alberta (OIPC) if you believe your privacy rights have been violated.

To exercise these rights, contact our Privacy Officer using the information in Section 11. We will respond within 45 days as required by PIPA, or advise you of an extension and the reason for it.

TK Industries has designated a Privacy Officer responsible for compliance with this policy and applicable privacy law. To make a request, ask a question, or submit a complaint regarding personal information:

If you are not satisfied with our response, you may escalate to the Office of the Information and Privacy Commissioner of Alberta (OIPC) at oipc.ab.ca or by phone at 1-888-241-4652.

The Platform uses cookies and similar technologies solely for functional purposes — specifically, to maintain your authenticated session (managed by Clerk). We do not use advertising cookies, tracking pixels, or third-party analytics that profile your behaviour across other websites. You may disable cookies in your browser settings, but this will prevent you from logging in to your account.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the revised policy on this page with an updated Effective Date. For material changes, we will notify account holders by email. Continued use of the Platform after the Effective Date of a revised policy constitutes acceptance of the changes.