Effective Date: January 1, 2026 | EMKAY INDUSTRIES LLC
EMKAY INDUSTRIES LLC, operating through its brand Emkay Works, is committed to protecting the privacy of all individuals who interact with our digital platforms, services, and communications. This Privacy Policy explains in clear and comprehensive terms how we collect, use, store, share, and safeguard your personal information when you visit our website at https://www.emkayworks.lol, engage with our services, or otherwise communicate with us in the course of our business operations. Emkay Works provides computer systems design and integrated technical solutions, and the trust of our clients, partners, and visitors is foundational to everything we do.
We encourage you to read this document thoroughly to understand our practices regarding your data. If you do not agree with any part of this policy, you should discontinue use of our website and services. Your continued use constitutes acknowledgment of the terms described herein.
This policy applies to all information collected through our website, email communications, contact forms, service engagements, and any other interaction where EMKAY INDUSTRIES LLC acts as a data controller. It covers data collected from clients, prospective clients, website visitors, vendors, and job applicants.
This policy does not apply to third-party websites that may be linked from our site. We are not responsible for the privacy practices of external platforms, and we encourage you to review the policies of any third-party services you choose to engage with.
Our services are directed at businesses and professionals in the United States and internationally. We handle data in compliance with applicable federal and state laws, including but not limited to the California Consumer Privacy Act (CCPA) and the European Union General Data Protection Regulation (GDPR) where applicable.
We collect several categories of information to provide and improve our services. The types of data we gather depend on how you interact with us.
Personal Identification Information: When you submit a contact form, request a consultation, or engage our services, we may collect your full name, email address, phone number, job title, company name, and mailing address. This information is provided voluntarily by you.
Technical and Usage Data: When you visit our website, our servers automatically log certain information including your IP address, browser type and version, operating system, referring URL, pages visited, time spent on each page, and the date and time of your visit. This data is collected through server logs and analytics tools.
Communication Records: We retain copies of correspondence when you contact us via email, phone, or our contact form. This includes the content of your message and any attachments you choose to share.
Service Engagement Data: For active clients, we may collect and process information related to system configurations, technical requirements, project specifications, and access credentials necessary to deliver our computer systems design and integration services.
Payment Information: If you engage our paid services, we may collect billing details. However, full payment card numbers are handled exclusively by our PCI-compliant payment processors and are not stored on our servers.
We gather information through multiple channels, each designed to serve a specific purpose in our service delivery:
Direct Collection: Information you provide directly when filling out forms on our website, sending emails to our team, participating in phone consultations, or signing service agreements. This is the primary method through which we receive personal data.
Automated Collection: As you navigate our website, certain technical data is collected automatically through cookies, web beacons, and server log files. These tools help us understand how visitors use our site and allow us to improve the experience over time.
Third-Party Sources: We may receive information from business partners, analytics providers, and publicly available databases. For example, our cloud hosting provider and analytics platforms may share aggregated usage statistics with us.
Service Delivery Context: During active engagements, our engineering teams may access systems and infrastructure under your direction. Any data accessed in this context is handled strictly according to the terms of our service agreement and this privacy policy.
Our processing of your personal information is grounded in one or more of the following legal bases:
Consent: Where you have given clear and affirmative consent for us to process your data for a specific purpose, such as receiving marketing communications or being contacted about our services.
Contractual Necessity: Processing that is required to fulfill a contract with you, including providing our computer systems design services, managing your account, and processing payments.
Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services, analyzing website traffic, preventing fraud, and maintaining the security of our systems, provided these interests do not override your fundamental rights.
Legal Obligation: Processing required to comply with applicable laws, regulations, court orders, or government requests.
The information we collect serves multiple operational and business purposes. We use your data in the following ways:
Service Delivery: To provide the computer systems design, architecture consulting, cloud migration, cybersecurity assessment, and integrated technical solutions that form our core service offerings.
Communication: To respond to your inquiries, send service-related updates, provide technical support, and deliver information about our offerings that may be relevant to your interests.
Website Improvement: To analyze usage patterns, diagnose technical issues, optimize page performance, and enhance the overall user experience of our digital platforms.
Security and Compliance: To detect, prevent, and address technical issues, unauthorized access, fraud, and other harmful activities. We also use data to comply with legal obligations and enforce our Terms of Service.
Business Operations: For internal record-keeping, billing and accounting, project management, and strategic planning purposes.
Marketing: With your explicit consent, we may use your contact information to share newsletters, case studies, white papers, and announcements about new services or features. You may opt out of marketing communications at any time.
We take the security of your information seriously and have implemented robust safeguards to protect it against unauthorized access, alteration, disclosure, or destruction.
Technical Safeguards: Our infrastructure employs industry-standard encryption protocols for data in transit (TLS 1.3) and at rest (AES-256). We utilize Web Application Firewalls, intrusion detection systems, and automated vulnerability scanning to protect our servers. Access to production systems is restricted to authorized personnel through multi-factor authentication and role-based access controls.
Organizational Safeguards: All employees and contractors who handle personal data receive privacy and security training. We maintain incident response plans and conduct regular security audits. Our internal policies mandate the principle of least privilege, meaning that personnel only access the minimum data necessary to perform their functions.
Physical Safeguards: Our data is hosted with leading cloud infrastructure providers that maintain SOC 2 Type II and ISO 27001 certified data centers with 24/7 physical security, redundant power, and environmental controls.
Breach Notification: In the unlikely event of a data breach that compromises your personal information, we will notify affected individuals and relevant authorities within the timeframe required by applicable law.
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our retention periods are determined based on the following criteria:
Active Service Relationships: Data related to active client engagements is retained for the duration of the engagement plus a period of seven years afterward to address any post-engagement inquiries, warranty claims, or legal requirements.
Inquiry Data: Information submitted through contact forms by individuals who do not become clients is retained for 18 months, after which it is securely deleted unless a longer retention period is required by law.
Website Analytics: Anonymized usage data may be retained indefinitely for trend analysis, but any data that could identify individual visitors is purged after 26 months.
Marketing Consent Records: Records of your consent or opt-out preferences are retained indefinitely to ensure we continue to respect your choices.
When data reaches the end of its retention period, we securely delete or anonymize it using industry-standard data destruction methods.
Our website uses cookies and similar technologies to enhance your browsing experience and collect analytical data. Cookies are small text files placed on your device by your web browser.
Essential Cookies: These are necessary for the website to function properly and cannot be disabled. They include session management cookies that maintain your state as you navigate between pages.
Analytics Cookies: We use analytics services to understand how visitors interact with our site. These cookies collect aggregated, anonymized data about page views, traffic sources, and user behavior patterns. No personally identifiable information is stored in these cookies.
Preference Cookies: These cookies remember choices you make, such as your preferred language or region, to provide a more personalized experience.
Third-Party Cookies: Our site may incorporate content from third-party platforms such as embedded maps or fonts. These providers may set their own cookies subject to their respective privacy policies.
You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies. However, disabling essential cookies may affect the functionality of our website.
We do not sell your personal information to third parties. We may share your data in the following limited circumstances:
Service Providers: We engage trusted third-party vendors to assist with website hosting, email delivery, payment processing, analytics, and customer relationship management. These providers are contractually bound to process your data only on our instructions and in compliance with this privacy policy.
Professional Advisors: We may share information with our legal counsel, auditors, and insurance providers as necessary for legitimate business purposes, subject to professional confidentiality obligations.
Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. You will be notified via email or a prominent notice on our website of any change in ownership.
Legal Compliance: We may disclose information when required by law, regulation, court order, or governmental request. We will make reasonable efforts to notify you before such disclosure unless prohibited by law.
With Your Consent: We may share your information for purposes not covered by this policy when we have obtained your explicit consent.
Depending on your jurisdiction, you may have certain rights regarding your personal information. We honor these rights and provide mechanisms for you to exercise them:
Right to Access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
Right to Rectification: If you believe the data we hold about you is inaccurate or incomplete, you may request that we correct or update it.
Right to Erasure: In certain circumstances, you may request that we delete your personal data from our systems, subject to legal retention requirements.
Right to Restrict Processing: You may request that we limit the way we process your data under specific conditions.
Right to Data Portability: You may request a copy of your data in a structured, machine-readable format for transfer to another service provider.
Right to Object: You may object to processing based on legitimate interests, including direct marketing. We will comply unless we demonstrate compelling legitimate grounds for continued processing.
To exercise any of these rights, please contact us using the information provided in Section 17 of this policy. We will respond to your request within 30 days.
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights regarding your personal information. Under the CCPA, California consumers have the right to:
Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business purpose for collecting or sharing the information, and the categories of third parties with whom we share the information.
Delete: You may request that we delete any personal information we have collected from you, subject to certain exceptions such as completing a transaction, detecting security incidents, or complying with legal obligations.
Opt-Out of Sale: EMKAY INDUSTRIES LLC does not sell personal information as defined by the CCPA. We do not share personal data with third parties for their direct marketing purposes without your explicit consent.
Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. This means we will not deny you services, charge different prices, or provide a different quality of service based on your privacy choices.
To exercise your CCPA rights, please contact us using the methods listed in Section 17. We may need to verify your identity before processing your request, which may require you to provide information that matches what we have on file.
If you are located in the European Economic Area (EEA), Switzerland, or the United Kingdom, you are entitled to the rights and protections afforded by the General Data Protection Regulation (GDPR) and equivalent legislation.
In addition to the rights described in Section 11 of this policy, GDPR provides EU and UK data subjects with the right to lodge a complaint with a supervisory authority in their country of residence if they believe their data has been processed unlawfully. We encourage you to contact us first so that we can address your concerns directly.
Our legal basis for processing your data will be one of the bases described in Section 5 of this policy. Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
Where we transfer personal data from the EEA, Switzerland, or the UK to countries that have not been deemed to provide an adequate level of data protection, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.
Our website and services are not directed at individuals under the age of 18. We do not knowingly collect, use, or disclose personal information from children under 18 years of age. If we become aware that we have inadvertently collected personal data from a child without verified parental consent, we will take prompt steps to delete that information from our records.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately using the contact details in Section 17 so that we can take appropriate action.
EMKAY INDUSTRIES LLC is headquartered in the United States, and our primary data processing activities occur on infrastructure located within the United States. If you are accessing our website or services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.
By using our services, you acknowledge that your data may be transferred internationally. We take steps to ensure that any cross-border data transfers comply with applicable data protection laws and that your information receives an adequate level of protection regardless of where it is processed.
For transfers of personal data from the EEA, UK, or Switzerland to the United States, we rely on Standard Contractual Clauses and supplementary measures as our transfer mechanism. A copy of the relevant safeguards can be obtained by contacting us.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or operational needs. When we make material changes, we will post the revised policy on this page and update the Effective Date at the top of the document.
We encourage you to review this policy periodically. If we make significant changes that affect how we process your personal data, we will provide a more prominent notice, which may include sending an email to the address we have on file or posting a notification on our website.
Your continued use of our website and services after the effective date of any revised policy constitutes your acceptance of the changes. If you do not agree with the updated terms, you should discontinue use of our services and contact us to discuss any concerns.
If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us using any of the following methods:
Email: talk@emkayworks.lol
Phone: +1 (951) 648-3902
Postal Mail:
EMKAY INDUSTRIES LLC
Attn: Privacy Office
782 S River Rd Ste 172
St George, UT 84790-5716
United States
Website: https://www.emkayworks.lol
We aim to acknowledge all privacy-related inquiries within 48 hours and provide a substantive response within 30 days. If your concern is urgent, please contact us by phone during our business hours, Monday through Friday, 9:00 AM to 5:00 PM Mountain Time.