Privacy Notice

Effective date: 16 October 2026

1. Who we are

KSS Canada is the operating name of 1001309778 Ontario Inc. (“KSS Canada”, “we”, “us” or “our”), a corporation incorporated in Ontario and a subsidiary of King Safety and Security Ltd, a company registered in England and Wales. We provide protective security services in Canada, including executive protection, residential security teams, security risk assessments, secure transportation, and related advisory and intelligence services.

Our office is at 366 Adelaide Street East, Suite 342, Toronto, Ontario M5A 3X9, Canada.

This notice explains how we collect, use, disclose and protect personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA). It applies to KSS Canada only. King Safety and Security Ltd in the United Kingdom publishes its own privacy notice at ksands.co.uk.

2. Our Privacy Officer

We have designated a Privacy Officer who is accountable for our compliance with this notice and with applicable privacy law. You can contact the Privacy Officer with any question, request or complaint about your personal information:

Privacy Officer, KSS Canada
366 Adelaide Street East, Suite 342, Toronto, Ontario M5A 3X9
Email: contact@kingsafety.ca
Telephone (24-hour contact number): +44 20 3916 5145

3. Personal information we collect

We collect only the personal information we need for the purposes set out in this notice. Depending on your relationship with us, this may include:

• Website visitors and enquirers: your name, organization, email address, telephone number, location, area of interest and the content of your message, together with technical information collected through cookies, such as your IP address, device and browser type, and the pages you visit (see section 8).
• Clients and the people we protect: contact details, and information about Principals, family members, household staff and properties that we need to plan and deliver our services. This can include addresses, schedules, travel plans, vehicles, photographs and plans of premises, information about threats or incidents, publicly available information gathered during authorized assessments (such as a review of a Principal’s digital footprint), and billing information.
• Operatives, job applicants and contractors: identity and contact details, licences issued under Ontario’s Private Security and Investigative Services Act, 2005, training records and qualifications, employment history, the results of background screening (including criminal record checks, which we carry out only with your consent), eligibility to work in Canada, Social Insurance Number and banking details for payroll, emergency contacts, and records of assignments.
• Business contacts: names and contact details of people at our suppliers, partners and other organizations we work with.

We collect most personal information directly from you. We may also receive it from clients (for example, about members of their household), referees, background screening providers, and public sources.

4. How we use personal information

We use personal information to:

• respond to enquiries and prepare proposals;
• plan, deliver and manage our services, including risk assessments and protective operations;
• protect our clients, Principals, operatives, staff and the public;
• recruit, select, screen, train, deploy and pay operatives;
• invoice clients, keep accounts and maintain insurance;
• meet our legal and regulatory obligations, including licensing and tax requirements; and
• operate, secure and improve our website.

We do not sell personal information. We do not use or disclose it for any other purpose without your consent, unless the law permits or requires us to.

5. Consent

We obtain your consent before collecting, using or disclosing your personal information, except where the law allows otherwise. Consent may be express or implied, depending on the sensitivity of the information and your reasonable expectations. We seek express consent for sensitive information, such as criminal record checks or details of a Principal’s security arrangements.

Where a client gives us information about other people, such as family members or household staff, the client confirms that they are entitled to share it with us for the purpose of the services.

You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. We will explain the likely consequences, which may include our being unable to provide some or all of our services.

Our website is not directed at children. Where our services require information about a Principal’s children, we collect it only through a parent or guardian, and only as needed to protect them.

6. When we share personal information

We share personal information only as needed for the purposes in this notice, with:

• our parent company, King Safety and Security Ltd in the United Kingdom, which supports our management, operations, administration and payroll;
• vetted service providers and partners that act on our behalf, such as providers of email and document storage, website hosting, payroll and HR software, and background screening, and specialist security and intelligence partners and subcontractors engaged on our assignments. They are bound by contract to keep the information confidential and to use it only for our purposes;
• our insurers, professional advisers and auditors;
• regulators, law enforcement agencies and courts, where we are required or permitted by law to do so; and
• a prospective buyer or successor in the event of a sale, merger or reorganization of our business, subject to confidentiality obligations.

7. Storage and processing outside Canada

Some of our service providers, and our parent company, are located outside Canada, including in the United Kingdom and the United States. Your personal information may therefore be stored or processed outside Canada, where it may be accessible to the courts, law enforcement and national security authorities of those countries. We use contractual and other measures to protect it to a standard comparable to the protection it receives in Canada. You can contact our Privacy Officer for more information about our practices regarding service providers outside Canada.

8. Cookies and analytics

Our website uses cookies and similar technologies. We use:

• cookies needed for the website to work;
• Google Analytics, to understand how visitors use the website;
• Google Ads, to measure and support our advertising; and
• Google reCAPTCHA, to protect our forms from spam and abuse.

You can block or delete cookies in your browser settings, opt out of Google Analytics using Google’s browser add-on at tools.google.com/dlpage/gaoptout, and manage personalized advertising at myadcenter.google.com. Blocking some cookies may affect how the website works.

9. How we protect personal information

We protect personal information with physical, organizational and technological safeguards appropriate to its sensitivity. These include limiting access to people who need it for their role, protecting reports and sensitive documents with passwords and encryption, sharing passwords separately from the documents they protect, requiring confidentiality from our staff, operatives and partners, and securely destroying information we no longer need.

10. How long we keep personal information

We keep personal information only as long as we need it for the purposes for which it was collected, or as long as the law requires. For example, financial and payroll records are kept for at least six years, as Canadian tax law requires. Where we use personal information to make a decision about you, we keep it long enough for you to request access to it. When we no longer need it, we securely destroy it or make it anonymous.

11. Your right to access and correct your information

You may ask us whether we hold personal information about you, how we have used it, and to whom we have disclosed it, and you may ask for a copy. You may also ask us to correct information that is inaccurate or incomplete. Please send your request to our Privacy Officer. We may ask you to verify your identity.

We will respond within 30 days, or tell you within that time if we need longer, as the law allows. We do not normally charge for access; if a fee applies, we will tell you in advance. In some cases the law allows or requires us to refuse access, for example where the information would reveal personal information about someone else, could threaten a person’s safety, or is legally privileged. If we refuse, we will explain why.

12. Privacy breaches

If a breach of our security safeguards involving your personal information creates a real risk of significant harm to you, we will notify you and report it to the Office of the Privacy Commissioner of Canada, as the law requires. We keep a record of every breach of our security safeguards.

13. Questions and complaints

Please contact our Privacy Officer first, using the details in section 2, so that we can try to resolve your concern. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada at www.priv.gc.ca or by telephone on 1-800-282-1376.

14. Changes to this notice

We may update this notice to reflect changes in the law or in our practices. The current version will always be published on this page, with its effective date.