Keirton Inc. Privacy Policy

Effective date: July 10, 2026

This policy explains how Keirton Inc. collects, uses, and protects personal information on our websites: keirton.com, twistertrimmer.com (including twistertrimmer.com/marvel/), and curepuck.io. One policy covers all of them.

Who we are

Keirton Inc. is a post-harvest cannabis equipment manufacturer based in British Columbia, Canada. We have built Twister trimmers since 2007, and we build the Marvel AI grading and sorting machine and the Cure Puck curing system. Our customers are cannabis producers in Canada, the United States, and internationally.

We operate from Canada. This policy is governed by the laws of British Columbia and Canada, and we follow the Personal Information Protection and Electronic Documents Act (PIPEDA) and the British Columbia Personal Information Protection Act (PIPA).

What this policy covers, and what it does not

This policy covers website visitors: the information you submit through forms, orders you place on curepuck.io, and the cookies our sites use.

Data collected by Marvel machines in customer facilities is governed by the Data Usage and AI Processing Policy, published on the Marvel site at /data-policy/, not by this policy. If you are a Marvel customer asking about machine or production data, read that policy. The two documents do not overlap.

What we collect and why

We collect personal information when you give it to us. Here is exactly what and why.

Sales inquiry forms. Name, company, email, phone, country, role, and a field describing your operation. We use this to respond to your inquiry and book a discovery call. That is the only purpose.

Gated document forms. Your email address, plus an optional marketing consent checkbox. The checkbox is unticked by default. We use your email to deliver the document you asked for. We send marketing email only if you actively checked the box. If you did not check it, you get the document and nothing else.

Orders on curepuck.io. Name, email, phone, billing and shipping address, and your order details. We use this to process your order, ship it, handle warranty and support, and meet our tax and accounting obligations. Payment card details go directly to our payment processor. Keirton never sees or stores your full card number.

Support requests. When you contact support@keirton.com or call us, we keep the correspondence so we can resolve your issue and honor your warranty.

What we do not do. We do not sell personal information. We have no data broker relationships. We do use advertising pixels, and we explain exactly how below.

Marketing email and CASL

When you check the marketing consent box, you give express consent under Canada's Anti-Spam Legislation (CASL). Here is what that means in practice:

• Every marketing message identifies Keirton Inc. as the sender.
• Every marketing message includes a working unsubscribe link. Unsubscribing takes effect promptly.
• We keep records of your consent: what you agreed to and when.
• Consent is never assumed. The checkbox is unticked by default, always.

Marketing and document delivery emails are sent through our email service provider, which processes your email address on our behalf and on our instructions.

Cookies, analytics, and advertising pixels

Our sites use three kinds of cookies. Here is the honest version.

Necessary cookies. The curepuck.io store uses cookies to run the cart and checkout. Without them, you cannot buy anything. These are always on.

Analytics. We use Google Analytics 4 to understand how visitors use our sites: which pages get read, where visitors come from, and what devices they use. We use this to improve the sites.

Advertising pixels. We use the Meta Pixel and Google Ads tags to measure our advertising and to show ads to people who have visited our sites. These pixels share limited information with Meta and Google, such as the pages you visited and a device identifier. This is the one case where visitor data reaches an advertising platform, so we want you to know about it and how to opt out:

• Block or delete cookies in your browser settings. The sites still work.
• Adjust your ad preferences at adssettings.google.com and in Meta's Ad Preferences.
• Use the Digital Advertising Alliance of Canada opt-out at youradchoices.ca.

Who processes your information

We use a small number of service providers to run the sites and serve you:

• Salesforce. Sales inquiry form submissions route to Salesforce, our CRM, where our team responds to them.
• Our email service provider. Sends gated documents and, where you consented, marketing email.
• Our e-commerce platform and payment processor. Run the curepuck.io store and process payments.
• Shipping carriers. Receive your name and address to deliver your order.
• Website hosting and infrastructure providers. Host the sites and their databases.
• Google and Meta. Provide the analytics and advertising services described above.

Except for the advertising pixels described in the cookies section, these providers process personal information only on our instructions and only for the purposes in this policy.

Where your information is stored

Your information may be stored and processed in Canada and the United States, because some of our service providers operate infrastructure in the US. When your information is in another country, it is subject to the laws of that country, including lawful access by authorities there. We tell you this because PIPEDA's openness principle requires it, and because you should know.

How long we keep it

We keep personal information only as long as needed for the purposes in this policy, then delete or anonymize it. Our standard periods:

• Sales leads: up to three years after our last contact with you, then purged.
• Marketing consent records: as long as we are emailing you, plus three years.
• Order and payment records: as long as Canadian tax and accounting law requires.
• Support correspondence: the life of your warranty, plus one year.

Your rights

Under PIPEDA and BC PIPA, you can:

Access your information. Email our Privacy Officer and ask what personal information we hold about you. We respond within the timelines the law sets.

Correct your information. If something we hold is wrong, tell us and we will fix it.

Withdraw consent. Unsubscribe from marketing at any time using the link in any message, or by emailing our Privacy Officer. You can also ask us to delete your information entirely, subject to anything we are legally required to keep, such as tax records.

Complain. Start with our Privacy Officer; most issues get resolved there. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca).

We extend the access, correction, and deletion rights above to every visitor, wherever you live.

Privacy Officer

Questions, requests, and complaints about this policy go to:

Privacy Officer, Keirton Inc.
privacy@keirton.com

Changes to this policy

When we change this policy, we update the date at the top and publish the new version at this address. If a change materially affects how we use information you already gave us, we will tell you before it takes effect.