Last updated: June 4, 2026.

This Privacy and System Use Notice explains how Dutek, Inc. (“Dutek,” “Company,” “we,” “us,” or “our”) collects, uses, retains, and protects information in connection with the Dutek cloud-based Dutek Ops system and customer portal.

The Dutek Ops system is used by authorized Dutek employees to perform job responsibilities. The customer portal is used by authorized representatives of Dutek customers to enter, review, and track orders and related business activity.

This system is for authorized business use only.

1. Who This Notice Applies To

   This notice applies to:

   • Dutek employees who access or use the Dutek Ops system;
   • authorized customer representatives who access or use the customer portal;
   • vendor and customer business contacts whose information is maintained in the Dutek Ops system; and
   • other authorized users of the system.

   Employees should also review Dutek’s Employee Privacy Notice, Employee Handbook, Electronic Systems Policy, and any applicable employee monitoring or acceptable-use policies.

2. Information We Collect and Process

   Depending on your role and your use of the system, we may collect or process the following categories of information.

   • Account, Login, and Session Information

     We process information necessary to authenticate users, maintain secure sessions, and protect the system, including:

     • user ID or account identifier;
     • session ID or equivalent session token;
     • login and logout timestamps;
     • session-start time;
     • authentication and access-control information;
     • security events; and
     • related technical information needed to maintain system security.

     This information is used for login security, session persistence, access control, fraud prevention, system integrity, and troubleshooting.

   • Application Activity and Change Logs

     The system may log application activity generated by authorized users, including create, update, and delete activity. These records may include:

     • user or account identifier;
     • date and time of activity;
     • affected module, table, record, order, customer, vendor, or transaction;
     • INSERT, UPDATE, or DELETE queries or related change records;
     • error messages or debugging information; and
     • other technical details needed to understand system behavior.

     We use these records for debugging, error correction, data integrity, security, audit, troubleshooting, and improvement of the Dutek Ops system.

     Where practical, Dutek seeks to limit logs to information reasonably necessary for these purposes. Dutek may review and improve its logging practices to reduce unnecessary personal or confidential information in logs.

   • Employee HR Information

     Because the Dutek Ops system includes an HR module, Dutek may process employee information necessary for employment administration and workforce management, including:

     • employee name and work contact information;
     • employee ID or internal account identifier;
     • job-related information;
     • time-off requests and related HR events;
     • attendance or schedule-related information, where applicable;
     • employment status and department information;
     • records needed to administer HR processes, policies, benefits, payroll, compliance, or workplace operations; and
     • other basic employment-related information maintained in the HR module.

     Dutek uses this information for employment administration, HR operations, payroll or payroll support, benefits or leave administration, compliance with company policies, legal compliance, workforce management, and related business purposes.

   • Customer, Vendor, and Business Contact Information

     The Dutek Ops system may contain business contact information provided by customers, vendors, or their representatives in order to conduct business with Dutek, including:

     • name;
     • job title or role;
     • company name;
     • work email address;
     • work telephone number;
     • business mailing or billing address;
     • shipping or service address;
     • order, transaction, and account-related information; and
     • communications or notes related to business transactions.

     Dutek uses this information to manage business relationships, process and track orders, communicate with customers and vendors, perform contractual obligations, maintain business records, provide support, and resolve questions or disputes.

3. Purposes of Processing

   Dutek processes information in Dutek Ops and customer portal for the following purposes:

   • authenticating users and maintaining secure sessions;
   • providing access to Dutek Ops and customer portal functions;
   • processing customer orders and related transactions;
   • maintaining customer, vendor, and employee records;
   • supporting HR administration and employment-related processes;
   • debugging, troubleshooting, and correcting system errors;
   • maintaining data integrity and audit trails;
   • detecting, preventing, and investigating unauthorized access, misuse, fraud, or security incidents;
   • training employees and improving business processes;
   • evaluating employee use of the Dutek Ops system where appropriate and consistent with company policy;
   • complying with legal, tax, accounting, employment, contractual, and audit obligations;
   • resolving disputes and enforcing agreements or company policies; and
   • establishing, exercising, or defending legal claims.

4. Employee System Monitoring

   Employees should understand that use of the Dutek Ops system is not private. Dutek may review employee activity in the system for legitimate business purposes, including system security, debugging, training, quality assurance, operational management, policy compliance, investigation of errors or misuse, and, where appropriate, performance evaluation.

   Employee activity review will be limited to legitimate business purposes and handled in accordance with applicable law and Dutek policies.

5. Customer Portal Audit Records

   Authorized customer representatives should understand that activity in the customer portal may be associated with their user account and business organization. Dutek may use customer portal activity records to confirm who submitted, modified, approved, reviewed, or tracked orders or related business transactions. These records are used for order processing, customer support, audit, dispute resolution, fraud prevention, security, and legal or contractual compliance.

6. Cookies and Session Technologies

   Dutek Ops and customer portal use only technologies necessary to provide secure login, session persistence, and system security.

   These technologies are used to:

   • authenticate authorized users;
   • maintain secure logged-in sessions;
   • prevent unauthorized access;
   • protect the system from misuse; and
   • allow users to perform requested Dutek Ops or portal functions.

   These necessary session technologies are not used for advertising, cross-site behavioral tracking, or unrelated marketing analytics.

7. Retention

   Dutek retains information only for as long as reasonably necessary and proportionate for the purposes described in this notice, unless a longer period is required or permitted by law, contract, audit requirements, tax or accounting requirements, security investigations, litigation holds, dispute resolution, or the establishment, exercise, or defense of legal claims.

   Dutek uses the following retention principles:

   Category	Retention approach
   Active session information	Retained for the duration of the session and expired after logout or inactivity according to system settings
   Login and authentication security records	Retained for a limited security and audit period, unless needed for investigation, compliance, or legal purposes
   Raw debugging logs and SQL-related activity logs	Retained only as long as reasonably necessary for debugging, error correction, audit, security, or system integrity purposes
   Employee HR records	Retained according to Dutek’s employee records retention schedule and applicable employment, payroll, tax, benefits, and legal requirements
   Employee Dutek Ops activity records	Retained as reasonably necessary for security, audit, training, operational management, performance-related purposes, investigations, or legal compliance
   Customer and vendor business contact records	Retained while the business relationship is active and for a reasonable period afterward as needed for business records, accounting, audit, contractual, legal, or dispute-resolution purposes
   Customer portal order and transaction records	Retained as part of Dutek’s business, accounting, audit, contractual, and legal records
   Aggregated or de-identified information	May be retained for longer periods where it no longer reasonably identifies an individual

   Dutek may delete, de-identify, aggregate, or archive information when it is no longer needed for the purposes described above.

8. Access and Disclosure

   Access to information in Dutek Ops and customer portal is limited to authorized personnel and service providers who need access for legitimate business purposes.

   Dutek may disclose information to:

   • internal departments such as operations, HR, accounting, IT, management, customer service, and legal;
   • service providers that host, maintain, secure, or support the system;
   • auditors, legal advisors, insurers, or professional advisors;
   • customers, vendors, or business partners where necessary to conduct business;
   • government authorities or regulators where required by law; and
   • other parties where necessary to protect rights, safety, security, or legal interests.

   Dutek does not sell personal information collected through Dutek Ops or its customer portal. Dutek does not use Dutek Ops or its customer portal activity for cross-context behavioral advertising.

9. Security

   Dutek uses administrative, technical, and organizational safeguards designed to protect information in Dutek Ops and customer portal from unauthorized access, loss, misuse, alteration, or disclosure.

   Users are responsible for protecting their login credentials, using the system only for authorized business purposes, and promptly reporting suspected unauthorized access or security incidents.

10. Privacy Rights

    Depending on applicable law and your relationship with Dutek, you may have rights regarding personal information processed in Dutek Ops or its customer portal. These rights may include the right to request access, correction, deletion, restriction, portability, information about processing practices, or objection to certain processing, subject to applicable exceptions.

    Employees should direct employment-related privacy questions to Dutek Human Resources' department.

    Customer and vendor representatives may contact Dutek through their Dutek sales representatives regarding privacy questions or requests.

11. Contact

    For questions about this notice or Dutek\’s privacy practices for Dutek Ops and customer portal, contact:

    Privacy Practices Inquiry w/ Dir. of Information Technology Dutek Inc. 2228 Oak Ridge Way Vista, CA 92081 (760) 566-8888