GKOS Privacy Policy

Effective Date: September 17, 2026
Last Updated: October 9, 2026

This Privacy Policy explains how GeoKimika Energy Services DBA GK Oilfield Solutions ("GKOS," "we," "us," or "our") collects, uses, discloses, stores, and protects personal information in connection with our websites, software platforms, applications, customer portals, dashboards, laboratory-information-management tools, dispatch and order-management systems, remote-monitoring services, and related products and services (collectively, the "Services").

1. Information We Collect

We may collect the following categories of information, depending on how you interact with the Services:

• Website and inquiry information. When you submit a contact or quote-request form, we may collect your name, business name, job title, email address, telephone number, project details, location, and other information you choose to provide.
• Account and user information. When a customer or Authorized User creates, activates, or uses a software account, we may collect names, business contact information, company affiliation, role, account identifiers, user permissions, login-related information, and account status.
• Customer and service data. Depending on the Services used, customers and users may enter, upload, import, export, or transmit laboratory data, sample information, work orders, dispatch information, operational records, customer or vendor information, asset or location information, monitoring data, sensor data, reports, attachments, notes, and other business records. Some of this information may contain personal information.
• Technical, device, and usage information. We may collect browser and device type, operating system, internet protocol address, approximate geographic area, dates and times of access, pages or screens viewed, features used, login activity, audit logs, error logs, system events, configuration information, and similar technical or usage data.
• Communications and support information. We may retain emails, support requests, messages, attachments, troubleshooting records, and related communications.
• Billing and business records. We may collect billing contacts, invoice and payment status, subscription details, account history, and other records needed to administer a customer relationship. Payment-card information, if applicable, may be processed directly by a third-party payment provider rather than stored by GKOS.

Please do not submit passwords, highly sensitive personal information, regulated data, or confidential customer information through a public Website form unless specifically requested through an appropriate secure channel.

2. Information We Process on Behalf of Business Customers

Many GKOS Services are business-to-business tools. When a customer organization determines what personal information is entered into or processed through the Services, GKOS generally processes that information on behalf of the customer and in accordance with the applicable customer agreement and the customer's instructions.

If your personal information was submitted to GKOS by your employer, customer, laboratory, contractor, or another organization, that organization may be responsible for determining why the information is processed and how it is used. Requests concerning that information may need to be directed to the organization that provided or controls it. We may refer a request to that customer where appropriate.

3. Google Analytics, Cookies, and Similar Technologies

We use Google Analytics to understand how visitors find and use the public Website, measure Website performance, and improve content and navigation. Google Analytics may use first-party cookies or similar technologies and may process device and browser information, Website activity, approximate location, and online identifiers. Google states that Analytics uses internet protocol addresses during processing but does not log or store individual internet protocol addresses.

Google processes Analytics information under its own terms and privacy practices. To learn more, visit How Google uses information from sites or apps that use its services. You can manage or delete cookies through your browser and may use the Google Analytics Opt-out Browser Add-on. Blocking cookies may affect some Website functions.

Our software may also use cookies, local storage, session identifiers, or similar technologies that are necessary for authentication, security, preferences, session management, and operation of the Services. Where required by applicable law, we will request consent before activating nonessential analytics or similar technologies.

4. How We Use Information

We may use personal information to:

• Respond to inquiries and quote requests;
• Create, administer, authenticate, and secure user accounts;
• Provide, operate, configure, maintain, support, and troubleshoot the Services;
• Process customer-directed data, workflows, reports, alerts, notifications, imports, exports, and integrations;
• Provide customer support and communicate about account, service, maintenance, security, billing, or contractual matters;
• Manage subscriptions, invoices, payments, account status, and customer relationships;
• Monitor performance, reliability, usage, and security of the Services;
• Improve and develop our Services, including through aggregated or de-identified information as permitted by the applicable customer agreement;
• Prevent fraud, misuse, unauthorized access, security incidents, and unlawful activity;
• Maintain business, audit, and legal records and enforce our agreements and policies; and
• Comply with legal obligations and protect our rights and the rights of others.

5. Legal Bases for Processing

Where applicable law requires a legal basis, we process personal information as necessary to perform a contract or take steps toward a contract; for our legitimate interests in operating, securing, supporting, and improving the Services and our business; to comply with legal obligations; or with consent where required. Where processing is based on consent, you may withdraw that consent at any time without affecting processing that occurred before withdrawal.

6. How We Disclose Information

We may disclose personal information:

• To cloud-hosting, analytics, information-technology, authentication, communications, messaging, security, payment, storage, and professional-service providers that support our operations;
• To the customer organization that administers your account, including its authorized administrators and users where appropriate;
• To our personnel, contractors, affiliates, and representatives with a legitimate business need to access it;
• To third-party systems or integrations selected or authorized by the customer;
• To comply with law, legal process, or lawful government requests;
• To investigate or prevent fraud, security threats, unlawful activity, or violations of our terms;
• To protect the rights, property, or safety of GKOS, our customers, users, Website visitors, or others; and
• In connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction.

We do not sell personal information for money. We do not use Customer Data processed through our software for cross-context behavioral advertising or targeted advertising unrelated to providing the Services. If our practices change, we will update this Privacy Policy and provide any choices required by applicable law.

7. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Services, maintaining business and legal records, resolving disputes, enforcing agreements, preventing fraud or security incidents, and satisfying legal, accounting, tax, or reporting obligations.

For Customer Data associated with software Services, the applicable customer agreement controls where it specifies a retention period. Unless a Service Document states otherwise, our current EULA generally provides customers six months after termination, expiration, cancellation, or cessation of the Services to request or complete an export of Customer Data. After that period, GKOS may delete Customer Data, subject to legal requirements, routine backup retention, and permitted aggregated or de-identified use.

Account, billing, security, audit, transaction, legal, and contract records may be retained longer where reasonably necessary for legitimate business or legal purposes. Google Analytics information is retained according to the settings configured for our Analytics property and Google's applicable terms.

8. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. These safeguards may include access controls, account authentication, logging, network and system protections, vendor controls, backups, and other measures appropriate to the nature of the Services. No website, software platform, electronic transmission, or storage system can be guaranteed to be completely secure, and we cannot guarantee absolute security.

Customers and Authorized Users are also responsible for protecting account credentials, maintaining appropriate user permissions, promptly disabling access for persons who are no longer authorized, and notifying GKOS of suspected unauthorized access or security incidents as described in the applicable EULA or customer agreement.

9. International Data Transfers

GKOS is located in the United States. If you access the Services from another country, personal information may be processed in the United States and other countries where we or our service providers operate. Those countries may have data-protection laws that differ from the laws where you live. Where required, we rely on appropriate legal mechanisms for international transfers.

10. Your Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have rights to request access to, correction of, deletion of, or a copy of personal information about you; object to or restrict certain processing; withdraw consent; appeal a decision concerning a privacy request; or exercise other rights provided by applicable law. You may also have the right to lodge a complaint with a data-protection or privacy regulator in your jurisdiction.

To submit a request, use the contact form on the GKOS Website or mail us at the address in Section 16. Please state that your message concerns a "Privacy Request" and identify the right you wish to exercise. We may need to verify your identity and authority before completing a request. Authorized agents may submit requests where permitted by law, subject to verification.

If the information at issue is Customer Data controlled by a GKOS customer, we may direct you to that customer or coordinate with the customer before responding.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

11. Do Not Track and Global Privacy Signals

Some browsers provide "Do Not Track" signals. Because there is no universally accepted standard for responding to these signals, the Website may not respond to them. Where legally required and technically supported, we will process recognized opt-out preference signals, such as the Global Privacy Control, in accordance with applicable law.

12. Third-Party Websites, Integrations, and Services

The Services may link to or interoperate with third-party websites, software, communications providers, mapping tools, equipment platforms, cloud services, payment providers, or other services. We do not control the independent privacy or security practices of third parties. Their own privacy notices and terms may apply when you use their services.

13. Children’s Privacy

The Services are intended for business and professional use and are not directed to children. We do not knowingly collect personal information from children under 13 through the Services. If you believe a child has provided personal information to us, please contact us so we can review and, where appropriate, delete it.

14. Customer Data, Operational Data, and De-Identified Information

This Privacy Policy addresses personal information. Customer Data may also include laboratory results, monitoring data, sensor measurements, asset information, dispatch records, work orders, operational information, and other business data that is not personal information.

Ownership, licensing, export rights, retention, and permitted use of Customer Data are governed by the applicable GKOS EULA, proposal, service agreement, licensing agreement, statement of work, or other customer contract. Where permitted by the applicable agreement, GKOS may create and use aggregated or de-identified information for purposes such as improving products and services, evaluating system performance, developing analytics and benchmarks, internal research, maintenance planning, and aggregated insights, provided the information does not reasonably identify the customer, an individual user, a particular facility, or confidential operations.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically. The revised version will be posted on this page with an updated "Last Updated" date. If required by law or an applicable customer agreement, we will provide additional notice or obtain consent for material changes.

16. Contact Us

Questions or privacy requests may be submitted through the contact form on the GKOS Website or mailed to: