Privacy Policy

1. Who We Are

DCOS Holdings Ltd. is a luxury fire systems company based in Kailua Kona, Hawaii, USA. We design, fabricate, and support automated tiki torches, fire bowls, fire pits, fire strips, and custom fire systems.

We trade as Kona Fire Co. and as Kaz Automated Tiki and Fire Bowl. Those are registered trading names, not separate companies — whichever name you reached us under, the company behind it is DCOS Holdings Ltd.

For privacy purposes, DCOS Holdings Ltd. is the data controller for personal information collected through this website. To contact us regarding privacy matters: inquiry@kaztiki.com

2. Data We Collect

Contact Form

When you submit our contact form, we collect:

• Full name
• Email address
• Phone number (optional)
• Customer type (homeowner, architect, builder, etc.)
• Whether you want a consultation or a service-plan quote (where the form asks)
• Project or property name (optional)
• Project description / message
• Torch configuration details (if arriving from the product configurator)
• The campaign link details (utm and segment values) of the email link you arrived from, if any

We do not collect payment information through this website. No credit card or financial data is processed here.

Analytics Data (with your consent)

If you accept cookies, we collect anonymized usage data via Google Analytics 4, including:

• Pages visited and time spent
• General geographic location (country/region — not precise location)
• Device type, browser, and operating system
• Referring website or search terms
• Anonymized IP address

This data is only collected if you explicitly accept cookies.

Automatically Collected Technical Data

Our hosting provider (Vercel) may collect standard server logs including IP addresses and request timestamps for security and performance purposes. This is strictly necessary for the site to function and is not used for marketing.

3. How We Use Your Information

We do not use your information for automated decision-making or profiling. We occasionally send emails about our products and services to existing customers and business contacts, using Intuit Mailchimp (see Section 5). Every marketing email includes an unsubscribe link, and you can also ask us to stop at any time by writing to inquiry@kaztiki.com. We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

4. Cookies & Analytics

We use cookies only with your explicit consent. Until you accept — and permanently, if you decline — no analytics cookies are set and no identifiers about you are stored or transmitted.

We use Google Consent Mode v2. The Google Analytics tag is present on every page, but it starts in a denied state: before you accept, it cannot write cookies, cannot read them, and cannot identify you. If you decline, it stays that way. Google still receives an anonymous, cookieless signal that a page was viewed — it contains no identifiers and cannot be linked to you, to your device, or to any other visit. Google uses these signals only to estimate overall traffic levels.

If you would prefer that no request reaches Google at all, a browser-level content blocker or a “Do Not Track” extension will prevent the tag from loading in the first place. Nothing on this site depends on it.

Cookies We Use (with consent)

Strictly Necessary (no consent required)

You can change your cookie preference at any time using the Cookie Settings link in the footer, or by clearing your browser's local storage.

Google Analytics & IP Anonymization

We use Google Analytics 4 with IP anonymization enabled. Google may transfer data to servers in the United States. Google's privacy policy is available at policies.google.com/privacy. You may also opt out globally using the Google Analytics Opt-out Browser Add-on.

5. Third-Party Services

All third-party providers are contractually required to protect your data and may only use it for the services they provide to us.

The last two rows work differently from the rest, and we would rather say so plainly: fonts and some photographs are fetched from Google's and Unsplash's servers while the page is drawing, so your IP address reaches them on every visit, before you have accepted or declined anything. That is not analytics and we receive nothing from it — it is how the page renders — but it is still a request leaving your browser, so it belongs in this table.

6. Data Retention

• Contact form submissions — retained for as long as necessary to manage your project and fulfill our legitimate business purposes, typically up to 3 years. You may request deletion at any time.
• Email communications — retained in our business email system for up to 3 years.
• Google Analytics data — retained for 14 months per Google's default settings, then automatically deleted.
• Server logs — retained by Vercel for up to 30 days for security and operational purposes.

7. Your Rights

Depending on your location, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — request that we limit how we use your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Withdraw consent — withdraw cookie consent at any time via the footer link

To exercise any of these rights, contact us at inquiry@kaztiki.com. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

If you are in the EU/EEA and believe we have not handled your data lawfully, you have the right to lodge a complaint with your local data protection authority.

8. Children’s Privacy

This site is meant for adults making decisions about a property. It is not directed at children, we do not market to them, and we do not knowingly collect personal information from anyone under 16.

If you believe a child has sent us information through this site, write to inquiry@kaztiki.com and we will delete it. You do not need to prove anything to us first.

9. California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant you additional rights:

• Know what personal information is collected about you
• Know whether your personal information is sold or disclosed and to whom
• Opt out of the sale of your personal information
• Request deletion of your personal information
• Not be discriminated against for exercising your privacy rights

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. The categories of personal information we collect are described in Section 2 above.

To exercise your California privacy rights, contact us at inquiry@kaztiki.com.

10. Australian Residents

If you are located in Australia, we handle your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

You have the right to access and correct personal information we hold about you. If you believe we have breached the Australian Privacy Principles, you may contact us directly or lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Personal information submitted through our contact form may be stored on servers located outside Australia (United States). We take reasonable steps to ensure overseas recipients handle your data consistently with the APPs.

11. Security

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• HTTPS encryption for all data in transit
• Row-level security on our database
• Access controls limiting who can view submitted data
• Security headers on all pages (HSTS, CSP, X-Frame-Options)

No method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

12. Contact Us & Cookie Settings

For any privacy-related questions, requests, or to change your cookie preference:

This policy was last updated on October 13, 2026. We may update this policy from time to time. Material changes will be noted at the top of this page with a revised effective date.