Privacy notice
This notice covers the grema.io website, email sent to hello@grema.io, and information we handle when we deliver an audit or other engineering engagement under the Grema name.
Do not send patient data or credentials
Please do not email us patient data, personal health information, passwords, access keys or other credentials. We do not need patient data to do our work. If you send some by mistake, we will delete it and tell you.
What this website collects
- No cookies, no analytics, no advertising or tracking scripts, no forms.
- The site loads nothing from other websites.
- The site is served by Cloudflare, which processes standard request data (such as IP address, browser user agent, the page requested and the time) to deliver and protect the site and keeps it in its logs. See Cloudflare's privacy policy.
What you choose to email us
If you email us, we receive your email address, name and whatever you write, such as your company, product, cloud and model providers and target customers. We use it to reply, to scope and schedule work, and to send a statement of work and invoices. We do not sell it, and we do not share it except with the service providers that deliver and store our email and handle payments.
Information we handle during an engagement
During an engagement we work from material the client chooses to share, such as architecture documents, configuration, infrastructure code, vendor agreements, billing data and read-only access to systems. This material is covered by a signed NDA and statement of work, which set how it is used, kept and returned or deleted. Where those documents say something different from this notice, they apply. We design our work so that we do not access patient records.
How long we keep information
We keep emails about work that did not go ahead for up to 12 months, or less if you ask us to delete them. We keep engagement material only as long as the statement of work allows, and remove our access to client systems when the engagement ends. Business records such as contracts and invoices are kept as long as the law requires.
Your choices
You can ask to see, correct or delete personal information you sent us by emailing hello@grema.io. If you are not satisfied with our answer, you may contact the Office of the Privacy Commissioner of Canada or your local privacy regulator.
Where information is held
We are a Canadian company. Email, payment and Cloudflare data may be processed outside Canada, including in the United States, by our service providers.
Changes
If this notice changes, we will update the effective date above.