Privacy Policy

Introduction

GRS Health, developed and operated by Grs Healthsupport Limited, is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website at www.grshealth.mom, use our services, or otherwise interact with us. As a provider of computer systems design and related services within the Professional, Scientific, and Technical Services sector, we understand the critical importance of data protection, particularly in healthcare-adjacent technology environments.

Our organization is based at 40 Southwoods Cres, Barrie - L4N 9P8, Canada, and we operate in accordance with Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act, as well as applicable provincial health information protection legislation. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

Information We Collect

In the course of providing our computer systems design and consulting services, we may collect several categories of information. The types of data we gather depend on the nature of your interaction with GRS Health and the services you request. We collect this information through lawful and fair means, with your knowledge and consent where required.

Information You Provide Directly

When you contact us via email, phone, contact forms, or in-person meetings, you may voluntarily provide us with information such as your name, email address, telephone number, organization name, job title, and details about your technology requirements. When you engage us for professional services, we may also collect business information necessary to execute our consulting engagements, including system specifications, infrastructure documentation, and operational requirements.

Information Collected Automatically

When you visit www.grshealth.mom, our servers automatically record certain technical information through server logs and standard web analytics tools. This may include your Internet Protocol address, browser type and version, operating system, referring URL, pages visited, time and date of your visit, and time spent on each page. This data is collected in an anonymized or pseudonymized form and is used solely for website performance analysis, security monitoring, and service improvement.

Cookies and Tracking Technologies

Our website may use essential cookies and similar technologies to ensure proper functionality and to analyze site traffic patterns. Essential cookies are necessary for the website to operate and cannot be disabled in our systems. We do not use advertising cookies, third-party tracking pixels for marketing purposes, or any technology that tracks your browsing activity across other websites. You can configure your browser to refuse all cookies or to indicate when a cookie is being sent; however, some features of the website may not function properly without them.

How We Use Your Information

GRS Health and Grs Healthsupport Limited use collected information for legitimate business purposes, always in accordance with applicable data protection laws. We do not sell, rent, or trade your personal information to third parties for their marketing purposes. The information we collect is used for the following purposes:

1. Service Delivery: To provide, maintain, and improve our computer systems design, consulting, and integration services, including the execution of contracts and service agreements with our clients.
2. Communication: To respond to your inquiries, provide technical support, send service-related announcements, and communicate about your projects and engagements with our team.
3. Business Operations: To manage our client relationships, process billing and invoicing, maintain internal records, and fulfill legal and regulatory obligations.
4. Website Improvement: To analyze aggregated usage patterns on our website, identify areas for improvement, and enhance the user experience for all visitors.
5. Security and Fraud Prevention: To monitor our systems for potential security threats, detect and prevent fraudulent or unauthorized activity, and maintain the integrity of our technology infrastructure.
6. Legal Compliance: To comply with applicable laws, regulations, court orders, or government requests, and to enforce our terms of service and other agreements.

Legal Basis for Processing

Depending on your jurisdiction and the nature of our interaction, our processing of personal information may be based on one or more of the following legal grounds: the performance of a contract with you or your organization, our legitimate business interests that do not override your fundamental rights and freedoms, compliance with legal obligations imposed upon us, and your explicit consent where required by applicable privacy legislation. Where we rely on consent as a legal basis, you have the right to withdraw that consent at any time by contacting us using the details provided in this policy.

Data Sharing and Disclosure

We may share your personal information in limited circumstances, always under strict confidentiality obligations and in compliance with applicable law. These circumstances include:

Service Providers and Subcontractors

We may engage trusted third-party service providers to perform functions and process data on our behalf, such as cloud hosting, email delivery, analytics, payment processing, and IT support. These providers are contractually bound to protect your information, process it only according to our documented instructions, and comply with the same level of privacy protection that we maintain.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a portion of our business assets, personal information we hold may be among the assets transferred. We will notify you via email or prominent notice on our website of any such change in ownership or control of your personal information, as well as any choices you may have regarding your data.

Legal Requirements

We may disclose your information if required to do so by law, including to respond to subpoenas, court orders, or legal processes, or to establish, protect, or exercise our legal rights. We will make reasonable efforts to notify you of such disclosure unless prohibited by law or where notification would compromise an ongoing investigation.

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting obligations. The specific retention period depends on the nature of the data and applicable legal requirements. When personal information is no longer needed, we securely delete or anonymize it. Our retention practices are based on the following criteria: the duration of our business relationship with you, any applicable statute of limitations, legal retention obligations under Canadian federal and provincial law, and whether retention is advisable in light of our legal position.

Data Security

Grs Healthsupport Limited implements appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include but are not limited to: end-to-end encryption for data in transit using industry-standard TLS protocols, encryption at rest for stored data, multi-factor authentication for administrative access to systems, regular security audits and vulnerability assessments, employee training on data protection and privacy best practices, physical security controls at our facilities, and incident response procedures tested and maintained for potential data breaches.

While we strive to protect your personal information, no method of electronic storage or transmission over the Internet is entirely secure. We cannot guarantee absolute security, but we are committed to responding promptly to any security incidents and notifying affected individuals and regulatory authorities as required by applicable law.

Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information. These rights may include:

• Right of Access: You may request confirmation of whether we process your personal data and, if so, obtain a copy of that data along with information about how it is processed.
• Right of Rectification: You may request that we correct any inaccurate or incomplete personal information we hold about you.
• Right of Erasure: In certain circumstances, you may request that we delete your personal information from our systems.
• Right to Restrict Processing: You may request that we limit how we process your personal information under certain conditions.
• Right to Data Portability: Where applicable, you may request a copy of your data in a structured, machine-readable format and have it transmitted to another controller.
• Right to Object: You may object to processing of your personal information based on our legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at service@grshealth.mom or call +17312621192. We will respond to your request within the timeframe required by applicable law, typically within thirty days. We may need to verify your identity before processing your request to protect your privacy and security.

International Data Transfers

GRS Health is based in Canada, and our primary data processing operations take place within Canada. However, some of our service providers may process data in other jurisdictions. When we transfer personal information across borders, we implement appropriate safeguards such as standard contractual clauses, adequacy decisions where recognized, or other legally recognized transfer mechanisms to ensure that your data receives a level of protection equivalent to that provided in your home jurisdiction.

Children’s Privacy

Our website and services are not intended for individuals under the age of sixteen. We do not knowingly collect personal information from children. If we become aware that we have inadvertently received personal information from a child under the age of sixteen without verifiable parental consent, we will take steps to delete such information from our systems promptly. If you believe we may have information from or about a child under sixteen, please contact us immediately.

Third-Party Websites

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by GRS Health or Grs Healthsupport Limited. This Privacy Policy does not apply to those third-party properties. We encourage you to review the privacy policies of any third-party services you access through our website. We assume no responsibility for the content, privacy practices, or data handling of third-party websites.

Privacy Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or operational needs. When we make material changes, we will post the revised policy on this page with an updated Last Updated date and, where appropriate, provide notice through our website or via email to clients with active engagements. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website and services after any changes to this policy constitutes your acceptance of the revised terms.

Complaints and Regulatory Recourse

If you have concerns about how GRS Health handles your personal information, we encourage you to contact us first so we may address your concerns directly. You may reach our privacy officer at service@grshealth.mom or at our physical address: Grs Healthsupport Limited, 40 Southwoods Cres, Barrie - L4N 9P8, Canada. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada or the relevant provincial privacy commissioner in your jurisdiction.