Privacy Policy | Nostrum Health

1. Information We Collect

We collect information you provide directly, including your name, email, phone number, company name, product information, and the message or application details you submit. Our hosting and security providers may also process basic technical request data such as IP address, browser type, requested page, and timestamp. The contact endpoint uses a short-lived IP-address counter to control automated abuse; the application counter is designed to expire after 15 minutes.

2. How We Use Your Information

We use your information to review enquiries and applications, scope potential services, communicate with you, operate and secure the website, maintain appropriate business records, and meet legal or regulatory obligations that apply to an engagement.

3. Information Sharing

We do not sell your personal information. We disclose it only where reasonably required to operate the website or a contracted engagement, to approved service providers working under appropriate obligations, to authorities where legally required, or with your direction or consent.

4. Service Providers and Processing Outside Canada

Website hosting, security, Microsoft 365 communications, and other contracted business systems may process or store information in Canada or outside Canada, including the United States. Information processed in another jurisdiction may be available to courts, law-enforcement, or regulatory authorities under that jurisdiction's laws. We limit disclosure to the information reasonably required for the applicable service.

5. Retention

We retain enquiry, application, and engagement information only for as long as reasonably required to assess or perform the requested work, maintain appropriate business and regulatory records, resolve disputes, enforce agreements, and meet legal obligations. Retention depends on the record type, the engagement, applicable regulatory requirements, and any active legal hold. When information is no longer required, we delete or anonymize it using reasonable procedures.

6. Data Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the information and the service involved. No internet transmission or storage method is completely secure, so we cannot guarantee absolute security.

7. Cookies

The public website does not currently use optional advertising or analytics cookies. Essential technical storage may be used only where required for security or a feature you request. See our Cookie Policy for the current details.

8. Access, Correction, and Complaints

You may request access to or correction of your personal information, ask about retention or deletion, withdraw consent where applicable, or make a privacy complaint by contacting the Privacy Officer. We may need to verify your identity. Rights, exceptions, and response periods depend on the law applicable to the request. If a concern is not resolved, you may contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy authority.

9. Privacy Officer and Corporate Contact

Privacy Officer, Nostrum Health Inc., 1500 Upper Middle Road West, Unit 6, Oakville, Ontario L6M 0C2. Email hello@nostrumhealth.ca.