Grelin Health Data Privacy Policy

Data Privacy Policy

Last updated & verified: September 2026 • Policy Version 3.4

Approved Policy Updates Incorporated

Includes standardized Encryption, Network Safeguards, Ongoing Vulnerability Management, dedicated Privacy Rights section, statutory response timelines, and public form notices.

100% Verbiage Verified

1. Overview and Scope

Grelin Health ('Grelin', 'we', 'our', or 'us') is committed to protecting the privacy, security, and confidentiality of personal and healthcare information. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit our public website, interact with our services, or communicate with us.

Protected Health Information (PHI) is not collected through our public-facing website. When Grelin processes PHI on behalf of covered healthcare organizations, we do so strictly in our capacity as a HIPAA Business Associate pursuant to executed Business Associate Agreements (BAAs) and applicable laws.

2. Information We Collect

We may collect information directly from you when you submit an inquiry, request security documentation, register for a product demonstration, or contact our team.

Information collected through the website may include your name, professional title, organization or company name, business email address, phone number, and information relevant to your inquiry.

Our website automatically collects standard technical data such as IP address, browser type, device information, and interaction metrics to support site performance and security.

3. How We Use Information

We use personal information collected through our website solely for legitimate business purposes, including:

•Responding to inquiries and providing requested security or product documentation.
•Facilitating the procurement, onboarding, and contracting processes.
•Maintaining website functionality, performance, and security integrity.
•Complying with applicable legal, regulatory, and contractual obligations.

Grelin Health does not sell personal information or customer data.

4. Data Encryption

Updated Safeguard Standard

Grelin Health uses industry-standard encryption and security safeguards to protect information both in transit and at rest.

5. Network & Technical Security Safeguards

Updated Technical & Organizational Safeguards

Grelin Health maintains appropriate technical and organizational safeguards designed to protect information against unauthorized access, use, alteration, disclosure, or destruction.

6. Security Assessments and Vulnerability Management

Updated Ongoing Security Program

Grelin Health maintains processes to identify, assess, and address security vulnerabilities and risks as part of its ongoing security program.

7. Privacy Rights and Data Subject Requests

Dedicated Privacy Rights Section

Depending on applicable law and jurisdiction, individuals may have certain rights regarding their personal information, including the right to request access to, correction of, or deletion of their personal information, and to exercise other rights provided under applicable privacy laws. Requests may be submitted using the contact information provided in this Privacy Policy.

8. Privacy Request Response Timeline

Updated Statutory Timeline Standard

Grelin Health will respond to privacy requests within the timeframes required by applicable law.

9. Website Privacy Notice & PHI Disclaimer

PHI Form Notice Standard

Protected Health Information (PHI) is not collected through the public-facing website.

All public web forms, contact inquiries, and demonstration request forms display the following operational notice: 'Please do not submit Protected Health Information (PHI) or other sensitive patient information through this form.'

Healthcare data exchanges occur exclusively through authenticated, enterprise-configured channels subject to executed Business Associate Agreements.

Mandatory Form Notice Example

"Please do not submit Protected Health Information (PHI) or other sensitive patient information through this form."

10. Contact Information & Privacy Officer

If you have questions regarding this Privacy Policy, wish to submit a privacy request, or have questions regarding our security and compliance practices, please contact our Compliance and Privacy Team at:

Grelin Health Compliance Team

Email: compliance@grelinhealth.com