1. Who we are
Elmara Technologies Inc. ("Elmara", "we", "us" or "our") is a company incorporated in British Columbia, Canada. We operate the website at elmaratech.com (the "Site") and publish software applications ("apps").
Elmara Technologies Inc. is responsible for the personal information under its control. Our Privacy Officer is accountable for our compliance with this policy and can be reached at [email protected] or by mail at Elmara Technologies Inc., Attention: Privacy Officer, 16110 Fraser Hwy, Surrey, BC V4N 0G3, Canada.
2. What this policy covers
This policy describes how we handle personal information when you visit the Site, use our contact form, or email us. It also sets out the general principles that apply to our apps. Each app has an app-specific notice that describes the information that app handles; see App-specific notices.
We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA), and with other privacy laws that apply to us.
3. Information we collect
Contact form and email
When you use our contact form, we collect your name, your email address, your company name if you provide it, the topic you choose and the content of your message. When you email us directly, we receive your email address, your name as it appears in your email, the content of your message and any attachments, and the standard technical information that accompanies email, such as the date and the servers it passed through.
Please do not send us sensitive information, such as passwords, payment card numbers or government identification numbers, through the form or by email.
Server logs
When you visit the Site, our web servers automatically record basic information about each request: your IP address, your browser's user agent string, the URL requested and the date and time of the request. We use these logs only for security, to detect and prevent abuse, and to keep the Site working.
Information we do not collect
The Site does not ask you to create an account, does not collect payment information and does not use cookies, analytics or advertising technologies, as described in section 5.
4. How we use information
We use personal information only for the purposes for which it was collected:
- to read and respond to your inquiry or support request, and to keep a record of our correspondence with you;
- to provide, maintain and support our apps and services;
- to operate and secure the Site, including detecting and preventing spam, abuse and attacks;
- to meet our legal obligations and to establish, exercise or defend legal claims.
We do not sell personal information. We do not use information collected through the Site for advertising, and we do not use it to build profiles of visitors.
5. Cookies, analytics and advertising
The Site does not use cookies. It does not use analytics services, tracking pixels, advertising networks or social media plugins, and it does not load content from third-party websites. No cookie banner is shown because no cookies are set by us.
Our content delivery and security provider, Cloudflare, may set a strictly necessary security cookie in limited cases, for example when it checks whether a request comes from an automated attack. Such a cookie is used only to protect the Site and is not used for tracking or advertising.
6. Consent
When you send us a message, you consent to our use of the information you provide to respond to you and for the other purposes described in this policy. You may withdraw your consent at any time by contacting us, subject to legal or contractual restrictions. If you withdraw consent, we may be unable to continue a conversation or provide a service that depends on that information. Server logs are collected because they are necessary to operate and secure the Site.
7. Service providers and disclosure
We use a small number of service providers to operate the Site and our services. They process personal information on our behalf, only as needed to provide their services to us, and are required to protect it.
- Hosting. The Site and our services run on servers we operate, leased from hosting providers in the United States.
- Content delivery and security. Requests to the Site pass through the network of Cloudflare, Inc., which processes your IP address and request information to deliver the Site and protect it against attacks. Cloudflare's handling of this information is described in the Cloudflare Privacy Policy.
- Email. Contact form messages are delivered to our company mailbox by email through our own mail system. We use email service providers to send, receive and store our email.
We may also disclose personal information when required or permitted by law, for example in response to a valid legal order; to protect the rights, safety or property of Elmara, our users or others; or to a successor organization as part of a merger, acquisition or sale of all or part of our business, in which case the information would remain subject to protections consistent with this policy.
8. Where information is processed
Elmara is located in Canada. The Site is hosted on servers in the United States, in Los Angeles and Dallas, and our service providers may process and store information in the United States and other countries. Information processed outside Canada is subject to the laws of the country where it is held and may be accessible to the courts, law enforcement and national security authorities of that country. By using the Site or contacting us, you understand that your information may be transferred to and processed in the United States.
9. Retention
- Inquiries and correspondence. We delete contact form messages and related email 24 months after our last contact with you, unless we need them for an ongoing matter, such as an open support request, a business relationship or a legal obligation.
- Server logs. We keep server logs for up to 90 days for security and abuse prevention, and then delete them. We may keep specific log entries longer if they are needed to investigate a security incident.
When information is no longer needed, we delete it or make it anonymous.
10. Security
We protect personal information with safeguards appropriate to its sensitivity. The Site is served only over encrypted connections (HTTPS), access to our systems is limited to people who need it to do their work, and we keep our software up to date. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach of security safeguards involving your personal information creates a real risk of significant harm to you, we will notify you and the relevant authorities as the law requires.
11. Our apps
Our apps collect only the information they need to work. Depending on the app, this may include account details such as your name and email address, content you create or store in the app, and technical information such as device type, operating system version and diagnostic data needed to keep the app running correctly.
Each app's notice explains what that app collects, why, how long it is kept, which service providers are involved and how to delete your data. An app's notice supplements this policy; if the two differ, the app's notice applies to that app. The privacy information shown on an app's App Store or Google Play listing summarizes the same practices.
To delete an app account and its data, or to ask any question about an app's privacy practices, email [email protected].
12. Your rights in Canada
Under PIPEDA and BC PIPA, you have the right to:
- ask whether we hold personal information about you, and request access to it;
- ask how we have used your information and to whom we have disclosed it;
- ask us to correct information that is inaccurate or incomplete;
- withdraw your consent, as described in section 6.
To make a request, email [email protected] or write to our Privacy Officer at the address in section 16. We may ask for information to verify your identity before acting on a request. We respond within 30 days, or within any longer period the law allows, in which case we will tell you why. If we cannot grant a request, for example because the law permits or requires us to refuse it, we will explain why in writing. There is no charge for a request.
Complaints. If you have a concern about how we handle your personal information, please contact our Privacy Officer first so that we can try to resolve it. If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada or with the Office of the Information and Privacy Commissioner for British Columbia, depending on which law applies to your concern.
13. Notes for users in the United States
Residents of some US states, including California under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), have rights over their personal information. Depending on where you live, these may include the right to:
- know what personal information we collect, use and disclose, and obtain a copy of it;
- correct inaccurate personal information;
- delete personal information;
- opt out of the sale or sharing of personal information, targeted advertising or profiling.
We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising. In the past 12 months, the categories of personal information we have collected are those described in section 3: identifiers and contact details, the content of your messages, and internet activity information in our server logs. We collect them from you and from your browser, use them for the purposes in section 4 and disclose them only to the service providers in section 7.
How to make a request. Email [email protected] with the subject line "Privacy request", tell us what you are asking for and the state you live in, and include the email address you used with us. We will confirm receipt, verify your identity by matching the information you provide with the information we hold, and respond within the time required by your state's law. You may use an authorized agent to make a request on your behalf; we may ask the agent for proof of authorization and ask you to verify your identity directly. If we decline your request, you may appeal by replying to our decision, and we will review the appeal and respond in writing. We will not discriminate against you for exercising any of these rights.
14. Children
The Site is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has sent us personal information, contact us at [email protected] and we will delete it.
15. Changes to this policy
We may update this policy as our services change or the law requires. We will post the updated policy on this page and change the effective date at the top. If we make a significant change to how we handle personal information, we will describe the change clearly on this page before it takes effect.
16. Contact us
For any question or request about this policy or our handling of personal information, contact our Privacy Officer:
- [email protected]
- Elmara Technologies Inc., Attention: Privacy Officer, 16110 Fraser Hwy, Surrey, BC V4N 0G3, Canada
17. App-specific notices
Privacy notices for individual Elmara apps are listed in this section as each app is published. Each notice has its own page under elmaratech.com/privacy/ and is linked from the app's App Store or Google Play listing and from within the app itself. Where no app notice applies, this policy describes our practices.