Privacy Policy
What this website collects, why, who processes it, how long we keep it, and what you can ask us to do with it.
Draft: this page has not yet been reviewed by a lawyer and may change before launch.
1. Who we are
This website is run by Supermerco, based in India. For anything in this policy, email hello@supermerco.com or use the contact form and choose “Privacy or data request”.
2. What this policy covers
This policy covers personal data collected through this website. It does not cover work we do for a customer, which is governed by a separate written agreement.
Our product constructs synthetic patients from a specification. It does not take in real patient records, so no patient data is collected through this website. Please do not send us real patient information in any form or email.
3. What we collect
- When you use the contact form
- Your name, email address, organisation (optional), the kind of enquiry, your data situation (optional) and your message. We also store a shortened, salted one-way hash of your IP address, used only to limit abuse. We cannot turn it back into your IP address.
- When you subscribe to product updates
- Your email address, whether the subscription is pending, active or cancelled, and a random code used in the confirmation and unsubscribe links.
- While you write a message
- The contact form keeps a draft in your own browser (local storage), so nothing is lost if you leave the page. We do not receive it until you press send, and it is cleared once your message is sent.
- Server logs
- When enabled, our server logs the time, address path, status and duration of requests to our forms, with a request number. These logs contain no IP address and no form contents. Our hosting provider may keep its own standard access logs.
4. What we do not do
- No analytics, advertising or tracking cookies, and no third-party trackers.
- No third-party scripts or fonts: everything on this site is served from our own server.
- We do not sell your data or use it for advertising.
6. How we use it
- To reply to your enquiry and follow up on it. The basis is your request, and our legitimate interest in answering it.
- To send product updates you asked for. The basis is your consent, which you can withdraw with the unsubscribe link in every email.
- To protect the website from spam and abuse. The basis is our legitimate interest in keeping it working.
8. How long we keep it
- Enquiries are deleted automatically 24 months after they arrive, or sooner if you ask.
- Unconfirmed subscriptions are deleted automatically after 30 days.
- If you unsubscribe, we keep your address marked as unsubscribed so we do not email you again. Ask us and we will erase it completely.
9. Your rights
Depending on where you live, including under India’s Digital Personal Data Protection Act, 2023 and, where they apply, the EU and UK GDPR, you can ask to see the personal data we hold about you, correct it, delete it, or withdraw consent. You can also complain to your data protection authority.
To make a request, email hello@supermerco.com or use the contact form. We will confirm who you are using the email address the data is linked to, and we aim to reply within 30 days.
10. Security
The site runs over HTTPS. IP addresses are stored only as salted hashes. The admin area is protected by a hashed password, rate limits and secure session cookies. No system is perfectly secure; see our security page to report a problem.
11. Children
This website is meant for professionals and is not directed at anyone under 18.
12. Changes to this policy
If we change this policy, we will update the date at the top of this page.