Privacy Policy

Inquiries: what we handle and why

For an ordinary email inquiry, we handle your sender address, name or organization if provided, subject, message body, and any attachments you send. We use these only to confirm receipt, reply, follow up, and handle the request in the message. Until Workspace is registered, inquiries and replies use the same business-use consumer Gmail mailbox; the sender shown on our reply may differ from [email protected].

Received inquiry mail and our sent replies remain in that same Gmail, including quoted original content and attachments included with the thread. We keep no separate company copies outside that mailbox.

For telephone inquiries, we create only the caller number and notes needed to reply and follow up on a company device. The public line uses an SK-branded telecommunications service. Call forwarding and call-recording add-ons are not configured. Carrier and device records are separate from company-created notes; other device-level recording, backup and sync settings have not been independently confirmed.

Please do not send patient information, medical or insurance records, EMR exports, medical images, backups, passwords, API keys, payment details, government ID numbers, or other sensitive information. This is not a channel for regulated medical data.

Retention and deletion

We keep received and sent inquiry email threads, including quoted original content, attachments, related drafts and trash, and company-created telephone inquiry notes for no more than six calendar months after the last substantive contact about each inquiry. We delete them earlier when the purpose has ended and they are no longer needed. Internal handovers, automatic replies, or contact made only to prolong retention do not restart this period.

Unneeded spam and clearly misdirected messages are deleted without delay once identified. At deletion, we also empty the relevant mailbox trash and remove records recoverable by the company; there is no additional 30-day grace period. You may request earlier deletion. Any legally required exception must have a specific basis, minimum scope and end date, with the record kept separately rather than extending all inquiries.

This is the company's maximum business retention period, not a statutory period or the retention schedule for provider logs and backups. Providers may erase their internal backups on separate schedules; we do not promise immediate physical deletion from every provider backup.

No accounts or member inquiries today

This website has no accounts or member inquiries. An ordinary past inquiry will not be automatically combined with future member data or given a new retention period. Any login or member feature requires a separate privacy review and updated public disclosure before it begins.

If we add a contact form

This site has no contact form. If we add one, we will publish what it asks for, why, who handles it, how long submissions are kept, how deletion works, and how to make a privacy request before it accepts a message.

Current safeguards

Currently only the company representative accesses the inquiry mailbox, and two-factor authentication is enabled. Company-created telephone inquiry notes are handled separately from carrier and device records. We limit inquiry handling to what is needed and manage deletion through a regular review.

Adding staff does not automatically grant access. Before access or handling changes, we review the need, minimum permissions, authentication, handover and deletion responsibilities. These measures are not a claim of security certification or complete protection.

Your theme preference

The browser stores your light or dark theme choice in localStorage under nmm-theme. It is used only to remember that display preference, is not sent to our server by this feature, and can be removed by clearing this site's browser data. It is not an analytics identifier.