Privacy Policy

How Harmelo Corp. collects, uses, keeps and protects information on Infrastructure Condition Index. ICI has no passwords. You can use every public tool without signing in. If you choose to save a building, you can sign in with a secure link sent to your email address. Your check answers are calculated and not kept unless you choose an optional feature to save them.

Who is responsible

Infrastructure Condition Index (ICI), available at conditionindex.com, is operated by Harmelo Corp. Harmelo Corp. is the organization responsible for the personal information described in this policy. This policy covers conditionindex.com only. Asset History Report and the Harmelo platform are separate products with their own privacy terms.

The person accountable for privacy at Harmelo Corp. is the Chief Executive Officer, Harmelo Corp., who can be reached at partnerships@harmelo.com or by mail at Harmelo Corp., 3000, 421 7th Ave SW, Calgary, Alberta T2P 4K9, Canada.

This policy is written to match what the site actually does. If the site adds anything else that collects or stores information, this policy changes first.

Automated processing

The result is produced by an automated system, not a person. The figures shown are calculated by formula from the answers you entered. No inspection is performed, no property is visited, and no professional reviews a Condition Profile before it is shown to you.

The reasoning behind each finding is shown beside it. Where the information provided cannot support a result, the profile says so instead of estimating. An automated system can be wrong. Where a profile is used by another party in a decision affecting you, you can ask us for the reasoning behind it and for review by a person.

This site does not accept document uploads. We do not use what you submit here to train any system.

What happens when you run the check

The check is a short questionnaire. Nothing is sent while you are answering it. When you finish, your browser sends your answers to a server function on this same site, where the methodology runs. The methodology is confidential and runs on the server for that reason.

The function calculates the result and returns it. Our code does not store your answers or the result. A Condition Profile is stored only if you use the optional feature to save it, review exactly what will be stored, and confirm. The request passes through our hosting provider, described below.

The check never asks for your name or street address. An email address is asked for only if you choose an optional feature that needs one.

The Building Almanac and location lookups

The Building Almanac, the Seasonal calendar and the location step of the check look up local conditions for an area. For Canada you enter a postal code or a postal area; only the postal area, the first three characters of a postal code, is used. No street address is asked for. For the United States you enter a five-digit ZIP code.

To look up local conditions, your browser sends that postal area or ZIP code to server functions on this site. For Canada, only the three-character postal area is sent. For the United States, the full five-digit ZIP code may be sent. Our code uses it only to answer that lookup and does not store it. It is not written to any saved profile, contact, retrofit or other record, and the site uses no analytics. Our own logging of location lookups is off, and even where turned on it records only a shortened area, never a full ZIP code. As with every request, our hosting provider's request logs include the address requested, which can contain the value you looked up; those logs are described below.

A saved profile or retrofit enrollment keeps only the postal region: the first three characters of a Canadian postal code, or the first three digits of a US ZIP code.

What is held in your browser

Four items are held in your browser's session storage, which your browser clears when you close the tab. Nothing is written to local storage. The only cookie this site sets is the sign-in cookie described below, and only after you sign in.

ici.check.answers.v1 holds your in-progress check answers, so moving between steps or reloading does not lose them. It leaves your browser only when you finish the check and it is sent for calculation.
ici.check.v1 holds the returned result so the result page can show it, and the answers needed to save that result, without any serial number you entered. It leaves your browser only if you choose to save the profile.
ici.projectrequest.v1 holds what you typed on the project request page. It never leaves your browser.
ici.lookup.handoff holds the Canadian postal area or five-digit US ZIP code you typed into the home-page lookup, to carry it to the Building Almanac. The Almanac removes it as soon as it reads it; otherwise it is cleared when the tab closes. It leaves your browser only when the Almanac looks up local conditions for it, as described above.
__Host-ici_session is a cookie set only when you open a sign-in link to your ICI account. It holds a random value that means nothing on its own; it contains no email address, name, building detail or identifier we use elsewhere. It is sent only to conditionindex.com over a secure connection, cannot be read by the page's scripts, and is not sent when another site links to ICI. It lasts at most 7 days, ends after 24 hours without use, and is removed when you sign out. It is strictly necessary to keep you signed in and is not used for advertising, analytics or tracking.

If your browser refuses storage, the site continues to work and simply does not remember between steps. Starting the check over clears the check items.

Equipment tools

The equipment lookup, the recall and safety notice browser and the equipment guide run in your browser against data published with the site. What you type or select in them is not sent anywhere and is not stored. The one exception is optional: if you choose retrofit program notifications on the equipment lookup, only the published equipment reference you tick is sent with that request. Your search itself is never sent.

Anonymous counts of tool answers

When you answer a question in one of the free tools, we may record one thing: that one more person chose that answer to that question. Nothing else is recorded.

We do not record who you are, where you are beyond your country, what building you were thinking of, or the set of answers you gave. Each answer increases a separate count on its own. There is no record that any particular answer came from the same person or the same visit as any other answer, so a count cannot be traced back to you, to a visit, or to a building. In plain terms we learn sentences such as “of the people who answered, most did not know the installation year”, and nothing more.

These counts never include your name, email address, account, address, postal code, ZIP code, coordinates, any text you typed, your IP address, your browser or device, a session identifier, or a time more precise than the day.

Answers can only fall into a fixed list of options set in advance. An answer that does not match that list is discarded rather than recorded.

Québec. These counts are not collected from Québec. If you tell us you are in Québec, nothing from that visit is counted, and requests reaching us from Québec are refused. To refuse them we look at the region your connection reports at the moment of the request; we do not keep it.

Turning it off. If your browser sends a Global Privacy Control or Do Not Track signal, nothing is counted. You do not need to tell us anything or set anything up with us.

Why we do this. To understand which tools are used and which questions people cannot answer, so that we can improve them, and to publish general findings about buildings. Any figure published describes a group, never an individual or a building.

These counts are not used to make any decision about you, they do not affect a Condition Profile, and they are not shared as individual records because no individual record exists.

Research contributions (not offered at present)

This optional choice is not currently offered. If it is offered, Check a building will show an unticked box, never required and never shown in Québec, to include your answers in ICI research on the condition of buildings.

A research contribution would hold only: the day, the wording version you agreed to, your country and province, territory or state, your building type and the closed-list answers about its systems and items. It would not hold your email address, name, account, address, postal code, ZIP code, serial number, any text you typed, your IP address or your browser.

Each research contribution is kept for 24 months from its day and then deleted. General statistics that no longer contain any individual contribution may be kept separately.

Optional features

The features in the next sections are optional and separate from one another. Each has its own choice, none is ticked in advance, and none is implied by another. Saving a profile does not sign you up for news or marketing, and does not sign you up for retrofit program notifications. Asking for Building Alerts early access does not sign you up for Building Alerts, ICI news or retrofit program notifications. Requesting an access link, opening an email, using the site, selecting equipment or giving an email address for one purpose does not give permission for any other.

These features are available in Canada, except Québec, and in the United States. You can use every part of ICI without them.

Where the optional features are offered

The public Infrastructure Condition Index tools, including the check, the Building Almanac and the equipment tools, are available in Québec. The optional features that collect personal information are not currently available in Québec: generic contact choices, Building Alerts early access, retrofit program notifications, saved profiles, saved-profile access and updates, and program referrals. The anonymous counts of tool answers described above are also not collected from Québec, even though they hold no personal information, so that the same boundary applies to everything recorded. They will be offered there only in a later, separately approved release, after French materials and the required privacy impact assessment are complete.

When you use an optional feature from Canada, you are asked for your province or territory. It is used only to decide whether the feature is available where you live, and is checked against the postal region where one is given. It is not stored. We never work out where you are from your IP address or your language.

Saving a building and its Condition Profile

If you choose to use this optional feature ("Save this building and its Condition Profile"), ICI shows you every detail that will be stored before anything is saved, and saves only after you confirm that exact record. Saving is never required to use the site.

The saved record contains:

your email address, so that you can come back to the saved building, update it or delete it, and so we can send the service messages described below;
your country and a postal region: the first three characters of a Canadian postal code, or the first three digits of a United States ZIP code;
your building type and the year the profile was calculated for;
which main systems you said the building has: heating, cooling, hot water, electrical panel and roof;
for each system, envelope item and piece of equipment used by your profile (for example heating, cooling, hot water, the electrical panel, the roof, windows, exterior doors, garage door, insulation, siding or cladding, foundation, air sealing, ventilation, sump pump, backwater valve and the other items the check lets you add): its type, the installation or replacement year you entered, how you know, and whether you indicated a document, a recorded issue or a documented repair;
the building answers the report used: below-grade space, roof form, roof drainage, sump pump, backwater valve, and whether water has entered the building before;
your Condition Profile result: the overall index, band and coverage, each component result with its age, typical life and expected replacement year, findings and information gaps;
the methodology, build and local evidence data versions used to calculate it, and when;
only if you tick them: the brand and model you entered, the published equipment reference associated with them, your warranty and permit answers, and the community you selected for local context;
a record of your confirmation: the wording you agreed to, the version of this policy in effect, and the time.

ICI does not store serial numbers, complete street addresses, full postal codes or ZIP codes, uploaded files or documents, copies of the page, HTML or PDF files, free-text notes about the building, or your province or territory. The saved record is stored under random identifiers that do not use your email address, postal code or address.

We use the saved record to show it back to you, to reproduce and update your Condition Profile when you ask, and to send the service messages described below. Each update recalculates your Condition Profile on the server, shows you the result to review, and is saved only when you confirm it, as a new version. Earlier versions are kept unchanged until the saved building is deleted.

What ICI remembers about a saved building

When you save or update a building, ICI records each detail you confirmed as a separate dated entry: for example the type of each main system, its installation year, how you know it, and the building answers the report used. Entries are never edited afterwards. When a detail changes, ICI adds a new entry and keeps the earlier one, so you and we can see what ICI knew at each point.

From these entries ICI keeps a current summary of the building: what is known, what you told us you do not know, and what was never answered. A detail you gave earlier stays part of the building's current summary until you change it or delete the building. It is not dropped because a later save did not repeat it.

Where ICI offers an option to remove a detail, removing it is recorded as its own entry. The earlier value stays in the building's history, and the detail stops being part of the current summary. ICI never treats a detail you left blank or did not repeat as a removal.

Everything in these entries is what you reported. Saving does not verify it, and ICI does not treat it as documented evidence. Saving with this history requires your confirmation of the wording shown when you save.

Recalculating a saved building's Condition Profile

When a change you save affects the Condition Profile calculation, ICI may calculate it again from the building's current summary, using the same method as the public check. Each result is kept as a separate dated record with the method version used. Earlier results are never changed. If a calculation cannot be completed, ICI records that it failed and does not show an older result as if it were current.

Equipment identity from a serial number (not offered at present)

ICI does not currently ask for or keep equipment serial numbers. If this feature is offered in future, this section will apply, and ICI will ask for your permission when you use it: a serial number you enter would not be stored; it would be converted on ICI's servers into a code using a secret key, and then discarded. The code would be kept only with that saved building, never linked across buildings, recorded as unverified, never shared, and deleted with the building.

Your ICI account

Your ICI account is the email address you used to save a building. An account exists only once you have saved something: there is no separate sign-up.

Signing in shows that you could receive email at that address when you signed in. It does not show who you are, that you own or manage any building, or that you have any authority for an organization, and it does not create or connect an account in Asset History Report or Harmelo.

Your account holds your email address; a record of each time you proved you could receive email at it (the date and time); your sign-in sessions and the sign-in links sent to you, stored only as one-way hashes; a marker when you sign out everywhere; and the buildings you saved. It holds no name, phone number, street address or demographic information.

Creating or using an account does not give permission for marketing, Building Alerts, retrofit program notifications, research, or pilot or partnership contact. Each of those is a separate choice.

You can sign out of one browser, or sign out everywhere, which ends every session for your account at once.

Secure access links and sessions

If you choose to use this optional feature, you reach your saved buildings through a secure link sent by email. There is no password. You enter your email address, your country and, for Canada, your province or territory, and see the same message whether or not the address has saved profiles. If it does, we send a link that works once and expires 30 minutes after it is sent. Asking for another link cancels any earlier one.

A sign-in link to your ICI account works the same way, except that it expires 15 minutes after it is sent.

Opening a link removes it from the address bar. A saved-profile access link starts a session that lasts at most 20 minutes, held in that page only and ended when you close the page. An account sign-in link starts a session held in the sign-in cookie described above, lasting at most 7 days and ending after 24 hours without use. Each sign-in is recorded as the date and time of activity, which keeps your saved buildings from being treated as unused.

Requests for links are rate limited, and repeated requests for one address produce at most a few messages. Access links and session tokens are stored only as one-way hashes.

Updating, withdrawing and deleting

From your account or the saved profiles page you can view your saved buildings and earlier versions, update a profile, stop retrofit program notifications while keeping the profile, and delete one saved building or everything saved for your email address. Deletion asks for a separate confirmation first.

Withdrawing your permission to keep a saved profile is treated as a request to delete it. Any retrofit program notification permission for a deleted building is withdrawn first. Deletion of the saved records is completed within 30 days after the request is reconciled, and we email a confirmation that contains no building details. Once a deletion request is accepted, the building no longer appears as saved; if the deletion is interrupted, it is completed automatically by the daily retention process.

Deleting a saved building also deletes its dated entries, its current summary, its recalculated results and any equipment codes kept with it. Deleting everything saved for your email address also deletes your ICI account: its sign-in sessions, sign-in links and the records of your sign-ins.

If a saved building has not been used for 24 months, we email you. If nothing resumes within 60 days of that notice, it is deleted. Months are counted as calendar months.

You can also write to partnerships@harmelo.com for any of these requests.

Optional contact choices

If you choose to use this optional feature, a short contact form on the Condition Profile page, the equipment lookup and the Building Almanac lets you ask to be kept informed about ICI, or to be contacted about a pilot or a partnership. Each is a separate choice.

If you use it, we collect the email address you enter; your name, organization and role if you add them; your country; how you heard about ICI if you say; the choices you tick; which page you were on; and campaign tags from the page address, if it has any. For Canada, your province or territory is checked and not stored. We use these details only for the choices you tick.

No ICI newsletter or "keep me informed" message stream is currently operating. No commercial message will be sent until a sending process with an unsubscribe mechanism in every message is in place. A pilot or partnership request is answered by a person at Harmelo Corp., and answering it does not give permission to send you marketing. You can withdraw any choice at any time.

Retrofit program notifications

If you choose to use this optional feature, you can ask to be notified about retrofit programs that may apply to a building or its equipment. ICI then uses your email address, country and postal region, and only the building type, systems and published equipment references you choose, to identify potentially relevant programs. From the Building Almanac, only your email address, country and postal region are used; ICI does not know your building or its equipment. A notification does not confirm eligibility or approval.

Retrofit program notifications are not currently being sent. None will be sent until a sending process with an unsubscribe mechanism in every message is in place. Permission to be notified does not allow ICI to share your information with anyone. Program administrators cannot search or browse the people who asked for notifications.

You can stop retrofit program notifications at any time. Stopping them does not delete a saved profile. The personal records of a stopped notification permission are deleted within 30 days after the request is reconciled.

Building Alerts early access

Building Alerts is not operating yet and no alerts are being sent. If you choose to use this optional feature, the Building Alerts page lets you ask to be told when it opens.

If you use it, we collect the email address you enter, your country, your province, territory or state, your first name if you choose to give it, and a record of your permission: the wording you agreed to, the version of this policy in effect, the page you were on and the time. Québec is excluded. We do not ask for a postal code, ZIP code, street address, your last name, or anything about a building.

We use these details to confirm your Building Alerts early-access request by email, and to email you once when Building Alerts opens in your province, territory or state. Your province, territory or state is used only to decide when Building Alerts is available to you and which local conditions apply; it is never worked out from your IP address or email address. If you give your first name, it is used only to address those two emails. Asking for early access does not subscribe you to Building Alerts and does not subscribe you to ICI news. When Building Alerts opens, you will be asked to confirm the area you want covered and to give separate permission to receive alerts. Apart from the confirmation of your request, no message will be sent until every message can include a way to unsubscribe. Every Building Alerts message will identify Harmelo Corp., include a link that stops Building Alerts immediately, and contain no advertising or promotional content.

Building Alerts is kept separate from the rest of ICI. It does not use a Condition Profile, a saved building, equipment you looked up, Retrofit Readiness answers or contact choices you made elsewhere, and using other ICI tools never adds anything to your Building Alerts record. Building Alerts information is not added to our customer records.

You can withdraw at any time, or ask a question about Building Alerts or an email you received from ICI, by writing to support@harmelo.com. If you withdraw, we keep only a coded form of your email address so that you are not enrolled again by mistake, as described under how long information is kept.

Program referrals

ICI does not currently offer program referrals, and there is no way on the site to authorize one. No information is shared with a program because you saved a profile, asked for retrofit notifications, asked to be kept informed, asked about a pilot or partnership, or used the site. If ICI later offers a named referral, no information will be disclosed unless you separately authorize the specific recipient, program, purpose and fields.

Email we send

Other than the email confirming your early-access request, no Building Alerts email is being sent, including the notice that Building Alerts has opened. This policy will describe those messages before any is sent.

Service email is sent only for the optional features you use: an access link or sign-in link you asked for, confirmation that a deletion was requested and completed, and a notice before an unused saved building is deleted. These are transactional messages. They contain no score, result, equipment, building type, postal region or answers, and they are never used for marketing.

The project request page

The project request page cannot send anything, and it does not pretend to. What you enter there stays in your browser and reaches no one. To discuss a project, write to partnerships@harmelo.com. We deliberately do not carry your entries across in a web address.

Service providers and request logs

Harmelo Corp. remains accountable for personal information that its service providers process on its behalf. Providers receive only what they need for their service and are not permitted to use it for their own purposes.

Netlify, Inc. hosts the site and runs its server functions. As with any website, it necessarily receives ordinary technical request information in order to serve a page: your IP address, your browser and operating system type, the address you requested and the time. Netlify also stores what you choose to save or submit through the optional features.
Resend (Plus Five Five, Inc.) delivers the service email described above. It receives the recipient address and the message, including an access link. Resend stores message content and delivery records in the United States and keeps them for 30 days. An access link in such a record cannot be used after it expires or has been used. Click and open tracking is turned off for our sending domain.

Provider logs are generated and retained under each provider's own practices. Our own code does not log the content of your requests, your email address, access links or tokens. Harmelo does not build profiles from provider logs and does not use them to identify you. Our servers limit how often requests can be made, using a short-lived one-way digest of the connection address held in memory only.

Processing outside Canada

Both service providers may process personal information outside Canada.

Netlify runs the site's server functions, including those for the optional features, in its US East (Ohio) region in the United States, and stores records you choose to save or submit using its storage service. Netlify does not show us a separate storage location for those records, so we do not state one: they may be stored in the United States or another country where Netlify operates. They are not held in Canada by us, and we do not claim Canadian data residency. Netlify serves the site through a global network, so request information may also be processed in other countries where that network operates.
Resend sends email from its US East (N. Virginia) region and stores email content and delivery records in the United States.

Where information is outside Canada, it may be accessible to courts, law enforcement and government authorities of that country under its laws. Harmelo Corp. uses contractual measures with its providers to protect it.

For written information about our policies and practices for service providers outside Canada, or for questions about how they collect, use, disclose or store personal information for us, contact the Chief Executive Officer, Harmelo Corp., at partnerships@harmelo.com. Because optional collection is not offered in Québec, no personal information is collected from Québec through the optional features.

What is not collected

No account password and no phone number. An email address is collected only when you choose an optional feature that needs one.
No payment information. Nothing on this site is paid.
No complete street address, and no full postal code. A full five-digit US ZIP code may be sent for an Almanac lookup, as described above, but is not stored in any record.
No equipment serial numbers, uploaded files or documents, raw utility bills, or free-text notes about the building.
No advertising or analytics cookies. The only cookie ICI sets is the strictly necessary sign-in cookie described above, and only after you sign in.
No analytics. This site loads no analytics service and no measurement script.
No advertising, no ad networks, no pixels and no interest-based advertising.
No third-party scripts, fonts or embedded content. Every script the site loads comes from this site.

Following a link away

This site links to official government sources, listed with their authority and last-checked date on the resources page, and to Asset History Report and Harmelo. Nothing is sent until you click a link. When you do, that site learns you arrived from conditionindex.com. The site is configured so that only the site name is passed, not the page you were on, and nothing about your answers is included. Every linked site has its own privacy policy.

Saved buildings and statistics

Information you save about a building is used to provide your saved building, its history and its Condition Profile. It is not used for statistics, research or reports to other organizations unless you give separate permission. Saving a building is not that permission. The anonymous answer counts and the research contributions described above are separate, and they never include saved-building information.

Harmelo Corp. does not sell personal information and does not share it for advertising. It does not disclose it to governments, utilities, insurers, lenders, retrofit program administrators or other third parties, except as follows.

Organizations that promote or sponsor access to ICI or Building Alerts, including insurers, do not receive your email address, country, area, building information, Condition Profile, equipment information, or anything about your use of ICI or Building Alerts because they promote or sponsor it.

Service providers, as described above, which process it for us.
Legal requirements. We and our service providers may disclose information where required or permitted by law, for example in response to a warrant or court order, to investigate a breach of an agreement or a contravention of law, to detect or prevent fraud, or to establish or defend legal claims.
Change of control. Information may transfer as an asset in a merger, acquisition, financing, insolvency, reorganization or similar transaction involving Harmelo Corp., subject to this policy and applicable law.
With your authorization. Only if you give a separate, specific authorization, such as a future named referral.

Safeguards

We use administrative, technical and physical measures to protect information in our custody and control against loss, theft and unauthorized access, use, modification and disclosure, and we restrict access to those who need it. The site is served over an encrypted connection and loads nothing from outside itself. Access links are single use and short lived, stored only as hashes, and never passed through a tracking redirect. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach creates a real risk of significant harm, we will notify you and the relevant privacy regulator as the law requires.

How long information is kept

Profiles you do not save are not kept by our code. Information from the optional features is kept for these periods:

a saved building and its Condition Profile: while your permission to keep it remains active, with the 24-month inactivity notice and deletion 60 days later described above;
an access link: until it is used or 30 minutes pass; an access session: at most 20 minutes;
records used to prevent duplicate submissions, and records that a sign-in link has been used: 30 days;
your ICI account: while you have at least one saved building; it is deleted with the last one;
a sign-in link: until it is used or 15 minutes pass; a sign-in session: at most 7 days, ending after 24 hours without use or when you sign out;
a marker that you signed out everywhere: 7 days;
a record that you proved you could receive email at your address: with your account, and deleted with it;
a saved building's dated entries, current summary, recalculated results and any equipment codes: with the saved building, and deleted with it, including when an unused building is deleted after the inactivity notice;
a research contribution, if that choice is offered: 24 months from its day, then deleted;
contact choices waiting to be moved into our customer records: until they are moved, and no more than 90 days;
saved records you withdraw or delete: deleted within 30 days after the request is reconciled;
a record that consent was given: 3 years after the consent is withdrawn or the records are deleted, with your email address, identifiers, building details, postal region, equipment and profile removed;
a record that a deletion was completed: 2 years, containing no information that identifies you;
a record that a retrofit notification permission was stopped: kept with its permission until the permission's personal records are deleted, then removed; it holds only that it was stopped and when;
an authorization for a program referral, if referrals are ever offered: for the duration of the referral and 2 years after it;
a Building Alerts early-access request: deleted when you confirm live Building Alerts, 60 days after the notice that Building Alerts has opened if you do not confirm, or 24 months after your request if Building Alerts has not opened by then;
a withdrawn Building Alerts early-access request: deleted within 30 days after the request is reconciled;
a record that an early-access request was made and when it ended, with no email address or other identifier: 3 years after the request ends;
a coded form of an email address that has withdrawn from Building Alerts, kept only so that address is not enrolled again by mistake: 3 years after withdrawal, or until you knowingly sign up again. It holds no area, building information or preferences.
message content and delivery records kept by our email provider, Resend: 30 days, the provider’s standard period.

These periods are applied automatically once a day. Day periods are exact 24-hour days in Coordinated Universal Time, and a period ends at the moment it is due. A record whose date cannot be read is never deleted automatically; it is set aside for review by a person instead. These periods may be revised, and this policy will be updated before a change takes effect.

Your rights and how to use them

Subject to applicable law, you may ask to access the personal information we hold about you, to correct it, to withdraw consent to its use, and to have it deleted. Withdrawing consent may mean an optional feature can no longer be provided to you.

Access and correction. Saved profiles can be viewed and updated from the saved profiles page. For anything else, write to us.
Withdrawal. Stop retrofit notifications from the saved profiles page, or write to us to withdraw any choice, including Building Alerts early access.
Deletion. Delete a saved building or everything saved for your address from the saved profiles page, or write to us.

Write to partnerships@harmelo.com or to Harmelo Corp., 3000, 421 7th Ave SW, Calgary, Alberta T2P 4K9, Canada. Your request reaches a person at Harmelo Corp. We may ask you to confirm that you control the email address concerned, for example by using an access link, before acting. We respond within the time the law requires.

Questions and complaints

Please raise any question or complaint with the Chief Executive Officer, Harmelo Corp., at partnerships@harmelo.com first, so we can try to resolve it. You also have the right to complain to a privacy regulator, including the Office of the Information and Privacy Commissioner of Alberta, the Office of the Privacy Commissioner of Canada, or the privacy regulator for your province.

Children

The optional features are intended for adults who have reached the age of majority where they live. They are not directed at children. If you believe a child has given us personal information through an optional feature, write to us and we will delete it.

Privacy governance

Harmelo Corp. maintains policies and practices for the personal information it handles, including safeguards against unauthorized access, use or disclosure; a process for responding to requests and complaints; a process for responding to privacy and security incidents; a retention and secure destruction schedule applied by an automated daily process; and a designated accountable person, the Chief Executive Officer.

Changes to this policy

We may update this policy to reflect changes in practice. The date below shows when it takes effect. If a change affects how information you chose to save is used, we will ask for your consent where the law requires it. The Terms of Use govern your use of this site and should be read with this policy.