Data protection

Privacy policy

Last updated: July 2026.

In short

Data controller

Dr Handsun Xiao · Manus Solis.
Contact: handsun@manussolis.ca

Data collected and purpose

The contact form collects: name and title, professional email address and, optionally, the name of your organisation and a free-text message. This data is processed for the sole purpose of answering your request for a demonstration or for information (legal basis: pre-contractual steps taken at your request, Art. 6(1)(b) GDPR).

Recipients and processor

Form delivery is handled by Formspree, Inc. (United States), acting as a processor and relying on the European Commission’s standard contractual clauses for transfers outside the Union (Formspree privacy policy). The site is served by Cloudflare, Inc., which may process technical logs (IP addresses) strictly for security and routing purposes.

Retention period

Requests are kept for a maximum of 24 months after the last exchange, then deleted.

Your rights

Under the GDPR and the French Data Protection Act (“Informatique et Libertés”), you have rights of access, rectification, erasure, objection, restriction and portability over your data. To exercise them: handsun@manussolis.ca. You may also lodge a complaint with the CNIL, the French supervisory authority (www.cnil.fr).

What about health data?

This showcase site processes no health data. The GRÉMI software itself is designed so that patient identifiers are removed locally, on the physician’s computer, before any processing. See the Security & sovereignty section.