Privacy Policy

1. Introduction

Groenakker, LLC and its affiliates (collectively, “Groenakker,” “we,” “us,” or “our”) respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit www.groenakker.com(the “Site”), engage with our advisory and test subcontracting services, or otherwise interact with us.

By accessing or using the Site, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Site.

2. Information We Collect

We collect information in a few different ways depending on how you interact with us:

2.1 Information you provide directly

• Contact details— your name, company, email address, phone number, and country when you submit our contact form, schedule a meeting, or subscribe to our newsletter.
• Project information— details you share about your medical device, regulatory program, or scientific question.
• Recruitment information— your resume, cover letter, work history, and other materials you submit in connection with a job application on our Careers page.
• Communications— the contents of any emails, messages, or feedback you send to us.

2.2 Information collected automatically

• Usage data— pages visited, links clicked, referring URL, time on page, and similar analytics signals.
• Device data— IP address, browser type and version, operating system, and device identifiers.
• Cookies and similar technologies— small files stored on your device that help the Site function, remember preferences, and measure performance.

2.3 Information from third parties

We may receive information from analytics providers, professional networks (e.g., LinkedIn), event organizers, and business partners, consistent with their privacy policies.

3. How We Use Information

We use the information we collect to:

• Respond to inquiries and provide the services you request.
• Manage client engagements, contracts, billing, and project deliverables.
• Operate, maintain, secure, and improve the Site and our services.
• Send transactional communications, newsletters, and industry updates (where you have opted in).
• Evaluate candidates for open roles.
• Comply with applicable laws, regulations, and legal processes, including those governing the medical device industry.
• Detect, prevent, and address fraud, abuse, security incidents, and other harmful activity.

4. Legal Bases for Processing

Where the EU/UK General Data Protection Regulation applies, we rely on one or more of the following legal bases: (a) your consent; (b) performance of a contract with you or your organization; (c) compliance with a legal obligation; and (d) our legitimate interests in operating and growing our business, provided those interests are not overridden by your rights and freedoms.

5. How We Share Information

We do not sell your personal information. We share it only as described below:

• Service providers— trusted vendors who support hosting, analytics, email delivery, scheduling, payment processing, and customer relationship management, bound by confidentiality and data protection obligations.
• Professional partners— laboratories, consultants, and accredited testing facilities engaged on your project, where disclosure is necessary to deliver the service.
• Legal and safety— when required by law, regulation, court order, or to protect the rights, property, or safety of Groenakker, our clients, or others.
• Business transfers— in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

6. International Data Transfers

Groenakker operates from the United States and India and works with clients globally. Your information may be transferred to, processed in, and stored in countries with data protection laws that differ from your own. Where required, we put in place appropriate safeguards — such as Standard Contractual Clauses — to protect your information during these transfers.

7. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes outlined in this Policy, comply with our legal and regulatory obligations (including ISO 13485:2016 record-keeping requirements where applicable), resolve disputes, and enforce our agreements. When information is no longer needed, we securely delete or anonymize it.

8. Security

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These include encrypted transport (TLS), role-based access controls, and ongoing security training for our team. No method of transmission over the Internet is 100% secure, however, and we cannot guarantee absolute security.

9. Your Privacy Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information.
• Object to or restrict certain processing, including direct marketing.
• Request a portable copy of your information.
• Withdraw consent, where processing is based on consent.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at privacy@groenakker.com. We will respond within the timeframe required by applicable law.

10. Cookies & Tracking Technologies

We use cookies and similar technologies to remember your preferences, analyze traffic, and improve site performance. You can control cookies through your browser settings; blocking cookies may impact your experience of the Site. Where required by law, we will request your consent before placing non-essential cookies.

11. Children's Privacy

The Site is intended for business and professional audiences and is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can promptly remove it.

12. Third-Party Links

The Site may contain links to third-party websites, including those of our partners, scheduling tools, and social platforms. We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies.

13. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The “Last updated” date at the top of the page indicates when the latest revision took effect. We encourage you to review this page periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please reach out to us:

• Email: privacy@groenakker.com
• Mail:Groenakker, LLC — Privacy Office, 50 S. 16th Street, Suite 1700, Philadelphia, PA 19102, USA

You can also use our contact page to get in touch with the team.