PRIVACY POLICY

1. Scope of This Privacy Policy

This Privacy Policy applies to personal data we collect through the Services. It does not apply to third-party websites, services, or applications that may link to or from the Services. Your use of such third-party services is governed by their own privacy policies, not this one.

2. Information We Collect

We may collect several types of information from and about you, including:

Information You Provide Directly

• Account and Profile Data: Name, email address, password, role (e.g., patient, healthcare provider), and other details you choose to provide.
• Contact Information: Mailing address, phone number, and professional details if you choose to share them.
• Communications: Information you provide when contacting support, submitting feedback, or participating in surveys.
• Clinical Trial Interest: Information about the types of clinical trials or research you are interested in or qualified for.

Information Collected Automatically

• Usage Data: Pages viewed, links clicked, time spent on the Site, and referral URLs.
• Device Information: IP address, browser type, operating system, device identifiers, and language settings.
• Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to enhance your experience and collect usage data.

Sensitive Information

We may collect information related to health conditions or medical interests if you choose to provide it, for example, when you express interest in particular clinical trials. Where required by law, we will obtain your explicit consent to process such information.

3. How We Use Your Information

We use your information for various business and commercial purposes, including:

• To Provide and Improve Services: Facilitate account creation, personalize your experience, connect you with relevant clinical trials, and improve site functionality.
• Communications: Respond to inquiries, send service-related notifications, provide updates about trial opportunities, and send newsletters if you have subscribed.
• Analytics and Research: Analyze usage trends, measure the effectiveness of features, and conduct internal research to improve our platform.
• Security and Fraud Prevention: Protect the integrity of our Services, detect and prevent fraud, and enforce our Terms and Conditions.
• Legal Compliance: Comply with applicable laws, regulations, and legal processes, and respond to lawful requests from authorities.

4. Legal Basis for Processing (EEA/UK Visitors)

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), we process your personal data based on the following legal grounds:

• Consent: Where you have given consent to the processing of your personal data for one or more specific purposes.
• Contractual Necessity: Where processing is necessary for the performance of a contract to which you are a party.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.
• Legitimate Interests: Where processing is necessary for the purposes of our legitimate interests, except where such interests are overridden by your interests or fundamental rights.

5. How and When We Share Information

We do not sell your personal data. We may share your information as described below:

• Service Providers: With vendors who perform services on our behalf (e.g., hosting, analytics, email delivery, payment processing).
• Clinical Trial Sponsors and Healthcare Providers: With your consent, we may share your information to connect you with relevant clinical trials or healthcare professionals.
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets.
• Legal and Regulatory Authorities: To comply with legal obligations, respond to lawful requests, protect our rights and safety, or defend against legal claims.

6. International Data Transfers

We are based in the United States. If you access the Services from outside the U.S., your information may be transferred to, stored, and processed in the U.S. or other countries where our service providers operate. We take steps to ensure that appropriate safeguards are in place, such as Standard Contractual Clauses for EEA, UK, and Swiss users, to protect your personal data.

7. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (e.g., HTTPS) and at rest where appropriate
• Access controls, authentication, and authorization checks
• Regular security assessments and vulnerability testing
• Ongoing monitoring of our infrastructure for potential threats

However, no security measures are perfect, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law. The criteria for determining retention periods include legal obligations, dispute resolution, and the enforcement of our Terms and Conditions.

9. Your Rights and Choices

You may have certain rights and choices with respect to your personal data, including:

• Access and Correction: Request access to or correction of your personal data.
• Deletion: Request the deletion of your personal data where permitted by law.
• Opt-Out: Opt out of receiving marketing communications by following the unsubscribe instructions in the email or by contacting us.
• Data Portability: Request a copy of your personal data in a structured, machine-readable format.
• Objection and Restriction: Object to or request the restriction of the processing of your personal data under certain circumstances.

To exercise your rights, please contact us using the information in the Contact Us section. We may require you to verify your identity before we can respond to your request.

10. Cookies and Similar Technologies

We use cookies, web beacons, and similar technologies to enhance your experience and analyze usage of the Services. Cookies help us remember your preferences, understand how you interact with the Services, and improve security.

You can control cookie preferences through your browser settings. Disabling cookies may affect certain features of the Services.

11. Do-Not-Track Signals

Some browsers transmit “Do-Not-Track” signals. We currently do not respond to these signals. To learn more about Do-Not-Track, please visit allaboutdnt.com.

12. Children’s Privacy

The Services are not intended for children under the age of 18. We do not knowingly collect personal data from individuals under 18. If you believe we have collected such information, please contact us, and we will take steps to delete it.

13. Third-Party Links and Integrations

The Services may contain links to third-party websites or integrate with third-party tools. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before sharing any personal data with them.

14. HIPAA and Health Information

While we may handle information related to clinical trials and health conditions, we are not a “Covered Entity” as defined by the U.S. Health Insurance Portability and Accountability Act (HIPAA). Information you share with us is not protected health information (PHI) under HIPAA. Nonetheless, we take steps to protect sensitive data and encourage you to share health-related information judiciously.

15. California Residents (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including:

• Right to Know: Request disclosure of the categories and specific pieces of personal data we have collected about you.
• Right to Delete: Request the deletion of your personal data subject to certain exceptions.
• Right to Opt-Out: Opt out of the sale or sharing of your personal data, where applicable.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise your California privacy rights, please contact us as outlined in the Contact Us section.

16. EU/EEA, UK, and Swiss Users (GDPR)

If you are located in the EEA, UK, or Switzerland, you have certain rights under the General Data Protection Regulation (GDPR) or equivalent local law, such as:

• Right of Access: Obtain a copy of your personal data.
• Right to Rectification: Request correction of inaccurate personal data.
• Right to Erasure: Request deletion of personal data under certain conditions.
• Right to Restriction: Limit our processing of your personal data.
• Right to Object: Object to certain processing activities.
• Right to Data Portability: Receive your personal data in a portable format.
• Right to Lodge a Complaint: File a complaint with a supervisory authority in your country.

For more information or to exercise your rights, please contact us using the details in the Contact Us section.

17. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. We will notify you of any material changes by posting the updated policy on our website and updating the “Last Updated” date. Your continued use of the Services after such updates constitutes your acceptance of the changes.

18. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: info@mytrial.com