DATA PROTECTION AND PRIVACY POLICY

This privacy policy is effective and applies to websites by The Patient Recruiting Agency, LLC (TPRA) also doing business as GoClinicalTrials, mailing address of 11719 FM 2244, Suite 300, Bee Cave, Texas 78738 USA (TPRA) and physical address of 11719 Bee Caves Road, Austin, Texas. The policy applies to all facets of TPRA's business and includes the website hosting this policy (tprausa.com and patientrecruiting.com) as well as goclinicaltrials.com and all websites hosted by or under the control of TPRA designed to recruit for specific research studies.

This policy provides information about the personal data processed and protected by TPRA when you use one of its websites, including its research study recruitment websites seeking study participants in, but not limited to, the United States, Europe, United Kingdom, Canada, Australia, and New Zealand. TPRA's company website, tprausa.com and patientrecruiting.com, are intended for US residents only. It is TPRA's intention to comply with the privacy laws of each of these jurisdictions and sub-jurisdictions where applicable. This policy has sections that apply to users of all websites and clearly marked sections that apply only to residents of the European Union (EU) and United Kingdom (UK).

The Patient Recruiting Agency, LLC (TPRA) complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, as set forth by the U.S. Department of Commerce. The Patient Recruiting Agency, LLC (TPRA) has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov/s/participant-search.

TPRA does not rely solely upon the DPF as a mechanism for transporting data from EU and UK residents and TPRA independently complies with the provisions of the GDPR. For EU and UK residents, information about your rights with regard to the processing of personal data is also provided.

By using any of the websites covered by this Privacy Policy, you agree to the terms of this Privacy Policy.

PARTY RESPONSIBLE FOR YOUR DATA
The Patient Recruiting Agency, LLC (TPRA), also doing business as GoClinicalTrials, 11719 FM 2244, Suite 300, Bee Cave, Texas 78738 USA (TPRA) and physical address of 11719 Bee Caves Road, Austin, Texas is responsible (the “controller”) of your data.

INFORMATION WE COLLECT
We collect the Personal Information, as defined below, that you provide to us.

Authorization: by providing your information to us, you authorize us to use the information as described below. We will not use your personal information for any purpose other than as described. This is considered an opt-in by you and your express consent for us to use your information in this manner. If you do not want us to use your information in this manner, do not complete any questionnaires, surveys, or registration forms.

We also collect Non-Personal Information, as defined below, through the use of Cookies (as defined below) or Web Logs (as defined below) or IP Addresses (as defined below).

PERSONAL INFORMATION COLLECTED AND DISCLOSED
If you provide it, we will collect your name, telephone/text number, your consent to receive text messages in connection with the purpose of the website you are visiting, the best time to reach you, your email address, and your postal code, in addition to any other information that you may provide such as age and gender. This information will be captured once you complete the registration fields and click submit. If the website you are using includes a questionnaire or survey, your answers to those questions, including age and health information, will also be recorded.

We will provide this information, together with information about the research study for which you submitted the information, to the designated research clinic and to no other person or entity.


This information will be provided to the research study site identified on the website. We will keep your personally identifiable Information (name, location, and contact information) in our system for a period of six months following de-activation of the website or conclusion of the research study you applied for (whichever comes last), at which time this information from all persons who have provided it will be deleted from our system. Deidentified information will be kept for our records.

The research study site identified on the website and to whom we will provide your information will use your information only in connection with its efforts to recruit participants for medical research studies and will not otherwise disclose your information.

We will not use your information for any other purpose and will not disclose your information to any other third party.


Information that users provide on this website and websites intended for use by non-EU residents is stored in the United States. Websites intended for use of EU residents may store their data in the EU. Data is transmitted securely via encryption. We maintain technical, physical, and organizational procedures to safeguard the information we collect from our website against unauthorized or unlawful processing and/or against accidental loss, alteration, disclosure, or access.

For EU and UK residents: Information we collect may be kept in the EU or the United States. We are collecting and using this information with your consent, which is authorized by Article 6(1)(a) of the GDPR. The transfer of your information to the designated research study site is called an onward transfer. We have responsibility for the processing of your information by the research study site in the manner disclosed above. We will remain liable for the processing of your information by the research study site consistent with the terms of this Privacy Policy, unless we prove that we are not responsible for the event giving rise to any damage.

NON-PERSONAL INFORMATION
We collect Non-Personal Information about your use of our website including:

The IP address of the computer or device used to visit our website.

The type of device, hostname, operating system, and browser type used to access our website.

The URL of the page where you clicked the link that took you to our website (known as the referrer URL)

The date and time that you accessed our website.

Additional information about some of these items may be found below. This information is used to help make the website work properly and as intended and to make the service accessible. This information may also be used to inhibit abuse of the website and network security.

For EU and UK residents: The uses of this information as mentioned above in connection with the service provided by this website are legitimate interests and constitute the legal basis for processing this data under Article 6(1)(f) of the GDPR.

COOKIES
We collect Non-Personal Information about your use of our websites through the use of Cookies. A Cookie is a small piece of information that our server, the server of the web-data company we are using (typically Google Analytics) or the server of the company providing an advertisement that led you to our website sends to your web browser. Every computer that accesses the website is assigned a different Cookie. Cookies are capable of storing many types of data. Cookies may be used to help us analyze usage of the website and are used by companies that we use for advertising. Advertisers use Cookies as a part of their goal to make advertising more relevant to their users. Most browser software can be set to reject all Cookies. Note, however, that some portions of the website may not work properly if you reject Cookies.

This information is used to help make the website work properly and as intended and to make advertising more relevant to internet users. See the Google Analytics and Advertising Cookies section below for additional information.

For EU and UK residents: The uses of this information as mentioned above in connection with the service provided by this website are legitimate interests and constitute the legal basis for processing this data under Article 6(1)(f) of the GDPR.

IP ADDRESSES
We may also receive IP addresses in the normal course of the operation of our website. An IP address is a number assigned to you by your Internet service provider so you can access the Internet. Although we do receive IP addresses, we do not disclose them to others or use them to identify users.

This information is used to help make the website work properly and as intended and to make the service accessible. This information may also be used to inhibit abuse of the website and network security.

For EU and UK residents: The uses of this information as mentioned above in connection with the service provided by this website are legitimate interests and constitute the legal basis for processing this data under Article 6(1)(f) of the GDPR.

WEB LOGS
We use standard Web Logs that record basic data about your visit to the website, such as the date and time of the visit, the pages of the website viewed during the visit, and the domain name of your Internet Service Provider.

We do not normally seek to identify individuals from Web Logs. However, we may use Web Logs to identify an individual whom we suspect tried to damage the website or use it in an unauthorized way. We may share our Web Logs with law enforcement agencies if we believe there has been a violation of computer security or related laws.

This information is used to help make the website work properly and as intended and to make the service accessible. This information may also be used to inhibit abuse of the website and network security.

For EU and UK residents: The uses of this information as mentioned above in connection with the service provided by this website are legitimate interests and constitute the legal basis for processing this data under Article 6(1)(f) of the GDPR.

GOOGLE ANALYTICS AND ADVERTSING COOKIES
The websites use Google Analytics, a web analytics service provided by Google, LLC owned by Alphabet, Inc. ("Google") which uses cookies to help our web team analyze how users use the site. The information generated by the cookies about your use of the website (including your IP address) will be transmitted to and stored by Google under their privacy policies. To learn how Google uses data when you use our site please go to this link:
www.google.com/policies/privacy/partners/

The websites may also use advertising cookies from Google, Facebook/Instagram (which are owned by META), Microsoft, and potentially other advertisers. If your jurisdiction requires that cookie details be disclosed and the website is intended for your use, a cookie banner will appear on the website with those details.

You may opt-out of Google's use of cookies by visiting the Google advertising opt-out page, downloading and installing the browser plug-in which is available at:
https://tools.google.com/dlpage/gaoptout?hl=en

You may review Google's cookie policies here: https://policies.google.com/technologies/cookies?hl=en-US

You may review Google's privacy policy here: https://policies.google.com/privacy

You may review META's (including Facebook and Instagram) cookie policies here: https://www.facebook.com/policy/cookies/

You may review Microsoft’s Privacy Statement, including cookie information, here: https://privacy.microsoft.com/en-us/privacystatement

You may also refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of your information by these advertisers in the manner and for the purposes set out above.

This information is used to help make the website work properly and as intended and to make the service accessible. This information is also used to assist with making advertising more effective.

Express consent to the use of cookies is managed on websites intended for residents of the EU and UK.

For EU and UK residents: The uses of this information as mentioned above in connection with the service provided by this website are legitimate interests and constitute the legal basis for processing this data under Article 6(1)(f) of the GDPR.

CHILDREN
We are committed to protecting the privacy of children. Neither The Patient Recruiting Agency, LLC nor GoClinicalTrials, nor any of its services, are designed or intended to attract children under the age of 18. We do not collect Personally Identifiable Information from any person we actually know is under the age of 18.

DATA SECURITY
We maintain technical, physical, and organizational procedures to safeguard the information we collect from our website against unauthorized or unlawful processing and/or against accidental loss, alteration, disclosure, or access. Except as noted below, all servers and data are located in the United States. Servers and collected data for research studies conducted in the EU or UK may be located in the EU.

LINKS TO OTHER WEBSITES
The website may contain links to other websites. Please keep in mind when you access websites operated by other parties, whether through links on our website or otherwise, that we do not control what happens on those websites. You should always check the privacy policy of the website you are visiting in order to be sure you know how the operator of that website will collect information from you and what the operator of that website will do with the information.

CHANGE NOTIFICATION
As privacy laws and regulations evolve, it may be necessary to revise or update our Privacy Policy without notice. You can determine if this Privacy Policy has been revised since your last visit by referring to the "last updated" legend at the bottom of this page. Your use of our website constitutes your acceptance of the terms of the revised Privacy Policy, and you should therefore review the Privacy Policy regularly to ensure that you are aware of its terms. Please print, save, and retain a copy of the Privacy Policy (and of any revised version) for your records.

PRIVACY CONTACT INFORMATION: Questions or comments regarding this Privacy Policy or our practices should be submitted to TPRA’s Privacy Officer at the address or email address below.

DISPUTE RESOLUTION UNDER THE GDPR and UK PRIVACY LAWS:
In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, The Patient Recruiting Agency, LLC (TPRA) commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU and UK individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, should first contact The Patient Recruiting Agency, LLC (TPRA) Privacy Officer by mail or email as follows:

The Patient Recruiting Agency, LLC
GoClinicalTrials
Privacy Officer
11719 FM 2244
Suite 300
Bee Caves, Texas 78738
United States of America
privacy@tprausa.com

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, The Patient Recruiting Agency, LLC (TPRA) commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF to the American Arbitration Association, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.adr.org/Support for more information or to file a complaint. The services of the American Arbitration Association are provided at no cost to you.

You are also notified that we are subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).


FOR RESIDENTS OF THE EU, UK, CANADA, AUSRALIA, AND NEW ZEALAND: HOW TO ACCESS AND/OR UPDATE INFORMATION AND HOW TO LIMIT THE DISCLOSURE AND USE OF YOUR INFORMATION
If you are a resident of the EU, UK, Canada, Australia, or New Zealand, you have the right to request from us the data that we have collected about you. If you would like information about what data about you has been stored, please contact our Privacy Officer via the details above.

If an individual cannot update his or her own information, we will correct any errors in the data we hold about an individual within 7 days of receiving notice from them about those errors.

It is an individual's responsibility to provide us with accurate and truthful data. We cannot be liable for any information that is provided to us that is incorrect.

You may limit the disclosure of information contained in a form on a website by not completing the form and by not submitting the form. You may limit the information obtained via cookies by not consenting to the use of cookies, by limiting cookies on your browser, or by limiting cookies from third party advertisers as described above. Websites designed for residents of the EU, UK, Canada, Australia, and New Zealand will only collect information through the use of cookies after consent is obtained. By default, then, no information is obtained except as may be allowed by law, such as cookies essential for the website to function.


RESERVATION OF RIGHTS:
We reserve the right to share an individual's information as required by law or to duly authorized information requests of government authorities.

This privacy policy was last updated on October 11, 2023.