Lindus Health and its affiliates, subsidiaries, and related entities (“Lindus Health,” “we'', “our”) is committed to protecting the privacy and security of the personal information we collect about end customers and users of our services (“you/your”). We are further committed to ensuring we meet our legal obligations when processing your personal information under the relevant Data protection Laws, which include but are not limited to:the California Consumer Privacy Act (“CCPA”). the Canadian Personal Information Protection and Electronic Documents Act (“PIPEDA”). the Colorado Privacy Act ("CPA"). the Connecticut Data Privacy Act ("CTDPA"). the Utah Consumer Privacy Act ("UCPA").the Virginia Consumer Data Protection Act ("VCDPA").The purpose of this privacy notice is to explain what personal information we collect about you and how we use it.Please read this privacy notice carefully as it provides important information about how we handle your personal information and your rights. If you have any questions about any aspect of this privacy notice you can contact us using the information provided below, or by emailing us at: data@lindushealth.com.
Personal information means information that identifies, relates to, or could reasonably be linked with you or your household. For example, it could include your name, social security number, email address, photographs, geolocation data, fingerprints, and inferences from other personal information that could create a profile about your preferences and characteristics.We may also collect, store, and use sensitive personal information which is a specific subset of personal information. This subset of personal information can include certain government identifiers (such as social security numbers), financial account details, contents of mail, email and text messages, biometrics and information concerning an individual’s health or sexual orientation, or information about racial or ethnic origin, religious or philosophical beliefs, or union membership. However, we will only collect the personal information outlined in the Informed Consent Form and/or Participant Information Sheet and/or HIPAA Authorization Form. This documentation will have been provided to you by the study team, please refer to it for more information on the types of data we may collect as part of this study.
We collect most of the personal information directly from you in person, by telephone, text, or email and/or via our website.For example, we may have collected your personal information directly from you as part of the recruitment process, via our online contact/registration form, or from our email correspondence with you. We will continue to collect personal information about you for the duration of the study trial.
We will only use your personal information when the law allows. Most commonly, we will use your personal information in the following circumstances:
Where Lindus processes your personal information, we will do so under one of the following lawful bases:
Where we need to use medical protected health information, this will only be done where the participant or their Legally Authorized Representative has signed and/or agreed to the study-specific HIPAA Authorization Form (note this may form part of the Informed Consent Form), or in the instance where an Institutional Review Board (IRB) has approved the use of a waiver to HIPAA Authorization.
By signing the informed consent form, or in the case of a waiver of informed consent approved by the IRB by participating in the trial, you consent to your personal information being shared with the trial site and Sponsor and/or the contracted provider working on the trial. We may also disclose your information to third parties in connection with other purposes set out in this privacy notice. These third parties may include:
We will only share (‘share’ includes making available remotely) personal information with third parties where we have a contract in place that contains the required provisions to facilitate such transfers.
Your personal information may be processed outside of the US, as we, and the organisations we use to provide our services are based in the UK.We have taken appropriate steps to ensure that the personal information processed within the UK has an essentially equivalent level of protection to that guaranteed by the enacted US State Privacy Laws. By participating in the study, you accept that Lindus Health will transfer your personal information outside of the US where necessary.
We will retain your personal information for as long as is necessary to provide you with our services and for a reasonable period thereafter to enable us to meet our contractual and legal obligations and to deal with complaints and claims. At the end of the retention period, your personal information will be securely deleted or anonymised, for example by aggregation with other data, so that it can be used in a non-identifiable way for statistical analysis and business planning.
We will always ensure, no matter where you are located in the world, that we adhere to and fully respect your data protection rights. In the US, you have the following rights:
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.If you wish to exercise your rights, please contact us at data@lindushealth.com
If you have any questions, or wish to exercise any of your rights, then you can contact:
Lindus Health
2nd Floor, 90 Union Street
London
SE1 0NW
United Kingdom
Alternatively, you can email us at data@lindushealth.com
We may update this notice (and any supplemental privacy notice), from time to time as shown below. We will notify you of the changes where required by applicable law to do so.