Privacy Policy

1Introduction

Discovery Clinical Trials ("Discovery Trials," "we," "us," or "our") operates the website www.joindiscoverytrials.com and related services (collectively, the "Services"). We are a clinical research organization dedicated to connecting patients with clinical trial opportunities.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, complete an interest form, speak with a study coordinator, or otherwise interact with our Services.

By accessing or using our Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our Services.

2Information We Collect

We may collect the following categories of information:

Personal Identification Information

• Full name
• Date of birth and age
• Email address and phone number
• Mailing address and ZIP code
• Gender identity (where relevant to trial eligibility)

Health & Medical Information

• Medical conditions and diagnoses
• Current medications and treatments
• Relevant medical history
• Self-reported symptoms or health concerns

Technical & Usage Information

• IP address and approximate geographic location
• Browser type, operating system, and device information
• Pages visited, time spent on pages, and referral sources
• Cookie identifiers and similar tracking technologies

3How We Collect Information

Directly From You

We collect information you voluntarily provide when you complete the Patient Interest Form on our website, call our enrollment line, respond to a study coordinator, or communicate with us via email or other channels.

Automatically Through Our Website

When you visit our website, we automatically collect certain technical data through cookies, web beacons, and similar technologies. This data helps us understand how visitors use our site and improve your experience.

From Third Parties

We may receive information about you from referring healthcare providers, patient advocacy groups, advertising platforms, or other partners who direct individuals to our clinical trial programs.

4How We Use Your Information

We use the information we collect for the following purposes:

• Trial Matching: To determine whether you may qualify for active clinical studies based on eligibility criteria.
• Communication: To contact you by phone, email, or text regarding study opportunities, follow-up questions, or appointment scheduling.
• Enrollment Processing: To process your interest form and facilitate your introduction to the study coordinator team.
• Regulatory Compliance: To fulfill legal, regulatory, and sponsor obligations associated with clinical research activities.
• Website Improvement: To analyze site usage patterns and optimize the visitor experience.
• Marketing: With your consent, to send information about upcoming studies, research news, or health resources relevant to you.

5HIPAA & Protected Health Information

What is Protected Health Information (PHI)?

PHI is health information that identifies you or could reasonably be used to identify you, including your name, address, date of birth, diagnosis, medical record number, or other health-related data.

How We Handle PHI

• PHI is used only for treatment, payment, healthcare operations, and research purposes as permitted by HIPAA.
• We implement administrative, physical, and technical safeguards to protect PHI.
• Research use of PHI requires either your written HIPAA Authorization or an Institutional Review Board (IRB) waiver of authorization.
• Business associates who access PHI on our behalf are bound by written Business Associate Agreements (BAAs).

Your HIPAA Rights

You have the right to:

• Request access to and copies of your PHI
• Request corrections to inaccurate or incomplete PHI
• Request restrictions on how your PHI is used or disclosed
• Receive an accounting of disclosures of your PHI
• File a complaint with the U.S. Department of Health and Human Services (HHS) Office for Civil Rights

To exercise these rights, please contact us using the information at the end of this policy.

6Information Sharing & Disclosure

We do not sell your personal information. We may share your information only in the following limited circumstances:

Study Sponsors & Research Partners

Aggregate or de-identified data may be shared with pharmaceutical companies, biotechnology firms, or academic research partners sponsoring clinical studies. Individually identifiable information is only shared with your explicit authorization as part of the informed consent process.

Service Providers

We work with third-party vendors who assist in operating our website, CRM systems, patient communication platforms, and analytics tools. These vendors are contractually required to protect your data and may not use it for their own purposes.

Legal & Regulatory Authorities

We may disclose information when required by law, court order, regulatory investigation, or to protect the safety, rights, or property of Discovery Clinical Trials, its employees, or the public.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity, subject to the same privacy protections described in this policy.

7Data Security

We take the security of your personal information seriously and implement appropriate technical, administrative, and physical safeguards, including:

• SSL/TLS encryption for all data transmitted via our website
• Role-based access controls limiting who can view sensitive information
• Regular security audits and vulnerability assessments
• Staff training on data privacy and security best practices
• Incident response procedures in the event of a data breach

8Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and gather usage analytics. The types of cookies we may use include:

• Essential Cookies: Required for the website to function properly. These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our site (e.g., Google Analytics). Data is aggregated and anonymized.
• Marketing Cookies: Used to track the effectiveness of advertising campaigns and deliver relevant content to interested audiences.

You can control cookie settings through your browser preferences or opt out of analytics tracking by visiting tools.google.com/dlpage/gaoptout.

9Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

General Rights

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Opt-Out: Unsubscribe from marketing communications at any time by contacting us or clicking the unsubscribe link in any email.
• Portability: Request your data in a structured, machine-readable format.

California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information is collected, the right to delete, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. To submit a California privacy request, contact us at studyenrollment@discoverytrials.com.

To exercise any of your rights, please contact us using the information in Section 13. We will respond to verified requests within 30 days.

10Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.

• Interest form submissions are retained for up to 3 years from the date of submission.
• Clinical research records are retained for a minimum of 15 years as required by FDA regulations (21 CFR Part 312).
• Marketing communication records are retained until you opt out or request deletion.

When information is no longer needed, we securely destroy or de-identify it in accordance with applicable law and industry best practices.

11Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18 without verifiable parental consent. If a parent or guardian believes their child has submitted personal information to us, please contact us immediately and we will promptly delete such information.

Pediatric clinical trial participation, where applicable, follows additional protections under 21 CFR Part 50 Subpart D and requires explicit parental consent.

12Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will revise the "Last Updated" date at the top of this page.

We encourage you to review this policy periodically. Your continued use of our Services after any changes constitutes your acceptance of the revised policy. For material changes, we may provide additional notice such as a banner on our website or an email notification.

13Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us: