Lindus Health and its affiliates, subsidiaries, and related entities (“Lindus Health,” “we'', “our”) is committed to protecting the privacy and security of the personal information we collect about end customers and users of our services (“you/your”).
We are further committed to ensuring we meet our legal obligations when processing your personal information under the relevant Data protection Laws, which include but are not limited to:
● the California Consumer Privacy Act (“CCPA”).
● the Canadian Personal Information Protection and Electronic Documents Act(“PIPEDA”).
● the Colorado Privacy Act ("CPA").
● the Connecticut Data Privacy Act ("CTDPA").
● the Utah Consumer Privacy Act ("UCPA").
● the Virginia Consumer Data Protection Act ("VCDPA").
The purpose of this privacy notice is to explain what. personal information we collect about you and how we use it.
Please read this privacy notice carefully as it provides important information about how we handle your personal information and your rights. If you have any questions about any aspect of this privacy notice you can contact us using the information provided below, or by emailing us at: data@lindushealth.com.
Personal information means information that identifies, relates to, or could reasonably be linked with you or your household. For example, it could include your name, social security number, email address, photographs, geolocation data, fingerprints, and inferences from other personal information that could create a profile about your preferences and characteristics.
We may also collect, store, and use sensitive personal information which is a specific subset of personal information. This subset of personal information can include certain government identifiers (such as social security numbers), financial account details, contents of mail, email and text messages, biometrics and information concerning an individual’s health or sexual orientation, or information about racial or ethnic origin, religious or philosophical beliefs, or union membership.
However, we will only collect the personal information outlined in the Informed Consent Form and/or Participant Information Sheet and/or HIPAA Authorization Form. This documentation will have been provided to you by the study team, please refer to it for more information on the types of information we may collect as part of this study.
We collect most of the personal information directly from you in person, by telephone, text, or email and/or via our website.
For example, we may have collected your personal information directly from you aspart of the recruitment process, via our online contact/registration form, or from our email correspondence with you.
We will continue to collect personal information about you for the duration of the study trial.
Most commonly, we will use your personal information in the following circumstances:
Where we need to use medical protected health information, this will only be done where the participant or their Legally Authorized Representative has signed and/or agreed to the study-specific HIPAA Authorization Form (note this may form part of the Informed Consent Form), or in the instance where an Institutional Review Board (IRB) has approved the use of a waiver to HIPAA Authorization.
By signing the informed consent form, or in the case of a waiver of informed consent approved by the IRB by participating in the trial, you consent to your personal information being shared with the trial site and Sponsor and/or the contracted provider working on the trial.
We may also disclose your information to third parties in connection with other purposes set out in this privacy notice. These third parties may include:
We will only share (‘share’ includes making available remotely) personal information with third parties where we have a contract in place that contains the required provisions to facilitate such transfers.
We do not sell or share personal information to another business or third party for monetary or other valuable consideration.
We may disclose your personal information to third-party service providers and/or business partners located outside the U.S. for the purposes indicated in this privacy notice. Some of these third-party service providers may include cloud-based storage providers who may store and process personal information in the cloud.
Where we make such disclosures, we have taken reasonable steps to ensure that any overseas recipients do not breach the relevant state legislation in relation to any personal information. We have carried out a thorough due diligence process and have imposed relevant contractual obligations on any offshore recipients to ensure compliance.
By participating in the study, you accept that Lindus Health may transfer your personal information outside of the US where necessary.
We will retain your personal information for as long as is necessary to provide you with our services and for a reasonable period thereafter to enable us to meet our contractual and legal obligations and to deal with complaints and claims.
At the end of the retention period, your personal information will be securely deleted or anonymised, for example by aggregation with other data, so that it can be used in a non-identifiable way for statistical analysis, business planning and/or product development.
We implement appropriate technical and organisational measures to protect data against unauthorised or unlawful processing and against accidental loss, destruction or damage.
In addition to the technical and organisational measures we have put in place, there are simple things you can do to in order to further protect your personal information, such as:
1. Never share One Time Passcodes (OTPs).
2. Never enter your details after clicking on a link in an email or text message.
3. Always send confidential information by encrypted email to reduce risk of interception.
4. If you’re logged into any online service do not leave your computer unattended.
5. Close down your internet browser once you’ve logged off.
6. Never download software or let anyone log on to your computer or devices remotely, during or after a cold call.
7. You can easily identify secure websites by looking at the address in the top of your browser which will begin https:// rather than http://.
We will always ensure, no matter where you are located in the world, that we adhere to and fully respect your data protection rights. In the US, you have the following rights:
We do not make significant decisions based solely on automated processing nor do we disclose sensitive personal information for purposes which would require us to offer you the right to limit.
If you exercise one of the above rights, we may need to request some additional information from you to help us confirm your identity and/or that you are entitled to make such a request. This confirmation is required to avoid personal information about one individual being sent to another, either accidentally or because of deception.
Once we are satisfied with the above, in most cases, we will process any rights requests received straight away. However, in certain circumstances there may be a legal requirement or administrative reason to deny your request. In these circumstances, we will ensure that we advise you fully and explain our reason(s) for the refusal.
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. If you wish to exercise your rights, please contact us at data@lindushealth.com.
Lindus is committed to complying with the Children’s Online Privacy Protection Act (COPPA) and to protecting the online privacy of children under the age of 13.
In certain circumstances, during the provision of our services, we may process the personal information of children under the age of 13. However, we do not knowingly collect personal information of children without parental consent, unless permitted by law. If you are a child under the age of 13, you must have your parents’ permission before providing us with your information. If you learn that a child has provided us with their personal information without parental consent, you may contact us as described below. If appropriate, we will securely and permanently delete the information from our systems.
If you have any questions, or wish to exercise any of your rights, then you can contact:
Lindus Health
2nd Floor, 90 Union Street
London
SE1 0NW
United Kingdom
Alternatively, you can email us at data@lindushealth.com
We have also appointed an external Data protection Officer (“DPO”). Our DPO is Evalian Limited and they can be contacted by using the above email or postal address. Please send your communication clearly indicating ‘FAO the ‘Data Protection Officer’, and your message will be passed to Evalian Limited for attention.
You have the right to lodge a complaint with your State Supervisory Authority if you are concerned about the way in which we are handling your personal information, or if you feel that we are infringing data protection law.
We may update this notice (and any supplemental privacy notice), from time to time as shown below. We will notify you of the changes where required by applicable law to do so.