Privacy & cookie policy

In short: we collect the minimum we need, we do not sell it, we do not use it for advertising, and you can ask us to delete it at any time.

1. Who we are

JustClinicals Ltd is the data controller for information collected through this website and our volunteer registry. Our registered office is Kingsmead House, 14 Silbury Boulevard, Milton Keynes MK9 3AF, United Kingdom, company number 09884412, registered in England and Wales. We are registered with the Information Commissioner's Office.

Where you enrol in a specific clinical trial, the study sponsor may be a joint or independent controller for study data. That relationship is set out in the participant information sheet for each individual study.

2. What we collect

Information you give us

• Contact details — name, email address, telephone number, postcode or ZIP
• Registry information — date of birth, general health information, therapeutic areas of interest, prior research participation
• Enquiry content — anything you write in a contact, careers or feasibility form
• Application information — CV links, covering notes and professional background

Information collected automatically

• Technical data — IP address, browser type, device type, referring page
• Usage data — pages visited and time spent, collected in aggregate

We do not use behavioural advertising trackers, cross-site pixels, or data brokers.

3. Why we use it, and our lawful basis

• To match you to studies — consent. You give this when you register, and may withdraw it at any time.
• To respond to enquiries — legitimate interests, namely answering a question you asked us.
• To process job applications — steps taken at your request prior to entering a contract.
• To meet regulatory obligations — legal obligation, where research or employment law requires us to retain records.
• To improve the website — legitimate interests, using aggregated analytics that do not identify you.

Health information is special category data. Where we process it, we rely on your explicit consent, or on the condition relating to scientific research in the public interest with appropriate safeguards.

4. Who we share it with

We share personal information only where necessary, and never for marketing purposes. Recipients may include:

• Our IT and hosting providers, under written processing agreements
• Study sponsors and CROs — using coded data only, in which you are identified by a participant number rather than your name
• Regulators and ethics committees, where required by law or in the course of an inspection
• Professional advisers, where we are legally obliged to disclose

We do not sell personal data. We do not transfer registry data outside the region in which it was collected without an appropriate safeguard in place.

5. How long we keep it

• Registry records — reviewed every two years; deleted if we have not been in contact and you have not asked us to retain them
• General enquiries — 24 months from last contact
• Unsuccessful job applications — 12 months, unless you ask us to keep them longer
• Clinical trial records — retained for the period required by the applicable regulation and the study protocol, typically 25 years

6. Your rights

Under UK GDPR you have the right to access your data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to data portability, and to withdraw consent at any time. Withdrawing consent does not affect processing carried out before you withdrew it.

Some rights are limited where data forms part of a clinical trial record — we cannot delete safety data that regulators require us to retain. We will always explain clearly if that applies to a request you make.

To exercise any right, email dpo@justclinicals.com. We respond within one calendar month. If you are unhappy with our response you may complain to the Information Commissioner's Office at ico.org.uk.

7. Cookies

We use a small number of cookies:

• Strictly necessary — session cookies that keep forms working and protect against cross-site request forgery. These cannot be switched off.
• Preference — one cookie (jc_cookies) that remembers you have seen our cookie notice, kept for twelve months.
• Analytics — aggregated, IP-truncated page statistics. These do not identify you individually.

We set no advertising or cross-site tracking cookies. You can block or delete cookies through your browser settings; blocking strictly necessary cookies will prevent forms from submitting.

8. US participants and HIPAA

Information collected at our US sites is held in the United States and handled in accordance with HIPAA and applicable state privacy law. Protected health information is used and disclosed only as permitted by your authorisation and by the study protocol. You may request a copy of our Notice of Privacy Practices from any US site.

9. Contacting our data protection officer

Email dpo@justclinicals.com or write to the Data Protection Officer at Kingsmead House, 14 Silbury Boulevard, Milton Keynes MK9 3AF, United Kingdom.

This policy is provided as a starting template and must be reviewed by a qualified data protection professional, and tailored to your actual processing activities, before publication.