BUILDCLINICAL PRIVACY POLICY
July 20, 2026
Welcome to BuildClinical LLC (“BuildClinical”, also “we”, “us”, “our”). We assist research institutions and entities (“Clients”) in identifying and managing potential research participants (“Services”) for their ongoing research through the use of our website, www.buildclinical.com (“Website”) and related digital tools.
Protecting your privacy is our priority. We are providing this Privacy Policy to explain how your information is collected, used, and disclosed by BuildClinical in connection with our Website and Services that connects prospective participants to research studies and our Clients. This Privacy Policy applies to Personal Data that is processed by BuildClinical, including on our websites, mobile applications, and other online Services. For the purposes of this Privacy Policy, “Personal Data” refers to any information relating to an identified or identifiable individual, as defined by the General Data Protection Regulation (GDPR). Once BuildClinical shares your Personal Data with a Client research team, that Client is responsible for handling your information in accordance with their own privacy policies and applicable law, including HIPAA where the Client is a covered entity. BuildClinical is not responsible for a Client's data handling practices after your information has been shared.
This Privacy Policy outlines your rights under the GDPR (if you are located in the European Economic Area or the United Kingdom). If you are located in the United States and your information is shared with a Client that is a HIPAA covered entity, you may also have rights under HIPAA with respect to that Client's handling of your information. Where a Client that is a HIPAA covered entity enters health information about you into our platform in connection with a research study, BuildClinical handles that information in accordance with HIPAA and the applicable Business Associate Agreement with that Client. For questions about your HIPAA rights in connection with a specific research study or information entered by a research team, please contact the research institution directly or reach us at support@buildclinical.com."
BuildClinical collects Personal Data directly from prospective participants through our Website and submission forms under BuildClinical’s own consent framework. This data is classified as healthcare marketing data and BuildClinical is not acting as a covered entity or business associate under HIPAA with respect to this directly collected data. For purposes of the GDPR, BuildClinical is the data controller of the Personal Data we collect directly through our Website and Services, based on the participant’s consent. Where Clients who are HIPAA covered entities or business associates enter health information about you into our platform in connection with a research study, that data may constitute Protected Health Information under HIPAA. BuildClinical handles such data in accordance with HIPAA and the applicable Business Associate Agreement with that Client.
If you are located in the European Economic Area or UK, your Personal Data may be transferred to and processed in countries outside of these geographies, including the United States. In such cases, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or ICO, as applicable, to ensure adequate data protection.
Please read this Privacy Policy carefully as it will help you make informed decisions about sharing your Personal Data with us. By providing us Personal Data through our Submission Form, you have acknowledged that you have reviewed, understood, and consented to the collection, organization, use and disclosure of your Personal Data in accordance with applicable privacy laws, including GDPR as described in this Privacy Policy. If there are any terms in this Privacy Policy that you do not agree with, please discontinue use of our Website and our Services.
1. WHAT INFORMATION DO WE COLLECT?
What Personal Data BuildClinical Collects
As a part of our Services, we collect Personal Data from Prospective Participants to provide the Services. We may collect: your name; email address; postal location; telephone number; data sent by your mobile devices; IP address you access website from; data on preferences/customization of our Website; cookies; web logs; aggregated user data; GPS/location data; health insurance status; gender identity; racial or ethnic background. Where applicable, we may also collect health-related information.
We will utilize this data to provide initial correspondence by means of telephone, email, or SMS/text message. In the event that you are a parent or legal guardian for a minor dependent or otherwise incapacitated individual, you may likewise share their Personal Data and complete a Submission Form on behalf of the represented individual (“Represented Individual”). Any recognizable data you submit in the interest of a Represented Individual will be regarded as Personal Data in regards to this Privacy Policy.
Should you decide not to provide us with all the requested Personal Data, as is entirely your right, please know that our Services may not work appropriately or fully.
You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. You can exercise this right by contacting us at Support@BuildClinical.com.
How BuildClinical Collects Personal Data
When you complete a Submission Form, we will gather certain Personal Data that can be utilized to contact you and determine whether we are able to connect you with our Clients and Services.
As you explore our Services and Website, certain non-descriptive data may be gathered about your visit and devices, including through Cookies and other technologies. BuildClinical uses standard web logs that record basic data about your visit to our Website, such as the date and time of the visit, the pages viewed during the visit and the domain name of your Internet service provider.
We collect and process your Personal Data only where we have a lawful basis to do so under GDPR, such as your consent, our legitimate interests, a legal obligation, or the performance of a contract. In cases where we collect special categories of data (such as health or racial/ethnic data), we will do so only with your explicit consent or as otherwise permitted by applicable law.
2. HOW DO WE USE YOUR INFORMATION?
How BuildClinical Uses Personal Data
We collect, process, and utilize Personal Data according to all applicable regulations and laws, and for the genuine business purposes laid out in this Privacy Policy, including:
To deliver our Services: BuildClinical may utilize Personal Data to share with our Clients for current, potential, or future Services. Unless you disclose to us that you no longer wish to continue utilizing our Services, we will consider the Personal Data you submit through the Submission Form for future studies, healthcare products, and Clients’ services.
To maintain and improve service quality: BuildClinical may utilize Personal Data about you for quality improvement measures of BuildClinical’s Services.
To Communicate relevant opportunities: With your prior consent where required, BuildClinical may utilize Personal Data to provide you with information about offers, products, and services that might be of interest. We may provide you with this information by telephone or email, as allowed by relevant law.
To support operational, legal and compliance purposes: BuildClinical utilizes a variety of web technologies to process Personal Data that is retained for the legitimate interest of monitoring and improving our Services.
You may get in touch with us whenever to stop the utilization of your Personal Data for any purposes by emailing Support@BuildClinical.com.
3. WILL YOUR INFORMATION BE SHARED WITH ANYONE?
Personal Data Shared with Our Clients
BuildClinical may share the Personal Data you submit through our website submission forms with the Clients who have contracted with us specifically to obtain that data. Our Clients only utilize this data to select Prospective Participants that qualify for their research studies, and only have access to the specifically relevant Personal Data applicable to the Client engagement only.
We require all Clients to agree to protect the privacy and security of the Personal Data they receive from us, and to use such data only in accordance with applicable privacy laws including HIPAA and GDPR and other applicable data protection laws.
We have entered into Data Processing Agreements (DPAs) with all third-party service providers and subprocessors that process Personal Data on our behalf, as required under GDPR.
BuildClinical uses automated processing, machine learning, and artificial intelligence technologies to assess eligibility, optimize campaign performance, and improve our Services. If automated decision-making or profiling is used in determining your eligibility for a research study, you have the right to request human review of that decision, object to the decision, or request an explanation of the logic involved by contacting us at support@buildclinical.com.
Data Retention
For prospective participant data collected through our submission forms, our standard retention period is 10 years from the date of collection. We may retain your Personal Data beyond this period where we have a legitimate interest in doing so, including to match you with future research studies for which you may be eligible. Retention beyond the standard period is subject to periodic review to ensure continued relevance and compliance with applicable law. You may request deletion of your Personal Data at any time by contacting us at support@buildclinical.com, subject to any legal obligations requiring retention.
Data Disclosed for Our Protection and the Protection of Others
We may share your information with public authorities, such as law enforcement, if we are legally required to do so or if we need to protect our rights or the rights of third parties.
We may be required to disclose Personal Data to comply with a law or regulation, or in response to a search warrant, subpoena, court order, law or regulation. In the event that we are legally compelled to disclose your Personal Data to a third party, we will attempt to notify you, unless doing so would violate the law or court order.
Additionally, the Personal Data that we gather from Clients and Prospective Participants is considered a business resource that can be transferred in the event of a merger, acquisition, or reorganization.
De-identified and Aggregate Data
We may share de-identified data with third parties for quality improvement and marketing purposes only. We do not sell, rent, or share Personal Data to anyone except as described in this Privacy Policy and as permitted by applicable laws.
4. HOW DO WE KEEP YOUR INFORMATION SAFE?
Security of Your Personal Data
We utilize administrative, technical and physical safeguards intended to protect the data that we gather from or about you (Personal Data) in line with the requirements of GDPR and applicable law from unapproved access, use or dissemination. We use Secure Socket Layer (SSL) for authentication and encrypted communications to ensure users’ trust and confidence in our Website and Services.
Security Measures Include: Encryption of Personal Data in transit and at rest; Restricted access to data on a need-to-know basis; Ongoing monitoring and logging of access to systems containing Personal Data; Staff training and confidentiality agreements.
BuildClinical implements procedures to detect and respond to potential breaches of Personal Data in accordance with applicable law. We use monitoring systems and maintain an incident response plan to investigate, mitigate, and notify affected parties of any confirmed breaches within legally mandated timeframes.
We limit access to Personal Data to those who need it for specific job functions.
Internet Safety
The BuildClinical Website may contain links to different sites for your benefit. We provide the links for your convenience, but we do not review, control, or monitor the privacy practices of websites operated by others. This Privacy Policy does not apply to any other website, including any other BuildClinical or OpenClinica website. BuildClinical does not control third-party sites or their security measures, which may contrast from those set out in this Privacy Policy. Any Personal Data you decide to provide to third parties is subject to their privacy policies, and is not covered under this Privacy Policy.
BuildClinical recommends that you review the Privacy Policy on the third-party site to decide if you would like to proceed with sharing Personal Data.
It is your responsibility to ensure that the computer you use to access our Website is adequately secured and protected against malicious software, Trojan horses, computer viruses and worm programs. Without adequate security measures on a computer, there is a risk that the Personal Data you share on our Website could be unknowingly disclosed to unauthorized third parties. Similarly, despite BuildClinical’s best efforts to protect your Personal Data, there is always some risk that an unauthorized third party may find a way around our security systems or that transmissions of your information over the internet may be intercepted. Please only visit sites that you trust and take all possible precautions to protect yourself and your Personal Data.
5. DO WE COLLECT INFORMATION FROM MINORS?
Our Services are not directed to individuals under the age of 13 (or under 16 in jurisdictions with stricter protections under applicable law). We do not knowingly collect Personal Data from children under these ages without verifiable parental or legal guardian consent.
If you are a parent or legal guardian and believe that your child has provided us with Personal Data without your consent, you may contact us at Support@BuildClinical.com. We will take steps to delete such information promptly as required by applicable data protection laws.
If we become aware that we have collected Personal Data from a child without proper consent, we will securely delete the information from our systems unless we are legally obligated to retain it.
In compliance with the Children’s Online Privacy Protection Act (COPPA), GDPR, and other applicable laws, we implement procedures to ensure that children’s data is not collected or processed inappropriately.
6. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
If you are a California resident, you are granted specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). These include: The right to know what personal information we collect, use, disclose, and sell; The right to delete personal information collected about you, subject to legal exceptions; The right to opt out of the sale or sharing of personal information, if applicable; The right to correct inaccurate personal information about you; The right to limit the use and disclosure of sensitive personal information; The right not to be discriminated against for exercising any of your CCPA/CPRA rights.
You can learn more at https://www.buildclinical.com/ccpa-notice-of-collection.
To exercise your rights, you may submit a request to us at Support@BuildClinical.com. We will verify your identity before fulfilling your request in accordance with applicable law.
Additionally, California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits users of the web site who are California residents to request and obtain certain information regarding our disclosure of Personal Data to third parties for their direct marketing purposes. If you are a California resident and would like to make such a request, please contact us at support@BuildClinical.com.
7. DO WE MAKE UPDATES TO THIS POLICY?
We may update this Privacy Policy from time to time to reflect changes in legal, regulatory, operational, or technological environments. When we make material changes, we will post a revised policy on our Website and update the “Last Revised” date.
We encourage you to review this Privacy Policy regularly to stay informed of how we are protecting your Personal Data.
If you continue to use our Services after a revised policy is posted, you acknowledge and consent to the updated terms.
8. HOW CAN YOU CONTACT US ABOUT THIS POLICY?
If you have any questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact us at: Support@BuildClinical.com
If you are located in the EU or UK and wish to contact our Data Protection Officer (DPO), please email Support@BuildClinical.com with “DPO Inquiry” in the subject line. If we are required to appoint a formal DPO, their contact information will be made available on our website.
Last Revised: July 20, 2026