Privacy & cookie policy

The short version: we collect as little as we can get away with, we do not sell it, we do not use it for advertising, and you can ask us to delete it whenever you like.

1. Who we are

JustClinical Research Ltd is the data controller for information collected through this website and our volunteer register. Our registered office is Wolverton House, 8 Midsummer Boulevard, Milton Keynes MK9 2EA, United Kingdom, company number 09884412, registered in England and Wales. We are registered with the Information Commissioner's Office.

If you join a specific trial, the study sponsor may also be a controller for the study data. That arrangement is set out in the information sheet for that particular study.

2. What we collect

Things you tell us

• Contact details: name, email, phone, postcode or ZIP
• Register information: date of birth, general health information, conditions you are interested in, whether you have taken part before
• Whatever you write in a contact, careers or feasibility form
• Job application details: CV links, covering notes, professional background

Things collected automatically

• Technical information: IP address, browser, device, the page that sent you here
• Aggregated usage: which pages get visited and for how long

We do not run advertising trackers, cross-site pixels, or anything supplied by a data broker.

3. Why, and on what legal basis

• Matching you to studies — your consent, which you give when you register and can take back at any time.
• Answering your enquiry — legitimate interests, specifically replying to a question you asked us.
• Handling job applications — steps taken at your request before a possible contract.
• Meeting regulatory duties — legal obligation, where research or employment law says we must keep records.
• Improving the website — legitimate interests, using aggregated figures that do not identify you.

Health information counts as special category data. Where we handle it we rely either on your explicit consent or on the condition covering scientific research in the public interest, with appropriate safeguards in place.

4. Who else sees it

Only where it is necessary, and never for marketing. That can include:

• Our IT and hosting suppliers, under written agreements
• Study sponsors and CROs, who receive coded data in which you are a participant number rather than a name
• Regulators and ethics committees, where the law or an inspection requires it
• Professional advisers, where we are legally obliged to disclose

We do not sell personal data, and we do not move register data outside the region it was collected in without an appropriate safeguard.

5. How long we keep it

• Register records — reviewed every two years and deleted if we have not been in touch and you have not asked us to keep them
• General enquiries — 24 months from the last time we spoke
• Unsuccessful job applications — 12 months, unless you ask us to hold them longer
• Trial records — for as long as the regulations and the protocol require, which is usually 25 years

6. Your rights

Under UK GDPR you can ask to see your data, have mistakes corrected, have it deleted, restrict or object to what we do with it, take it elsewhere, and withdraw consent at any time. Withdrawing consent does not undo anything we did legitimately before you withdrew it.

Some of these are limited where the data is part of a clinical trial record. We cannot delete safety data that a regulator requires us to keep. If that applies to something you ask for, we will tell you plainly rather than quietly not doing it.

Email dpo@justclinical.com to exercise any of these. We reply within one calendar month. If you are unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk.

7. Cookies

• Necessary — session cookies that make the forms work and protect against cross-site request forgery. These cannot be turned off.
• Preference — one cookie (jc_cookies) remembering that you have seen the cookie notice, kept for a year.
• Analytics — aggregated page statistics with truncated IP addresses, which do not identify you.

No advertising or cross-site tracking cookies are set. You can block or delete cookies in your browser, though blocking the necessary ones will stop forms submitting.

8. American participants

Information collected at our US sites stays in the United States and is handled under HIPAA and the relevant state privacy law. Protected health information is used and disclosed only as your authorisation and the study protocol allow. Ask any US site for a copy of our Notice of Privacy Practices.

9. Getting hold of our data protection officer

Email dpo@justclinical.com, or write to the Data Protection Officer at Wolverton House, 8 Midsummer Boulevard, Milton Keynes MK9 2EA, United Kingdom.

This policy is a starting template. Have a qualified data protection professional review it against what you actually do with data before you publish it.