Privacy Policy

Introduction

At RAN BIOLINKS CANADA LTD, the developers of MAESTRO, we are committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard the information of users of our clinical research platform and website (collectively, the "Services").

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree with our policies and practices, please do not use our Services.

Information We Collect

We collect several types of information from and about users of our Services:

Information You Provide to Us

• Account Information: When you register for an account, we collect your name, email address, organization, job title, and account login credentials.
• Profile Information: Information you provide in your user profile, including profile photos, contact information, and professional details.
• Communication Information: When you contact us, we collect information such as your name, email address, phone number, and the content of your communications.
• Payment Information: If you subscribe to our paid services, we collect billing information, though payment card details are processed by our third-party payment processors.
• Content and Data: Any content, data, or information that you upload, input, or provide through the Services.

Information We Collect Automatically

• Usage Information: Information about your interaction with our Services, including features you use, pages you visit, and actions you take.
• Device Information: Information about the device you use to access our Services, including hardware model, operating system, and browser type.
• Log Information: Server logs, including IP address, browser type, referring/exit pages, operating system, date/time stamps, and clickstream data.
• Cookies and Similar Technologies: We use cookies and similar technologies to collect information about your browsing activities and to distinguish you from other users of our Services. For more information about our use of these technologies, please see our Cookie Policy.

Information We Receive From Other Sources

• Integration Partners: If you connect third-party services to our platform, we may receive information from those services.
• Service Providers: We may receive information from our service providers, such as analytics providers, advertising networks, and search information providers.
• Organizations: If you use our Services through an organization (such as your employer), we may receive information about you from that organization.

How We Use Your Information

We use the information we collect for various purposes, including:

Providing and Improving Our Services

• To provide, maintain, and improve our Services
• To develop new features, products, and services
• To process transactions and send related information
• To personalize your experience
• To respond to your requests, comments, and questions
• To provide customer service and technical support

Communication

• To communicate with you about our Services, including updates, security alerts, and support messages
• To send marketing communications, if you have opted in to receive them
• To respond to your inquiries and fulfill your requests

Analytics and Research

• To understand how our Services are used
• To monitor and analyze trends, usage, and activities
• To improve our Services and develop new features
• To conduct research and analysis to better understand our users

Security and Protection

• To detect, prevent, and address technical issues
• To protect the safety, integrity, and security of our Services
• To investigate and prevent fraudulent transactions, unauthorized access, and other illegal activities
• To verify your identity and prevent fraud

Legal Compliance

• To comply with applicable laws, regulations, and legal processes
• To enforce our terms and conditions and other agreements
• To protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or others

How We Share Your Information

We may share your information in the following circumstances:

With Your Organization

If you use our Services through an organization (such as your employer), that organization may have access to your information and content you provide or upload to the Services.

With Service Providers

We share information with third-party service providers who help us provide, maintain, and improve our Services, such as hosting providers, payment processors, analytics providers, customer service platforms, and email service providers.

For Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

For Legal Reasons

We may share information if we believe in good faith that disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or governmental request
• Enforce our agreements, policies, and terms of service
• Protect the security or integrity of our Services
• Protect RAN BIOLINKS CANADA LTD, our users, or the public from harm or illegal activities

With Your Consent

We may share information with third parties when you give us consent to do so.

Aggregated or De-identified Information

We may share aggregated or de-identified information, which cannot reasonably be used to identify you, for various purposes including research, analysis, and improving our Services.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

• Encryption of sensitive data both in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication requirements
• Regular security training for our staff
• Physical security measures for our facilities

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. Therefore, we cannot guarantee absolute security.

For more detailed information about our security practices, please visit our Security page.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

• The length of time we have an ongoing relationship with you and provide the Services to you
• Whether there is a legal obligation to which we are subject
• Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations)

When we no longer need to use your personal information, we will either delete it or anonymize it.

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information. These may include:

Access and Correction

You can access and update certain information about your account through your account settings. You may also contact us to request access to, correction, or deletion of personal information that you have provided to us.

Data Portability

You have the right to receive a copy of certain personal information we process about you in a structured, commonly used, and machine-readable format.

Deletion

You can request deletion of your personal information in certain circumstances. Note that we may retain certain information as required by law or for legitimate business purposes.

Objection and Restriction

You have the right to object to or request restriction of processing of your personal information in certain circumstances.

Withdraw Consent

Where we rely on your consent to process your personal information, you have the right to withdraw your consent at any time.

Marketing Communications

You can opt out of receiving marketing communications from us by following the unsubscribe instructions included in our marketing communications or by contacting us.

Do Not Track

Some browsers have a "Do Not Track" feature that lets you tell websites that you do not want to have your online activities tracked. These features are not yet uniform, so we currently do not respond to such signals.

Cookies

You can set your browser to refuse all or some browser cookies or to alert you when cookies are being sent. However, if you disable or refuse cookies, some parts of our Services may be inaccessible or not function properly.

International Data Transfers

RAN BIOLINKS CANADA LTD is based in Canada, and we process and store information in Canada and other countries. If you are located outside Canada, your information may be transferred to, stored, and processed in a country that may not have the same data protection laws as your jurisdiction. We adhere to Canadian privacy legislation including the Personal Information Protection and Electronic Documents Act (PIPEDA), while also ensuring compliance with international regulations where applicable.

If we transfer personal information from the European Economic Area (EEA), United Kingdom, or Switzerland to a country that has not received an adequacy decision from the European Commission, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to protect your personal information.

Children's Privacy

Our Services are not intended for children under the age of 16, and we do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete such information as quickly as possible.

Changes to Our Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice on our website prior to the changes becoming effective. We encourage you to review this Privacy Policy periodically for the latest information on our privacy practices.

Contact Us

If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

RAN BIOLINKS CANADA LTD
10212 Yonge Street, 202, Richmond Hill, Ontario, Canada, L4C 3B6
Email: [email protected]

Additional Information for Specific Jurisdictions

European Economic Area, United Kingdom, and Switzerland

If you are located in the EEA, UK, or Switzerland, the legal basis for our processing of your personal information will depend on the specific context in which we collect it:

• Contractual Necessity: We process personal information to perform our contract with you (e.g., providing our Services).
• Legitimate Interests: We process personal information based on our legitimate interests, such as improving our Services, preventing fraud, and ensuring security. Our legitimate interests are balanced against your rights and interests.
• Consent: We process personal information with your consent, which you can withdraw at any time.
• Legal Obligation: We process personal information to comply with applicable laws and regulations.

In addition to the rights described above, you have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or place of alleged infringement.

For more information about our GDPR compliance, please visit our GDPR Compliance page.

California Residents

While we are a Canadian company primarily following Canadian legislation, we respect the rights of California residents under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected the information, our purposes for collecting the information, and the categories of third parties with whom we share the information.
• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising purposes. RAN BIOLINKS CANADA LTD does not sell personal information or share it for cross-context behavioral advertising as defined by California law.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of your sensitive personal information.
• Non-Discrimination: You have the right not to be discriminated against for exercising your CCPA/CPRA rights.

To exercise your rights, please contact us using the information provided in the "Contact Us" section.