ePRO Privacy Notice

Study participants involved in P1vital or client sponsored clinical research studies

P1vital Products Limited (P1vital) is the data controller for the information that you provide during a study where P1vital is acting as the Sponsor, and P1vital is the data processor for the information that you provide during a study where P1vital is acting as the CRO.

Health and care research should serve the public interest, which means that we need to demonstrate that our research serves the interests of society as a whole. We do this by following the UK Policy Framework for Health and Social Care Research.

We use personally identifiable information to conduct research to improve health and care. As a provider of products and services to healthcare organisations, we have a legitimate interest in using information relating to your health and care for research studies, when you agree to take part in a research study. This means that we will use your data, collected in the course of a research study, in the ways needed to conduct and analyse the research study. Your rights to access, change or move your information are limited, as we need to manage your information in specific ways in order for the research to be reliable and accurate. If you withdraw from the study, we will keep the information about you that we have already obtained. To safeguard your rights, we will use the minimum personally identifiable information possible.

The Participant Information Sheet for the research study will provide more detailed information on what information is collected and why.

You can find out more about how we use your information at www.p1vital.com/privacy-notice/.

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this privacy notice. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact the DPO using the details set out below.

DPO contact details (these contact details should be used if you are contacting P1vital and you are based in the United Kingdom or outside the European Union (EU) and the European Economic Area (EEA)):

• • • Email address: dpo@p1vital.com
  • • Postal address: Manor House, Howbery Park, Wallingford, Oxfordshire, OX10 8BA
  • • Telephone number: +44 (0)1865 522030

As we process the personal data of individuals in the EU and EEA, but do not have an establishment in the EU or EEA, we have appointed DataRep as our Data Protection Representative (DPR) under the General Data Protection Regulations (GDPR) Article 27.

If we have processed or are processing your personal data, you may be entitled to exercise your rights under the GDPR in respect of that personal data. You may address DataRep if you are located in the EU and would like to raise a question, or otherwise exercise your rights in respect of your personal data using details set out below:

DPR contact details (these contact details should be used if you are contacting P1vital and you are based in the EU and EEA):

• • • Name of DPR: DataRep
  • • Email address: datarequest@datarep.com (send an email quoting ‘P1vital’ in the subject line)
  • • Postal address: click here to contact DataRep directly at the most convenient of their addresses

If you have any concerns over how DataRep will handle the personal data they will require to undertake their services, please refer to their privacy notice at www.datarep.com/privacy-policy.

If you wish to raise a complaint on how we have handled your personally identifiable data, you can contact our DPO or DPR (EU) who will investigate the matter. If you are not satisfied with our response or believe that we are processing your personal data in a way that is not lawful, you can complain to the Information Commissioner’s Office (ICO).

Use of data processors in P1vital or client-sponsored clinical research studies

Data processors are third parties who provide elements of our clinical research study service for us. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us without our consent and only then on the basis that we are satisfied that the sub-processors they use are subject to equivalent obligations relating to the security of your data and subject to a Data Processing Agreement which is compliant with EU GDPR, United Kingdom Data Protection Act 2018, and other relevant data protection regulations. They will hold it securely and retain it for the period that we instruct.

We keep our privacy notice under regular review. This privacy notice was last updated on 21st July 2021.