Privacy Policy
Your privacy and the security of your health information is our top priority
Last Updated: February 5, 2026
Our Commitment to Your Privacy
NexTrial ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our clinical trial matching platform.
We comply with the Health Insurance Portability and Accountability Act (HIPAA), the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.
By using NexTrial, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our services.
Information We Collect
Personal Information
- Name, email address, phone number, and date of birth
- Physical address and location information
- Account credentials and authentication data
Health Information (Protected Health Information - PHI)
- Medical diagnosis and disease stage
- Current treatments and medications
- Known allergies and medical conditions
- Medical history relevant to clinical trial eligibility
- Laboratory results and test data (when provided)
Technical Information
- Device information (browser type, operating system)
- IP address and location data
- Usage data and interaction patterns
- Cookies and similar tracking technologies
How We Use Your Information
Primary Purposes
- Match you with relevant clinical trials based on your medical profile
- Process and respond to your inquiries and requests
- Provide personalized recommendations using AI analysis
- Communicate with you about trial opportunities and updates
- Maintain and improve our services and user experience
Secondary Purposes
- Analyze usage patterns to improve platform functionality
- Conduct research to enhance our matching algorithms
- Comply with legal obligations and prevent fraud
- Protect the security and integrity of our platform
How We Protect Your Information
Security Measures
- AES-256 bit encryption for data at rest and in transit
- HIPAA-compliant infrastructure hosted on secure servers
- Multi-factor authentication and secure access controls
- Regular security audits and penetration testing
- Automated backup systems with disaster recovery protocols
- Employee training on data privacy and HIPAA compliance
Access Controls
- Role-based access control (RBAC) for system administrators
- Audit logs tracking all data access and modifications
- Automatic session timeouts and secure logout procedures
- Network segmentation and firewall protection
Information Sharing and Disclosure
We May Share Your Information With:
- Clinical Trial Sponsors: When you express interest in a trial, we may share relevant eligibility information with the trial sponsor or research site (with your explicit consent)
- Healthcare Providers: With your authorization, we may share information with your healthcare team
- Service Providers: Trusted third-party vendors who help us operate our platform (all bound by strict confidentiality agreements)
- Legal Requirements: When required by law, court order, or government regulation
- Business Transfers: In connection with a merger, acquisition, or sale of assets (with continued privacy protection)
We Will NEVER:
- Sell your personal health information to third parties
- Share your data for marketing purposes without consent
- Use your information for purposes incompatible with this policy
- Disclose your PHI without proper authorization or legal basis
Your Privacy Rights
Under applicable privacy laws (including HIPAA, GDPR, and CCPA), you have the following rights:
Access Your Data
Request a copy of all personal information we have about you
Correct Your Data
Update or correct inaccurate or incomplete information
Delete Your Data
Request deletion of your account and associated data (subject to legal retention requirements)
Export Your Data
Receive your data in a portable, machine-readable format
Restrict Processing
Limit how we process your personal information
Withdraw Consent
Revoke consent for data processing at any time
Object to Processing
Object to certain types of data processing activities
File a Complaint
Lodge a complaint with relevant data protection authorities
To exercise any of these rights, please contact us at privacy@nextrial.com or visit your account settings.
Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy, unless a longer retention period is required by law.
- Active Accounts: Retained while your account is active
- Deleted Accounts: PHI deleted within 30 days; anonymized data may be retained for research
- Legal Requirements: Some data retained longer to comply with legal obligations
International Data Transfers
Your information may be transferred to and maintained on servers located outside your country of residence. We ensure that all international data transfers comply with applicable data protection laws through:
- Standard Contractual Clauses approved by the European Commission
- Data Processing Agreements with all service providers
- Adherence to Privacy Shield principles (where applicable)
Children's Privacy
NexTrial is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience. These include:
Essential Cookies
Required for the platform to function (authentication, security, session management)
Analytics Cookies
Help us understand how you use our platform to improve functionality
Preference Cookies
Remember your settings and preferences for a better experience
You can control cookies through your browser settings. Note that disabling essential cookies may affect platform functionality.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the updated policy on our website with a new "Last Updated" date
- Sending you an email notification (if you have an account)
- Displaying a prominent notice on our platform
Your continued use of NexTrial after any changes indicates your acceptance of the updated policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Address
NexTrial Privacy
62/1A, Mahindra University
Bahadurpally, Jeedimetla
Hyderabad, Telangana 500043
Compliant with
HIPAA
Compliant with
GDPR
Compliant with
CCPA
Standard
FHIR R4