Privacy Policy

How we collect, use, and protect your personal information.

Last Updated: October 21, 2025

Introduction

The Patient Recruiting Agency, LLC (TPRA), doing business as GoClinicalTrials, located at 11719 FM 2244, Suite 300, Bee Cave, Texas 78738 USA maintains this privacy policy for websites including tprausa.com, patientrecruiting.com, and goclinicaltrials.com, plus study-specific recruitment sites.

This policy covers processing practices across jurisdictions including the United States, Europe, United Kingdom, Canada, Australia, and New Zealand. TPRA complies with the EU-U.S. Data Privacy Framework and UK Extension, with certification viewable at dataprivacyframework.gov.

By using any of the websites covered by this Privacy Policy, you agree to the terms of this Privacy Policy.

Party Responsible for Your Data

TPRA serves as the data controller responsible for personal information processing.

Information We Collect

Users authorizing information provision represent express consent for specified uses. Completion of questionnaires, surveys, or registration forms constitutes opt-in. Opt-out requests receive implementation within 10 business days.

Personal Information Collected and Disclosed

Collected data includes:

  • Name
  • Telephone/text number
  • Text message consent
  • Contact timing preferences
  • Email address
  • Postal code
  • Age
  • Gender
  • Questionnaire/survey responses including health information

Information transfers to designated research clinic sites only. Personal identifying data retention spans six months following website deactivation or study conclusion (whichever is later), then deletion occurs. Deidentified information remains retained.

Third-party transfers include:

  • Google LLC (Analytics)
  • Usercentrics A/S (Cookiebot)
  • Amazon Web Services, Inc.
  • Meta Platforms, Inc.

EU/UK residents: Processing relies on Article 6(1)(a) GDPR consent basis. Onward transfers to research sites involve controller responsibility, with liability maintained unless proven otherwise.

Non-Personal Information

Collected data encompasses device type, hostname, operating system, browser type, referrer URLs, and access timestamps.

EU/UK basis: The uses of this information as mentioned above in connection with the service provided by this website are legitimate interests under Article 6(1)(f) GDPR.

Cookies

Small data files enable website functionality and advertising relevance. Most browsers allow cookie rejection, though functionality may suffer.

EU/UK residents: Consent obtained on websites; processing under Article 6(1)(f) GDPR legitimate interests basis.

IP Addresses

Internet service provider-assigned numbers support website operation and security but aren't disclosed or used for identification.

Web Logs

Standard logging records visit dates, times, viewed pages, and ISP domain names. Logs identify individuals suspected of damage or unauthorized use; law enforcement sharing may occur for security violations.

Google Analytics and Advertising Cookies

Google Analytics processes usage data including IP addresses per Google's privacy policies. Advertising cookies from Google, Facebook/Instagram, Microsoft, TikTok, and others may appear.

Opt-out resources:

Children

Services aren't designed for persons under 18. No personally identifiable information collection occurs from known minors.

Data Security

Technical, physical, and organizational safeguards protect against unauthorized or unlawful processing and/or against accidental loss, alteration, disclosure, or access. U.S. data storage is standard; EU/UK research study data may reside in either location.

Links to Other Websites

External website operators' privacy practices fall outside TPRA control; users should review respective privacy policies.

Change Notification

Policy revisions may occur without notice. The "last updated" date indicates modifications. Continued website use constitutes acceptance of revised terms.

Dispute Resolution for EU/UK Residents

Complaints receive resolution within 45 days. Unresolved matters escalate to International Centre of Dispute Resolution - American Arbitration Association (no-cost services). Additional complaint avenues include EU supervisory authorities or UK Information Commissioner's Office.

FTC investigatory and enforcement authority applies.

Data Subject Rights

GDPR-based rights for EU/UK residents include:

  • Access confirmation and data receipt
  • Rectification of inaccurate information
  • Erasure requests under Article 17 circumstances
  • Processing restriction requests
  • Objection to legitimate-interest or direct-marketing processing
  • Data portability in structured, machine-readable formats
  • Supervisory authority complaints
  • Automated decision-making and profiling protections
  • Processing activity information
  • Consent withdrawal without affecting prior processing lawfulness
  • Recipient disclosure information
  • Refusal consent with consequence notification

Access/Update & Limiting Disclosure/Use

EU, UK, Canada, Australia, and New Zealand residents may request stored data. Error corrections occur within 7 days of notification. Individuals bear responsibility for data accuracy.

Disclosure limitation occurs through incomplete form submission. Cookie disclosure limits involve non-consent, browser restrictions, or third-party advertiser limitations. EU/UK, Canadian, Australian, and New Zealand websites require cookie consent before collection.

Data Privacy Framework

Certification details available at dataprivacyframework.gov.

Reservation of Rights

Information sharing occurs as legally required or for authorized government requests.

Privacy Contact Information

TPRA - Privacy Officer

11719 FM 2244, Suite 300

Bee Cave, Texas 78738, USA

Physical: 11719 Bee Caves Road, Austin, Texas

Email: privacy@tprausa.com