This Privacy Policy ("Policy") describes how theclinicalprotocol.com (the "Website," "we," "us," or "our") collects, uses, discloses, stores, and protects information about visitors and users ("you" or "your") of the Website. This Policy applies to all information collected through the Website, including all pages, subdomains, content, features, and services, as well as any related email, text, or electronic communications.
By accessing or using the Website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the practices described in this Policy, you must immediately stop using the Website. This Privacy Policy is incorporated by reference into our Terms of Service.
This Policy is intended to comply with applicable data protection laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the General Data Protection Regulation (GDPR), the ePrivacy Directive, and other applicable state, federal, and international privacy laws. Where specific laws grant you additional rights, those rights are described in the relevant sections below.
We may collect information that you voluntarily provide to us, including but not limited to:
When you visit the Website, we and our third-party partners automatically collect certain information about you and your device, including but not limited to:
We may receive information about you from third-party sources, including but not limited to: advertising networks and partners, analytics providers, social media platforms, data brokers, affiliate networks, and publicly available sources. This information may be combined with other information we collect about you.
We collect information through the following methods:
We use the information we collect for the following purposes:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Providing, operating, and maintaining the Website and its features | Legitimate Interest / Contract Performance |
| Analyzing usage patterns, trends, and user behavior to improve content and user experience | Legitimate Interest |
| Personalizing content, advertisements, and recommendations | Consent / Legitimate Interest |
| Displaying targeted advertising, including interest-based and behavioral advertising | Consent |
| Tracking affiliate referrals, commissions, and advertising performance | Legitimate Interest |
| Sending newsletters, promotional communications, and marketing materials | Consent |
| Responding to inquiries, requests, and customer service needs | Contract Performance / Legitimate Interest |
| Detecting, preventing, and addressing fraud, security issues, and technical problems | Legitimate Interest / Legal Obligation |
| Complying with legal obligations, responding to legal processes, and protecting our legal rights | Legal Obligation / Legitimate Interest |
| Creating aggregated, de-identified, or anonymized data for analysis, research, or business purposes | Legitimate Interest |
| Any other purpose disclosed to you at the time of collection or with your consent | Consent |
The Website may contain links, advertisements, or integrations with third-party websites, platforms, products, or services. This Privacy Policy does not apply to any third-party websites or services. We are not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policies of any third-party websites you visit. The inclusion of a link on the Website does not imply endorsement or responsibility for the linked site's privacy practices.
Third-party services that may be integrated with or linked from the Website include, but are not limited to: payment processors, email marketing platforms, social media platforms, advertising networks, analytics services, content delivery networks, and affiliate networks. Each of these services has its own privacy policy governing how it collects, uses, and discloses your information.
9.1 Compensation Disclosure. As disclosed in our Terms of Service, the Operator may receive compensation from affiliate partnerships, sponsored content, advertising revenue, and other commercial relationships. This compensation arrangement may involve the collection and sharing of your data with affiliate and advertising partners.
9.2 Data Shared with Affiliate Partners. When you click on an affiliate link, visit an advertiser's website through our links, or interact with advertising content on the Website, certain information about you (including but not limited to your IP address, device information, browser information, referral data, and transaction data) may be collected and shared with our affiliate and advertising partners for the purposes of tracking referrals, attributing conversions, calculating commissions, and measuring advertising performance.
9.3 Retargeting & Remarketing. Our advertising partners may use information collected from the Website to serve you targeted advertisements on other websites and platforms (retargeting/remarketing). This means that after visiting the Website, you may see advertisements related to the content you viewed on third-party websites, social media platforms, search engines, and other digital properties.
We retain your Personal Information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The retention period may vary depending on the context, the nature of the data, and our legal obligations. When Personal Information is no longer necessary for the purposes for which it was collected, we will delete it or anonymize it. However, please note that backup copies may persist in our systems for a reasonable period after deletion, and data shared with third parties is subject to those third parties' own retention policies.
We implement commercially reasonable administrative, technical, and physical security measures designed to protect your Personal Information from unauthorized access, disclosure, alteration, destruction, and misuse. However, no method of transmission over the Internet, no method of electronic storage, and no security system is impenetrable. We cannot guarantee the absolute security of your information. You acknowledge and accept that any transmission of Personal Information to us is at your own risk, and we shall not be liable for any unauthorized access, data breaches, or data loss.
Depending on your jurisdiction, you may have some or all of the following rights regarding your Personal Information:
To exercise any of these rights, please contact us using the information provided in Section 20 below. We will respond to verified requests within the timeframes required by applicable law. We may require you to verify your identity before processing your request.
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
13.1 Categories of Information. In the preceding twelve (12) months, we may have collected the following categories of Personal Information as defined by the CCPA: identifiers (e.g., name, email address, IP address); internet or other electronic network activity information (e.g., browsing history, search history, interaction data); geolocation data (approximate location derived from IP address); commercial information (e.g., records of products or services considered); and inferences drawn from the above (e.g., preferences, characteristics, behaviors).
13.2 Sale & Sharing of Personal Information. Under the CCPA/CPRA's broad definitions, the sharing of your information with advertising and affiliate partners as described in this Policy may constitute a "sale" or "sharing" of Personal Information. You have the right to opt out of such sale or sharing.
13.3 Your California Rights. As a California resident, you have the right to: know what Personal Information is collected; know whether your Personal Information is sold or disclosed and to whom; opt out of the sale or sharing of your Personal Information; request deletion of your Personal Information; request correction of inaccurate Personal Information; limit the use and disclosure of Sensitive Personal Information; and not be discriminated against for exercising your rights.
13.4 Exercising Your Rights. To exercise your CCPA/CPRA rights, contact us at the information provided in Section 20. We will verify your identity and respond within 45 days, with a possible 45-day extension if reasonably necessary.
13.5 Shine the Light. Under California Civil Code Section 1798.83, California residents may also request information about our disclosure of Personal Information to third parties for their direct marketing purposes.
If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, the General Data Protection Regulation (GDPR) and/or the UK GDPR provide you with additional rights regarding your Personal Data.
14.1 Data Controller. For the purposes of the GDPR, the Operator acts as the Data Controller of your Personal Data collected through the Website.
14.2 Legal Basis for Processing. We process your Personal Data based on one or more of the following legal bases: your consent; performance of a contract; compliance with a legal obligation; and/or our legitimate interests (such as operating and improving the Website, marketing our content, and measuring advertising effectiveness), provided such interests are not overridden by your data protection rights.
14.3 Your GDPR Rights. In addition to the rights listed in Section 12, you have the right to: lodge a complaint with your local supervisory authority (data protection authority) if you believe your rights have been violated; object to automated decision-making, including profiling; and request information about the safeguards in place for international data transfers.
14.4 Data Transfers. Your Personal Data may be transferred to and processed in countries outside the EEA, UK, or Switzerland that may not provide the same level of data protection. Where such transfers occur, we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognized transfer mechanisms.
The Website is operated from the United States. If you are accessing the Website from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States or other countries where our servers or service providers are located. These countries may have data protection laws that differ from the laws of your country. By using the Website, you consent to the transfer, storage, and processing of your information in the United States and other jurisdictions as described in this Policy. We take commercially reasonable measures to ensure that your data is treated securely and in accordance with this Policy regardless of where it is processed.
The Website is not intended for individuals under the age of eighteen (18) or the age of legal majority in their jurisdiction, whichever is greater. We do not knowingly collect, solicit, or maintain Personal Information from children under the age of 13 (or the applicable age in other jurisdictions, such as 16 in the EEA). If we learn that we have collected Personal Information from a child under the applicable age, we will take reasonable steps to delete such information promptly. If you believe that a child has provided us with Personal Information, please contact us immediately using the information in Section 20.
Some web browsers transmit "Do Not Track" (DNT) signals to the websites and online services the user visits. There is currently no universally accepted standard for how to respond to DNT signals. Accordingly, the Website does not currently respond to, alter its practices when it receives, or take any action with respect to DNT signals or other mechanisms that provide a choice regarding the collection of Personal Information about your online activities over time and across third-party websites. If a standard for responding to DNT signals is adopted in the future, we will revisit this policy.
18.1 No Collection of Protected Health Information. The Website is not a healthcare provider, health plan, or healthcare clearinghouse. The Website is not subject to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or similar healthcare data protection regulations. We do not collect, store, or process Protected Health Information (PHI) as defined by HIPAA.
18.2 Voluntary Health-Related Information. If you voluntarily share health-related information with us through comments, contact forms, or other communications, you acknowledge that such information is not covered by HIPAA or similar healthcare-specific privacy protections, and it will be treated in accordance with this general Privacy Policy.
18.3 Inference of Health Interests. Based on your browsing behavior on the Website (including the health-related articles you read, links you click, and content you engage with), our analytics and advertising partners may infer that you have an interest in certain health or wellness topics. These inferences may be used for targeted advertising purposes as described in this Policy. Such inferred interests are not medical records or diagnoses.
18.4 Entertainment Content Only. As stated in our Terms of Service, all content on the Website, including health-related content, is published for entertainment and informational purposes only and does not constitute medical advice, diagnosis, or treatment.
We reserve the right to update, modify, or replace this Privacy Policy at any time at our sole discretion. Any changes will be effective immediately upon posting the revised Policy on the Website with an updated "Last Updated" date. We will not necessarily notify you of changes. It is your responsibility to review this Privacy Policy periodically. Your continued use of the Website after any changes to this Policy constitutes your acceptance of and agreement to the revised Policy. If you do not agree to the updated Policy, your sole remedy is to stop using the Website.
If you have any questions, concerns, requests, or complaints regarding this Privacy Policy, your Personal Information, or our data practices, please contact us at:
We will endeavor to respond to all legitimate inquiries within a reasonable timeframe and within the deadlines required by applicable law. For verified data subject requests under the CCPA/CPRA, we will respond within 45 days. For requests under the GDPR, we will respond within 30 days.