Consumer Health Data Privacy Policy

Effective Date: 12/19/2025

This Consumer Health Data Privacy Policy supplements the Privacy Policy of CONSENT2RANDOMIZE LLC. In the event of any conflict between this Consumer Health Data Privacy Policy and the general Privacy Policy, the terms of this Consumer Health Data Privacy Policy will govern.

CONSENT2RANDOMIZE LLC acts as a service provider to organizations that sponsor clinical research studies and to contract research organizations that support the execution of those studies, collectively referred to as Sponsors. This policy explains how CONSENT2RANDOMIZE LLC collects, uses, discloses, and processes Consumer Health Data on behalf of Sponsors in accordance with applicable United States state consumer health data privacy laws. It also outlines the rights available to individuals under those laws.

For purposes of this policy, Consumer Health Data means information that is linked or reasonably linkable to an identified or identifiable individual who resides in a U.S. state with an applicable consumer health data privacy law and that relates to the individual’s past, present, or future physical or mental health status. Such individuals are referred to as Consumers.

Categories of Consumer Health Data Collected

CONSENT2RANDOMIZE LLC may collect the following categories of Consumer Health Data:

• Information relating to health conditions, illnesses, diseases, or diagnoses
• Information relating to medical treatments, interventions, or procedures
• Information relating to health related surgeries or procedures
• Information relating to the use or purchase of prescribed medications
• Information relating to bodily functions, symptoms, vital signs, or measurements
• Information relating to diagnostic testing, treatment plans, or medications
• Information identifying a Consumer seeking health care or clinical research services
• Information used to associate or identify a Consumer with the health related data described above, including data derived or inferred from non health information

Third parties do not collect Consumer Health Data across multiple websites or online services over time when Consumers use CONSENT2RANDOMIZE LLC websites or services.

Sources and Methods of Collection and Processing

CONSENT2RANDOMIZE LLC collects Consumer Health Data directly from Consumers. This information is collected through clinical research and trial websites operated by or on behalf of CONSENT2RANDOMIZE LLC, as well as through call centers operated by or on behalf of CONSENT2RANDOMIZE LLC.

Consumer Health Data is processed using secure transmission methods such as encrypted portals and secure platforms. Data is stored and maintained by secure web hosting providers engaged by CONSENT2RANDOMIZE LLC and subject to appropriate safeguards.

Categories of Consumer Health Data Shared

CONSENT2RANDOMIZE LLC may share all categories of Consumer Health Data it collects with the third party categories described below, solely for purposes consistent with this policy.

Categories of Third Parties with Which Consumer Health Data Is Shared

CONSENT2RANDOMIZE LLC may share Consumer Health Data with:

• Clinical research and trial sites involved in studies for which CONSENT2RANDOMIZE LLC recruits participants
• Web hosting and technology providers that maintain clinical research websites and data systems on behalf of CONSENT2RANDOMIZE LLC
• Third party call center operators that assist with participant screening, verification, and recruitment activities

Purposes for Processing Consumer Health Data

Consumer Health Data is collected, used, and shared for the following purposes:

• To provide clinical trial recruitment and participant engagement services
• To evaluate potential eligibility for participation in clinical research studies
• To communicate with Consumers regarding clinical research opportunities
• To collect feedback through research experience surveys regarding clinical trial participation
• To provide Sponsors with aggregated, non identifying insights derived from research feedback surveys to support more patient focused study design
• To maintain and operate clinical research websites and related systems
• To support call center operations related to participant recruitment and qualification

Consumer Rights

Consumers may have certain rights under applicable U.S. state consumer health data privacy laws, which may include:

• The right to confirm whether CONSENT2RANDOMIZE LLC is collecting, sharing, or selling Consumer Health Data and to access such data
• The right to request a list of third parties with whom Consumer Health Data has been shared or sold, along with contact information for those parties
• The right to withdraw consent for the collection or sharing of Consumer Health Data
• The right to request deletion of Consumer Health Data
• The right to request that CONSENT2RANDOMIZE LLC stop collecting, sharing, or selling Consumer Health Data

Requests to exercise these rights may be submitted to:
privacy@consent2randomize.com

Appeals

If a Consumer submits a request and it is denied in whole or in part, the Consumer has the right to appeal the decision. Appeals may be submitted to privacy@consent2randomize.com and should include the reasons the Consumer believes the request should be granted.

CONSENT2RANDOMIZE LLC will respond to appeals within the time period required by applicable law and will provide a written explanation of the decision. If an appeal is denied, the Consumer will be informed of the method for submitting a complaint to the appropriate state attorney general.

Changes to This Policy

CONSENT2RANDOMIZE LLC may update this Consumer Health Data Privacy Policy from time to time to reflect changes in law, regulation, or business practices. The effective date at the top of this policy indicates when it was last revised. Continued use of CONSENT2RANDOMIZE LLC services constitutes acceptance of the updated policy.