Privacy policy

This Privacy Policy applies to personal information under the control of Pharmalytics Group.

It does not replace any confidentiality, data-processing, privacy, security, or other contractual terms governing a client engagement. Where a separate agreement applies, information provided in connection with that engagement will also be handled in accordance with the applicable agreement.

Pharmalytics Group has designated a Privacy Officer who is responsible for overseeing our privacy practices and responding to privacy questions, complaints, and requests.

We may collect personal information that you provide directly to us, including:

• Name, job title, organization, and professional contact information
• Information submitted through contact, inquiry, or demonstration-request forms
• Information about your product, project, evidence needs, target agencies, or stage in the health technology lifecycle
• Communications and correspondence with our team
• Information provided during business-development discussions
• Information contained in requests for services, proposals, contracts, and related documentation
• Communication and marketing preferences
• Employment and professional information submitted in connection with a job application
• Other information you choose to provide

When you use our website, we or our service providers may also collect limited technical and usage information, such as:

• Internet Protocol address
• Browser, device, and operating-system information
• Referring website or source
• Pages viewed and interactions with website features
• Date and time of access
• Approximate geographic location
• Cookie identifiers and similar technical information

We may also receive professional contact information from referrals, business partners, publicly available professional sources, or organizations with which you are associated.

Our public website and general contact forms are not intended for the submission of:

• Patient-identifiable information
• Personal health information
• Confidential clinical data
• Proprietary research data
• Trade secrets
• Passwords or authentication credentials
• Financial account information
• Other sensitive or highly confidential information

Please do not submit this type of information through a general website form or unsolicited email. Where sensitive or confidential information is required for an engagement, we will establish an appropriate and secure method for its transfer.

We may use personal information to:

• Respond to inquiries and communicate with you
• Provide information about our services, capabilities, publications, and expertise
• Arrange consultations or demonstrations of [hta]DataMine™
• Understand your evidence, health technology assessment, reimbursement, or market access needs
• Evaluate potential engagements and prepare proposals
• Establish and manage client, supplier, consultant, contractor, and other professional relationships
• Deliver contracted services
• Administer agreements, invoicing, payments, and business records
• Operate, maintain, secure, and improve our website
• Understand website use and performance
• Send professional updates, publications, event information, or other communications where permitted
• Evaluate employment applications and manage recruitment
• Protect our personnel, systems, information, and business interests
• Detect, investigate, and prevent suspected misuse, fraud, or security incidents
• Establish, exercise, or defend legal claims
• Meet legal, regulatory, professional, accounting, tax, insurance, and contractual obligations
• Carry out other purposes identified when the information is collected or otherwise permitted by law

We limit the collection, use, and disclosure of personal information to purposes that are appropriate and reasonably necessary in the circumstances.

We collect, use, and disclose personal information with consent where consent is required. Consent may be express or implied depending on the nature and sensitivity of the information, the purpose of the interaction, and the surrounding circumstances.

Where European or United Kingdom data-protection law applies, we may process personal information on one or more of the following legal bases:

• Your consent
• Performance of a contract
• Steps taken at your request before entering into a contract
• Compliance with a legal obligation
• Our legitimate interests in operating and developing our business, responding to inquiries, maintaining professional relationships, improving our services, and protecting our systems
• Establishment, exercise, or defence of legal claims

Where we rely on consent, you may withdraw it at any time, subject to applicable legal or contractual restrictions and reasonable notice. Withdrawal of consent will not affect processing that occurred lawfully before consent was withdrawn.

Our website may use cookies, local storage, pixels, and similar technologies.

Strictly necessary technologies

Certain technologies may be required to:

• Operate and secure the website
• Process form submissions
• Distribute website traffic
• Prevent misuse or fraudulent activity
• Remember privacy or cookie preferences

These technologies are used only where reasonably necessary for the website or a requested service to function.

Optional technologies

Where enabled, optional technologies may be used to:

• Understand website traffic and usage
• Measure website performance and engagement
• Remember visitor preferences
• Support embedded content or third-party functionality
• Improve website content and user experience

Where applicable law requires consent, optional technologies will not be activated until the visitor has made an appropriate choice.

Where a cookie-preference tool is provided, visitors may use it to accept, reject, or manage optional technologies. Visitors may also control or delete cookies through their browser settings. Blocking certain technologies may affect the availability or operation of some website features.

We may update the technologies used on our website from time to time. When appropriate, we will update this Privacy Policy and the information presented through our cookie controls.

We may engage service providers to support:

• Website hosting and content management
• Website analytics and performance monitoring
• Cybersecurity, spam prevention, and fraud detection
• Email and business communications
• Customer-relationship management
• Appointment and demonstration scheduling
• Recruitment
• File storage and collaboration
• Payment, accounting, and administrative functions
• Information technology support

These providers may process personal information on our behalf or, in some circumstances, for their own disclosed purposes. We seek to engage providers that maintain reasonable privacy and security practices and to limit their access and use of personal information to what is reasonably necessary.

Some third-party platforms operate under their own privacy policies and terms. We encourage you to review the applicable terms before providing information directly to an external platform.

We may disclose personal information to:

• Pharmalytics Group personnel who require the information for legitimate business purposes
• Affiliates, consultants, contractors, and collaborators involved in an authorized activity or engagement
• Website, hosting, analytics, communications, recruitment, security, and administrative service providers
• Professional advisors, including legal counsel, accountants, auditors, insurers, and compliance advisors
• Government, regulatory, judicial, or law-enforcement authorities where required or permitted by law
• A purchaser, investor, lender, successor, or other relevant party in connection with a proposed or completed financing, restructuring, merger, acquisition, sale, or transfer of all or part of our business

We may also disclose information with your consent, at your direction, or as otherwise permitted by law.

We do not sell or rent personal information.

Pharmalytics Group operates internationally and has offices in Canada and India. Our clients, personnel, contractors, collaborators, and service providers may be located in Canada, India, the United States, the United Kingdom, the European Economic Area, or other jurisdictions.

Personal information may therefore be stored, accessed, or processed outside the province, state, or country in which it was collected. Information processed in another jurisdiction may be subject to that jurisdiction's laws and may be accessible to courts, regulators, governments, or law-enforcement authorities in accordance with local law.

Where required, we use contractual, organizational, and technical measures designed to protect personal information transferred internationally.

We retain personal information only for as long as reasonably necessary to:

• Fulfil the purpose for which it was collected
• Respond to and maintain a record of an inquiry
• Manage a professional relationship or contracted engagement
• Maintain appropriate business and professional records
• Meet legal, regulatory, contractual, accounting, tax, insurance, and compliance requirements
• Resolve disputes
• Establish, exercise, or defend legal claims
• Protect our legitimate business interests

Retention periods vary depending on the nature and sensitivity of the information, the reason it was collected, the duration of the relationship, and applicable legal or contractual requirements.

When personal information is no longer required, we may securely delete, destroy, anonymize, or de-identify it in accordance with our practices and applicable law.

We use reasonable administrative, technical, organizational, and physical safeguards designed to protect personal information against:

• Loss or theft
• Unauthorized access
• Unauthorized collection, use, or disclosure
• Alteration
• Destruction
• Accidental or unlawful processing

Safeguards may include access controls, authentication requirements, encryption, secure hosting, confidentiality obligations, system monitoring, staff training, vendor-management processes, and secure disposal procedures.

No internet transmission, email communication, or electronic storage system can be guaranteed to be completely secure. Where required by law, we will notify affected individuals, regulators, or other parties of a privacy or security breach.

Depending on your location and the law that applies, you may have the right to:

• Request access to personal information we hold about you
• Ask how your personal information has been used or disclosed
• Request correction of inaccurate or incomplete information
• Withdraw consent where processing is based on consent
• Request deletion of certain personal information
• Request restriction of certain processing
• Object to certain processing
• Object to direct marketing
• Request information in a portable format
• Submit a complaint to an applicable privacy or data-protection authority

These rights may be subject to statutory limitations, exceptions, identity-verification requirements, and obligations to retain certain records.

To exercise a privacy right, contact our Privacy Officer using the information below. We may request information reasonably necessary to verify your identity and process the request.

We may send professional updates, publications, event information, or information about our services where you have consented or where otherwise permitted by law.

Promotional communications will include a method for unsubscribing where required. You may withdraw from promotional email communications by:

• Using the unsubscribe link included in the message
• Contacting us directly
• Updating your communication preferences where that option is available

We may continue to send non-promotional communications relating to an existing inquiry, engagement, contractual relationship, security matter, or legal obligation.

When you apply for a position, we may collect:

• Contact information
• Résumé or curriculum vitae
• Employment history
• Education and professional qualifications
• Professional memberships and credentials
• References
• Work authorization information
• Interview notes and correspondence
• Other information you choose to provide

We use this information to evaluate your application, communicate with you, verify information where appropriate, and administer recruitment.

With your consent, or where otherwise permitted by law, we may retain application information for consideration in connection with future opportunities.

We may use automation, artificial intelligence, machine learning, and other computational tools to support internal operations, research workflows, analytics, website functionality, or service delivery.

Where personal information is processed using these tools, we seek to apply appropriate human oversight, confidentiality requirements, access restrictions, and security controls.

We do not use information submitted through our public website to make solely automated decisions that produce legal or similarly significant effects about website visitors.

We do not use information submitted through general website forms to train publicly available or general-purpose artificial intelligence models.

Client information used in connection with an engagement is subject to the applicable agreement, confidentiality obligations, and project-specific controls.

Our website and services are intended for professional and business audiences and are not directed toward children.

We do not knowingly collect personal information from children through our website. If we learn that personal information from a child has been submitted without appropriate authorization, we will take reasonable steps to delete it.

Our website may contain links to third-party websites, journal and publication websites, professional profiles, social-media platforms, regulatory agencies, health technology assessment organizations, and other external resources.

We do not control and are not responsible for the privacy, security, availability, or content practices of third parties. Accessing an external link is subject to the third party's terms and privacy policy.

We may update this Privacy Policy periodically to reflect changes in our:

• Business practices
• Website functionality
• Technology and service providers
• Legal or regulatory obligations
• Privacy and security practices

The revised Privacy Policy will be posted on this page with an updated effective date. Where appropriate, we may provide additional notice of material changes.

Questions, concerns, complaints, or requests relating to this Privacy Policy or our handling of personal information may be directed to: