How We Protect Your Privacy

Effective Date: September 23, 2026
Last Updated: September 23, 2026

BioBoston CRO (“BioBoston CRO,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit BioBostonCRO.com (the “Website”), contact us regarding our CRO services, submit an inquiry, communicate with us, submit your professional profile through our Join Us page, or otherwise interact with BioBoston CRO.

By using the Website or providing personal information to us, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

The information we collect depends on how you interact with BioBoston CRO.

A. Information You Provide When Contacting BioBoston CRO

When you contact us, request information, discuss a potential project, or submit a form through our Website, we may collect information such as:

  • First and last name

  • Job title

  • Company or organization

  • Business email address

  • Telephone number

  • Service areas of interest

  • Project or program information

  • Timing, scope, or other information concerning a potential engagement

  • Information contained in correspondence or communications with us

  • Any other information you voluntarily provide

Please do not submit confidential, proprietary, patient-identifiable, protected health information, clinical trial participant information, or other highly sensitive information through our general Website forms.

If sensitive or confidential information is required in connection with a potential or active engagement, BioBoston CRO may provide an appropriate method for securely exchanging that information.

B. Information Submitted Through “Join Us”

If you submit a profile, resume, curriculum vitae, or other information through our Join Us page, we may collect:

  • Name and contact information

  • City, state, country, or general geographic location

  • Resume or curriculum vitae

  • Employment and professional history

  • Education and training

  • Professional qualifications

  • Certifications, licenses, and credentials

  • Years and areas of professional experience

  • CRO service areas and areas of expertise

  • Therapeutic-area experience

  • Industry and product experience

  • Professional availability

  • Professional memberships

  • LinkedIn profile or other professional website information

  • Information about previous projects or assignments

  • References, if provided

  • Files or documents you choose to submit

  • Other professional information you voluntarily provide

Information submitted through Join Us may be used to evaluate your qualifications and experience for current or future professional opportunities across the CRO lifecycle.

Submitting a profile does not create an employment relationship, guarantee an assignment, or guarantee that BioBoston CRO will contact you regarding an opportunity.

Please do not include Social Security numbers, passport numbers, financial account information, medical information, or other unnecessary sensitive personal information in your resume, CV, or profile.

C. Information Collected Automatically

When you visit the Website, certain information may be collected automatically through cookies, server logs, analytics technologies, and similar tools.

This information may include:

  • Internet Protocol (IP) address

  • Browser type and version

  • Device type

  • Operating system

  • Approximate geographic location derived from IP address

  • Referring website or source

  • Pages viewed

  • Links clicked

  • Date and time of visits

  • Time spent on Website pages

  • Website navigation and interaction information

  • Cookie or similar online identifiers

  • Technical and diagnostic information

We use this information to operate, protect, understand, and improve our Website and communications.

D. Information From Other Sources

We may receive professional or business information about individuals from other sources, including:

  • Professional referrals

  • Clients or prospective clients

  • Business partners

  • Professional networking websites

  • Publicly available professional information

  • Conferences or industry events

  • Professional directories

  • Service providers

Where required by applicable law, we will provide appropriate notice concerning personal information obtained from other sources.

2. How We Use Personal Information

BioBoston CRO may use personal information to:

  • Respond to inquiries and requests

  • Evaluate potential client needs

  • Communicate regarding CRO services

  • Prepare for introductory or project discussions

  • Develop proposals, scopes of work, or potential engagements

  • Manage client and business relationships

  • Provide and administer CRO services

  • Coordinate projects and professional resources

  • Evaluate professionals who submit information through Join Us

  • Identify individuals whose experience may align with current or future opportunities

  • Contact professionals regarding potential opportunities

  • Present appropriately qualified professionals for relevant opportunities

  • Maintain our professional talent and expertise resources

  • Verify professional qualifications when appropriate

  • Maintain business and administrative records

  • Process contractual and financial transactions

  • Provide relevant business communications

  • Operate and improve our Website

  • Understand how visitors use our Website

  • Protect our Website, systems, users, and organization from fraud, abuse, cybersecurity incidents, or other harmful activity

  • Comply with legal, regulatory, contractual, and professional obligations

  • Establish, exercise, or defend legal claims

  • Enforce our agreements and Website terms

  • Carry out other purposes disclosed when the information is collected or with your permission

3. Information Submitted Through Join Us

When you submit your professional information to BioBoston CRO, you authorize us to review and maintain that information for consideration in connection with current and future professional opportunities.

Where appropriate for an opportunity, relevant professional information may be shared internally with BioBoston CRO personnel responsible for evaluating or coordinating that opportunity.

We may also share relevant professional information with an existing or prospective BioBoston CRO client when your experience may align with that client’s needs. We will limit such disclosures to information reasonably relevant to evaluating your professional qualifications and suitability for the opportunity.

BioBoston CRO does not sell resumes, CVs, or professional profiles submitted through Join Us.

You may contact us at any time to request that we update or remove your professional profile, subject to applicable legal or record-retention requirements.

4. Legal Bases for Processing

Where the European Economic Area (“EEA”), United Kingdom, or other laws requiring a lawful basis apply, BioBoston CRO may process personal information based on one or more of the following:

Consent. When you have given us permission to process information for a particular purpose.

Contractual necessity. When processing is necessary to take steps at your request before entering into an agreement or to perform an agreement with you or your organization.

Legitimate interests. When processing is reasonably necessary for our legitimate business interests, including responding to business inquiries, maintaining professional relationships, evaluating professionals for relevant opportunities, operating and improving our Website, protecting our systems, and developing our business, provided those interests are not overridden by your applicable privacy rights.

Legal obligations. When processing is necessary to comply with applicable laws, regulations, legal processes, or governmental requirements.

Legal claims and other lawful grounds. When processing is necessary to establish, exercise, or defend legal claims or is otherwise permitted by applicable law.

Where we rely on consent, you may withdraw that consent at any time, although withdrawal does not affect processing that occurred before consent was withdrawn.

5. Cookies and Similar Technologies

BioBoston CRO may use cookies and similar technologies to operate the Website, remember preferences, understand Website usage, improve performance, protect the Website, and evaluate the effectiveness of our communications or marketing activities.

Cookies may include:

Essential cookies, which are necessary for Website functionality, security, or form processing.

Analytics cookies, which help us understand how visitors interact with the Website.

Functional cookies, which help provide enhanced Website functionality or remember preferences.

Advertising or marketing technologies, if enabled, which may help measure marketing campaigns or understand how visitors reached the Website.

Where required by applicable law, non-essential cookies or similar tracking technologies will be used only after obtaining appropriate consent.

You may also control cookies through your browser settings. Disabling certain cookies may affect Website functionality.

6. How We Disclose Personal Information

We do not disclose personal information except as reasonably necessary for legitimate business purposes, to provide our services, with your direction or permission, or as required by law.

Personal information may be disclosed to:

Service Providers

Organizations that assist us with functions such as:

  • Website hosting

  • Website forms

  • Cloud storage

  • Email and communications

  • Customer relationship management

  • Information technology

  • Cybersecurity

  • Analytics

  • Document management

  • Accounting and payment processing

  • Professional and administrative services

These providers may process information on our behalf and are expected to use it only for authorized purposes.

Clients and Prospective Clients

For individuals who submit professional information through Join Us, BioBoston CRO may provide relevant professional qualifications, experience, profiles, or resumes to clients or prospective clients when appropriate to evaluate an individual for a potential opportunity.

Professional Advisers

We may disclose information to attorneys, accountants, insurers, auditors, financial advisers, or other professional advisers when reasonably necessary.

Business Transactions

If BioBoston CRO is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction, personal information may be disclosed as part of the evaluation or completion of that transaction, subject to appropriate confidentiality protections.

Legal and Regulatory Requirements

We may disclose information if we reasonably believe disclosure is necessary to:

  • Comply with applicable law or regulation

  • Respond to a subpoena, court order, regulatory request, or lawful governmental request

  • Protect the rights, property, or safety of BioBoston CRO or others

  • Detect or prevent fraud, cybersecurity threats, or unlawful activity

  • Enforce contractual or legal rights

7. Sale and Use of Personal Information for Advertising

BioBoston CRO does not sell resumes, CVs, professional profiles, or information submitted through our project inquiry forms for monetary consideration.

We do not use information submitted through Join Us to build consumer advertising profiles.

Website analytics or marketing technologies, when enabled, may involve the collection of online identifiers by third-party technology providers. Where applicable law provides a right to opt out of certain forms of targeted advertising, sharing, or similar processing, BioBoston CRO will provide or honor the applicable choice mechanisms as required by law.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

The applicable retention period may depend on:

  • The nature of the information

  • The purpose for which it was collected

  • Whether a business or professional relationship remains active

  • Whether a professional profile remains relevant for potential opportunities

  • Contractual obligations

  • Applicable statutes of limitation

  • Legal, accounting, tax, regulatory, or compliance requirements

  • Security and fraud-prevention requirements

  • The need to establish, exercise, or defend legal claims

Professional profiles submitted through Join Us may be retained while reasonably relevant to current or future CRO opportunities. Individuals may request deletion or updating of their information at any time, subject to legal or legitimate record-retention requirements.

When personal information is no longer reasonably required, we may delete, anonymize, or securely dispose of it.

9. Information Security

BioBoston CRO uses reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, destruction, misuse, or loss.

These measures may include access controls, authentication measures, secure technology providers, system monitoring, data-management procedures, and other security practices appropriate to the nature of the information.

No internet transmission, electronic communication, or information-storage system can be guaranteed to be completely secure. Therefore, while we take reasonable steps to protect personal information, we cannot guarantee absolute security.

10. Confidential and Clinical Information

The general BioBoston CRO Website is intended for business and professional communications and is not intended for the submission of patient-identifiable information or clinical trial participant data.

Do not submit through general Website forms:

  • Protected health information

  • Patient names or identifiers

  • Medical records

  • Clinical trial participant information

  • Genetic information

  • Highly confidential study data

  • Trade secrets

  • Proprietary documents

  • Other sensitive information that is not necessary for the initial inquiry

Where BioBoston CRO receives confidential, clinical, regulatory, or other protected information in connection with an established client engagement, the handling of that information may also be governed by applicable agreements, confidentiality obligations, data-processing agreements, security requirements, and applicable law.

11. International Data Transfers

BioBoston CRO is based in the United States.

If you access the Website or provide personal information from another country, your information may be transferred to, stored in, or processed in the United States or other countries where BioBoston CRO or its service providers operate.

Data-protection laws in those countries may differ from those in your country of residence.

Where required by applicable law, BioBoston CRO will use appropriate safeguards for international transfers of personal information, such as legally recognized contractual protections or other approved transfer mechanisms.

12. Your Privacy Rights

Depending on where you live and the laws applicable to your personal information, you may have the right to:

  • Request confirmation that we process your personal information

  • Request access to your personal information

  • Request correction of inaccurate personal information

  • Request deletion of personal information

  • Request restriction of certain processing

  • Object to certain processing

  • Request a portable copy of certain information

  • Withdraw consent where processing is based on consent

  • Opt out of certain direct marketing

  • Opt out of certain targeted advertising, sales, or sharing where applicable

  • Request information concerning categories of information collected and disclosed

  • Appeal certain decisions regarding a privacy request where applicable

  • Exercise applicable privacy rights without unlawful discrimination or retaliation

These rights are not absolute and may be subject to exceptions under applicable law.

To exercise a privacy right, contact:

contact@biobostoncro.com

Please include enough information for us to understand your request. We may need to verify your identity before completing certain requests.

An authorized representative may submit a request on your behalf where permitted by applicable law, although we may require documentation confirming the representative’s authority.

13. European Economic Area and United Kingdom Residents

If applicable data-protection law provides you with GDPR or UK GDPR rights, you may have rights including access, rectification, erasure, restriction of processing, portability, objection, and withdrawal of consent.

You may also have the right to lodge a complaint with the data-protection authority in the country where you live or work or where you believe an infringement occurred.

We encourage you to contact BioBoston CRO first if you have questions or concerns about our processing of your personal information.

14. U.S. State Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state law.

Depending on the jurisdiction and whether the applicable law applies to BioBoston CRO, these rights may include rights to know or access personal information, correct information, request deletion, obtain portable information, opt out of certain sales, sharing, profiling, or targeted advertising activities, and appeal certain decisions regarding privacy requests.

BioBoston CRO will respond to valid privacy requests as required by applicable law.

15. Marketing Communications

BioBoston CRO may occasionally send business communications concerning our services, capabilities, professional opportunities, events, resources, or other information we believe may be relevant to the recipient.

Where consent is legally required, we will obtain consent before sending marketing communications.

You may opt out of promotional email communications by using the unsubscribe mechanism included in the communication or by contacting us at contact@biobostoncro.com.

Even if you opt out of promotional communications, we may continue to send non-promotional communications concerning an active inquiry, professional opportunity, project, agreement, transaction, or other business relationship.

16. Third-Party Websites and Services

Our Website may contain links to third-party websites, professional networking platforms, or other services.

BioBoston CRO does not control the privacy practices of third parties. This Privacy Policy does not apply to information collected independently by third-party websites or services.

We encourage you to review the privacy policies of those organizations before providing personal information to them.

17. Children’s Privacy

BioBoston CRO’s Website and services are intended for business and professional users and are not directed to children.

We do not knowingly collect personal information from children under the age of 16 through the Website.

If we learn that a child has provided personal information to us without appropriate authorization, we will take reasonable steps to delete the information where required by law.

18. Automated Decision-Making

BioBoston CRO does not intend to make decisions that produce legal or similarly significant effects concerning individuals solely through automated processing of information submitted through our Website or Join Us form.

Technology may be used to organize, search, categorize, or assist in reviewing information, but professional opportunities and business decisions may involve human evaluation.

19. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our Website, business practices, technology, services, or legal requirements.

When we make changes, we will update the Last Updated date at the top of this Privacy Policy.

If changes materially affect how we use personal information, we will provide additional notice where required by applicable law.

We encourage users to review this Privacy Policy periodically.

20. Contact Us

If you have questions about this Privacy Policy, how BioBoston CRO handles personal information, or wish to exercise an applicable privacy right, contact us at:

BioBoston CRO
Website: BioBostonCRO.com
Email: contact@biobostoncro.com

For privacy-related requests, please include “Privacy Request” in the subject line of your email.