WST Consulting works with clinical trial data for a living, so we take this seriously and we would rather write it plainly than hide it in legal language. This notice covers two separate things: the information you give us through this website, and the clinical data we process on behalf of sponsors.
WST Consulting is a clinical data management consulting practice based in Chicago, Illinois, United States. We are the controller of the personal information described in this notice, other than the clinical trial data covered in section 5, where the sponsor is the controller and we act as their processor. For questions, corrections or requests, write to privacy@wstconsultingagency.com.
We only collect what you choose to send us. There are no accounts, logins or trackers that build a profile of you.
We do not set advertising or analytics cookies, we do not sell or share personal information for cross-context behavioral advertising, and we do not use your information to train machine learning models.
We do not send marketing email. If that ever changes, we will ask you first.
Where the UK or EU GDPR applies, we rely on our legitimate interest in responding to business inquiries and recruiting, on the necessity of processing to enter into or perform a contract, and on our legal obligations for records we are required to keep. Where we rely on legitimate interest you can object at any time, and we will stop unless we have a compelling reason not to.
This notice does not govern clinical trial data. When we work on a study we act as a service provider and processor for the sponsor, who remains the controller of that data. We work inside the sponsor’s validated systems under their SOPs, under a written agreement and a confidentiality agreement, and we do not export study data into our own environment.
If you are a trial participant asking about your own study data, please contact your study site or the trial sponsor. They hold the records and the authority to act on your request; we cannot identify or release participant data on our own.
Ask us to delete your information sooner and we will, unless we are required to keep it.
Depending on where you live, you may have the right to ask us for a copy of the information we hold about you, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format.
If you are in California, you also have the right to know what we collect, to delete it, to correct it, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined under the CCPA, so there is nothing to opt out of.
Email privacy@wstconsultingagency.com and we will respond within 30 days. If you are in the UK or EU and you are not satisfied with our answer, you can complain to your national data protection authority.
We are based in the United States, so information you send us is processed there. Where we receive personal information from the UK or the EU we rely on the appropriate safeguards, including standard contractual clauses with our providers.
We use access controls, multi-factor authentication and encryption in transit and at rest for the systems we control. No system is perfectly secure, but if a breach affects your information we will notify you and the relevant regulator as the law requires.
This is a business website and is not directed at children. We do not knowingly collect personal information from anyone under 16 through this site.
If we make a material change we will update the effective date at the top of this page and, where the change affects you meaningfully, tell you directly.