Privacy and Cookies Policy
Version 1.8 | Last Updated: July 2026
Introduction
CNRI ("we," "us," or "our") is committed to protecting your privacy. This Privacy and Cookies Policy (Version 1.8) explains how we collect, use, disclose, and safeguard your information when you visit our website. Please read this policy carefully. By using our website, you agree to the practices described herein.
Information We Collect
Information You Provide
- Contact information (name, email address, phone number) submitted through our online forms
- Your consent to be contacted by CNRI, which you provide by checking the consent box before submitting a form and which we record with your submission
- Health condition and location preferences when searching for clinical trials
- Referral information submitted by healthcare providers
- Job application information (the position you apply for, an optional message, and the resume file you attach) submitted through our careers form
- Business contact information (your name, company name, and message) submitted by sponsors and CROs through our partner inquiry form
- Any other information you voluntarily provide through our website
Job Applicant Information
When you apply for a position through our careers page, we collect your contact information, the position you are applying for, an optional message, and the resume you attach (PDF or Word document, up to 4 MB). Your application is transmitted securely and delivered by email to our hiring team. The resume file is never stored on our servers or by our website hosting provider; it exists only in transit and in the delivered email. We use application information solely to evaluate your candidacy and to contact you about employment opportunities.
Sensitive Personal Information
When you search for a clinical trial or submit an inquiry, you may provide health-related information such as a medical condition or diagnosis. This information is considered sensitive personal information under California law. We use this data solely to match you with appropriate clinical trial opportunities and do not sell, share for advertising purposes, or use it for any purpose other than responding to your inquiry.
Information Collected Automatically
- Browser type and version
- Operating system
- IP address and approximate geographic location
- Pages visited and time spent on each page
- Referring website or source
- Device type and screen resolution
How We Use Your Information
- Respond to your inquiries and contact requests
- Connect you with appropriate clinical trial opportunities
- Process referrals from healthcare providers
- Evaluate job applications and contact applicants about employment opportunities
- Improve our website and user experience
- Communicate with you about our services (with your consent)
- Comply with legal obligations and protect our rights
Cookies and Local Storage Technologies
We use cookies, local storage, and similar technologies to enhance your browsing experience. Cookies are small text files stored on your device. Local storage is a browser feature that allows websites to store data locally on your device. Both are used to remember your preferences and improve site functionality.
Essential Cookies and Local Storage
Required for the website to function properly. This includes your cookie consent preference and display settings, which are stored using your browser's local storage. The website cannot function properly without these.
Functional Cookies
Allow the website to remember choices you make (such as your preferred theme or location) and provide enhanced, personalized features.
Analytics
We use Cloudflare Web Analytics to understand how visitors interact with our website. This service is cookieless: it does not set cookies, does not track individuals across websites, and does not create personal profiles. It collects aggregated data including page views, browser type, approximate geographic region (country level), device type, and referring source. This data is processed by Cloudflare, Inc., which also hosts our website.
Managing Cookies and Local Storage
You can control and manage cookies and local storage through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies and local storage data, or be notified when a cookie is set. Please note that clearing this data may reset your preferences (such as theme and cookie consent). You can also manage your cookie preferences through the consent banner displayed when you first visit our website.
Do Not Track
Our website respects Do Not Track (DNT) browser signals. When your browser sends a DNT signal, we automatically decline non-essential cookies and local storage on your behalf, treating it as if you selected "Decline" on our cookie consent banner. Essential cookies and local storage required for site functionality (such as recording that your DNT preference was honored) are not affected. You can change this at any time by clearing your browser's local storage and revisiting the site with DNT disabled.
Data Sharing and Disclosure
We do not sell or share your personal information for cross-context behavioral advertising. We may share your information in the following circumstances:
- With our research staff to facilitate clinical trial inquiries
- With service providers who assist in operating our website, including Cloudflare, Inc. (website hosting and cookieless web analytics) and Amazon Web Services (AWS), which receives, processes, and transmits form submissions to our staff via encrypted email. Form submissions are sent directly to AWS for processing and are not processed on our website hosting platform.
- When required by law, regulation, or legal process
- To protect the rights, property, or safety of CNRI, our users, or others
Data Security
Transmission Security
All form submissions on this website are transmitted to our servers over HTTPS (TLS). Outbound email notifications generated by form submissions are sent via Amazon Web Services (AWS) Simple Email Service (SES), a HIPAA-eligible service, with TLS encryption required for delivery. Submissions that cannot be delivered over an encrypted connection are rejected rather than sent in plaintext.
HIPAA-Eligible Infrastructure
Form submissions that contain health-related information, such as a medical condition or clinical trial inquiry, are received and processed entirely within HIPAA-eligible AWS services operating under a Business Associate Agreement (BAA) between CNRI and AWS, and are not processed on our website hosting platform. Email notifications are delivered only to staff inboxes on HIPAA-covered email platforms operating under a Business Associate Agreement.
General Security Measures
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
Data Breach Notification
In the event of a data breach that compromises your personal information, we will notify affected individuals and relevant authorities as required by California Civil Code Section 1798.82 and other applicable laws. Notification will be made in the most expedient time possible and without unreasonable delay.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Contact form submissions are retained for the duration of our business relationship and as required for regulatory compliance.
Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access the personal information we hold about you
- Request correction of inaccurate or incomplete information
- Request deletion of your personal information
- Opt out of certain uses of your information
- Request a copy of your personal information in a portable format
- Limit the use and disclosure of your sensitive personal information
To exercise any of these rights, please contact us using the information provided below. We will respond to your request within the timeframe required by applicable law. We will not discriminate against you for exercising any of these rights.
California Privacy Rights
Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), California residents have additional rights regarding their personal information. These include the right to know what personal information is collected and how it is used, the right to request deletion, the right to correct inaccurate information, the right to opt out of the sale or sharing of personal information, and the right to limit the use of sensitive personal information. CNRI does not sell or share personal information for cross-context behavioral advertising. CNRI does not use automated decision-making technology for purposes that would require opt-out rights under the CPRA. To submit a request under the CCPA/CPRA, please contact us using the information below.
Children's Privacy
Our website is not intended for children under the age of 18. We do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA), or from minors under 16 without verifiable consent. If you believe we have collected information from a child, please contact us so we can take appropriate action.
Changes to This Policy
We may update this Privacy and Cookies Policy from time to time to reflect changes in our practices, technology, or applicable laws. We will post any changes on this page, update the "Last Updated" date, and increment the version number. We encourage you to review this policy periodically.
Contact Us
If you have questions or concerns about this Privacy and Cookies Policy or our data practices, please contact us:
You can also reach us through our contact form, or learn more about our clinical trials and frequently asked questions.