Privacy Policy
This Privacy Policy explains how Theolytics collects, uses, and protects information gathered through theo260-iptrial.com — an informational website about the THEO-260 clinical study. We are committed to handling your information with care, transparency, and respect.
Overview
This policy applies to all visitors of theo260-iptrial.com. It describes what data is collected when you browse the site, how that data is used, who may have access to it, and what rights you have.
This website does not collect clinical health data, does not enroll participants, and does not store medical records. Any information you share by contacting the study team is handled under separate research consent procedures governed by applicable research regulations (ICH-GCP, IRB/IEC requirements).
Who we are
The data controller for this website is Theolytics, the sponsor of the THEO-260 clinical study. Theolytics makes decisions about how and why data collected through this website is processed.
This website was built and is maintained by Precare, acting as a data processor on behalf of Theolytics under contractual data protection obligations.
Data we collect
Data you provide voluntarily
If you use the "Contact the study team" or "Participate" forms on this website, you may provide:
- First and last name
- Email address and/or phone number
- Any content you choose to include in a free-text message
You are never required to share health or medical information through this website. The contact form exists only to connect you with the study team for an initial conversation.
Data collected automatically
When you visit the site, certain technical information is collected automatically via your browser and our analytics tools:
| Data type | Description |
|---|---|
| IP address | Collected and immediately anonymized/truncated by Google Analytics. Full IP addresses are never stored. |
| Browser & device | Browser type, operating system, device category (mobile, tablet, desktop), screen resolution. |
| Pages visited | Which pages you view, time spent on each, and navigation order. |
| Referring source | The website, search engine, or link that brought you here. |
| Search queries | Aggregated terms that led users to this site via Google Search Console — keyword-level only, never linked to individuals. |
| Geographic location | Country and region only, derived from anonymized IP. City-level or precise location is not collected. |
Google Analytics & Google Search Console
This website uses Google Site Kit, a WordPress plugin that connects two Google services to help us understand and improve site performance.
Google Analytics 4 (GA4)
Google Analytics collects aggregated, anonymized data about how visitors interact with this site — for example, which pages are most visited and where traffic originates. We have configured the following privacy settings in our GA4 property:
- IP anonymization enabled: Your IP address is truncated before storage. Full IPs are never retained.
- Advertising features disabled: We do not use Google Signals, remarketing, or interest-based advertising.
- Data sharing restricted: Data is not shared with Google for advertising or external benchmarking.
- Data retention set to 14 months — the minimum configurable period in GA4.
Google Analytics data is processed by Google LLC (United States) and Google Ireland Limited (EEA) under a Data Processing Agreement. See Google's Privacy Policy and GA4 data privacy documentation.
Google Search Console
Google Search Console shows how this site appears in Google Search results. It provides aggregated search queries, click-through rates, and technical indexing information. Search Console does not place cookies on your device and does not collect personally identifiable information from visitors.
Opting out of Google Analytics
- Install the Google Analytics Opt-out Browser Add-on
- Enable "Do Not Track" in your browser settings
- Block analytics cookies via your browser settings or a privacy extension
- Decline non-essential cookies when presented with our cookie notice
Cookies
Cookies are small text files stored on your device by your browser. This website uses the following categories:
Managing cookies in your browser
How we use data
| Purpose | Details |
|---|---|
| Responding to inquiries | When you contact the study team, we use your name and contact details solely to respond and connect you with the relevant research site. |
| Website analytics | To understand which content is most useful and to improve the clarity of study information provided. |
| Search performance | To ensure people searching for ovarian cancer clinical trials can find accurate, relevant information. |
| Technical maintenance | To diagnose issues, maintain site performance, and ensure security. |
We do not use your data for advertising, profiling, or automated decision-making. We do not sell data.
Legal basis for processing
| Processing activity | Legal basis |
|---|---|
| Contact form submissions | Legitimate interests — to respond to your inquiry, consistent with your reasonable expectations when reaching out. |
| Google Analytics cookies | Consent — analytics cookies are placed only after you provide explicit consent via our cookie notice. |
| Strictly necessary cookies | Technical necessity / legitimate interests — essential for the website to operate; no consent required. |
| Google Search Console | Legitimate interests — aggregated, non-personal data provided by Google to maintain site quality. |
Data sharing and third parties
We do not sell, rent, or trade personal information. Data is shared only in these limited circumstances:
Service providers (data processors)
- Google LLC — Google Analytics (anonymized usage data) and Google Search Console (aggregated search data), under a Data Processing Agreement.
- Website hosting provider — Infrastructure hosting, subject to data processing agreements.
- Precare — Website development and maintenance, acting under contractual data protection obligations.
Clinical research sites
If you contact the study team through this website, your inquiry may be forwarded to the clinical research site nearest to you — solely to facilitate a follow-up about your potential eligibility. This information is never used for commercial purposes.
Legal requirements
We may disclose information if required by law, regulation, or court order, or to protect the rights, property, or safety of Theolytics, our partners, or the public.
Data retention
| Data type | Retention period |
|---|---|
| Contact form submissions | Up to 24 months from submission, or until the study recruitment phase closes — whichever occurs first. Records are deleted or anonymized after this period. |
| Google Analytics data | 14 months, as configured in our GA4 property settings (the minimum available period). |
| Google Search Console data | 16 months, per Google's platform policy. Data is aggregated and contains no personally identifiable information. |
| Server access logs | Up to 30 days for security purposes, after which they are automatically deleted or anonymized. |
Your rights
Depending on your location and applicable law, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at privacy@theo260-iptrial.com. We will respond within 30 calendar days. If you are in the EEA or UK, you may also lodge a complaint with your local data protection supervisory authority.
Minors
The THEO-260 study is intended for adults aged 18 and older. This website is not directed at individuals under 18. We do not knowingly collect personal information from minors. If you believe a minor has submitted information through this site, please contact us at privacy@theo260-iptrial.com so we can delete it promptly.
International data transfers
This website may be accessed from countries around the world. Where your information is transferred internationally:
- Google Analytics data is processed by Google LLC (United States) and Google Ireland Limited (EEA) under Standard Contractual Clauses (SCCs) or other GDPR-approved transfer mechanisms.
- Contact form data is stored on our hosting infrastructure and accessed only by authorized Theolytics and Precare personnel.
We take appropriate contractual and technical steps to ensure international transfers comply with applicable data protection laws.
Changes to this policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. When changes are made, we will update the "Last updated" date at the top of this page. For material changes, we will provide a more prominent notice on the website. Continued use of the site after changes are posted constitutes acknowledgment of the updated policy.
Contact us
For questions, concerns, or requests related to this Privacy Policy or the handling of your personal data: