Privacy Policy

1. Introduction

Bond Health, Inc. (“Bond Trials,” “we,” “our,” or “us”) operates the Bond Trials clinical trial management platform, including the web application and any associated SMS messaging services. This Privacy Policy describes how we collect, use, and protect information you provide when using our platform.

This policy applies to all users of Bond Trials, including clinical research coordinators, investigators, any patients contacted through our prescreening outreach features, and anyone who answers a trial survey.

2. Information We Collect

We collect the following categories of information:

• Account information - name, email address, and organization, collected when you sign up or are invited to the platform.
• Usage data - actions you take within the platform (patient views, calls placed, documents opened), collected automatically for audit and compliance purposes.
• Patient contact information - phone numbers and basic demographic information drawn from connected EHR systems, used solely for clinical trial prescreening outreach.
• SMS opt-in data - when a patient or contact opts in to receive text messages from your organization through Bond Trials, we record that consent and associated messaging history.
• Trial survey answers - the answers and contact details you enter in a study's prescreening survey, which go to the research site running that study.
• Technical data - IP addresses, browser type, and device information collected automatically for security and error-monitoring purposes. On some trial survey pages, an ad platform also collects technical data, as described in Section 6.

3. Text Messaging (SMS)

Bond Trials enables organizations to send SMS messages to prospective clinical trial participants as part of a prescreening workflow. The following terms apply specifically to our SMS messaging service:

• No sharing of opt-in data. Mobile opt-in data and consent records - including phone numbers and any information collected from or about a user as a result of their SMS opt-in - will not be shared with, sold to, or transferred to any third party, including affiliates or marketing partners, for any purpose other than providing the messaging service.
• Purpose limitation. SMS messages sent through Bond Trials are limited to clinical trial prescreening communications. Messages will not be used for marketing, advertising, or any purpose unrelated to the specific clinical research activity for which consent was obtained.
• Opt-out. Recipients may opt out of SMS messages at any time by replying STOP to any message. Opt-out requests are processed immediately and no further messages will be sent. See our SMS Terms & Conditions for full details.
• Message retention. SMS conversation history is retained for up to 7 years in accordance with standard clinical research record-keeping requirements and applicable law.

4. How We Use Information

We use the information we collect to:

• Provide and operate the Bond Trials platform.
• Enable clinical trial patient identification and prescreening outreach.
• Maintain audit trails required for HIPAA compliance and regulatory purposes.
• Detect, investigate, and prevent security incidents and abuse.
• Improve the performance and reliability of the platform.

5. Data Sharing

We do not sell personal information for money. We share information only in the following limited circumstances:

• Service providers. We share data with vendors who operate core infrastructure on our behalf (cloud hosting, telephony, error monitoring), under data processing agreements that prohibit independent use.
• Your organization. Data entered or generated within your Bond Trials workspace is accessible to other authorized members of your organization.
• Legal requirements. We may disclose information when required by law, regulation, or valid legal process.
• Ad platforms, on some trial survey pages. When a study's site has turned on ad measurement, your browser reports page views to that site's ad platform as described in Section 6. Under some state privacy laws, such as the California Consumer Privacy Act, this can count as “sharing” personal information for targeted advertising. You can opt out as described in Section 6.

Mobile opt-in data is never shared with third parties for marketing or any purpose outside the clinical prescreening service.

7. Data Security

We implement technical and organizational measures to protect your information, including encryption in transit (TLS), encryption at rest, access controls, audit logging, and regular security reviews. No system is completely secure; if you believe your account has been compromised, contact us immediately.

8. HIPAA

Bond Trials is designed to support HIPAA-covered workflows. When operating as a Business Associate, we process Protected Health Information (PHI) only as directed by our covered-entity customers under the terms of a signed Business Associate Agreement. If you are a covered entity and need to execute a BAA, contact your Bond Trials account representative.

9. Data Retention

We retain personal and health information only as long as necessary to provide the Bond Trials service and to meet our legal, regulatory, and clinical-research record-keeping obligations. Retention periods vary by data type:

• SMS conversation history and consent records - retained for up to 7 years (see Section 3).
• Audit and compliance records - retained in accordance with HIPAA and applicable law.
• Account, patient, and trial data - retained for the life of the account or trial and any period required by clinical-research and legal obligations, then deleted or irreversibly anonymized.
• Operational logs and backups - retained on a limited, rolling basis for security and disaster-recovery purposes and expire automatically.

When information is no longer required, we delete or irreversibly anonymize it. To request deletion of your data, see Section 10 or contact privacy@bondtrials.com.

10. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or restrict our processing of your personal data, and to opt out of sharing for targeted advertising. To exercise these rights, contact us at the address below. We will respond within 30 days. To opt out of sharing on trial survey pages, use Global Privacy Control as described in Section 6.

SMS recipients may opt out at any time by replying STOP. To re-enable messages after opting out, reply START.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be posted here with a revised effective date. Your continued use of Bond Trials after a change constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or requests, contact: