LEGAL

Privacy Policy

Privacy Policy

Privacy Policy

EFFECTIVE JULY 6, 2026 · LAST UPDATED JULY 6, 2026

EFFECTIVE JULY 6, 2026 · LAST UPDATED JULY 6, 2026

How KARAMATA collects, uses, and protects personal information across the site and our services.

How KARAMATA collects, uses, and protects personal information across the site and our services.

LEGAL

Privacy Policy

EFFECTIVE JULY 6, 2026 · LAST UPDATED JULY 6, 2026

How KARAMATA collects, uses, and protects personal information across the site and our services.

FIG. 01  /  PRIVACY POLICY

EFFECTIVE JULY 6, 2026 · LAST UPDATED JULY 6, 2026

EFFECTIVE JULY 6, 2026 · LAST UPDATED JULY 6, 2026

This policy explains how KARAMATA handles personal information collected through this website and business communications. It applies to site visitors, people who contact us, and business contacts at sponsor, site, and vendor organizations. It does not govern information processed in delivering clinical trial services; that processing is controlled by executed agreements and applicable study documentation.

This policy explains how KARAMATA handles personal information collected through this website and business communications. It applies to site visitors, people who contact us, and business contacts at sponsor, site, and vendor organizations. It does not govern information processed in delivering clinical trial services; that processing is controlled by executed agreements and applicable study documentation.

SCOPE AT A GLANCE

SCOPE AT A GLANCE

01

01

WEBSITE & BUSINESS

WEBSITE & BUSINESS

Site visits, inquiries, and business communications.

Site visits, inquiries, and business communications.

02

02

CLINICAL TRIAL DATA

CLINICAL TRIAL DATA

Client-controlled and governed by executed agreements.

Client-controlled and governed by executed agreements.

03

03

CAREERS & APPLICANTS

CAREERS & APPLICANTS

Applicant information and recruitment communications.

Applicant information and recruitment communications.

01

01

Introduction

Introduction

KARAMATA LLC (“KARAMATA,” “we,” “our,” “us”) provides clinical trial services to sponsors and research sites in hematology and oncology. This Privacy Policy describes how we handle personal information in two contexts only: (1) visitors to karamataclinical.com (the “Site”) and people who contact us, and (2) business contacts at sponsor, site, and vendor organizations.

KARAMATA LLC (“KARAMATA,” “we,” “our,” “us”) provides clinical trial services to sponsors and research sites in hematology and oncology. This Privacy Policy describes how we handle personal information in two contexts only: (1) visitors to karamataclinical.com (the “Site”) and people who contact us, and (2) business contacts at sponsor, site, and vendor organizations.

This Policy does not apply to information we process in delivering clinical trial services.

This Policy does not apply to information we process in delivering clinical trial services.

That processing is governed exclusively by Section II below and the executed agreements described there. This Policy is a notice, not a contract: it creates no contractual rights, is not incorporated into any agreement unless an agreement expressly says so, and may be revised by us at any time by posting an updated version with a new date. Where an executed agreement addresses the same subject matter, the agreement controls.

That processing is governed exclusively by Section II below and the executed agreements described there. This Policy is a notice, not a contract: it creates no contractual rights, is not incorporated into any agreement unless an agreement expressly says so, and may be revised by us at any time by posting an updated version with a new date. Where an executed agreement addresses the same subject matter, the agreement controls.

We are committed to handling personal information responsibly and consistent with applicable U.S. data protection laws. Our practices are designed to CCPA-aligned standards: we honor the core rights those laws provide — access, deletion, correction, and non-discrimination — for all individuals as described in Section X, regardless of residence, and where any state privacy law applies to us now or in the future, we will honor the rights it provides. Questions: operations@karamataclinical.com.

We are committed to handling personal information responsibly and consistent with applicable U.S. data protection laws. Our practices are designed to CCPA-aligned standards: we honor the core rights those laws provide — access, deletion, correction, and non-discrimination — for all individuals as described in Section X, regardless of residence, and where any state privacy law applies to us now or in the future, we will honor the rights it provides. Questions: operations@karamataclinical.com.

02

02

Clinical trial data — read this first

Clinical trial data — read this first

The Site does not collect, and must never be used to submit, protected health information (PHI), participant data, or any patient-identifiable information.

The Site does not collect, and must never be used to submit, protected health information (PHI), participant data, or any patient-identifiable information.

Where our services involve trial-related data — including, in some engagements, participant data — KARAMATA acts as a service provider, processor, and, where applicable, business associate, processing that data on behalf of and at the documented direction of the sponsor or site, under executed written agreements (including Business Associate Agreements where applicable), the approved protocol, informed consent documentation, GCP/ICH-E6, and applicable law. The sponsor or site — not KARAMATA — determines the purposes and means of that processing, and its notices and consent documents govern it.

Where our services involve trial-related data — including, in some engagements, participant data — KARAMATA acts as a service provider, processor, and, where applicable, business associate, processing that data on behalf of and at the documented direction of the sponsor or site, under executed written agreements (including Business Associate Agreements where applicable), the approved protocol, informed consent documentation, GCP/ICH-E6, and applicable law. The sponsor or site — not KARAMATA — determines the purposes and means of that processing, and its notices and consent documents govern it.

If you are a trial participant, direct any question or request about your study data to your study site or the study sponsor. If such a request reaches us, we will route it to the responsible party and provide assistance as our agreements require. Nothing in this Policy grants trial participants rights against KARAMATA, whose obligations regarding trial data run to its clients under the governing agreements and to regulators under applicable law.

If you are a trial participant, direct any question or request about your study data to your study site or the study sponsor. If such a request reaches us, we will route it to the responsible party and provide assistance as our agreements require. Nothing in this Policy grants trial participants rights against KARAMATA, whose obligations regarding trial data run to its clients under the governing agreements and to regulators under applicable law.

03

03

What personal information we collect

What personal information we collect

In the two contexts this Policy covers, we collect:

In the two contexts this Policy covers, we collect:

Identity and contact information

Identity and contact information

Name, work email, phone number, organization, and role, when you submit our contact form, email or call us, or correspond with us.

Name, work email, phone number, organization, and role, when you submit our contact form, email or call us, or correspond with us.

Professional and business information

Professional and business information

Information about your organization, studies, and service needs that you choose to share in inquiries and business dealings.

Information about your organization, studies, and service needs that you choose to share in inquiries and business dealings.

Communications

Communications

The contents of messages you send us.

The contents of messages you send us.

Usage data

Usage data

Technical information collected automatically when you visit the Site (IP address, browser and device information, pages viewed, referring pages) via cookies and similar technologies (Section VII).

Technical information collected automatically when you visit the Site (IP address, browser and device information, pages viewed, referring pages) via cookies and similar technologies (Section VII).

We do not seek to collect, and ask that you not submit, sensitive personal information through the Site — including government identifiers, financial account credentials, biometric identifiers, or health information. Information submitted despite this request is handled under this Policy but at the submitter’s initiative.

We do not seek to collect, and ask that you not submit, sensitive personal information through the Site — including government identifiers, financial account credentials, biometric identifiers, or health information. Information submitted despite this request is handled under this Policy but at the submitter’s initiative.

04

04

How we collect it

How we collect it

Directly from you (forms, email, phone, meetings, engagements); automatically (cookies and similar technologies); and from third parties (your organization and colleagues in the course of business, service providers supporting our operations, and publicly available professional sources).

Directly from you (forms, email, phone, meetings, engagements); automatically (cookies and similar technologies); and from third parties (your organization and colleagues in the course of business, service providers supporting our operations, and publicly available professional sources).

05

05

How we use your information

How we use your information

We use personal information for the following business purposes: responding to inquiries and correspondence; scoping, negotiating, delivering, administering, and improving our services; operating, securing, auditing, and improving the Site and our systems; sending business communications relevant to our relationship (you may opt out of non-essential communications at any time); detecting and preventing fraud, security incidents, and misuse; complying with legal, regulatory, insurance, and contractual obligations; establishing, exercising, or defending legal claims; in connection with an actual or contemplated corporate transaction; and for any other purpose disclosed to you at collection or with your consent.

We use personal information for the following business purposes: responding to inquiries and correspondence; scoping, negotiating, delivering, administering, and improving our services; operating, securing, auditing, and improving the Site and our systems; sending business communications relevant to our relationship (you may opt out of non-essential communications at any time); detecting and preventing fraud, security incidents, and misuse; complying with legal, regulatory, insurance, and contractual obligations; establishing, exercising, or defending legal claims; in connection with an actual or contemplated corporate transaction; and for any other purpose disclosed to you at collection or with your consent.

We may create and use de-identified or aggregated information for any lawful purpose; where we maintain de-identified information, we commit to maintaining it in de-identified form and not attempting reidentification except as permitted by law to test de-identification. We do not use personal information for profiling in furtherance of decisions that produce legal or similarly significant effects.

We may create and use de-identified or aggregated information for any lawful purpose; where we maintain de-identified information, we commit to maintaining it in de-identified form and not attempting reidentification except as permitted by law to test de-identification. We do not use personal information for profiling in furtherance of decisions that produce legal or similarly significant effects.

06

06

Disclosure of personal information

Disclosure of personal information

We disclose personal information for the business purposes above to:

We disclose personal information for the business purposes above to:

Service providers and contractors

Service providers and contractors

Hosting, IT, communications, analytics, and professional-services providers bound by written contracts restricting their use of the information.

Hosting, IT, communications, analytics, and professional-services providers bound by written contracts restricting their use of the information.

Sponsors, sites, and counterparties

Sponsors, sites, and counterparties

Business contacts on an engagement, within its scope.

Business contacts on an engagement, within its scope.

Professional advisers

Professional advisers

Counsel, accountants, insurers, and auditors.

Counsel, accountants, insurers, and auditors.

Authorities and other parties

Authorities and other parties

Where required or permitted by law, including to comply with legal process, protect rights, safety, and property, and enforce agreements.

Where required or permitted by law, including to comply with legal process, protect rights, safety, and property, and enforce agreements.

Successors and their advisers

Successors and their advisers

In connection with an actual or contemplated merger, acquisition, financing, or sale of assets, under appropriate confidentiality protections.

In connection with an actual or contemplated merger, acquisition, financing, or sale of assets, under appropriate confidentiality protections.

We do not sell personal information and we do not share personal information for cross-context behavioral advertising, as those terms are defined by applicable law, and we have not done so in the preceding twelve months.

We do not sell personal information and we do not share personal information for cross-context behavioral advertising, as those terms are defined by applicable law, and we have not done so in the preceding twelve months.

We do not knowingly collect or sell the personal information of consumers under sixteen.

We do not knowingly collect or sell the personal information of consumers under sixteen.

07

07

Cookies and similar technologies

Cookies and similar technologies

The Site uses cookies and similar technologies for essential operation, security, and analytics. You can control cookies through your browser, including blocking or deleting them; essential functions may not work without them. Because we do not sell or share personal information for cross-context behavioral advertising, opt-out preference signals such as Global Privacy Control do not change our practices; where applicable law nonetheless requires recognition of such signals, we honor them to the extent required.

The Site uses cookies and similar technologies for essential operation, security, and analytics. You can control cookies through your browser, including blocking or deleting them; essential functions may not work without them. Because we do not sell or share personal information for cross-context behavioral advertising, opt-out preference signals such as Global Privacy Control do not change our practices; where applicable law nonetheless requires recognition of such signals, we honor them to the extent required.

08

08

Retention

Retention

We retain personal information for as long as reasonably necessary for the purposes in Section V — typically the duration of our relationship plus a period sufficient to satisfy contractual, legal, tax, insurance, audit, and record-keeping obligations (for most business records, up to seven years) and to handle inquiries and claims. Records relating to clinical trial services are retained for the periods required by applicable regulation and the governing agreements, which can substantially exceed these periods. We may retain information longer where required by law, litigation hold, or preservation obligation. When no longer required, information is securely deleted or de-identified.

We retain personal information for as long as reasonably necessary for the purposes in Section V — typically the duration of our relationship plus a period sufficient to satisfy contractual, legal, tax, insurance, audit, and record-keeping obligations (for most business records, up to seven years) and to handle inquiries and claims. Records relating to clinical trial services are retained for the periods required by applicable regulation and the governing agreements, which can substantially exceed these periods. We may retain information longer where required by law, litigation hold, or preservation obligation. When no longer required, information is securely deleted or de-identified.

09

09

Security

Security

We maintain administrative, technical, and physical safeguards designed to protect personal information and appropriate to its sensitivity, as described in our Data Security & Confidentiality statement. No method of transmission or storage is completely secure, and we do not warrant the security of information transmitted to us over the internet; please do not send confidential material by unencrypted email.

We maintain administrative, technical, and physical safeguards designed to protect personal information and appropriate to its sensitivity, as described in our Data Security & Confidentiality statement. No method of transmission or storage is completely secure, and we do not warrant the security of information transmitted to us over the internet; please do not send confidential material by unencrypted email.

10

10

Your rights and choices

Your rights and choices

As a matter of policy, we extend the following core rights to all individuals whose information we hold under this Policy, regardless of residence — and where the law of your state grants additional rights, we honor those to the extent it requires.

As a matter of policy, we extend the following core rights to all individuals whose information we hold under this Policy, regardless of residence — and where the law of your state grants additional rights, we honor those to the extent it requires.

You may: know and access the personal information we hold about you; obtain a portable copy; correct inaccuracies; delete personal information we collected from you; opt out of sale, sharing, or targeted advertising (we engage in none, so there is nothing to opt out of; if that changes, we will provide a compliant opt-out first); limit use of sensitive personal information (we do not collect it through the Site); appeal a decision on a request, where state law provides an appeal; and be free from discrimination for exercising these rights.

You may: know and access the personal information we hold about you; obtain a portable copy; correct inaccuracies; delete personal information we collected from you; opt out of sale, sharing, or targeted advertising (we engage in none, so there is nothing to opt out of; if that changes, we will provide a compliant opt-out first); limit use of sensitive personal information (we do not collect it through the Site); appeal a decision on a request, where state law provides an appeal; and be free from discrimination for exercising these rights.

To exercise a right, email operations@karamataclinical.com or call (888) 407-5682. We will verify your identity to a reasonable degree of certainty before acting, and may request information sufficient to do so; an authorized agent must provide proof of authorization. We respond within the timeframes applicable law requires and may extend where the law permits. We do not charge a fee unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline, as the law allows. Rights requests are honored to the extent applicable law requires and subject to its exceptions, including where information must be retained under Section VIII. Requests concerning clinical trial data are governed by Section II and will be routed to the responsible sponsor or site.

To exercise a right, email operations@karamataclinical.com or call (888) 407-5682. We will verify your identity to a reasonable degree of certainty before acting, and may request information sufficient to do so; an authorized agent must provide proof of authorization. We respond within the timeframes applicable law requires and may extend where the law permits. We do not charge a fee unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline, as the law allows. Rights requests are honored to the extent applicable law requires and subject to its exceptions, including where information must be retained under Section VIII. Requests concerning clinical trial data are governed by Section II and will be routed to the responsible sponsor or site.

11

11

Children’s privacy

Children’s privacy

The Site is a business-audience website and is not directed to children. We do not knowingly collect personal information from children under thirteen through the Site. If you believe a child has provided us personal information through the Site, contact us and we will delete it as required by law.

The Site is a business-audience website and is not directed to children. We do not knowingly collect personal information from children under thirteen through the Site. If you believe a child has provided us personal information through the Site, contact us and we will delete it as required by law.

12

12

Visitors from outside the United States

Visitors from outside the United States

KARAMATA operates in the United States, and information collected under this Policy is processed and stored in the United States, where laws may differ from those of your jurisdiction. If you use the Site from outside the United States, you do so on that basis.

KARAMATA operates in the United States, and information collected under this Policy is processed and stored in the United States, where laws may differ from those of your jurisdiction. If you use the Site from outside the United States, you do so on that basis.

13

13

Contact us

Contact us

KARAMATA LLC
3101 N. Central Ave. Ste 183 #6830
Phoenix, AZ 85012
operations@karamataclinical.com
(888) 407-5682

KARAMATA LLC
3101 N. Central Ave. Ste 183 #6830
Phoenix, AZ 85012
operations@karamataclinical.com
(888) 407-5682

14

14

Changes to this policy

Changes to this policy

We may revise this Policy at any time by posting the updated version with a new “Last updated” date; material changes will be signaled by that date and, where the law requires, by additional notice. The version posted at the time of your interaction with the Site governs that interaction.

We may revise this Policy at any time by posting the updated version with a new “Last updated” date; material changes will be signaled by that date and, where the law requires, by additional notice. The version posted at the time of your interaction with the Site governs that interaction.

PRIVACY QUESTION OR RIGHTS REQUEST?

PRIVACY QUESTION OR RIGHTS REQUEST?

CONTACT US →

CONTACT US →

ADDRESS
3101 N. Central Ave. Ste 183 #6830
Phoenix, AZ 85012
© 2026 KARAMATA LLC.
ALL RIGHTS RESERVED.