Privacy Policy | KARAMATA

FIG. 01 / PRIVACY POLICY

UPDATED AUGUST 28, 2026

EXERCISE PRIVACY RIGHTS →

ON THIS PAGE

Introduction

Clinical trial data — read this first

Information we collect

How we collect it

How we use it

Disclosure of personal information

Cookies and similar technologies

07-A

Analytics and measurement

Retention

Security

Your rights and choices

Children’s privacy

Visitors from outside the United States

Changes to this policy

Introduction

KARAMATA LLC (“KARAMATA,” “we,” “our,” “us”) provides clinical trial services to sponsors and research sites in hematology and oncology. This Privacy Policy describes how we handle personal information in two contexts only: (1) visitors to karamataclinical.com, including its subdomains and any domains we operate that redirect there (the “Site”), and people who contact us, and (2) business contacts at sponsor, site, and vendor organizations.

This Policy does not apply to information we process in delivering clinical trial services.

That processing is governed exclusively by Section II below and the executed agreements described there. This Policy is a notice, not a contract: it creates no contractual rights, is not incorporated into any agreement unless an agreement expressly says so, and may be revised by us at any time by posting an updated version with a new date. Where an executed agreement addresses the same subject matter, the agreement controls.

We are committed to handling personal information responsibly and consistent with applicable U.S. data protection laws. Our practices are designed to CCPA-aligned standards: we honor the core rights those laws provide — access, deletion, correction, and non-discrimination — for all individuals as described in Section X, regardless of residence, and where any state privacy law applies to us now or in the future, we will honor the rights it provides. Questions: legal@karamataclinical.com.

Clinical trial data — read this first

The Site does not collect, and must never be used to submit, protected health information (PHI), participant data, or any patient-identifiable information.

Where our services involve trial-related data — including, in some engagements, participant data — KARAMATA acts as a service provider, processor, and, where applicable, business associate, processing that data on behalf of and at the documented direction of the sponsor or site, under executed written agreements (including Business Associate Agreements where applicable), the approved protocol, informed consent documentation, GCP/ICH-E6, and applicable law. The sponsor or site — not KARAMATA — determines the purposes and means of that processing, and its notices and consent documents govern it.

If you are a trial participant, direct any question or request about your study data to your study site or the study sponsor. If such a request reaches us, we will route it to the responsible party and provide assistance as our agreements require. Nothing in this Policy grants trial participants rights against KARAMATA, whose obligations regarding trial data run to its clients under the governing agreements and to regulators under applicable law.

What personal information we collect

In the two contexts this Policy covers, we collect:

Identity and contact information

Name, work email, phone number, organization, and role, when you submit our contact form, email or call us, or correspond with us.

Professional and business information

Information about your organization, studies, and service needs that you choose to share in inquiries and business dealings.

Careers and applicant information

If you apply to work with us, the application materials you choose to submit and our recruitment communications with you.

Communications

The contents of messages you send us.

Usage data

Technical information collected automatically when you visit the Site (IP address, browser and device information, pages viewed, referring pages) via cookies and similar technologies (Sections VII and VII-A).

We do not seek to collect, and ask that you not submit, sensitive personal information through the Site — including government identifiers, financial account credentials, biometric identifiers, or health information. Information submitted despite this request is handled under this Policy but at the submitter’s initiative.

How we collect it

Directly from you (forms, email, phone, meetings, engagements); automatically (cookies and similar technologies); and from third parties (your organization and colleagues in the course of business, service providers supporting our operations, and publicly available professional sources).

How we use your information

We use personal information for the following business purposes: responding to inquiries and correspondence; scoping, negotiating, delivering, administering, and improving our services; operating, securing, auditing, and improving the Site and our systems; sending business communications relevant to our relationship (you may opt out of non-essential communications at any time); detecting and preventing fraud, security incidents, and misuse; complying with legal, regulatory, insurance, and contractual obligations; establishing, exercising, or defending legal claims; in connection with an actual or contemplated corporate transaction; and for any other purpose disclosed to you at collection or with your consent.

We may create and use de-identified or aggregated information for any lawful purpose; where we maintain de-identified information, we commit to maintaining it in de-identified form and not attempting reidentification except as permitted by law to test de-identification. We do not use personal information for profiling in furtherance of decisions that produce legal or similarly significant effects.

Disclosure of personal information

We disclose personal information for the business purposes above to:

Service providers and contractors

Providers that host and deliver the Site and support our operations, bound by written contracts restricting their use of the information, including: Framer (website platform, hosting, content delivery, and TLS — Site traffic is served directly from Framer’s infrastructure), Cloudflare, Inc. (authoritative DNS for our domain), AdOpt (consent management — records your cookie choices and sets the cookies described in our Cookie Policy, including on its own goadopt.io domain), Google LLC (analytics — Section VII-A — and delivery of the Site’s fonts through Google Fonts), and our IT, communications, and professional-services providers. In serving the Site, Framer processes IP addresses, request headers and URLs, browser, device, and network details, timestamps, security and diagnostic signals, and basic aggregate platform-usage signals as our service provider. Cloudflare answers DNS queries for our domain and in that role processes resolver and query metadata; it does not handle Site traffic.

Sponsors, sites, and counterparties

Business contacts on an engagement, within its scope.

Professional advisers

Counsel, accountants, insurers, and auditors.

Authorities and other parties

Where required or permitted by law, including to comply with legal process, protect rights, safety, and property, and enforce agreements.

Successors and their advisers

In connection with an actual or contemplated merger, acquisition, financing, or sale of assets, under appropriate confidentiality protections.

We do not sell personal information and we do not share personal information for cross-context behavioral advertising, as those terms are defined by applicable law, and we have not done so in the preceding twelve months.

We do not knowingly collect or sell the personal information of consumers under sixteen.

Cookies and similar technologies

The Site uses a small number of cookies and similar technologies — including consent-management cookies set by AdOpt on this Site and on its own goadopt.io domain — for essential operation, security, and the analytics described in Section VII-A. We do not use advertising cookies, and no third-party advertising networks run on the Site. Our Cookie Policy lists every cookie the Site uses. You can control cookies through your browser, including blocking or deleting them; essential functions may not work without them. Choices specific to analytics are described in Section VII-A. Because we do not sell or share personal information for cross-context behavioral advertising, opt-out preference signals such as Global Privacy Control do not change practices that already reflect them; where applicable law nonetheless requires recognition of such signals, we honor them to the extent required.

07-A

Analytics and measurement

We use Google Analytics 4, a service of Google LLC, to understand in aggregate how visitors use the Site — pages visited, navigation paths, browser and device type, approximate (city-level) location, and session activity. We use this information to measure Site performance and improve our content.

Google Analytics sets first-party cookies, including _ga and _ga_<container-id>, to distinguish visitors and sessions; Google states the default expiration for these cookies is two years, subject to your browser settings and configuration. Approximate location is derived from your IP address; per Google’s documentation, for traffic from the EU, Switzerland, and the UK, Google Analytics does not log or store IP addresses — the address is used transiently on regional servers to derive coarse location and then discarded.

Categories processed: pseudonymous cookie identifiers, approximate location, browser, device, operating system, and language, pages viewed, referring source, and session interaction data. Recipient: Google LLC, as our service provider. Data in our Google Analytics property is retained for 14 months.

We configure Google Analytics for measurement only. We do not use it for advertising, and we do not send it names, email addresses, phone numbers, message contents, or any patient, clinical, or other directly identifying information — and we ask that you never type such information into any field or URL.

Your choices: where consent is required, use the cookie banner to allow or decline analytics, and reopen your choices at any time via the floating cookie button in the corner of the page; you can also block or delete cookies in your browser, or install Google’s Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout).

Retention

We retain personal information for as long as reasonably necessary for the purposes in Section V — typically the duration of our relationship plus a period sufficient to satisfy contractual, legal, tax, insurance, audit, and record-keeping obligations (for most business records, up to seven years) and to handle inquiries and claims. Records relating to clinical trial services are retained for the periods required by applicable regulation and the governing agreements, which can substantially exceed these periods. We may retain information longer where required by law, litigation hold, or preservation obligation. When no longer required, information is securely deleted or de-identified. Analytics data retention in Google Analytics is described in Section VII-A.

Security

We maintain administrative, technical, and physical safeguards designed to protect personal information and appropriate to its sensitivity, as described in our Data Security & Confidentiality statement. No method of transmission or storage is completely secure, and we do not warrant the security of information transmitted to us over the internet; please do not send confidential material by unencrypted email.

DATA SECURITY & CONFIDENTIALITY →

Your rights and choices

As a matter of policy, we extend the following core rights to all individuals whose information we hold under this Policy, regardless of residence — and where the law of your state grants additional rights, we honor those to the extent it requires.

You may: know and access the personal information we hold about you; obtain a portable copy; correct inaccuracies; delete personal information we collected from you; opt out of sale, sharing, or targeted advertising (we engage in none, so there is nothing to opt out of; if that changes, we will provide a compliant opt-out first); limit use of sensitive personal information (we do not collect it through the Site); appeal a decision on a request, where state law provides an appeal; and be free from discrimination for exercising these rights.

To exercise a right, email legal@karamataclinical.com or call (888) 407-5682. You may also submit a request through our Privacy Requests page. We will verify your identity to a reasonable degree of certainty before acting, and may request information sufficient to do so; an authorized agent must provide proof of authorization. We respond within the timeframes applicable law requires and may extend where the law permits. We do not charge a fee unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline, as the law allows. Rights requests are honored to the extent applicable law requires and subject to its exceptions, including where information must be retained under Section VIII. Requests concerning clinical trial data are governed by Section II and will be routed to the responsible sponsor or site.

EXERCISE YOUR PRIVACY RIGHTS →

Children’s privacy

The Site is a business-audience website and is not directed to children. We do not knowingly collect personal information from children under thirteen through the Site. If you believe a child has provided us personal information through the Site, contact us and we will delete it as required by law.

Visitors from outside the United States

KARAMATA operates in the United States. The Site, however, is delivered through service providers that operate internationally: it is hosted and delivered by Framer (whose operations include the European Union), with DNS provided by Cloudflare, consent management by AdOpt, font delivery by Google Fonts, and measurement by Google Analytics as described in Section VII-A. Technical visitor data described in this Policy may accordingly be processed in the United States, the European Union, and other locations where those providers operate, under the written agreements described in Section VI.

Information you submit to us directly is processed and stored in the United States, where laws may differ from those of your jurisdiction. If you use the Site from outside the United States, you do so on that basis.

KARAMATA LLC
3101 N. Central Ave. Ste 183 #6830
Phoenix, AZ 85012
legal@karamataclinical.com
(888) 407-5682

CONTACT KARAMATA →

Changes to this policy

We may revise this Policy at any time by posting the updated version with a new “Last updated” date; material changes will be signaled by that date and, where the law requires, by additional notice. The version posted at the time of your interaction with the Site governs that interaction.

NOTICE

This policy explains how KARAMATA handles personal information collected through this website and business communications. It applies to site visitors, people who contact us, and business contacts at sponsor, site, and vendor organizations. It does not govern information processed in delivering clinical trial services; that processing is controlled by executed agreements and applicable study documentation.

DATA SECURITY & CONFIDENTIALITY →