MENUCLOSE

 

Connect with us

Last updated: September 2, 2025

This Privacy Policy (“Policy”) describes how ArcheMedX, Inc. collects, uses, and protects personal data when individuals use our website (www.archemedx.com) and applications, including the Ready platform. It also explains your rights under applicable data protection laws such as the EU General Data Protection Regulation (“GDPR”).

By accessing our website or using our platform, you agree to the collection and use of your information as described in this Policy.

Who We Are

ArcheMedX, Inc.
300 E. Main St, Suite 101
Charlottesville, VA 22902
Email: [email protected]
Phone: (434) 260-1850
Website: www.archemedx.com

What We Collect

Through the Ready Platform:

When using our Ready platform, we intentionally limit the collection of personal data. The only potentially identifiable health information we collect is the user’s work email address, which may be considered Protected Health Information (“PHI”) under HIPAA when linked to study participation.

We do not collect medical records, lab results, clinical notes, or any sensitive patient health data.

Through Our Corporate Website:

We may collect the following information when you register for events, download resources, or subscribe to communications:
– Name
– Work email
– Job title and company name
– Phone number
– Business address or general location
– Areas of interest or communication preferences

We do not collect sensitive personal data such as gender, birthdate, or home address.

How We Use Personal Data

We use personal data for the following limited and clearly defined purposes:
– To provide access to and support use of the Ready platform
– To deliver requested information or resources (e.g., product updates, event details)
– To improve our applications and services
– To maintain platform security and compliance
– To support customer service and user support
– To fulfill legal or regulatory obligations

We do not use personal data to make automated decisions or for profiling.

Legal Basis for Processing

Where GDPR applies, we rely on the following legal bases:
– Performance of a contract: when delivering the Ready platform under agreements with clients and partners, such as clinical trial sponsors or CROs
– Legitimate interest: for communicating with customers and improving our services
– Consent: for optional marketing communications or event participation

Security and Data Protection

We apply appropriate technical and organizational safeguards, including:
– Encryption of data in transit and at rest
– Role-based access controls following the principle of least privilege
– Periodic access reviews and system logging
– Data hosting with third-party providers (e.g., AWS) that maintain SOC 2 and ISO 27001 certifications

Retention of Data

We retain personal data only as long as necessary for the purposes stated in this Policy or as required by law. Data collected through the Ready platform is retained in accordance with our contractual obligations to sponsors or CROs.

Sharing of Data

We do not sell or rent personal information. We may share data with:
– Sponsors or CROs who engage ArcheMedX as a processor
– Authorized service providers supporting our platform
– Regulators or legal authorities when required by law

We may also share aggregated, anonymized data for research, reporting, or performance analytics.

International Transfers

If you are located outside the United States, please note that your data may be transferred to and processed in the U.S. by ArcheMedX or its providers. We apply appropriate safeguards to ensure such transfers comply with applicable laws.

Your Rights

Depending on your location, you may have the right to:
– Access the personal data we hold about you
– Request correction or deletion of your data
– Object to or restrict certain types of processing
– Withdraw consent (where processing is based on consent)

To exercise these rights, contact: [email protected]

Cookies and Tracking

Our website uses cookies and tracking technologies to analyze traffic, remember preferences, and improve user experience. You can manage cookie settings in your browser. See www.allaboutcookies.org for more details.

Children

Our platforms and website are not intended for children under 13. We do not knowingly collect personal data from anyone under this age.

Changes to This Policy

We may update this Policy from time to time. The “Last Updated” date at the top reflects the latest version. Significant changes will be communicated via our website or email where appropriate.