Last updated: September 2, 2025
This Privacy Policy (“Policy”) describes how ArcheMedX, Inc. collects, uses, and protects personal data when individuals use our website (www.archemedx.com) and applications, including the Ready platform. It also explains your rights under applicable data protection laws such as the EU General Data Protection Regulation (“GDPR”).
By accessing our website or using our platform, you agree to the collection and use of your information as described in this Policy.
ArcheMedX, Inc.
300 E. Main St, Suite 101
Charlottesville, VA 22902
Email: [email protected]
Phone: (434) 260-1850
Website: www.archemedx.com
When using our Ready platform, we intentionally limit the collection of personal data. The only potentially identifiable health information we collect is the user’s work email address, which may be considered Protected Health Information (“PHI”) under HIPAA when linked to study participation.
We do not collect medical records, lab results, clinical notes, or any sensitive patient health data.
We may collect the following information when you register for events, download resources, or subscribe to communications:
– Name
– Work email
– Job title and company name
– Phone number
– Business address or general location
– Areas of interest or communication preferences
We do not collect sensitive personal data such as gender, birthdate, or home address.
We use personal data for the following limited and clearly defined purposes:
– To provide access to and support use of the Ready platform
– To deliver requested information or resources (e.g., product updates, event details)
– To improve our applications and services
– To maintain platform security and compliance
– To support customer service and user support
– To fulfill legal or regulatory obligations
We do not use personal data to make automated decisions or for profiling.
Where GDPR applies, we rely on the following legal bases:
– Performance of a contract: when delivering the Ready platform under agreements with clients and partners, such as clinical trial sponsors or CROs
– Legitimate interest: for communicating with customers and improving our services
– Consent: for optional marketing communications or event participation
We apply appropriate technical and organizational safeguards, including:
– Encryption of data in transit and at rest
– Role-based access controls following the principle of least privilege
– Periodic access reviews and system logging
– Data hosting with third-party providers (e.g., AWS) that maintain SOC 2 and ISO 27001 certifications
We retain personal data only as long as necessary for the purposes stated in this Policy or as required by law. Data collected through the Ready platform is retained in accordance with our contractual obligations to sponsors or CROs.
We do not sell or rent personal information. We may share data with:
– Sponsors or CROs who engage ArcheMedX as a processor
– Authorized service providers supporting our platform
– Regulators or legal authorities when required by law
We may also share aggregated, anonymized data for research, reporting, or performance analytics.
If you are located outside the United States, please note that your data may be transferred to and processed in the U.S. by ArcheMedX or its providers. We apply appropriate safeguards to ensure such transfers comply with applicable laws.
Depending on your location, you may have the right to:
– Access the personal data we hold about you
– Request correction or deletion of your data
– Object to or restrict certain types of processing
– Withdraw consent (where processing is based on consent)
To exercise these rights, contact: [email protected]
Our website uses cookies and tracking technologies to analyze traffic, remember preferences, and improve user experience. You can manage cookie settings in your browser. See www.allaboutcookies.org for more details.
Our platforms and website are not intended for children under 13. We do not knowingly collect personal data from anyone under this age.
We may update this Policy from time to time. The “Last Updated” date at the top reflects the latest version. Significant changes will be communicated via our website or email where appropriate.