Privacy Policy
Last Updated: November 2, 2023
Effective Date: November 2, 2023
To effectively safeguard the personal information of users utilizing the Electronic Clinical Outcomes Assessment (hereafter referred to as "eCOA") platform services and enhance the user experience, EClinCloud (Ningbo) Technology Company Limited (hereafter referred to as "EClinCloud", "we," "us," "our") has formulated this Privacy Policy (hereafter referred to as "this Policy") in accordance with prevailing regulations and policies. The objective of this Policy is to establish an understanding and confirmation with you regarding the collection, storage, use, disclosure, and protection of your personal information during and after your utilization of eCOA services.
Please Read Carefully: To safeguard your rights and interests, it is imperative that you meticulously review the precise wording of each clause in this Policy before agreeing to its terms. Please ensure to thoroughly read the contents of each clause, particularly those under sections marked in bold. If you have any objections, questions, comments, or suggestions regarding this Policy, you are encouraged to contact EClinCloud using the provided contact information.
By Signing: By reading and checking the agreement box, or by otherwise choosing to accept this Policy, you acknowledge that you have thoroughly read, understood, and agreed to all the contents of this Policy. This Policy becomes effective as of the date you check or accept it via the web page. Should you disagree with any part of this Policy or its terms and conditions during the reading process, please refrain from signing.
1. How EClinCloud Collects and Uses Information
1.1 Types of Information Collected
To ensure the smooth operation of services, enhance and optimize functionalities, and safeguard the security of your account, EClinCloud collects the information you provide or authorize to provide when utilizing eCOA services, as well as information generated through such services.
(a) Registration and Login Information: When you register and log into your account, or utilize the account management features, EClinCloud will gather your account number, password, and other pertinent details as part of the registration and login procedures.
(b) Device Log Information: This includes details about your interactions with our services, encompassing all actions performed on EClinCloud products.
(c) Device Information. When you use our services, we may collect your personal information (such as IMEI, IMSI, Android ID, login IP address, geographical location, OAID, WIFI BSSID、WIFI SSID) based on your device and granted permissions. A pop-up will appear when you use the corresponding function to ask for your authorization. You can choose to authorize or not authorize. For details on our access permissions, please refer to the "Device Permissions List."
1.2 How the Information is Used
1.2.1 The information mentioned above is collected by EClinCloud to provide services and enhance service quality. EClinCloud may utilize this information for the following purposes:
(a) Sharing with Third-Party Sites: The information may be shared with other third-party sites with which you have contractual agreements, doctor-patient relationships, or other associated connections, specifically for the purpose of clinical outcome assessment.
(b) Direct Communication: EClinCloud will use the collected information to directly communicate with you, such as sending system notifications (including updates on services and this Policy provided by EClinCloud), service callbacks, and similar communications.
(c) Enhancing Security and Reliability: This includes assisting in improving the security and reliability of the eCOA services. This involves activities such as detecting, preventing, and responding to fraud, abuse, illegal activities, security risks, and technical issues that may pose a threat to eCOA users or the public.
(d) Other Legitimate Uses: The information may be used for other legitimate purposes to comply with relevant laws and regulations, departmental regulations, and governmental directives.
1.2.2 Consent and Exceptions
You acknowledge and agree that EClinCloud may collect and utilize your personal information in compliance with relevant laws, regulations, national policies, and industry standards without requiring explicit consent. Furthermore, EClinCloud may not entertain requests for correction, deletion, cancellation, or withdrawal of consent under the following circumstances:
(a) Matters related to national security, national defense security, and other national interests;
(b) Matters concerning public safety, public health, public knowledge, and other significant public interests;
(c) Matters related to crime investigation, prosecution, trial, and sentence enforcement or administrative enforcement;
(d) Matters aimed at safeguarding your or other individuals’ vital legal rights and interests such as life and property, where obtaining consent is impracticable;
(e) Personal information disclosed by you voluntarily to the public;
(f) Personal information collected from legitimate publicly disclosed sources, such as credible news reports, government information disclosures, and other authorized channels;
(g) Necessary for the execution of relevant contracts/agreements or other legally binding documents;
(h) Necessary for ensuring the safe and stable operation of the eCOA application, such as detecting and rectifying faults in the product or service;
(i) Necessary for academic research institutions to conduct statistical or academic research based on public interests, with personal information de-identified when research results are made public;
(j) Other circumstances specified by applicable laws and regulations.
1.3 Use of Personal Data
EClinCloud commits to refraining from utilizing your personal data for user profiling or advertising purposes. Should EClinCloud intend to use your personal information for purposes beyond the original collection, which are not directly or reasonably related, you will be notified, and explicit consent will be sought before proceeding.
2. Cookies and Similar Technologies
2.1 To ensure the proper provision of the eCOA service and enhance user experience, EClinCloud may utilize various technologies to collect and store data about your access to and use of the eCOA services, including but not limited to small data files known as "Cookies."
2.2 You understand and agree that functions of the eCOA services may only be available through cookies. While you may adjust your browser settings to accept or refuse EClinCloud cookies, refusing cookies may limit your access to certain eCOA functions dependent on cookies in certain circumstances.
3. Sharing, Transfer, and Public Disclosure of Personal Information
3.1 Except for purposes specified in this policy, EClinCloud will not share, transfer, or publicly disclose your personal information to unrelated third parties unless mandated by laws, regulations, mandatory administrative enforcement, or judicial requirements.
3.2 Disclosure Process
When EClinCloud receives requests for disclosure of information as described above, we will verify the legal basis of such requests and require the requester to provide corresponding legal documents. Requests are carefully reviewed to ensure compliance with legal requirements, and you will be promptly notified of any disclosures, provided such notification is permitted by law.
4. Protection and Storage of Personal Information
4.1 Information Security
(a) EClinCloud is dedicated to safeguarding users' information against loss, misuse, unauthorized access, or disclosure. Rigorous information security rules and procedures are maintained, enforced by a dedicated information security team.
(b) Various security measures, including encryption technology such as SSL/TLS, are employed to maintain information security at a reasonable level.
(c) Reasonable and practical steps are taken to prevent the collection of personal information unrelated to stated purposes.
(d) In the event of a personal information security breach, EClinCloud will adhere to legal obligations by promptly notifying you, typically within 30 days. Notifications will include essential details of the security incident, potential impacts, remedial measures, and more, delivered through email, push notifications, or similar means. If individual notifications are impractical, a public announcement will be issued. Additionally, EClinCloud will report incidents to regulatory authorities as required by law.
(e) While EClinCloud endeavors to enhance security measures, it is acknowledged that no "perfect security measures" exist on the Internet, and absolute security cannot be guaranteed due to technical constraints, force majeure events, third-party actions, or potential malicious activities.
4.2 Personal Data Storage
(a) Personal information collected and generated within the People's Republic of China is stored within its borders. Personal information generated while using the eCOA services outside of China is stored on servers located within China, ensuring compliance with local regulations. EClinCloud ensures equal and adequate protection of personal information stored within China.
(b) Personal information is retained only for the duration necessary to fulfill stated purposes, unless legal retention periods dictate otherwise. Upon expiration of the legal retention period, personal information is either deleted or anonymized.
5. Your Rights Regarding Personal Information
In accordance with the Cybersecurity Law of the People's Republic of China and other relevant laws and regulations, EClinCloud provides a convenient method for you to manage (access, modify, copy, delete, withdraw consent, and exercise other legal rights) your personal information. You can manage your personal information and account through the following avenues:
5.1 Access, Modification, and Copying
You can access, modify, and copy your personal information through your account.
5.2 Deletion Requests
You have the right to request the deletion of personal information under the following circumstances:
(a) Our processing of personal information breaches laws and regulations;
(b) We handle personal information beyond the scope of this Policy with you;
(c) We discontinue the service or you withdraw your previously granted consent;
(d) Other situations as specified by laws and regulations.
5.3 Account Cancellation
Upon your decision to discontinue the use of this product, you have the option to cancel your account. EClinCloud will then cease providing services to you and will proceed to expire your personal information within a reasonable timeframe.
5.4 Withdrawal of Consent
Certain functionalities of our services necessitate information or device permissions based on your authorized consent. You reserve the right to withdraw such consent by deactivating the respective function. Upon withdrawal of consent, we will be unable to furnish the associated services and will cease processing your personal information for these purposes. Nevertheless, your decision to withdraw consent will not impact the processing of personal information previously undertaken by us based on your authorization.
5.5 Account Disabling or Cancellation
Your account registration is initiated through an invitation from the administrator of your system usage. To disable or cancel your account, you can either contact your system administrator directly or reach out to us via email at support@eclincloud.com. Your account cancellation request will be processed within fifteen (15) working days. Please be aware that account cancellation is an irreversible action. Upon cancellation, all information associated with your account will be deleted, unless otherwise stipulated by laws and regulations.
5.6 Access and Rectification
If you are unable to access or rectify your personal information through the aforementioned methods, or if you require access to or correction of other personal information generated from your use of the eCOA application, or if you believe that EClinCloud has violated any laws, regulations, or agreements with you regarding the collection or utilization of personal information, please reach out to us via email at ecc@eclincloud.com. EClinCloud will acknowledge your request within fifteen (15) working days of receiving your feedback and verifying your identity.
6. Amendments
In accordance with updates to pertinent national laws and regulations and the operational requirements of the eCOA services, you fully understand and agree that EClinCloud reserves the right to periodically revise this Policy without prior notice. Any such revisions will entirely supersede the previous version and will be made available to all users through publication on the relevant page or via other appropriate means. Upon publication, the revised Policy shall become effective immediately without further individual notification. Should you disagree with the revised terms of this Policy, you will be unable to access the eCOA services. By continuing to use the eCOA services after the revision of this Policy, you will be deemed to have consented to and accepted the revised terms of this Policy.
7. How to Contact Us
If you have any inquiries or concerns regarding this Privacy Policy, particularly if you believe that your legitimate interests have been compromised due to our handling of personal information, please reach out to our support team. We will promptly investigate any raised concerns and provide a timely response in accordance with the stipulations and timelines mandated by applicable data protection laws.
Tel: 0755-22671619
E-mail: ecc@EClinCloud.com
8. Important Notice
8.1 This Policy exclusively governs the actions of EClinCloud ("we," "us," or "our"). Any obligations pertaining to the actions of any other third party are subject to the agreements you have entered into with them. EClinCloud assumes no responsibility for any actions of third parties leading to liabilities. Should you provide information upon request or voluntarily to a third party, all risks, consequences, and liabilities shall be borne solely by you and the respective party.
8.2 Please confirm that you have read and fully understood all the provisions outlined above, especially those highlighted in bold or bold underscore. If you do not agree with this Policy or any of its provisions, please refrain from signing.