Privacy Policy

  • Astra Research Group (“Astra,” “we,” “our,” or “us”) is committed to protecting the privacy and security of personal information. This Privacy Policy explains how we collect, use, store, disclose, and protect personal data relating to patients, study participants, prospective participants, business partners, website visitors, and other individuals with whom we interact.

    We process personal information in accordance with applicable privacy and data protection laws, including, where applicable, the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), and other relevant federal and state laws.

    This Privacy Policy is intended to provide transparency regarding our data practices and to describe the rights individuals may have concerning their personal information.

  • This Privacy Policy applies to personal information collected by Astra Research Group through:

    • our website and digital communications;

    • patient recruitment and study interest forms;

    • phone, email, text, and in-person communications;

    • relationships with vendors, service providers, and business contacts; and

    • other business operations related to clinical research activities.

    This Privacy Policy does not replace any separate informed consent form, HIPAA Authorization, Notice of Privacy Practices, or study-specific privacy disclosure you may receive in connection with a clinical trial or medical service.

  • Our objective is to collect and process personal information responsibly, lawfully, and only to the extent necessary for legitimate business, operational, regulatory, medical, research, and communication purposes.

  • “Personal information” means information that identifies, relates to, describes, or could reasonably be linked to an individual.

    Depending on the context, personal information we may collect includes:

    • name;

    • address;

    • phone number;

    • email address;

    • date of birth;

    • demographic information;

    • emergency contact information;

    • insurance-related information;

    • health-related information;

    • medical history relevant to study eligibility;

    • professional or employment information;

    • device, browser, and website usage data; and

    • communication records.

    Some personal information may qualify as sensitive personal information or protected health information under applicable law.

  • Astra seeks to follow core privacy principles when processing personal information:

    a. Lawfulness, fairness, and transparency

    We process personal information only when we have a valid legal basis or lawful business reason to do so, and we aim to explain our practices in a clear and accessible way.

    b. Purpose limitation

    We collect personal information for specific, legitimate purposes and do not use it in a manner incompatible with those purposes unless permitted or required by law.

    c. Data minimization

    We seek to collect only the information reasonably necessary for the purpose for which it is processed.

    d. Accuracy

    We take reasonable steps to keep personal information accurate and up to date.

    e. Storage limitation

    We retain personal information only for as long as necessary for business, legal, regulatory, contractual, medical, or research-related purposes.

    f. Security and confidentiality

    We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, or destruction.

  • We may collect personal information:

    • directly from you;

    • from forms you complete online or in person;

    • from emails, phone calls, text messages, and other communications;

    • from healthcare providers, referral sources, or study sponsors where permitted by law;

    • from service providers acting on our behalf;

    • from cookies, analytics, and website technologies; and

    • from publicly available or legally authorized sources.

  • We may use personal information for the following purposes:

    • to communicate with you;

    • to respond to inquiries;

    • to determine potential eligibility for research studies;

    • to maintain participant recruitment databases, where permitted;

    • to contact you about studies or services that may be relevant to you;

    • to coordinate appointments, screening, and study-related activities;

    • to provide services and support business operations;

    • to comply with legal, regulatory, audit, and reporting obligations;

    • to maintain security, quality assurance, and fraud prevention measures;

    • to improve our website, systems, and communications; and

    • to establish, exercise, or defend legal claims.

    We may also use de-identified or aggregated information where allowed by law.

  • Depending on the context and jurisdiction, we may process personal information on one or more of the following legal bases:

    • your consent;

    • performance of a contract or pre-contractual request;

    • compliance with legal or regulatory obligations;

    • legitimate business interests;

    • protection of vital interests; or

    • other grounds permitted under applicable law.

    Where consent is required, you may withdraw it at any time, subject to legal or operational limitations.

  • If you contact Astra to express interest in a clinical trial or research opportunity, we may collect information such as your name, contact information, date of birth, demographic details, and certain health-related information relevant to determining whether a study may be appropriate for you.

    We may use this information to:

    • evaluate possible eligibility for current or future studies;

    • contact you regarding research opportunities;

    • maintain a database of potential participants; and

    • comply with applicable legal and regulatory obligations.

    Where required by law, we will rely on your consent for these activities. You may request removal from our recruitment database at any time, subject to any retention obligations imposed by law.

  • We may process personal information relating to business partners, service providers, vendors, and their personnel for purposes such as:

    • establishing and maintaining professional relationships;

    • communicating about services, contracts, and operations;

    • billing, accounting, and recordkeeping; and

    • legal, audit, and compliance functions.

    This information may include name, title, employer, business contact information, payment details, and communication history.

  • When you visit our website, we may automatically collect certain technical information, such as:

    • IP address;

    • browser type;

    • device information;

    • operating system;

    • pages visited;

    • referring links; and

    • general usage patterns.

    We may use cookies or similar technologies to support website functionality, analytics, security, and user experience. You may be able to control cookies through your browser settings.

  • We do not sell personal information for monetary compensation.

    We may disclose personal information to the following categories of recipients, when appropriate and permitted by law:

    • service providers and contractors who support our operations;

    • study sponsors, contract research organizations, monitors, and related research partners;

    • healthcare providers or referral partners, when authorized or required;

    • legal, accounting, compliance, and IT advisors;

    • regulators, courts, law enforcement, or government authorities; and

    • parties involved in a merger, acquisition, financing, or business reorganization.

    We require service providers, where appropriate, to protect personal information and use it only for authorized purposes.

  • Astra maintains reasonable safeguards designed to protect personal information, including measures such as:

    • restricted access to records and systems;

    • password-protected systems and authentication controls;

    • secure storage practices;

    • workforce confidentiality expectations;

    • appropriate disposal or destruction of records; and

    • monitoring and response procedures for potential security incidents.

    No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

  • We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, including to satisfy legal, regulatory, contractual, medical, accounting, audit, and operational requirements.

    Retention periods may vary depending on the type of information and the purpose for which it was collected.

  • Depending on the laws that apply to you, you may have the right to:

    • know what personal information we collect, use, and disclose;

    • request access to your personal information;

    • request correction of inaccurate personal information;

    • request deletion of personal information, subject to exceptions;

    • request restriction of certain processing;

    • object to certain processing;

    • withdraw consent, where processing is based on consent; and

    • lodge a complaint with an applicable supervisory or regulatory authority.

    To exercise any applicable rights, please contact us using the information below. We may need to verify your identity before processing your request.

  • If you are a California resident, you may have rights under the CCPA/CPRA, including the right to:

    • know the categories and specific pieces of personal information we collect;

    • know the categories of sources from which personal information is collected;

    • know the categories of third parties to whom we disclose personal information;

    • request deletion of personal information, subject to exceptions;

    • request correction of inaccurate personal information;

    • limit the use of sensitive personal information in certain circumstances; and

    • not be discriminated against for exercising your privacy rights.

    We do not sell personal information in exchange for monetary consideration. If our website uses cookies or similar technologies that may be considered “sharing” for cross-context behavioral advertising under California law, California residents may have the right to opt out of that sharing.

    To submit a privacy request, please contact us at:
    Astra Research Group
    8501 SW 124th Ave., Suite 206
    Miami, FL 33183
    Phone: 786.953.8233
    Email: aafigueredo@astraresearchgroup.com

  • Astra does not knowingly collect personal information from children through its website unless permitted by law and appropriate parental or guardian authorization has been obtained where required.

  • Astra is based in the United States. If you access our website or provide information from outside the United States, your information may be processed and stored in the United States, subject to applicable legal requirements.

  • We may update this Privacy Policy from time to time. Any changes will be posted with a revised effective date. Your continued use of our services or website after updates are posted constitutes acceptance of the revised policy to the extent permitted by law.

  • If you have questions about this Privacy Policy or would like to exercise applicable privacy rights, please contact:

    Astra Research Group
    8501 SW 124th Ave., Suite 206
    Miami, FL 33183
    786.953.8233
    aafigueredo@astraresearchgroup.com

    Effective Date: 04/06/2026