Privacy Policy

Welcome to PDC’s official website. This policy outlines our commitment to safeguarding your data, ensuring a seamless user experience, and maintaining compliance with applicable regulations. By using our website, you agree to the terms outlined in this policy.

About this Privacy Policy

PDC FZ LLC (“We”, “Us” or “Our”) is committed to protecting and handling your (“Your” or “You”) Personal Information (including confidential and sensitive information) in accordance with applicable privacy and data protection laws and regulations.

This Privacy Policy, Public Statement (“Website Privacy Policy”) addresses the Personal Information (PI) we collect and how we process, handle and treat that information. It explains what we use your personal information for, why we use it, and how we protect your personal information. This policy also describes certain rights you have in respect of your personal information.

As a global business, PDC FZ LLC uses its best endeavours to collect, use, store, share, transfer, delete, and process Personal Information in a manner consistent with the laws and regulations of countries in which it does business. More data on how we process information in other settings, is addressed in PDC internal policy and procedures for the company.

We also comply with the International Conference of Harmonisation (ICH) Guidelines for Good Clinical Practice with respect to the use, protection and security of health information collected.

PDC collects and processes personal data strictly for legitimate business, clinical research, and regulatory compliance purposes. All data handling activities are conducted with explicit consent, contractual necessity, or legal obligations. When we collect information that is not Personal Information or we aggregate or anonymise Personal Information such that it can no longer be used to identify you, we may use and disclose that information for any purpose, as unidentifiable data is not covered under privacy or data protection laws.

You can navigate our website without giving us any personal information about yourself. However, sometimes we need additional information about you in order to provide the information or services you are requesting. Your privacy is important to us. To protect your privacy, we provide this notice explaining our online information practices and the choices you can make about the way your information is collected and used.

Scope

This policy is intended for research participants or potential research participants and general users of our website.

This applies to Personal Information that is Processed on PDC website, mobile applications, and other online offerings, operated by or on behalf of PDC (the “Services”). Personal Information” is any information relating to an identified or identifiable natural person.

Topics

1. What Information Do We Collect About You?

At PDC CRO, we are committed to protecting your privacy and ensuring the security of your personal information. “Personal Information” refers to any data that identifies or can be used to identify an individual, including “personal data” as defined under applicable privacy laws such as the General Data Protection Regulation (GDPR) (EU 2016/679).

We may collect the following types of Personal Information when you:

• Request information from us
• Provide your details voluntarily
• Access our website
• Apply for career opportunities
• Register for events or services
• Participate in surveys, feedback requests, or online interactions

 

The data we collect may include:

• Name, title, and contact details (email, phone number, address)
• Employment history, qualifications, and references for job applications
• IP address, browser type, visit duration, and pages accessed for website optimization
• Technical information such as device identifiers, operating system, and browsing preferences
• Information provided through third-party services, including social media logins
• Any other information necessary for business functions and compliance with legal obligations

2. The Way We Use Your Information

Personal Information refers to any data that identifies an individual, including but not limited to names, and contact details. We collect Personal Information in the following scenarios:

Your data helps us improve our services and fulfill legal obligations. We use it for:

• Ensuring compliance with regulatory frameworks (e.g., GDPR, ICH-GCP).
• Enhancing security measures to mitigate risks.
• Conducting clinical research and business operations efficiently.
• Optimizing website experience and customer interactions.
• Running analytics and targeted marketing with user consent.
• Managing supplier relationships and third-party compliance.

3. Do We Share Your Information?

PDC does not sell user data to external entities for marketing purposes. We share data only when necessary and within strict legal frameworks:

• Client & Partner Agreements: Controlled data-sharing under confidentiality clauses.
• International Transfers: Data hosted on secure platforms, adhering to GDPR safeguards.
• Regulatory Compliance: Strict adherence to industry standards ensures responsible sharing.
• Third-party Engagement: Secure data exchange with approved suppliers and external service providers.

 

PDC processes Personal Information based on:

• Consent: When you provide explicit authorization.
• Contractual necessity: To fulfill agreements with you.
• Legal compliance: To meet regulatory obligations.
• Legitimate interest: When processing aligns with business objectives without overriding your rights.

 

PDC upholds strict confidentiality standards in all interactions with clients, sponsors, and third parties. Confidential information is only shared on a need-to-know basis and in accordance with contractual agreements. All employees, vendors, and stakeholders are bound by these confidentiality obligations, ensuring trust and compliance.

PDC follows the PROTECT, INFORM, PROVIDE CHOICE, IMPROVE framework to ensure structured confidentiality management:

• PROTECT: Secure handling of all confidential data
• INFORM: Transparent communication regarding data usage
• PROVIDE CHOICE: Allowing users to manage their data preferences
• IMPROVE: Continuously enhancing data security and compliance measures

 

Confidential Disclosure Agreements (CDAs) are fundamental in safeguarding sensitive information. PDC defines clear guidelines for CDA management:

• Protection of proprietary and sensitive information shared with investigators, sponsors, third parties, and employees.
• Defined authority and responsibility for CDA preparation, review, and approval
• Specifications on CDA duration, obligations, and legal considerations

 

PDC enforces strict confidentiality policies for all personnel and third parties to maintain confidentiality and adhere to data protection regulations:

• Unauthorized sharing of confidential information is strictly prohibited
• Employees are required to adhere to confidentiality agreements even after employment termination
• Compliance requirements are monitored to ensure adherence to confidentiality terms

4. Our Commitment to Data Security

Your Security Is Our Priority

At PDC, safeguarding your information is our top priority. We implement robust security measures to ensure confidentiality, integrity, and compliance with industry standards. Our security framework includes:

• Encrypted data transmission for secure communication
• Advanced cybersecurity protocols to prevent breaches
• Multi-layered authentication for access control
• Regular vulnerability assessments and penetration testing
• Strict internal policies to prevent unauthorized access
• Confidentiality obligations extending to all employees, vendors, and stakeholders
• Compliance monitoring to ensure data protection standards are upheld
• Compliance with GDPR, and regional privacy laws

 

PDC maintains a dynamic confidentiality and security policy, regularly updated to reflect industry best practices. Compliance monitoring includes:

• Periodic review and revision of confidentiality agreements
• Ongoing assessments to prevent security breaches
• Training programs to reinforce confidentiality awareness across teams

5. Cookies, Log Files, & Other Technologies

We receive IP addresses in the normal course of the operation of our Site. An IP address is a number assigned to you by your Internet service provider so you can access the Internet.

We, as well as third parties that provide content, advertising, or other functionality on our Services, may use cookies, pixel tags, local storage, and other technologies (“Technologies”) to automatically collect information through the Services. We use Technologies that are essentially small data files placed on your computer, tablet, mobile phone, or other devices (referred to collectively as a “device”) that allow us to record certain pieces of information whenever you visit or interact with our sites, services, applications, messaging, and tools, and to recognize you across devices.

Our website uses cookies to enhance navigation and collect statistical data. Users can manage cookie preferences through browser settings.

• Cookies: A cookie is a piece of data or file that a website can send to your browser, which may then store it on your computer system. Most browsers allow you to block and delete cookies. However, if you do that, the Site may not work properly or you may not be able to receive personalized content. PDC may use cookies on our Site in order to enhance user experience through:
  • Essential cookies: Enable website functionality.
  • Performance & analytics cookies: Help us improve services.
  • Marketing & personalized content tracking: Based on user consent

 

Users have full control over their cookie preferences via browser settings. Please note that blocking certain cookies may affect website functionality.

• Pixel tags/ Web beacons: A pixel tag (also known as a web beacon) is a piece of code embedded on the Site that collects information about users’ engagement on that web page. The use of a pixel allows us to record, for example, that a user has visited a particular web page or clicked on a particular advertisement.
• Social Media Features: Our Site includes social media integrations such as the Facebook “Like” button and LinkedIn (that might include widgets such as the “share this” button or other interactive mini-programs). These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. These social media features are either hosted by a third party or hosted directly on our Site. Your interactions with these features are governed by the privacy policy of the company providing it.

6. Your Rights & Choices

PDC believes in data transparency. Depending on your jurisdiction, you may also have certain legal rights in relation to the processing of your Personal Information. These rights may include:

1. The right to access your personal information (including a data portability request);
2. The right to correct or amend any personal information we have on file about you;
3. The right to delete your personal information;
4. The right to limit the use of your “sensitive” personal information;
5. The right to opt-out of the sale or “sharing” of your personal information;
6. The right to opt-out of the use of your personal information for targeted advertising purposes;
7. The right to restrict or object to the processing of your personal information (such as for direct marketing purposes);
8. The right to restrict the use of your personal information for certain automated decision-making (including profiling); and
9. The right to revoke your consent (to the extent applicable).

 

Although PDC makes good faith efforts to provide individuals with access to their Personal Information, there may be circumstances in which PDC is unable to provide access, including but not limited to:

• where the information contains legal privilege, would compromise others’ privacy or other legitimate rights,
• where the burden or expense of providing access would be disproportionate to the risks to the individual’s privacy in the case in question or where it is commercially proprietary.

 

If PDC determines that access should be restricted in any particular instance, we will provide you with an explanation of why that determination has been made and a contact point for any further inquiries.

7. Our Commitment to Children’s Privacy

Protecting the privacy of the very young is especially important. For that reason, we do not intend to collect or maintain information at our Site from those we know are under 18 years of age, and no part of our Site is structured to attract anyone under 18.

If you learn that your child has provided us with Personal Information without your consent, you may alert us at PDCcomplaints@pdc-cro.com. If we learn that we have collected any Personal Information from children under 18 (and in certain jurisdictions under the age of 16), we will promptly take steps to delete such information and terminate the child’s account.

8. Data Storage, Retention and Access Control

PDC follows industry best practices to store and retain personal data only for as long as necessary, in line with legal, regulatory, and contractual obligations. Our hybrid archival system ensures compliance with 21 CFR Part 11 and Good Clinical Practice (GCP) latest standards.

Personal data may be stored in servers in the UAE, the KSA, or other locations where PDC or its service providers operate. All data storage partners adhere to strict confidentiality agreements and applicable data protection laws.

We retain Personal Information only for the necessary period based on:

• Legal and regulatory requirements.
• Contractual obligations.
• The necessity to process requests, inquiries, or legal matters.

 

Factors determining retention periods include:

• The duration of our relationship with you.
• Legal obligations, including statutes of limitations.
• Regulatory requirements or ongoing legal proceedings.
• Business needs and operational efficiency.

 

In general, personal information is retained for up to 25 years, unless extended for legal, regulatory, or litigation purposes.

To determine the appropriate retention period for Personal Information, We consider the amount, nature and sensitivity of the information, the potential risk of harm from unauthorised use or disclosure of Your Personal Information, the purposes for which We process Your Personal Information and whether We can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

9. International Users and Data Transfers

PDC operates globally and may transfer personal data to countries with different data protection laws. We implement appropriate safeguards to ensure data protection in compliance with applicable regulations.

PDC adheres to global privacy standards, ensuring:

• GDPR compliance for EU data transfers.
• Adherence to regional Middle Eastern privacy laws.
• Secure hosting solutions for cross-border data protection.

10. The handling of complaints regarding your personal information.

For any Complains or Comments, please set out Your complaint in writing to: PDCcomplaints@pdc-cro.com.

Please provide sufficient information, so that the relevant stakeholder regarding the Privacy data can consider Your concerns and contact You. We will respond to Your complaint within one calendar month.

If You are not satisfied with Our response, or You consider that We may have breached our legal obligations, You are entitled to make a complaint to the competent authority in the country in which You are located.

Where lawful and practical, You will be given the option to deal with Us without identifying yourself or by using a pseudonym (e.g. when inquiring about the activities that PDC undertakes).

11. Notification of Changes

We keep our privacy statement under regular review, and we will place updates on this web page. If you continue to visit this Site and use the services made available to you after such changes have been made, you hereby provide your consent to the changes. We will post any adjustments to the Privacy Policy on this web page, and the revised version will be effective immediately when it is posted (or upon notice as applicable).

If you are concerned about how your information is used, bookmark this page and read this Website Privacy Policy periodically.

12. Additional information if you are in the European Economic Area (EEA)

We use your personal information only where required for specific purposes. The table below sets out the purposes for which we use your personal information and our legal reason for using your personal information in this way.

Purpose	Legal Basis
To deliver the information or services offered by our websites and apps.	This is in our legitimate interest in order to provide our products and services to you. In order to deliver certain products and services, we may need to process your special category data for this purpose, such as your health data. Where this is the case, we will rely on your consent to this.
To identify and authenticate your rights to access our websites and apps.	This is in our legitimate interest, for example to ensure we have confirmed the identity of the person making a request to us. We also process this personal information where necessary for us to comply with a legal obligation that we are subject to, for example, to make sure you are not accessing content that is only intended for healthcare professionals under applicable laws.
To screen and match you to clinical trials and research projects based on your preferences and individual needs.	We process your personal data for this purpose on the basis of your consent.
To respond to your queries and requests.	This is in our legitimate interest in order to respond to your query or request.
To process, manage and respond to any questions or concerns you raise via PDC’s Ethics Policy	We process your personal information for this purpose in order to comply with our legal obligations.
To protect the security of our websites and apps.	This is in our legitimate interest in order to protect the security of our websites, apps and IT systems. We also process personal information for this purpose where it is necessary for us to comply with a legal obligation that we are subject to. For example, this includes our legal obligation to ensure we have appropriate security measures in place to protect your personal information.
To comply with our legal obligations.	We process your personal information for this purpose in order to comply with our legal obligations. For example, we are required by law to keep certain records for specific periods of time, and to process your requests to exercise your rights in respect of your personal information.
To analyse therapeutic trends and gather anonymised geographic statistics.	This is in our legitimate interests in order to advance the state of our scientific knowledge, and to improve our products and services. We may need to process your special category data for this purpose, such as your health data. Where this is the case, we will ensure we have a legal reason for this, such as obtaining your consent or this being necessary for scientific research purposes.
To improve our services.	This is in our legitimate interests in order to improve our services.

13. Additional information if you are in the United States (US)

You have rights in respect of your personal information. The rights available to you depend on our reason for processing your personal information and the laws in your state, and there are exceptions to some rights.

Depending on this, you may have the right to:

• Obtain confirmation that we hold certain personal information relating to you and the corresponding processing activities, and to verify its content, origin, and accuracy;
• Access, review, port, delete or anonymize, or to block or withdraw consent to the processing of certain personal information (without affecting the lawfulness of processing based on consent before withdrawal of your consent);
• Request information about third parties with whom we have shared your personal information;
• Where relevant, request review of decisions based solely on automated data processing;
• Where relevant, object to our use of personal information for direct marketing and in certain other situations at any time.

 

To exercise these rights, please contact us using our contact details in the “Contact Information” section. We may request proof of identity, so we can verify who you are.

Please note that we need to retain certain personal information as required or permitted by applicable law.

14. How to Contact Us

For inquiries regarding this policy or data protection matters, please contact our IT Team at Helpdesk@pdc-cro.com.

Address: Dubai Science Park | HQ Complex | Office 101N 1st Floor | PO Box 500767 | Dubai | United Arab Emirates

Phone: +971 456 83 229

Thank you for trusting PDC with your privacy!