1. Scope

This policy applies to all personal data processed by L2P Research that originates from the EEA, including personal data of employees, clients, collaborators, study participants, vendors, and website users.

2. Legal Basis for Processing

We process personal data only when we have a legal basis to do so, including:

• Consent: Where individuals have given clear permission.
• Contractual necessity: To fulfill our obligations under a contract.
• Legal obligation: To comply with applicable laws and regulations.
• Legitimate interest: To conduct and improve our research and services, provided those interests do not override individual rights.

3. Data We Collect

Depending on the context, we may collect:

• Identity information (e.g., name, contact details)
• Professional information (e.g., job title, organization)
• Clinical or research data (e.g., study participant data, subject IDs)
• Website usage data (e.g., cookies, IP addresses)

4. Data Use and Sharing

Personal data is used to:

• Deliver and improve research services
• Manage study-related logistics
• Communicate with stakeholders
• Comply with legal and regulatory requirements

We do not sell personal data. Data may be shared with:

• Subcontractors or collaborators under strict data processing agreements
• Regulatory authorities if required by law
• Secure data storage or cloud providers

5. International Transfers

L2P Research may transfer personal data outside the EEA only:

• To countries recognized by the EU as providing adequate protection, or
• With appropriate safeguards (e.g., Standard Contractual Clauses)

6. Data Retention

We retain personal data only as long as necessary to fulfill the purpose for which it was collected and to comply with legal or regulatory obligations.

7. Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Access controls and authentication
• Encryption and secure data transfer protocols
• Regular audits and staff training

8. Individual Rights (EEA Residents)

Under GDPR, individuals have the right to:

• Access their data
• Correct inaccurate data
• Erase their data (right to be forgotten)
• Restrict or object to processing
• Port their data to another controller
• Withdraw consent at any time

Requests can be submitted via [Insert Contact Email].

9. Contact Information

If you have any questions or wish to exercise your rights, please contact:

Data Protection Officer (DPO)
L2P Research, LLC
51 Oxford Rd, Annville, PA 17003
United States of America
Email: Kerry@L2PResearch.com
Phone: +1-844-L2P-LABS (527-5227)

10. Policy Updates

This policy may be updated to remain compliant with applicable laws and best practices. The latest version will always be available at http://L2PLabs.com.