June, 23 2025
Data Collection and Processing Practices
At Pharma Appraisal, we are committed to upholding the highest standards in personal data protection and privacy. Our data collection processes are designed to ensure compliance with the General Data Protection Regulation (GDPR), particularly as it is enforced and applicable within the United States of America. Any personal data collected is handled with the utmost care, incorporating safeguards to maintain confidentiality, integrity, and security in accordance with both GDPR and relevant local legislation. The types of data we may collect include user contact information, browsing behavior, submitted reviews, and interaction logs. Such data enables us to enhance our service offerings, personalize user experiences, and support seamless website operations. We collect data either directly from users or via technology integrations such as cookies, automated tracking tools, and form submissions.
Our processes are transparently documented, and consent is sought when required under applicable regulations. Users are informed about their rights, including the right to withdraw consent and opt out of data processing activities at any time. Any personal data acquired will only be used for clearly stated purposes, which include informing users of pharmaceutical news, generating accurate drug information, and supporting platform analytics. We take data minimization seriously, ensuring that only necessary personal data is processed to fulfill specified objectives. Employees and partners with access to personal data are thoroughly trained on data privacy obligations and bound by confidentiality agreements.
Legal Basis for Data Processing
Pharma Appraisal operates under lawful bases for data processing set forth by GDPR, namely the user's explicit consent, contractual necessity, legal obligations, and legitimate interests that do not override fundamental client privacy rights. Consent is obtained for direct marketing and non-essential cookies. Contractual data is gathered when users interact with features that require communication or provide feedback. Statutory requirements may necessitate the collection of certain data, such as compliance with governmental regulations or in response to lawful investigative requests by public authorities. Additionally, we may process data to further legitimate business interests such as improving our pharmaceutical content, ensuring cybersecurity, maintaining platform integrity, and conducting internal analytics, so long as these interests align with your reasonable expectations and fundamental privacy rights.
Where data processing is performed on the basis of consent, users retain the ability to revoke consent at any stage. All data processing activities are regularly reviewed to ensure continued compliance with legislation and data protection best practices. The legal basis for each type of data collection is expressly communicated to users where applicable, typically through notices at the point of data entry or via our website interfaces. Any international transfers of data are safeguarded through recognized mechanisms and approved contractual clauses to maintain privacy standards equivalent to those in the USA and Europe.
Data Subject Rights and Requests
In accordance with GDPR and applicable state privacy laws in the United States, users of Pharma Appraisal have extensive rights regarding their personal data. These include the right to access, rectify, or erase personal data, as well as restrict or object to certain data processing activities. Additionally, users are entitled to data portability and have the right to lodge a complaint with the relevant supervisory authority should they believe their privacy rights have been violated. Requests to exercise these rights may be submitted at any time via email to [email protected].
We maintain robust procedures to verify the identity of individuals making such requests, thereby preventing unauthorized access to personal data. All legitimate requests will be processed in a timely manner, typically within thirty days, unless the complexity or volume of requests necessitates a longer period, in which case users will be duly informed. Any data rectification or erasure completed at the user's request will be communicated to recipients to whom the data may have been disclosed, unless this would involve disproportionate effort. We acknowledge and honor the user's right not to be subject to decisions based solely on automated processing that produce legal effects or significantly affect them.
Data Security and Retention Policy
Pharma Appraisal takes the security of personal data seriously, implementing a combination of organizational, physical, and technical security measures. These include restricted access controls, encryption of sensitive data, continuous monitoring for vulnerabilities, and routine security audits. We endeavor to ensure that all collected data is protected against unauthorized access, alteration, disclosure, or destruction. Only authorized personnel with a necessity for access will be granted permission to handle sensitive information. Furthermore, our website is equipped with secure transmission protocols (SSL/TLS) to safeguard data transfers.
Data is retained only for as long as necessary to fulfill its intended purpose, meet legal and contractual obligations, or for legitimate business interests that are not overridden by the interests or fundamental rights and freedoms of the individual. Once the purpose of data collection has been achieved, data is securely deleted or anonymized in a manner that prevents re-identification. Regular reviews of our data storage practices are conducted to ensure compliance with retention policies and regulatory requirements in the United States. Data destruction is executed using industry-standard methods to ensure irreversible data removal from all storage systems.
Third Party Sharing and International Data Transfers
Pharma Appraisal does not sell, lease, or trade personal data to third parties for their own marketing or business purposes. When necessary, personal data may be shared with carefully selected third-party service providers assisting us in website operation, technical support, analytics, hosting, or other essential services. All such third parties are contractually bound to use the personal data strictly as directed by Pharma Appraisal and in compliance with relevant data protection statutes and agreements that enforce GDPR-level protections.
In instances where personal data is transferred outside the United States, we ensure that appropriate safeguards are in place, such as standard contractual clauses recognized by regulatory authorities or other lawful transfer mechanisms. A thorough assessment is conducted to verify that third-country data recipients provide a level of protection essentially equivalent to that guaranteed within the United States and Europe. We do not authorize any third parties to use or disclose personal information except as necessary to perform designated services or as required to comply with applicable laws and regulations.
Contact Information of Data Controller
For all inquiries relating to GDPR compliance, the collection, processing, or protection of personal data, or to exercise your data subject rights, please contact Pharma Appraisal’s designated data controller. The owner and data controller is Evelyn Markham, whose official correspondence address is: Clifton Suspension Bridge Visitor Centre, Bridge Road, Leigh Woods, Bristol BS8 3PA, United Kingdom. For privacy-related matters, including requests or complaints, use the email address: [email protected]. We are committed to resolving matters efficiently and transparently, and endeavor to reply to all valid requests at the earliest opportunity.
