Last updated: November 26, 2025
- Introduction
BioPharma Services Inc. (“BioPharma”, “we”, “our” or “us”) is a full-service Clinical Research Organization (CRO) based in Ontario, Canada, providing Phase I–IV clinical research, bioequivalence/bioavailability studies, bioanalysis, biometrics, and related scientific services to pharmaceutical and biotechnology sponsors across Canada, the United States, and Europe.
We are committed to protecting personal information in compliance with:
- PHIPA – Ontario’s Personal Health Information Protection Act
- PIPEDA – Canada’s Personal Information Protection and Electronic Documents Act
- Applicable provincial privacy laws across Canada
- GDPR – the General Data Protection Regulation (for European individuals and clients)
- ICH-GCP, GLP, and other global research ethics and regulatory requirements
This Privacy Notice explains how we collect, use, disclose, protect, and retain personal information. It applies to visitors to our website, clients, vendors, job applicants, volunteers, and individuals who interact with us outside of specific clinical trials.
Note: Personal Health Information (PHI) collected as part of a clinical trial is governed by study-specific consent forms, ethics-approved protocols, and applicable regulations, and therefore may be subject to additional privacy notices.
- What Personal Information We Collect
2.1 Information You Provide to Us
We may collect personal information that you voluntarily submit, including:
- Name, email address, phone number, and contact details
- Professional information (role, employer, business contact details)
- Information submitted via website contact forms or email inquiries
- Information provided during contracting, vendor onboarding, or sponsorship discussions
- Job application information (résumé, cover letter, employment history)
- Volunteer or participant pre-screening information (non-PHI)
2.2 Information Automatically Collected When Using Our Website
When you visit our website, we may collect:
- IP address and approximate geolocation
- Browser type, device type, operating system
- Pages viewed, time on site, and navigation patterns
- Cookies and analytics data
This is collected via standard web technologies such as cookies, server logs, and analytics tools.
2.3 Information Collected During Research Activities
BioPharma conducts clinical trials and bioanalytical work under strict regulatory conditions. Information collected in these contexts may include:
- Personal Health Information (PHI)
- Clinical trial data, specimens, or laboratory results
- Pseudonymized or coded subject data
PHI is always collected under a separate, study-specific consent process approved by an independent Research Ethics Board (REB/IRB) and is not collected directly through our website.
- How We Use Personal Information
We use personal information for the following purposes:
- Responding to inquiries or communications you send us
- Establishing, managing, and maintaining client and vendor relationships
- Providing CRO services, including project management, clinical operations, data management, and laboratory services
- Screening volunteers for clinical trial participation (non-PHI)
- Recruiting and evaluating job applicants
- Maintaining and improving our website and digital platforms
- Meeting legal, regulatory, ethical, and quality-assurance obligations
- Ensuring security, integrity, and compliance in our operations
We do not use personal information for automated decision-making with legal or significant effects.
- Legal Bases for Processing (for Individuals in the EU/UK)
When GDPR applies, we process personal information based on one or more of the following:
- Contract Performance – Delivering CRO and research services
- Legitimate Interests – Improving operations, maintaining security, and communicating with clients
- Legal Obligations – Regulatory reporting, pharmacovigilance, quality assurance
- Consent – When required (e.g., optional cookies, certain communications)
- How We Share Personal Information
We may share personal information with:
5.1 Research Partners and Sponsors
- Pharmaceutical companies sponsoring trials
- Clinical investigators and research sites
- Bioanalytical and laboratory partners
- Ethics boards or regulatory authorities
(shared strictly in accordance with study protocols and privacy regulations)
5.2 Service Providers
We engage third-party service providers to support our operations, including:
- IT hosting and cloud services
- Analytics and website support
- Recruitment and HR platforms
- Quality, compliance, and auditing providers
All service providers are contractually obligated to protect personal information.
5.3 Legal, Regulatory, and Compliance Bodies
We may disclose information when required by:
- Health Canada
- FDA / EMA / MHRA and other global regulators
- Ethics boards
- Courts or law enforcement, when legally mandated
5.4 Business Transactions
In the event of mergers, acquisitions, reorganizations, or financing, personal information may be disclosed as part of due diligence, subject to confidentiality safeguards.
We do not sell personal information.
- International Transfers
As a CRO with clients in Canada, the U.S., and Europe, personal information may be transferred across borders. When we transfer data outside your jurisdiction, we apply appropriate safeguards, such as:
- Standard Contractual Clauses (SCCs) for EU data
- Data Processing Agreements (DPAs) with vendors
- Pseudonymization, coding, or de-identification
- Contractual confidentiality obligations
Transfers are always made in accordance with relevant and applicable privacy laws, including PHIPA, PIPEDA, and GDPR.
- Cookies and Website Analytics
Our website uses cookies to:
- Improve functionality
- Analyze technical performance
- Understand how visitors interact with our site
You can adjust browser settings to refuse cookies. Some website features may not function properly without them.
- Security Measures
We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including:
- Secure, access-controlled facilities
- Encryption and secure data transmission
- Role-based access controls
- REB/IRB oversight for clinical trial data
- Regular audits and quality assurance
- Staff training on privacy, ethics, and regulatory compliance
However, no system is completely secure, and we cannot guarantee absolute protection.
- Retention of Personal Information
We retain personal information only as long as necessary to:
- Fulfill the purposes for which it was collected
- Meet regulatory, contractual, and auditing requirements
- Maintain records required under ICH-GCP, Health Canada, FDA, and other regulations
Clinical research records may be retained for extended periods as required by law.
- Your Rights
Depending on your location and applicable laws, you may have the right to:
- Access your personal information
- Request correction or updates
- Withdraw consent (where applicable)
- Request deletion (subject to legal/regulatory limits)
- Restrict or object to processing (GDPR)
- Request data portability (GDPR)
Requests may require identity verification.
To exercise your rights, contact us using the information below.
- Third-Party Websites
Our website may include links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy notices.
- Changes to This Privacy Notice
We may update this Privacy Notice periodically. The “Last Updated” date at the top reflects the most recent revision. Continued use of our website constitutes acceptance of the updated notice.
- Contact Information
If you have questions or wish to make a privacy request, contact:
Privacy Officer
BioPharma Services Inc.
4000 Weston Rd, North York, ON M9L 3A2
Email: privacy@well.company
Phone: 604-628-7266