GoodLab Privacy Policy
Effective [5TH Jan 2026]
Scope of This Policy
ITS Limited (“GoodLab,” “we,” “us,” “our”) respects your privacy and values your trust. The purpose of this Privacy Policy is to inform you of the treatment and handling of personal information that we may learn about you from using our websites at goodlabgroup.com (the “Sites”), from using our mobile application (the “App”), from engaging with our content, or by use of any of our services (collectively, the “Service”). If you have any questions regarding this information or our privacy practices, please contact us via the methods set out in the How to Contact Us section at the end of this Privacy Policy.
Agreement to Terms
By using or accessing our Service in any manner, you acknowledge that you accept the practices and policies outlined below and the policies outlined in our Terms of Use, and you hereby consent that we may collect, use, and disclose your personal information as described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy and our Terms of Use, then you should immediately discontinue use of the Service without providing us with any personal information.
Information We Collect
We may collect the following categories of personal information (a) directly from you (such as when you interact with the Service or fill out our registration forms), (b) from the device and browser that you use to access the Service, and (c) from cookies and similar technologies.
Identifiers
We may collect your first name, last name, mailing address, zip code, and email address.
User-generated Content
We collect the information and content of communications that you share through the Service. This may include the information you choose to provide when you fill out a registration form or contact us.
Demographics and Characteristics
We may collect your date of birth, gender or gender identity, and any information you provide in a registration form concerning your health information. This information is used to provide the Service and identify clinical studies for which you may be eligible.
Device Information
We may collect device information when you interact with the Service. Device information may include your device type, browser type, online and/or unique identifiers, IP address, and geolocation information.
Internet Activity
We may collect information concerning your interaction with the Service, including when you access the Sites or App and your browsing activity on the Sites or App (such as which pages you visit, in what order, and for how long). This may also include “traffic data” or tracking information provided by the Sites’ host or similar providers (e.g., Google Analytics) that may be helpful for marketing purposes or for improving the Service.
Participation in Studies sponsored by GoodLab’s Clients
In some instances, GoodLab acts as a Patient Recruitment Organization that provides services to support clinical trials and medical research studies. GoodLab may process your personal information as a service provider to our clinical research partners and in accordance with contracts with and instructions from these partners. GoodLab may also, to the extent necessary, process personal data relating to study participants’ spouses, partners, care givers, and relatives if they are involved in the participants’ participation in a study (e.g., parents or legal guardians involved in decision making on behalf of child participants or spouses involved in the care of an incapacitated participant). In relation to GoodLab’s delivery of Patient Recruitment services to partners, the partner is in control of how and why your personal data is processed.
Health Data
GoodLab is not a covered entity under the Health Insurance Portability and Accountability Act of 1966 (“HIPAA”) and does not provide medical treatment or healthcare services. Any health-related information submitted by you or collected through your use of the Service is voluntarily provided and not protected under HIPAA. GoodLab does not verify the privacy practices, security measures, or HIPAA compliance of any sponsor or other third-party organization conducting clinical trials (each a “Third-Party Provider”) listed on its Service.
To the extent GoodLab collects protected health information on behalf of a Patient Recruitment Organization that is a HIPAA covered entity, GoodLab will enter into appropriate business associate agreements with such covered entity, and any data shared in that context will be managed in accordance with the terms of the business associate agreement and applicable HIPAA requirements.
You are not required to provide all personal information identified in this Privacy Policy to use our Service or to interact with us, but certain functionality will not be available if you do not provide certain personal information. For example, if you do not provide certain personal information, we may not be able respond to your requests or pair you with clinical trials.
Children’s Privacy
The Service is not intended for users under the age of 13 and GoodLab does not knowingly collect personal information from individuals under the age of 13. If you are aware of, or suspect that, someone under the age of 13 is using the Service without permission, please notify us immediately by contacting us as detailed in the How to Contact Us section below. If you have questions or concerns about the Internet and privacy for your child, we encourage you to check out the FTC Guidelines for protecting your child’s privacy online.
Our Use of Personal Information
We collect and use your personal information for the following purposes:
- Providing the Service to you and providing products or services requested by, or reasonably anticipated within the context of our relationship with, you;
- Managing our relationship with you, and responding to your inquires or requests, and requesting feedback;
- Providing relevant promotional materials or other marketing, including tailoring advertisements to your interests;
- Analyzing use of the Sites;
- Detecting security incidents and protecting against malicious, deceptive, fraudulent, or illegal activity, or prosecuting those responsible; and
- Complying with legal and regulatory obligations.
Our Disclosure of Personal Information
We may share your personal information with the following third parties:
- Service providers, including analytic providers, IT providers, and customer relationship management services. In some instances, service providers will be directly responsible to you for their use of your personal information. They may be obliged by law to provide you with additional information regarding the personal information that they hold about you and how and why they process that information. Further information may be provided to you in a separate notice or may be obtained from such service providers directly, for example, via their websites.
- Data analytics and data licensing partners, including partners that provide identity resolution and data tokenization services. In these arrangements, we may disclose personal information to enable the creation of pseudonymous tokens or identifiers that represent individual, U.S.-based consumers who have provided their consent. These tokens are used for analytics, measurement, and other permitted purposes and are subject to contractual restrictions.
- Advertising networks to provide you with relevant marketing.
- Advisers and financial institutions, including auditors, notaries, business continuity support service providers, and legal, tax, and risk and compliance advisors.
- With third parties in connection with a change to the control or financial status of the company, including a corporate restructuring, sale, acquisition, financing, reorganization, bankruptcy, receivership, transfer, assignment of assets, or business merger or divestiture. Personal information and other information may be shared in the diligence process with counterparties and others assisting with the transaction and transferred to a successor or affiliate as part of that transaction.
- Government bodies, dispute resolution organizations, law enforcement agencies, or third parties in connection with: (a) responding to a subpoena, search warrant, or other lawful request for information that we receive; (b) cooperating in a law enforcement or similar investigation; or (c) otherwise protecting our rights, as applicable.
Your Privacy Choices
If you no longer want to receive our emails, or other marketing communications, you may unsubscribe at any time by following the unsubscribe options in the communication itself or by emailing us at the contact information below under How to Contact Us.
To opt-out of text messages, you may text “STOP” in reply to any GoodLab marketing text message.
Please note that you cannot unsubscribe from certain correspondence from us, including informational messages relating directly to your use of the Service.
Security
We maintain reasonable technical and organizational measures to protect personal information from loss, misuse, alteration, or unintentional destruction. We have implemented various security measures to protect both the personal information and the general information that we receive from you through the Service. Whenever you give out personal information online there is a risk that third parties may intercept and use that information. Although we seek to protect your personal information and privacy, we cannot guarantee the security of any information you disclose online. To the extent permitted under applicable law, we assume no liability or responsibility for disclosure of your information due to errors in transmission, unauthorized access by third parties, or other causes beyond our control.
Additional Disclosures Required by State Privacy Laws
This section applies only to residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Nevada, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia.
For residents of these states, this section describes how we collect, use, and disclose, and/or “sell” (as defined under certain state privacy laws) the personal information of state residents, and the rights you may have under your state’s privacy law. These disclosures are intended to supplement this Privacy Policy with information required by state law.
To understand what personal information we may have collected about you in the past 12 months, and from where we collected it, please see the section Information We Collect above.
We collect this personal information, as further described in the Our Use of Personal Information section above, to operate, manage, and maintain our business, to provide our products and services, and to accomplish our business purposes and objectives.
We may disclose personal information to the categories of third parties listed above in the section Our Disclosure of Personal Information. Below, we have provided more detail regarding the two ways we share your personal information: (a) general disclosures of information for a business or commercial purpose, and (b) sales of personal information.
Disclosure of Information for a Business or Commercial Purpose:
To manage our business and provide services to you, we sometimes disclose personal information to third parties. These third parties cannot further collect, sell, or use the personal information we share with them except as necessary to perform our business or commercial purposes, as instructed by us.
In the past 12 months, we may have disclosed the following categories of personal information for business or commercial purposes to the categories of recipients listed below:
| Category | Recipients / Third Parties |
|---|---|
| Identifiers | Service providers; Advertising partners; Business reorganization; Mandatory disclosures and legal rights |
| User-generated Content | Service providers; Business reorganization; Mandatory disclosures and legal rights |
| Device Information | Service providers; Advertising partners; Business reorganization; Mandatory disclosures and legal rights |
| Internet Activity | Service providers; Advertising partners; Business reorganization; Mandatory disclosures and legal rights |
Sales of Personal Information:
With your consent, which you may revoke at any time, we may sell your personal information to certain trusted third-party data analytics and data licensing partners in exchange for monetary consideration.
Additionally, the laws of certain states, includingWe have marked “sales” in quotation marks because the laws of California, Colorado, Connecticut, Delaware, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, and Texas define “sale” broadly to include any disclosure of information in return for any type of value. The value does not need to be monetary, like in a traditional sale. GoodLab uses cookies and similar technologies to analyze website usage and assist in marketing efforts (including targeted advertising) and we may share personal information derived from these cookies with advertising partners to market to you and to provide advertisements on other websites that we or these entities believe will be of interest to you. In some cases, the disclosures of the information collected by these cookies may be considered a sale under applicable law.
In the past 12 months, we may have sold the following categories of personal information to the following third parties:
| Category | Recipients / Third Parties |
|---|---|
| Identifiers | Data Analytics and Data Licensing Partners |
| Demographics and Characteristics | Data Analytics and Data Licensing Partners |
| Health Data | Data Analytics and Data Licensing Partners |
| Device Information | Advertising Networks |
| Internet Activity | Advertising Networks |
We do not sell, or have actual knowledge of any sale of, the personal information of minors under 16 years of age.
Your Rights:
Under certain state privacy laws, you have a right to notice, upon collection, of the categories of personal information collected and the purposes for which the information will be used. We have provided this notice through this Privacy Policy.
In addition, residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia have the following rights, subject to certain limitations:
- Access: You have the right to access a copy of the categories and specific pieces of personal information that we have collected about you.
- Correction: You have the right to request that we correct inaccurate personal information that we hold about you, taking into account the nature of the personal information and the purposes of the processing of the personal information.
- Deletion: You have the right to request that we delete or anonymize your personal information, with certain exceptions.
- Data Portability: You have the right to request a copy of your personal information in a machine-readable format. You can also request that we transmit your personal information to another business where technically feasible.
- Sale and Sharing/Targeted Advertising Opt-out: You have the right to opt-out of the sale of your personal information or the sharing of your personal information for purposes of targeted advertising.
Additional Rights for California Residents:
In addition to the rights listed above, California residents also have the following rights:
- No Retaliation: You have the right to be free from discrimination or retaliation for exercising your rights under the CCPA.
- Opt-Out of Third-Party Marketing (California “Shine the Light” Disclosure): Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to contact us to prevent disclosure of personal information to third parties for such third parties’ direct marketing purposes.
Additional Rights for Residents of Iowa and Utah:
In addition to the rights listed above, residents of Iowa and Utah also have the following right:
- Opt-Out of Processing of Sensitive Personal Information: You have the right to opt-out of our processing of your sensitive personal information subject to certain limitations under applicable law.
Additional Rights for Maryland Residents:
In addition to the rights listed above, Maryland residents also have the following right:
- Disclosures to Third Parties: You have the right to request a list of the categories of third parties to whom we have disclosed your personal information, or the categories of third parties to whom we have disclosed any consumer’s personal information.
Additional Rights for Rhode Island Residents:
In addition to the rights listed above, Rhode Island residents also have the following right:
- No Retaliation: You have the right to be free from discrimination or retaliation for exercising your rights under the Rhode Island Data Transparency and Privacy Protection Act.
Rights for Nevada Residents:
Nevada residents have the following right:
- Opt-Out of Processing of Personal Information: You have the right to opt-out of our processing of certain types of personal information (“covered information” under Nevada law (NRS 603A.340).
Exercising Your Rights:
You or your authorized agent may exercise your rights to access, correct, transfer, or delete your personal information by emailing us at webmaster@goodlabgroup.com, with the subject line “U.S. Privacy Rights” so that we may direct your email to the right team. Once we receive a request, we will take steps to verify your request, including by asking you to provide information that is reasonable in light of the nature of your request. We will respond to your request consistent with applicable law.
You can exercise your right to opt-out of “sales” or the “sharing” or your personal information for purposes of targeted advertising by clicking the “Opt-out Preferences” link at the bottom of the Sites. We also recognize the Global Privacy Control (“GPC”) as a valid consumer request to opt out of marketing cookies for the browser that you use to access the Sites.
Please note, however, before we will be able to process your request for access or deletion of personal information, we will need to properly verify your identity for security purposes. If we possess appropriate information about you (e.g., name, email, address), we will attempt to verify your identity using that information. If it is not reasonably possible to identify you, we may not be able to respond to your request.
To use an authorized agent to make a request on your behalf, we may need the authorized agent to provide proof that you gave the authorized agent signed permission to submit the request on your behalf. We may also require you to verify your identity directly with us.
Appealing a Denial of Your Privacy Rights Request:
If you are a resident of Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, or Virginia and we refuse to take action on your privacy rights request within a reasonable period of time after receiving your request in accordance with this section, you may appeal our decision. In such appeal, you must: (a) provide sufficient information to allow us to verify that you are the person about whom the original request pertains and to identify the original request; and (b) provide a description of the basis of your appeal. Please note that your appeal will be subject to the rights and obligations afforded to you under applicable law. We will respond to your appeal in accordance with applicable law.
You may appeal our decision using the following methods:
- Email us at: webmaster@goodlabgroup.com
- Call us toll free at: (866) 780-0388
Data Retention
We retain personal information about you for as long as necessary to provide you with the Service or to perform our business or commercial purposes for collecting your personal information. When establishing a retention period for specific categories of information, we consider the source of the collected personal information, our need for personal information, why we collected the personal information, and the sensitivity of the personal information. In some cases, we retain personal information for a longer period, if doing so is necessary to comply with our legal obligations, resolve disputes or collect fees owed, or is otherwise permitted or required by applicable law, rule, or regulation. We may further retain information in an anonymous or aggregated form where that information would not identify you personally.
Links to Other Websites
For your convenience, we may link to third-party sites and services, or otherwise display third-party content through our Service to provide increased value to our visitors. We have no control over these linked sites, each of which has separate privacy and data collection policies and practices independent from us. As such we have no responsibility or liability for these independent policies or actions and are not responsible for the privacy practices or the content of any such websites. Please note that these other sites may send their own cookies to users, collect data, or solicit personal information, and we encourage you to review their policies before engaging with these third-party sites.
Effective Date and Changes to This Privacy Policy
This Privacy Policy is effective as of the date at the top of this policy. GoodLab has the discretion to update this Privacy Policy at any time. When we do, we will revise the effective date at the top of this page. We encourage users to frequently check this page for any changes and to stay informed about how we are helping to protect the personal information we collect, especially before you provide information, and particularly personal information, directly to us through the Service. In the event of a material change to this Privacy Policy, we will provide a message through our website or via email informing you of the change.
How to Contact Us
If you have any questions about this Privacy Policy or our Service, please contact us at:
Email:
Address:
ITS Limited
P.O. Box 348
Road Town, Tortola
British Virgin Islands