top of page
Contact Us

Privacy Policy


Effective Date: 10/9/26


Biomedical Statistical Consulting LLC ("BSC," "we," "us," or "our") is committed to protecting the privacy of our clients and website visitors. This Privacy Policy describes how we collect, use, and safeguard your business contact information.


1. Who We Are


Biomedical Statistical Consulting LLC provides clinical trial design and statistical analysis services to medical device, biologics, drug, and diagnostics companies.


2. Scope of This Policy


This policy applies solely to business contact information and technical data collected through our website and in the course of our business relationships.


Note on Clinical Data. Pseudonymized data related to clinical trial subjects is handled under separate, project-specific agreements (such as Data Use Agreements or Business Associate Agreements) that comply with FDA regulations, ICH-GCP guidelines, GDPR, and HIPAA, where applicable.


3. Information We Collect and Why


We collect basic information necessary to conduct business and respond to inquiries.

  • Contact Information. Name, job title, company name, work email, phone number, and address.

  • Usage Data. IP address, browser type, and website activity, collected through cookies and similar technologies as described in our Cookie Policy.


Legal Basis. We process this data to fulfill our consulting contracts with you, to respond to your business inquiries, and to maintain and develop our business relationships (including through our client relationship management and marketing systems) based on our legitimate interest. Where we use non-essential cookies, we rely on your consent.


4. How We Use and Share Information


We use your information to provide our services, maintain business records, and communicate with you about our services.

  • No Sale of Data. We do not sell, rent, or trade your personal information.

  • Service Providers. We use secure third-party services for essential business operations. For more details about our service providers and their security practices, please visit our Trust Center at trust.biomedstat.com.

  • Legal Requirements. We may disclose information if required by law or to protect our legal rights.


5. International Data Transfers


BSC® is headquartered in the United States. If you are contacting us from outside the U.S., your information will be transferred to and processed in the United States. Some of the third-party services we use (such as Google Analytics and HubSpot) may also transfer and process your data outside your country of residence.

Where such transfers occur, we rely on appropriate safeguards recognized under GDPR, including the European Commission's Standard Contractual Clauses (SCCs), or, where applicable, transfers to jurisdictions covered by an adequacy decision. Copies of the relevant safeguards can be requested by contacting us at privacy@biomedstat.com.


6. Data Retention


We retain your business contact information for as long as necessary to provide our services and to comply with our legal and professional obligations. For most project-related information, we maintain certain records for at least 7 years to align with tax and regulatory standards. Data may be retained for longer periods where required for the defense of legal claims or as otherwise permitted by law.


7. Your Rights


Depending on your jurisdiction (such as the EU/UK or California), you may have the following rights regarding your data.

  • The right to access, correct, or delete your personal information.

  • The right to object to or restrict certain processing.

  • The right to data portability.

  • The right to withdraw consent at any time, where processing is based on consent.

BSC does not engage in automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

To exercise any of these rights, please contact us at privacy@biomedstat.com. We will respond to your request within 30 days.

You have the right to lodge a complaint with the data protection supervisory authority in your country of residence, place of work, or the place of the alleged infringement. If you remain dissatisfied with our response, you can make a complaint about the way we process your personal information to that supervisory authority.


8. Security and Compliance


We implement industry-standard security measures, including encryption, access controls, regular security assessments, and audit logging to protect your data from unauthorized access, loss, or misuse.

BSC maintains security practices aligned with SOC 2 Type II standards and undergoes regular third-party security audits.


8.1 Incident Response


In the event of a data breach that affects your personal information, we will:

  • Notify affected parties promptly upon discovery

  • Provide details about the nature of the breach and the data involved

  • Outline the steps we are taking to mitigate harm and prevent future incidents

  • Comply with all applicable data breach notification laws

9. Children's Privacy


Our services are directed to business professionals and are not intended for individuals under the age of 16. We do not knowingly collect information from children.


10. Updates and Amendments to This Policy


Periodic Review. We operate in a rapidly evolving regulatory and technological environment. To ensure continued compliance with global data protection laws (including HIPAA, GDPR, and CCPA/CPRA), we review and update this Privacy Policy at least annually, or more frequently if necessitated by significant changes in our services or legal obligations.

Notice of Material Changes. If we make material changes (defined as changes that significantly impact how we collect, use, or share your personal data), we will provide notice before the changes take effect. This may include:

  • Posting a prominent notice on our website homepage or Trust Center

  • Sending an email notification to the primary contact of our active clients

  • Updating the Effective Date at the top of this policy


11. Contact Us


If you have questions about this Privacy Policy, please contact us.

Biomedical Statistical Consulting LLC 2400 Market Street, Suite 200 Philadelphia, PA 19103 Email: privacy@biomedstat.com Phone: +1 (215) 839-1501


EU Representative. Under Article 27 of the GDPR, we have appointed an EU Representative to act as our data protection agent.

Instant EU GDPR Representative Ltd. Attn: Adam Brogden Office 2, 12A Lower Main Street Lucan, Co. Dublin, K78 X5P8, Ireland Email: contact@gdprlocal.com Phone: +353 1 554 970

bottom of page