Privacy Policy

1. Who we are

This site, amavitaresearch.com, is operated by Amavita Research Services, LLC (doing business as Amavita Research), a clinical research site headquartered at 100 NW 170 Street, Suite 305, North Miami Beach, FL 33169, USA. Amavita Research is the dedicated clinical research arm of amavita Heart and Vascular Health®, the parent cardiology practice. For privacy questions: researchadmin@amavita.health.

2. Scope

This policy covers information collected through this website. It does not cover protected health information (PHI) collected at clinical visits — see HIPAA Notice for the boundary.

3. Data we collect

• Form submissions: name, email, phone, language preference, trial of interest, and any free-text message you provide on patient or sponsor contact forms.
• Cookies: strictly necessary cookies (consent state, language); analytics cookies (Microsoft Clarity, Google Analytics) only when you opt in.
• Server logs: IP address, browser/user-agent, referring URL, and timestamps, retained for security and abuse prevention.

4. Purposes of processing

• Respond to patient and sponsor inquiries and schedule screenings.
• Operate, secure, and improve the website.
• Anonymous usage analytics (only if you consent).
• Comply with legal and regulatory obligations.

5. Legal bases (GDPR / UK GDPR)

• Consent — analytics cookies and any future marketing.
• Legitimate interest — site security, fraud prevention, server logs.
• Performance of a request — responding to inquiries you send us.
• Legal obligation — record-keeping where required.

6. CCPA / CPRA disclosures (California)

In the prior 12 months, we have collected the following CCPA categories: identifiers (name, email, phone, IP), internet/network activity (browser, pages viewed), and inferences derived from that activity. We do not sell or share personal information as defined by CCPA/CPRA, and we do not engage in cross-context behavioral advertising. California residents may request access, deletion, correction, and limitation of use of sensitive information by emailing researchadmin@amavita.health.

7. Florida Digital Bill of Rights (FDBR)

Florida residents may exercise rights under the FDBR including the right to confirm, access, correct, delete, and port personal data, and to opt out of targeted advertising, sale of personal data, and certain profiling. We do not engage in sale of personal data or targeted advertising. To submit a request, email researchadmin@amavita.health. You may appeal a denial by replying to our response within 60 days.

8. HIPAA boundary

amavitaresearch.com is an informational and recruitment site. We do not collect protected health information (PHI) through this website. PHI is collected only at clinical visits at the parent practice, amavita Heart and Vascular Health®, which is a HIPAA-covered entity operating under its own Notice of Privacy Practices. See our HIPAA Notice for details.

9. Data retention

Form submissions are retained for up to 7 years to support follow-up and regulatory record-keeping. Server logs are retained for up to 90 days. Analytics data is retained per provider defaults (Microsoft Clarity: 1 year; Google Analytics: 14 months unless changed).

10. Third-party processors

• Cloudflare — hosting, CDN, DDoS protection.
• Supabase — database and edge functions.
• Microsoft Clarity — anonymous analytics (opt-in).
• Google Analytics 4 — aggregate analytics (opt-in).
• Lovable AI Gateway — automated translation of page copy.
• Resend / email provider — transactional email delivery.

11. International transfers

Data may be processed in the United States and other jurisdictions where our processors operate. EU/UK transfers rely on Standard Contractual Clauses or equivalent safeguards offered by each processor.

12. Security

We use industry-standard administrative, technical, and physical safeguards including encryption in transit (TLS), least-privilege access to databases, and routine security review. No system is perfectly secure; please use a strong, unique password if you create an account.

13. Your rights and how to exercise them

You may request access, correction, deletion, restriction, portability, and (where applicable) objection or withdrawal of consent by emailing researchadmin@amavita.health. We will respond within the timeframe required by applicable law (typically 30–45 days). EU/UK residents may lodge a complaint with their supervisory authority.

14. Children

This site is not directed to children under 13, and we do not knowingly collect personal data from children.

15. Changes

We may update this policy. Material changes will be reflected in the "Last updated" date above and, where required, by notice on the site.