Privacy Policy

This Policy applies solely to information collected through the Site. It does not apply to:

• services K3 delivers under a separate written agreement, which are governed by that agreement and its data-protection terms;
• personal data or protected health information that K3 processes as a service provider, contract research organization, or processor in the course of clinical-research services, which is governed by the applicable study protocol, informed-consent documentation, sponsor agreements, and laws such as HIPAA and Good Clinical Practice (see Section 13); or
• third-party websites, platforms, or services that we link to but do not control (see Section 12).

For information collected through the Site, the data controller is K3 Innovations, Inc., 101 Morgan Ln, Suite 206, Plainsboro, NJ 08536, USA. Contact details are in Section 16.

This is an informational marketing website. We collect personal information about you only when you choose to provide it to us — there are just two such places on the Site: when you contact us through the form, and when you apply for a role. We use no analytics, advertising, or visitor-tracking technologies, and we do not build marketing profiles of visitors.

(a) Information you provide to us. When you complete our contact form, request a demonstration, or otherwise communicate with us, we collect the information you choose to submit — typically your name, business email address, company or organization, and the contents of your message. When you apply for a role or contact us about one, we collect the information contained in that application or correspondence.

(b) Standard server and security logs. As with every website, when your browser requests a page, our hosting and security provider (Cloudflare) automatically records limited technical data — such as IP address, browser type, and the pages requested — in server logs used only to deliver the Site and protect it from abuse. We do not use this data to identify you, build a profile, or track you across other sites, and we do not combine it with the information you provide.

(c) Information from third parties. We do not purchase personal information. If you apply for a role through our careers listings, that application is processed by our applicant-tracking provider (see Sections 3 and 6).

We do not intentionally collect special categories of personal data (such as health, biometric, or genetic data) through the Site. Please do not submit such information, or any confidential or protected health information, through the contact form.

A cookie is a small file placed on your device. We keep the use of cookies to a minimum and use no analytics, advertising, or cross-site tracking cookies. The technologies used on the Site are:

Strictly necessary technologies are required to operate and secure the Site and, consistent with applicable law, do not require your prior consent. Non-essential third-party content — currently only the CEIPAL careers listings — does not load until you consent, whether through our cookie banner or by choosing to load the listings on the Careers page.

You can change your choice at any time using the “Cookie settings” link in the Site footer. You can also block or delete cookies through your browser settings, though parts of the Site may not function as intended if you block strictly necessary cookies.

We use personal information to:

• respond to your inquiries, provide the information or demonstration you request, and correspond with you;
• operate, maintain, secure, and improve the Site, and prevent fraud, abuse, and security incidents;
• evaluate and respond to career inquiries and applications;
• comply with legal obligations and enforce our Terms of Service; and
• establish, exercise, or defend legal claims where necessary.

We do not engage in automated decision-making that produces legal or similarly significant effects, and we do not use your information for third-party advertising.

If you are located in the European Economic Area or the United Kingdom, we process your personal information under one or more of the following legal bases:

• Consent — for loading non-essential third-party content and where we otherwise ask for your consent. You may withdraw consent at any time without affecting processing carried out before withdrawal.
• Performance of a contract or steps taken at your request prior to entering a contract — to respond to your inquiries and discuss potential services.
• Legitimate interests — to operate and secure the Site, respond to communications, and manage recruitment, provided those interests are not overridden by your rights.
• Legal obligation — to comply with applicable laws and lawful requests.

We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising. We disclose personal information only as follows:

• Service providers (processors) who act on our behalf under contract and confidentiality obligations, including: Cloudflare, Inc. (website hosting, content delivery, security, and bot protection), Resend (delivery of contact-form emails), and CEIPAL (applicant tracking and careers listings).
• Professional advisors, such as auditors and legal counsel, where reasonably necessary.
• Authorities and other parties where required to comply with law, a lawful request, or legal process, or to protect the rights, property, or safety of K3, our users, or others.
• In connection with a business transaction, such as a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.

K3 operates in the United States and India, and our service providers may process information in the United States, the European Union, or other countries. As a result, your personal information may be transferred to, and processed in, countries whose data-protection laws differ from those of your country.

Where we transfer personal information out of the EEA or the UK, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (and the UK Addendum where applicable) or a recognized adequacy decision. You may request more information about these safeguards using the contact details in Section 16.

We retain personal information only for as long as necessary for the purposes described in this Policy, including to respond to your inquiry, to maintain reasonable business and legal records, and to comply with our legal obligations. Contact-form information is generally kept for the period needed to handle your inquiry and any follow-up, after which it is deleted or anonymized. Recruitment information is retained for the period appropriate to the role and applicable law. Retention periods may be longer where required to resolve disputes or enforce our agreements.

We maintain reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, and alteration, including encryption in transit and access controls. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. Please do not transmit sensitive personal information or protected health information through the contact form.

(a) EEA and UK. Subject to applicable law, you have the right to request access to, and rectification or erasure of, your personal information; to restrict or object to certain processing; to data portability; and to withdraw consent. You also have the right to lodge a complaint with your local supervisory authority.

(b) California (CCPA/CPRA). If you are a California resident, you have the right to know the categories and specific pieces of personal information we have collected, the sources, and the purposes; to request deletion or correction of your personal information; and to be free from discrimination for exercising your rights. We do not sell or share personal information as those terms are defined under California law, and we do not use or disclose sensitive personal information beyond the purposes permitted without a right to limit. In the preceding twelve months we have collected the categories of identifiers, internet or other electronic network activity, and (for applicants) professional or employment-related information, as described in Section 2, for the business purposes described in Section 4, and disclosed them only to the service providers described in Section 6. You may use an authorized agent to submit a request on your behalf.

(c) Other U.S. states. Residents of states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, and Utah) may have similar rights to access, correct, delete, and obtain a copy of their personal information, and to opt out of certain processing. We honor these rights as applicable.

How to exercise your rights. To make a request, contact us using the details in Section 16. We will verify your request, respond within the timeframe required by applicable law, and may need to confirm your identity before acting. We will not discriminate against you for exercising your rights.

The Site is intended for business and professional audiences and is not directed to children. We do not knowingly collect personal information from children under the age of sixteen. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

The Site links to third-party websites and services, including K3’s product sites and the CEIPAL careers portal. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party site or service you visit.

K3 is a clinical research organization. Personal data and protected health information that we process in connection with clinical-research services — for example, as a service provider or processor to a study sponsor — are not governed by this Policy. Such data are handled in accordance with the applicable study protocol, informed-consent documentation, sponsor and business-associate agreements, and applicable laws and standards, including HIPAA and Good Clinical Practice. If you are a research participant with questions about your study data, please contact your study site.

Some browsers offer a “Do Not Track” setting. Because there is no common industry standard for interpreting these signals, the Site does not respond to them. We do, however, honor the cookie choices you make through our consent tools.

We may update this Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Site after an update indicates your acceptance of the revised Policy.

If you have questions about this Policy or wish to exercise your rights, please contact us:

• Email: info@k3-innovations.com
• United States: K3 Innovations, Inc., 101 Morgan Ln, Suite 206, Plainsboro, NJ 08536, USA · +1 732 645 8366
• India: PSR Prime Tower-2, DLF Cyber City, Gachibowli, Hyderabad 500032

If you are in the EEA or the UK and wish to reach us regarding data-protection matters, please use the email above and mark your message for the attention of the Privacy team.