Educational content only. Always follow the approved protocol, sponsor SOPs, applicable regulations, and local requirements.

Legal

Privacy Policy

Effective date: May 28, 2026

Clinical Research Learning Hub (“we”, “us”, or “our”) operates the website and learning platform at clinicalresearchlearninghub.com. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it.

By using this platform you agree to the practices described in this policy. If you do not agree, please do not use the platform.

1. Data We Collect

Account data

When you register, we collect your email address and a hashed password. We do not store your password in plain text.

Learning activity data

We record your module progress, quiz attempts, exam scores, bookmarks, and certificate issuances so that your learning history persists across sessions.

Payment data

Subscription payments are processed by Stripe. We do not store your card number, CVV, or full card details on our servers. We store a Stripe customer ID and subscription status so we can manage your access.

Usage data

We collect standard server logs including your IP address, browser type, pages visited, and timestamps. This is used for security and performance monitoring.

Communications

If you contact us by email, we retain that correspondence to respond to your enquiry.

2. How We Use Your Data

  • To create and manage your account and authenticate your identity
  • To track your learning progress and issue completion certificates
  • To process subscription payments and manage access tiers
  • To send transactional emails (account confirmation, password reset, certificate notifications)
  • To respond to support requests
  • To detect and prevent fraud, abuse, or unauthorised access
  • To improve the platform through aggregated, anonymised analytics

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

3. Third-Party Services

We use the following third-party services, each with its own privacy policy:

Supabase
Database and authentication infrastructure. Your account data and learning records are stored on Supabase-managed PostgreSQL servers.
Stripe
Payment processing. Stripe handles all card data under PCI-DSS compliance. We never see or store your card number.
Resend
Transactional email delivery (account confirmation, password reset, certificate emails).
Vercel
Hosting and content delivery. Vercel processes request data as part of serving the platform.

4. Cookies and Session Storage

We use session cookies to keep you logged in. These are strictly necessary for the platform to function. We do not use third-party advertising cookies or behavioural tracking cookies.

If we introduce analytics in the future we will update this policy and, where required by law, obtain your consent before setting non-essential cookies.

5. Data Retention

We retain your account and learning data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or financial record-keeping purposes (e.g. Stripe transaction records, which Stripe retains per its own legal obligations).

6. Your Rights

Depending on your location, you may have the right to:

  • Access: request a copy of the personal data we hold about you
  • Correction: ask us to correct inaccurate data
  • Deletion: request deletion of your account and associated data
  • Portability: receive your data in a machine-readable format
  • Objection: object to processing based on legitimate interests

To exercise any of these rights, email us at hello@clinicalresearchlearninghub.com. We will respond within 30 days.

7. Data Security

We use industry-standard security measures including HTTPS encryption, hashed passwords, and row-level security policies on our database. However, no method of transmission over the internet is 100% secure and we cannot guarantee absolute security.

8. Children

This platform is intended for professional and post-secondary learners aged 18 and over. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. Continued use of the platform after the effective date of a revised policy constitutes acceptance of the changes.

10. Contact

If you have questions or concerns about this Privacy Policy, please contact us at hello@clinicalresearchlearninghub.com.