Privacy Policy

Download

Last updated June 17, 2026

This Privacy Notice for TrialMe AB (Swedish company registration number 559536- 1873) ('TrialMe', 'we', 'us', or 'our'), describes how and why we collect, store, use, and/or  share ('process') your personal information when you use our services ('Services'). This notice applies to all users of our Services and is intended to comply with the EU General Data Protection Regulation (EU GDPR) and the UK General Data Protection Regulation (UK GDPR). References to 'GDPR' in this notice apply to both unless otherwise stated.

Services include when you: 

• Contact us by email or through other communication channels

• Download and use our mobile application (TrialMe) 

• Use TrialMe's matching platform to connect with clinical trials

WHO IS THE DATA CONTROLLER? 

TrialMe AB

TrialMe AB is the data controllerfor the personal data we process when you use our  Services. This means we are responsible for deciding how your personal data is  processed and for ensuring it is processed in accordance with applicable data  protection laws. 

UK Representative 

As TrialMe AB is established in Sweden and not in the United Kingdom, we have designated DataRep as our UK representative for the purposes of Article 27 of the UK GDPR. DataRep can be contacted by UK residents and the Information Commissioner's Office (ICO) on matters relating to the processing of personal data. Click here to contact DataRep.

Questions or concerns? 

If you have any questions or concerns, please contact us at  support@trialme.eu

1. WHAT INFORMATION DO WE COLLECT? 

Personal Information You Provide to Us 

We collect personal information that you voluntarily provide to us when you register on  the Services, express interest in obtaining information about us or our Services,  participate in activities on the Services, or otherwise contact us. 

The personal information we collect can include: 

• Contact information (name, email address, phone number) 

• Account credentials (username, hashed password) 

• Health conditions and medical diagnoses 

• Current medications and treatments 

• Medical history 

• Reproductive health information 

• Lifestyle information and health behaviors (e.g. smoking, exercise habits)

• Demographic information (date of birth, country, city, postal code) 

• Communication preferences 

Sensitive Personal Information: The data listed below includes information classified as special category data under GDPR Article 9. We only process this data with your separate, explicit consent, which you will be asked to give at the time of collection. This consent is independent from your acceptance of our Terms of Service. You may withdraw it at any time (see Section 8). Special category data includes:

• Health data 

• Information revealing race or ethnic origin 

• Data about sexual orientation (when relevant for trial eligibility) 

All personal information you provide must be true, complete, and accurate. Notify us of  any changes to such personal information.

Information Automatically Collected 

We automatically collect certain information when you visit, use, or navigate the  Services. This information does not reveal your specific identity but may include device  and usage information, such as your IP address, browser and device characteristics,  operating system, language preferences, referring URLs, device name, country, location  information, and other technical information. This information may, in some cases, be connected to you as an individual.

We collect this information primarily for maintaining the security and operation of our  Services, to provide a good homepage experience and for our internal analytics and  reporting purposes. 

Like many businesses, we also collect information through cookies and similar  technologies. You can manage your cookie preferences through the cookie banner displayed when you first visit our website. A full Cookie Policy is available at Cookie Policy.

Our Services are intended for individuals aged 18 and over. We do not knowingly collect personal data from persons under the age of 18. If you believe a minor has submitted personal data to us, please contact us at support@trialme.eu.

2. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR  PERSONAL INFORMATION? 

We only process your personal information where we have a valid legal basis to do so. The table below sets out what we process, why, and on what basis.

A note on legitimate interests: Where we rely on legitimate interests, we have assessed that our interests do not override your rights and freedoms. You have the right to object to this processing at any time (see Section 8).

Withdrawing consent: Where we rely on consent, you have the right to withdraw it at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal. You can withdraw consent by contacting us at support@trialme.eu.

3. WHY DO WE PROCESS YOUR INFORMATION

We process your personal information for the following purposes: 

• Create and manage your account and authenticate you when you log in

• Match you with relevant clinical trials based on your health profile

• Communicate with you about trial opportunities and your bookings

• Share your profile with trial sponsors when you express interest in a specific trial

• Improve our matching algorithm and the quality of our Services

• Send marketing and educational communications (only with your consent)

• Protect our platform and prevent fraud or misuse

• Comply with our legal obligations

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL  INFORMATION? 

We share your personal information in the following situations: 

With Clinical Trial Sponsors (with your consent): 

When you express interest in a clinical trial, we share relevant parts of your profile with  the trial sponsor (pharmaceutical companies or Contract Research Organizations) to  assess your eligibility. This includes your health information, medical history, and  contact details. Trial sponsors may be located outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place - see Section 5 on international transfers.

With Service Providers (Data Processors): 

We work with third-party service providers to operate our platform. All processors are bound by data processing agreements (DPAs) and may only process your data on our instructions. Our service providers include:

Our service providers include: 

• Cloud hosting and infrastructure providers (data stored on servers within the European Economic Area)

• Email and communication service providers

• Analytics providers (for service improvement)

• Customer support platforms

• Identity and verification service providers (if applicable)

• AI-assisted tools used for internal operations (subject to appropriate DPAs and usage restrictions)

Your health data is processed only on servers located within the EEA. Some other service providers (e.g. productivity and communication tools) may be based outside the EEA. See Section 5 for how we handle this.

Business Transfers: 

We may share or transfer your information in connection with, or during negotiations of,  any merger, sale of company assets, financing, or acquisition of all or a portion of our  business to another company. 

Legal Requirements: 

We may disclose your information where we are legally required to do so to comply with  applicable law, governmental requests, judicial proceedings, court orders, or legal  processes. 

5. INTERNATIONAL DATA TRANSFERS

Some of our service providers are based outside the European Economic Area (EEA) or the United Kingdom (UK). Where we transfer personal data to a country that has not been recognised as providing an adequate level of data protection, we ensure that appropriate safeguards are in place in accordance with applicable data protection law before any transfer takes place.

Transfers between the UK and the EEA are covered by mutual adequacy decisions -- the European Commission has recognised the UK as adequate, and the UK has recognised the EEA as adequate under its own adequacy regulations. No additional safeguards are required for these transfers.

Your health profile and other sensitive personal data are stored on servers within the EEA and are not transferred outside the EEA or UK as part of our core platform operations.

If you would like more information about the safeguards we have in place for any particular transfer, please contact us at support@trialme.eu. 

6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES? 

We use cookies and similar tracking technologies to access or store information. You can manage your preferences through the cookie banner on our website. Our full Cookie Policy is available at [link to Cookie Policy].

For users based in the United Kingdom, our use of cookies is also governed by the Privacy and Electronic Communications Regulations (PECR).

7. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain your personal information only for as long as necessary for the purposes described in this notice, or as required by law. The following retention periods apply: