Privacy Statement

Privacy and Confidentiality Policy

Cedar Health Research (“Cedar,” “we,” “us,” or “our”) offers a network of investigator clinical trial sites that conducts industry sponsored and investigator initiated (together, the “Services”).  This Privacy Policy applies to the personal information that we collect and process in relation to our products and services, including via our website located at https://cedarhealthresearch.com (the “Site”).  Please note that if we process your personal information in the context of providing services for our business clients, you should contact our client with questions or for more information, as its privacy policy will apply rather than ours. Please also note that if we are collecting information specific to a clinical trial in which you are enrolled or wish to enroll, the Privacy Notice you are provided related to that trial will control. All webpages employ the https communications protocol to meet industry standards for secure and encrypted transmissions over the Internet.

Your privacy is important to us. In a commitment to protecting your privacy, we have implemented the measures below to protect the personal data we process about you.

 

Types of Information We Collect

Categories of Personal Data We May Collect

Sources of Personal Data

Use and Processing of Information

Sharing of Information

Your Choices: Texas and California Consumers

How We Protect Personal Information

Children’s Information

Texas and California Privacy Rights

Changes to This Policy

Contact Us

 

Types of Information We Collect

We receive personal information from you, our clients, potential clients, and employees. The following provides examples of the type of information that we collect and how we use that information. We limit our collection of personal data to what is adequate, relevant, and reasonably necessary in relation to the disclosed purposes for which the personal data is processed as described in this policy.

 

Categories of Personal Data We May Collect

We collect or process the following categories of personal data:

• Identifiers, such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, signature, physical characteristic or description, telephone number, insurance policy numbers, employment status, or employment history
• Characteristics of protected classifications, such as race, sex, disability, national origin, marital status
• Commercial information, including records of personal property, products or services purchased, obtained, or considered or other purchasing histories or tendencies
• Biometric information, which might include recordings of your voice
• Internet or other electronic network activity, including, but not limited to, browsing history, search history, and information regarding interactions with the site
• Geolocation data
• Audio, electronic, visual, thermal, olfactory, or similar information
• Professional or employment-related information
• Education information
• Inferences drawn from any of the information identified above to create a profile about you that reflects your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligences, abilities, and aptitudes

We collect or process the following categories of sensitive personal data:

• Social security number
• Driver’s license number
• State identification card
• Medical information
• Precise geolocation
• Racial or ethnic origin, religious or philosophical beliefs, or union membership
• Genetic data
• Biometric information, such as audio, electronic, visual, thermal, olfactory, or similar information
• Personal information collected and analyzed concerning your sex life or sexual orientation
• Personal information collected and analyzed concerning your health

 

Sources of Personal Data

In addition to the information that we collect from you or from our clients directly, we may also receive information about you from other sources, including third parties, business partners, our affiliates, or publicly available sources. For example, if you submit a job application, or become an employee, we may conduct a background check. We collect personal data from the following categories of sources:

• Directly from you when you provide information
• Our affiliates and business partners
• Data verification services & data brokers
• Marketing vendors and advertising networks
• Social media
• Healthcare providers

 

Use and Processing of Information

In addition to the purposes and uses described above, we use information in the following ways:

• To identify you when you visit our websites or our services.
• Provide clinical trial opportunities for participation.
• To provide services to your business or employer.
• To conduct analytics.
• To develop new products or services.
• To respond to inquiries related to support, employment opportunities, or other requests.
• To send targeted marketing and promotional materials, including information relating to our products, services, sales, or promotions.
• For internal administrative purposes, as well as to manage our relationships.
• To detect security incidents that compromise the availability, integrity, authenticity, and confidentiality of stored or transmitted personal information.
• To prevent malicious, deceptive, fraudulent, or illegal actions and to prosecute those responsible for those actions.
• To protect our rights, property, and safety or the rights, property, and safety of others.
• To perform services, such as maintaining or servicing accounts, providing customer service, processing, or fulfilling orders and transactions, or verifying information.
• To comply with legal obligations.

Although the sections above describe our primary purpose in collecting your information, in many situations we have more than one purpose. For example, if you submit interest in one of our clinical trials, we collect your information to assess your qualification, but we also collect your information because we have an interest in understanding who our clients are and what services we perform on their behalf.

 

Sharing of Information

In addition to the specific situations discussed elsewhere in this policy, we disclose information in the following situations:

1. Affiliates and Acquisitions. We may share information with our corporate affiliates (e.g., parent company, sister companies, subsidiaries, joint ventures, or other companies under common control). If another company acquires, or anticipates acquiring, our company, business, or our assets, we will also share information with that company.
2. Other Disclosures with Your Consent. We may ask if you would like us to share your information with unaffiliated third parties who are not described elsewhere in this policy.
3. Other Disclosures without Your Consent. Unless otherwise prohibited or limited by applicable laws, we may disclose information in response to subpoenas, warrants, discovery requests, or court orders, or in connection with any legal process, or to comply with relevant laws. We may also share your information to establish or exercise our rights, to defend against a legal claim, to investigate, prevent, or take action regarding possible illegal activities, suspected fraud, safety of person or property, or a violation of our policies, or to comply with your request for the shipment of products to or the provision of services by a third-party intermediary.
4. Public. Some of our websites may provide the opportunity to post comments, or reviews, on a message board or in a public forum. If you decide to submit information on these pages, that information may be publicly available.
5. Service Providers. We may share your information with service providers. Among other things service providers may help us to administer our website, perform hosting, provide technical support, process payments, and assist in the fulfillment of cybersecurity service requests.
6. Advertising Networks. We may share information about your browsing history, search history, and information regarding your interaction with the site with advertising partners.

We do not knowingly sell or share personal data of residents under the age of 16.
NOTICE: We may sell or share your sensitive personal data.
NOTICE: We may sell or share your biometric personal data.

 

Your Choices: Texas and California Consumers

You can make the following choices regarding your personal information:

1. Promotional Emails. You may choose to provide us with your email address for the purpose of allowing us to send promotional materials to you. You can stop receiving promotional emails by following the unsubscribe instructions in e-mails that you receive. If you decide not to receive promotional emails, we may still send you service-related communications.
2. Access to Your Personal Information. We will grant you, where required by law, reasonable access to the personal information that we have about you, and you have a right to know how we are processing your personal data. You may request access to your personal information by contacting us at the address described below.
3. Changes to Your Personal Information. You can contact us at the address described below in order to request that your information be modified.
4. Deletion of Your Personal Information. We typically retain personal information that we collect on our own behalf for the period necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. You may request information about how long we keep a specific type of information, or request that we delete your personal information, by contacting us at the address described below.
5. Revocation of Consent or Objections. You may revoke consent to processing (where our processing is based upon consent), or object to our processing (where our processing is not based upon your consent) by contacting us at the address described below. If you revoke your consent / object we may no longer be able to provide you services. In some cases, we may limit or deny your request to revoke consent / object if the law permits or requires us to do so, or if we are unable to adequately verify your identity.
6. Do Not Track. Due to the absence of a current “Do Not Track” standard, the Site does not currently respond to “Do Not Track” signals.

 

How We Protect Personal Information

No method of transmission over the Internet, or method of electronic storage, is fully secure. While we use reasonable efforts to protect your personal information from unauthorized access, use, or disclosure, we cannot guarantee the security of your personal information. If we are required by law to inform you of any unauthorized access to your personal information, we may notify you electronically, in writing, or by telephone, if permitted to do so by law.

Our website or service may permit you to create an account. When you do you will be prompted to create a password. You are responsible for maintaining the confidentiality of your password, and you are responsible for any access to or use of your account by someone else that has obtained your password, whether such access or use has been authorized by you. You should notify us of any unauthorized use of your password or account.

 

Children’s Information

We do not knowingly collect any personal information from children under 16. If we become aware that an individual under the age of 16 is submitting information without consent from their parent or legal guardian or as permitted under applicable law, we will delete the information as soon as possible from our database. If you believe we are collecting information about an individual under 16, please notify us immediately so that we can take appropriate action.

 

Texas and California Privacy Rights.

If you are a California or Texas resident, you have rights in relation to your Personal Information; however, your rights are subject to certain exceptions. For instance, we cannot disclose specific pieces of Personal Information if the disclosure would create a substantial, articulable, and unreasonable risk to the security of the Personal Information, your account with us, or the security of our network systems.

To assert your right to know, to access, or to delete your Personal Information, please contact us by email at info@cedarresearch.com or contact us at 1-214-253-8170. To confirm your identity, we may ask you to verify Personal Information we already have on file for you. If we cannot verify your identity based on the information we have on file, we may request additional information from you, which we will only use to verify your identity, and for security or fraud-prevention purposes.

• Right to Opt-Out of Processing. You have the right to opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of a decision made by the us that results in the provision or denial by the company of the including (i) health care services; (ii) employment opportunities; or (iii) access to basic necessities such as food and water.
• Right Against Discrimination. You have the right not to be discriminated against for exercising any of the rights described in this section. We will not discriminate against you for exercising your right to know, delete or opt-out of sales.
• Right to Know. You have the right to request in writing: (i) a list of the categories of Personal Information, such as name, address, email address, that a business has disclosed to third parties during the immediately preceding calendar year for the third parties’ direct marketing purposes, and (ii) the names and addresses of all such third parties. In addition, you have the right to request: (i) the categories of Personal Information we have collected about you, (ii) the categories of sources from which Personal Information is collected, (iii) the business or commercial purpose for the information collection, (iv) the categories of third parties with whom we have shared Personal Information, and (v) the specific pieces of Personal Information we hold about an individual.
• Right to Access. You have the right to request a copy of the specific Personal Information we collected about you during the 12 months before your request.
• Right to Delete. You have the right to request us delete any Personal Information we have collected from you or maintain about you, subject to certain exceptions.
• Right to Opt-Out of Selling. California and Texas residents have the right to opt-out of having their Personal Information sold. We do not sell your Personal Information.

 

If you are a California consumer, you may use an authorized agent to make a privacy request on your behalf. To make a request on behalf of a California consumer whose personal information has been collected by Cedar, the authorized agent must first provide a copy of either (a) a letter signed by the customer authorizing the agent to submit a CCPA request on his or her behalf, or (b) a valid power of attorney issued pursuant to California Probate Code sections 4000 to 4465. An authorized agent must email one of these documents to info@cedarresearch.com and include a phone number where the agent may be reached during regular business hours.

 

Changes to This Privacy Policy 

We may change our privacy policy and practices over time. To the extent that our policy changes in a material way, the policy that was in place at the time that you submitted personal information to us will generally govern that information unless we receive your consent to the new privacy policy. Our privacy policy includes an “effective” and “last updated” date. The effective date refers to the date that the current version took effect. The last updated date refers to the date that the current version was last substantively modified.

 

Contact Us

If you have any questions, comments, or complaints concerning our privacy practices please contact us at the appropriate address below. We will attempt to respond to your requests and to provide you with additional privacy-related information.

info@cedarresearch.com

Three Forest Plaza

12221 Merit Drive

Suite 350

Dallas, TX 75251

1-214-253-8170

This Privacy Statement was last modified November 30, 2024.

 

PRIVACY NOTICE & COMMUNICATIONS PERMISSIONS

EFFECTIVE: 30 NOV 2024

 

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

 

This Privacy Notice (this “Notice”) tells you about the ways we may use and disclose your medical information.  This Notice applies to Cedar Health Research, LLC, including its professionals, employees and contractors (“CHR”).

CHR operates a clinical research site network serving our local communities and clinical trial sponsor partners (“Sponsors”) who are seeking to study the safety and effectiveness of their products.  We are committed to safeguarding the privacy of information we collect, including compliance with applicable Data Privacy Laws.  Our website, patient access portals, and other services are primarily provided on behalf of ourselves and our Sponsors.

This Notice outlines the collection, use, and disclosure of Personal Data provided to CHR by Individuals, (hereinafter “Individuals”) or by its clinic network partners (“Partners”) including but not limited to:

• Community event patrons and members of their immediate family (such as attendees at community health fairs)
• Sponsors and their employees
• contractors and vendors and their employees
• research subjects
• patients of CHR Partners
• clinical research sites and their employees
• hospitals and their employees

1. OUR OBLIGATIONS

We are required by law to:

• Make sure that the medical information we have about you is kept private, to the extent required by state and federal law;
• Give you this Notice explaining our legal duties and privacy practices with respect to medical information about you;
• Inform you that CHR may create and/or receive medical information about you and such medical information may be subject to further disclosure to authorized parties;
• Notify you of any breach of your personal or medical information; and
• Abide by the terms of this Notice.

1. HOW WE MAY USE AND DISCLOSE MEDICAL INFORMATION ABOUT YOU

The following categories describe the different reasons that we typically use and disclose your medical information. These categories are intended to be generic descriptions only, and not a list of every instance in which we may use or disclose your medical information. Please understand that for the categories in this section only, the law generally does not require us or our Partners to get your authorization in order for us to use or disclose your medical information.

What Types of Personal Information Does CHR Handle and for What Purposes?

1. Clinical and Medical Information: As a clinical research site, CHR conducts clinical trials for Sponsors. As such, we collect, host and analyze significant quantities of health data and bio-medical samples relating to study subjects from our Partners and in some instances at sites we operate.
2. Clinical Trial Recruitment Information: We also collect and maintain personal contact information, details regarding health and medical conditions, and areas of interest in medical research from Individuals who have expressed to us or our Partners an interest in taking part in clinical trials, so that we are able to match them with a suitable clinical trial as they may arise. We use this information to recruit Individuals for clinical trials and to run general statistical analysis in support of patient recruitment.
3. For Clinical Trial or Trial-Related Services We may use medical information about you to provide you with the clinical trial services, or to provide care related to the clinical trial, and we may disclose medical information about you to doctors, nurses, technicians, medical students, medical facilities or CHR personnel, whether contracted or employed by CHR, who are providing clinical trial or trial-related care services to you. For example, our trial staff may need to share prescription information with a pharmacy. We may also share medical information about you with other CHR personnel or non-CHR providers, agencies or facilities in order to provide or coordinate the trial-related you need, such as radiology imaging. We also may disclose medical information about you to people outside CHR who may be involved in your continuing medical care outside of a clinical trial, including your regular healthcare provider.
4. Individuals Involved in Your Care: We may release medical information about you to a friend or family member who is involved in your medical care, but we will do so only as allowed by state or federal law, or in accordance with your prior authorization.
5. Appointment Reminders: We may contact you to provide trial appointment reminders, including, but not limited to voicemail messages, postcards or letters. You have the right to restrict how and where we communicate with you.
6. Health Screening Information: On some occasions, CHR provides health services to local communities in the form of health screening activities for certain pathologies/diseases. During this activity, we collect names, contact information, and medical information of participants. Once the test is performed, with the authorization and consent from the participant, we’ll add their information to our database so that they can be contacted by us for future testing or clinical trial opportunities, in line with their specific medical condition. Should they choose not to provide such consent, CHR will only share results of the testing with the participant’s physician.
7. Web Visitors: CHR collects named information about visitors to company websites where this is voluntarily provided to meet a request from those Individuals, for example where a client contact requests information on a company service, a health professional is interested in participating in a clinical trial or where someone wants to apply for a vacant position with the company. Through the use of cookie-based technologies, CHR may collect various data linked to virtual identities allocated to visitors when they access our websites. This data is used for various purposes, including site analytics and first party marketing. Please review our Privacy Policy for more information on how we collect and use data through our website. Please note that for clinical trial specific information, this Notice and/or the Informed Consent Form will control.
8. Service Providers: There are some services CHR provides through service providers or vendors. CHR may also use the services of service providers to perform certain functions on behalf of CHR, for example, software support services. When these services are provided by our services providers, they may need access to your medical information in order to perform these services.  To protect your medical information, CHR requires the service provider to agree in writing to appropriately safeguard your information.
9. As Required By Law: We will disclose medical information about you when required to do so by federal, state, or local law. If you are involved in a lawsuit or a legal dispute, we may disclose medical information about you in response to a court or administrative order, subpoena, discovery request, or other lawful process, unless otherwise prohibited by applicable law. In addition to lawsuits, there may be other legal proceedings for which we may be required or authorized to use or disclose your medical information, such as investigations of health care providers, or competency hearings on Individuals.

• To Avert a Serious Threat to Health or Safety: We may use or disclose your medical information when necessary to prevent or decrease a serious and imminent threat to your health or safety or the health and safety to the public or another person. Such disclosure would only be to someone able to help prevent the threat, or to appropriate law enforcement officials.

1. Medical Research: We may disclose your protected health information to researchers when their research has been approved by an institutional review board that has reviewed the research proposal and established protocols to ensure the privacy of your protected health information. Further, we may use information about you to provide you with medical treatment or services as part of the research studies we conduct. We may disclose information about you to doctors, nurses, technicians, coordinators, office staff or other personnel who help conduct our studies, including service providers who may provide these services on our behalf.
2. Public Health Risks. We may disclose medical information about you to public health authorities for public health activities. As a general rule, we are required by law to disclose certain types of information to public health authorities, such as the Texas Department of State Health.
3. OTHER USES OF MEDICAL INFORMATION

There are times we may need or want to use or disclose your medical information other than for the reasons listed above, but to do so will need your prior permission or authorization  Disclosures which require your authorization include: (i) release of psychotherapy notes, HIV status, substance use treatment records, or genetic information,  (ii) uses and disclosures of sensitive health information for marketing purposes, (iii) sale of sensitive health information, and (iv) other uses and disclosures not outlined in this Notice.  If you provide us permission to use or disclose medical information about you for such other purposes, you may revoke that permission in writing at any time. If you revoke your permission, we will no longer use or disclose medical information about you for the reasons covered by your written authorization. You understand that we are unable to take back any uses or disclosures we have already made with your permission, and that we are required to retain our records of the care that we provided to you for 7 years or more if your information was used in support of an application for a new drug or medical device.

You also understand and agree that We may de-identify, tokenize and aggregate data about you and your health (i) as our Partners request and allow; (ii) as applicable law allows; and (iii) where required, subject to your authorization.  “De-identifying” data means We remove all information about you that could be used to re-identify you, such as your name, address, zip code, or other information that can be used, alone or in combination with other data, to directly identify you.

We may also “tokenize” your data, which is the process of replacing sensitive data with unique identification symbols that retain all the essential information about the data without compromising its security. Tokenization is a way in which We take steps to minimize the amount of sensitive data we need to provide our services to our Sponsors and Partners, and can include encryption, hashing, or indexing with randomly generated numbers. This allows us and our Sponsors and Partners to use real world patient data to help develop new drugs and medical devices, design better studies, and better understand results without compromising Individual privacy. We will ask for your consent to tokenize data at the end of this form.

1. HOW DE-IDENTIFIED DATA IS USED

• Aggregated data (for example, counts of the number of individuals with a certain condition or on a particular treatment) is de-identified and is shared with Partners and Sponsors.

 

• In addition to serving the individual needs of Individuals, We, our Partners and Sponsors are interested in better understanding the patient experience and improving treatment options, information sharing, and health outcomes for everyone. For example, We or our Sponsors may review questions like, “Do certain treatments work better for some types of people versus others?” We share this information in individual and aggregate format with Sponsors and Partners for use in scientific research, product development, and market research. We de-identify and/or tokenize data for this purpose, and contractually prohibit our Partners and Sponsors from trying to re-identify anyone.
• We may periodically ask you to complete surveys about your experiences. Survey responses (possibly in combination with data from studies you participate in are analyzed by Us. Insights from the analysis may be shared with and/or sold to Partners or Sponsors in de-identified and/or tokenized form. Participation in these surveys is not required and refusal to do so will not impact your ability to receive services from Us or our Partners. However, if surveys are a formal part of a study or trial, failure to complete required surveys may result in removal from the study or trial.
• We may report Individual adverse event and drug safety information to regulatory partners like the FDA, CDC, or other bodies (US and international) as well as directly to Sponsors or other Partners. When reporting such information, We strive not to provide Identifying Data unless required by law. We reserve the right to contact you for follow-up at the request of agencies, Sponsors or Partners. In this context, the data that We report may include information you provide via surveys or online forms, or images on the forums or evaluations.
• We may use deidentified or tokenized data internally or send it to third party vendors who assist with operating our services. For example, we may send treatment or condition information to an e-mail provider so that information can be included in messages we send to you. In addition, some vendors may use de-identified data to improve their own products and services.

1. YOUR RIGHTS REGARDING MEDICAL INFORMATION ABOUT YOU

Federal and state laws provide you with certain rights regarding the medical information we have about you. The following are a summary of those rights. For additional information on your rights please also see our website Privacy Policy.

1. Right to Inspect and Copy. Under most circumstances, you have the right to inspect and/or copy your medical information that we have in our possession. To inspect or copy your medical record you must submit your request in writing to CHR’s Privacy Officer the address listed in Section VIII below.

CHR will generally set up a mutually agreeable time for you to inspect or obtain a copy of your medical information within thirty days of your request.  To the extent that CHR maintains a portion of your record in an electronic format, CHR will provide a paper copy of that portion of your record or will provide you with an electronic copy of that portion of your record if able to do so in a readable format. If you request a copy of your information, we may charge a reasonable fee for the costs of copying, mailing, or other supplies associated with your request. The fee we charge will not exceed the amount allowed by state law.

In certain very limited circumstances allowed by law, we may deny your request to review or copy your medical information. We will give you any such denial in writing. If you are denied access to medical information, you may request that the denial be reviewed. Another licensed health care professional chosen by CHR will review your request and the denial. The person conducting the review will not be the person who denied your request. We will abide by the outcome of the review.

1. Right to Request an Amendment. If you feel the medical information we have about you is incorrect or incomplete, you may ask us to amend the information. You have the right to request an amendment for as long as the information is kept by CHR. To request an amendment, your request must be in writing and submitted to the Privacy Officer at the address listed in Section VIII below. In your request, you must provide a reason as to why you want this amendment. If we accept your request, we will notify you of that in writing.

CHR is not required to amend your information at your request.   CHR may deny your request for an amendment if it is not in writing or does not include a reason to support the request. In addition, we may deny your request if you ask us to amend information that (i) was not created by us, (ii) is not part of the information kept by CHR, (iii) is not part of the information which you would be permitted to inspect or copy, or (iv) is accurate and complete.  If we deny your request, we will notify you of that denial in writing.

1. Right to an Accounting of Disclosures. You have the right to request an “accounting of disclosures” of your medical information. This is a list of the disclosures we have made to third parties, or disclosures made pursuant to your specific authorization (as described in Section III of this Notice), or certain other disclosures. To request this accounting, you must submit your request in writing to CHR’s Privacy Officer at the address set forth in Section VIII below.
2. Right to Request Restrictions. You have the right to request a restriction or limitation on the medical information we use or disclose about you in various situations. You also have the right to request a limit on the medical information we disclose about you to someone who is involved in your care or the payment for your care, like a family member or friend.

There are certain situations where we won’t be able to agree to your request, such as when we are required by law to use or disclose your medical information. To request restrictions, you must make your request in writing to CHR’s Privacy Officer at the address listed in Section VII below. In your request, you must specifically tell us what information you want to limit, whether you want us to limit our use, disclosure, or both, and to whom you want the limits to apply.

1. Right to Request Confidential Communications. You have the right to request that we communicate with you about medical matters in a certain way or at a certain location. For example, you can ask that we contact you at work rather than at home. To request such confidential communications, you must make your request in writing to CHR’s Privacy Officer at the address listed in Section VIII below.

We will not ask the reason for your request, and we will use our best efforts to accommodate all reasonable requests, but there are some requests with which we will not be able to comply. Your request must specify how and where you wish to be contacted.

1. Notification of a Breach. You have a right to be notified if your medical information is used or disclosed in a manner that is not permitted by state or federal law.  In the event of a breach, CHR actively takes steps to rectify the disclosure.
2. Right to a Copy of This Notice. You have the right to receive a copy of this Notice. To obtain a copy of this Notice, please ask one of our staff members or send a written request to CHR’s Privacy Officer at the address set forth in Section VII below.

VII.     CHANGES TO THIS NOTICE.

We reserve the right to change this Notice at any time, along with our privacy policies and practices. We reserve the right to make the revised or changed Notice effective for medical information we already have about you as well as any information we receive in the future. We will post a copy of the current notice, along with an announcement that changes have been made, as applicable, on our website. When changes have been made to the Notice, you may obtain a revised copy by sending a letter to CHR’s Privacy Officer at the address listed in Section VIII below or by visiting our website.

VIII.   QUESTIONS OR COMPLAINTS.

If you believe that your privacy rights as described in this notice have been violated, you may file a complaint with CHR at the following address or phone number: Cedar Health Research, LLC, Attn: Privacy Officer, 4848 Lemmon Ave, Suite 767, Dallas, Texas 75219, Email: info@cedarresearch.com.

To file a complaint or to ask questions about this Notice, you may send an email or send a written letter to CHR’s Privacy Officer. CHR will not retaliate against any Individual who files a complaint. You may also file a complaint with your state’s Attorney General.