1. About TrialCraft
TrialCraft, operating in French as InnovEssai, is a Quebec-based clinical-trial strategy, operations and study-systems consultancy serving emerging biotech sponsors, CROs and funded investigator-led study teams. In this policy, “TrialCraft,” “InnovEssai,” “we,” “us” and “our” refer to the same enterprise.
This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you visit trialcraft.co, contact us, schedule a consultation or submit a project enquiry.
2. Privacy contact
Questions, requests or concerns relating to personal information may be directed to:
Privacy Officer
TrialCraft / InnovEssai
Email: consult@trialcraft.co
Telephone: +1 514 430 5748
3. Information we may collect
Depending on how you interact with us, we may collect:
- Your name, professional title, company and business contact information.
- Your role in the proposed study, such as sponsor representative, principal investigator, sponsor-investigator, CRO representative, coordinator or research-team member.
- Information you provide in an email, consultation request, project brief or protocol-review enquiry.
- Business and project information such as development stage, asset or intervention, indication, trial phase, countries under consideration, timelines and the type of support requested.
- Scheduling information submitted through Calendly.
- Basic technical information that may be recorded by our website or hosting provider, such as Internet Protocol address, browser type, device type, referring page, requested pages and timestamps.
- Your language preference, which may be stored locally in your browser so the website can remember whether you selected English or French.
Please do not submit participant-identifying information, personal health information, confidential protocols, clinical datasets or other sensitive or confidential documents through a public website form or ordinary email. Secure document transfer can be arranged separately after an engagement has been qualified.
This public website is not intended to collect information directly from clinical-trial participants or patients.
4. How we use personal information
We may use personal information to:
- Respond to questions and enquiries.
- Schedule and conduct consultations.
- Assess whether a proposed engagement is within our scope.
- Prepare proposals, statements of work and engagement documentation.
- Deliver requested consulting services.
- Communicate about an existing or potential engagement.
- Administer our business, records and professional relationships.
- Maintain the security and functionality of the website.
- Meet legal, regulatory, accounting and professional obligations.
- Investigate and respond to suspected misuse, security concerns or privacy incidents.
- Improve our services and website using aggregated or non-identifying information.
We will not use personal information for a materially different purpose without consent or another lawful basis.
5. Consent and communications
By voluntarily providing personal information, you consent to its collection, use and disclosure for the purposes explained at the time of collection and in this policy.
You may withdraw consent, subject to legal or contractual restrictions and reasonable notice. Withdrawal may affect our ability to respond to an enquiry or provide a requested service.
We will not send promotional electronic messages unless we have consent or another lawful basis to do so. Where required, promotional messages will provide a way to unsubscribe.
6. Service providers and information processed outside Quebec
We may use service providers to support scheduling, website hosting, email, document management, form processing, information security and business administration.
The current consultation-booking link uses Calendly. General and protocol-review intake services may later be provided through Tally, Typeform or another clearly identified provider once configured.
A service provider may process or store information outside Quebec or outside Canada. When appropriate, we assess the nature of the information, the destination and the service provider’s protections before using the service.
Third-party services are also governed by their own privacy policies and terms.
7. AI-assisted work
TrialCraft uses structured AI-assisted methods in some consulting workflows. AI assists with activities such as evidence gathering, synthesis and structured analysis; expert review and human accountability remain central to the final deliverable.
The public website does not automatically submit enquiry information to a generative-AI service merely because a visitor contacts us.
Where a client engagement involves AI-assisted processing of client information, the permitted information, purpose, safeguards, confidentiality requirements and any applicable restrictions will be addressed through the engagement scope, contract or data-processing arrangements.
Clients should not provide participant-identifying information, personal health information or confidential clinical materials for AI-assisted processing unless the use has been expressly authorized and appropriate safeguards have been established.
8. Disclosure of personal information
We may disclose personal information:
- To service providers that perform functions on our behalf.
- To professional advisers such as legal, accounting, information-security or insurance advisers when reasonably necessary.
- When required or authorized by law, court order or a competent authority.
- To investigate suspected fraud, misuse, security threats or unlawful activity.
- In connection with a proposed business restructuring, financing, sale or transfer, subject to appropriate confidentiality protections.
- With your consent or at your direction.
We do not sell personal information.
9. Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to maintain appropriate business and professional records, and to satisfy legal, regulatory, tax, insurance or contractual requirements.
When personal information is no longer required, we will securely destroy it or anonymize it where appropriate and legally permitted.
10. Security
We use administrative, technical and physical safeguards appropriate to the nature and sensitivity of the information in our custody.
No method of transmission or storage is completely secure. Visitors should therefore avoid sending sensitive, participant-identifying or confidential clinical information through the public website or ordinary email.
If a privacy or security incident creates a risk requiring notification under applicable law, we will take the steps required by law.
11. Cookies, local storage and similar technologies
The current website may use local browser storage to remember a visitor’s language selection.
TrialCraft does not intentionally use advertising cookies, behavioural-advertising tools or cross-site marketing trackers on the current website.
The website uses externally hosted fonts and may rely on hosting infrastructure that records standard technical logs.
If our use of cookies, analytics or similar technologies materially changes, this policy and any required consent mechanism will be updated.
12. Access, correction and other privacy rights
Subject to applicable law, you may request:
- Confirmation of whether we hold personal information about you.
- Access to personal information we hold about you.
- Correction of inaccurate or incomplete information.
- Information about how your personal information has been used or disclosed.
- Withdrawal of consent where applicable.
- Deletion or cessation of dissemination where a legal right applies.
We may need to verify your identity before responding. Certain legal exceptions may limit a request.
Requests may be sent to consult@trialcraft.co.
You may also contact the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada where applicable.
13. Children and minors
The website and services are intended for business and professional audiences. They are not directed to children, and we do not knowingly seek personal information from children through the website.
14. Third-party websites
The website may link to third-party services or websites. TrialCraft does not control their privacy, security or content practices. Review the privacy policy and terms of any third-party service before providing information.
15. Changes to this policy
We may update this Privacy Policy to reflect legal, operational or technological changes.
The effective date at the top of the policy indicates when the current version became effective. Material changes will be communicated in an appropriate manner.
16. Language
This policy is available in English and French. Both versions are intended to communicate the same principles. Please contact us if you identify a discrepancy or require clarification.