Our Commitment to Your Privacy

Lung Research Florida, operating as the Research Facility of Advanced Asthma Clinic ("we," "us," or "our"), is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or participate in our clinical research studies.

As a medical research facility, we are bound by both HIPAA (Health Insurance Portability and Accountability Act) regulations and Good Clinical Practice guidelines. We maintain the highest standards of privacy protection for all personal and health information entrusted to us.

Information We Collect

1. Personal Information

We may collect personal information that you voluntarily provide to us, including:

• Name, address, phone number, and email address
• Date of birth and demographic information
• Insurance information (if applicable)
• Emergency contact information
• Physician referral information

2. Health Information

For clinical trial participants and screening candidates, we collect:

• Medical history and current health status
• Medication lists and treatment history
• Laboratory test results and diagnostic imaging
• Clinical trial data and research outcomes
• Genetic information (only for specific studies with explicit consent)

3. Website Usage Information

When you visit our website, we automatically collect:

• IP address and browser type
• Pages visited and time spent on each page
• Referring website information
• Device and operating system information

How We Use Your Information

Clinical Research Purposes

• Determining eligibility for clinical trials
• Conducting approved clinical research studies
• Monitoring participant safety and treatment efficacy
• Complying with FDA and regulatory requirements
• Advancing medical knowledge through research publication (using de-identified data only)

Communication Purposes

• Responding to your inquiries and requests
• Scheduling appointments and study visits
• Providing important safety information
• Sending appointment reminders (with your consent)
• Informing you about new research opportunities (with your consent)

Administrative Purposes

• Maintaining accurate medical and research records
• Processing compensation for study participation
• Complying with legal and regulatory obligations
• Improving our services and website functionality

HIPAA Compliance & Protected Health Information

As a healthcare provider and research facility, we are required to comply with HIPAA regulations. This means:

• Minimum Necessary Standard: We only access and use the minimum amount of health information necessary to accomplish our intended purpose
• Security Safeguards: We maintain physical, technical, and administrative safeguards to protect your health information
• Limited Access: Only authorized personnel with a legitimate need have access to your health information
• Business Associates: Any third parties who handle health information on our behalf must sign agreements to protect your privacy

Your HIPAA Rights

Under HIPAA, you have the right to:

• Request access to your medical records
• Request corrections to your health information
• Request restrictions on how we use or disclose your information
• Request confidential communications
• Receive an accounting of certain disclosures
• Receive a paper copy of our Notice of Privacy Practices

How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

With Your Consent

• With your referring physician (for collaborative care)
• With specialists involved in your care
• With family members you designate

For Research Purposes

• With study sponsors and regulatory agencies (FDA, IRB)
• With research monitors and auditors
• In scientific publications (using de-identified data only)
• With other researchers (only de-identified or aggregated data)

As Required by Law

• To comply with legal obligations or court orders
• To report adverse events to the FDA
• To respond to public health authorities
• To prevent serious threats to health or safety

Clinical Trial Participant Privacy

If you participate in our clinical trials, additional privacy protections apply:

Informed Consent Process

Before joining any study, you will receive detailed information about:

• What information will be collected
• How your information will be used
• Who will have access to your data
• How long your information will be retained
• Your right to withdraw from the study

Certificate of Confidentiality

Many of our studies are protected by a Certificate of Confidentiality from the National Institutes of Health, which provides additional privacy protections for research participants.

Data De-identification

When sharing research data, we remove all identifying information including:

• Names and contact information
• Specific dates (birth dates, visit dates)
• Geographic identifiers smaller than state level
• Any other information that could identify you

Data Security Measures

We implement comprehensive security measures to protect your information:

Physical Security

• Locked file cabinets for paper records
• Restricted access to clinical areas
• Security monitoring systems
• Secure disposal of sensitive documents

Technical Security

• Encrypted data transmission and storage
• Firewall and intrusion detection systems
• Regular security updates and patches
• Secure password requirements
• Automatic logoff from inactive sessions

Administrative Security

• Background checks for all staff
• HIPAA training for all employees
• Confidentiality agreements
• Limited access based on job responsibilities
• Regular privacy and security audits

Website Privacy Practices

Cookies and Tracking

Our website uses cookies to:

• Remember your preferences
• Analyze website traffic and usage patterns
• Improve website functionality
• Ensure website security

You can control cookie settings through your browser preferences. Disabling cookies may limit some website features.

Third-Party Services

We may use third-party services such as:

• Google Analytics (for website traffic analysis)
• reCAPTCHA (for form security)
• Map services (for location information)

These services have their own privacy policies governing their use of your information.

Email Communications

If you provide your email address:

• We will only use it for the purposes you authorized
• You can opt-out of non-essential communications at any time
• We will never share your email with third parties for marketing
• We use secure email practices for sensitive information

Data Retention Policies

Medical Records

We retain medical records in accordance with Florida state law and federal regulations:

• Adult medical records: Minimum of 7 years from last treatment
• Minor medical records: 7 years from age of majority (18)
• Research records: As required by study protocols and FDA regulations (typically 15-25 years)

Website Data

• Contact form submissions: 3 years
• Website analytics: 26 months
• Security logs: 1 year

Disposal Practices

When retention periods expire, we securely dispose of information through:

• HIPAA-compliant shredding for paper records
• Secure data wiping for electronic records
• Certificate of destruction for sensitive materials

Your Privacy Rights

Access and Control

You have the right to:

• Request copies of your personal information
• Correct inaccurate information
• Request deletion of certain information (subject to legal requirements)
• Opt-out of non-essential communications
• Withdraw from research participation at any time

California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

How to Exercise Your Rights

To exercise any of your privacy rights, please contact our Privacy Officer:

• Phone: 954-522-7226 x1
• Email:
• Mail: Privacy Officer, Lung Research Florida, 10059 NW 1st Court, Plantation, FL 33324

Children's Privacy

Our website is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13 through our website. If we discover that a child under 13 has provided us with personal information through our website, we will promptly delete such information.

For clinical research involving minors:

• Parental consent is required for participants under 18
• Additional privacy protections apply to pediatric research
• Assent from the minor participant may be required depending on age
• Parents/guardians have rights to access their child's information

International Visitors

Our website and services are intended for United States residents. If you are accessing our website from outside the United States:

• Your information will be transferred to and processed in the United States
• U.S. privacy laws may differ from those in your country
• By using our website, you consent to the transfer and processing of your information in the United States

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make changes:

• We will update the "Last Updated" date at the top of this policy
• For material changes, we will provide notice through our website or direct communication
• Continued use of our services after changes constitutes acceptance of the updated policy

Contact Us About Privacy

If you have questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact us:

Filing a Complaint

If you believe your privacy rights have been violated, you may file a complaint with:

• Our Privacy Officer using the contact information above
• The U.S. Department of Health and Human Services Office for Civil Rights

We will not retaliate against you for filing a complaint.

Acknowledgment

By using our website or services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.

For clinical trial participants, additional privacy protections and specific consent requirements will be explained during the informed consent process for each study.