Last updated: October 2026
1. Who we are
This website, innovexhealthcro.com, is operated by InnovexHealth CRO Pvt Ltd, a company incorporated in Pakistan under the name Innovex Health CRO Private Limited, with its registered office at Plot 117, Street 8, Industrial Area, I-10/3, Islamabad, Pakistan (“InnovexHealth”, “we”, “us”, “our”). We decide how and why the personal information described in this policy is used, and we are responsible for it.
2. What this policy covers
This policy explains how we collect, use, share and protect personal information about people who visit our website, send us an enquiry, do business with us, supply services to us, or apply to work with us.
It does not cover personal information about participants in clinical studies. That information is collected and processed under the study protocol, the informed consent form signed by each participant, the approval of the relevant ethics committees and the applicable law. Participants receive their own information about how their data is used, and should contact the study site or the sponsor named in their consent form with any question.
3. Information we collect
Information you give us. When you complete our enquiry form, email us or meet us, we collect your name, job title, organisation, country, email address, telephone number and the content of your message. If you apply for a role, we collect the information in your CV and covering letter. If you or your organisation supplies services to us, we collect the contact and qualification details needed to assess and manage that relationship.
Information collected automatically. When you visit the website, our servers record technical information such as your IP address, browser type, device type, the pages you view and the date and time of your visit. Our use of cookies is described in our Cookie Policy.
Information from other sources. We may obtain business contact details from public professional sources, such as your organisation's website or a professional networking profile, or from a person who refers you to us.
We do not ask for, and ask you not to send us, health information or other sensitive personal information through this website.
4. How we use your information, and why
| Purpose | Information used | Basis |
|---|---|---|
| Replying to your enquiry and preparing proposals you request | Contact details, message content | Steps you ask us to take before entering a contract; our legitimate interest in responding to business enquiries |
| Entering into and performing contracts with clients and suppliers | Contact details, contract and billing details | Performance of a contract |
| Assessing suppliers, laboratories and investigators | Contact and qualification details | Our legal and regulatory obligations; our legitimate interest in working with qualified partners |
| Considering job applications | CV, covering letter, interview notes | Steps you ask us to take before entering a contract |
| Operating, securing and improving the website | Technical information | Our legitimate interest in a secure, working website |
| Sending news about our services | Name, email address | Your consent, which you can withdraw at any time |
| Meeting legal, regulatory and audit requirements | Any of the above, as needed | Compliance with legal obligations |
We do not use your personal information for automated decision-making that has legal or similarly significant effects on you.
5. Who we share it with
We do not sell or rent personal information. We share it only with:
- service providers who host our website, email and IT systems, who act on our instructions and are bound by confidentiality and security obligations;
- our professional advisers, such as lawyers, auditors and insurers, where needed;
- regulators, courts, law enforcement or other public authorities, where the law requires us to or to protect our legal rights;
- a buyer or successor of all or part of our business, under equivalent protections; and
- anyone else, with your consent.
6. International transfers
Our service providers may store or process information outside Pakistan. Where we transfer personal information to another country, we take reasonable steps, including contractual protections, to make sure it remains protected to the standard described in this policy.
7. How long we keep it
We keep personal information only as long as we need it for the purposes above:
- enquiries that do not lead to an engagement: up to 24 months after our last contact;
- client and supplier records: for the duration of the relationship and afterwards for the period required by law, regulatory obligations and our contracts;
- unsuccessful job applications: up to 12 months, unless you agree to a longer period;
- website server logs: up to 12 months.
When information is no longer needed, we delete it or make it anonymous.
8. How we protect it
We use technical and organisational measures appropriate to the risk, including encrypted connections to this website, access controls limited to staff who need the information, confidentiality agreements, and documented procedures for information security. No method of transmission over the internet is completely secure, so we cannot guarantee the security of information you send us by email or through the website.
9. Your rights
Subject to the law that applies to you, you may ask us to:
- confirm whether we hold personal information about you and give you a copy;
- correct information that is inaccurate or incomplete;
- delete your information;
- restrict or object to our use of your information, including for direct marketing;
- transfer information you gave us to another organisation, where technically feasible; and
- withdraw consent you have given, without affecting the lawfulness of what we did before.
To make a request, write to info@innovexhealthcro.com. We may need to confirm your identity first. We will respond within one month, or tell you if we need longer and why. If you are in the European Union or the United Kingdom, you also have the right to complain to your local data protection authority.
10. Applicable law
We handle personal information in accordance with the laws of Pakistan, including the Prevention of Electronic Crimes Act 2016, and, where they apply to you, the General Data Protection Regulation of the European Union and the United Kingdom.
11. Children
This website is intended for professionals and is not directed at anyone under 18. We do not knowingly collect personal information from children through it.
12. Cookies
Our use of cookies is explained in our Cookie Policy.
13. Other websites
Our website links to websites we do not control. This policy does not apply to them, and we encourage you to read their privacy policies.
14. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. Where a change is significant, we will draw attention to it on the website.
15. Contact us
Privacy enquiries: info@innovexhealthcro.com
Post: Privacy, InnovexHealth CRO Pvt Ltd, Plot 117, Street 8, Industrial Area, I-10/3, Islamabad, Pakistan