Effective date: 20 August 2026
Nobody reads privacy policies. So here's the whole thing in ten lines, and the full version below it.
The short version
Nobody reads privacy policies. So here's the whole thing in ten lines, and the full version below it.
You own your data. If you engage Seven Health as a consulting client, you are the controller of any personal data in the materials you share with us (protocols, feasibility documents, sponsor or site contacts), and we act as your processor for that engagement.
We collect the minimum. Names, emails, company details, and whatever you tell us through our contact form or newsletter signup. Plus the standard technical data every website collects: IP address, browser, pages viewed.
We don't sell your data, to anyone, ever.
We use a small number of vendors to run this site: hosting, email delivery, analytics, and payment processing where applicable. Each one only gets what it needs to do its job.
No third-party advertising cookies on this site. We may run basic analytics to understand traffic.
You can get your data out, or ask us to delete it, any time, by emailing us.
Questions: privacy@7.cr. Real humans, not a form.
The Long Version
Who's who: controller vs. processor
This trips people up, so it goes first.
| Situation | Who decides what happens to the data | Who we are |
|---|---|---|
| You browse 7.cr, subscribe to our newsletter, or submit our contact form | You (or your organization) | Controller |
| You engage Seven Health for consulting services and share sponsor, site, or study data with us | You (or your organization) | Processor. We handle that data on your instructions, under the terms of our engagement agreement |
What it means: if you're contacting us as a prospective client or reader, we're the controller of that data. If you're a consulting client and we're handling data on your behalf as part of an engagement (feasibility responses, pitch materials, sponsor communications), you remain the controller and we process it under your direction.
What we collect
Data you give us
- Contact and newsletter data: name, email address, company or organization name, and the content of any message you send us.
- Consulting engagement data: whatever business, clinical trial, or site-related information you or your organization shares with us in the course of an engagement (this may include names and contact details of sponsor, CRO, or site personnel).
- Billing data, where applicable: company name, billing address, and payment details, processed by our payment provider. We do not store full card details ourselves.
Data we collect automatically
- IP address, browser and device type, referring URL, pages viewed, and timestamps.
- Basic site analytics tied to an anonymized or aggregated identifier, not to your name or email.
What we deliberately don't do
- We don't collect special-category data (health data about individuals, for example) through the website itself. If health-related information appears in materials shared with us as part of a consulting engagement, that data belongs to and is controlled by our client, and it is handled under the terms of that engagement.
- We don't knowingly collect data from anyone under 18.
- We don't build advertising profiles from site visitor or client data, and we don't sell or rent personal data.
What it means: for casual visitors, we hold what's needed to reply to you or send the newsletter you asked for. For consulting clients, the substantive data is yours, held and processed on your behalf.
Why we're allowed to (legal bases, GDPR Art. 6)
| What we do | Legal basis |
|---|---|
| Respond to contact form submissions and inquiries | Contract / legitimate interests |
| Send newsletter content to subscribers | Consent |
| Run consulting engagements | Contract |
| Keep the site secure, prevent abuse | Legitimate interests |
| Basic site analytics | Legitimate interests (opt-out available) |
| Respond to legal demands | Legal obligation |
Vendors and subprocessors
We use a small number of third parties to run this site and our business: website hosting, email/newsletter delivery, and analytics. Each has been selected to process only what it needs, and none are used to build advertising profiles. If you'd like the current list of vendors we use, email privacy@7.cr and we'll provide it.
Apps and integrations
If you connect with us through a third-party platform (for example, LinkedIn, or a scheduling link), that platform's own privacy policy governs the data you share with it. We only receive what you choose to send us through that channel.
Health information
Seven Health is a business development and clinical research consulting practice, not a covered healthcare provider. We do not knowingly collect protected health information (PHI) about individual patients through this website. If health-related information appears in materials shared with us during a client engagement (for example, site feasibility documents or study protocols), that information is handled under the terms of the relevant engagement agreement and any applicable confidentiality or data protection terms, and remains under the client's control.
How long we keep it
| Data | Retention |
|---|---|
| Contact form and newsletter data | Until you unsubscribe or ask us to delete it |
| Consulting engagement data | For the duration of the engagement and as required by the engagement agreement, applicable law, or professional record-keeping obligations |
| Invoices and billing records | As long as tax law requires (typically 7-10 years) |
| Site analytics | Aggregated or anonymized; retained only as long as useful for understanding site traffic |
Where your data goes
Seven Health operates from Canada. Some of our vendors may process data in other countries, including the United States. Where personal data is transferred outside of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses. If you have questions about where specific data is processed, contact privacy@7.cr.
Cookies
This site uses only what's needed to run properly: basic functionality cookies and, where enabled, privacy-conscious analytics. We do not use third-party advertising cookies. We honour Global Privacy Control and Do Not Track signals where technically supported.
Your rights
Wherever you live, you can ask us to: access your data, correct it, delete it, export it, restrict or object to processing, or withdraw consent (for example, unsubscribing from the newsletter). If you're in California, you can also ask what we collect and opt out of sale or sharing; we don't sell or share personal data, so there's nothing to opt out of. If you're in the EEA or UK, you can complain to your data protection authority.
Email privacy@7.cr and we'll respond within 30 days. We may ask you to verify your identity first.
Security
We use reasonable technical and organizational measures to protect the data we hold, including encryption in transit, access controls, and vendor due diligence. No system is perfectly secure. If something goes wrong, we'll notify affected individuals without unnecessary delay, consistent with applicable law.
Changes to this policy
We'll post the updated version here and update the effective date. For material changes, such as a new category of data use, we'll make reasonable efforts to notify subscribers and clients before the change takes effect.
Contact
Seven Health
4373 Halifax St, Burnaby, BC, Canada
Phone: +1-833-644-0000
Email: privacy@7.cr