Privacy Policy
Last updated: 1 January 2026
Template notice. This policy is a starting template, not legal advice. Have it reviewed against the data-protection law that applies to you (for example the UAE PDPL, and the GDPR if you serve EU/UK clients) before publishing. Complete the items in [square brackets].
Contents
1.Who we are
Cohira Clinical Research ("we", "us") is the controller of the personal data described in this policy. We are registered in [the United Arab Emirates] as [legal entity name / licence number]. For any privacy question, contact info@cohira.org.
2.Data we collect
Information you give us
- When you use our contact form: your name, email address, role, the service you're interested in, and your message.
- When you email or message us (including via WhatsApp): the contents of that correspondence and your contact details.
- Information you share while we scope or deliver a project (see clause 6).
Information collected automatically
- Basic technical data such as your IP address and browser type, logged by our hosting provider [hosting provider] for security and reliability.
- When pages load fonts from Google Fonts, your IP address may be processed by Google to serve those fonts.
We do not currently use advertising or analytics tracking cookies. We do not knowingly collect special-category data through the website.
3.How we use it
- To respond to your enquiry and discuss your project.
- To provide, manage, and invoice the Services you engage us for.
- To keep records and meet legal, accounting, and tax obligations.
- To maintain the security and proper functioning of the website.
We do not sell your personal data, and we do not send marketing without your consent.
4.Legal basis
Depending on the law that applies to you, we rely on: your consent (e.g. when you contact us); the performance of a contract (delivering Services); our legitimate interests (running and securing our business); and legal obligation (records and tax). You may withdraw consent at any time.
5.Sharing & processors
We share personal data only with service providers that help us operate, under appropriate safeguards:
- Website hosting, [hosting provider].
- Contact-form processing. FormSubmit (formsubmit.co), which transmits your contact-form submission to our email.
- Email & messaging, our email provider and WhatsApp, for correspondence.
- Web fonts. Google Fonts, which may process your IP to deliver fonts.
- Professional advisers, accountants or lawyers, where necessary.
We may also disclose data where required by law. We do not otherwise share your data with third parties.
6.Research & client data
If you engage us, you may share research material such as datasets, manuscripts, and study documents. We treat this as confidential under our Terms & Conditions and use it only to deliver your project. You are responsible for anonymising or pseudonymising patient and personal data before sharing it with us, and for ensuring the necessary ethics approvals and consents are in place. Where we process personal data on your behalf, we will agree appropriate data-processing terms with you.
7.Retention
We keep enquiry data for as long as needed to respond and for a reasonable follow-up period, and engagement and financial records for as long as required by law (typically [5] years). Project files are retained per our agreement with you and then deleted or returned on request, unless we must keep them by law.
8.Security
We use reasonable technical and organisational measures to protect personal data, including access controls and secure transfer. No method of transmission or storage is completely secure, but we work to protect your information and to limit who can access it.
9.Your rights
Subject to the law that applies to you, you may have the right to access, correct, delete, or port your data, to object to or restrict certain processing, and to withdraw consent. To exercise any right, email info@cohira.org; we will respond within the time the law allows. You may also complain to your local data-protection authority.
10.Cookies
The website uses only what is necessary to function and does not set advertising or analytics cookies. If we add analytics in future, we will update this policy and seek consent where required.
11.International transfers
Some of our providers may process data outside your country. Where data is transferred internationally, we rely on appropriate safeguards (such as standard contractual clauses or an adequacy decision) as required by applicable law.
12.Changes & contact
We may update this policy from time to time; the "last updated" date above shows the current version. For any privacy question or request, contact info@cohira.org or use the contact page.