Signed in as:
filler@godaddy.com
Centralized Human Research Protection Program (CHRPP)
Privacy Policy
Effective Date: Feb 1, 2026
The Centralized Human Research Protection Program (“CHRPP,” “we,” “us,” or “our”) is committed to protecting the privacy and security of personal information collected through CHRPP.net and related online services (collectively, the “Services”).
This Privacy Policy describes how we collect, use, disclose, and safeguard personal information, including information related to research oversight and compliance activities. By using the Services, you acknowledge and agree to the practices described in this Privacy Policy.
1. Scope and Definitions
Personal Information means information that identifies, relates to, describes, or can reasonably be linked to an identifiable individual.
Protected Health Information (PHI) has the meaning defined under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”).
De-identified or aggregated information that cannot reasonably identify an individual is not considered Personal Information.
2. Information We Collect
A. Information You Provide
We may collect Personal Information when you:
This information may include:
B. Research-Related Information
CHRPP may receive limited research-related information in connection with human research protection, oversight, compliance, or advisory services. Such information may include coded, limited, or identifiable health-related datadepending on the engagement.
CHRPP does not collect PHI through its public website unless explicitly required for a contracted service and protected by appropriate safeguards.
C. Information Collected Automatically
When you access the Services, we may automatically collect:
We use cookies and similar technologies to operate and improve the Services. You may manage cookie preferences through your browser settings.
3. How We Use Information
We use Personal Information for legitimate business and operational purposes, including to:
We do not sell Personal Information.
4. HIPAA-Related Disclosures
CHRPP is not a HIPAA Covered Entity. However, in certain engagements, CHRPP may act as a Business Associate or subcontractor to Covered Entities or sponsors.
When CHRPP receives PHI:
Where applicable, PHI handling is governed by Business Associate Agreements, research protocols, and informed consent documents, which supersede this Privacy Policy in case of conflict.
5. How We Share Information
We may disclose Personal Information:
Service Providers
To vendors performing services on our behalf (e.g., hosting, IT support, analytics), subject to confidentiality and data protection obligations.
Legal and Regulatory Requirements
When required by law, regulation, court order, or governmental authority.
Business Transfers
In connection with a merger, acquisition, reorganization, or asset sale.
With Consent
When you explicitly authorize disclosure.
6. Data Security
CHRPP implements reasonable and appropriate safeguards designed to protect Personal Information from unauthorized access, disclosure, alteration, or destruction. Despite these efforts, no system can be guaranteed to be completely secure.
7. Data Retention
Personal Information is retained only as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, and meet contractual or regulatory requirements.
8. GDPR (European Economic Area) Rights
If you are located in the European Economic Area, United Kingdom, or Switzerland, you may have the right to:
CHRPP processes Personal Information based on legitimate interests, contractual necessity, legal obligations, or consent, as applicable.
Requests may be submitted using the contact information below.
9. CCPA / CPRA (California) Rights
If you are a California resident, you have the right to:
CHRPP does not sell or share Personal Information for cross-context behavioral advertising.
Requests may be made by contacting us as described below.
10. Children’s Privacy
The Services are not intended for individuals under 13, and CHRPP does not knowingly collect Personal Information from children.
11. Third-Party Websites
The Services may contain links to third-party sites. CHRPP is not responsible for the privacy practices or content of those sites.
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Updates will be posted with a revised effective date. Continued use of the Services constitutes acceptance of the revised Policy.
13. Contact Information
For questions or privacy requests, contact:
Centralized Human Research Protection Program (CHRPP)
Website: https://www.chrpp.net
Email: molly@chrpp.net or marianna@chrpp.net
Centralized Human Research Protection Program (CHRPP)