Last Updated: October 17, 2023
Veeva Systems is committed to maintaining a privacy program that is designed around trust, transparency and respecting your rights in your personal information. This privacy notice describes how we process personal information, including what information we collect, why we collect it, how we use it, how we may share it, and your controls over your personal information.
This privacy notice applies to the personal information we process as part of studyportal.veeva.com (“Study Portal”), a Veeva website.
When you visit Study Portal, we collect the following types of information:
|Category of Information||Description|
|Device & Usage||We collect device and usage information such as cookie records, browser type, internet service provider (ISP), device IP address, operating systems and versions, advertising identifiers, device motion data, web beacons and clickstream data.|
|Registration||When you create an account, we collect information that you provide through that process, such as your name, email address, and username and password.|
|Account Verification and Management||If you log into an account you’ve created with us, we collect your IP address, username and password, and other related information we need to verify you are the account owner, before allowing you to access that account. |
If you use Study Portal as your password manager, we also collect your username, password and related information, such as the study name, sponsor and clinical trial number, to help you manage and connect with your studies.
When you visit Study Portal, we collect information directly from you and indirectly from you by observing your actions on our website or from your devices. This includes collecting information using analytic tools and other tracking technologies.
When you create an account with Study Portal, we collect your information directly from you, as you engage with Study Portal and otherwise interact with us on the website.
When you visit Study Portal, we collect your information to provide you with relevant information and services, to help us understand how you interact with us, to help us to ensure Study Portal is working as designed and to provide, maintain, improve and enhance Study Portal. This includes processing personal information as necessary to analyze, improve and optimize the delivery and use of Study Portal and its security.
When you create an account with us, we collect your information to:
We may also use your information:
You will not be subject to decisions based on automated data processing without your prior consent.
We may share personal information internally and with our subsidiaries, service providers and other third parties for the following purposes:
We will not sell your personal information or share it with third parties for cross-contextual behavioral advertising. When we share your personal information, we will ensure it is used in a manner consistent with this privacy notice.
We collect information using cookies, pixel tags, or similar technologies. Cookies are small text files containing a string of alphanumeric characters. We may use both session cookies and persistent cookies. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to Study Portal. We do not use third party cookies – cookies that are not controlled by us.
Please review your web browser’s “Help” file to learn the proper way to modify your cookie settings. Please note that if you delete or choose not to accept cookies from Study Portal, you may not be able to utilize the features of Study Portal to their fullest potential.
Study Portal may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. Please be aware that this privacy notice does not apply to your activities on these third-party services or any information you disclose to these third parties. We encourage you to read their privacy policies before providing any information to them.
We maintain a privacy and security program with technical, physical and organizational safeguards designed to protect against the wrongful access, use or disclosure of personal information, and to provide a level of security which we believe is appropriate to the risk our processing of your personal information poses posed to your privacy. This includes but is not limited to the use of industry standard encryption for data in transit and at rest. We regularly review and modify our security measures to reflect changing technology, laws and regulations, risk, industry and security practices and other business needs.
Study Portal is not designed for or directed at children, and we do not knowingly collect, maintain or use personal information from children under 13 years of age. If you believe we may have mistakenly collected the personal information of a minor without appropriate consent, please contact us at email@example.com and we will investigate and promptly address the issue.
You can access, edit, delete and otherwise manage your personal information that is maintained within your Study Portal account by using the features available when you log in to your account. If you wish to permanently delete your Study Portal account, you can do so by contacting firstname.lastname@example.org. Deletion of your Study Portal account will not result in permanent deletion of your VeevaID – your authentication mechanism (username and password) to Study Portal. This is because you may use your VeevaID to access other Veeva solutions and services. If you wish to permanently delete your VeevaID, notify email@example.com.
We respond to requests of individuals to exercise their data protection rights in accordance with applicable laws, which may vary depending on where you live. We may ask that you verify your identity to facilitate the processing of your request in a secure manner.
If you wish to exercise your privacy rights, email firstname.lastname@example.org. In order to process your request, we require certain information about you. We will only use this information to verify your identity and facilitate the processing of your request. There may be times when we are unable to fulfill your request; in those cases, we will let you know why we are unable to fulfill your request, subject to applicable law.
We are a global company. As a global company, we may transfer your personal information to various locations around the world for the purposes described in this privacy notice. We apply the protections and limitations described in this privacy notice regardless of where we process your personal information. We also comply with various legal frameworks that enable the cross-border transfer of personal information. Where required, we rely on transfer mechanisms that lawfully support data transfer to locations that are not considered “adequate” by the appropriate data protection authority, which may include standard contractual clauses, obtaining your consent or another recognized transfer mechanism.
Veeva Systems Inc. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF (UK Extension), and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. We have certified to the U.S. Department of Commerce that we adhere to the (i) EU-U.S. DPF Principles with regard to the processing of personal information received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension, and (ii) Swiss-U.S. DPF Principles with regard to the processing of personal information received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy notice and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the DPF program and to view our certification visit the Data Privacy Framework Program website.
If you have questions or concerns regarding our handling of your personal information under the DPF or about our privacy program generally, please contact us at email@example.com. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request. If neither process resolves your question or concern, you may be able to pursue binding arbitration; visit the Data Privacy Framework Program website for more information about how to submit a complaint.
The Federal Trade Commission has jurisdiction over our compliance with the EU-U.S. DPF, the UK Extension, and the Swiss-U.S. DPF. We remain responsible for personal information that we transfer to third parties for processing on our behalf. We may be required to disclose personal information that we handle under the DPF in response to lawful requests by public authorities, including to meet national security or law enforcement requirements, as described in more detail by our Government Access Request Policy.
We will retain your information until it is no longer necessary to provide our services, until you request its deletion as described in the in the section above entitled “Your Controls” or as otherwise required by law.
To exercise your rights, email firstname.lastname@example.org. If you have any questions about our privacy practices, you can contact our Chief Privacy Officer at:
Veeva Systems Inc.
4280 Hacienda Drive
Pleasanton, CA 94588 USA
If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.
From time-to-time, we may change this privacy notice to reflect changing technology, laws, regulations, risk, industry and security practices and other business needs. The most up-to-date version will be found on this website; we post its effective date at the top. If we make a material update, we may notify you by posting notice on our website or by other means, consistent with applicable law.
The legal basis for processing internet protocol addresses is our legitimate interest in providing the Study Portal website. The legal basis for the processing of other personal data is your consent.
If you are a resident of California, Colorado, Connecticut, Utah or Virginia you have the following rights, subject to certain limitations. These rights include:
If you wish to exercise your rights, email email@example.com. You may also exercise your rights by calling us (free of charge) at 1 (877) 807-3230.
* Not available to Utah residents under the Utah Consumer Privacy Act.
** Available to California residents under California Consumer Privacy Act.
The following additional notice applies to residents of California.
The categories of personal information we collect include:
We collect this information to support the purposes described in the section of this privacy notice entitled “Why We Collect Information and How We Use It.” We collect your personal information from the sources described under the “How We Collect Information” section of this privacy notice. We disclose the information from the above listed categories for the purposes and to the categories of recipients described in the section of this privacy notice entitled “Sharing Your Information.”
We do not use or disclose sensitive personal information for any purpose other than those specified in Section 7027(m) of the CCPA regulations.