Privacy Policy – Eximia Research Tracking App

Eximia Research Tracking

Last Updated: April 26, 2026

1. Introduction

Eximia Research (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you interact with our clinical research programs through Facebook Lead Ads.

2. Information We Collect

When you submit a form through our Facebook Lead Ads, we may collect:

  • Personal information (name, email address, phone number)
  • Location information (city, state, ZIP code)
  • Health-related information you voluntarily provide
  • Facebook Click ID (fbc) and Facebook Browser ID (fbp) for advertising attribution purposes
  • Lead metadata (Facebook Page ID, form ID, and lead submission time)

3. How We Use Your Information

We use the information collected to:

  • Contact you about clinical research studies you expressed interest in
  • Determine your eligibility for research participation
  • Improve our advertising and outreach effectiveness
  • Comply with legal and regulatory requirements

4. Data Sharing

We do not sell your personal information. Your data is processed through our secure servers and then transmitted to:

  • Clinical research sites conducting the studies you expressed interest in
  • Our patient management system (Clinical Conductor) via a secure, encrypted API connection
  • Facebook (via Conversions API) for advertising optimization and performance tracking
  • Our hosting provider for server infrastructure only (no access to lead content)

5. Facebook Integration

We use Facebook’s Lead Ads and Conversions API to receive your submitted information. We access this data using Facebook’s leads_retrieval permission via a secure webhook, and send conversion events back to Facebook to improve ad targeting and track advertising performance. Initial data collection occurs on Facebook’s platform and is subject to Facebook’s Data Policy. Once transmitted to our systems, we take full responsibility for its protection.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including health-related data, against unauthorized access, alteration, disclosure, or destruction. This includes using industry-standard encryption for data in transit and at rest, restricting access to authorized personnel only, and ensuring all data synced with Clinical Conductor uses secure authentication protocols.

7. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your information
  • Opt-out of future communications

To exercise any of these rights, email [email protected] with your request. For data deletion, please use “Data Deletion Request” in the subject line. We will confirm receipt and complete your request within 30 days.

8. Data Retention

We retain your information for up to 7 years to comply with FDA 21 CFR Part 312 and Institutional Review Board (IRB) record-keeping requirements for clinical research, or until you request deletion, whichever comes first. If a longer retention period is required by law, we will comply with those requirements.

9. Children’s Privacy

Our services are not directed to individuals under 18. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last Updated” date.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Eximia Research
Email: [email protected]
Website: https://eximiaresearch.com

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). Please contact us for more information about exercising these rights.