Privacy Policy

Alpha CR Solutions ("we", "us", "our") is committed to protecting the privacy and personal information of everyone who interacts with us, including website visitors, clients, training participants, and business contacts. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and the rights you have in relation to it.

We process personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) of South Africa, and any other applicable data protection laws.

1. Who We Are

Alpha CR Solutions is a clinical research consultancy based in Johannesburg, Gauteng, South Africa. We provide regulatory and ethics consultancy, study start-up and site support, clinical monitoring (CRA) services, GCP training, CRA training and simulations, and clinical research software.

For the purposes of POPIA, Alpha CR Solutions is the "responsible party" for the personal information described in this policy.

2. Information We Collect

We collect personal information that you provide to us directly, as well as limited information collected automatically when you use our website.

Information you provide

• Contact and enquiry details: your name, job title, company or organisation, country, email address, telephone number and the content of any message you send us through our contact form or by email.
• Training and course information: where you enrol in our GCP training or CRA simulations, we may collect your name, contact details, employer, role, payment confirmation, and records of your course progress, assessments and certification.
• Business and service information: information exchanged in the course of providing our services to clients, sponsors and sites.

Information collected automatically

• Technical and usage data: when you visit our website, our hosting and DNS providers may automatically collect limited technical information such as your IP address, browser type, device information, and pages visited, for security and performance purposes.

3. How We Use Your Information

We use personal information for the following purposes:

• To respond to your enquiries and communicate with you about our services;
• To provide the services, training or software you have requested;
• To administer course enrolment, payment confirmation, access credentials and certification;
• To manage our relationship with clients, sponsors, sites and business contacts;
• To maintain the security, integrity and performance of our website and systems;
• To comply with our legal, regulatory and professional obligations.

4. Lawful Basis for Processing

We process personal information where it is necessary to respond to your request, to perform a contract or service with you, to comply with a legal obligation, for our legitimate business interests, or where you have given your consent. Where we rely on consent, you may withdraw it at any time by contacting us.

5. How We Share Information

We do not sell your personal information. We may share it only in the following circumstances:

• Service providers: with trusted third parties who help us operate our website and deliver our services — for example our website hosting provider (Firebase / Google Cloud), DNS and email routing provider (Cloudflare), and contact form provider (Formspree). These providers process information on our behalf and are required to protect it.
• Legal and regulatory: where required by law, regulation, court order, or a regulatory or ethics authority.
• Professional advisors: with our advisors where necessary for the running of our business.

Some of these providers may process information outside South Africa. Where personal information is transferred across borders, we take reasonable steps to ensure it remains protected in accordance with POPIA.

6. How We Protect Your Information

We take appropriate, reasonable technical and organisational measures to safeguard personal information against loss, unauthorised access, disclosure or misuse. This includes secure hosting, encrypted connections (HTTPS), access controls, and limiting access to personal information to those who need it. While we strive to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. How Long We Keep Information

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, regulatory, accounting or reporting requirements. Training and certification records may be retained for longer where required to support compliance and audit obligations. When personal information is no longer required, we securely delete or anonymise it.

8. Your Rights

Under POPIA, you have the right to:

• Request access to the personal information we hold about you;
• Request that we correct or update inaccurate or incomplete information;
• Request that we delete or destroy your personal information in certain circumstances;
• Object to the processing of your personal information in certain circumstances;
• Withdraw consent where processing is based on consent;
• Lodge a complaint with the Information Regulator (South Africa).

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding.

9. Cookies & Website Analytics

Our website uses only the essential technical functions needed to operate and remain secure. If we introduce analytics or cookies in future that are not strictly necessary, we will update this policy and, where required, request your consent.

10. Third-Party Links

Our website may contain links to external websites, including learning management systems and professional resources. We are not responsible for the privacy practices or content of those websites. We encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on this page, with the "Last updated" date revised accordingly.

12. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise your rights, please contact us:

• Alpha CR Solutions
• Email: info@alphacrsolutions.co.za
• Location: Johannesburg, Gauteng, South Africa

You also have the right to lodge a complaint with the Information Regulator of South Africa. Details are available at inforegulator.org.za.