Legal information
Privacy Notice
This notice explains how T Shaped Consulting, LLC handles personal information when people visit the CVCC Community website, request membership through SurveyMonkey, participate in the community or exercise their privacy rights.
1. Who we are
The Cardiovascular & Critical Care Community (“CVCC Community”, “we”, “us” or “our”) is administered and managed by T Shaped Consulting, LLC, the controller of personal information collected for community enrollment, administration and research invitations.
Website: tshapedconsulting.com
Privacy email: tomr@tshapedconsulting.com
2. Information we collect
Depending on your interaction, we may collect identity and contact details; professional details such as role, specialty, qualifications, experience and clinical setting; research interests and availability; communication and consent preferences; participation and honorarium administration information; and website/device information through Google Analytics only where consent is given.
The enrollment form is hosted by SurveyMonkey in the United States. When you follow the enrollment link, you leave this website. SurveyMonkey processes form information on our behalf and may process limited information for its own stated purposes under its notices.
Please do not provide patient-identifiable information or confidential patient records.
3. How and why we use information
We use information to assess membership requests, maintain member profiles, match relevant research opportunities, send requested communications, administer participation and honoraria, answer questions and privacy requests, secure our systems, meet legal obligations and—only with consent—understand website use through Google Analytics.
4. Legal bases
Depending on the activity, we rely on steps taken at your request or performance of our arrangement with you; legitimate interests in operating a secure and relevant professional research community; consent for optional analytics and communications or disclosures that legally require it; and compliance with legal obligations. You may withdraw consent at any time and may object where we rely on legitimate interests.
5. Sharing
We may share information with SurveyMonkey; GoDaddy and infrastructure providers; Google where analytics consent is given; providers supporting communications, research, scheduling, payments, IT or professional advice; research sponsors under the terms disclosed for a specific study; and authorities where legally required. We do not disclose your identity or profile to a sponsor without an appropriate lawful basis and any permission described to you. Findings are ordinarily aggregate or de-identified.
6. International transfers
T Shaped Consulting, LLC, GoDaddy and the selected SurveyMonkey account process or store information in the United States. Google and other providers may also process information outside the UK or EEA. Where required, we use an applicable safeguard such as an adequacy decision, Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum, or another lawful mechanism.
7. Retention
We retain personal information only as long as needed for the purposes described and applicable legal, accounting, research, dispute-resolution and security requirements. Unless a longer period is required by law or needed to establish, exercise or defend legal claims, our standard retention periods are:
- incomplete, withdrawn or unsuccessful membership requests: up to 90 days after the request is closed or abandoned;
- active member profiles and communication preferences: for the duration of membership;
- inactive member profiles: deleted or anonymized after 24 months of inactivity;
- research participation, eligibility and consent records: up to six years after the relevant activity ends or consent is withdrawn;
- honorarium, payment and related tax or accounting records: up to seven years, or longer where required by law;
- privacy requests, complaints and material correspondence: up to six years after the matter is closed; and
- Google Analytics event-level data: up to two months, while analytics cookies may remain on a device for up to two years unless deleted sooner.
At the end of the applicable period, we delete or anonymize the information securely.
8. Cookies and analytics
This site uses necessary browser storage to remember privacy choices. Google Analytics 4 is not loaded until you accept analytics. You can reject analytics without losing access and change your choice through “Cookie settings”. See the Cookie Policy. SurveyMonkey uses its own technology and controls on its separate website.
9. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction or portability; object to processing based on legitimate interests; withdraw consent; and complain to the supervisory authority where you live or work or where an infringement may have occurred. UK individuals may contact the Information Commissioner’s Office.
To exercise a right, email tomr@tshapedconsulting.com. We may verify your identity.
10. Security, automated decisions and children
We use reasonable technical and organizational safeguards, but no internet service is completely secure. We do not use solely automated decision-making that produces legal or similarly significant effects. Any technology-assisted membership or research matching is subject to human review. The community is for qualified professionals aged 18 or older and is not directed to children.
11. Changes and contact
We may update this notice and will revise the date above. Questions may be sent to tomr@tshapedconsulting.com.