This Privacy Policy was last updated on 01/08/2025
The Group (we, us, our) is comprised of Global Site Holdings Pty Limited ACN 668 977 062 trading as Momentum Clinical Research ABN 51 668 977 062 and its related entities, including but not limited to:
The Group is committed to protecting your privacy and complying with its obligations under the Privacy Act 2020 (New Zealand) (Privacy Act), the Information Privacy Principles (IPPs) and other privacy laws that may apply in respect of collecting Personal Information including but not limited to the Health Information Privacy Code 2020.
This Privacy Policy applies to all directors, employees and contractors of the Group, as well as any third parties who process Personal Information on behalf of the Group. It applies to:
This Privacy Policy is subject to change at our discretion, and we will update it from time to time. The current version will always be available on our website at https://momentumclinicalresearch.com/ or any other website of the Group (Website). If we change this Privacy Policy in any material way, we will post a notice on our Website (as relevant) along with the updated Privacy Policy. We may also contact you via your contact information we hold on file, for example by email or some other equivalent measure.
In some circumstances, you may belong to more than one of these groups, and multiple sections of this Privacy Policy will then apply to you.
Personal Information is any information about an identifiable individual. We only collect Personal Information that is necessary for our purposes in connection with a function or activity of the Group, or otherwise as permitted by law.
The kinds of Personal Information we collect about you and the purpose for its collection depends on our relationship with you, and we limit the information we collect to what is reasonably necessary for one or more of our functions or activities. Generally, we will collect your name, commentary or opinion about you, and other information relevant to providing you with the information, and services you or someone on your behalf are seeking.
If you are a participant, depending on the stage of activities you are engaging with, we will collect other Personal Information. At a high level, this includes:
If you are a facilitator, we will collect your employment contact information and information about your role, as well as any relevant declarations of interest;
If you are a supplier, we will collect your contact details, ABN (for sole traders and partnerships), business name, bank account details (for payment of your invoices), and information about your role.
If you are a visitor, we will collect your email address, information about your use of our Websites and the device you are using (including numbers that identify your device, IP address, geographic location of your IP address and device where that is relevant to the services and information we are providing, cookie information, and user preferences). You may choose to enable or disable information you share with us via the Platforms in your browser or device settings. Disabling the sharing of some information may affect your ability to use certain features of the Websites, and your visitor experience generally.
If you are an applicant, depending on your potential or actual position with us, we will collect your Personal Information contained within an application and CV/resume, employment history, personal information derived from a reference, personal information derived from an interview, personal information derived through testing (including psychometric or aptitude testing, as applicable), licences and other certificates and qualifications, and information included in a passport, birth certificate, visa or other documentation demonstrating your right to work in New Zealand.
We support your ability to make decisions about the Personal Information you provide to us, however if you choose not to provide us with the information requested, or it’s incomplete or inaccurate, we may not be able to provide you with the information, goods, and services you are seeking. If you are an applicant, refusal to provide Personal Information may mean we are unable to process your application.
We will only collect your Personal Information in a lawful and fair manner, and we will not unreasonably intrude on your privacy. We will generally collect Personal Information directly from you when you interact with us, such as in person, by email, by phone, by enquiry or feedback form, or via our Websites, social media channels, interviews (via any method), any of our standard forms (including application forms), contract negotiation, our employment and engagement application process, our surveys (where applicable), or any other means when you provide us with your Personal Information.
We may also need to collect Personal Information about you from third parties from time to time where it is necessary for us to do so and it is unreasonable or impractical to collect directly from you, where you have consented to us doing so, or where we are otherwise required to or authorised to by law. Those third parties include:
If you provide us with Personal Information about someone else, you must ensure that you are authorised to disclose that information to us and that, without us taking any further steps required by applicable privacy laws, we may collect, store, use and disclose such information for the purposes described in this Privacy Policy. Where we request you to do so, you must assist us with any requests by the individual to access or update the Personal Information you have collected from them and provided to us.
Purpose. We will generally collect, hold, use, and disclose your Personal Information if it is reasonably necessary for a purpose connected with a function or activity of the Group and the collection of the information is necessary for that purpose, which includes:
We may de-identify and aggregate Personal Information about you and your use of our services for research and reporting purposes, and to improve the quality of our services. After we destroy Personal Information about you, we may retain de-identified and anonymised information (that can no longer be associated with you) and may continue to use this de-identified data indefinitely without further notice to you.
We may use or disclose Personal Information for another purpose so long as the other purpose for which the Personal Information is to be used is directly related to the purpose in connection with which the information was obtained.
We will not use or disclose Personal Information without taking any steps that are, in the circumstances, reasonable to ensure that the information is accurate, up-to-date, complete, relevant and not misleading.
We generally disclose your Personal Information for the purposes for which it was collected (set out above). We may disclose Personal Information about you to:
If you are a participant, in addition to 5.2(a-f): we will disclose de-identified and aggregated information we collect during a clinical trial or study to the sponsor, researcher, institute, or facilitator who engaged us to conduct the clinical trial or study.
We may expand or reduce our business, and this may involve the sale and/or transfer of control of all or part of our business. Personal Information, where it is relevant to any part of the business for sale and/or transfer, may be disclosed to a proposed new owner or newly controlling entity for their due diligence purposes, and upon completion of a sale or transfer, may be transferred to the new owner, newly controlling party or a new related body corporate.
We will only send you direct marketing communications and information about our services via mail or email with your consent (which may be implied in some circumstances) or as permitted by law.
You may opt-out of receiving marketing communications from us by contacting us at the details below or by using the opt-out facilities provided in our communications.
We do not provide your Personal Information to other organisations for the purposes of their direct marketing and will not sell, rent, or lease our customer lists to third parties. Our practices in regard to our emails are designed to be compliant with anti-spam laws, including the Unsolicited Electronic Messages Act (New Zealand) 2007. If you believe you have received mail in violation of this law or any other anti-spam law, please contact us using the contact information in this Privacy Policy.
We are assisted by a variety of external service providers to operate our business and to provide you or someone else on your behalf with the information and services sought. Some of these service providers may be located overseas, and they include RealTime Software Solutions, LLC located in the USA, Ripple Science Corporation located in the USA, Best Practice Software Pty Ltd located in Australia and New Zealand, and Microsoft located in the USA. Some of our related bodies corporate are located overseas, and we may disclose Personal Information to those overseas related bodies corporate as described in this Privacy Policy.
We take reasonable steps to ensure these service providers have appropriate security for your Personal Information, use it only for the purposes for which it was collected and otherwise apply comparable safeguards to the Privacy Act.
We store your Personal Information in different ways, including in paper and electronic form. We take all reasonable measures to ensure your Personal Information is stored on secure servers (which may be based in New Zealand or overseas) in a manner that reasonably protects it from interference, misuse and loss and from unauthorised access, modification or disclosure and other misuse, including electronic and physical security measures, including:
We maintain and observe a data management plan which contemplates the risks associated with the collection, storage, and analysis of data, including the retention and destruction of such materials. When we no longer have a lawful use for your Personal Information for the purpose for which we collected it, we will take reasonable steps to destroy your Personal Information (except for when we are required to retain particular types of information to satisfy our statutory obligations). However, most of the Personal Information is or will be stored and kept by us for a minimum of seven years (unless legislation requires us to destroy it sooner).
Where we collect health information from you in the course of providing the services, and such health information contains a linkage of data sets or identifiers with your consent, we will take security measures to remove the identifiers once linkage is completed.
Despite the reasonable steps we take to secure your Personal Information, if you provide any Personal Information to us via our Websites (including email) or if we provide Personal Information to you by such means, the privacy, security and integrity of your Personal Information cannot be guaranteed during its transmission unless we have indicated beforehand that a particular transaction or transmission of information will be protected (for example, by encryption).
Our Platforms and online services (including email messages we send you) may contain links to other websites, online services, and resources maintained by a third party (Other Services). This Privacy Policy does not apply to such Other Services and the Group is not responsible for those Other Services. If you access such Other Services, you do so at your own risk and we make no representations or warranties regarding third parties’ privacy practices.
We encourage you to read the privacy collection statements and privacy policies of every Other Service you use. When we do link to an Other Service, this does not automatically imply that the Group endorses that Other Service and their contents.
You may access the Personal Information we hold about you, subject to certain exceptions. If you wish to access your Personal Information, please contact us via the below:
There are no charges for requesting access to or the correction of your Personal Information, however we reserve our rights to charge you any reasonable administration fees associated with your request. We will notify you in advance of any applicable fees.
We endeavour to respond to those requests as soon as reasonably practicable, and in any case, no later than within 20 working days. If we do not agree that the information is incorrect, we do not need to correct it. However, when requesting a correction of their Personal Information, or at any later time, an individual can provide us with a statement of the correction sought and request that the statement be attached to the information if the correction sought is not granted. A request of this kind must be responded to as soon as reasonably practicable. Where we are asked to attach a statement of correction, we must take reasonable steps to ensure that the statement of correction is attached to the information in a manner that ensures that it will always be read with the information.
Where we correct information on request, or attach a statement of correction on request, we need to, so far as is reasonably practicable, inform every other person that we have disclosed the information to.
In order to protect the confidentiality of your Personal Information, details of your information will only ever be passed on to you where we are satisfied that the information relates to you. Accordingly, we may request documentation from you which confirms your identity before passing on any Personal Information which relates to you.
If you believe the information we hold about you is incomplete, not up to date, or is inaccurate, please advise us as soon as practicable. We will take reasonable steps to correct the information if we agree that it is incomplete, out of date, or inaccurate. We will strive to process any request within 20 working days.
Complaints about our Privacy Policy or the way we handle your Personal Information should first be directed to us at the details set out above.
We will investigate and attempt to resolve your complaint in accordance with the Privacy Act. If you are not satisfied with the outcome of this process, then you may contact the Office of the Privacy Commissioner, New Zealand. To lodge a complaint, visit the ‘Making a complaint to the Privacy Commissioner’ section of the Privacy Commissioner’s website, located at https://www.privacy.org.nz/your-rights/making-a-complaint-to-the-privacy-commissioner/, to obtain the relevant complaint forms, or contact the Privacy Commissioner’s office.
If you require any further information or have any queries regarding our Privacy Policy, please contact us at the details set out above.
Should you wish to read more information on the Privacy Act, we recommend that you visit the website of the Office of the Privacy Commissioner’s website at www.privacy.org.nz.