Privacy
Policy &
Your Data.
CovidRxExchange is committed to protecting your privacy. We will never sell, rent, or trade your personal information. Your data is collected only to advance our nonprofit mission.
This Privacy Policy applies to all personal information collected by
CovidRxExchange through the CRX website, event and webinar registration forms,
newsletter subscriptions, email and contact forms, governance onboarding processes,
and program enrollment applications.
It applies to website visitors, event registrants, newsletter subscribers,
healthcare professional members, Governance Faculty, Academic Council members,
volunteers, and all individuals who interact with CRX in any capacity.
2026
Scope & Who
This Covers
This Privacy Policy applies to all personal information collected by CovidRxExchange across all its channels, programs, and services.
Website & Domains
The CRX website (www.covidrxexchange.com) and any successor domains. Includes all pages, forms, and services accessible through those domains.
Events & Webinars
Event and webinar registration forms, newsletter and communications subscriptions, email, contact forms, and direct outreach with CRX representatives.
Governance & Programs
Governance Executive and volunteer onboarding processes, program enrollment and certification applications, and Academic Council participation.
Who This Applies To
Website visitors, event and webinar registrants, newsletter subscribers, healthcare professional members, Governance Faculty, volunteers, and all individuals who interact with CRX in any capacity.
Information
We Collect
Website Visitors
When you browse the CRX website, certain technical data is collected automatically: IP address, browser type, device, pages visited, time on page, and referring URLs. This data is used for platform maintenance, security, and analytics only.
Event & Webinar Registrants
When you register for a CRX event or webinar, we collect: name, email address, mobile number (optional), selected webinar, professional category, specialty, practice status, current role, and a voluntary field for your interest in the event. All collection is on a lawful basis.
Newsletter Subscribers
If you subscribe to CRX newsletters — whether through an event registration form or a standalone subscription form — we collect your name and email address for the sole purpose of sending you CRX communications. This is always based on your explicit, freely given consent. You may unsubscribe at any time.
Healthcare-Adjacent Information
CRX does not collect personal health records or patient data. Clinical case discussions at events are fully anonymized. Any clinical information shared in a CRX forum is treated with HIPAA-equivalent standards of care.
Data Collected at
Event Registration
| Data Category | Purpose & Legal Basis |
|---|---|
| First Name & Last Name | Identifying the registrant; issuing participation certificates; maintaining attendance records. Legal basis: Contract performance. |
| Email Address | Sending registration confirmation, webinar access link, session reminders, and post-event materials. Also used for newsletter communications where separately consented. Legal basis: Contract performance / Consent. |
| Mobile Number | Optional direct contact for event-related communications where expressly consented. Never shared with third parties or used for marketing without consent. Legal basis: Consent. |
| Selected Webinar | Processing registration for the correct session; managing capacity; sending the appropriate access link. Legal basis: Contract performance. |
| Category | Classifying the registrant's professional domain (e.g., Medical, Allied Health) to ensure appropriate session allocation and content relevance. Legal basis: Legitimate interest. |
| Professional Stage | Understanding career level (e.g., Physician Advisor / Independent Expert) to tailor content and measure program reach across career stages. Legal basis: Legitimate interest. |
| Specialty | Matching registrant to specialty-relevant content (e.g., Cardiology). Used for aggregate impact reporting across medical disciplines. Legal basis: Legitimate interest. |
| Practice Status | Confirming current clinical engagement (e.g., Actively Practicing) to contextualise how educational content may be applied. Legal basis: Legitimate interest. |
| Current Role | Understanding organisational function (e.g., Medical Leadership) for program design and aggregate reporting. Legal basis: Legitimate interest. |
| Why Are You Interested? | Voluntary free-text field used solely to improve content relevance. Never published or shared without explicit permission. Legal basis: Consent. |
| Professional Consent Declaration | The checkbox verifies eligibility and provides lawful basis for post-event communications. Required for registration. Legal basis: Consent. |
| Technical Data (IP, device, browser) | Platform delivery, access troubleshooting, and security monitoring. Legal basis: Legitimate interest. |
How We Use
Your Information
We use your information only for purposes directly related to our nonprofit mission. We will not use your information for any purpose materially different from those below without prior notice and, where required, your fresh consent.
Processing event and webinar registrations, delivering session access links, sending registration confirmations, reminders, and post-event materials.
Issuing CME/CPD participation certificates where applicable. Sending newsletters and organizational updates — only where you have explicitly consented.
Managing Governance Faculty and volunteer onboarding. Improving Platform content, functionality, and user experience based on aggregate analytics.
Measuring organizational impact across programs and geographies. Fulfilling legal, regulatory, and nonprofit reporting obligations.
CovidRxExchange does not sell, rent, trade, or share your personal
information with any third party for commercial purposes. Period.
Limited and controlled disclosure occurs only with service providers
operating under binding data processing agreements, for governance
directory publication with your explicit consent, where required by
applicable law, or in any organizational transition with appropriate notice.
Newsletter
Communications
CRX newsletters are sent only to individuals who have explicitly consented. Consent to receive newsletters is entirely separate from and independent of consent to register for an event.
Consent Basis
Newsletters are sent only to individuals who have explicitly consented via a clearly labelled, unticked checkbox on the event registration form or a dedicated newsletter subscription form.
What You Will Receive
Upcoming event and webinar announcements, clinical education resources and research summaries, organizational updates, program launches, governance news, and public health awareness campaigns. Never pharmaceutical advertising.
Unsubscribing
You may unsubscribe at any time by clicking the unsubscribe link in any email, or by contacting charmi.brimon@raanangroupus.com. Unsubscribing does not affect your event registration.
Subscriber Data Retention
Your name and email are retained only for as long as you remain subscribed. Upon unsubscription, your details are removed from the active mailing list. A suppression record (email only) may be retained to prevent inadvertent re-addition.
Recording of Events
& Webinars
CRX events and webinars are routinely recorded. By registering and attending, you consent to the possibility of being recorded. You may disable your camera at any time without affecting your participation.
Recordings are used for educational archiving and post-event access for registered participants. They are made available publicly on the CRX website, social media, or partner channels as part of our educational outreach mission.
Recordings may be included in CRX publications, promotional materials, and grant applications demonstrating organizational impact. Audio contributions during live Q&A segments may still be included even if video is disabled.
If you have specific concerns about recording, please contact us before the event at charmi.brimon@raanangroupus.com. We are committed to accommodating reasonable requests while preserving the educational value of our sessions.
Information
Sharing
CovidRxExchange does not sell, rent, trade, or share your personal information with any third party for commercial purposes. Period. Limited and controlled disclosure occurs only in these specific circumstances:
IT infrastructure, email delivery, and webinar platform providers who operate under binding data processing agreements with CRX. No commercial use of your data is permitted.
With your explicit consent, your professional profile may be published on the CRX website as part of the Governance Faculty directory. Consent is required and may be withdrawn at any time.
Where required by applicable law, regulation, or court order. CRX will notify you of any such disclosure to the extent permitted by law.
In any merger or dissolution, personal data would be handled consistently with this Policy with appropriate notice to you and equivalent privacy protections maintained.
We have never sold, rented, or traded your personal data. We never will.
This is not a compliance statement — it is a founding commitment of
CovidRxExchange and is enshrined in the Ethical Independence Covenant
that governs every aspect of our operation.
CRX newsletters will never contain pharmaceutical advertising,
commercial promotions, or third-party marketing of any kind.
All content adheres to the Ethical Independence Covenant.
Your Rights
Over Your Data
You have the following rights over your personal information at any time. To exercise any right, email charmi.brimon@raanangroupus.com. We will respond to verified requests within 30 days.
Access
Request a copy of all information CRX holds about you. We will provide this in a clear, readable format within 30 days of a verified request.
Correction
Request correction of inaccurate or incomplete information held about you. We will update your records promptly upon verification of the corrected details.
Deletion & Portability
Request deletion of your information (subject to legal retention obligations). You may also request your data in a structured, machine-readable format for portability to another service.
Opt-Out & Withdrawal
Unsubscribe from any communication, including newsletters, at any time. You may also withdraw consent for any optional use of your data. Withdrawal does not affect the lawfulness of prior processing.
Retention, Security
& Other Policies
Data Retention
Active event registrants are retained for the duration of the event and a reasonable period thereafter for certificate issuance. Newsletter subscribers are retained while subscribed, then removed upon unsubscription. Governance records are retained for the duration of active participation and as required by US nonprofit law.
Data Security
CRX implements industry-standard security measures including SSL/TLS encrypted data transmission, access controls limiting data access to authorized personnel, regular security monitoring, and contractual security obligations on all third-party processors. Please report any suspected security incident to charmi.brimon@raanangroupus.com immediately.
Cookies
The CRX website uses cookies and similar tracking technologies to enhance user experience and analyze Platform usage. EU visitors are presented with explicit cookie consent options in compliance with GDPR and the ePrivacy Directive. Our Cookie Policy provides full details of cookies used, their purpose, and how to manage or opt out.
Children
The Platform is directed at adults and healthcare professionals. CRX does not knowingly collect information from individuals under 18. If we become aware of data collected from a minor, it will be deleted promptly. Event registration requires participants to be 18 years of age or older.
GDPR & International
Compliance
EU / EEA (GDPR): Explicit, unbundled consent for all optional data uses. Rights to access, rectify, delete, and port data. Data minimization at point of collection. Data Processing Agreements with all platform providers.
UK (UK GDPR): Same standards as EU GDPR fully applied. Participants may complain to the Information Commissioner's Office (ICO) if they believe their rights have not been respected.
United States (HIPAA-Adjacent): No patient PHI collected. Clinical content is fully anonymized. HIPAA-equivalent care is applied to all healthcare-adjacent data. CRX operates as a nonprofit under US law with all applicable reporting obligations met.
India (PDPB / IT Act): Consent documented for cross-border data transfers. Content complies with NMC educational guidelines. Australia & New Zealand: Privacy Act 1988 (Cth) and NZ Privacy Act 2020 principles applied. All other jurisdictions: CRX's general standards meet or exceed GDPR as a global baseline.
Questions &
Answers
Still have questions about your privacy or how we use your data? Reach out and our team will respond promptly.
No. CovidRxExchange will never sell, rent, or trade your personal information. This is a founding commitment of the organization and is enshrined in the Ethical Independence Covenant. Your data is collected only to advance our nonprofit mission.
Yes, at any time. Click the unsubscribe link in any CRX email or contact charmi.brimon@raanangroupus.com. Unsubscribing from newsletters does not affect your event registration or any other CRX services. We process unsubscribe requests promptly.
Yes, CRX events are routinely recorded for educational archiving, post-event access, public distribution on CRX channels, and inclusion in publications and grant applications. You may disable your camera at any time. If you have specific concerns, contact us before the event.
Email charmi.brimon@raanangroupus.com with your request. We respond to verified requests within 30 days. You have the right to access, correct, delete, or receive a portable copy of your data, as well as withdraw consent for any optional use at any time.
Yes. CRX applies GDPR as its global baseline standard across all 23+ countries in which it operates. EU and UK participants have full GDPR rights. CRX collects data minimally, uses explicit consent for optional uses, and maintains Data Processing Agreements with all service providers.
Contact &
Privacy Enquiries
For any privacy-related questions, access requests, or concerns, reach out directly to our administrative team. We respond to verified requests within 30 days.
Administrative Assistant, CovidRxExchange
charmi.brimon@raanangroupus.com
www.covidrxexchange.com
Last reviewed: April 6, 2026.
We may update this Privacy Policy periodically. When material changes occur, we will update the "Last Updated" date and notify registered users where appropriate. Continued use of the Platform constitutes acceptance of the updated Policy.
"We are here to institutionalize hope."
— Dr. Shashank Heda, Founder & CEO, CovidRxExchange
This Privacy Policy was last reviewed and approved: April 6, 2026.
CovidRxExchange is a 501(c)(3) nonprofit operating since April 2020,
free from pharmaceutical and governmental influence.
Still Have
Questions?
If you have questions about this Privacy Policy or how CovidRxExchange handles your personal data — our team will respond with the same rigor we apply to clinical evidence.