CO Trials (cotrials.com) is an official initiative endorsed by the Consulate of Colombia in San Francisco. We treat every party's information — sponsors, institutions, investigators, and patients — with the care that clinical research demands.
This page explains what this website collects, and the legal frameworks that govern clinical-trial and patient data in Colombia and internationally.
01What this website collects
When you use our contact form, we collect the details you choose to share:
- Your name, organization, and work email;
- The message and any program details you send us.
Form submissions are processed through Netlify Forms. We use privacy-respecting analytics to understand aggregate traffic (such as page views and referrers); this does not identify you personally. We do not sell your information, and we do not use it for advertising.
02How we use your information
We use what you send only to respond to your inquiry and to coordinate introductions to institutions, investigators, and partners across Colombia. We reply within one business day, and we are glad to put a confidentiality agreement (CDA) in place before anything sensitive is exchanged.
03Patient & clinical-trial data in Colombia
Colombia has a mature, constitutionally grounded data-protection regime. The right to know, update, and correct one's personal data — Habeas Data — is protected by the Constitution and developed through statute.
- Law 1581 of 2012 (Ley Estatutaria 1581 de 2012) is the cornerstone of personal-data protection, setting the principles, rights, and obligations for anyone who collects or processes personal data in Colombia.
- Decree 1377 of 2013 regulates the law in practice — authorization, privacy notices, and the handling of databases.
- Health data is “sensitive data.” Its processing is prohibited unless the individual gives explicit, prior, informed authorization — the standard that governs patient data in any trial.
- The Superintendence of Industry and Commerce (SIC) is the national data-protection authority; it enforces the law and maintains the National Registry of Databases.
In clinical research, patient data is collected under informed consent and handled in de-identified or coded form, consistent with ICH Good Clinical Practice (ICH-GCP) and the ethical requirements overseen by INVIMA and institutional ethics committees.
04International standards
Programs run with our partners are structured to meet the standards sponsors already work to:
- U.S. HIPAA — protected health information is kept confidential and de-identified where required.
- EU GDPR — for European sponsors, transfers and processing are handled on a lawful basis with appropriate safeguards.
- ICH-GCP & FDA/EMA expectations — data integrity, audit trails, and source-document control across the study lifecycle.
05Your rights
Under Colombian law, you may ask to access, update, correct, or delete your personal data, and to withdraw consent or know how your data has been used. To exercise any of these rights regarding data this website holds, write to us at the address below. You also have the right to file a complaint with the SIC.
06Retention & security
We keep contact-form submissions only as long as needed to respond and to maintain a record of our correspondence, and we protect them with reasonable administrative and technical safeguards. Data tied to a specific engagement is governed by the agreements in place for that engagement.
07Contact us
For any privacy or data-protection question, or to exercise your rights, reach us through the contact form, or by email:
hello@cotrials.com · Contact form · cotrials.com