What happens to your information.
Last updated November 1, 2026.
Who we are
Enrollmentum is operated by Illuminare Solutions LLC, a Florida limited liability company registered in 2019. We run patient recruitment for clinical trials on behalf of research sponsors and study sites. Contact us at hello@enrollmentum.com.
We hold two kinds of information, and they are handled differently. Business inquiries come from a sponsor, a research site or another company that contacts Enrollmentum. Study leads come from people who answer a study ad. The rest of this page covers each in turn.
Business inquiries and this website
This website has no forms, no accounts and no advertising trackers. It does not ask you for personal information. Cloudflare serves the site and counts visits with Cloudflare Web Analytics, which does not use cookies.
When a sponsor or a site writes to hello@enrollmentum.com, we receive what you put in the email: usually a name, a work email address, a company and the details of the study. We use it to answer you and to plan the work. Our email service holds it. It goes to no one else.
We keep a business inquiry for as long as we need it to answer you and to carry out any work we do together. Ask us to delete it and we do, unless a contract or a law says we must keep it. Please do not put patient information in an email.
Study leads: if you answer one of our ads
Facebook and Instagram are often the first places we run a study’s ads, and the only places when the budget is small. We run ads on any platform that makes sense for the study. This is the path a lead takes from a Meta lead form. Another platform or a pre-screen page follows the same steps and the same rules.
- You complete a form. You fill in a Meta lead form or a pre-screen page with your contact details and a few pre-screen questions.
- Meta sends it to us. Meta sends a signed notification to our lead-delivery system. We check the signature before we do anything else, then read the lead from Meta.
- We receive your details in one covered place. The lead-delivery system is a dedicated account at Amazon Web Services that is covered by a Business Associate Agreement. If a notification cannot be processed, we read your lead again from Meta.
- The study team receives your lead. That account emails your details to the study team’s mailbox. When a study’s sponsor or site uses its own lead service, the account also sends your details there, and only there, with a record of what you agreed to on the form and when. Before anything is sent, we check that you have not asked us to stop contacting you. If that check cannot run, nothing is sent.
- The study team contacts you. When a study uses our participant follow-up and you ticked the optional box on the form that allows automated texts, the first contact is a text from the same covered account. It asks the study’s IRB-approved questions word for word, and a person on the study team answers anything outside them. Reply STOP to any text to stop them. The study site decides whether you are eligible. We do not.
Who handles a study lead
| Company | What it does |
|---|---|
| The advertising platform | Shows the ad and the lead form, and holds what the person submits under its own privacy policy. For Meta, the full form answers stay in its Leads Center for 90 days. We send nothing about the person back to the platform. |
| Cloudflare | Serves this website and counts visits with Cloudflare Web Analytics, which does not use cookies. Meta lead-form notifications do not pass through Cloudflare: Meta sends them straight to our Amazon Web Services account, so Cloudflare does not receive or keep a lead’s name, email, phone number, ZIP code or form answers. Cloudflare has not signed a Business Associate Agreement with us. |
| Amazon Web Services | Holds contact details in a dedicated AWS account under a Business Associate Agreement. Every AWS service that handles a lead there is on AWS’s list of HIPAA-eligible services. Amazon SES sends the lead alerts to the study team from that account. When a study uses our participant follow-up, its texts are sent from the same account. |
Security and HIPAA
Study lead details are held in a dedicated Amazon Web Services account covered by a Business Associate Agreement, and every AWS service that handles a lead there is on AWS’s list of HIPAA-eligible services. Our AWS organization has opted out of AWS storing or using the content its AI services process for us to improve those services. Meta sends lead notifications directly to that account. The pre-screen page runs no advertising or tracking code. Cloudflare, which has no such agreement with us, serves this website and does not receive lead details from Meta.
The practices behind this are on the security page. Enrollmentum does not hold a security certification such as SOC 2 or ISO 27001 today. If your team needs our written answers to a vendor questionnaire, write to hello@enrollmentum.com.
How long we keep a study lead
If you answered a Meta lead form, every copy we control (the lead email to the study team and the copy in Meta’s Leads Center) is deleted 90 days after you answer, and we ask any sponsor or site lead service that received your details to delete them on the same schedule.
If you answered one of our pre-screen pages and do not enroll, we delete your contact details and answers 12 months after you answer, in the AWS account. If you join the future-studies list, the details on it are kept until you ask to leave it. Your other answers keep the limits above.
If you enroll, the study contract sets how long records are kept. Backups roll off within three months, so a deletion is complete in the backups at most three months after we run it.
If you ask to hear about future studies
The future-studies list belongs to Enrollmentum, which is operated by Illuminare Solutions LLC. We keep it, we secure it in our own covered AWS account, and we are responsible for it. That responsibility stays with us: it is not passed to a sponsor, a study site or any other company.
You join the list only by ticking an optional box on a study form that asks whether we may contact you about future research studies. The box is never ticked for you, and you do not need to tick it to take part in the study you asked about.
If you tick it, we add these details to the list:
- Your name, phone number, email address and ZIP code.
- Who the studies would be for: you, or your child.
- That person’s birth month and year, where the form asks for it. We never keep the full date of birth. The age is worked out when a study is matched, so it stays correct over time.
- That person’s sex, only if the form asks for it.
- How and when you prefer to be contacted, and your preferred language, only if the form asks and you answer.
- The study you answered, its condition area, and the page or form where you joined.
- The date you joined and the wording you agreed to.
When a parent or guardian joins for a child, the list holds the child’s birth month and year and the parent’s or guardian’s own name and contact details. It does not hold the child’s name. Answers to a study’s pre-screen questions never go on the list.
The list is encrypted. We use it only to tell you about studies you may qualify for. We never sell it and never give it to a sponsor. You can leave at any time: reply STOP to any text or write to hello@enrollmentum.com, and we delete your details from the list. We keep a coded record of the opt-out, made from your phone number or email address, so that you are not added again. A STOP covers every choice you made on earlier forms. If you later fill out a new form and tick the box again, that new choice counts.
Your choices
Email hello@enrollmentum.com to ask what we hold about you, as a business contact or as a study lead, or to have it deleted. We delete it unless a law or a study contract requires us to keep it. In that case we tell you so, in writing, and tell you when it ends.
We do not sell personal information, and we do not use it for anything other than recruiting for the study you answered or, if you join the future-studies list, telling you about other studies.