Privacy Notice

Last Updated: June 16th, 2026

This Privacy Notice provides information on the collection, use, and sharing (collectively referred to as ‘processing’ or ‘process’) of personal information by Synnovation Therapeutics, Inc. (“Synnovation Therapeutics”, “we” or “us”) in connection with your use of Synnovation Therapeutics’s websites, including all subdomains, and social media pages that link to this Privacy Notice, your interactions with Synnovation Therapeutics during in-person meetings or at Synnovation Therapeutics events, and in the context of other marketing activities (collectively, “Services”). This Privacy Notice also explains the privacy rights you have in relation to these processing activities.

This Privacy Notice informs you about how Synnovation Therapeutics collects, uses, and shares your personal information in connection with the Services. It is not a contract and does not, in itself, create a legal basis for our processing of your personal information; where consent or another legal basis is required, we will obtain or rely on it separately, as described in the “Legal Basis for Processing” section below.

The version of this Privacy Notice in effect at the time you use the Services applies to our processing activities. We may update this Privacy Notice from time to time; when we do, we will update the “Last Updated” date at the top and, where the change is material, provide additional notice (for example, by email or an on-site banner) as required by applicable law. We encourage you to review this Privacy Notice periodically to stay informed of how we process your personal information and of the rights and choices available to you.

If you have entered into a separate agreement with us that relates to our Services or relationship with us, that separate agreement shall control, and only those terms within this Privacy Notice that do not conflict with such separate agreement shall apply. Similarly, this Privacy Notice does not affect any separate privacy notices that we have provided to you, such as for example, in connection with clinical studies that we sponsor. Finally, this Privacy Notice does not cover data or information we receive from third parties, and it does not cover third-party products and services.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously, so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:‍

Contact details including your name, address, phone number, and email address.
Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry.
Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.

We do not intentionally collect health information through our marketing websites. If health information is collected in other contexts (such as clinical studies), it is governed by separate, specific privacy notices and consent forms.

Aggregate Information Collected

Aggregate information is information that does not identify you. Aggregate information may be collected when you use our Services, independent of any information you voluntarily enter. Additionally, we may use one or more processes to anonymize information that contains personal information such that only aggregate information remains. We may collect, use, store, and transfer aggregate information without restriction.

Personal Information Sources

We may collect personal information from the following sources:

Directly from you including when you visit or use the Services, communicate with us, or otherwise provide us with your personal information;
Automatically through the Services including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies;
From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;

Information We Automatically Collect

When you use our Services, we automatically receive and collect information, including personal information, from your device. This includes the following:

Information about your device, such as the operating system, hardware, system version, Internet Protocol (IP) address, device ID, and device language.
Your country and general location, time zone, and language used.
The specific actions that you take when you use our Services, including but not limited to the pages and screens that you view or visit and how you interact with our Services.
The time, frequency, connection type, and duration of your use of our Services.
Identifiers associated with cookies or other technologies that may uniquely identify your device or browser (as further described below).
Pages you visited before or after navigating to our Services.

COOKIES AND ANALYTICS

Like most websites, our Services may use “cookies.” Cookies are alphanumeric identifiers that we transfer to your computer’s hard drive through your web browser to help us identify you when you come to our Services.

Our Services may use cookies for reasons including, but not limited to:

• Analyze our web traffic using an analytics package.

• Test content on the Services.

• Store information about your preferences.

• Recognize when you return to the Services.

Overall, cookies help us provide you with a better website and better Services by enabling us to monitor which pages, functions, and features you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This setting may prevent you from taking full advantage of the Services.

We may use third parties, such as Google Analytics or other analytics providers, which collect data, to analyze traffic to our website. To disable Google Analytics, please download the browser add-on for the deactivation of Google Analytics provided by Google at http://tools.google.com/dlpage/gaoptout?hl=en. To learn more about privacy and Google Analytics, please consult the Google Analytics overview provided by Google at http://www.google.com/intl/en/analytics/privacyoverview.html. You may find additional information about Google Analytics at http://www.google.com/policies/privacy/partners/. You have the option to opt out of Google’s use of cookies by changing your settings through Google Ad Settings via the Google advertising opt-out page.

We may use social media and advertising cookies and similar technologies, including the LinkedIn Insight Tag, to help us understand how visitors interact with our Services, measure the effectiveness of our advertising campaigns, and deliver relevant advertisements on third‑party platforms such as LinkedIn. The LinkedIn Insight Tag is a piece of code on our website that collects data about your visit, including your IP address, browser information, pages viewed, and actions taken on our website. This information is used to track conversions, retarget website visitors, and gain insights about members who view our LinkedIn ads. LinkedIn may act as an independent controller with respect to certain data collected through the Insight Tag. For more information about LinkedIn’s privacy practices, please visit LinkedIn’s Privacy Policy at https://www.linkedin.com/legal/privacy-policy. You may opt out of LinkedIn’s use of your data for ad targeting by adjusting your LinkedIn advertising preferences at https://www.linkedin.com/psettings/advertising.

We may also use cookies, pixels, beacons, or other web tracking technologies to track the amount of time spent on our Services or social media and whether or not certain content, such as a video, was viewed. We may work with a third party to collect and process this information for us, based on our instructions and in compliance with this Privacy Notice.

If you are visiting our Services from the EEA, then we do not set non-essential cookies unless you accept all cookies on the “cookie banner” via our cookie management tool that launches when you land on our Services.

Although we do our best to honor the privacy preferences of our visitors, we are not able to respond to Do Not Track signals from your browser.

How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

Provide, Tailor, and Improve the Services. We use your personal information to provide you with and better tailor and improve the Services.
Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you online advertisements for products or services on the Services or other websites.
Research and Analytics. We may use personal information to analyze activity on our Services, conduct research, analytics, and monitor and analyze trends and usage of our Services.
Security and Fraud Prevention. We use your personal information to detect, investigate or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and to secure our Services.
Communicating with You. We use your personal information to communicate with you and respond to your requests.
Legal Reasons. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.

Legal Basis for Processing

If you are located in the European Economic Area ("EEA"), the United Kingdom, or Switzerland, we process your personal information based on the following legal grounds, as applicable under the General Data Protection Regulation ("GDPR") and other applicable data protection laws:

Contractual Necessity: We process personal information where necessary for the performance of a contract with you.
Legitimate Interests: We process personal information where necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and interests. Our legitimate interests include improving our Services, preventing fraud, ensuring security, and conducting marketing activities.
Consent: Where required by law, we process your personal information based on your consent. You have the right to withdraw your consent at any time by contacting us using the details provided below or by using any opt-out mechanism we provide. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Legal Obligation: We process personal information where necessary to comply with a legal obligation to which we are subject, such as tax, accounting, or regulatory requirements.

How We Share Personal Information

We do not sell personal information. In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Notice. Such circumstances may include:

With vendors and other third parties who perform services on our behalf (e.g. IT management, data analytics, support, and cloud storage).
With business and marketing partners to provide marketing services and advertise to you. Depending on where you reside, you may have a right to direct us not to share information about you to show you targeted advertisements and marketing based on your online activity with different merchants and websites. You can exercise your rights to opt-out of those uses by contacting us using the contact details provided below.
We may share certain personal information, such as your IP address, device identifiers, browser information, pages viewed, and usage information, with advertising and social media partners, including LinkedIn, to support analytics, marketing, and advertising activities. LinkedIn may use this information as an independent data controller for its own purposes, including to provide aggregated reports and audience insights. This sharing is subject to applicable law and your privacy choices.
When you direct, request us or otherwise consent to our disclosure of certain information to third parties.
In connection with a business transaction such as a merger (including the evaluation thereof) or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.

Third Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies or notices and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

Children's Data

The Services are not intended to be used by children under age 18, and we do not knowingly collect any personal information about children under age 18 (or the age of majority in your jurisdiction if it is greater than age 18). If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.

Security and Retention of Your Information

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on the purposes for which we collected it and how we use it. We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

Your Rights and Choices

Depending on where you live, you may have some or all or none of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

Right to Access / Know. You may have a right to request access to personal information that we hold about you, including information about its use and disclosure.
Right to Delete. You may have a right to request that we delete personal information we maintain about you.
Right to Correct. You may have a right to request that we correct inaccurate personal information we maintain about you.
Right of Portability. You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
Managing Communication Preferences. We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.
Right to Withdraw Consent. You may have a right to withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice.

You may exercise your applicable rights where indicated on the Services or by contacting our Data Protection Officer at dpo@synnovationtx.com.

We may need to verify your identity before we can process your requests, as permitted or required under applicable law. We will respond to your request in a timely manner as required under applicable law.

Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. If you are located in the European Economic Area or the United Kingdom, you have the right to lodge a complaint with your local data protection supervisory authority. A list of EU data protection authorities and their contact details is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en. For individuals in Canada, you may file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at https://www.priv.gc.ca. If you are a resident of Quebec, you may also file a complaint with the Commission d’accès à l’information du Québec (CAI) at https://www.cai.gouv.qc.ca. Depending on where you live, you may also have the right to appeal our decision by contacting us using the contact details set out below.

Our Data Protection Officer: Pursuant to applicable laws and regulations, we have appointed a Global and EU Data Protection Officer. Please contact them at dpo@synnovationtx.com.

Our EU Representative: Pursuant to Article 27 of the GDPR, we have appointed iliomad Health Data, located at 64, avenue Pierre Grenier, 92100 Boulogne-billancourt, Paris, France , as our representative in the European Union. You may contact our EU representative at dpr@iliomad.fr

Our UK Representative: Pursuant to Article 27 of the UK GDPR, we have appointed iliomad Health Data, located at Salisbury House, Station Road, Cambridge, Cambridgeshire CB1 2LA, United Kingdom, as our representative in the United Kingdom. You may contact our UK representative at dpr@iliomad.fr

Additional Information for Canadian Residents

If you are a resident of Canada, the following additional information applies to our processing of your personal information under Canadian law.

Consent

We rely on your consent to collect, use, and disclose your personal information for the purposes described in this Privacy Notice or otherwise. Depending on the sensitivity of the personal information and the circumstances of its collection, your consent may be express (e.g., when you actively provide information to us) or implied (e.g., when you use our Services). You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting us using the contact details below. Please note that withdrawing your consent may affect our ability to provide certain Services to you.

Additional Rights for Quebec Residents

If you are a resident of Quebec, you may also have additional rights under Quebec Privacy Law, including the right to data portability and the right to be informed of the use of automated decision-making technology that produces decisions about you. You also have the right to file a complaint with the Commission d’accès à l’information du Québec (“CAI”) at https://www.cai.gouv.qc.ca.

Cross-Border Transfers of Canadian Personal Information

Your personal information may be transferred to, stored in, and processed in the United States or other countries outside of Canada where our service providers are located. When your personal information is transferred outside of Canada, it may be subject to the laws of those jurisdictions, which may differ from Canadian privacy laws. These jurisdictions may have laws that permit government or law enforcement access to personal information. We take steps to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it, including through contractual arrangements with our service providers.

Privacy Officer

We have designated a Privacy Officer who is accountable for our compliance with applicable Canadian privacy laws. If you have any questions or concerns about our privacy practices or wish to exercise your rights, please contact our Privacy Officer at: dpo@synnovationtx.com.

Automated Decision-Making

We do not use your personal information for automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you. If this changes in the future, we will update this Privacy Notice and provide you with meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing.

International Transfers

Please note that we may transfer, store and process your personal information outside the country you live in.

If we transfer your personal information out of the European Economic Area, the United Kingdom, or Switzerland, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

Changes to This Privacy Notice

We may update this Privacy Notice from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Notice on this website, update the "Last updated" date and provide notice as required by applicable law.

Controller

Synnovation Therapeutics, Inc.

200 Powder Mill Road, E500

Wilmington, Delaware, 19803

United States of America

Contact

Should you have any questions about our privacy practices or this Privacy Notice, or if you would like to exercise any of the rights available to you, please call or email us at dpo@synnovationtx.com