Privacy Policy

Effective date: October 20, 2026

Introduction

This Privacy Policy (“Policy”) describes Protega Pharmaceuticals (“Protega”) policies on the collection, use and disclosure of Personal Information when you use the Protega website(s) and services to which it is posted (the “Site” or the “Services”). Some of the information we collect when you visit or use this Site may be Personal Information as defined below. Protega understands the importance of privacy to our customers, visitors, suppliers, business partners, employees and other individuals (also: “you” or the “user” or the “participant” or “data subject”). We are committed to protecting and respecting your privacy.

Protega (referred to as either “Protega”, “We”, “Us” or “Our” in this Agreement) refers to Protega, located at 303A College Road East, Princeton, NJ 08540.

This Policy applies only to information collected through the website on which it is posted. It does not apply to third-party platforms or other Protega-operated platforms on which it is not posted. It also does not apply to information collected through other channels, such as by phone or in person, or as part of a clinical study, where it is not referenced.

If you visit this Site or use the Services, we may collect, use, disclose, and transfer Personal Information as described in this Policy (and any Privacy Notices that apply to you). If you have questions about this Policy, or any Privacy Notice, please contact us using the information provided below.

As applicable, Site users should review the State Privacy Notice Addendums for more detailed information about their privacy rights.

If you have a disability, you may request access to this Policy in an alternative format by contacting contact@protegapharma.com.

Some of the information we collect through this Site or the Services may be “Personal Information” as described below. Where applicable law uses the term “Personal Data,” that term has the same meaning as “Personal Information” for purposes of this Policy unless a specific jurisdictional addendum states otherwise.

By using this Site or the Services, you are consenting to the collection, use, disclosure, and transfer of your information as described in this Policy (and any Privacy Notices that apply to you). If you do not consent to the collection, use, disclosure and transfer of your information as described in this Policy (and any Privacy Notices that apply to you), you may not use this Site or the Services. If you have questions about this Policy, or any Privacy Notice, please contact us using the information provided below.

Complete agreement

This Policy is part of the Terms of Use that govern your use of this Site. A link to our Terms of Use is provided at the bottom of each page of this Site.

Except as written in any other disclaimers, policies, or other notices on this Site, this Policy and the Terms of Use are the complete agreement between you and Protega with respect to your use of this Site. Any terms we use in this Policy without defining them have the definitions given to them in the Terms of Use. There may be additional terms that apply to particular materials on or sections of this Site.

What is Personal Information?

Personal Information is any information that relates to an identified or identifiable individual. Generally, Personal Information means any information that identifies, relates to, describes or is capable of being associated with, or could reasonably be linked, directly or indirectly, with you.

Changes to this Policy

Protega reserves the right to update or modify this Policy and any Privacy Notice, at any time and without prior notice, by posting the revised version of the Policy or Privacy Notice on this Site. These changes will only apply to the information we collect after we have posted the revised Policy or Privacy Notice on this Site.

Your use of this Site or the Services following any such change constitutes your agreement that all information collected from or about you after the revised Policy is posted will be subject to the terms of the revised Policy. You may access the current version of this Policy at any time by clicking on the link marked “Privacy Policy” at the bottom of each page of the public areas of this Site.

Information We Collect

Personal Information You Manually Provide

Protega collects the information you manually provide when you use this Site or the Services, for example, we collect the information you provide if you choose to complete a questionnaire, contact us with questions (such as by e-mail), or otherwise interact with this Site or the Services. Some of the information you may choose to manually provide will be Personal Information including but not limited to:

• Contact data: such as name, title, address, phone number, mailing address, and email.

• Other identifiers: such as device ID or serial number, various types of personal health information (e.g., health insurance information, medical information, and the like), online identifiers, and other similar identifiers.

• Communication data submitted by you: such as questions and feedback.

• Demographic data: such as language, age, and gender.

• Marketing preferences: such as e-mail subscription and frequency preferences.

Information Automatically Collected

Protega collects information that is sent to us automatically by your web browser or mobile device. This information includes but is not limited to:

• Product use and application data (including date and time of your visit)

• IP address

• The browser you are using (including name and version)

• The website you came from and the website you visit after leaving

• Pages viewed on the Site

• Site data used to facilitate the use of the Site such as login and technical data

The information we receive may depend on your browser or device settings. The information we receive from your web browser and device typically is not, in and of itself, personally identifiable. However, we may combine it with other information in an attempt to identify you or we may combine it with information that does identify you.

Information Collected by Cookies and Other Technologies

Protega does not currently use cookies or similar tracking technologies to collect information for analytics or advertising purposes. Our web server automatically records limited technical information about each request (such as IP address, browser type, the page requested, and the referring page) for security and operation of the Site. This information is processed and stored by Protega and the service provider that hosts the Site and is not used for targeted advertising.

Our Legal Basis for Processing Personal Data

In some countries, Personal Data can only be collected and processed if we have a legal basis. We process the Personal Data we collect through this Site or the Services under the following legal bases:

Consent. In some cases, we will only process your information where you have given your consent. If you sign up for email communications, provide your phone number for phone communication, or where you provide special categories of Personal Data (such as any health information you provide). Please note that in some cases we may have a different legal basis for processing (e.g., legitimate interest) so that consent is not needed. When our use and sharing is not readily apparent when you provide your information, we will provide additional information at the time we collect the information regarding our purposes and use of the information
Legitimate interest. We can process your Personal Data if (i) we have a legitimate reason; and (ii) are not harming any of your rights and interests. When you visit our Site or use the Services, we will use your Personal Data in order to help us provide you with our services and to give you the most appropriate information, products and services and to provide you with the best experience when dealing with us. Whenever we process your Personal Data for our legitimate interests, we will consider and balance any potential impact on you and your rights under data protection law.
To fulfill our obligations to you under a contract. If you purchase a product from us, we may process your Personal Data in order to fulfill our contract with you.
As required by law. Where we are required to comply with our legal obligations, or to establish and defend our legal rights, or to prevent and detect crimes such as fraud.

How We Use Your Information

We may use the information we collect through this Site or the Services to provide you with access to the Site or the Services. Additionally, we may keep and use your information to:

respond to your requests.
personalize your access to our Site or the Services.
develop records (including records of your Personal Information).
contact you with pertinent information about products, clinical studies, or important safety information, and about products and services of ours and of others.
evaluate your eligibility or interest to enroll in clinical studies.
perform analysis, research, develop, and improve programs, products, services, and content.
remove your personal identifiers. Once we have de-identified information so that it is considered non-Personal Information, we may treat it like other non-Personal Information.
enforce this Policy and other rules about your use of this Site or the Services.
protect someone’s health, safety, or welfare.
protect our rights or property.
comply with a law or regulation, court order or other legal process, such as preventing, detecting and investigating security incidents and potentially illegal or prohibited activities.

Protega will not share Personal Information about you collected from this Site or the Services with an unrelated third party except as provided in this Policy. We may share for the following purposes.

With Third–Party Vendors

In the ordinary course of business, we share some information collected through this Site or the Services with third-party vendors who act on our behalf. For example, we may use third-party vendors to design and operate this Site or the Services; to conduct surveys and clinical studies; and to help us with our promotional efforts including to evaluate the reach and effectiveness of our marketing campaigns. These third-party vendors may need information about you to perform their functions on our behalf. In these cases, we will require our third-party service providers and vendors to restrict their use of Personal Information to the intended purpose.

As Part of a Business Transfer

Your information may be transferred to successor organization if, for example, we transfer the ownership or operation of this Site or the Services to another organization or if we merge with another organization or liquidate our assets. If such a transfer occurs, the successor organization’s use of your information will still be subject to this Policy and applicable privacy preferences you have expressed to us.

For the Purpose of Determining your Eligibility for a Clinical Study

If you choose to provide information through our Site or the Services to see if you qualify to participate in a clinical study, we may share your information with business partners or potential study center(s) so that they may contact you to see if you are a suitable candidate for one of our clinical studies. We require such business partners or potential study centers to restrict their use of any personally identifiable information received through our Site or the Services to the intended purposes.

In Aggregate or De-Identified Form

We use information collected through this Site to create a compiled, aggregate view of usage patterns. We may share aggregate information with third parties for various purposes including so they can better understand our user base. We may also share with third parties information about how particular individuals use this Site, but only on a de-identified basis (“Individualized Data”). Individualized Data is not personally identifiable, but it does reflect the usage patterns of a particular Site user, as opposed to Site users collectively. For clarity, we may use and share aggregated or de-identified data without restriction.

Business Partners

In the ordinary course of business, we share some information collected through this Site or the Services with business partners such as clinical study sites or health care providers. For example, we may share information with a clinical study site if you provide us with information indicating your interest in a clinical study. We may also share information with health care providers. Our business partners will generally be bound to confidentiality requirements applicable to their organizations.

To Comply with Laws or Protect Rights

We may disclose your information when we, in good faith, believe disclosure is appropriate to comply with the law, a court order or a subpoena. We may also disclose your information to prevent or investigate a possible crime, such as fraud or identity theft; to protect the security of this Site; to enforce this or other agreements; or to protect our own rights or property or the rights, property or safety of our users or others.

As Described in a Privacy Notice or Click-Through Agreement

We reserve the right to disclose your information as described in any Privacy Notice posted on a page of this Site where you provide that information or in connection with the Services. By providing your information on that page you will be consenting to the disclosure of your information as described in that privacy notice. We also reserve the right to disclose your information as described in any click–through agreement to which you have agreed.

This Policy may be supplemented or amended from time to time by additional privacy notices (“Privacy Notices”), provided at the time we collect your information. For example, certain pages of this Site may contain Privacy Notices providing more details about the information we collect on those particular pages, why we need that information, and choices you may have about the ways we use that information. In other cases, specific Privacy Notices may be required to comply with the privacy laws of one of the countries, provinces, or states in which we do business. We reserve the right to disclose your information as described in any Privacy Notice posted on a page of this Site where you provide that information or in accordance with any consent or authorization you otherwise provide.

How We Protect your Information

Protega takes reasonable precautions to provide a level of security appropriate to the sensitivity of the information we collect. Although we use reasonable measures to help protect your information against unauthorized use or disclosure, we cannot guarantee the security of information provided over the Internet or stored in our databases and will not be responsible for breaches of security beyond our reasonable control.

Transfer and Storage of your Personal Data

Protega primarily processes Personal Information in the US. Accordingly, we may store, collect, transfer and process your Personal Information in a country other than your country of residence. The data protection and other laws of countries to which your information may be transferred may be different in your country. By using this Site or otherwise providing your Personal Information, you agree to any transfer, storage, or processing.

Retention of Your Information

Protega retains the Personal Information collected on this Site or through the Services to meet our business purposes, legal obligations, and as permitted or required by applicable law.

Children’s Privacy

This Site is not targeted to children under the age of 18 and we do not knowingly collect or solicit Personal Data about such children. If we discover that a child has provided us with Personal Data through this Site, we will take steps to delete this information. If you believe we may have received Personal Data from a child under the age of 18, please contact us immediately.

Your Privacy Rights

Your privacy rights will vary depending on where you live, how we process your Personal Data, and where your Personal Data is located. You may make a request to exercise any rights that you may have, and we will seek to comply with any laws that apply. You may have the following rights:

Know. The right to know about and confirm the existence of Personal Information about you, how we use or share it, what categories of Personal Information we process, our purposes of processing, and categories of parties we disclosed Personal Information to.
Access and portability. The right to access your Personal Information, specific pieces of information, and third parties we have shared Personal Information with. You may have a right to obtain a copy of your data, including in a machine-readable format or have it transferred to someone else.
Correction. The right to correct or amend your data if it is incomplete, inaccurate, or outdated.
Deletion or elimination. The right to request your Personal Information be deleted or eliminated. Subject to applicable law, we may de-identify this data in certain circumstances.
Restriction. A right to restrict processing of your data in some circumstances, such as if processing is excessive or unlawful, the accuracy of the data is contested, the controller no longer needs the data for its primary processing purposes but is needed for legal or compliance purposes, or if the data is sensitive Personal Information (e.g., health information) and it is being used for purposes beyond those reasonably necessary to perform services or provide goods requested.
Objection and opt-out. The right to object to or opt-out of processing of Personal Information about you in certain circumstances. This can include cases where that data is used for direct marketing (including email or telephone-based marketing), shared with third parties for their own marketing or for retargeting or cross-contextual marketing, sold to third parties, used to make certain automated or artificially-generated decisions or profiles about you, used for historical or scientific research, or used to contact you with automated/prerecorded voice telephonic messages in some cases.
Consent and withdrawal of consent. The right to consent, and to withhold or withdraw that consent, for some practices, including processing of sensitive Personal Information or data on children, or where we use consent as our lawful basis for processing or transfer. If you withdraw your consent, we will not further collect or process the Personal Information on the basis of that consent unless allowed or required by applicable law.
Non-discrimination. The right to not be discriminated against for exercising your rights. This does not necessarily include, where permitted by applicable law in your jurisdiction, cases where a difference in price or services offered is reasonably related to the value provided by Personal Information you provide, or where you consent to participate in a voluntary program offering incentives (such as a loyalty program).
Appeal. The right to appeal decisions we make about the exercise of your rights. To submit an appeal, please contact us using the contact information below and include enough information for us to identify the decision you are appealing. We will strive to comply with applicable law when we respond to your appeal.
Make a complaint. You may have the right to complain to regulators, such as your state attorney general, local data protection agency or authority, or other public bodies responsible for data protection and privacy enforcement. If you are not satisfied with our response to your request or if you have concerns about our data practices.

Submitting a Request or Inquiry

If you want to submit a request or inquiry to us regarding privacy rights you may have, you or your authorized agent (someone acting on your behalf) can contact us using our contact information below. You do not have to create an account with us to submit a request.
Your request will be confirmed within 10 days of receipt, and we will respond within 45 days, unless shorter periods are required by law. If we need more than 45 days, we will notify you that your request is being delayed.
We can only respond to your request if it is verifiable. This means we are obligated to take reasonable steps to verify your identity or your authorized agent’s authority and your right to access the information you request. In the process of verifying your request, we may contact you to ask for additional information that will help us do so, including government-issued IDs containing your name and address, utility bills containing that same information, and/or unique identifiers like usernames. We will only use that additional information in the verification process, and not for any other purpose. Once we have received and verified the requested information from you, we will contact you with our response to your request, including any data, if applicable. If we do not hear from you or are unable to verify your identity for the request, we will contact you to inform you that we cannot process your request because we cannot verify your identity.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
We will respond to reasonable requests in accordance with applicable law and subject to legal and contractual restrictions. We will not discriminate against you for exercising these rights.
There may be times where we cannot comply with your request. For example, if such disclosure would interfere with the privacy of others or if it would result in a breach of confidentiality. We will provide an explanation for our refusal to grant access.
Residents of WA, CA, NV, CT, please also see the respective Addendums for further details.

Marketing E-mail Opt-out

We may contact you to provide information about products, services and content that may be of interest to you. You may revoke your consent for the receipt of communications that we send to you at any time by using the “unsubscribe” functionality included in our emails to you or by contacting us directly.

You should note that this will not affect all communications from us, for example, we are legally required to provide notices such as notification of a data breach in which case you should expect to receive a notification via email. We may also respond to communications from you, such as if you submit an online form on our Site.

Links to Other Websites

This Policy applies only to the Protega-operated websites on which it is posted and to Services referencing this Policy. This Site may also contain links to websites that are not operated by or on behalf of Protega or its affiliates. These links are provided for your reference and convenience only and do not imply any endorsement of the products sold or information provided through these websites, nor any association with their operators. Protega does not control these websites and is not responsible for their data practices. Any information you provide to third parties on their websites is covered under their privacy and data collection policies and is not covered by this Policy. We urge you to review the privacy policy posted on any site you visit before using the site or providing any Personal Information

Contact Us

If you have any questions regarding this Privacy Policy or about our privacy practices, or need to contact us for purposes related to this Policy, please contact us at contact@protegapharma.com.

State-Specific Sections

Addendum: California Residents’ Rights

California Consumer Privacy Act/California Privacy Rights Act

If you are a California resident, you have the rights set forth in this section. Please see the “Exercising Your Rights” section below for instructions regarding how to exercise these rights.

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act, defines Personal Information as information that identifies, relates to, or could reasonably be linked with you or your household.

Please note that we may process some Personal Information as part of our provision of services to our customers. If we are processing your Personal Information as a service provider, you should contact the appropriate entity to address your rights.

If there are any conflicts between this section and any other provision of this Privacy Policy and if you are a California resident, the portion that is more protective of Personal Information will apply if there is a conflict. If you have any questions about this section or whether any of the following rights apply to you, please contact us via the contact information provided below.

We may collect Personal Information as defined by the California Consumer Privacy Act (CCPA). See the chart below for categories of Personal Information from our California consumers:

Collected within the last twelve (12) months from the sources listed in the Privacy Policy.
Shared within the last twelve (12) months with the third parties described in our Privacy Policy.

Category	Examples	Collected	Shared
A. Identifiers.	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers.	Yes	No
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some Personal Information included in this category may overlap with other categories.	Yes	No
C. Protected classification characteristics under California or federal law.	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).	Yes	No
D. Commercial information.	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	No	No
E. Biometric information.	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	No	No
F. Internet or other similar network activity.	Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.	Yes	No
G. Geolocation data	Physical location or movements.	No	No
H. Sensory data.	Audio, electronic, visual, thermal, olfactory, or similar information.	No	No
I. Professional or employment-related information.	Current or past job history or performance evaluations.	No	No
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	No	No
K. Inferences drawn from other personal information.	Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	No	No

The examples provided above come from the CCPA and other statutes, as noted. They are reproduced here for your convenience to help you understand the types of information that are considered within each category. It is not meant to imply that we collect all such information listed in the examples. We only collect the specific pieces of Personal Information described in our Privacy Policy (defined as “Personal Data”).

Sensitive Personal Information We May Collect and Our Purposes for Collection and Use

The CCPA’s definition of sensitive personal information includes the following types of information:

Social security number, driver’s license number, state identification card number, or passport number;
A consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account;
Biometric information processed for the purpose of identifying a consumer; and
Health and medical information.

Right to Limit the Use of Sensitive Personal Information

California residents have the right to limit the use of sensitive personal information in some circumstances. Protega only collects sensitive personal information, as defined by applicable California law, with your consent and only uses the sensitive personal information for the use disclosed at the time of collection. Protega does not use sensitive personal information for inferring characteristics about you. Protega will only use your sensitive personal information to provide you with the services you requested. Protega does not share your sensitive personal information with third parties.

You can find a list of the categories and specific types of sensitive personal information that we collect in the chart above. We only collect and use sensitive personal information to provide you with products and services.

We may use or disclose the Personal Information we collect for business or commercial purposes as described in the Privacy Policy. Including that we disclose your Personal Information for a business purpose to the following categories of third parties:

Third-party vendors and service providers as described in our Privacy Policy;
All other third parties described in our Privacy Policy.

We may disclose Personal Information for business purposes as described in this Policy. Certain online advertising, analytics, or tracking activities may also be considered a “sale” or “sharing” under California law. Although Protega does not currently sell Personal Information or share Personal Information for cross-context behavioral advertising, you have the right to opt out of sale or sharing of your Personal Information, where applicable.

Your rights

By law if you are a resident of California, you have the following rights:

The right to notice. You must be properly notified which categories of Personal Information are being collected and the purposes for which the Personal Information is being used.
The right to opt out of sale or sharing. To the extent we engage in activities that are considered a “sale” or “sharing” of Personal Information under the CCPA, you have the right to opt out.
The right to know about your Personal Information. You have the right to request and obtain from us information regarding our collection, use, and disclosure of the following data within the past twelve (12) months:
The categories of Personal Information collected
The sources from which the Personal Information was collected
The business or commercial purpose for collecting or selling the Personal Information
Categories of third parties with whom we share Personal Information
The specific pieces of Personal Information we collected about you
The right to delete Personal Information. You have the right to request that we delete the Personal Information that we have collected about you. Under the CCPA, this right is subject to certain exceptions: for example, we may need to retain your Personal Information to provide you with the Site or complete a transaction or other action you have requested. If your deletion request is subject to one of these exceptions, we may deny your deletion request.
The right not to be discriminated against. We will not discriminate against you for exercising your rights under the CCPA.

Exercising your rights

To exercise the rights described above, you or your Authorized Agent (defined below) may make a request that (1) provides sufficient information to allow us to verify that you are the person about whom we have collected Personal Information, and (2) describes your request in sufficient detail to allow us to understand, evaluate and respond to it. Each request that meets both criteria will be considered a “Valid Request.” We may not respond to requests that do not meet these criteria. We will only use Personal Information provided in a Valid Request to verify your identity and complete your request. You do not need an account to submit a Valid Request.

You may submit a Valid Request by email at contact@protegapharma.com or by telephone at (609) 423-1568.

We will work to respond to your Valid Request within 45 days of receipt. We will not charge you a fee for making a Valid Request unless your Valid Request(s) is excessive, repetitive or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you of the fee and explain that decision before completing your request.

You may also authorize someone other than yourself (an “Authorized Agent”) to exercise your rights on your behalf. To do this, you must provide your Authorized Agent with written permission to exercise your rights on your behalf, and we may request a copy of this.

Protega does not “sell” or “share” Personal Information, as those terms are defined by the California Consumer Privacy Act (CCPA), with third parties for cross-context behavioral advertising. Protega also does not use third-party advertising cookies or tracking technologies on the Site.

Global Privacy Control (“GPC”)

Protega does not currently sell Personal Information or share Personal Information for cross-context behavioral advertising. Accordingly, there is no such processing from which a visitor may opt out through a Global Privacy Control signal. If our practices change, Protega will comply with applicable law regarding Global Privacy Control signals and other legally required opt-out preference signals

California Online Privacy Protection Act (CalOPPA) "Do Not Track" Policy

Our Site and the Services do not respond to Do Not Track signals. However, some third-party websites do keep track of your browsing activities. If you are visiting such websites, you can set your preferences in your web browser to inform websites that you do not want to be tracked. You can enable or disable DNT by visiting the preferences or settings page of your web browser.

California's Shine the Light law

Under California Civil Code Section 1798 (California's Shine the Light law), California residents with an established business relationship with us are permitted to request information once a year about sharing their Personal Data with third parties for the third parties' direct marketing purposes.

Protega does not share Personal Data with third parties for these purposes. However, if you would like to request more information under the California Shine the Light law, and if you are a California resident, you can contact us.

Addendum: Consumer Health Data Policy

(including Washington, Nevada, Connecticut)

Effective: October 20, 2026

Various U.S. state laws provide protections for “consumer health data”. This addendum applies to such information by applicable law. Please see the “Exercising Your Rights” section below for instructions regarding how to exercise these rights.

“Consumer Health Data” is used in this addendum as it is defined in the Washington My Health My Data Act (MHMDA) and other laws applicable to the same or similar data. It generally includes any information that is linked or reasonably linkable to an individual and that identifies that individual’s past, present, or future physical or mental health status. Excluded from Consumer Health Data are certain types of health information, such as when we must collect, use, and disclose health information to meet our regulatory obligations or as part of a clinical trial. We do not collect, share, or sell Consumer Health Data except as described in this Privacy Policy and this Addendum or with your consent.

We process limited Consumer Health Data that you choose to provide through the Site, such as information submitted in connection with a product inquiry, provider-referral request, clinical study inquiry or prescreening form, or other health-related request. Depending on the form or interaction, this may include information about a health condition, symptoms, treatment interest, provider-referral needs, or other information that identifies you as seeking health care services or information. We do not intend for this Site to collect genetic data, precise geofencing data, biometric identifiers, or other categories of Consumer Health Data unless expressly requested and disclosed at the point of collection. Not all health information we collect is Consumer Health Data because certain exemptions may apply, including for protected health information regulated by HIPAA or information processed for clinical trial, regulatory, safety, or quality obligations.

Sources of Consumer Health Data

We collect Consumer Health Data directly from you, including when you submit information through our Site, or our Services, or other services or platforms we operate.

How Protega Uses Consumer Health Data

We use Consumer Health Data to respond to your requests, provide information and education about Protega’s products or clinical studies, help connect you with a provider or study site where requested, support safety, quality, regulatory, and compliance obligations, and otherwise as described at the point of collection or with your consent.

We may share Consumer Health Data, including the categories of Consumer Health Data, with Protega-affiliated companies, service providers acting on our behalf, and others, including health care providers that you select, as necessary to provide you with the products or services you request or your authorized representatives request on your behalf.

Exercising Your Rights

Based on applicable laws in your state, you may have the right to:

Confirm whether Protega is collecting, sharing, or selling Consumer Health Data concerning you and to access this data, including:
A list of all third parties and affiliates with or to whom Protega has shared or sold the Consumer Health Data
Access an active email address or other online mechanism that you may use to contact these third parties
Withdraw consent from Protega to collect and share your consumer health data
Request to have Consumer Health Data concerning you deleted and exercise that right by informing Protega of your request for deletion
Appeal if Protega does not address an attempt to exercise one or more of these rights to your satisfaction

You may request that Protega take the actions outlined in the paragraphs above to exercise rights you may have by submitting a request, at any time, to Protega. Protega will seek to respond within forty-five (45) days.

Addendum: Nevada Opt-Out Rights

Your Nevada Opt-Out Rights

We do not sell your Personal Information for monetary consideration as defined under Nevada law. Verified requests under Nevada law (NRS 603A) to not make any sale of any covered information we have collected or will collect regarding a consumer, as defined in that law, may be sent to contact@protegapharma.com. Please include “Request for Nevada Opt-Out” in the subject line and body of the message.