������

In this Privacy Policy, “personal data” means information that may identify you as an individual directly or indirectly. Personal Data does not included information that has been “deidentified” in such a way that your identity cannot reasonably be determined.

If you visit our Sites, we may collect information that personally identifies you, including your name, telephone number, and email address (“personal data“) from you, only if you provide us with such information.

We will indicate if the collection and provision of certain categories of personal data is mandatory. For any such categories, we may not be able to provide you with the services on our Sites if you do not provide us with the required information.

Please see below for more details on the types of personal data that we may collect from you.

When you visit our Sites

������ collects industry standard data from everyone who visits our Sites — even if you don’t have a ������ account. This includes log data that automatically records information about your visit, such as your browser type, operating system, the URL of the page that referred you, the different actions you performed, and the IP address you used to access pages on the Sites. We use this type of information to provide you with an experience that’s relevant to your location based on the IP address, to prevent Sites misuse, and to ensure the Sites are working properly. We also collect data from cookies. To see the full list of cookies we use and how we use them, please read our Cookie Policy below.

When you apply for a job position

If you are a job candidate, and you apply for a position, we may collect your personal data (as permitted under local law). This includes:

• Your contact information like name, email address, postal address, and phone number;
• Your resume including education information and job experience;
• Your race, ethnicity, gender, if you choose to provide it; and
• Any other information in your application that you choose to share with us (e.g. hobbies, etc.)

When you contact us

Whenever you contact ������ using the “Contact Us” form, we collect your name, email address, and geographic region,  along with additional information you provide in your request so that we can provide you with the requested assistance.

You consent to ������ collecting, using and disclosing your personal data for the following purposes:

• responding to, handling, and processing your queries, requests, applications, complaints, and feedback;
• subject to your consent, sending you notifications and to inform you about new features, products or services we think you would be interested in. You may withdraw your consent by contacting us at the email address provided below or follow the steps to unsubscribe which are presented in communications you receive from us;
• data and logs are used in research to understand and improve the ������ Sites; to troubleshoot the ������ Sites; to detect and protect against error, fraud or other criminal activity; and to protect the security or integrity of the ������ Sites;
• disclosing or transferring your personal data to other entities within the ������ group of companies to allow them to provide you with the services that you have requested;
• complying with any applicable laws, regulations, codes of practice, guidelines, or rules, or to assist in law enforcement and investigations conducted by any governmental and/or regulatory authority; and
• any other incidental business purposes related to or in connection with the above.

In the event of a corporate sale, merger, reorganization, dissolution or similar event, your personal data may be part of the assets that is transferred (“business asset transaction“). You consent to such transfer and you acknowledge and agree that any successor or acquirer of ������ or its assets will continue to have the right to use your personal data and other information in accordance with the terms of this Privacy Policy.

We will only retain your personal data until it is reasonable to assume that such retention no longer serves the purpose for which your personal data was collected and is no longer necessary for legal or business purposes.

We will use all reasonable endeavours to keep your personal data accurate, complete, up-to-date, relevant and not misleading. Please contact us at privacy@biofourmis.com if you would like to access the personal data that we hold about you, correct any personal data that is inaccurate, incomplete or out-of-date, withdraw your consent to the collection, use and disclosure of your personal data or to request that your personal data be deleted. We will use reasonable endeavours to provide a complete list of your personal data, correct or delete your personal data within a reasonable period of receipt of your request. In relation to any request for access to any personal data, we reserve the right to charge a nominal fee for the processing of this request in accordance with applicable local legislation.

If you would like to request that we delete all personal data, please contact us at privacy@biofourmis.com. Our ability to comply with your deletion request is subject to any applicable legal or other requirement to maintain certain records of your personal data. In that regard, please note that the deletion of your personal data from our database may result in us not being able to provide you with some services on our Sites.

This Site is not directed at persons under the age of 13. We do not knowingly collect any personal data from children under 13. If you are under the age of 18, you may only use the Site with the consent of and under the supervision of your parent or legal guardian who shall be responsible for all your activities.

We will use all reasonable endeavours to maintain the security of your personal data and to protect your personal data from misuse, interference and loss and against unauthorized collection, copying, access, modification or disclosure. We will destroy or anonymize any personal data we hold about you which is no longer required under the terms of this Privacy Policy.

Due to the nature of the internet, we do not provide any guarantee or warranty regarding the security of your personal data during transmission to or storage by us and you acknowledge that you disclose your personal data to us at your own risk. Please contact us immediately if you become aware or have reason to believe there has been any unauthorized use of your personal data in connection with the ������ Sites.

The personal data you provide to us will be transferred to and stored with a cloud service provider with servers that are located in various jurisdictions. In addition, some of our affiliates to which your personal data may be disclosed or transferred under Section 2 above may be located outside your home jurisdiction. Some of these countries may not have the same or substantially similar privacy laws than those of your home jurisdiction. In those circumstances, ������ will ensure that recipients in those countries will provide you with a standard of protection that is at least comparable to the protection of your home jurisdiction.

Some of the information that we collect will not personally identify you but will instead track your use of the Sites so that we can better understand how the Sites are used by end users and in turn enhance and improve your experience in using the Sites. This information can be obtained through the use of cookies. Cookies are a small data file transferred to your device that recognizes and identifies your device and allows your device to ‘remember’ information from the Sites for future use. We may collect technical information from your web browser or mobile device or your use of our services through a web browser or mobile device, for example, location data and certain characteristics of, and performance data about your device, carrier/operating system including device and connection type and IP address. Unless you have elected to remain anonymous through your device and/or the web browser, the above mentioned information may be collected and used by us automatically through your use of the Sites.

You have a number of options to control or limit how we and our partners use cookies and similar technologies, including for advertising.

• Although most browsers and devices accept cookies by default, their settings usually allow you to clear or decline cookies. If you disable cookies, however, some of the features of the Sites may not function properly.
• To prevent your data from being used by Google Analytics, you can install Google’s opt-out browser add-on by visiting https://tools.google.com/dlpage/gaoptout.
• To opt out of ads on Facebook, Pinterest, or Google that are targeted to your interests, use your Facebook, Pinterest, or Google Ads settings.
• Check your mobile device for settings that control ads based on your interactions with the applications on your device. For example, on your iOS device, enable the “Limit Ad Tracking” setting, and on your Android device, enable the “Opt out of Ads Personalization” setting.

The Sites do not respond to Do Not Track signals because we do not track our users over time and across third-party websites to provide targeted advertising. However, we believe that you should have a choice regarding interest-based ads served by our partners, which is why we outline the options available to you above.

������ reserves the right to amend all or any part of this Privacy Policy. Any changes will be notified through the Sites and/or, where appropriate, through e-mail notification. Your continued use of the Sites with us after any such changes are notified to you constitutes your agreement to this Privacy Policy as amended.

The Sites may have links to other websites or applications. We are not responsible for the security or privacy of any information collected by such websites and, while we do not permit those websites to track your use of the ������ Sites, we are unable to control whether such tracking mechanisms are implemented by those apps or websites. You should exercise caution and review the privacy statements applicable to the third-party websites and services you use. The use of online tracking mechanism by those third-party websites and services is subject to those third parties’ own privacy policies, and not this Privacy Policy.

This Privacy Policy applies in conjunction with any other policies, notices, contractual clauses and consent statements that apply in relation to the collection, use and disclosure of your personal data by us.

All comments, queries and requests relating to our use of your personal data are welcomed and should be addressed to our data protection officer at privacy@biofourmis.com.

If you are located in the European Union or United Kingdom and have questions about your personal data or would like to request to access, update, or delete it, you may contact our representative at:

1. If you are an individual residing in the European Economic Area (EEA) Bird & Bird GDPR Representative Services
   Zuid-Hollandplein 22
   2596 AW The Hague
   The Netherlands
   EUrepresentative.������Singapore@twobirds.com
   Main point of contact: Vincent Rezzouk-Hammachi
2. If you are an individual residing in the United Kingdom Bird & Bird GDPR Representative Services UK
   12 New Fetter Lane
   London EC4A 1JP
   United Kingdom
   UKrepresentative.������Singapore@twobirds.com
   Main point of contact: Vincent Rezzouk-Hammachi

Our EEA and UK Representative can only be contacted for queries in relation to data protection.

Last updated 9 September, 2021

Pursuant to consumer data privacy regulations set forth under the California Consumer Privacy Act (“CCPA,” to be supplemented by the California Privacy Rights Acts, “CPRA,” effective January 1, 2023), this Privacy Policy is intended to provide all ������ Site users and job applicants who are California residents – as defined under Section 17014 of Title 18 of the California Code of Regulations – with the following notice concerning our use of your personal data:

General Requirements of ������

������’ collection, use, retention, and sharing of your personal data will be reasonably necessary and proportionate to achieve the explicit purposes for which we have collected or processed the information, or for other disclosed purposes that are compatible with the context in which the information was collected, and not further processed in a manner that is incompatible with those purposes.   ������ will implement reasonable security procedures and practices which are appropriately designed to protect your personal data from unauthorized or illegal access, destruction, use, modification, or disclosure.  In meeting our general obligations, ������ is not compelled to reveal any trade secrets or other intellectual property / proprietary information.

������ may share your personal data with third-party processors, for business reasons, as necessary to achieve the express and limited collection / use purposes.  For any such third-party relationship, ������ will obtain legal assurances — prior to any data processing —that all external providers will reasonably and appropriately safeguard your information.

For ������ Site Users Residing in California

When visiting our Sites, ������ may collect these specific categories of personal data: your name, telephone number, email address, geolocation data, email address, Internet Protocol (“I.P.”) address, geolocation, and other internet or electronic network activity information, including the URL of the page that referred you, and information regarding your interaction with our website application.  The foregoing information is collected and used for the express and limited purposes of:

(i) providing you the services offered on our Sites;

(ii) responding to, handling, and processing your queries, requests, complaints, and feedback;

(iii) subject to your consent, sending you notifications and to inform you about new features, products or services we think you would be interested in;

(iv) maintenance, troubleshooting, and improvement of the ������ Sites;

(v) disclosing or transferring your personal data to other entities within the ������ group of companies to allow them to provide you with the services that you have requested;

(vi) complying with any applicable laws, regulations, codes of practice, guidelines, or rules, or to assist in law enforcement and investigations conducted by any governmental and/or regulatory authority;

(vii) providing you with an experience that is relevant to your I.P. location;

(viii) preventing misuse of the Sites;

(ix) ensuring that the Sites are working properly; and

(x)any other incidental business purposes related to or in connection with the foregoing activities.

For ������ Job Applicants or Employees Residing in California

When applying for a job position with ������, we may collect these specific categories or personal data:

⁃ Identifiers such as your name, alias(es), signature, date of birth, physical characteristics or description, postal address, email address, online identifier, I.P. address, account name, Social Security Number, driver’s license or state identification card information, passport information, education and employment histories, criminal history, bank account information, credit / debit card numbers, emergency contact information;

⁃ Characteristics relevant to protected classifications under California or federal law, including those concerning race, religious creed, color, national origin, ancestry, physical and mental disability, medical conditions, marital status, sex, or age.

⁃ Internet or other electronic network activity information, including the URL of the page that referred you, and information regarding your interaction with our website application or job advertisement.

⁃ Inferences drawn any personal data utilized by ������ to create a profile about a job applicant, reflecting the applicant’s preferences, characteristics, psychological traits, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

The foregoing information is collected and used for the express and limited purposes of:

(i) communicating with you regarding your job application(s) with ������;

(ii) processing and handling of your job application(s);

(iii) responding to your queries, complaints, and feedback concerning your job application(s);

(iv) evaluating your fitness and qualifications for a job opening along with other pertinent candidacy characteristics;

(v) complying with any applicable laws, regulations, codes of practice, guidelines, or rules — including employment-specific requirements promulgated by the U.S. Equal Opportunity Employment Commission — or to assist in law enforcement and investigations conducted by any government and/or regulatory authority;

(vi) evaluation of ������’ own workforce diversity and inclusion standards;

(vii) maintenance, troubleshooting, and improvement of ������’ careers Site;

(viii) disclosing or transferring your personal data to other entities within the ������ group of companies for the processing and handling of your job application(s);

(ix) verifying your identity;

(x) preventing misuse of the Sites;

(xi) ensuring that the Sites are working properly;

(xii) establishing a new-hire profile with ������ Human Resources; and

(xiii) any other incidental business purposes related to or in connection with the foregoing activities.

������ will not use the personal data we have collected about you — nor collect additional categories of personal data — for any reason which is incompatible with these express and limited purposes.  ������ will only retain your personal data until it reasonable to assume that such retention no longer serves the express and limited purposes for which your personal data was collected, upon which the information will be securely deleted.

Data Subject Rights for California Residents

The CCPA and forthcoming CPRA affords ������ data subjects residing in California several individual rights pertaining to their control and access of their personal data.  A description of each individual right is set forth below:

Right to Delete

You have a right to request the deletion of all or part of your personal data collected by ������.  Once we have received and verified your individual request for deletion, ������ will delete the relevant information from its records, notify any of our subcontractors and vendors possessing your personal data to delete the relevant information from its records, and notify all third parties with whom we have shared your personal data to delete the relevant information from its records.  ������ and its third-party affiliates must comply with your specific request for deletion unless doing so would be impossible or involves a disproportionate effort.  ������ may keep a confidential record of your deletion requests, for the purpose of preventing relevant information subject to deletion from being further sold.

Please be advised that ������ is not required to comply with your deletion request if retention and maintenance of the relevant information is necessary to:

⁃  Complete the transaction for which the relevant personal data was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide you with a good or service which you have requested or reasonably anticipate, or to execute performance on a contract between you and ������.

⁃  Help ensure the security and integrity of your personal information to the extent such use is reasonably necessary and proportionate for those purposes

⁃  Debug to identify and repair errors that impair existing intended functionality.

⁃  Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law.

⁃  Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code.

⁃  Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the businesses’ deletion of the information is likely to render impossible or seriously impair the achievement of such research, if the consumer has provided informed consent.

⁃  To enable solely internal uses that are reasonably aligned with the expectations of the consumer based on the consumer’s relationship with the business.

⁃  Comply with a legal obligation.

⁃  Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which the consumer provided the information.

Right to Correct

You have the right to request that ������ correct any of your personal data which we have collected that is inaccurate.  Once we have received and verified your individual request for correction, ������ will use commercially reasonable efforts to correct the inaccuracies pursuant to your direction.

Right to Know What Information is Collected and Right to Access

You have the right to request that ������ disclose to you the following information:

• The categories of personal data collected about you
• The categories of the sources from which your personal data was collected
• The purposes for collecting, selling, or sharing your personal data
• The categories of third parties with whom we have disclosed your personal data
• The specific pieces of personal data collected about you

������ is required to provide such disclosures to you in writing, delivered through your account with ������ (if you maintain such an account), or by postal or electronic mail at your option (in the event you do not maintain an account with ������), in a readily useable format that allows you to transmit the information from one entity to another without hinderance.  ������ may, at its discretion, require you to authenticate your identity and request prior to our acting upon any request for disclosure.  ������ will not require you to create an account with us as a condition of fulfilling your request for disclosure.

Disclosures will be provided to you at no cost.

You may submit your request for disclosures by calling 1-855-460-7308 (toll-free number), by email at privacy@biofourmis.com.

Right to Know What Information is Sold or Shared

You have the right to request that ������ disclose to you the following information regarding your personal data that we sell, share, or disclose for business purposes:

- The categories of personal data ������ has collected about you
- The categories of personal data which ������ has disclosed about you for business purposes, and the categories of parties to whom such disclosures were made

Please note that ������ will not make your personal data available for sale, nor share your personal data with third parties for cross-context behavioral advertising purposes. ������ has not made any other disclosures of your personal data, we will provide you with such notice.  Further, ������ will direct all third parties with whom we have disclosed your personal data, to not further sell, share, or disclose your personal data unless you have received notice and been provided an opt-out opportunity

Right of No Retaliation

������ will not discriminate against you for exercising any of your data rights under the CPRA.  This attestation further assures that ������ will not, in response to your exercising of your data rights, deny you our goods or services, charge you different prices or rates than other individuals for our goods or services (including through the use of discounts, other benefits, or imposition of penalties), provide you with a different level or quality of goods and services than those provided to other individuals, suggest that you will receive disparate pricing or quality of our goods or services, or retaliate against any ������ employees, job applicants, or independent contractors for exercising any right under the CPRA.