Privacy Policy

Effective Date: February 22, 2024

1.0 Purpose

Totus Medicines Inc. (“Totus”, ​“we”, ​“our”, or ​“us”) with address at 1480 64^th Street, Suite 300, Emeryville, CA, 94608 USA, is a United States-based drug discovery and development company, which conducts its business activities mainly in the US but with some specific projects running globally. For the purposes of conducting its business, Totus might need to use your personal information and hereby commits to ensure confidential­ity of your personal information by adhering to the applicable laws and implementing general data protection principles and controls to safeguard your data. This Global Privacy Statement explains how we collect, use, share and protect personal information while operating our business and how you, as an individual, can exercise your privacy rights and choices with us.

2.0 SCOPE

This Global Privacy Statement (“Privacy Statement”) applies to all the personal information that we collect when individuals interact with us though our website, social networking forums or by other means, as well as when we use personal data while operating our business. Personal Information is defined by the applicable laws but generally means information that can reasonably be linked to an identifiable individual, such as a patient, a healthcare provider, a job applicant, and others. It may also include information about a browser or device used by such an individual. This Privacy Statement will be supplemented by applicable Privacy Notices provided to individuals in the scope of our business activities. In case of discrepancies between this Privacy Statement and the information provided in the applicable Privacy Notices; the latter shall prevail.

3.0 POLICY REQUIREMENTS

3.1 Personal information collected may include but is not limited to:

3.1.1 Contact information, such as name, address, email, telephone number, fax number, organization name and/​or job title.

3.1.2 Unique identifiers and preference information such as username, password, marketing preferences, internet protocol (IP) address, browser type, operating system, computer or mobile device or navigation and clickstream behavior for online interactions.

3.1.3 Resume or CV, including work history, professional qualifications, publications, awards, references, completed training and signature.

3.1.4 Food restrictions, passport info for travel bookings or identifica­tion purposes, social security number (where required by law), bank account details, (emergency) contact persons, family information (where applicable and in accordance with local law).

3.1.5 Sensitive personal information, such as health information for research and statistical purposes or criminal records for due diligence procedures in accordance with applicable law.

3.2 We will use your personal information for purposes including, but not limited to:

3.2.1 Manage our website, improve your online experience, administer your interactions through our website or social networking forums, and respond to any query or request you send through our online platform.

3.2.2 Recruitment and human resources management in case you submit your resume for a job application or reach out spontaneously to learn more about any future opening positions.

3.2.3 Administer the relationship with you, as a customer, provider, or business partner.

3.2.4 Conduct clinical research studies.

3.2.5 Register visitors in our facilities or organized events and conferences.

3.2.6 To comply with any applicable law, regulation, legal process, or governmental request.

If you choose not to provide the personal information we reasonably require, it may be impossible for us to provide the information or services you have requested.

3.1 Legal Bases We Rely On When Using Your Information

3.1.1 The legal basis we use to process your personal information will be dependent on the processing purposes and the jurisdictional legal requirements. We do not process your personal information without a legitimate reason, either being your consent, or legal or contractual need; nonetheless, where using EU/EEA/UK citizens personal data, generally we rely on the following legal basis:

3.1.2 Compliance with a legal obligation, e.g., where we need to review professional qualifications of medical staff for compliance with (local or industry) laws.

3.1.3 Legitimate interest, e.g., where we collect contact information, preferences, and details for travel and participation in organized events.

3.1.4 For the exercise of public authority in strictly limited cases, e.g., where we would be required to cooperate with government bodies in case of illegal conduct.

3.1.5 For scientific or research purposes, e.g., for clinical research studies, ensuring that adequate safeguards are implemented to guarantee confidentiality.

3.1.6 For public interest in the area of public health to ensure high standards of quality and safety of healthcare and products.

3.4 Disclosure Of Information

To conduct our business activities, we might need to share your personal information with providers, business partners or regulators, including those located outside your country of residence. We commit to comply with all applicable laws and regulations regarding the sharing of your personal information, including executing adequate contracts that ensure the recipients of your data will implement equivalent controls to protect your data or adduce in adequate safeguards when the recipients of your information are located in third countries.

3.5 Retention Of Information

We will retain your personal information for as long as it is necessary to comply with legal obligations or as required for legitimate business purposes.

4.0 SECURITY

We implement physical, technical, and administra­tive controls to protect your personal information from unauthorized access, use or disclosure, and monitor such controls to help minimize risks from any security threats.

5.0 RIGHTS

You have rights under the applicable data protection laws, regarding your personal information, those will be dependent on the jurisdictional legal requirements and might be clarified in applicable Privacy Notices. Nonetheless, as standard rights, you may have the right to inquiry about what personal information we hold about you and how we use it, ask for corrections or rectifications and if applicable, object to the use of your personal information or to have your information erased. You may also have the right to withdraw your consent if consent was provided at the time of the collection of your data or to lodge a complaint to the data protection authority of your country of residency if the applicable law will grant you with such right. You may exercise these or any other applicable rights by reaching out to us using the contact details found in the section below.

6.0 CONTACT

To make a request or submit questions about our Privacy Statement, please contact us by either:

• Visiting our Contact Us page
• Data Protection Officer at: DPO@​totusmedicines.​com.

7.0 UPDATES TO NOTICE

This Privacy Statement became effective on the effective date. We may update it from time to time by posting a new Privacy Statement on our website. You are advised to consult our website regularly for any changes.