Privacy Policy

Powerhouse Therapeutics may provide additional privacy notices to individuals at the time we collect their data (e.g. clinical trial participants or employment candidates) that describe our privacy practices in connection with specific activities and will apply to the information you provide at that time, in addition to this notice.

Please note this Privacy Notice does not apply to Powerhouse Therapeutics' processing of employee or contractor data.

BY PROVIDING YOUR PERSONAL DATA TO POWERHOUSE THERAPEUTICS OR OTHERWISE USING OUR WEBSITES OR MOBILE APPLICATIONS, YOU ACKNOWLEDGE THAT YOU UNDERSTAND THE TERMS OF THIS PRIVACY NOTICE AND WISH TO CONTINUE TO PROVIDE YOUR PERSONAL DATA FOR THE PURPOSES DESCRIBED.

Whose personal data we collect

We collect personal data from the following types of individuals: clinical trial participants, patients, patient family members, caregivers or advocates, physicians and other healthcare providers, clinical trial investigators, researchers, pharmacists, contractors, consultants, job applicants, volunteers, visitors to our offices, and other individuals who interact directly with Powerhouse Therapeutics or its service providers or research partners.

How we collect your personal data

You directly provide Powerhouse Therapeutics with most of the data we collect. We collect and process your personal data when you:

• Provide the information to us in person, via phone, or via email
• Enter your personal data via our websites and mobile apps
• Use or view our websites or mobile applications via your browser’s cookies

Powerhouse Therapeutics may also receive your partially deidentified or “pseudonymized” data indirectly from the following sources:

• Healthcare providers, such as your doctor(s). Your authorization or release will be obtained prior to obtaining this information to the extent required by applicable law
• Research organizations and clinical trial investigators with whom we contract
• Public records
• Third party service providers or business partners with whom we contract
• Recruiters

Types of personal data we collect

The types of personal data we collect include:

• Health and medical information, we collect in connection with sponsoring and managing clinical trials, conducting research, providing patient support programs, and tracking adverse event reports
• Personal and business contact information and preferences (such as name, job title and employer name, email address, mailing address, phone number, and emergency contact information)
• Biographical and demographic information (such as date of birth, age, gender, marital status, and information regarding any parents or legal guardians)
• Professional credentials, educational and professional history, institutional and government affiliations, background checks, performance reviews, and information of the type included on a resume or curriculum vitae education and work history
• If you are a third party with whom we have or are contemplating a contractual relationship, such as a healthcare professional, we collect publicly-available information related to your practice, such as license information, disciplinary history, prior litigation and regulatory proceedings, and other due diligence related information
• Payment-related information we need to pay for services and products that individuals may provide to us (such as tax identification number and financial account information)
• From healthcare professionals, we collect information about the programs and activities in which you have participated, our interactions with you, and the agreements you have executed with us
• Security and access credentials, such as username and password that may be created in connection with establishing an account on our websites or mobile applications
• Your photograph, social media handle or digital or electronic signature
• If you are a visitor to a Powerhouse Therapeutics office location, we collect visual images captured on closed circuit television (CCTV)
• Other information you provide to us (such as in emails, on phone calls, through our websites or mobile applications, or in other correspondence)

How we use your personal data

To the extent permitted by applicable local law, we collect your personal data for the following purposes:

• Communicating with you about the products and services we offer, and responding to requests, inquiries, comments, and suggestions
• Analyzing and enhancing our communications and strategies (e.g. effectiveness of emails or our websites and mobile applications)
• Operating, securing, and improving our business (including both physical premises and digital environments)
• Developing and personalizing customer relationship management activities, including the delivery of programs and materials, as well as surveys and market research
• Staffing, facilitating, conducting and managing clinical trials
• Tracking and responding to safety and product quality concerns (including product recalls)
• Complying with regulatory monitoring and reporting obligations (including those related to adverse events, product complaints, spend transparency, and patient safety)
• Defining and managing appropriate patient engagement and enrollment activities
• Identifying, interacting, and engaging with healthcare professionals, including thought leaders and external experts
• Facilitating and improving our recruitment activities (such as processing employment applications, evaluating a job candidate for an employment activity, analyzing trends, and monitoring recruitment statistics)

In some situations, we may have a separate agreement or relationship with you with respect to a specific type of processing of your data, such as if you participate in a special program, activity, event, or clinical trial. These situations will be governed by specific terms, privacy notices, or consent forms that provide additional information about how we will use your personal data that we collect at that time.

Personal data we share

Powerhouse Therapeutics will share your personal data with our service providers and third parties with which we contract for the purposes described in either this Privacy Notice or through a specific “in-time” privacy notice provided at the time we collect the information.

The types of individuals or entities with which we share personal data include:

• Powerhouse Therapeutics affiliates and research partners
• Service providers that perform services on our behalf, including:
• Contract research organizations that conduct clinical trials on our behalf
• Customer service and patient support providers (including for product quality and adverse event reporting etc.)
• Data storage and analytics and technology providers (including technology support, marketing and laboratory service providers)
• Event planning and travel organizations that help facilitate Powerhouse Therapeutics programs
• Regulators worldwide, as required by law, including in connection with monitoring, review and approval of our studies, products and services, and adverse event reporting
• Healthcare professionals, researchers, academics, and public health organizations

Unless prohibited by applicable law, we may transfer your personal data as part of a corporate business transaction, such as a merger, acquisition, reorganization, joint venture or the sale of our assets. We may also transfer your personal data to a successor entity in the event of insolvency, bankruptcy or receivership.

In addition, we may share your personal data to comply with legal and regulatory requirements, comply with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons by a federal, state, or local authorities, and protect against fraud, illegal activity (such as identifying and responding to incidents of hacking or misuse of our websites and mobile applications), and exercise or defend legal claims.

Powerhouse Therapeutics does not sell your personal data or make your personal data available to any other party for their own proprietary purposes, except as required by applicable law.

Cookies and other automated information collection

Cookies are text files placed on your computer to collect standard internet log information and visitor behavior information. When you visit our websites, we may collect information from you automatically through cookies or similar technology. For additional information about cookies, visit allaboutcookies.org.

Powerhouse Therapeutics may also collect certain information about the use of our websites and mobile applications by automated means, such as cookies, web beacons and other technologies (“Automated Information”). We or our service providers and business partners may collect Automated Information about your online activities over time and across our own and third-party websites when you use our websites and mobile applications, including to deliver commercial content on our behalf. In jurisdictions where Automated Information is considered personal data, or if we associate Automated Information with personal data, we will treat Automated Information as personal data and process such information in accordance with this Privacy Notice.

The Automated Information that we collect from time to time includes:

• Details about the devices that are used to access our websites or mobile applications (e.g. IP address, and type of operating system and web browser)
• Dates and times of visits to, and use of, our websites and mobile applications
• Details about your interactions with emails that we may send you, including the links on which you click and your interactions with our linked sites
• Information about how our websites and mobile applications are used (such as the content that is viewed on our websites and how users navigate our pages)
• URLs that refer visitors to our websites

Web browsers may offer users of our websites the ability to disable receiving certain types of cookies; however, if cookies are disabled, some features or functionality of our websites may not function correctly. You can visit www.aboutcookies.org/how-to-control-cookies for information about cookies and how to disable them.

Use of Google Analytics

Powerhouse Therapeutics uses Google Analytics, a web analytics service provided by Google LLC, to collect and analyze information about how visitors use our website. Google Analytics uses cookies and similar technologies to track and report on website traffic. This information helps us understand user behavior, such as which pages are most frequently visited and how long users spend on our site, enabling us to improve our website and enhance user experience. The data collected through Google Analytics is anonymized and does not identify individual users. However, Google may process the data in the United States or other countries where it operates, and this processing is subject to Google's own privacy policies. You can opt out of Google Analytics by using the Google Analytics opt-out browser add-on, available at Google Analytics Opt-out (https://tools.google.com/dlpage/gaoptout).

Use of Cloudflare

Powerhouse Therapeutics uses Cloudflare, Inc. as a third-party service provider to help manage and protect our website. Cloudflare provides us with web traffic optimization, content delivery, and security services, including protection against Distributed Denial of Service (DDoS) attacks, malicious bots, and other threats. As a part of these services, Cloudflare may collect and process data, including IP addresses, DNS queries, and other technical information, to ensure the security and performance of our website. This data is processed by Cloudflare in accordance with their own privacy policies and may be transferred to and stored on servers in various countries where Cloudflare operates. The use of Cloudflare is essential to maintaining the integrity and availability of our website.

Use of Google Sites

Powerhouse Therapeutics may host certain aspects of its website on Google Sites, a web hosting service provided by Google LLC. Google Sites enables us to create and maintain our website with ease, while benefiting from Google’s infrastructure, which includes robust security measures and reliable performance. By using our website, your interactions may be processed by Google’s systems, which may collect data such as IP addresses, browser types, and usage patterns to ensure the website functions correctly and securely. This data is processed in accordance with Google’s privacy policies and may be transferred to and stored on servers in various countries where Google operates. The use of Google Sites allows us to deliver a secure and stable website experience to our visitors.

Legal basis for processing data

In some cases, Powerhouse Therapeutics has a legitimate interest to process your personal data that we collect, such as to operate, evaluate and improve our business; to facilitate and manage clinical trials or other patient advocacy and engagement programs; to promote scholarly research; to support our clinical trial recruitment activities; to facilitate a sale of our assets, merger or acquisition; and fraud prevention. We may also process your personal data as necessary for the protection against criminal offences, safeguarding of domestic law, and the maintenance of a safe workplace for staff.

In other cases, Powerhouse Therapeutics processes personal data to fulfill our contracts with our business partners, such as healthcare professionals or our research partners.

It may be also necessary for Powerhouse Therapeutics to process your personal data to establish, exercise or defend against fraud, illegal activity, and claims and other liabilities, including enforcing the terms and conditions that govern the services we provide.

Powerhouse Therapeutics’ processing of your health and other associated information may be necessary to comply with our legal obligations, and for reasons of public interest in the area of health or for scientific or historical research purposes, such as with respect to adverse event and product safety reporting.

Powerhouse Therapeutics may also process your personal data as specifically permitted by applicable legal requirements, such as laws and regulations that authorize Powerhouse Therapeutics to process your personal data for purposes of conducting clinical trials.

When Powerhouse Therapeutics relies on consent for the processing of your personal data, we will seek your consent at the time we collect your personal data. For information on how to withdraw consent, please see the “Personal Data Access Rights” section of this Privacy Notice.

International data transfers

We may transfer your personal data to countries other than the country in which the data was originally collected for the purposes described in this Privacy Notice. The countries to which we transfer your personal data may not have the same data protection laws as the country in which you initially provided the information. When we transfer personal data across borders, we consider a variety of requirements that may apply to such transfers, but in any event, we will only transfer your personal data to a destination and in a manner that ensures your personal data remains protected to the same or equivalent level as in the country of origin, including executing contractual clauses which commit the recipient to process personal data in accordance with applicable law in the country of origin.

We operate in the United States. Our servers and offices are located in the United States, so your personal data may be transferred to, stored, or processed in the United States.

Personal data access rights

You have the right to exercise the following rights in relation to the personal data that we collected about you. Please note that if your exercise of these rights limits our ability to process your personal data, we may not be able to provide our products or services to you, or to otherwise engage with you going forward.

We will verify the identity of each individual making any request regarding personal data, to help ensure that we provide the information only to individuals to whom the personal data pertains and allow only those individuals or their authorized representatives to exercise rights with respect to that personal data. In the event we cannot comply fully or at all, with your request, we will notify you of the reasons.

Right to withdraw your consent

Where you provided consent to Powerhouse Therapeutics to process your personal data, you may withdraw such consent by following the instructions provided at the time of collection or by contacting us using details in the Contact Us section below. In some instances, withdrawing your consent may mean we can no longer provide products or services to you or otherwise engage with you.

Right to access your personal data

You have the right to request from Powerhouse Therapeutics copies of the personal data that we maintain about you. This includes the right to request us to disclose to you the: categories of personal data we collected about you; categories of sources from which the personal data is collected; business or commercial purpose for collecting your personal information; categories of third parties with whom we share your personal information; and specific pieces of personal information we collected about you.

Right to rectification

You have the right to request Powerhouse Therapeutics to correct any errors in your personal data. You also have the right to request us to complete personal data you believe is incomplete.

Right to object to processing of your personal data

You have the right to object to or “opt-out” of our processing of your personal data.

Right to erasure

You have the right to request that we delete your personal data from our records, under certain conditions.

Right to data portability

You have the right to request that Powerhouse Therapeutics transfer personal data that you provided to us to another organization, or directly to you, under certain conditions.

Minors

We do not knowingly collect personal data from children under age 13 through our websites or mobile applications. If we learn that we have collected personal data directly from a child under the age of 13 through our websites or mobile applications, we will delete that information.

How we protect personal data

Powerhouse Therapeutics securely stores your data and maintains reasonable and appropriate administrative, technical and physical security procedures and practices designed to protect the personal data we maintain against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. However, we cannot guarantee that the measures we maintain will ensure the security of your personal data. We will keep your personal data in a form that permits identification of you only for as long as necessary for the purposes for which it was processed.

Links to third-party websites and content

For your convenience and information, we may provide links to websites and other third-party content that is not owned or operated by Powerhouse Therapeutics. The websites and third-party content to which we link may have separate privacy notices or policies. Our privacy policy applies only to our websites and applications, and Powerhouse Therapeutics is not responsible for the privacy practices of any entity that we do not own or control, or for the legality of any third party content. If you click on a link to another website, you should read the privacy policy associated with that website.

Updates to our privacy notice

Powerhouse Therapeutics keeps its privacy policy under regular review and places any updates on this web page. When we update this Privacy Notice, we will notify you of changes that are deemed material under applicable legal requirements by providing notification as required under applicable law. We may also notify you of changes to the Privacy Notice in other ways, such as via email or other contact information you have provided.

Children's Online Privacy Protection Act (COPPA) Compliance

Powerhouse Therapeutics is committed to protecting the privacy of children. Our website is not intended for use by children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have inadvertently collected personal data from a child under 13 without verifiable parental consent, we will take steps to delete such information from our records as quickly as possible. If you believe that we might have any information from or about a child under 13, please contact us using the information provided in the "Contact Us" section of this Privacy Notice.

California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) Compliance

While Powerhouse Therapeutics primarily operates in Delaware and Texas, we are committed to complying with privacy laws across the United States, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) for residents of California. If you are a California resident, you have the right to request information about the personal data we collect, use, disclose, and sell. You also have the right to request that we delete your personal data and to opt out of the sale of your personal data. To exercise these rights, or for more information, please contact us using the details provided in the "Contact Us" section of this Privacy Notice. We do not discriminate against individuals who exercise their rights under the CCPA or CPRA.

Data Breach Notification

Powerhouse Therapeutics takes the security of your personal data seriously. In the event of a data breach that involves your personal data, we will notify you and the relevant authorities in compliance with applicable state and federal laws, including the data breach notification laws in Delaware and Texas. We will provide this notification without unreasonable delay, consistent with the legitimate needs of law enforcement and any measures necessary to determine the scope of the breach and restore the integrity of our data systems.

Third-Party Data Sharing

We may share your personal data with third-party service providers, such as Google Analytics, Cloudflare, and Google Sites, to help us operate, maintain, and secure our website. These third parties may collect, process, and store your personal data in accordance with their own privacy policies. We encourage you to review the privacy policies of these service providers to understand how your data is handled. If you have any concerns about how your data is shared, please contact us, and we will do our best to address your concerns.

Accessibility Compliance

Powerhouse Therapeutics is committed to ensuring that our privacy policy and website are accessible to all individuals, including those with disabilities. We strive to comply with the Americans with Disabilities Act (ADA) by providing our privacy notice in a format that is accessible to people with disabilities. If you encounter any barriers to accessing information on our website, please contact us, and we will work with you to provide the information in an accessible format.

No discrimination

You have the right to not be discriminated against by Powerhouse Therapeutics because you exercise any of the above rights.

You have the right to file a complaint with a regulator or data protection supervisory authority in your jurisdiction.

As stated above Powerhouse Therapeutics does not “sell” personal data as that term is defined under privacy applicable laws.

When submitting a request to exercise any of these rights, please describe your relationship with us and your request, with sufficient detail to allow us to properly understand, evaluate, and respond to it. We will need to verify your identity before processing your request, which may require us to request additional personal data from you.

Contact us

You may contact us with questions, comments, or complaints about this Privacy Notice or our privacy practices, or to exercise your rights regarding your personal data processed by us. When raising a request or complaint, please provide sufficient details (including your relationship with us) and any relevant documentation. The contact information for our global Privacy Office:

Powerhouse Therapeutics Inc

PO Box 380364

San Antonio, TX 78238

‍

‍