Privacy & Consumer Health Data Notice

Last updated: September 26, 2025

This Notice explains how TerSera Therapeutics LLC and its affiliated companies (collectively, “TerSera,” “us” or “we”) handle the personal information that we collect, including from our websites (“TerSera Sites”).

This notice serves as our Notice at Collection under the California Privacy Rights Act. This Notice also provides required disclosures regarding personal information and/or health data under applicable law, including but not limited to the privacy laws of the states of Washington, Nevada, and New York.

How does this privacy policy define “personal information”?

“Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Examples of personal information include your name, your postal address, and your telephone number.

What personal information does TerSera collect?

TerSera collects (and has collected in the past 12 months) the following categories of personal information:

Type of Information	Source	Purpose
Identifiers, including your name, postal address, email address, date of birth, and phone number	Directly from you when you provide this information	To provide the services for the purpose of which you provided the information, such as the co-pay program, patient assistance program, Hub/reimbursement information, or the clinical nurse educator program. With respect to healthcare providers, TerSera receives identifiers from third parties that collect such information to analyze the use of our products.
Customer records, such as name, insurance policy number, medical information, financial information, and your signature	Directly from you when you provide this information	To provide the services for the purpose of which you provided the information, such as the co-pay program, patient assistance program, Hub/reimbursement information, or the clinical nurse educator program.
Protected classifications, such as age, sex, and medical condition	Directly from you when you provide this information	To provide the services for the purpose of which you provided the information, such as the co-pay program, patient assistance program, Hub/reimbursement information, or the clinical nurse educator program.
Commercial information, including information about the TerSera products and services you may purchase and use	Directly from you when you provide this information and through claims processing data	To provide the services for the purpose of which you provided the information, such as the co-pay program, patient assistance program, Hub/reimbursement information, or the clinical nurse educator program.
Internet or other electronic network activity information, such as your IP address, device ID, and information we collect about how you use the TerSera Sites	Automatically from your device when you visit TerSera Sites	To analyze and improve the TerSera Sites and optimize our marketing.
Employment related information, such as employment and education history	Directly from you when you apply for employment positions	To assess employment applications.
Inferences drawn from the above-listed categories of information	Primarily from information provided directly by you	To provide our services to you and to optimize our marketing.

For the categories above, TerSera retains the information until the purpose is fulfilled.

As noted in the table above, TerSera collects information that is submitted by you, and information that is received automatically. Below is additional information regarding these two channels for collecting information.

1. Information you submit:

TerSera collects personal information that you enter into data fields on TerSera Sites. For example, you may submit your name, postal address, e-mail address, and/or other information in order to receive information about various subjects, register for TerSera programs, contact TerSera customer service, respond to TerSera surveys, or apply for a job at TerSera. Do not provide TerSera with any information that is not specifically requested, such as your medical history.

2. Passive collection of information:

TerSera Sites may collect information about your visits to such sites without you actively submitting such information. This may include, but is not limited to, the pages you view, the operating system you use, and your movement within TerSera Sites. Information may be collected using various technologies, such as cookies, Internet tags, and Web beacons. Your Internet browser automatically transmits to TerSera Sites some of this information, such as the URL of the website you just visited and the browser version your computer is operating. Passive information collection technologies can make your use of TerSera Sites easier by allowing TerSera to provide better service, customize sites based on consumer preferences, compile statistics, analyze trends, and otherwise administer and improve the TerSera Sites.

Certain features of TerSera Sites may not work without use of passive information collection technologies. These technologies can also allow third parties to collect personally identifiable information about your online activities over time and across different internet websites, online or cloud computing services, online applications, or mobile applications.

3. Collection from third parties:

TerSera collects personal information from third parties, such as marketing partners and public and third-party databases, with which TerSera interacts during the normal course of business.

How does TerSera use personal information?

In addition to the purposes listed in the table above, TerSera uses personal information for the following purposes:

Respond to your questions and provide customer service.
Tailor our services and TerSera Sites for you.
Communicate with you regarding TerSera’s products.
Inform you of products or promotions that we believe may be of interest to you.
Aggregate the personal information with other information in an anonymized format to be used for other purposes, such as improving our products and services and business analysis. When we aggregate or anonymize information, it is no longer personal information and may be used for any purpose.

Who does TerSera share personal information with?

We share personal information with our subsidiaries and affiliates, and with contractors, service providers, and other entities that support our business and provide you with our products and services, solely for business purposes. These sharing practices include sharing of information regarding your activity on our websites (such as when you download a file, click a link, sign up, search for a term, or play a video) with our analytics vendor for the purposes of analytics.

When TerSera provides your personal information to individuals and entities that assist us with our business activities, it is TerSera’s practice to require those individuals and entities to keep your personal information confidential and to use your personal information only to perform functions for TerSera.

TerSera may also share your information as follows:

With potential transaction partners, service providers, advisors, and other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company, or we sell or transfer all or a portion of our assets or business; and
to (a) fulfill a government request; (b) conform with the requirements of law or to comply with legal process served on us; (c) protect or defend our legal rights or property, the TerSera Sites or their users, or third-party licensors of any material on the TerSera Sites; or (d) in an emergency to protect national security or the health or safety of the users of the TerSera Sites or the general public.

Our disclosures of personal information as described in this section apply to each of the categories of personal information we collect.

What choices do I have about how TerSera collects and use personal information about me?

Depending on your state of residence (including specifically, California, Colorado, Virginia, and Utah) and the applicability of the relevant laws to TerSera, you may have a legal right to: (1) know what personal information we collect, use, disclose, and sell; (2) request that we delete your personal information; (3) access and obtain a copy of your personal information that we collect; (4) request correction of inaccurate personal information; (5) opt out of targeted advertising; or (6) limit the use and disclosure of certain sensitive information. We will honor your request to the extent required by applicable law and will make a good faith effort to honor your request in all other cases.

Residents of certain states (including California, Washington, and Nevada) may also have the right to seek dispute resolution or arbitration as provided under their respective state laws. Please refer to the relevant state privacy authority or contact us for further details on dispute resolution options available to you.

Should you exercise any of your privacy rights, TerSera will not discriminate against you by offering you different pricing or products, or by providing you with a different level or quality of products, based solely upon this request. However, certain TerSera relationships may require your consent to have your personal information shared with TerSera to provide the service or to allow us to use and disclose your personal information to provide the TerSera relationships. When you exercise your deletion right, you may lose access to certain aspects of TerSera relationships that require your personal information to perform the service.

If you or your authorized representative have questions or would like to make a request to exercise any of your rights described in this section, please contact us by clicking the Contact Us link on this website or by e-mailing us at legal@tersera.com. After you make your request, we will use the information we have to verify your identity (and if applicable, your authorized agent’s identity), and to match the personal information we have collected about you, if any, to your verified identity. Our verification process may include a request for additional information to confirm your identity or your authorized agent’s identity, or to obtain proof that you have given your authorized agent permission to act on your behalf. If our verification process is successful, we will respond to your request within the time and in the manner required by applicable law. If we cannot validate the identity of you and/or your authorized agent or obtain proof that you have given your authorized agent permission to act on your behalf, we will attempt to contact you to inform you. If you disagree with our response to your request, you may appeal the request by submitting supporting documentation to legal@tersera.com.

You may limit the amount and type of personal information that TerSera and any affiliated sponsors receive about you by choosing not to enter any personal information into forms or data fields on TerSera Sites. Some of our online services can only be provided to you if you provide us with appropriate personal information. Other parts of TerSera Sites may ask whether you wish to opt out or opt into our contact lists for offers, promotions, and additional services that may be of interest to you.

You may also control how the TerSera Sites use tracking technologies, such as cookies, to "remember" your personal information, such as user IDs or mailing addresses, on return visits by navigating to the Cookie Settings widget provided on the TerSera Sites. Some Internet browsers also allow you to limit or disable the use of tracking technologies that collect unidentifiable information.

We do not recognize “Do Not Track” signals from browsers. For more information about Do Not Track, please visit https://www.allaboutdnt.com.

To submit a request pertaining to our privacy practices, please email legal@tersera.com.

How does TerSera secure personal information?

It is TerSera’s practice to implement safeguards to protect the personal information we collect; however, the confidentiality of personal information transmitted over the Internet cannot be guaranteed. We urge you to please be careful and responsible whenever you are online and exercise caution when transmitting personal information over the Internet, especially personal information related to your health. TerSera cannot guarantee that unauthorized third parties will not gain access to your personal information; therefore, when submitting personal information to TerSera Sites, you must weigh both the benefits and the risks.

How does TerSera protect the privacy of children?

TerSera does not knowingly collect or use any personal information from children (we define "children" as minors younger than 13) on TerSera Sites. We do not knowingly allow children to order our products, communicate with us, or use any of our online services. If you are a parent and become aware that your child has provided us with information, please contact us using one of the methods specified below, and we will work with you to address this issue.

How will I know whether TerSera has updated this policy?

TerSera reserves the right to amend this Privacy Policy without prior notice to reflect technological advancements, legal and regulatory changes, and good business practices. If TerSera changes its privacy practices, a new Privacy Policy will reflect those changes and the effective date of the revised Privacy Policy will be communicated in the revised Privacy Policy. We will also provide any additional notices, as required by applicable law.

Sale of Information

We are not in the business of selling the information we collect about you to others and we do not provide information about you to others in exchange for monetary compensation. However, certain U.S. state laws define “sale” as disclosing or making available personal information to a third party in exchange for monetary or other valuable consideration, and “sharing” includes disclosing or making available personal information to a third party for purposes of cross-contextual behavioral advertising.

While we do not disclose personal information to third parties in exchange for monetary compensation, our use of third-party analytics and advertising cookies may be considered “selling” and “sharing” in certain jurisdictions. Based on these definitions, we may “sell” or “share” the following categories of personal information: identifiers; commercial information; location information; Internet and network activity information, and sensitive personal information (e.g., your Internet and network activity information when you visit some of our health-related pages on our Sites).

We may disclose these categories to third-party advertising networks, analytics providers, and social networks for purposes of marketing and advertising and to improve and measure our ad campaigns. We may also share limited information, such as a unique personal identifier with data brokers for purposes of marketing and advertising and to improve and measure our ad campaigns. You may control this sharing of your personal information through the Cookie Settings widget provided on the TerSera sites.

Cross-Border Data Transfers

We may transfer your personal data to countries outside of your jurisdiction, including the United States and other countries that may not have the same data protection laws as your home country. For individuals in other jurisdictions where additional safeguards are required, we take appropriate supplementary measures to protect your data, in line with applicable legal requirements and regulatory guidance.

How can I contact TerSera?

You may contact us by clicking on the Contact Us link on this website, by e-mailing us at legal@tersera.com, or by writing to us at our postal address: Legal Department, TerSera Therapeutics, 520 Lake Cook Rd, Suite 500, Deerfield, IL 60015.

Pharmacovigilance

To learn more about how we handle personal information in connection with pharmacovigilance activities, product complaints, and medical inquiries, please review our Privacy Notice for Product Safety, Complaints, and Medical Inquiries.

Unless otherwise specified, all company and product names appearing in this Website are trademarks owned by or licensed to TerSera Therapeutics LLC, its subsidiaries or affiliates. No use of any TerSera trademark, trade name, or trade dress in this Website may be made without the prior written authorization of TerSera, except to identify the product or services of the company.