Privacy Policy

Data Controller

For purposes of the GDPR and other applicable data-protection laws, the controller responsible for personal data processed through the Site is:

Redox Therapeutics, Inc.
United States

Privacy inquiries: privacy@redoxtherapeutics.com

If Redox Therapeutics appoints a representative in the European Economic Area pursuant to Article 27 of the GDPR, the representative's contact information will be provided in this Privacy Policy where required by law.

Scope of This Policy

This Privacy Policy applies to personal data collected through:

• visits to the Site;
• contact and inquiry forms;
• email and other communications with Redox Therapeutics;
• technology licensing inquiries;
• research and development inquiries;
• engineering and manufacturing inquiries;
• clinical collaboration inquiries;
• strategic partnership inquiries;
• investment inquiries; and
• other general business or professional inquiries.

This Privacy Policy does not apply to third-party websites or services that may be linked from the Site.

Personal Data We May Collect

Information You Provide Directly

When you contact Redox Therapeutics or submit an inquiry through the Site, we may collect:

• name;
• organization, company, or institution;
• email address;
• telephone number, if provided;
• professional or business affiliation;
• area of interest;
• the contents of your message;
• subsequent correspondence and communications with us; and
• other information you voluntarily provide.

The Site's Contact form is intended for professional, scientific, business, collaboration, licensing, investment, and general inquiries.

Submitting an inquiry through the Contact form does not automatically enroll you in a marketing or promotional mailing list.

Technical Information

When you access the Site, our web-hosting and infrastructure providers may automatically process limited technical information necessary to deliver, operate, maintain, and secure the Site.

This information may include:

• Internet Protocol (IP) address;
• browser type and version;
• device and operating-system information;
• requested webpages and files;
• referring webpage, where transmitted by your browser;
• date and time of requests;
• server-response information;
• security-related events; and
• error or diagnostic information.

Such information may be contained in standard web-server, infrastructure, or security logs.

We do not currently use this information to create advertising profiles or track individuals across unrelated websites.

Please Do Not Submit Patient or Sensitive Health Information

The Site's general Contact form is intended for business, scientific, professional, collaboration, licensing, investment, and general inquiries.

Do not submit patient-identifiable information, medical records, protected health information, genetic information, clinical case data, or other sensitive health information through the general Site Contact form.

If a future Redox Therapeutics activity requires the processing of such information, it will be subject to appropriate agreements, notices, security measures, and legal requirements separate from this general website Privacy Policy.

How and Why We Use Personal Data

Where processing is based on our legitimate interests, those interests generally include operating and securing our business, responding to professional inquiries, developing business and research relationships, protecting our legal rights, and maintaining effective communications.

We balance those interests against the rights and interests of individuals whose personal data we process.

Where we rely on consent for a particular activity, you may withdraw that consent at any time without affecting the lawfulness of processing conducted before withdrawal.

Cookies, Analytics, and Similar Technologies

Current Use of Cookies

The Site does not currently set cookies for analytics, advertising, behavioral tracking, personalization, or marketing purposes.

We also do not currently use advertising pixels or similar technologies to track visitors across unrelated websites.

Accordingly, the Site does not currently provide a cookie-consent banner or Cookie Settings interface because there are no non-essential cookies for visitors to accept, reject, or manage.

Cloudflare Turnstile

We use Cloudflare Turnstile, a security and anti-abuse service provided by Cloudflare, Inc., on the Site's Contact form to help distinguish legitimate visitors from automated traffic and to reduce spam, abuse, and fraudulent submissions.

When the Turnstile widget is used, Cloudflare performs security checks in the visitor's browser and generates a verification token that is submitted with the Contact form. Our server sends that token, together with limited request information such as the visitor's IP address, to Cloudflare for validation before the inquiry is accepted.

Cloudflare may process technical and security information about the browser, device, network connection, and interaction with the security challenge as reasonably necessary to provide Turnstile. Cloudflare states that Turnstile does not access, store, or transmit the contents of user communications, Contact-form entries, or other page inputs.

We use Turnstile solely for Site security, spam prevention, and abuse prevention. We do not use Turnstile for advertising, behavioral profiling, or cross-site marketing.

Turnstile pre-clearance is disabled in our current configuration. We therefore do not use Turnstile to issue a Cloudflare clearance cookie for the purpose of allowing visitors to bypass other Cloudflare security-rule challenges.

Additional information about Cloudflare's privacy practices is available in Cloudflare's Privacy Policy.

Server and Infrastructure Information

The absence of tracking cookies does not mean that no technical information is processed when you visit the Site.

As described above, standard web-server and infrastructure systems may process information such as IP addresses, browser information, timestamps, requested pages, and security or diagnostic information where reasonably necessary to deliver, protect, and maintain the Site.

This operational processing is distinct from advertising or behavioral tracking.

Future Analytics or Cookie Use

Redox Therapeutics may introduce privacy-conscious website analytics or other technologies in the future.

If we introduce cookies, tracking technologies, or other forms of browser storage that require notice or consent under applicable law, we will update this Privacy Policy and implement appropriate consent or preference-management mechanisms before or when such technologies are deployed.

Where legally required, non-essential technologies will not be activated until the required consent has been obtained.

Contact-Form Processing

Information submitted through the Site's Contact form is transmitted to Redox Therapeutics for the purpose of reviewing and responding to the inquiry.

Before a Contact-form submission is accepted, a Cloudflare Turnstile verification token is validated server-side as an anti-spam and anti-abuse security measure.

Contact-form submissions may be processed through our website-hosting, server, security, and email infrastructure providers as necessary to validate, transmit, and deliver the communication.

The website does not currently operate a separate public-facing user account system or customer database through which Site visitors create profiles.

We may retain communications received through the Contact form and subsequent correspondence where reasonably necessary to respond to the inquiry, evaluate a potential relationship or opportunity, maintain appropriate business records, or satisfy legal obligations.

Sharing of Personal Data

We may disclose personal data to third parties where reasonably necessary for the purposes described in this Privacy Policy.

Recipients may include:

• website-hosting and infrastructure providers;
• email and communication providers;
• website development and maintenance providers;
• cybersecurity and anti-abuse service providers;
• cloud hosting or data-storage providers;
• professional advisors, including attorneys, accountants, and consultants;
• research, engineering, manufacturing, licensing, or business partners where appropriate and legally permitted;
• governmental, regulatory, law-enforcement, or judicial authorities when required by law; and
• prospective counterparties and professional advisors involved in a merger, acquisition, financing, restructuring, asset transfer, or similar corporate transaction.

Service providers processing personal data on our behalf are expected to process that information only for authorized purposes and subject to appropriate contractual, confidentiality, and security obligations.

We do not disclose personal data to third parties merely because they request it.

We do not sell personal data collected through the Site for monetary consideration.

International Transfers of Personal Data

Redox Therapeutics is based in the United States.

Accordingly, personal data provided by individuals located in the European Economic Area (“EEA”), United Kingdom, or other jurisdictions may be transferred to, accessed from, or processed in the United States or other countries.

Where the GDPR or other applicable data-protection law requires a particular mechanism for international data transfers, we will use an appropriate lawful mechanism.

Depending on the circumstances, these mechanisms may include:

• an adequacy decision issued by a competent authority;
• the European Commission's Standard Contractual Clauses;
• participation by an eligible recipient in an applicable recognized data-transfer framework;
• supplementary contractual, organizational, or technical safeguards where required; or
• another lawful transfer mechanism permitted by applicable data-protection law.

You may contact us using the information below to request additional information regarding safeguards applicable to relevant international transfers.

Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and for legitimate business, contractual, regulatory, security, and legal requirements.

Retention periods may depend on factors including:

• the nature and purpose of the communication;
• whether an active or potential business relationship exists;
• whether the information is necessary to respond to or document an inquiry;
• contractual obligations;
• applicable statutes of limitation;
• legal, regulatory, accounting, or reporting obligations;
• the need to establish, exercise, or defend legal claims; and
• security, fraud-prevention, or abuse-prevention requirements.

When personal data is no longer reasonably required, we will delete, anonymize, or otherwise dispose of it in accordance with applicable law and our data-retention practices.

Data Security

We use reasonable technical, organizational, and administrative measures designed to protect personal data against unauthorized access, alteration, disclosure, loss, destruction, or misuse.

These measures may include access controls, secure communications, authentication mechanisms, security monitoring, software maintenance, vendor controls, anti-abuse measures, and other safeguards appropriate to the nature of the information.

No Internet transmission or information-storage system can be guaranteed to be completely secure. Accordingly, we cannot guarantee the absolute security of information transmitted to or stored by us.

Your Rights Under the GDPR

Where the GDPR applies to our processing of your personal data, you may have the following rights, subject to applicable conditions and exceptions:

• Right to information — to receive transparent information about how your personal data is processed.
• Right of access — to obtain confirmation of whether we process your personal data and request a copy of that data.
• Right to rectification — to request correction of inaccurate or incomplete personal data.
• Right to erasure — to request deletion of personal data in circumstances provided by law.
• Right to restriction of processing — to request that processing be limited in certain circumstances.
• Right to data portability — where applicable, to receive personal data you provided to us in a structured, commonly used, machine-readable format or request its transfer to another controller.
• Right to object — to object to processing based on legitimate interests in circumstances provided by law.
• Right to object to direct marketing — to object at any time to processing of your personal data for direct-marketing purposes.
• Right to withdraw consent — where processing is based on consent, to withdraw consent at any time.
• Rights concerning automated decision-making — where applicable, to receive protections relating to decisions based solely on automated processing that produce legal or similarly significant effects.

Not all rights apply in every circumstance.

Exercising Your Privacy Rights

To exercise an applicable privacy right, contact:

Email: privacy@redoxtherapeutics.com

Redox Therapeutics, Inc.
United States

Please describe your request sufficiently for us to understand and respond to it.

We may request reasonable information necessary to verify your identity before completing a request.

Where the GDPR applies, we will respond without undue delay and generally within one month of receiving a valid request, subject to extensions permitted by law for complex or multiple requests.

There is generally no fee for exercising GDPR rights, although applicable law permits limited exceptions for manifestly unfounded or excessive requests.

Right to Lodge a Complaint

If you are located in the EEA and believe our processing of your personal data violates applicable data-protection law, you have the right to lodge a complaint with an applicable data protection supervisory authority.

You may contact us first so that we have an opportunity to address your concern, but doing so does not limit your right to contact a supervisory authority.

Marketing Communications

The Site's general Contact form is not a subscription form for promotional communications.

If Redox Therapeutics separately offers or sends marketing communications where permitted by applicable law, recipients may opt out using the unsubscribe mechanism provided in the communication or by contacting us.

Opting out of marketing communications does not prevent us from sending non-promotional communications concerning requested information, an existing business relationship, contractual matters, legal notices, or security matters.

Automated Decision-Making

Redox Therapeutics does not currently use personal data collected through the general Site Contact form to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning an individual.

If this practice changes, we will provide any disclosures required by applicable law.

Children

The Site is intended primarily for professional, scientific, business, and informational audiences and is not directed toward children.

We do not knowingly solicit personal data from children through the Site.

If we become aware that personal data has been collected from a child in circumstances where parental or guardian authorization is legally required, we will take appropriate steps to delete the information.

Third-Party Links

The Site may link to third-party websites, scientific publications, news services, social-media platforms, research institutions, or other external resources.

Redox Therapeutics does not control the privacy or data-processing practices of those third parties.

We encourage visitors to review the privacy notices of third-party websites or services they choose to visit.

Business Transactions

If Redox Therapeutics undergoes or considers a merger, acquisition, financing, restructuring, sale of assets, investment transaction, or similar corporate transaction, personal data may be disclosed to prospective counterparties and their professional advisors where reasonably necessary and subject to appropriate protections.

Personal data may subsequently be transferred as part of the transaction where permitted by applicable law.

Legal Requirements and Protection of Rights

We may preserve, use, or disclose personal data where reasonably necessary to:

• comply with applicable law or legal process;
• respond to lawful requests from governmental or regulatory authorities;
• protect the rights, property, or safety of Redox Therapeutics or others;
• investigate fraud, security incidents, abuse, or unlawful activity; or
• establish, exercise, or defend legal claims.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our Site, technologies, data-processing practices, business activities, or legal requirements.

When changes are made, we will revise the Last Updated date shown at the top of this page.

If we introduce analytics, cookies, advertising technologies, or other materially different data-processing practices, this Privacy Policy will be updated accordingly.

Where required by applicable law, we will provide additional notice or obtain consent before materially changing how personal data is processed.

Contact Us

Questions, requests, or concerns regarding this Privacy Policy or our handling of personal data may be directed to:

Redox Therapeutics, Inc.
12 Brookshire Lane
Philadelphia, PA 19116
United States

Privacy Email: privacy@redoxtherapeutics.com
Website: redoxtherapeutics.com