Privacy Policy

Effective Date: 06 Jan 2022

This Privacy Policy informs you of the policies of Forge Biologics ("us", "we", or "our"). The Privacy Policy describes our practices regarding the collection, use, disclosure, and processing of personal data and the choices associated with that data in connection with the websites (the “Sites”) which we operate and link to this Privacy Policy as well as our products and services (the “Services”).

Additional privacy notices may also be provided to individuals by Forge or a business associate. Forge privacy practices in connection with clinical trials are governed by the applicable clinical trial regulations and associated protocol(s).

Forge is headquartered in the United States and our websites are operated in the United States in accordance with laws of the United States. Visitors to our websites should be aware that the laws of the United States may differ from those of your country of residence. By providing us with your personal information and using our Site(s) or our Services, you acknowledge that your personal information will be transferred and processed in the United States.

Personal Information Definition

Personal Information refers to data about a natural individual who can be identified from data in our possession (or from data in our possession combined with data to which we can reasonably access from another source).

Personal Information We Collect:

We collect different kinds of information depending on the purpose and our interaction with many types of individuals: users of our Site(s), job applicants, business partners, service providers, and clinical trial participants, families, advocates, physicians, and investigators.

• Device and Usage Information

  Data collected automatically either generated using the Site or from the Site infrastructure: Internet Protocol (IP) address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, location data. This is done by using cookies and other tracking technology (if you have enabled this in your device settings). Please see our Cookie Notice for more details.

• General Contact Information (personal and business)

  Data used to enable an individual to be contacted: name, address, telephone number, email address, job title, emergency contact information.

• Health, Medical, and Biographic Information

  Data used to assist with determinations regarding eligibility criteria for enrollment into and progress of clinical trial research studies: information in conjunction with managing clinical trials, administering gene therapies, providing patient and family support, managing expanded access programs, and tracking adverse event reports.

• Recruitment and Professional Information

  Data used to evaluate candidates for employment and consultation: curriculum vitae/resume, job title, work experience, educational information.

• Payment Related Information

  Data used to pay or bill for professional services: tax-identification number, social security number, financial account information.

Children’s Privacy

Our Site(s) are not targeted to and do not intentionally collect personal information from children under the age of 18. If we discover that a child has provided us with personal information without parental consent online through our Site(s), we will take reasonable steps to delete this information. If you are a parent or guardian and believe we may have received personal information from a child under the age of 18 without verification of parental consent, please contact us at privacy@ForgeBiologics.com.

How We Collect Personal Information

We collect personal information in a variety of ways, including our websites and the internet, over the telephone, through correspondence and from other sources, and, through third parties who have authority to disclose personal information to us, or where we are required to do so by law. The personal information collected by us will be limited to those details necessary for the purposes identified to you and necessary for business purposes with respect to our products, services, and other business relationships. Typically, we will explain the purpose for the collection and use of the personal information when we request it. If you provide personal information to us regarding other individuals, you agree to obtain any legally required consent of personal information about the individual in accordance with this Privacy Notice and all other applicable privacy notices.

How We Use Personal Information:

• To Operate the Site(s)

  We use the information we collect to operate, maintain, and better deliver information about our Services on our Site(s), which constitute processing information for our legitimate interests. We share information with third-party technology service providers who provide services such as website hosting, data analysis, information technology, and related infrastructure provisioning, email delivery, auditing, and other services.

• To Communicate About and Provide Our Services.

  We manage and respond to inquiries and requests and send communications; these processing activities constitute a legitimate interest. We additionally send communications to individuals who have consented to the communication. Where we have a contract, this is required to perform that contract or is necessary to determine requirements to enter into that contract. We share information with third parties to manage our marketing and sales inquiries and to process payments.

• To Operate Our Clinical Trials, Assist in Diagnosis, and Participate in Market Research

  We recruit for clinical trials, provide updates regarding clinical trials or products, and provide referrals to clinical trial sites. This data is necessary for scientific research purposes or statistical purposes and these processing activities constitute public interest as well as our legitimate interest. Where we have a contract, this is required to perform that contract or is necessary to determine requirements to enter into that contract. We share information with third parties who assist us with clinical trial and research management services.

• To Evaluate Employment Applications and Consultation Services

  We manage and respond to verify candidate and consultant background information and qualifications as well as contact candidates as part of the evaluation process; these processing activities are based on your consent. We share information with third-party employment service providers such as application hosting for employment applications, payroll services, and insurance and benefits services.

• To Comply with Legal and Regulatory Monitoring and Reporting Obligations

  We comply with any applicable legal requirements and regulatory requests, including drug safety and adverse event reporting as well as personal safety of users of the Sites or public, to protect, investigate, and defend our rights and property against fraudulent, harmful, unauthorized, unethical, or illegal activity, and to protect against legal liability.

• In Case of Business Transfers

  We may share information with a third-party in the event of any business deal (or potential business deal) such as merger, sale, joint venture, assignment, reorganization, transfer, or other disposition of all or any portion of our assets, or in the event of bankruptcy

We may use information for reasons not described in this Privacy Policy when the reason is compatible with the purpose for which it was collected and when permitted by law.

How We Secure and Retain Personal Information:

We utilize industry standard security safeguards, including maintaining physical, electronic, and procedural safeguards, in compliance with applicable laws to protect personal information from loss and unauthorized access, modification, disclosure, inappropriate alteration or misuse.

Employees are trained on the importance of privacy including prohibiting the disclosure of any customer information to unauthorized individuals or parties. Access is restricted to authorized employees who have a legitimate business purpose and reason for accessing personal information.

We securely destroy, erase or de-identify personal information when it is no longer required to fulfill our services and commitments to you or our contractual obligations following applicable business, legal, or regulatory requirements

While we take reasonable steps to protect personal information transmitted electronically as outlined in this notice, we cannot guarantee our ability to do so as no internet transmission is 100% secure.

Your Rights Regarding Your Personal Information:

You may choose to not provide your personal information. If we are required by law or if we need your personal information to provide you with our Services, we may not be able to provide those Services and may need to end our relationship with you.

You can add, correct, or update certain personal information. Please note that before we can provide you with any information or correct any inaccuracies, we may ask you to verify your identity and to provide other details to help us respond to your request.

Special Notice to European Users:

If you are located in the European Economic Area, you have the following rights under GDPR:

servoce

• To Access or Transfer

  You may ask for a copy of the personal information we hold about you to be sent to you or to another organization.

• To Correct or Complete

  You may ask that we correct any personal information you believe is incorrect or incomplete.

• To Limit or Restrict

  You may ask that we restrict the processing of your personal information, under certain circumstances.

• To Erase

  You may ask that we erase your personal information, under certain circumstances.

• To Object

  You may have the right to object to our processing of your personal information, under certain circumstances.

We may need other specific information from you to confirm your identity and help us process your request. Applicable laws and regulations may allow us or require us to decline your request. Please use the contact information below.

Contacting Forge About Personal Information

You may ask questions about this policy or submit requests about your personal information by emailing us at privacy@ForgeBiologics.com. You may also use our postal address:

Forge Biologics, Inc.

Attn: Compliance/Privacy Officer

3900 Gantz Rd.

Grove City, OH, 43123

U.S.A

Third Party Websites

Our Site(s) may contain links to other websites and applications. We are not responsible for the privacy information, or other practices of these third parties. Please review the privacy notices carefully for any third-party link or application you select. The inclusion of a link on a Forge website does not imply endorsement of the linked site.

Please note that we are not responsible for the collection, usage, and disclosure policies and practices of other organizations, such as LinkedIn, Facebook, Twitter, Instagram, Google, Apple, Microsoft or any other software application developer or provider, social media platform, operating system, or wireless service provider, or device manufacturer, including any personal information you disclose to other organizations through or in connection with our social media pages.