Effective Date: May 9, 2023
Introduction
This Privacy Policy (this “Privacy Policy”) describes the Personal Information that Chimeron Bio Inc. (“Chimeron Bio,” “we,” “us,” or “our”) may collect, and how Chimeron Bio collects, uses and discloses such Personal Information when you access or use our website made available at www.chimeron.com (the “website”), as well as your choices related to your Personal Information. By accessing or using the website, you acknowledge and consent to the practices described in this Privacy Policy regarding our collection, use and disclosure of your Personal Information. If you do not acknowledge and consent to the terms of this Privacy Policy, you may not use the website. Please note that some privacy rights and obligations may differ in certain locations based on local law, in which case Chimeron Bio will comply with local legal requirements. If you reside in California, Colorado, Connecticut, Utah or Virginia, Section 7 may apply to you.
Employees and job applicants may receive a supplemental privacy notice that applies to their relationship with Chimeron Bio in the context of their employment or job application. In the event of any conflict with this Privacy Policy, the supplementary employee notice will control.
Personal Information We Collect
The categories of information we have collected about you in the last 12 months include the following:
- “Personal Information” is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal Information can include identifiers such as your name, email address, physical address and telephone number or other information, commercial information, and inferences from any of the above.
- “Usage Data”is information that we automatically collect about your Internet or other electronic network activity, including your use of the website and the sort that web browsers and servers typically make available, through web server logs, web beacons, cookies and other similar tracking technologies, about the devices you use to access our website, as well as information on how you interact with our website. Usage Data may include the IP address of a device or internet service used to connect your device to the Internet and may provide information about your location; computer and connection information such as your browser type and version; operating system and platform; and the URLs which lead you to and around the website including the date and time of access. Usage Data generally does not directly identify an individual, but may constitute Personal Information in some instances.
How We Collect Personal Information
When you access or use the website, Chimeron Bio may collect Personal Information in the following ways:
- Information You Provide to Chimeron Bio: Chimeron Bio collects Personal Information when you use and interact with the website, such as when you complete and submit forms to us on our website, or when you communicate with Chimeron Bio about our website whether by letter, e-mail, online chat window, or telephone.
- Information that Chimeron Bio Collects Automatically: When you use the website, Chimeron Bio may automatically collect Usage Data subject to the settings of your device that you use to access the website. Chimeron Bio may use this data to analyze trends and statistics to improve your online experience or our customer service.
Use of Personal Information Collected
Chimeron Bio may use the Personal Information about you for various purposes, including to:
- Provide, maintain and improve our website and provide you with relevant information;
- Send you technical notices, updates, security alerts and support and administrative messages;
- Respond to your comments, questions and requests and provide customer service; information we think will be of interest to you;
- Monitor and analyze trends, usage and activities in connection with our website;
- Detect, investigate and prevent fraudulent transactions and other illegal activities and protect the rights and property of Chimeron Bio and others; and
- Carry out any other purpose described to you at the time the information was collected.
Data Collection Technologies
We and our service providers may use various tracking technologies, including cookies and web beacons, to collect information about you when you interact with our website. Cookies are small data files stored on your hard drive or in device memory that help us improve the website and your experience, see which areas and features of the website are popular, and count visits. Web beacons are electronic images that may be used on the website or emails and help deliver cookies, count visits and understand usage and campaign effectiveness. For more information about cookies, and how to disable them, please see “Your Choices” below.
Notice concerning Do Not Track. Do Not Track is a privacy preference that users can set in certain web browsers. We are committed to providing you with meaningful choices about the information collected on our websites for third-party purposes, and that is why we provide the variety of opt-out mechanisms listed above. Some web browsers offer users a “Do Not Track” privacy preference setting in the web browser. We do not currently recognize or respond to browser-initiated Do Not Track signals. Please note that “Do Not Track” is a distinct privacy mechanism from the browser-based opt out signals referenced above, which Chimeron Bio does honor in accordance with applicable law.
We may share information about you, including Personal Information, as follows, or as otherwise described in this Privacy Policy:
Disclosing Your Information
- With vendors, consultants and other service providers who need access to such information to carry out work or perform services on our behalf;
- In response to requests from local, state, provincial or federal law enforcement officials, any judicial, administrative or similar proceeding or order, such as a subpoena if we believe disclosure is in accordance with, or required by any applicable law;
- If we believe your actions are inconsistent with our user agreements or policies, or to protect the rights, property and safety of Chimeron Bio and others;
- To investigate suspected fraud, harassment, physical threats, or other violations of any law, rule or regulation, the website’s rules or policies, or the rights of third parties or to investigate any suspected conduct which we deem improper;
- In connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business by another company;
- Between and among Chimeron Bio and our current and future parents, affiliates, subsidiaries, and other companies under common control and ownership;
- With your consent or at your direction;
- To comply with transparency or other public reporting obligations; and
- As otherwise permitted or required by law.
Privacy Rights
If you reside in California, Colorado, Connecticut, Utah or Virginia, you may have legal rights with respect to your Personal Information. You may have the right to: (i) request additional disclosures about the Personal Information we collect, use, and share; (ii) request access to and deletion of your Personal Information, subject to certain exceptions; (iii) opt out of the sale and sharing of your Personal Information; (iv) correct inaccurate Personal Information that we maintain about you; (v) limit the use and disclosure of sensitive Personal Information; and (vi) obtain a copy of your Personal Information. We will not discriminate against you for exercising any of these rights.
Methods for submitting requests. If you wish to exercise any of these rights, please email legal@aeratx.com with the phrase “Privacy Rights” in the subject line. We will process your request within the timeframe provided by applicable law. The rights described herein are not absolute and we reserve all of our rights available to us at law in this regard. You may have the right to appeal our decision with respect to a request you have submitted by emailing us at legal@aeratx.com. Additionally, if we retain your Personal Information only in de-identified form, we will not attempt to re-identify your data in response to a privacy rights request.
If you make a request related to Personal Information about you, you will be required to supply a valid means of identification as a security precaution. We will verify your identity with a reasonably high degree of certainty using the following procedure where feasible: we will match identifying information you provide when making the request to the Personal Information maintained by us, or use a third-party identity verification service. If it is necessary to collect additional information, we will use the information only for verification purposes and will delete it as soon as practicable after complying with your request. For requests related to particularly sensitive information, we may require additional proof of your identity.
Authorized Agents. You may use an authorized agent to submit a right to know or right to deletion request. When we verify your agent’s request, we may verify both your and your agent’s identity and request a signed document from you that authorizes your agent to make the request for you. To protect your Personal Information, we reserve the right to deny a request from an agent that does not submit adequate proof that you authorized them to act for you.
Sales and Sharing of Personal Information. Under the CCPA, a ‘sale’ is defined broadly to include disclosing or making available Personal Information to a third-party in exchange for monetary compensation or other benefits or value, and ‘share’ broadly includes disclosing or making available Personal Information to a third party for purposes of cross-context behavioral advertising. However, we do not knowingly sell or share Personal Information about individuals who are younger than 16.
Verification. When you exercise your right to know or right to delete, we will take steps to verify your identity with a reasonably high degree of certainty before processing your request. We may ask for additional information so that we can verify your identity. If it is necessary to collect additional information, we will use the information only for verification purposes and will delete it as soon as practicable after complying with your request. We will only use the personal information you provide to us in response to this request to verify your identity and to process your request, unless you initially provided the information for another purpose. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.
Shine the Light: Individuals who are California residents may request (i) a list of categories of Personal Information disclosed to third parties during the immediately preceding calendar year for those third parties’ own direct marketing purposes; and (ii) a list of the categories of third parties to whom we disclosed such information. To exercise a request, please send us an email or a letter to the addresses in the section entitled “Contact Us” below and specify you are making a “California Shine the Light” request. We may require additional information from you to allow us to verify your identity and are only required to respond to requests once during any calendar year.
Security of Personal Information
Chimeron Bio has reasonable and appropriate safeguards in place to help protect the Personal Information Chimeron Bio collects from loss, misuse, and unauthorized access, disclosure, alteration and destruction. Although Chimeron Bio attempts to protect the Personal Information in our possession, no security system is perfect, and Chimeron Bio cannot promise that your Personal Information will remain absolutely secure in all circumstances.
Retention of Personal Information
Chimeron Bio will retain your Personal Information as needed to fulfill the purposes for which it was collected. Chimeron Bio will retain and use your Personal Information as necessary to comply with Chimeron Bio’s business requirements, legal obligations, resolve disputes, protect our assets, and enforce our agreements. Additional information for California residents about our data retention practices is available in our Privacy Notice for California Residents.
Links to Third-Party Websites
Our website may contain certain links to third party websites. Chimeron Bio is not responsible or liable for the privacy practices or content found on these websites. You should check the privacy notice and policies of each website you visit. Links to third party websites are provided solely for your convenience and any use or submission of data to such websites shall be at your sole risk.
United States Only
The website is intended for use only in the United States of America. If you use the website or contact us from outside of the United States of America, please be advised that (i) any information you provide to us or that we automatically collect will be transferred to the United States of America; and (ii) by using the website or submitting information, you explicitly authorize its transfer to and subsequent processing in the United States of America in accordance with this Privacy Policy.
Changes to the Privacy Policy
Chimeron Bio may change this Privacy Policy at any time. Unless we say otherwise, changes will be effective upon the last updated date at the top of this Privacy Policy. Please check this Privacy Policy regularly to ensure that you are aware of any changes. We may try to notify you of material changes to this Privacy Policy, which if we do so may be by means such as by posting a notice directly on the website, by sending an e-mail notification (if you have provided your e-mail address to us), or by other reasonable methods. In any event, if you use the website after changes to this Privacy Policy, you have accepted the changes. If you do not agree with the changes, please stop using the website.
Contact Us
If you have any questions or concerns related to this Privacy Policy, please contact us at: contact@chimeron.com