Healthcare Professional (HCP) Privacy Notice

We are committed to protecting your personal information and respecting your privacy.

This Privacy Notice explains how we collect, use, store and protect personal information about healthcare professionals (HCPs) who participate in our market research activities.

Please read this notice carefully so you understand how we use your information and your rights under data protection law.

Oranda Therapeutics (UK) Ltd is responsible for deciding how and why your personal information is used. This means we are the "data controller" for the information covered by this Privacy Notice.

If you have any questions about this notice or how we use your information, please contact:

Email: [email protected]
Address: C/O RPGCC, 40 Gracechurch Street, London, EC3V 0BT

We may collect the following information about you:

• Name
• Professional title and role
• Organisation or employer
• Professional contact details, such as your work email address or telephone number
• Area of professional expertise or specialism
• Information you choose to share with us during market research activities
• Records of our communications with you

We only collect information that is relevant to our market research activities.

We may collect your information:

• Directly from you

We use your personal information to:

• Identify individuals with relevant professional expertise
• Contact you about potential participation in market research activities
• Arrange and manage interviews, surveys or research discussions
• Understand healthcare professional perspectives and experiences
• Maintain records of our interactions
• Meet our legal and regulatory obligations

Where possible, research findings are analysed and reported in a way that does not identify individual participants.

We process your personal information because we have a legitimate interest in conducting healthcare market research and engaging with appropriately qualified healthcare professionals and experts.

We will only process your information where we are satisfied that our legitimate interests are not overridden by your rights and freedoms.

We do not sell your personal information.

We may share your information with:

• Service providers who support our business operations
• Professional advisers, such as legal or compliance advisers
• Regulatory authorities where required by law

Any third party that processes information on our behalf is required to keep it secure and use it only for authorised purposes.

Where information is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place to protect your personal information in accordance with applicable data protection laws.

We keep personal information only for as long as necessary to support our market research activities, maintain appropriate business records and meet our legal obligations.

When information is no longer required, it will be securely deleted or anonymised.

We take appropriate technical and organisational measures to protect personal information from unauthorised access, loss, misuse or disclosure.

Access to personal information is restricted to individuals who need it for legitimate business purposes.

You have the right to:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of your information in certain circumstances
• Object to our use of your information
• Request restriction of processing in certain circumstances
• Lodge a complaint with a supervisory authority

If you would like to exercise any of these rights, please contact us using the details provided above.

If you have any concerns about how we collect, use or protect your personal information, you have the right to make a complaint to us. You can contact us at [email protected]. We will acknowledge your complaint within 30 days and respond without undue delay. If you remain dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.

We may update this Privacy Notice from time to time to reflect changes in our activities or legal requirements.

The most recent version will always be available from us on request.