Privacy Policy

This Privacy Policy applies to personal information collected through epigenus.org, including information submitted through the EpiGenus Engage or inquiry process.

It does not apply to information governed by a separate agreement, including information exchanged under a non-disclosure agreement, confidentiality agreement, protected review agreement, or other contractual arrangement. Where such an agreement applies, its terms will govern to the extent applicable.

EpiGenus may use personal information to:

• receive, assess, and respond to inquiries;
• determine whether an inquiry is relevant to an EpiGenus discussion, evaluation, investment, partnership, acquisition, technical review, or other engagement;
• communicate with the individual or organization making the inquiry;
• arrange discussions or subsequent stages of an engagement;
• operate, maintain, protect, and improve the website;
• detect or prevent spam, abuse, fraud, malicious activity, or unauthorized access;
• maintain appropriate business and security records;
• establish, exercise, or defend legal rights;
• comply with applicable legal, regulatory, or governmental requirements; and
• fulfill another purpose disclosed at the time the information is collected or otherwise permitted by law.

EpiGenus does not use information submitted through the inquiry process for unrelated purposes without appropriate authorization where required.

By voluntarily submitting personal information through the website, you consent to its collection, use, and disclosure for the purposes identified at the time of collection and as described in this Privacy Policy.

Where required by applicable law, consent may be withdrawn, subject to legal, contractual, security, or record-retention requirements.

Withdrawing consent may affect EpiGenus's ability to respond to an inquiry or continue an engagement.

The EpiGenus website may use cookies, browser technologies, or similar mechanisms where reasonably necessary for website functionality, security, network operation, or bot prevention.

EpiGenus uses security infrastructure, including Cloudflare Turnstile, to help distinguish legitimate website activity from automated or abusive traffic.

EpiGenus does not currently use Google Analytics, Google Tag Manager, Meta/Facebook Pixel, Microsoft Clarity, Hotjar, LinkedIn Insight Tag, or similar behavioral analytics or advertising tracking technologies.

EpiGenus does not use personal information submitted through the Engage process for third-party behavioral advertising.

If EpiGenus introduces additional analytics, advertising, or tracking technologies that materially change how personal information is collected or used, this Privacy Policy will be updated and any consent mechanism required by applicable law will be implemented.

EpiGenus uses third-party technology and service providers to operate and protect the website and to process communications.

These may include:

Netlify — website hosting, delivery, and related infrastructure.

Cloudflare — website security, network services, DNS-related infrastructure, and Turnstile bot protection.

Resend — processing and delivery of website-generated email communications.

These providers may process limited personal or technical information on behalf of EpiGenus as necessary to provide their services.

EpiGenus may also use professional, technical, legal, security, or administrative service providers where reasonably necessary for legitimate business purposes.

Service providers are expected to handle personal information in accordance with their contractual obligations and applicable law.

Some of EpiGenus's service providers operate infrastructure or process information outside Canada, including in the United States and other jurisdictions.

As a result, personal information may be transferred to, stored in, or processed in a jurisdiction other than the jurisdiction in which it was originally collected.

When information is processed in another jurisdiction, it may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement authorities, or governmental authorities where permitted by applicable law.

EpiGenus takes reasonable measures appropriate to the circumstances when using service providers to process personal information.

EpiGenus does not sell or rent personal information submitted through the website.

Personal information may be disclosed:

• to service providers supporting EpiGenus operations;
• to professional advisers where reasonably necessary;
• with the individual's consent or at their direction;
• where required or permitted by law;
• where reasonably necessary to protect EpiGenus, its systems, intellectual property, legal rights, personnel, or users;
• in connection with an investigation of suspected fraud, abuse, security incidents, or unlawful conduct; or
• in connection with a legitimate corporate or business transaction as described below.

If EpiGenus is involved in a merger, acquisition, financing, reorganization, sale of assets, transfer of intellectual property or business operations, due-diligence process, or similar transaction, information under EpiGenus's control may be disclosed or transferred where reasonably necessary for that transaction.

Where appropriate, reasonable confidentiality and data-protection measures will be used in connection with such disclosure or transfer.

Any successor organization receiving personal information will be subject to applicable privacy obligations concerning that information.

EpiGenus retains personal information only for as long as reasonably necessary for the purposes for which it was collected, including:

• evaluating and responding to an inquiry;
• maintaining an appropriate record of business communications;
• continuing an authorized business relationship;
• protecting legal or intellectual-property interests;
• resolving disputes;
• maintaining website and information security; and
• satisfying legal, regulatory, accounting, or other legitimate record-keeping requirements.

When personal information is no longer reasonably required, EpiGenus may securely delete, destroy, or anonymize it, subject to applicable legal requirements and technical limitations.

EpiGenus uses reasonable administrative, organizational, and technical measures appropriate to the nature of the information under its control to protect personal information against unauthorized access, use, disclosure, modification, loss, or destruction.

Access to personal information is intended to be limited to persons or service providers who reasonably require access for authorized purposes.

No website, electronic communication, or information-storage system can be guaranteed to be completely secure. Individuals should therefore avoid submitting confidential or sensitive technical information through the public website.

Protected or proprietary EpiGenus discussions may be subject to additional security and confidentiality procedures established separately from the public website.

Depending on applicable law and the circumstances, an individual may have the right to:

• request information about personal information EpiGenus holds concerning them;
• request access to that personal information;
• request correction of inaccurate or incomplete information;
• request deletion of information where applicable;
• withdraw consent where processing depends upon consent;
• raise a question or complaint concerning EpiGenus's handling of personal information; and
• exercise other privacy rights provided by applicable law.

EpiGenus may need to verify the identity of a person making a privacy request before providing access to, correcting, or deleting personal information.

Certain information may need to be retained where required or permitted by law, for security purposes, to protect legal rights, or to maintain legitimate business records.

The EpiGenus website is intended for professional, institutional, investment, scientific, technical, and business audiences. It is not directed toward children.

EpiGenus does not knowingly seek to collect personal information from children through the website.

If EpiGenus becomes aware that personal information from a child has been collected in circumstances requiring parental or guardian consent, appropriate steps will be taken in accordance with applicable law.

The EpiGenus website may contain links to websites or services operated by third parties.

EpiGenus is not responsible for the privacy, security, content, or data-handling practices of third-party websites. Individuals should review the privacy policies of those services before providing personal information to them.

EpiGenus may update this Privacy Policy as its website, operations, technologies, service providers, or legal obligations change.

The current version will be posted on epigenus.org with the applicable "Last Updated" date.

Material changes affecting how personal information is collected, used, or disclosed will be addressed in accordance with applicable law.

EpiGenus is responsible for personal information under its control.

Privacy requests may be submitted through the EpiGenus Engage form by selecting “Privacy Request.”

The Engage form is available through the EpiGenus website.

Please provide sufficient information for EpiGenus to understand, identify, and respond to the privacy request.