Privacy Policy

Effective Date: April 25, 2024

Theriva Biologics (“Theriva,” “we,” “us” or “our”) recognizes the importance of protecting individual’s privacy. The following privacy policy (“Privacy Policy”) sets forth how we handle information collected from you, including from your visits to our website available at https://therivabio.com/ and all other websites operated by Theriva (the “Site”).

PLEASE REVIEW THIS PRIVACY POLICY CAREFULLY. When you submit information to Theriva, including through the Site, you consent to the collection, use, disclosure and retention of your information as described in this Privacy Policy.

What Information Do We Collect?

“Personal data” means any information relating to an identified or identifiable individual. We collect personal data in various ways on our Sites, including when you contact us via our Site’s “Contact” page and automatically when you browse our Sites.

We may collect basic personal data when you use a Site or otherwise interact with us, including name, contact details (e.g., address, phone number and email address), and your interests (such as health conditions, therapeutics and other topics about which you request information through the Site or indicate interest).

If you are a healthcare provider, we may also collect professional biography/credentials, data related to your licensures, specialties, professional affiliations, publications, credentials, and other professional achievements, adverse event data and data related to your use of our products, and your interactions with us.

We may also collect personal data from other sources, including service providers, data companies and publicly accessible database.

You may decline to provide personal data. However, if you choose not to provide information that is necessary for us to provide requested services, we may not be able to provide you those services.

Cookies and Other Information Collection Tools

What are cookies? A cookie is a small file containing a string of characters that is sent to your computer when you visit a website or use an online service. When you visit the website or use the service again, the cookie allows that website or online service to recognize your browser or device. Cookies may store unique identifiers, user preferences and other information.

Duration of Cookies. We may use “session cookies” or “persistent cookies.” Session cookies are temporary and expire once you close your browser or once your session ends. Persistent cookies remain on your device for much longer or until you or your browser erase them. Persistent cookies have varying durations that are dependent on their expiration date.

What types of cookies do we use? Theriva uses:

  • Necessary Cookies. These cookies are necessary for you to browse the Site and use its features, such as accessing secure areas of the Site. Without these cookies, certain aspects of the Site may not be available to you.
  • Analytics Cookies. These cookies collect information about how you use the Site, such as which pages you most often visit on the Site, the time you spend on the Site, which links you click on, and any issues encountered. These cookies help us understand how visitors interact with the Site. All information collected is aggregated and do not identify you.

Why do we use them? Cookies help us improve the Site by providing us with information about which parts of the Site are most popular, enabling us to analyze technical and navigational information about the Site, and helping us to detect and prevent fraud. We also use cookies and other data collection tools (such as web beacons and server logs) to help improve your experience with the Site. For example, we use Google Analytics to help analyze how users use the Site. These tools use cookies to collect standard Internet log information and visitor behavior information in an anonymous form. The information generated by the cookie about your use of the Site (including IP address) is transmitted to our data collection tool service providers. This information is then used by us to evaluate visitors’ use of the Site and to compile statistical reports on website activity for Theriva. If you would like to opt-out from the use of your information by Google analytics, you may use Google Analytics’ opt-out browser add-on designed for this purpose.

How do I control cookies? Web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to manage and delete cookies, visit www.allaboutcookies.org. Some web browsers provide settings that allow a user to reject cookies or to alert a user when a cookie is placed on the user’s computer, tablet or mobile device. Most mobile devices also offer settings to reject mobile device identifiers. Although users are not required to accept cookies or mobile device identifiers, blocking or rejecting them may prevent access to some features available through the Site.

What Do We Do With The Information You Provide?

We use the information we collect:

  • To provide the Site to you and to improve the Site;
  • To develop, provide, enhance, improve or modify our products and services;
  • To validate your ability/eligibility to access or use our products or services;
  • To give each user a more consistent and personalized experience when interacting with us;
  • To provide you with information about our products and services that may be of interest to you;
  • For security, to detect, prevent, investigate fraud or illegal activities, and for archival and backup purposes in connection with the provision of the Site;
  • For research and analysis purposes;
  • To conduct data analysis and audits;
  • To better understand how our products and services impact you or those for whom you care;
  • To track and respond to concerns, including engaging in regulatory monitoring and reporting obligations related to adverse events, product complaints and patient safety;
  • To respond to your inquiries and fulfill your requests;
  • To send administrative information to you, such as changes to our terms, conditions and policies;
  • To identify usage trends in the use of the Site and analyze the effectiveness of our communications;
  • To improve our interactions with you;
  • If you are a healthcare provider, to reach out to you for your professional expertise or collaborate with you;
  • To operate and expand our business activities;
  • As we believe to be necessary or appropriate: (i) under applicable laws and regulations; (ii) to comply with legal process; (iii) to respond to requests from public and government authorities; (iv) to enforce this Privacy Policy and our Terms of Use; (v) to protect our operations; (vi) to protect our rights, privacy, safety or property, and/or that of you or others; and (vii) to allow us to pursue available remedies or limit the damages that we may sustain.

We may aggregate the personal data that you provide so that it does not personally identify you.  If we do, we may use and disclose such aggregated data for any lawful purpose.

Is Your Personal data Shared?

We may share your personal data with the following third parties:

  • Third Party Service Providers Performing Services on Our Behalf. We share your personal data with our service providers to perform the functions for which we engage them. For example, we may use third parties to host the Site or assist us in providing functionality on the Site, provide data analysis and research and sending out email updates about the Site and our products and services.
  • Our Affiliates. We may share personal data with our affiliates to further the business purposes for which it was collected.
  • For Legal Purposes. We also may share information that we collect as needed to enforce our rights, protect our property or protect the rights, property or safety of others, or as needed to support external auditing, regulatory compliance and corporate governance functions. We will disclose personal data as we deem necessary to respond to a subpoena, regulation, binding order of a data protection agency, legal process, governmental request or other legal or regulatory process. We may also share personal data as required to pursue available remedies or limit damages we may sustain.
  • Changes of Control. We reserve the right to transfer or assign the information that we have collected from users in connection with a corporate transaction, such as a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.

Links to External Websites and Online Services

Our Site may contain links to third-party websites or online services. Any access to and use of such third-party websites and online services are governed by the privacy policies of those third parties, and not this Privacy Policy. We are not responsible for the information practices of such third parties.

Security Used & Retention of Personal Data

Theriva uses reasonable security measures designed to prevent unauthorized intrusion to the Site and the alteration, acquisition or misuse of personal data. However, please note that no data transmission over the Internet or data storage system can be guaranteed to be 100% secure.

We will retain your personal data for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable laws or regulation.

Marketing Emails

You may opt out of receiving promotional e-mails from us by following the unsubscribe instructions provided in any such messages. Please note that if you opt out of receiving promotional messages from us, this does not impact other transactional and administrative messages which you will continue to receive.

EU, UK and Switzerland Residents

With respect to “personal data” as defined by Regulation (EU) 2016/679 (“GDPR”), any national law of an EU member state adopted pursuant to the GDPR, the United Kingdom Data Protection Act of 2018, and the Switzerland Federal Act on Data Protection (collectively, “ European Data Protection Laws”), we serve as the “controller”.

We process the personal data set forth in the “What Information Do We Collect?” and “Cookies and Other Information Collection Tools” sections above for the purposes set forth in the “What Do We Do With The Information You Provide?” section above. Our legitimate bases for processing such personal data include:

  • Performance of Contract. We may use your information to perform our contractual services or prior to entering into an agreement with you. If you use the Site or if you contact us to request information about our products and services, we use your information to provide to you the features and functionality of the Site and our products and services.
  • Legitimate Interest. We may use information for our legitimate interests, except where such interests are overridden by your interests or fundamental rights and freedoms. For instance, we may use your personal data to contact you and respond to your requests and inquiries, to administer our business including by creating statistical analyses, to identify prevent and detect fraud or to pursue or defend ourselves against legal claims.
  • Consent. We may use your information with your consent. In these instances, we will ask you to grant us consent to use your information. You are free to grant or deny permission. If you deny permission, we will not be able to process your information to conduct the activity to which the consent relates. For example, we will not be able to send you marketing materials that you request. You are also free to withdraw your consent at any time. A withdrawal of consent will not affect processing that has been completed during the time in which the consent was valid. If you have granted us consent to use your information, we will use it only for the purposes specified when we request your consent.
  • Fulfillment of Legal Obligations. We may use your information to comply with our legal obligations. To comply with regulations, laws or any authority requests, we may disclose your information to authorities or other officials or otherwise process your information pursuant to legal obligations we are subject to (e.g., respond to your requests to exercise your rights under Data Protection Laws).

For information on whom we share your personal data with please refer to the “Is Your Personal data Shared?” section above.

All personal data we collect is currently processed in the United States by us or by a party acting on our behalf. When you provide personal data to us, you consent to the transfer of your data to, and processing of your data in, the United States. The Site is currently hosted in the United States. We will transfer your personal data to the United States through the use of appropriate safeguards as required by Data Protection Laws.

As stated in the “Security Used & Retention of Personal data” section above, we will retain your information for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable laws or regulation.

Under Data Protection Laws, you have the following privacy rights, which you may exercise by contacting us at dpo@therivabio.com with “GDPR Request” on the subject line and in the body of your message:

  • Right of Access. You have the right to obtain confirmation as to whether your personal data is being processed, as well as access to the personal data along with certain information, including the purposes of the processing, the categories of personal data concerned and the recipients or categories of recipients to whom the personal data have been or will be disclosed.
  • Right to Rectification. You have the right to rectify your inaccurate personal data and to complete any incomplete personal data, including by means of providing a supplementary statement.
  • Right to Erasure or Right to be Forgotten. You have the right to erase your personal data under certain circumstances.
  • Right to Restrict Processing. You have the right to restrict our processing of your personal data under certain circumstances.
  • Right to Object. You have the right to object, on grounds relating to your particular situation, at any time to our processing of your personal data, which is based on public interest or our legitimate interests, including the profiling of data. In this case, we will stop processing your data, except for where we have compelling legal grounds for the processing which override your interests, rights and freedoms, or for the exercise or defense of possible legal claims. You also have a right to object to the processing of your personal data for direct marketing purposes.
  • Right to Data Portability. Under certain circumstances, you have the right to receive your personal data that you provided to us in a structured, commonly used and machine-readable format, and have the right to transmit such data to another controller without hindrance from us.
  • Right to Withdraw Consent. If you have provided us with your consent for the processing of your personal data, you may withdraw your consent at any time to stop any further processing.
  • Right to Lodge a Complaint. You have a right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates the Data Protection Laws.

Nevada Residents

Under Nevada law, Theriva does not sell your personal data. However, if you are a Nevada resident, you may submit a request that we not sell any personal data we have collected about you by contacting us at dpo@therivabio.com.

Do Not Track

Our Site does not currently take any action when it receives a Do Not Track request. Do Not Track is a privacy preference that you can set in your web browser to indicate that you do not want certain information about your webpage visits collected across websites when you have not interacted with that service on the page. For details, including how to turn on Do Not Track, visit www.donottrack.us.

Children

We do not knowingly collect or maintain personal data from any person under the age of 13. No parts of our Site are directed to or designed to attract anyone under the age of 13.

Privacy Policy Changes

The Effective Date of this Privacy Policy is set forth at the top of this webpage. We may amend this Privacy Policy from time to time in our sole discretion. Such changes to the Privacy Policy may be required to reflect enhancements to our Site or changes to our business practices and may therefore affect the collection, retention and use of personal data. Changes will be posted to this webpage. We encourage you to return to this webpage frequently so that you are aware of our current privacy practices. The amended Privacy Policy supersedes all previous versions.

Contacting the Web Site

If you have any questions about this Privacy Policy or for any other concerns please feel free to contact us at dpo@therivabio.com.