Privacy Policy

Introduction

The purpose of this Privacy Policy is to describe how Pandora Biosciences, Inc. ("we," "our," or "us") collects, uses and shares information about you through our websites, online services, emails, text messages, and offline interactions (collectively, the "Services").

This Privacy Policy applies to information we collect through our websites, mobile applications, and other online services that link to this Privacy Policy, as well as information we collect offline, such as when you contact customer service.

This Privacy Policy is not a contract and does not create any legal rights or obligations. We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and share your information.

Information We Collect

Information You Provide to Us

We collect information you provide directly to us when you create an account, make a purchase, request information, fill out a form, or otherwise interact with us. This information may include:

• Personal identifiers: Name, mailing address, email address, phone number
• Financial information: Payment card details, billing address
• Demographic data: Date of birth, username, password
• Health information: Medical conditions, treatment options, physician referrals, prescriptions, and lab results
• Professional details: Title, business information, tax ID, provider numbers (for healthcare providers)

Information We Collect Automatically

Whenever you interact with our Services, we automatically receive and record information from your browser or device. This information may include:

• IP address and approximate geolocation
• Device identifiers and characteristics
• Browser type and operating system
• Pages viewed, links clicked, and browsing patterns
• Date and time of your visit
• Referring website or application

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process transactions and send related information
• Manage your account and provide customer support
• Send promotional communications (with your consent where required)
• Personalize your experience and deliver targeted content
• Analyze usage patterns and trends
• Protect against fraud, abuse, and other harmful activities
• Comply with legal obligations and enforce our terms

How We Share Your Information

We may share your information in the following circumstances:

• Service Providers: With vendors and service providers who perform services on our behalf, such as payment processing, data analysis, and customer support
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Legal Compliance: When required by law, legal process, or government request
• Protection of Rights: To protect the rights, property, or safety of Pandora Health, our users, or others
• With Your Consent: When you have given us permission to share your information

Cookies and Tracking Technologies

A cookie is a small file placed on your computer's hard drive that collects and stores information about your equipment, preferences, and browsing patterns. We use cookies and similar technologies (such as web beacons, pixels, and local storage) to:

• Remember your preferences and settings
• Understand how you use our Services
• Analyze and improve our Services
• Deliver personalized content and advertising

We use Google Analytics to monitor and analyze engagement with our Services. You can learn more about Google's practices and opt out by visiting https://tools.google.com/dlpage/gaoptout.

You can control cookies through your browser settings, though disabling cookies may limit your ability to use certain features of our Services. Please note that we do not currently respond to "Do Not Track" signals as there is no industry-standard method for doing so.

Your Choices and Rights

Account Information

You can review and update your account information by logging into your account or contacting us.

Marketing Communications

You can opt out of receiving promotional emails by following the unsubscribe instructions in those messages. You can opt out of text messages by replying "STOP" or contacting us directly.

Data Retention

We retain your information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. When we no longer need your information, we will securely delete or anonymize it.

Data Security

We maintain administrative, technical, and physical safeguards designed to protect your information from unauthorized access, use, or disclosure. However, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately.

Children's Privacy

Our Services are not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we have collected information from your child, please contact us so we can delete it.

International Users

If you are located outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States where our servers are located and our central database is operated. By using our Services, you consent to this transfer.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: You can request that we delete your personal information, subject to certain exceptions
• Right to Correct: You can request that we correct inaccurate personal information
• Right to Opt Out: You can opt out of the sale or sharing of your personal information for targeted advertising
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

Some of the data we collect may be considered sensitive personal information under California law, including your log-in credentials, precise geolocation, racial or ethnic origin, and health and genetic data. We use this information only for the purposes disclosed in this Privacy Policy.

We do not sell personal information. We may share personal information with third parties for targeted advertising purposes, which you can opt out of by contacting us.

Other State Residents

Residents of other U.S. states may have additional rights under state privacy laws, including the right to access, correct, delete, or port their personal information, and to opt out of targeted advertising, sales of personal information, or certain automated decision-making. To exercise these rights, please contact us using the information below.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at: