Last revised: 05/01/2026
This Privacy Notice describes how Protego Biopharma, Inc. (“Protego”, “we”, “us”) collects, uses, and safeguards your Personal Data through our website, direct communications, participation in clinical research activities and when you apply for a job.
Protego conducts clinical trials and operates across multiple jurisdictions worldwide. As a result, we are obligated to comply with various privacy and data protection laws depending on the location of the individuals whose Personal Data we process. These include, but are not limited to: the GDPR in the EU; the UK GDPR and Data Protection Act 2018; the revised Federal Act on Data Protection (“revFADP”) in Switzerland; PIPEDA in Canada; the Act on the Protection of Personal Information (“APPI”) in Japan; the Personal Information Protection Law (“PIPL”) in China; the CCPA/CPRA and other applicable US state privacy laws; and other national or regional data protection regulations where our trials are conducted. We are committed to protecting your Personal Data in accordance with the laws applicable to your location.
For the purposes of our operations and to comply with relevant privacy laws, “Personal Data” means any information that identifies or could identify you as an individual. This includes your name, contact information, health-related information used in clinical research, and other personally identifiable details.
In the context of clinical trials, this may include Special Categories of Personal Data such as health data, genetic data, and biometric data, which receive heightened protection under applicable law.
As you navigate through and interact with our website, we may automatically collect certain information about your device and browsing activity. This may include your IP address, browser type, operating system, referring URLs, pages visited, and the dates and times of your visits.
When you contact us via email or telephone, we collect your name, email address, phone number, and the reason for your inquiry. This information is used to respond to your request and maintain records of our communication.
In the context of our clinical trials, we receive pseudonymized participant data. This means that the data provided to Protego is coded and does not directly identify participants. Protego does not have access to information that would enable it to identify individuals, and only the clinical trial site retains the ability to link such data back to participants. We use this data strictly for research and scientific analysis to evaluate trial outcomes.
If you apply for a position at Protego, we collect your resume, contact information, and other relevant professional details. This data may be obtained directly from you, recruitment partners, or referrals (with your consent). We use it to assess your qualifications and manage the recruitment process.
We only process your Personal Data when a lawful basis applies under applicable data protection laws, including:
We may share your Personal Data only under specific circumstances:
We implement appropriate administrative, technical, and physical safeguards designed to protect your Personal Data from unauthorized access, loss, misuse or disclosure. We limit access to Personal Data to individuals and third parties who have a legitimate business need and require them to protect the confidentiality and security of such data.
As Protego conducts clinical trials across multiple jurisdictions, your Personal Data may also be transferred to or from countries where Protego or its clinical trial partners operate. Where such transfers occur, we rely on appropriate safeguards including adequacy decisions, Standard Contractual Clauses or other lawful transfer mechanisms as required by the applicable data protection laws of each jurisdiction.
This website is not directed at, nor do we knowingly seek to collect Personal Data from, individuals under the age of 18. Where a clinical trial protocol involves participants under 18, Personal Data is collected and processed only with the consent of a parent or legal guardian in accordance with applicable law. If you are a parent or guardian and believe that your child has provided us with Personal Data without appropriate consent, please contact us at privacy@protegobio.com and we will take steps to remove that information from our systems.
We retain your Personal Data only as long as necessary to fulfill the purpose it was collected for, and in accordance with applicable legal and regulatory requirements. In certain cases, retention periods may be extended where required for compliance with clinical trial regulations or other legal obligations.
You may have the following rights regarding your Personal Data:
Please note: During clinical trials, some rights may be limited to preserve scientific validity, as permitted by applicable law. Specifically, your rights to access, update or delete pseudonymized Personal Data may be restricted where we are required to process it to maintain the reliability and integrity of the study for reasons of public interest in public health, for archiving purposes, or for scientific or historical research. In each case we will inform you of the consequences of your request and any exemptions that apply.
To submit any request about your Personal Data you may contact us via email at privacy@protegobio.com.
Pursuant to Article 27 of the General Data Protection Regulation (GDPR), Protego has appointed European Data Protection Office (EDPO) as its GDPR Representative in the EU. You can contact EDPO regarding matters pertaining to the GDPR by:
If you reside in the EU and want to lodge a complaint with a Supervisory Authority (Data Protection Authority) you may do so in the country where you reside, where you work or where you may have experienced an issue with the processing of your Personal Data.
You may find the contact of the EU Supervisory Authorities here.
Pursuant to Article 27 of the UK GDPR, Protego has appointed EDPO as its UK GDPR Representative. You can contact EDPO regarding matters pertaining to the UK GDPR by using EDPO’s online request form at https://edpo.com/uk-gdpr-data-request/ or by writing to EDPO at 8 Northumberland Avenue, London, WC2N 5BY, United Kingdom.
If you reside in the UK and wish to lodge a complaint regarding our processing of your Personal Data, you have the right to contact the Information Commissioner’s Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.
Where Protego processes the Personal Data of individuals located in Switzerland, it does so in compliance with the revised Federal Act on Data Protection (revFADP), which came into force on September 1, 2023. If you reside in Switzerland and wish to lodge a complaint, you may contact the Federal Data Protection and Information Commissioner (FDPIC) at www.edoeb.admin.ch.
Protego may update this Privacy Notice from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. When updates are made, the revised version will be posted on this page and will indicate the date of the latest revision.
For questions about this Privacy Notice or how we process your Personal Data, please contact us at privacy@protegobio.com.
EU Data Protection Representative Compliance Certificate (PDF)