Privacy Policy

1. Our Commitment to Privacy

Septa Pharmaceuticals Inc. (“Septa,” “we,” “us,” or “our”) recognizes that the privacy and security of your personal information is of paramount importance. As a global leader in the pharmaceutical industry, we understand the sensitive nature of health-related data and the trust you place in us. We are steadfastly committed to maintaining the highest standards of integrity and transparency regarding the collection, use, retention, and disclosure of personal information.

This Privacy Policy (“Policy”) constitutes a legal agreement between you and Septa. It details the comprehensive measures we employ to safeguard your data across our digital ecosystem, including our websites, mobile applications, and other online services (collectively, the “Sites”).

We process personal information in strict accordance with applicable data protection and privacy laws in the jurisdictions where we operate, including but not limited to Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), the European Union’s General Data Protection Regulation (GDPR), and other relevant international data privacy frameworks.

2. Scope and Applicability

This Policy applies exclusively to information collected through your interaction with Septa’s Sites and digital services.

Third-Party Links and External Sites Our Sites may contain hyperlinks to websites, platforms, or services operated by third parties not under the control of Septa. These links are provided solely for your convenience and information. Septa assumes no responsibility or liability for the content, privacy policies, or data handling practices of such third parties. We strongly encourage you to review the privacy statements of any external websites you visit before providing them with your personal information.

Acceptance of Terms By accessing, browsing, or utilizing Septa’s Sites, you explicitly acknowledge that you have read, understood, and consented to the data practices described in this Policy. If you do not agree with the terms outlined herein, you must immediately discontinue the use of our Sites.

3. Collection of Personal Information

For the purposes of this Policy, “Personal Information” refers to any data, recorded in any form, that identifies, or could reasonably be used to identify, a specific individual. We collect personal information through various methods, as detailed below.

A. Information You Voluntarily Provide

We collect information that you knowingly and voluntarily provide to us when you interact with our Sites. This includes, but is not limited to:

Identity Data: First name, last name, and title/salutation.
Contact Data: Email address, telephone number, and physical mailing address.
Professional Data: For healthcare professionals (HCPs) and business partners, we may collect information regarding your medical license, specialty, institutional affiliations, and business contact details.
Communications Data: The content of any inquiries, feedback, or correspondence you submit to us via contact forms or email.
Registration Data: Usernames, passwords, and security questions created for accessing restricted areas of our Sites.

B. Adverse Event and Safety Reporting (Pharmacovigilance)

As a pharmaceutical company, Septa is subject to specific regulations regarding the monitoring of the safety and efficacy of our products. If you contact us to report an adverse event (side effect) or a product complaint, we may collect specific health-related information, including:

Details of the adverse event;
Age, gender, and relevant medical history of the patient;
Information regarding the reporter (if different from the patient) to facilitate follow-up.
Note: This information is processed strictly for pharmacovigilance purposes in compliance with global health authority regulations.

C. Automatically Collected Technical Information

When you navigate our Sites, our servers automatically record certain technical data necessary for the functionality and security of our digital platforms. This includes:

Device Information: IP address, browser type and version, operating system, and device model.
Usage Data: The pages you view, the time spent on those pages, the links you click, referring/exit URLs, and the date and time of access.
Location Data: Approximate geographic location derived from your IP address.

4. Cookies and Tracking Technologies

We utilize cookies, web beacons, pixel tags, and similar technologies to enhance user experience, analyze site traffic, and understand user behavior.

Essential Cookies: Necessary for the proper functioning of the Site (e.g., secure login).
Analytics Cookies: Allow us to understand how visitors interact with our Sites (e.g., Google Analytics).
Functional Cookies: Enable the Site to remember your preferences (e.g., language selection).

You have the ability to accept or decline cookies through your browser settings. However, refusing cookies may restrict your ability to access certain features of our Sites.

5. How We Use Your Information

Septa uses Personal Information for legitimate business purposes, including but not limited to:

Service Delivery: To respond to your inquiries, fulfill your requests for information, and provide customer support.
Business Operations: To operate, maintain, troubleshoot, and optimize the performance and security of our Sites.
Professional Interaction: To verify the credentials of healthcare professionals and facilitate scientific exchange.
Compliance and Safety: To comply with legal obligations, including adverse event reporting to health authorities (such as Health Canada, the FDA, or the EMA), and to conduct audits.
Security and Fraud Prevention: To monitor for and prevent unauthorized access, cyberattacks, identity theft, and other fraudulent activities.
Analytics and Improvement: To aggregate data for the purpose of analyzing trends, usage patterns, and demographics to improve our products and digital offerings.
Marketing (With Consent): Where permitted by law and with your explicit consent, to send you newsletters, updates, or promotional materials. You may opt-out of these communications at any time.

6. Sharing and Disclosure of Information

Septa adheres to a strict policy regarding the disclosure of your data. We do not sell, rent, or trade your personal information to third parties for their commercial purposes.

We may disclose your Personal Information in the following distinct circumstances:

Trusted Service Providers: We engage third-party vendors and service providers to perform functions on our behalf, such as website hosting, data analysis, information technology support, and customer service. These providers are bound by strict contractual confidentiality obligations and are prohibited from using your data for any purpose other than providing services to Septa.
Regulatory and Legal Obligations: We may disclose your information to regulatory authorities (e.g., Health Canada), law enforcement agencies, or courts if required to do so by law, subpoena, or court order, or to report safety data regarding our products.
Protection of Rights: We may disclose information if we believe strictly necessary to protect the rights, property, or safety of Septa, our employees, our users, or the public.
Corporate Transactions: In the event of a merger, acquisition, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Septa’s assets, personal information held by us may be among the assets transferred. In such cases, the recipient will be required to treat the information in accordance with this Policy.

7. International Data Transfers

Septa is a global organization with operations and service providers located in various jurisdictions. Consequently, your Personal Information may be transferred to, stored, and processed in countries outside of your country of residence.

While in another jurisdiction, your information may be subject to the laws of that country and may be accessible to foreign courts, law enforcement, and national security authorities. Septa implements appropriate legal and technical safeguards, such as Standard Contractual Clauses or equivalent mechanisms, to ensure your data receives an adequate level of protection comparable to that required by your local laws.

8. Data Security

We employ a comprehensive framework of physical, technical, and administrative safeguards designed to protect your Personal Information against accidental loss, unauthorized access, use, alteration, and disclosure. These measures include:

Encryption of data in transit and at rest;
Strict access controls and authentication procedures;
Regular security assessments and vulnerability testing;
Employee privacy training and confidentiality agreements.

Notwithstanding these measures, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

9. Data Retention

We retain Personal Information only for as long as is strictly necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, reporting, or pharmacovigilance requirements.

General Inquiries: Retained for the duration of the correspondence and a reasonable period thereafter.
Pharmacovigilance Data: Retained for the product lifecycle plus an extended period as mandated by global health authorities (often decades).

Once the retention period expires, your data is securely deleted, anonymized, or destroyed.

10. Children’s Privacy

Septa’s Sites are intended for general audiences and professionals. We do not knowingly solicit, collect, or process personal information from children under the age of 16 (or the applicable age of majority in your jurisdiction). If we discover that we have inadvertently collected information from a child, we will take immediate steps to delete such information from our records.

11. Your Rights and Choices

Depending on your jurisdiction of residence, you may possess specific rights regarding your Personal Information, which may include:

Right of Access: The right to request a copy of the personal information we hold about you.
Right to Rectification: The right to request correction of inaccurate or incomplete data.
Right to Erasure: The right to request the deletion of your data (subject to legal retention requirements, such as pharmacovigilance).
Right to Restriction: The right to request that we restrict the processing of your data.
Right to Withdraw Consent: Where processing is based on consent, the right to withdraw that consent at any time.

To exercise these rights, please contact our Privacy Officer using the details provided below. We will respond to all legitimate requests within the timeframe mandated by applicable law.

12. Changes to This Privacy Policy

We reserve the right to modify or update this Privacy Policy at any time to reflect changes in our practices or legal obligations. The “Last Updated” date at the top of this Policy indicates when the latest revisions were made. We encourage you to review this page periodically. Continued use of the Sites after any changes constitutes your acceptance of the revised Policy.

13. Contact Information

If you have any questions, concerns, or complaints regarding this Privacy Policy or Septa’s data handling practices, please contact our Privacy Office:

Septa Pharmaceuticals Inc.
7035 Maxwell Rd, Unit 2
Mississauga, ON L5S 1R5
Canada

Email: [email protected]
Phone: +1 905-564-5665