Privacy and Data Protection

Controller information

Data controller

What this policy covers

This policy applies to personal information collected through:

• DawnTherapeutics.com and related website forms
• Partnership, investor, compliance, and professional enquiry pages
• Email or direct contact with our team
• Business development and due diligence discussions
• Analytics and cookie related website usage data

This policy does not replace terms in signed contracts, NDAs, or separate notices issued for specific projects, employees, or research collaborations.

Categories of data

Information you provide

Direct submissions

• Name, job title, organisation, email, phone number
• Country and business or professional profile details
• Messages, enquiries, and information submitted in forms
• Requested materials, meeting requests, and follow up preferences
• Attachments or documents you choose to share

Website use

Technical and usage data

• IP address and approximate location
• Browser type, device type, and operating system
• Pages visited, time on page, and click behavior
• Referring URL and session level analytics
• Cookie and consent preferences

Business relationship data

Partner and stakeholder records

• Company details for due diligence and onboarding
• Correspondence history and meeting notes
• NDA and confidentiality status
• Commercial interest areas and collaboration stage
• Compliance or policy related enquiries

Please do not submit unnecessary sensitive personal information through website forms. If a secure channel is required for confidential materials, we will arrange one.

Purpose and use

Core uses

• To respond to enquiries and provide requested information packs
• To manage partnership, investor, HCP, supplier, or compliance communications
• To arrange meetings, follow up discussions, and document correspondence
• To improve website functionality, user experience, and content relevance
• To protect our website, systems, and users from misuse or security risks
• To maintain records for governance, quality, and operational continuity

Additional uses where relevant

• To conduct proportionate due diligence on prospective collaborators or vendors
• To manage confidentiality, NDAs, and staged information sharing
• To comply with legal, regulatory, accounting, or audit obligations
• To send updates you have requested or consented to receive
• To establish, exercise, or defend legal claims where necessary

Website technologies

How we use cookies

Cookies and similar technologies may be used to support site performance, remember preferences, understand website usage, and improve content and navigation.

• Strictly necessary cookies for site operation
• Analytics cookies to understand usage trends
• Preference cookies to remember settings
• Optional marketing cookies only if you choose to enable them

Your cookie choices

You can manage cookie preferences through the website cookie banner (if enabled) and through your browser settings. Blocking certain cookies may affect parts of the website.

If you use analytics tools, update this section to name the providers and link to your cookie settings or consent tool.

Third parties and transfers

Service providers

Processors

We may share personal information with trusted service providers who support website hosting, analytics, email, form processing, security, or professional operations, under appropriate confidentiality and processing terms.

Professional and legal

Advisers

We may share limited information with legal, accounting, compliance, or professional advisers where necessary for legitimate business, governance, or legal purposes.

Business and regulatory

Partners or authorities

Information may be shared when required for due diligence, contract execution, legal obligations, or to protect rights, safety, and security.

International transfers

Some service providers may process information outside your country. Where international transfers occur, we take reasonable steps to ensure appropriate safeguards are in place, such as contractual protections or equivalent lawful mechanisms.

What we do not do

We do not sell personal information to advertisers. We do not share personal data more broadly than necessary for the purposes described in this policy.

Protection and lifecycle

Security measures

We apply technical and organisational measures appropriate to the nature of the information we process. These may include access controls, role based permissions, secure hosting, vendor management, and document handling controls.

No internet transmission or storage system is completely risk free, but we work to reduce risk and respond promptly to issues.

Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including correspondence management, legal compliance, and legitimate business records.

• Enquiry records: retained for operational follow up and history
• Contract or due diligence records: retained per legal and business needs
• Analytics data: retained according to tool settings and consent choices

Access and control

Depending on your location and applicable law, you may have rights in relation to your personal information, including the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion in certain circumstances
• Request restriction of processing in certain circumstances
• Object to processing based on legitimate interests
• Withdraw consent where processing is based on consent
• Request portability of data, where applicable
• Lodge a complaint with your local data protection authority

To exercise these rights, please contact us using the details below. We may need to verify your identity before responding.

9. Other important points

Website notices

Third party links

Our website may link to other websites, including partner or educational resources. We are not responsible for the privacy practices of third party sites. Please review their policies separately.

Children

Our website is generally intended for adults, professionals, and organisational stakeholders. We do not knowingly collect personal information from children through website forms.

Policy updates

We may update this Privacy Policy from time to time. The latest version will be published on this page with an updated revision date.