• Riyadh, Kingdom of Saudi Arabia

Data Privacy and Protection

 (“ASTRA”), is a limited liability company organized and existing under the laws of the Kingdom of Saudi Arabia (the “Kingdom”) and having its head office in Riyadh, the Kingdom of Saudi Arabia.

This Privacy Policy describes the ways that ASTRA collects, uses, protects, transfers, and discloses information that you provide to us, that we collect, or that we receive through our website, located at https://www.ASTRApharmaceuticals.com (the “Website”).

Philosophy

ASTRA is Committed to protecting the privacy of your personal information. “Personal information” includes information about you by which you may be personally identified, including, for example, your name, address, email address, telephone number, age, gender, date of birth, account numbers, VAT/Tax ID, and financial and payment information. This Privacy Policy does not apply to the practices of companies that ASTRA does not own or control, or to people whom ASTRA does not employ or manage, including any third party advertisers or other websites that may link to or be accessible from the Website.

Your Consent

By accessing or using the Website, you consent to this Privacy Policy. If you do not agree to the terms and conditions of this Privacy Policy, you should not use the Website.

Changes to This Privacy Policy

ASTRA reserves the right to modify this Privacy Policy at any time and without prior notice. All changes to this Privacy Policy will be effective immediately upon their posting to the Website. We will notify you of any material changes to this Privacy Policy by conspicuously posting the changes on the Website. Each version of our Privacy Policy will be prominently marked with the date it was last updated. By continuing to use the Website after we change the terms of this Privacy Policy, you consent to those changes. It is your responsibility to periodically check the Website and this Privacy Policy for changes.

Information ASTRA May Collect on the Website

We collect several types of information from and about you when you access and use the Website, including the following:

Non-Personal Information. When you visit the Website, we may collect non-personal information about you automatically as you navigate through the Website via certain Internet technology tools, including cookies, web beacons, and other tracking technologies. “Non-personal information” we may collect includes, for example, details about how you use the Website, what Website features you access, information regarding the type of browser and operating system that you use, what website you linked from to the Website, other websites you have visited, and other similar analytic data. Non-personal information also includes personal or non-personal information that has been aggregated or pseudonymized in such a way that you cannot easily be identified individually. We may use third party service providers to assist us in collecting and analyzing non-personal information or to provide advertisements or other content on the Website.

Personal Information. We may collect personal information: (1) when you provide it to us directly, including through forms on the Website (including, for example, when you register for our service, apply for a job, communicate to our customers, investors, and prospective and existing employees, use our services, or otherwise); (2) when you send us an email or contact us using the Contact Us page; and (3) from third-party service providers who assist us in collecting and analyzing personal information. Personal Information includes, but is not limited to, name, language, contact details (such as telephone numbers, e-mail address, address), user login data, demographic data, technical information, and if applying for a job, employment history, information from your resume, your nationality, date of birth, and other relevant information to enable background checks.

If you elect to post any information to publicly-accessible areas of the Website, you hereby grant to ASTRA a perpetual, worldwide, irrevocable, fully-paid-up, royalty-free, nonexclusive license to use, reproduce, copy, modify, publish, distribute, perform, display, and create derivative works from such information (in whole or part) for any reason whatsoever.

How We Use the Information We Collect

We use personal and non-personal information:

1. To determine how much traffic the Website receives, to statistically analyze Website usage, to diagnose problems with our server, to improve Website content, to customize the Website’s content, layout and services, and to otherwise provide the Website to you and other users;

2. To process payments and complete transactions;

3. To provide you with information regarding transactions or to otherwise contact you regarding administrative notice and communications related to your use of the Website;

4. To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection;

5. To fulfill any legitimate purpose for which you provide it;

6. As otherwise may be disclosed at the point of collection; and

7. For any other purpose with your express consent.

We do not sell, rent, or loan our email contact lists to any third party .

We may retain the content of any emails or messages you send us, and your name, your email address, and our response in order to handle any follow-up questions you may have. We may also use this information to measure how effectively we address your concerns. We will not keep such information for longer than is required to fulfil these purposes.

Information Sharing and Disclosure to Third Parties

Non-Personal Information. Because non-personal information does not identify who you are, we may share or disclose such information without restriction. For example, we may share or disclose non-personal information with our affiliates, suppliers, employees and agents, other businesses, and the government.

Personal Information. ASTRA may share or disclose your personal information:

1. To affiliated companies or other trusted businesses or persons who work on behalf of or with ASTRA. ASTRA may use third party service providers to host the Website or perform other Website functions, to help ASTRA administer our business, or to communicate with you about offers or other information relevant to your relationship with ASTRA. For example, we may provide your payment and financial information to third party service providers to process your payments and complete your transactions. All such third parties are subject to confidentiality obligations and are contractually obligated to maintain adequate security measures to protect your information;

2. In response to subpoenas, to law enforcement or government officials for any reason, to comply with court orders, regulatory requests, or other legal processes, or to establish or exercise our legal rights or defend against legal claims;

3. To investigate, prevent, or take action regarding suspected illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or as otherwise required by law if ASTRA believes it is necessary or appropriate to share such information;

4. To enforce or apply this Privacy Policy, the Terms and Conditions, or other contracts with you or with third parties, including for billing and collection purposes;

5. With a potential acquirer or buyer, if ASTRA becomes involved in a merger, acquisition, divestiture, restructuring, reorganization, dissolution, or any form of sale of some or all of its assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding;

6. With third parties to the extent required tofulfill the purpose for which you provide it;

7. As otherwise may be disclosed to at the point we collect your personal information ; and

8. For any other purpose with your express consent.

ASTRA will not share or disclose your personal information except in accordance with this Privacy Policy without first providing you with notice.

International Transfer of Data

ASTRA is based in the Kingdom of Saudi Arabia. By providing your personal information and by using the Website, if you are located in a country other than the Kingdom of Saudi Arabia, you expressly consent to the transfer of your personal information to the Kingdom of Saudi Arabia where data protection laws may not be considered adequate when compared with the data security laws in your country, or may not be as stringent as such laws. You also expressly consent to the disclosure to third parties of your personal information which is transferred to the Kingdom of Saudi Arabia in accordance with this Privacy Policy and the Terms and Conditions. ASTRA may use third party service providers, as mentioned in this Privacy Policy, that may be located in the Kingdom of Saudi Arabia or elsewhere in the world. By providing your personal information and by accessing or using the Website, you expressly consent to the transfer of your personal information to such third party service providers, wherever they may be located.

Your Choices

Upon written request and verification of your identity, we will provide you with your personal information in our possession. You may request such information by contacting us as described below. You may also update or correct your personal information in our possession by contacting us as described below or by updating your information through the Website.

Please note that if you request we delete your information, that deletion may not happen immediately. We may retain your personal information subject to our reasonable business or legal requirements to do so, including, for example, to comply with requests from law enforcement.

In addition to the rights referenced above, individuals in Europe have certain additional data subject rights which may be subject to limitations and/or restrictions. These rights include the right to obtain restriction of processing or to object to processing of your personal data, and to data portability. If you wish to exercise any of the above mentioned rights, please contact us as described below.

You may be able to disable cookies or other tracking technologies through which we collect information about you by adjusting your browser preferences on your computer; however, doing so may limit your ability to take advantage of all of the features of the Website. ASTRA does not control the cookies or other tracking technologies used by third parties, including our service providers. You should contact those third parties if you have questions or concerns regarding their use of cookies or other tracking technologies.

Links to or from Third Party Websites

You may have the opportunity to follow a link to other websites that may be of interest to you from this Website. ASTRA endeavors to only link to reputable organizations related to your areas of potential interest, but these websites may not be hosted or controlled by ASTRA and ASTRA is not responsible for the privacy practices of those websites or the content provided thereon. Please review the privacy policies and practices of those websites before following such links.

Our website may contain affiliate marketing links, which means we may be paid commission on sales of those products or services. ASTRA is not responsible for those products or services or the privacy practices of those affiliates. You should contact those affiliates directly if you have questions or concerns about their privacy practices, products, or services.

Security

ASTRA takes security measures designed to protect against unauthorized access, alteration, disclosure, or destruction of your personal information. These measures include internal reviews of ASTRA’s practices and security measures, including a review of ASTRA’s encryption and physical security measures to guard against unauthorized access to systems where ASTRA stores personal information. Due to the nature of the Internet and online communications, however, we cannot guarantee that any information transmitted online will remain absolutely secure or confidential, and we are not liable for the acts of third parties, such as hackers who circumvent our security and privacy measures. The security of your personal information also depends on you. You are responsible for maintaining the confidentiality of your username, suite number, password, and other login credentials. ASTRA recommends that you do not share that information with third parties. We also recommend that you be careful not to post any personal information in public areas of the Website as that information may be viewed by other users or third parties that you do not know.

Children Under the Age of 13

ASTRA is committed to protecting the privacy of children. ASTRA does not knowingly collect personal information from children under the age of 13. If you are under 13, you may not use or provide any information to us through the Website. If a child under 13 provides us with personal information without parental or guardian consent, the parent or guardian may contact us as described below, and we will remove the information.