Datenschutzrichtlinie

We collect only the personal information we need for the purposes described below, we use it only for those purposes or as the law permits, and we do not sell it. We rely on your consent, which you can withdraw at any time, except where the law allows or requires us to process information without it.

We collect the information you choose to submit through our forms. Required fields are marked on each form.

Contact form: your first and last name, email address, the topic of your inquiry, your message and your newsletter choice.

Careers form: your first and last name, email address, phone number (optional), LinkedIn profile, the role or area that interests you, your message, how you heard about us, your work authorization status and your newsletter choice.

Investor inquiry form: your first and last name, email address, organization, investor type, typical investment size, your message (optional) and your newsletter choice.

Advisory interest form: your name, email address, area of expertise, your message and your newsletter choice.

Resource download form (such as the EV SELECT Guide): your name, professional role, email address and newsletter choice.

Certificate of Analysis request form: your first and last name, email address, organization, role and newsletter choice.

If you email us directly, we receive your email address and whatever you include in your message.

When you visit the Website, our hosting and security providers automatically receive technical information such as your IP address, browser and device type, the pages you request and the referring page. This is needed to deliver the Website and keep it secure.

If you arrive through a link that carries campaign parameters (for example "utm_source"), we keep those parameters in your browser for the current session and attach them to any form you submit, so we can understand which outreach led to an inquiry.

With your consent, analytics and marketing tools collect information about how you use the Website, as described in section 5.

We use personal information to: respond to your inquiries and route them to the right person; evaluate career applications and communicate with applicants; manage investor, advisory and partnership relationships; send you the resources, documents or Certificates of Analysis you request; send our newsletter if you opted in; protect the Website and our forms against spam, fraud and abuse; understand how the Website is used and improve it; and comply with our legal obligations.

Career applicants may be invited to complete a short culture questionnaire (the "Culture Check") on our internal recruiting platform. Your answers help us prioritize applications. Every application is reviewed by a person, and no decision about an application is made by automated processing alone.

We do not use personal information for any new purpose without your consent, unless the law permits it.

Strictly necessary: we store your cookie choices in your browser's local storage so we can respect them on later visits. Session storage holds campaign parameters (section 3) and whether you dismissed a site banner; it is cleared when you close your browser. These do not require consent.

Cookieless measurement: Vercel Web Analytics and Vercel Speed Insights record page views and page performance in aggregate. They do not use cookies or track you across other websites.

Analytics (only with your consent): Google Analytics 4 (Google LLC) measures how visitors use the Website. Google's script loads with every consent signal set to denied, and Google Analytics does not set analytics cookies unless you consent. Microsoft Clarity (Microsoft Corporation) produces aggregated heatmaps and session recordings of clicks, scrolling and navigation, and masks text you type by default.

Marketing (only with your consent): the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company and LinkedIn Corporation) measures the performance of our LinkedIn campaigns and may be used to show our content to professional audiences on LinkedIn.

Security: Google reCAPTCHA Enterprise runs on our forms to detect automated abuse. It analyzes technical information about your device and browser and sends it to Google for risk assessment. We use it because protecting our forms from spam and abuse is necessary to operate them.

Error monitoring: when enabled, Sentry (Functional Software, Inc.) receives technical diagnostic data about errors in the Website, such as the error details, browser and page. We configure it not to send personal identifiers.

You can change your choices at any time through the Cookie Settings link in the footer, or through your browser settings.

We share personal information only with service providers that help us operate the Website and our business, only as needed for them to provide their services to us, and under contracts that require them to protect it:

Brevo (France): email delivery and contact management. Form submissions are stored in Brevo.

Vercel Inc. (United States): website hosting, form processing, cookieless analytics and a short-lived data store used for download links and rate limiting.

Google LLC (United States): Google Analytics 4, with your consent, and reCAPTCHA Enterprise.

Cloudflare, Inc. (United States): network and security services, and hosting of our internal recruiting platform, which receives career applicants' details for the Culture Check.

Microsoft Corporation (United States): Microsoft Clarity, with your consent.

LinkedIn Ireland Unlimited Company and LinkedIn Corporation (United States): the LinkedIn Insight Tag, with your consent.

Functional Software, Inc. (Sentry, United States): error monitoring.

We may also disclose personal information to our professional advisers under a duty of confidentiality; to authorities when required by law or to protect our legal rights; and to a party to a proposed or completed merger, acquisition, financing or sale of assets, under confidentiality obligations and only as permitted by law.

We do not sell personal information, and we do not rent or trade it.

BioThera is based in Canada. Some of our service providers process personal information in the United States, the European Union and other countries. Information processed outside your province or country is subject to the laws of that jurisdiction, and may be accessible to its courts and authorities. We protect information transferred to service providers through contracts and the other measures required by applicable law, including, where they apply, Quebec's requirements for communicating personal information outside Quebec and the European Commission's Standard Contractual Clauses.

Contact inquiries: for as long as needed to respond and follow up, and for at least 12 months.

Career, investor and advisory submissions: for at least 24 months from submission, as stated on those forms.

Resource download and Certificate of Analysis requests: for at least 24 months from submission.

Download links: the email address and the single-use link we create for a resource download are deleted automatically within 72 hours.

Security counters: counters based on IP address or email address, used to limit repeated submissions, expire automatically within one hour.

Newsletter: until you unsubscribe.

Analytics data: according to each provider's retention settings.

At the end of these periods we review the information and securely delete or anonymize it, unless an ongoing relationship or a legal obligation requires us to keep it longer.

We use reasonable administrative, technical and physical safeguards to protect personal information, including encrypted connections, access controls and spam and abuse protection on our forms. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a confidentiality incident presents a risk of serious harm, we will notify the affected individuals and the competent authorities as required by law.

Depending on where you live, you may have the right to: access the personal information we hold about you; have it corrected; withdraw your consent; have it deleted or de-indexed where the law provides; receive certain information in a structured, commonly used technological format; know the main factors behind a decision made about you by automated processing and have it reviewed by a person; and object to or restrict certain processing.

To exercise these rights, contact our Privacy Officer (section 14). We may need to verify your identity before responding, and we will respond within the time required by law, generally 30 days. Withdrawing consent may mean we can no longer respond to a request or consider an application. We will not treat you differently for exercising your rights.

If you are in the European Economic Area or the United Kingdom: we process your information on the basis of your consent (forms, analytics and marketing), our legitimate interests (Website security, abuse prevention and responding to business inquiries) and our legal obligations. You also have the right to data portability and to lodge a complaint with your local data protection authority.

If you live in a US state with a consumer privacy law: we do not sell your personal information. The LinkedIn Insight Tag runs only with your marketing consent, which you can withdraw at any time through Cookie Settings.

We send our newsletter and other promotional messages only with your express consent, in accordance with Canada's Anti-Spam Legislation. Every message includes an unsubscribe link, and you can also unsubscribe by contacting us. We may still contact you to respond to your inquiry, application or request.

The Website is not directed to anyone under 18, and we do not knowingly collect personal information from minors. If you believe a minor has sent us personal information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. The updated policy takes effect when posted on this page with a new "Last updated" date. If we make a material change, we will take reasonable steps to let you know, and where the law requires it, we will ask for your consent.

Our Chief Executive Officer is responsible for the protection of personal information at BioThera and acts as our Privacy Officer. You can reach the Privacy Officer by email at info@biotherasolutions.com (please write "Privacy" in the subject line), through our contact page at biotherasolutions.com/contact, or by mail at BioThera Solutions Inc., Attention: Privacy Officer, 477-150 Louis-Pasteur Private, Ottawa, Ontario K1N 6N5, Canada.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada. Quebec residents may also contact the Commission d'accès à l'information du Québec, and residents of the European Economic Area or the United Kingdom may contact their local data protection authority.

This Privacy Policy is written in English. Any translation is provided for convenience only, and if there is any inconsistency, the English version governs to the extent permitted by law. Si vous résidez au Québec et souhaitez obtenir une version française de la présente politique, veuillez communiquer avec nous.