Privacy Policy - IBSA USA

(Last Update: April 6, 2026)

INTRODUCTION

Welcome to www.ibsausa.com (together with any websites operated by IBSA Pharma Inc., collectively and individually, the “Website”) which are operated by IBSA Pharma Inc. (“IBSA USA”; “we”; “us”; or “our”). This Privacy Policy explains how we collect and process information through our Website and certain other services. Please read this Privacy Policy carefully to understand our policies and practices regarding such information. If you do not agree with our policies and practices, you should not use the Website. By accessing or using this Website, you agree to this Privacy Policy.

This Privacy Policy and Website are intended solely for users in the United States. If you are located outside of the United States, you should access www.ibsagroup.com and read their policies.

Residents of U.S. states with comprehensive consumer privacy laws have specific rights which are set forth in the YOUR RIGHTS, CHOICES AND OPT OUT section below.

INFORMATION COLLECTION

Our Website collects information that identifies, relates to, describes, references, or is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer ("personal information", also called “personal data” under some laws). We collect the following categories of personal information and have collected the following categories of personal information from individuals within the last twelve (12) months, for the following categories of purposes and from the following categories of sources, and IBSA USA shares personal information with the following categories of third parties:

Category	Examples	Purposes for Which Such Information Was Collected	Categories of Sources From Which Personal Information Has Been Collected	Categories of Third Parties With Whom the Website Shares or Sells Personal Information
Identifiers	Name Email address Physical address Telephone number IP address Persistent identifiers such as cookies	As described below in HOW WE USE YOUR INFORMATION	From you directly From third parties who place pixels on our Website or third party services	As described below in DISCLOSURE OF YOUR INFORMATION
Internet or other electronic network activity information	Non-precise location information Analytical information (such as referring websites)	As described below in HOW WE USE YOUR INFORMATION	From you directly From third parties who place pixels on our Website or third party services	As described below in DISCLOSURE OF YOUR INFORMATION

Category

Examples

Purposes for Which Such Information Was Collected

Categories of Sources From Which Personal Information Has Been Collected

Categories of Third Parties With Whom the Website Shares or Sells Personal Information

Identifiers

Name
Email address
Physical address
Telephone number
IP address
Persistent identifiers such as cookies

As described below in HOW WE USE YOUR INFORMATION

From you directly

From third parties who place pixels on our Website or third party services

As described below in DISCLOSURE OF YOUR INFORMATION

Internet or other electronic network activity information

Non-precise location information
Analytical information (such as referring websites)

As described below in HOW WE USE YOUR INFORMATION

From you directly

From third parties who place pixels on our Website or third party services

As described below in DISCLOSURE OF YOUR INFORMATION

We do not collect data defined as “sensitive” personal information under most applicable privacy laws.

COOKIES

Our Website and our services use cookies. Please read our Cookie Policy.

HOW WE USE YOUR INFORMATION

We use information that we collect from you:

To deliver our content and services to you and analyze its usage;
To provide you with information, such as email newsletters;
To market our products and services to you on this Website, through emails and on third party services (such as through advertisements placed on other websites);
To carry out our obligations and enforce our rights;
In any other way we may describe when we collect the information from you; and
For any other purpose with your consent.

DISCLOSURE OF YOUR INFORMATION

We may disclose your personal information as described in this Privacy Policy or otherwise with your consent:

To contractors, service providers, and other third parties we use to support our business and fulfill product orders. However, such parties are only authorized by us to use the information for the benefit of us;
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of IBSA USA’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by IBSA USA is among the assets transferred;
To affiliates in the same corporate family as IBSA USA;
To comply with any court order, law, or legal process, including to respond to any lawful government or regulatory request;
To enforce or apply our policies or investigate fraud; and
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of IBSA USA, our users, clients or others.

TARGETED ADVERTISING ON OUR WEBSITE

We may work with third parties who collect information on our Website through the use of cookies and similar methods in order to serve you with relevant advertisements on other services or to determine that you have seen our advertisements on other services. We also collect and process information to serve you with advertisements through other platforms and services that you use. In addition to the rights set forth in the YOUR RIGHTS, CHOICES AND OPT OUT section below, you may opt-out of being tracked online by certain companies who are listed on the Digital Advertising Alliance’s website at http://www.aboutads.info/choices/ and may also learn more about online behavioral advertising at such website. If you opt-out, you will still receive advertisements, but they will not be delivered to you by such companies from whom you have opted-out based upon your behavioral data possessed by the companies from whom you have opted-out. The opt-out process through the Digital Advertising Alliance may rely upon the placement of an opt-out cookie on your device, and you must repeat this process on each device or if your cookies are purged from your device. Cookie-based opt-outs are not effective on certain mobile services. Users may opt-out of certain advertisements on mobile applications or reset advertising identifiers via their device settings. To learn how to limit ad tracking or to reset the advertising identifier on your iOS and Android device, click on the following links:

iOS – https://support.apple.com/en-us/HT202074
Android – https://support.google.com/ads/answer/2662922?hl=en

More information about opting out on mobile devices is available via the Network Advertising Alliance here – https://www.networkadvertising.org/mobile-choice/.

Please note that, unless required by law, we do not respond to or honor “Do Not Track” (a/k/a DNT) signals or similar mechanisms transmitted by web browsers.

LINKS TO OTHER SITES AND SOCIAL MEDIA SERVICES

We may create links to other websites that we think may be of interest to you. We do not endorse any other websites and providers by providing such links, and our privacy policy applies only to your use of our Website. We are not responsible for the privacy policies of any websites and services we link to on our Website, and you should read the privacy policies of each site you visit to determine what information that site may collect about you.

DATA RETENTION

We will retain your information for as long as your account is active or as needed for us to manage and provide our services and for our business needs. Even if we delete some or all of your personal information, we may continue to retain and use de-identified or aggregate data previously collected.

YOUR RIGHTS, CHOICES AND OPT OUT

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, New Hampshire, Delaware, Iowa, Nebraska, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island or another U.S. state that has similar privacy legislation (collectively, “Covered States”), you may have specific rights regarding your personal information under: the California Consumer Privacy Act (“CCPA”), Virginia Consumer Data Protection Act, Colorado Privacy Act, Connecticut Data Privacy Act, Utah Consumer Privacy Act, Texas Data Privacy and Security Act, Oregon Consumer Privacy Act, Montana Consumer Data Privacy Act, New Hampshire Data Privacy Act, Delaware Personal Data Privacy Act, Iowa Consumer Data Protection Act, Nebraska Data Privacy Act, New Jersey Data Protection Act, Tennessee Information Protection Act, Minnesota Consumer Data Privacy Act, Maryland Online Data Privacy Act, Indiana Consumer Data Protection Act, Kentucky Consumer Data Protection Act, Rhode Island Data Transparency and Privacy Protection Act or similar laws in other U.S. states (collectively, "State Privacy Laws"). This section describes the rights that consumers of Covered States have and explains how to exercise those rights. To be clear, these rights are granted only to the extent that you are considered a consumer of Covered State and we are acting as a “controller” or “business” (as applicable) under State Privacy Laws with respect to your personal information. The rights in this section are not intended to grant you additional rights, but only your rights under the State Privacy Laws.

The categories of personal information we process, our purposes for processing your personal information, the categories of personal information that we share with third parties, and the categories of third parties with whom we share it are set forth in the terms of the Privacy Policy above.

In addition to the rights set forth in our Privacy Policy, State Privacy Laws may, depending on your state of residence, provide you with the following rights:

Right to know. You may have the right to know whether we process your personal information and to access such personal information. You may also have the right to request that we disclose certain information to you about our collection, use, or disclosure of your personal information. Users in some states may also have the right to obtain a list of the categories of third parties, and/or the names of such third parties, to which we have disclosed personal information.
Right to data portability. You may have the right to obtain a copy of your personal information that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another business without hindrance, where the processing is carried out by automated means.
Right to delete. You may have the right to delete personal information that you have provided or that we have obtained about you. Please note that we may deny such a request if the requested deletion falls under an exception as set forth in the State Privacy Laws. Additionally, for residents of Colorado, Connecticut, and Texas, if you request deletion of your personal information and we have obtained such information from a third-party source, we may retain such data by keeping a record of the deletion request and the minimum data necessary to ensure that your personal information remains deleted from our records and that such retained data is not used for any other purpose, or we may opt you out of the processing of such personal information for any purpose except for those allowed under State Privacy Laws. Some State Privacy Laws, like those of Iowa and Utah, limit this right to only the data you have provided us.
Right to correct. You may have the right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes for which we process it.
Right to limit. If we ever process sensitive personal information, you may have the right to limit the use of that sensitive personal information. As of the date set forth above in this Privacy Policy, we do not process sensitive personal information.
Right to opt out. You may have the right to opt out of the processing of your personal information for purposes of: (i) targeted advertising; (ii) the sale of personal information; (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you or (iv) selling/sharing (as defined by the CCPA).

We do use your personal information for targeted advertising (also called “sales” or “shares” under the CCPA).

We do not use personal information collected on this Website for profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

Where required by State Privacy Laws, we will treat opt-out preference signals (such as the Global Privacy Control) as a request to opt-out.
Right to nondiscrimination. You have the right not to receive discriminatory treatment by us for the exercise of your privacy rights. Unless permitted by the State Privacy Laws, we will not:
- Deny you goods or services;
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
- Provide you a different level or quality of goods or services; or
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

EXERCISING YOUR U.S. STATE PRIVACY RIGHTS.

To exercise any of the rights described above, you may:

Email us at privacy.us@ibsagroup.com.

Only you, or a person or business entity that you authorize to act on your behalf (an “authorized agent”), may make the requests set forth above. You may also make a request on behalf of your minor child. If you are an authorized agent or an adult acting on behalf of your minor child, please reach out by emailing to privacy.us@ibsagroup.com so we can verify your authority.

In order to protect the security of your personal information, we will not honor a request if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. However, we will process opt-out requests without any additional verification, unless we suspect fraud. The method used to verify your identity will vary depending on the nature of the request. Generally speaking, verification will be performed through technical means of matching your device or identifiers to the data we possess.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

We will make every effort to respond to your request within 45 days from when you contacted us. If you have a complex request, the State Privacy Laws may allow us up to 90 days to respond. We will still contact you within 45 days from when you contacted us to let you know we need more time to respond.

If we decline to take action on a request that you have submitted, we will inform you of our reasons for doing so, and provide instructions for how to appeal the decision. Depending on your state of residence you may have the right to appeal within a reasonable period of time after you have received our decision. If you have this appeal right, within 60 days (or 45 days for residents of Colorado) of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If we deny your appeal, we will provide you with a method for contacting your state attorney general’s office to submit a complaint to the extent required by State Privacy Laws.

SECURITY

Safeguarding your personal information is a top priority. We have implemented reasonable security measures designed to protect your data from unauthorized access, misuse, alteration, or disclosure. While we take extensive precautions to ensure the security of your information, it is important to note that no method of data transmission over the Internet or electronic storage is 100% secure. We are committed to ongoing improvements in our security practices to maintain the integrity and confidentiality of your personal information.

CHANGES TO OUR PRIVACY POLICY

We will use personal information only in the manner described in the Privacy Policy in effect when the personal information was collected. However, and subject to any applicable consent requirements, we reserve the right to change the terms of this Privacy Policy at any time. Changes to this Privacy Policy will be promptly posted to this page and accompanied by a new effective date at the top of this page. We encourage you to review this Privacy Policy regularly for any changes. Any personal information collected upon your continued use of the Website or other services will be handled in accordance with the currently posted Privacy Notice.

CHILDREN UNDER THE AGE OF 18

Our Website is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn we have collected or received personal information from a child under 18 without verification of parental consent in violation of any applicable laws, we will delete that information. If you believe we might have any personal information from or about a child under 18 not in compliance with applicable laws, please contact us at privacy.us@ibsagroup.com

UNITED STATES OF AMERICA / CROSS BORDER DATA TRANSFERS:

By using the Website, you authorize the export of personal information from your home jurisdiction to other countries and its storage and use as specified in this Privacy Policy, such as the United States of America. Information stored in the USA may be subject to lawful requests by the courts or law enforcement authorities in such countries.

CONTACT US

If you have any questions about this Privacy Policy, please contact us at privacy.us@ibsagroup.com.