How Strivita Pharma collects, uses and protects your personal data.
Strivita Pharma Website Privacy Notice
Strivita Pharma, including its subsidiaries and affiliates (collectively, "Strivita Pharma," "we" or "us") believes that effective privacy and data protection are not just important legal matters, but they are also an integral part of good corporate governance and essential to maintaining trust with our clients and partners in the drug development ecosystem. In this Privacy Notice, we explain how Strivita Pharma collects, uses, discloses and otherwise processes the personal data of our business contacts, customers, website visitors, on-site visitors and other business relations ("you," "your" or "yours"). Personal data means any information or set of information that, directly or indirectly, identifies you. Note that we maintain separate privacy notices to address other categories of individuals, which will be provided to you when applicable. In addition, our website domains may contain links to third-party websites. Be aware that this Privacy Notice does not apply to the processing of personal data by those third-party websites. We recommend you consult and carefully read the privacy notices of such third parties when visiting their websites. Our privacy practices are subject to applicable laws in the places in which we operate. This means we engage in the practices described in this notice in a particular jurisdiction only if permitted under the laws of those places. This Privacy Notice will be amended from time-to-time. The handling of your personal data is subject to the most recent version of this Privacy Notice.
Strivita Pharma is a specialized Contract Research Organization (CRO) focused on providing comprehensive Drug Metabolism and Pharmacokinetics (DMPK) services, including both in vitro and in vivo studies, to support pharmaceutical and biotechnology companies throughout the drug development process. Our expertise spans ADME-Tox studies, pharmacokinetic profiling, bioanalysis, and metabolic pathway characterization to help our clients advance their drug candidates efficiently and reliably. Unless otherwise stated in this Privacy Notice or in any other specific privacy notice provided to you, the data controller of your personal data is Strivita Pharma.
We process personal data from our business contacts, customers, website visitors, on-site visitors and other business relations. Depending on the category you belong to, we process the following categories of personal data for the relevant purposes specified in Section 4 (Purposes of Processing Personal Data):
•
Identification and Contact Details, such as your name, gender, company name, business function, contact and address details.
•
Account and Usage Details, such as your username and password, your Internet Protocol (IP) address, pages you access on our website and what browser you are using.
•
Financial Details, such as your credit card or bank details for invoicing and payment processing related to our DMPK services.
•
Inquiry Details, such as the nature of your inquiry to us, project specifications, study requirements, the content of your communication with us and any accompanying information you share in your inquiry.
•
Project-Related Details, such as study protocol contacts, project management correspondence, and technical point-of-contact information related to our DMPK service engagements.
•
Event-Related Details, such as your dietary wishes or disabilities which you may choose to voluntarily share with us when registering for an event, photos or videos taken during an event.
•
Visitor Details, such as the time of your visit to us, your vehicle license plate and CCTV footage for laboratory facility access and security.
•
Other Details, such as personal data that you disclose to us voluntarily. We receive your personal data from the following sources: from you as a data subject who interacts with us or uses our services or products; third-party partners such as event sponsors or marketing partners and service providers; others providing information in connection with claims or disputes; publicly available sources. Subject to local laws, we may process sensitive or special categories of personal data. This may, for example, include information related to racial or ethnic origin, political opinions, trade union membership, physical or mental health, biometric or genetic data, government identifiers, or similar data which entails a high level of reasonable expectation of privacy. If applicable, you will be specifically informed of the collection and use of such data by Strivita Pharma.
We may process the categories of personal data set out in Section 3 (Personal Data We Process) for various purposes. Below you will find an overview of these purposes. A. Handling inquiries If you have a question or request regarding our DMPK services, you may contact us through our online contact form, by e-mail or phone. We process your personal data for the following specific purposes:
•
to administer your question or request, and to direct it to the relevant scientific or business contact person within our organization;
•
to answer and facilitate your question or request, including any data subject right requests, and to review and improve the level of service we provide. If and to the extent local applicable laws or regulations require a specific legal basis for the processing of personal data, we rely on the following legal bases:
•
our need to form or perform a contract to which you are subject, or to take pre-contractual steps at your request;
•
our legitimate interest, and in particular, our need to handle your questions and requests properly, or
•
our need to comply with legal obligations to which we are subject, for example, the handling of data subject right requests. B. Managing our business and DMPK service delivery If you have a business relationship with us as a prospective or current customer, supplier or business partner, we may process personal data to establish or manage our business relationship with you and to deliver our DMPK services effectively. We process your personal data for the following specific purposes:
•
to enter into, maintain and execute our relationship with you, as our current or prospective customer, supplier or business partner;
•
to provide and administer our DMPK services, including in vitro and in vivo study coordination, project management, and scientific reporting;
•
to communicate with you in light of our commercial relationship, including study progress updates and technical discussions;
•
to safeguard our business, laboratory facilities and sites, including for security monitoring;
•
to improve our business and conduct business development;
•
to initiate disciplinary and legal processes and procedures, including collecting and disclosing evidence for the purpose of legal claims and proceedings, and
•
to ensure compliance with legal, regulatory and contractual requirements to which our business may be subject, including GLP (Good Laboratory Practice) and other applicable regulatory standards. If and to the extent local applicable laws or regulations require a specific legal basis for the processing of personal data, we rely on the following legal bases:
•
our need to form or perform a contract to which you are subject, or to take pre-contractual steps at your request;
•
our need to comply with legal obligations to which we are subject (e.g., for tax purposes when we process your payment details, or regulatory record-keeping requirements), or
•
our legitimate interest, in particular to safeguard our business or to administer and maintain the business relationship with you or the company you represent. C. Facilitating events To help you stay informed, Strivita Pharma may host or sponsor events, such as scientific seminars, webinars, workshops or DMPK-focused training sessions. We will not publicly list our event attendees, but in certain situations, your contact information and imagery may be visible to other attendees or be shared with affiliated event sponsors or partners. We process your personal data for the following specific purposes:
•
in order to organize the event and inform you about it, which may include activities such as informing you of the logistics surrounding the event and giving you access to the content related to the event;
•
to manage your information and to share such details with affiliated event sponsors or partners, and
•
to follow up after an event for commercial opportunities related to our DMPK products or services. D. Conducting marketing initiatives and administering surveys As part of our marketing initiatives, we may send you communications. Such communications may include invitations to attend scientific seminars, symposia and webinars focused on DMPK and drug metabolism topics. They may also include an invite to complete a survey or to share featured news or resources related to updates at Strivita Pharma and the latest in drug metabolism and pharmacokinetics research. Note that if you have signed up to stay connected with Strivita Pharma, or to receive promotional communications from us, you are able to unsubscribe at any time by following the unsubscribe instructions included in such communications. E. Administering visits to our sites and laboratories When you visit one of our physical sites or laboratory facilities, we may request your personal data to facilitate your visit and, as a basic security measure, we may perform a security check based on publicly sourced information. Given the sensitive nature of our laboratory operations and regulatory requirements, access to our facilities is carefully controlled. We may also make use of video surveillance systems at some of our sites. If this is the case, this will be communicated to you by dedicated signs. We process your personal data for the following specific purposes:
•
to ensure the safety and security of our visitors and site staff;
•
to maintain the safety and security of our property, laboratory facilities, study samples, as well as the information held therein;
•
to investigate non-compliance with our policies and procedures, potential criminal activities and other incidents or accidents that might occur on our sites, and
•
where relevant, to collect and disclose evidence for the establishment, exercise or defense of legal claims. F. Our Use of Cookies and Similar Technologies We may use cookies and similar technologies on our website domains. A cookie is a small text file containing small amounts of information which are downloaded to (or read off of) your device when you visit a website through, for example, the browser of your computer, smartphone or any other internet-enabled device. The various types of cookies we use may process the following personal data:
•
Required Cookies — These cookies are necessary to enable the basic features of this site to function.
•
Functional Cookies — These cookies allow for analysis of website usage to evaluate and improve the performance of the website.
•
Advertising Cookies — These cookies may be used to track your activity across multiple websites and domains. To indicate your preferences, navigate to Cookie Preferences at the bottom of our website.
Your personal data may be shared by us internally and externally. When third parties are given access to your personal data, we take required contractual, technical and organizational measures to ensure that your personal data is shared to the extent it is legitimate and necessary for the defined purposes. We may share your personal data with the following categories of recipients: Strivita Pharma Legal Entities Personal data may be stored and processed in any country where we have facilities or provide services to achieve the purposes set out in this Privacy Notice. Your personal data will be disclosed on a need-to-know basis. Business Partners We may disclose your personal data to our business partners. These include parties involved in the production and execution of orders and other services we provide to you, such as logistics partners for sample transport and specialized analytical service providers supporting our DMPK studies. Service Providers We may disclose your personal data to third parties who provide or perform services on our behalf, including but not limited to, cloud storage and software providers, parties who maintain our facilities and parties that provide us with professional services. We have processes in place to assess such third-party service providers to ensure compliance with Strivita Pharma privacy and data protection policies. Government and Law Enforcement Agencies We may disclose your personal data to government bodies, supervisory authorities, regulatory agencies (including health authorities and FDA/EMA inspectors), law enforcement agencies, or other third parties if we believe this to be necessary or appropriate to:
•
comply or respond to a claim, order, investigation, regulatory audit or lawful request;
•
protect our (intellectual property) rights, and the (intellectual property) rights and safety of our employees, customers, partners, or others; or
•
to investigate or respond to a security threat or any other activity that we consider illegal or unethical. Legitimate Business Reasons If we are involved in an actual or prospective audit, bankruptcy, merger, acquisition, reorganization, sale of assets or similar situation, your personal data may be transferred to a third party, to the extent required or permitted by law.
If your personal data will be transferred between different jurisdictions, we take the required measures to ensure that your personal data is adequately safeguarded. Should your personal data be transferred to a country that does not benefit from a formally recognized adequate level of protection, allowing for the free flow of such personal data between different jurisdictions, we will ensure that any legally required safeguards are put in place. This may for example be done through EU Standard Contractual Clauses (SCCs) or similar contractual arrangements recognized in the applicable jurisdictions. To accommodate data transfers within the Strivita Pharma group, we operate under an Intra-Group Data Processing Agreement governed by appropriate contractual data transfer safeguards.
We retain your personal data for as long as necessary to fulfill the purposes mentioned in this Privacy Notice, including for any legal, accounting, regulatory or reporting purposes which may require us to retain your personal data in accordance with statutory retention periods. Given the regulatory nature of our DMPK services, certain study-related records may need to be retained for extended periods in compliance with GLP and other applicable regulatory requirements. To determine and document the appropriate retention periods, we have considered several factors, such as the statutory retention period to which we are subject, the purposes for which your personal data were initially collected and the amount, nature and sensitivity of the personal data.
We have implemented reasonable technical, physical, and organizational measures to protect your personal data against accidental or unlawful destruction, or accidental loss, damage, alteration, unauthorized disclosure, or access. Our laboratory and data security protocols are designed to meet industry standards for pharmaceutical research organizations, including appropriate access controls, data encryption, and regular security assessments.
Depending on the applicable laws, you may have the following rights related to the processing of your personal data:
•
the right of access and right to know your personal data;
•
the right to correct or update your personal data;
•
the right to delete your personal data;
•
the right to restrict the use of your personal data;
•
the right to object to the processing of your personal data and to decisions based solely on automated processing;
•
the right to transfer your personal data;
•
the right to revoke given consent; and
•
the right to opt-out of sale and sharing of your personal information. You also have the right not to be discriminated against for exercising these rights. To help protect your privacy and maintain security, Strivita Pharma will take steps to verify your identity before granting you access to your personal data or acting on your request. Note that your data subject rights are not absolute and may be limited in certain circumstances. Should we be unable to honor your data subject right request, we will explain why we are not able to (fully) fulfill your request.
Our websites, products and services are not intended or designed to attract or engage with minors. Where personal data from minors is knowingly collected, we will collect explicit consent from their legal guardian prior to such processing, to the extent required by applicable laws.
Any concerns or questions related to this Privacy Notice or our processing of your personal data may be directed to the contacts below: Strivita Pharma Privacy Team Email: grace.liu@strivita-biotech.com Strivita Pharma Data Protection Officer (DPO) Email: it001@strivita-biotech.com If you have a complaint about the way we process your personal data, we kindly request that you contact us first to discuss your complaint. Should you feel that your complaint was not handled sufficiently, you have the right to file a complaint with your local data protection authority. This Privacy Notice was last updated on July 22, 2026.
Any concerns or questions related to this Privacy Notice or our processing of your personal data may be directed to:
Strivita Pharma Privacy Team
Email: grace.liu@strivita-biotech.com
Strivita Pharma Data Protection Officer (DPO)
Email: it001@strivita-biotech.com
This Privacy Notice was last updated on July 22, 2026.