top of page

Privacy Policy

Legal Disclaimer

The explanations and information provided on this page are only general and high-level explanations and information on how to write your own Privacy Policy. You should not rely on this article as legal advice or as recommendations regarding what you should actually do, because we cannot know in advance the specific privacy practices you wish to establish between your business and your customers and visitors. We recommend that you seek legal advice to help you understand, and to assist you in the creation of, your own Privacy Policy.

Novastra Therapeutics Inc. (“Novastra,” “we,” “our,” or “us”) develops single-cell immunotherapy technologies, including the OAP-1 program and OmniAntigen™ platform. Protecting your privacy and the security of your data is fundamental to our mission. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit https://www.novastrx.tech (the “Site”), interact with us, or participate in our research or clinical programs. 

 

This Policy applies to information collected via the Site, our social-media pages, digital communications, and offline channels (e.g., conferences). It does not cover third-party websites we link to, which are governed by their own policies.

1. Why We Collect & How We Use Data

  • To operate, secure, and optimize the Site

  • To respond to inquiries or send requested materials (e.g., white papers, investor decks)

  • To enroll you in events, newsletters, or clinical-trial portals

  • To conduct pre-clinical or clinical research with appropriate consent

  • To comply with legal obligations or defend legal claims

  • With your permission, to send marketing communications or surveys

 

2. Legal Bases for Processing (GDPR)

Where the EU / UK GDPR applies, we rely on one or more of the following bases: (i) your consent; (ii) performance of a contract; (iii) compliance with a legal obligation; (iv) our legitimate interests (e.g., R&D, security), provided they are not overridden by your rights.

 

3. Sharing & Disclosure

We do not sell your personal information. We may share it only with:

  1. Service providers (cloud hosting, analytics, email platforms) bound by confidentiality.

  2. Research or clinical partners under data-processing agreements or BAAs.

  3. Regulators or law-enforcement when required by law or to protect rights, safety, or property.

  4. Successors in the event of a merger, acquisition, or asset transfer.

 

4. Cookies & Similar Technologies

We use cookies, pixels, and analytics tools (e.g., Google Analytics 4) to understand site traffic and improve user experience. You can control cookies via browser settings or opt-out mechanisms provided in our Cookie Notice.

 

5. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this Policy, comply with regulatory retention periods (e.g., clinical-trial master files), or resolve disputes.

 

6. Security

We employ industry-standard administrative, technical, and physical safeguards—including encryption in transit and at rest, least-privilege access controls, and regular security assessments—to protect data against unauthorized access, alteration, or disclosure.

 

7. International Transfers

Your information may be processed in countries other than your own. Where we transfer personal data from the EEA/UK to a country without an adequacy decision, we use Standard Contractual Clauses or another lawful transfer mechanism.

 

8. Your Rights

Depending on your location, you may have rights to:

  • Access or obtain a copy of your data

  • Rectify inaccurate or incomplete data

  • Erase data (“right to be forgotten”)

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time

  • To exercise these rights, email privacy@novastrx.tech or write to the address below. We will respond within the timeframe required by applicable law.

 

California Residents (CCPA/CPRA)

We provide additional disclosures and rights—including the right to opt out of “sharing” for cross-context behavioral advertising—in our California Privacy Notice.

 

9. Children’s Privacy

The Site is not directed to children under 16. We do not knowingly collect personal data from them. If you believe a child has provided us information, contact us and we will delete it.

 

10. Changes to This Policy

We may update this Policy periodically. Material changes will be posted on this page with a new “Last updated” date. Continued use of the Site after such changes constitutes acceptance.

bottom of page