Our Privacy Commitments

Endeavour Clinical Solutions (Endeavour) is committed to protecting your privacy. This Privacy Policy is
established for the protection of personal information in accordance with applicable government
regulations. Please review this Privacy Policy Statement before providing your Personal Information and
only provide your Personal Information if you are in agreement with the contents of the Privacy Policy
Statement. This Privacy Policy Statement is periodically reviewed and changed as appropriate. The changes
that may be published in this Privacy Policy Statement from time-to- time are effective the date they are
published and replace any previous versions or updates.

Endeavour is committed to comply with all applicable U.S. Federal and international regulations including
the Privacy and Security Rules of the U.S. Health Insurance Portability Act (HIPAA), The U.S. Department of
Commerce Safe Harbor Principles the U.S.-Swiss Safe Harbor Framework and other
regulations as applicable. Personal Information is defined to include Safe Harbor Sensitive Personal
Information and HIPAA Protected Health Information and may include information such as your name and
address or information about your health. This privacy policy applies to Personal Information handled in
any form, including electronic or paper.

Personal Information Collection and Use

Endeavour aims to collect personal information primarily for the purposes of advancing the awareness of
and participation in clinical research studies and health outcomes research. To prevent unauthorized access
to personal information, to maintain data accuracy, and to ensure the correct use of your personal
information, we have put into place appropriate procedures to safeguard and secure the information we
collect. When you provide your personal information, you will have clear notice informing you about the
purpose for which the information is collected and used. Endeavour will only use this information to further
inform you about relevant clinical research studies and, if applicable, to obtain your comments on your
medical care or possible research participation.

Only with your permission will Endeavour transfer specified parts of your contact information and personal
information to other healthcare professionals. We will not knowingly disclose your personal information to
any entity that does not comply with the level of personal information protection required by applicable
governmental regulations. Further, Endeavour will not disclose your personal information to any third party
without your permission, except as required by law. Endeavour reserves the right to transfer its database of
information to another company as part of a sale or merger with the commitment that Endeavour-written
privacy regulations will continue to be followed. All retained personal information is stored in confidential,
secure and restricted access files for only as long necessary to achieve the stated purpose for which it was
gathered.

Non-PI Collected on Your Computer Log-In

When visiting most websites, it is usual and customary to automatically collect and temporarily store the following general information about your visit:

  • Date and time of visit
  • Pages visited, and
  • Address of website you came from to make your visit

It is also considered routine to use Cookies and Internet Service Provider (ISP) information. This information
does not personally identify you and are not Personal Information. A Cookie is a small piece of data, which
you can block or remove that may be stored on the hard drive of your computer when you visit our
website. This Cookie enables you to move more easily from one interactive feature on our website to
another. ISP information is a number assigned to you by an Internet Service Provider so you can access the
internet. We reserve the right to use information about your visit to our website as necessary to help
identify any person attempting to break into or damage our website(s) or computers.

Security and Integrity of Personal Information

Personal information is retained and stored in confidential, secure and restricted access files for only as
long necessary to achieve the stated purpose for which it was gathered. The transmission of information via
the internet is not completely secure and although we will do our best to protect personal information, we
cannot guarantee the security of personal information transmitted to Endeavour; any transmission is at
your own risk. We use strict procedures and security features to try to prevent unauthorized access.
Every reasonable precaution is taken to secure, protect, and ensure the integrity of personal information
and we recognize our responsibility to protect information from loss, misuse, alteration, or inaccuracy. To
help ensure data integrity, we only collect personal information relevant to its intended use. Our
information processing employs necessary and appropriate standard security measures such as user
identification and password protection, Secure Socket Layer (SSL) encryption, hardware and software
barriers to unauthorized access to information, and updated virus protection.

Third Parties

Websites supported by Endeavour may provide links to other third-party websites. The Privacy Policy
described here does not apply to those sites. Please check the privacy sections of any site accessed.

Inquiries or Concerns

If you have any questions regarding your Personal Information, including but not limited to data privacy,
data corrections, removal of data, or disclosure of data please contact privacy@endeavour-clinical.com and we will respond to your request in accordance with applicable laws and regulations.