Last Updated: August 30, 2024

This Privacy Notice describes how Aligos Therapeutics, Inc. and its affiliates  (“we”, “us,” “our”) collects, uses and discloses information about individuals who use our website (https://aligos.com/), applications, services, tools and features, or otherwise interact with us (collectively, the “Services”). For the purposes of this Privacy Notice, “you” and “your” means you as the user of the Services, whether you are a customer, website visitor, job applicant or another individual whose information we have collected pursuant to this Privacy Notice. With respect to personal information we process as part of our clinical trials, we will provide you with a separate, dedicated privacy notice in accordance with legal requirements.

Please read this Privacy Notice carefully. By using any of the Services, you acknowledge you understand how we collect, use, and disclose your information as described in this Privacy Notice. If you do not want your personal information to be used as described in this Privacy Notice, please do not use or access the Services.

1.     CHANGES TO THIS PRIVACY NOTICE

We may modify this Privacy Notice from time to time, in which case we will update the “Last Updated” date at the top of this Privacy Notice. If we make material changes to the way in which we use or disclose information we collect, we will use reasonable efforts to notify you (such as by emailing you at the last email address you provided us, by posting notice of such changes on the Services, or by other means consistent with applicable law) and will take additional steps as required by applicable law. If you do not agree to any updates to this Privacy Notice, please do not continue using or accessing the Services.

2.     COLLECTION AND USE OF YOUR INFORMATION

When you use or access the Services, we collect certain categories of information about you from a variety of sources.

Information You Provide to Us

Some features of the Services may require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features. Information that you directly submit through our Services includes:

• Basic contact details, such as name, company name, address, phone number, and email. We use this information to provide the Services and to communicate with you (including to share press releases).
• Applicant details, such as name, email, phone number, address, education, employment history, gender, race, ethnicity, disability status, and resume. We use applicant details to process your application for employment, [for diversity monitoring,] and to evaluate your candidacy.
• Any other information you choose to include in communications with us, for example, when sending a message through the Services.

Information we collect automatically

When you use our Services, we automatically collect the information sent to us by your computer, mobile phone or other device. This information includes: (i) device information including, but not limited to, name and type of operating system; (ii) mobile network information; and (iii) standard web information such as your browser type and the pages you access on our website;. We use this information to tailor features and content to you, run analytics and better understand user interaction with the Services. For more information on how we use tracking technologies and your choices, see the section below, Cookies and Other Tracking Technologies.

Information Collected from Other Sources

We may obtain information about you from outside sources, including information that we collect directly from third parties and information from third parties that you choose to share with us. Such information includes analytics data we receive from analytics providers such as Google Analytics and information we receive from recruitment agencies, referees and organizations that provide background checks. Any information we receive from outside sources will be treated in accordance with this Privacy Notice. We are not responsible for the accuracy of the information provided to us by third parties and are not responsible for any third party’s policies or practices. For more information, see the section below, Third Party Websites and Links.

Use of Information

The information we collect about you is used in the following ways:

• To respond to your message and provide you with certain services, such as a newsletter;
• To provide and support the Services;
• To improve the Services;
• For internal business analysis or other business purposes consistent with our mission;
• To comply with legal and/or regulatory requirements and cooperate with regulators and law enforcement bodies;
• To protect our rights, your rights, and the rights of others, and to meet our own high standards of business practice;
• To process job applications of users who have applied for positions of employment with us through the Services; and
• To carry out other purposes that are disclosed to you via the Services.

3.     COOKIES AND OTHER TRACKING TECHNOLOGIES

Most browsers accept cookies automatically, but you may be able to control the way in which your devices permit the use of cookies or other tracking technologies (“Tracking Technologies”). If you so choose, you may block or delete our cookies from your browser; however, blocking or deleting cookies may cause some of the Services, including certain features and general functionality, to work incorrectly. If you have questions regarding the specific information about you that we process or retain, as well as your choices regarding our collection and use practices, please contact us using the information listed below.

The table below sets out the types of Tracking Technologies we and our partners use in connection with the Services, and the purposes for which we use them.

Provider	Name	Function and Purpose	Duration
Google Analytics	[_ga]	Analytics/Functional	1 year
Google Analytics	_ga_84V5RVCF1D	Analytics/Functional	1 year
Google Analytics	_gat_UA-130311003-1	Analytics/Functional	1 year
Google Analytics	ar_debug	Functional	4 months

To opt out of tracking by Google Analytics, click here.

Your browser settings may allow you to transmit a “do not track” signal, “opt-out preference” signal, or other mechanism for exercising your choice regarding the collection of your information when you visit various websites. Like many websites, our website is not designed to respond to such signals, and we do not use or disclose your information in any way that would legally require us to recognize opt-out preference signals. To learn more about “do not track” signals, you can visit http://www.allaboutdnt.com/. To learn more about Global Privacy Control, you can visit https://globalprivacycontrol.org/.

4.     DISCLOSURE OF YOUR INFORMATION

We may disclose your information to third parties for purposes subject to this Privacy Notice and based on our legitimate interests to run a successful business and maintain our relationship with you. In certain circumstances, we will obtain your consent prior to sharing your information with third parties, in accordance with legal requirements. Specifically, we share your personal information with the following categories of third parties:

• Our affiliates or others within our corporate group.
• Vendors or other service providers who help us provide the Services, including for system administration, press release distribution, investor relations, cloud storage, security, customer relationship management, marketing communications,  and web analytics.
• Third parties to whom you request or direct us to disclose information.
• Background check providers, to verify the information that you provided as part of your application;
• Referees, to identify you so they can provide a reference;
• Professional advisors, such as auditors, law firms, or accounting firms; and
• Third parties in connection with or anticipation of an asset or share sale, merger, or other business transaction, including in the context of a bankruptcy.

We may also disclose your information as needed to comply with applicable law or any obligations thereunder or to cooperate with law enforcement, judicial orders, and regulatory inquiries, to enforce any applicable terms of service, and to ensure the safety and security of our business, employees, and users.

5.  TRANSFERS OF PERSONAL INFORMATION

The personal information that we collect from you will be transferred to and stored at/processed in countries outside the European Economic Area (“EEA”), for example in the United States by our staff and/or third party service providers or partners.

For transfers outside the EEA, we rely on specific transfer mechanisms such as the European Commission’s standard contractual clauses, unless the transfer is to a country that has been determined by the European Commission to provide an adequate level of protection for individuals’ rights and freedoms in connection with their personal information. Please contact our data protection officer at dataprotection@aligos.com should you wish to examine a copy of the transfer mechanisms we rely on. 

6.     SOCIAL FEATURES

Certain features of the Services allow you to initiate interactions between the Services and third-party services or platforms, such as social networks (“Social Features”). Social Features include features that allow you to access our pages on third-party platforms, and from there “like” or “share” our content. Use of Social Features may allow a third party to collect and/or use your information. If you use Social Features, information you post or make accessible may be publicly displayed by the third-party service. Both we and the third party may have access to information about you and your use of both the Services and the third-party service. For more information, see the section below, Third-Party Websites and Links.

7.     THIRD-PARTY WEBSITES AND LINKS

We may provide links to third-party websites or platforms. If you follow links to sites or platforms that we do not control and are not affiliated with us, you should review the applicable privacy notice, policies and other terms. We are not responsible for the privacy or security of, or information found on, these sites or platforms. Information you provide on public or semi-public venues, such as third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.

8.     CHILDREN’S PRIVACY

Children under the age of 13 are not permitted to use the Services, and we do not seek or knowingly collect any personal information about children under 13 years of age. If we become aware that we have unknowingly collected information about a child under 13 years of age, we will make commercially reasonable efforts to delete such information. If you are the parent or guardian of a child under 13 years of age who has provided us with their personal information, you may contact us using the below information to request that it be deleted.

9.     DATA SECURITY AND RETENTION

Despite our reasonable efforts to protect your information, no security measures are impenetrable, and we cannot guarantee “perfect security”. Any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure while in transit. We recommend that you do not use unsecure channels to send us sensitive or confidential information.

We retain your information for as long as is reasonably necessary for the purposes specified in this Privacy Notice. When determining the length of time to retain your information, we consider various criteria, including whether we need the information to continue to provide the Services, resolve a dispute, enforce our contractual agreements, prevent harm, promote safety, security and integrity, or protect ourselves, including our rights, property or products.

10. YOUR RIGHTS

Under certain privacy laws, you have certain rights in relation to your personal information:

• Access: You have the right to access personal information we hold about you, and receive details on how we use it, and who we share it with.
• Portability: You have the right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
• Rectification: You have the right to correct any of your personal information we hold that is inaccurate.
• Erasure: In certain circumstance, you have the right to request deletion of personal information we hold about you.
• Restriction of processing: You have the right to require us to stop processing the personal information we hold about you, other than for storage purposes, in certain circumstances.
• Objection: You have the right to object to our processing of your personal information.
• Withdrawal of consent: Where we rely on consent to process your personal information, you have the right to withdraw this consent at any time by emailing us our data protection officer at dataprotection@aligos.com.

Please note that some of these rights only apply in certain circumstances, and all of these rights may be limited by law. For example, where fulfilling your request would adversely affect other individuals or our trade secrets or intellectual property, where there are overriding public interests or where we are required by law to retain your personal information.

To exercise any of these rights or if you have complaints about how we process your personal information, you can contact our data protection officer at dataprotection@aligos.com or use the contact details listed below.

If you think we have infringed data protection laws, you can file a claim with the data protection supervisory authority from the EEA country in which you live or work or where you think we have infringed data protection laws.

11.  HOW TO CONTACT US

Should you have any questions about our privacy practices or this Privacy Notice, please email us at info@aligos.com or dataprotection@aligos.com or contact us at 1 Corporate Drive, 2^nd Fl. South San Francisco, CA 94080.