Privacy Notice

Last Updated: September 9, 2026

This Privacy Notice explains how Beeline Medicines Corporation (“Beeline,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information about when you visit a Beeline website (“Beeline Sites”), contact us, and otherwise where this Privacy Notice is incorporated by reference.

You choose how much information to provide. We can usually respond to a general inquiry without every detail. We may need additional information to answer a specific inquiry, assess clinical trial interest or eligibility, investigate a product quality or safety issue, or complete a required report. If you do not provide it, we may not be able to complete that purpose, but we will help as far as possible.

Within the scope of this Privacy Notice, Beeline acts as a data controller or “business” for the personal information we process. This means that we decide how and why personal information is collected and further processed.

1. What Information Do We Collect?

Depending on your interaction with us, we may collect personal information about you directly from you, automatically when you use the Beeline Sites, or from third party sources.

Information We Collect Directly from You

When you contact us or work with us, we may collect the details you choose to provide. We may also collect personal information that you provide about other people; for example, if you are an authorized or legal representative, family member, or caregiver.  If you provide or permit us to collect personal information relating to another person, you are affirming that you are authorized to share that data and permit us to use the data as described in this Privacy Notice.

Contact and identity details. These may include your name, company name, job title or role, affiliation, email address, phone number, mailing address, country or region, and other details you choose to share. We use these details to identify and communicate with you, route your questions, manage a business relationship, provide requested information, and maintain accurate records.

Communications and preferences. We collect emails, calls, messages, form submissions, questions, feedback, and notes about our communications with you. We may record whether you want newsletters, press releases, trial updates, or other communications, how you prefer to receive them, and how you interact with a message.

Clinical trial interest and eligibility information. If you ask about or express interest in a clinical trial, we may collect the study or disease area, your country or location, preferred contact method, age range, health conditions, medical history, current or past treatments, and other information you choose to provide to assess whether you may meet stated eligibility criteria. We may use this information to answer your questions and route your inquiry to an authorized trial team or site.

Customer type. We may record whether you are a patient, caregiver, health care professional, payer, clinical trial participant or potential participant, business contact, or another type of inquirer. We use this information to route your inquiry and tailor our response.

Medical Information inquiries. When you contact Medical Information by email, phone, online form, or in person, we may collect your contact details, your question, the communication channel, the Beeline product or disease area involved, and documents or other details you send.

Health and medical information. You may choose to share information about a condition, symptoms, diagnosis, medical history, treatment, dose, or other clinical details. We use it to understand your question, provide a relevant factual response, assess trial interest, investigate a quality or safety issue, or complete a required report. We ask only for information relevant to the purpose.

Information We Collect Automatically

Website, device, and usage data. We may collect your IP address; device operating system, manufacturer and model, browser type, language settings, mobile carrier, unique identifiers, and general location such as a city, state, or geographic area. We may also collect the pages or screens you view, visits, time spent, browsing history, links or features used, and access times.

Cookies and similar technologies. We use cookies and similar tools to help pages work, remember preferences, support features, understand activity, and improve the website. For more information, see our Cookie Policy [LINK].

Social media, public-source, analytics, and marketing data. If you interact with our pages on LinkedIn or another social platform, we may receive your messages and interaction details. The platform controls information it collects on its pages. We may also receive information from public sources and analytics or marketing partners, including information about the company associated with a website visit. We may use this information to understand audiences, measure communications, and plan outreach.

Inquiry details and response records. We may record when we received and answered your inquiry, who responded, the information provided, follow-up questions, referrals, and related correspondence.

Information We Collect from Third Parties

We collect personal information about you from other sources, such as publicly available databases, service providers, event sponsors, advertising partners, and other third parties who verify the information you provide, healthcare providers, payors, and governmental or regulatory authorities.  We also collect personal information about you from your authorized or legal representatives, family members, and caregivers.  

We also collect information from you in the following circumstances:

Adverse Event or Medical Inquiry.  You may voluntarily provide us with personal information when you inquire about medical information, raise complaints or report adverse events in connection with our clinical trials. regarding our products.  We may receive relevant clinical or follow-up information from health care professionals, clinical trial sites, caregivers, other people who report an event, service providers, or health and regulatory authorities. This may include medical history, treatment details, or follow-up responses needed to verify or complete an inquiry or safety report.

2. How Do We Use Personal Information?

We use personal information for the following purposes.

Provide the Beeline Sites and our services. We use contact, identity, communication, website, and inquiry information to operate our websites, manage relationships, respond to questions, provide requested materials, and communicate about our products, services, studies, and events.

Business operations, improvement and protection. We use personal information to improve our products and services, create aggregated, de-identified, or anonymous statistics, plan our business, protect people and systems, detect fraud or misuse, manage our agreements, and meet reporting and recordkeeping responsibilities.

Marketing and communications. We may use contact details, preferences, and engagement data to send newsletters, press releases, event notices, product information, study-related messages, and other business communications by email, mail, phone, or other channels. We may also use this information to measure and improve outreach.

Assess clinical trial interest. We use information you provide to understand which study interests you, answer questions, make an initial check against stated eligibility criteria when appropriate, and route your inquiry to a trial team or site. Expressing interest does not enroll you, guarantee a place, or promise that a study will be available.

To comply with our legal obligations.  We use your information where we believe necessary to comply with our legal obligations and internal policies, to establish, exercise, and defend our rights and legal claims or the rights and claims of a third party, to perform accounting, audit, and other internal functions (such as internal investigations), and to maintain records.

Safety, quality, and required reporting.  If we receive information about potential adverse events, special situations, or product complaints, we use that information to investigate those reports. We may contact you or others for follow-up, and we may provide required information to health or regulatory authorities.

Quality assurance and metrics. We review inquiry records, response quality and timing, safety and quality referrals, and the usefulness of standard response materials. We conduct periodic quality reviews, including at least annually under our procedures. We track metrics to identify information gaps, improve communications, support research planning, and improve patient safety. We use aggregated or de-identified information where possible.

3. How Do We Share Personal Information?

Within Beeline. We share information with Beeline personnel and affiliated teams who need it for their role.

Service providers. We share information with providers that host our websites and systems, provide IT or support, deliver email, run analytics, support marketing, or help us provide services. We give them only what they need and require them to protect it and use it only to provide services for us.

Professional advisers. We may share information with lawyers, auditors, bankers, insurers, and other professional advisers when they need it for their work.

Business transfers. We may share information in connection with a merger, acquisition, sale, financing, reorganization, bankruptcy, or other transfer of some or all of our business or assets.

Authorities and others. We may share information with health or regulatory authorities, courts, law enforcement, or other persons when required, to protect health or safety, respond to a request, prevent harm or misuse, or protect our business and systems.

4. Retention and De-identification

We keep information for as long as we need it for the purpose for which we collected it, unless a longer period is permitted or required by applicable law, or necessary to establish, exercise, or defend legal claims.  When we no longer need information in identifiable form, we securely delete it or remove identifiers. We may keep de-identified or aggregated information for analysis and planning. De-identified information is designed not to be linked back to you.

5. Security

We use technical, organizational, and physical safeguards suited to the information and how we collect and send it. No method of storage or transfer is completely secure, so we cannot promise complete security.

6. Your Choices and Requests

Depending on the region in which you reside, and subject to exceptions under applicable law, you may have certain rights regarding our processing of your personal information. 

• You may have the right to obtain information about how we collect, use, and share your personal information. We provide this information within this Privacy Policy.
• Access, correction and deletion.You may also have the right to request access to your personal information, to correct personal information that is out of date or inaccurate, or to delete personal information that is no longer needed for a permitted purpose.
• Withdraw consent. When you provide us with consent to process your personal information, you may withdraw your consent at any time.
• Opt-out, restrict processing, portability. You may request that we stop or restrict our use of your personal information, or request the portability or transfer of the personal information we maintain about you to another organization, or to you, in a structured, commonly used, and machine readable format.
• Lodge a complaint with a Supervisory Authority: If the EU or UK General Data Protection Regulation applies to our processing of your personal information, you have the right to lodge a complaint with a supervisory authority if you are not satisfied with how we process your Personal Data. Specifically, you can lodge a complaint in the Member State of the European Union of your habitual residence, place of work, or the alleged violation of the GDPR. In the UK, you can lodge a complaint with the UK Information Commissioner’s Office.

If you have questions about we handle your personal information or if you believe your information is inaccurate or has been collected in error, please contact us as provided in the ‘How to Contact Us’ section below and we will endeavor to resolve your questions or concerns. We may ask for specific information from you to help us confirm your identity. Where these rights apply, you can empower an authorized agent to submit the request on your behalf in accordance with applicable law. You are entitled to exercise these rights free from discrimination.

Unsubscribe from marketing communications. You may opt out of our marketing-related communications by following the opt out or unsubscribe instructions contained in the marketing communication we send you. We may continue to send you administrative communications that are necessary for our relationship with you, such as relevant updates to our policies.

Cookies and online choices. You can limit cookies through your browser or other tools offered on our website. Some features may not work as a result. See our Cookie Policy [LINK] for more information. We do not currently respond to browser “Do Not Track” signals.

7. International Transfers

Beeline is a U.S. organization with affiliates, partners and subcontractors located in many countries around the world. Your personal information may be stored and processed in any country where we or our collaborators have facilities or in which we engage service providers.   We are accountable for the protection of your personal information when we transfer it to other countries. We either send it to a country, territory or sector within a country that is recognized as providing the same level of personal data protection as the country of origin, or use safeguards like the Standard Contractual Clauses (also known as the “SCCs”) approved by the European Commission under Article 46.2 of the GDPR, with necessary adjustments for transfers from the UK or Switzerland, or use specific transfer instruments like the UK International Data Transfer Agreement..  You may obtain a copy of these measures, by contacting us as indicated in the Contact Us section below.

8. For Individuals in the EEA/UK

We and our service providers rely on the following legal bases when processing your personal information:

European Union Representative

We have appointed VeraSafe as our representative in the EU for data protection matters. While you may also contact us, VeraSafe can be contacted on matters related to the processing of personal information. To contact VeraSafe, please use this contact form: https://verasafe.com/public-resources/contact-data-protection-representative or via telephone at: +420 228 881 031.

Alternatively, VeraSafe can be contacted at:

VeraSafe Ireland Ltd

Unit 3D North Point House
North Point Business Park
New Mallow Road
Cork T23AT2P
Ireland

United Kingdom Representative

We have appointed VeraSafe as our representative in the UK for data protection matters. While you may also contact us, VeraSafe can be contacted on matters related to the processing of personal information. To contact VeraSafe, please use this contact form: https://verasafe.com/public-resources/contact-data-protection-representative or via telephone at: +44 (20) 4532 2003.

VeraSafe United Kingdom Ltd.

37 Albert Embankment
London
SE1 7TL
United Kingdom

Data Protection Officer

We have appointed VeraSafe as our Data Protection Officer (DPO). While you may contact us directly, VeraSafe can also be contacted on matters related to the processing of personal information. VeraSafe’s contact details are:

VeraSafe LLC

100 M Street S.E., Suite 600
Washington, D.C.
20003
USA

Email: [email protected]
Web: https://www.verasafe.com/about-verasafe/contact-us/

9. Children

Our websites and services are not intended for children. If we learn that a child has provided personal information without appropriate adult permission, we will take reasonable steps to delete it.

10. Changes to this Notice

We may update this Notice from time to time. We will post the new version on our website and update the date above. If changes are important, we will give additional notice where practical before they take effect.

11. How to Contact Us

Questions about privacy: email [email protected] or write to Beeline Medicines Corporation, 100 Washington Boulevard, Suite 500, Stamford, CT 06902 USA.