Privacy Policy

This Privacy Policy applies to personal data that Saint Novel collects through or in connection with:

• our website;
• contact, inquiry, partnering, or platform-access forms;
• recruitment, talent-interest, or career-related forms;
• email correspondence and other direct communications with us;
• business-development, partnering, vendor, scientific, or professional interactions; and
• ordinary website analytics, security, and operational activities.

This Privacy Policy is intended to provide general notice of Saint Novel's personal data practices. Where specific privacy laws apply, individuals may have additional rights under those laws.

This Privacy Policy does not govern confidential technical, scientific, research, clinical, commercial, or business information submitted to Saint Novel under a separate non-disclosure agreement, collaboration agreement, research agreement, data processing agreement, service agreement, informed-consent document, or other written contract. Where a separate written agreement applies, that agreement will govern the relevant information and relationship.

This Privacy Policy also does not apply to clinical-trial data, patient-facing services, research-subject data, human-subject data, patient-identifiable data, or clinical-care data unless Saint Novel expressly states otherwise in a separate privacy notice or written agreement.

Unless Saint Novel has expressly requested such information under an appropriate written agreement, please do not submit patient-identifiable information, human-subject data, genetic or genomic data relating to identifiable individuals, clinical data, confidential partner program information, unpublished experimental data, or other sensitive scientific information through general website forms.

We may collect personal data directly from you, automatically through website technologies, and from third-party or public sources.

Information you provide directly

Depending on how you interact with us, we may collect:

• name;
• email address;
• mobile number or other contact number;
• company, institution, or organization;
• job title, role, department, or professional affiliation;
• country, region, or location information;
• inquiry type, program interest, partnership interest, or platform-access interest;
• therapeutic area, modality, project, or collaboration information that you choose to provide;
• messages, correspondence, attachments, and other communications you send to us;
• meeting requests, event interactions, or other business-contact information;
• CV, resume, portfolio, profile links, publication links, LinkedIn links, GitHub links, Google Scholar links, or similar professional materials;
• department interests, candidate statements, and other recruitment-related information;
• information relating to your right to work, availability, background, experience, qualifications, or professional history, where relevant to recruitment; and
• any other information you choose to provide to us.

We ask that you provide only information that is relevant to your inquiry, application, or relationship with us. We do not request sensitive personal data through general website forms unless expressly stated.

Information collected automatically

When you visit our website, we or our service providers may automatically collect certain technical and usage information, such as:

• IP address;
• browser type and version;
• device type;
• operating system;
• referring page or source;
• pages viewed;
• time and date of access;
• approximate location derived from IP address;
• interaction data, such as clicks, navigation patterns, and time spent on pages;
• cookie identifiers or similar technology identifiers; and
• security, diagnostic, or performance information.

Information from third-party or public sources

We may collect or receive personal data from third-party or public sources where appropriate for ordinary business, recruitment, or partnering purposes. These sources may include:

• public company websites;
• LinkedIn or other professional networks;
• public scientific profiles;
• publication databases;
• conference, event, or networking contacts;
• referrals or introductions;
• business partners, advisers, vendors, or service providers; and
• publicly available corporate, academic, or professional directories.

We may combine information collected from these sources with information that you provide directly to us.

Saint Novel operates in biotechnology, AI-enabled therapeutic design, and related scientific and business domains. In these contexts, individuals may communicate information that is commercially, technically, scientifically, or strategically sensitive.

This Privacy Policy covers personal data only. Confidentiality obligations for technical, scientific, therapeutic, commercial, program, target, sequence, assay, compound, antibody, peptide, conjugate, model, dataset, platform, or business information are governed by applicable written agreements, if any.

If you wish to disclose confidential, proprietary, unpublished, sensitive, or commercially valuable information to Saint Novel, you should do so only under an appropriate written agreement, such as a non-disclosure agreement or collaboration agreement.

Unless Saint Novel has expressly requested such information under appropriate safeguards, please do not submit through general website forms:

• patient-identifiable information;
• human-subject data;
• clinical-trial participant data;
• protected health information;
• genetic or genomic data relating to identifiable individuals;
• sensitive personal data;
• confidential partner program information;
• unpublished experimental results;
• proprietary sequences, structures, assays, models, datasets, or therapeutic designs; or
• information that you are not authorized to disclose.

If personal data is included within scientific, technical, or business information submitted to us, we will handle the personal-data component in accordance with this Privacy Policy and applicable law.

We may use personal data for the purposes described below.

To respond to inquiries and communicate with you

We may use personal data to:

• respond to questions, requests, and messages;
• communicate about Saint Novel's platform, capabilities, services, programs, research, or business activities;
• arrange calls, meetings, demonstrations, or follow-up discussions;
• provide administrative, operational, or service-related communications;
• maintain records of our communications; and
• manage ongoing relationships with potential partners, collaborators, vendors, advisers, and other contacts.

To evaluate partnering, collaboration, and platform-access opportunities

We may use personal data to:

• assess partnership or collaboration fit;
• evaluate platform-access or program inquiries;
• understand the organization, role, and business context of the person contacting us;
• prioritize and manage business-development discussions;
• coordinate internal review by relevant Saint Novel personnel;
• conduct appropriate diligence and conflict checks;
• prepare, negotiate, or administer commercial, scientific, or contractual relationships; and
• manage follow-up communications.

To operate, maintain, secure, and improve our website

We may use personal data and automatically collected data to:

• operate and maintain our website;
• improve website functionality, content, user experience, and performance;
• diagnose technical issues;
• monitor security, prevent misuse, and detect unauthorized activity;
• understand aggregate website usage patterns;
• test and improve website design and navigation; and
• maintain appropriate business and technical records.

To process recruitment and talent-interest submissions

We may use personal data to:

• review CVs, resumes, applications, and talent-interest submissions;
• assess qualifications, experience, interests, and potential fit;
• contact candidates about current or future opportunities;
• manage interview, evaluation, and recruitment processes;
• maintain talent-pipeline records;
• conduct reference, background, eligibility, or compliance checks where appropriate and lawful;
• communicate with candidates about recruitment status; and
• comply with employment, immigration, recordkeeping, and related legal obligations.

To send business or informational communications

We may use personal data to send administrative, transactional, legal, security, relationship-related, or service-related communications where appropriate.

Where permitted by applicable law, we may also use personal data to send non-essential business, marketing, event, recruitment, platform, partnering, or promotional communications that may be relevant to your interaction with us.

We will use personal data for direct marketing only where permitted by applicable law and, where required, after providing any required notice and obtaining any required consent.

You may request that we stop sending non-essential marketing or promotional communications by contacting us at the email address listed in this Privacy Policy. We may still send administrative, transactional, legal, security, relationship-related, or service-related communications where appropriate.

For compliance, legal, security, and protection purposes

We may use personal data to:

• comply with applicable laws, regulations, legal processes, and lawful requests;
• satisfy contractual, audit, accounting, tax, reporting, or recordkeeping obligations;
• enforce our rights and agreements;
• protect the rights, privacy, safety, property, and security of Saint Novel, our personnel, users, partners, candidates, and others;
• prevent, detect, investigate, or respond to fraud, cyberattacks, unauthorized access, misuse, unethical activity, or illegal activity;
• manage disputes, claims, investigations, or proceedings; and
• support internal governance, compliance, and risk-management activities.

AI systems and model training

Saint Novel may use software tools, automation, analytics, or AI-enabled systems to support ordinary business operations, website management, communications, recruitment administration, security, and internal productivity.

We do not use personal data submitted through general website forms to train public AI models.

Where we use internal or third-party tools to support business operations, recruitment, communications, or website administration, we apply safeguards intended to protect personal data and do not intentionally submit sensitive personal data to public AI systems unless permitted, appropriate, and subject to applicable safeguards.

Lawful grounds and consent

Where applicable law requires a legal basis or lawful ground for processing personal data, we may rely on one or more of the following:

• your consent;
• the need to respond to your request or take steps at your request;
• the need to evaluate or manage a business, partnering, contractual, or recruitment relationship;
• our legitimate business purposes, where permitted by applicable law;
• compliance with legal, regulatory, contractual, audit, or reporting obligations;
• protection of rights, property, safety, and security; or
• other grounds permitted by applicable law.

Where we rely on consent, you may withdraw consent where permitted by law. Withdrawal of consent will not affect processing that occurred before withdrawal, and it may affect our ability to continue providing certain communications, evaluations, or services.

Our website may use cookies, local storage, pixels, analytics tools, and similar technologies to operate the website, understand usage, improve performance, and protect security.

Cookies are small files placed on your browser or device. Similar technologies may store or access information on your device or collect information about your interactions with our website.

We may use cookies and similar technologies for purposes such as:

• enabling website functionality;
• supporting security and fraud prevention;
• measuring website traffic and performance;
• understanding how visitors navigate our website;
• identifying technical issues;
• improving website content and performance; and
• supporting analytics and aggregate reporting.

You may be able to control cookies through your browser or device settings. Disabling cookies may affect the functionality or performance of certain website features.

If we use third-party analytics providers, those providers may collect information about your use of our website subject to their own terms and privacy practices. We do not use analytics tools to intentionally collect patient-identifiable information, clinical data, or sensitive scientific data through the public website.

We may share personal data where appropriate for the purposes described in this Privacy Policy and where permitted by applicable law.

We do not sell personal data.

Service providers

We may share personal data with service providers, vendors, contractors, or professional service firms that support our business operations. These may include providers of:

• website hosting and infrastructure;
• email, communications, and form-management services;
• cloud storage and document-management services;
• analytics, security, and performance tools;
• IT support and cybersecurity services;
• customer relationship management and business-development tools;
• recruitment, applicant-tracking, or talent-management services;
• professional-services platforms; and
• other vendors that help us operate our business.

These service providers are expected to process personal data only as necessary to provide services to us and subject to appropriate contractual or legal obligations.

Affiliates and related entities

We may share personal data with affiliates, subsidiaries, parent entities, or related entities where appropriate for internal administration, business operations, compliance, recruitment, partnership evaluation, or related purposes.

Business partners and collaborators

Where relevant to a proposed or existing partnership, collaboration, platform-access discussion, vendor relationship, or business opportunity, we may share limited business-contact information with partners, collaborators, advisers, or other involved parties, subject to appropriate confidentiality or contractual arrangements where applicable.

Professional advisers

We may share personal data with lawyers, accountants, auditors, consultants, insurers, bankers, and other professional advisers where reasonably necessary for legal, financial, governance, audit, insurance, compliance, or risk-management purposes.

Authorities, regulators, and courts

We may disclose personal data to courts, regulators, law enforcement, government authorities, or other third parties where required or permitted by law, legal process, regulation, subpoena, court order, governmental request, or similar obligation.

Business transactions

We may disclose or transfer personal data in connection with a proposed or actual merger, acquisition, financing, investment, reorganization, sale of assets, diligence process, corporate transaction, or similar event, subject to appropriate safeguards where applicable.

With consent or direction

We may share personal data with other parties where you consent to or direct the sharing, or where sharing is otherwise disclosed to you and permitted by applicable law.

Saint Novel is based in Hong Kong. Personal data may be stored, accessed, processed, or transferred in Hong Kong, Singapore, the United States, the United Kingdom, the European Economic Area, or other jurisdictions where we, our service providers, advisers, partners, collaborators, or vendors operate.

Privacy and data protection laws in these jurisdictions may differ from those in your place of residence. Where required by applicable law, we take steps intended to provide appropriate safeguards for cross-border transfers of personal data.

We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law, contract, audit, compliance, accounting, tax, dispute-resolution, or legitimate business needs.

In general:

• website and analytics data may be retained for periods needed for security, diagnostics, analytics, and performance review;
• contact and inquiry records may be retained for as long as needed to manage communications, follow-up, relationship history, and business records;
• partnering and platform-access inquiries may be retained for as long as needed to evaluate opportunities, manage discussions, and preserve appropriate business records;
• recruitment and talent-interest information may be retained for current recruitment processes and, where appropriate, future opportunities; and
• records may be retained for legal, regulatory, contractual, audit, security, or dispute-resolution purposes.

When personal data is no longer required, we will take reasonable steps to delete, anonymize, aggregate, or securely retain it in accordance with applicable law and our business needs.

We use reasonable administrative, technical, and organizational measures intended to protect personal data against unauthorized access, use, disclosure, alteration, loss, or destruction.

These measures may include:

• access controls;
• internal confidentiality controls;
• secure hosting and infrastructure practices;
• authentication and permission management;
• encryption or secure transmission where appropriate;
• vendor diligence and contractual safeguards;
• monitoring, logging, and security review;
• incident-response procedures; and
• personnel awareness and internal governance measures.

No method of transmission, storage, or electronic processing is fully secure. We cannot guarantee absolute security of personal data.

You are responsible for ensuring that information you submit to us is accurate, relevant, and appropriately authorized for disclosure.

Depending on applicable law and your relationship with us, you may have rights or choices regarding your personal data, including the right to:

• request access to personal data we hold about you;
• request correction of inaccurate or incomplete personal data;
• request deletion of personal data in certain circumstances;
• withdraw consent where processing is based on consent;
• object to or restrict certain processing;
• request information about how personal data is used or disclosed;
• unsubscribe from non-essential marketing communications; and
• manage cookies through browser or device settings.

To exercise rights or make a privacy request, contact us at official@saintnovelbio.tech.

We may need to verify your identity or authority before responding to a request. We may decline or limit requests where permitted by applicable law, including where fulfilling a request would affect the rights of others, conflict with legal obligations, reveal confidential information, or interfere with legitimate business records.

If you ask us to delete or stop using certain personal data, we may be unable to continue communicating with you, evaluating an inquiry, processing an application, or providing certain information or services.

If you apply for a role, submit a talent-interest form, contact us about future opportunities, or otherwise provide recruitment-related information, we may collect personal data such as:

• name;
• email address;
• mobile number or other contact number;
• CV, resume, portfolio, or profile links;
• education history;
• employment history;
• research, publications, projects, technical experience, or skills;
• department interests or role preferences;
• candidate statements, interview notes, or assessment information;
• availability, location, work authorization, visa, or relocation information;
• reference information, where provided; and
• related correspondence.

We may use this information to:

• assess fit for current or future opportunities;
• evaluate qualifications, experience, skills, and interests;
• communicate with you about recruitment or talent-interest processes;
• schedule and conduct interviews or assessments;
• maintain a talent pipeline;
• conduct background, reference, eligibility, or compliance checks where appropriate and lawful;
• comply with employment, immigration, recordkeeping, or legal obligations; and
• protect our rights, personnel, and business interests.

Recruitment information may be reviewed by Saint Novel personnel and service providers involved in recruitment, talent management, HR, operations, legal, security, or related functions.

Sensitive personal data should be provided only where relevant, lawful, and necessary for the recruitment process. Please do not submit sensitive personal data unless requested or required for a legitimate recruitment purpose.

By submitting recruitment-related information, you confirm that the information is accurate and that you are authorized to provide it.

Our website and business interactions are primarily intended for professional, institutional, academic, commercial, and adult users. They are not directed to children.

We may process personal data relating to minors in limited contexts, such as internships, research placements, educational opportunities, recruitment-related processes, or other appropriate programs, where permitted by law and with appropriate authorization where required.

We do not knowingly collect personal data from minors through general website forms except in appropriate recruitment, educational, internship, or similar contexts. If you believe that a minor has provided personal data to us in a manner inconsistent with this Privacy Policy, please contact us at official@saintnovelbio.tech.

If we become aware that personal data relating to a minor has been collected inappropriately, we will take reasonable steps to delete or otherwise handle the information in accordance with applicable law.

Our website may contain links to third-party websites, platforms, tools, services, publications, social-media pages, or other resources. This Privacy Policy does not apply to third-party websites or services.

We are not responsible for the privacy practices, security, content, or policies of third parties. You should review the privacy policies and terms of any third-party websites or services you use.

We may update this Privacy Policy from time to time. If we make changes, we will revise the "Last updated" date above.

Where required by applicable law, we may provide additional notice or request consent for material changes. We encourage you to review this Privacy Policy periodically.

If you have questions, requests, or concerns about this Privacy Policy or our handling of personal data, please contact us at:

Email: official@saintnovelbio.tech