Privacy Policy

Introduction

GutRecover Therapeutics LLC ("GutRecover," "we," "our," or "us") is a clinical-stage biotherapeutics company incorporated in the State of Delaware, USA. GutRecover operates as the therapeutic arm of QADR Biotechnology Holding SARLAU, Casablanca, Morocco.

This Privacy Policy describes how we collect, use, disclose, and protect information obtained through our website at grtherapeutics.com (the "Site"). By using the Site, you agree to the practices described in this policy.

This policy applies to all users of the Site, including visitors, investors, and scientific or business partners. It does not apply to information collected through other means, such as clinical trial participation, which is governed by separate agreements and applicable regulations.

Information We Collect

We collect information in the following categories:

• Investor inquiry data: When you complete our investor relations form, we collect your name, email address, and organisation name for the purpose of responding to your inquiry and, where you opt in, adding you to investor updates.
• Partnership inquiry data: When you submit a partnership or business development inquiry, we collect your name, email address, and the nature of your inquiry.
• Analytics data: We collect anonymised usage information including page views, session duration, referral source, and browser type. This data cannot reasonably be used to personally identify you.

We do not collect sensitive personal data such as health information, financial account numbers, government identification numbers, or biometric data through this Site.

How We Use Your Information

We use the information we collect to:

• Respond to your inquiries, questions, and requests in a timely manner
• Send investor relations updates and communications to those who have requested them
• Improve and maintain the Site based on aggregated, anonymised usage data
• Comply with applicable legal and regulatory obligations

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

Data Sharing

We do not sell personal data. We may share information in the following limited circumstances:

• Analytics providers: We share anonymised, aggregated usage data with our analytics service provider. This data contains no personal identifiers.
• Legal requirements: We may disclose information if required to do so by law, regulation, or legal process, or where necessary to protect the rights, property, or safety of GutRecover, our users, or others.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of our assets, personal information may be transferred as part of that transaction. We will provide notice of any such change via the Site or by email prior to the transfer taking effect.
• With your consent: We may share your information for any other purpose with your prior consent.

Cookies & Tracking

The Site uses cookies and similar tracking technologies in a limited capacity:

• Analytics cookies: We use anonymised analytics to understand how visitors use the Site. No personally identifiable information is stored in these cookies.
• Session cookies: These temporary cookies are used to maintain basic session state and expire automatically when you close your browser.

We do not use advertising cookies, retargeting cookies, or social media pixel tracking. Most browsers allow you to control or disable cookies through their settings. Disabling analytics cookies will not affect your ability to use the Site.

Data Retention

We retain personal information only as long as necessary for the purposes for which it was collected:

• Inquiry data (investor and partnership forms): Retained for 24 months from the date of submission, then permanently deleted, unless an active ongoing business relationship requires longer retention.
• Analytics data: Retained in accordance with our analytics provider's data retention settings, typically on a rolling 14-month basis.

When personal data is no longer needed, we delete it securely or anonymise it so that it can no longer be associated with you.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Under GDPR (European Economic Area and United Kingdom):

• Right to access the personal information we hold about you
• Right to rectification of inaccurate or incomplete information
• Right to erasure ("right to be forgotten")
• Right to data portability in a machine-readable format
• Right to object to processing based on legitimate interests
• Right to restriction of processing in certain circumstances

Under CCPA (California residents):

• Right to know what personal information we collect and how it is used or shared
• Right to delete personal information we have collected about you
• Right to opt out of the sale of personal information — we do not sell personal information
• Right to non-discrimination for exercising your CCPA rights

To exercise any of these rights, contact us at contact@grtherapeutics.com. We will respond within the timeframes required by applicable law (typically 30 days under GDPR; 45 days under CCPA, with a possible 45-day extension where permitted).

Security

We implement appropriate technical and organisational measures to protect your personal information against accidental loss, unauthorised access, disclosure, alteration, or destruction:

• All data transmitted to and from the Site is encrypted in transit using HTTPS (TLS)
• Access to stored personal data is restricted to authorised personnel on a strict need-to-know basis
• We apply access controls and authentication measures for internal systems that handle personal data

No method of transmission over the Internet or electronic storage is completely secure. While we use commercially reasonable means to protect your information, we cannot guarantee its absolute security. If you believe your information may have been compromised, please contact us promptly at legal@grtherapeutics.com.

Children's Privacy

The Site is directed at healthcare professionals, investors, and scientific and business partners. It is not intended for, and we do not knowingly collect personal information from, children under the age of 13.

If you believe we have inadvertently collected personal information from a child under 13, please contact us at legal@grtherapeutics.com and we will delete it promptly.

Contact

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal information, please contact us:

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we update this policy, we will revise the "Last updated" date at the top of this page. For material changes, we may also provide additional notice on the Site or via email where we hold your contact details.

We encourage you to review this page periodically to stay informed about how we protect your information.

Last updated: June 15, 2026 · GutRecover Therapeutics LLC · grtherapeutics.com