AB Sandoval Drugs, Inc. ( the “Company”) respects your privacy and is committed to protecting your personal data. The Company implements reasonable and appropriate organizational, physical and technical security measures to maintain the confidentiality, integrity, and availability of such personal information.

WHAT IS PERSONAL DATA?

Personal Data generally refers to information that can directly identify you (“Personal Data”). This typically includes information such as your name, address, email address, and telephone number, but can also include other information such as IP address, etc.

WHAT HAPPENS WHEN YOU PROVIDE US WITH YOUR PERSONAL DATA?

We collect your Personal Data directly to register as a customer for our patient support program.

WHO DO WE SHARE YOUR PERSONAL DATA WITH?

To protect your privacy, we will endeavour to only share with third parties data which has either been aggregated and anonymised or which otherwise does not contain your name or contact details. However, there may be limited circumstances where we will share data (which may include your Personal Data) with third parties who may or may not be located overseas, as detailed in this section. By using our Sites, you agree to allow us to share your Personal Data with third parties. Regardless of where we store or process your Personal Data, we are committed to protecting it and will take reasonable steps to safeguard it in accordance with this Privacy Policy and all applicable laws.

1. Partners
Your Personal Data may be shared with our trusted business partners (“Partners”) to facilitate the processing of loyalty points issuance and redemption and related transactions, as well as for data analytics purposes in order to improve their operations, services or products.

Please be aware that our Partners may themselves directly collect personal data from you if you give it to them when you purchase any goods or services at their store, or if you register with them as a customer. The handling of your data collected by our Partners will be governed by the relevant Partner’s separate privacy policy (and not this Privacy Policy), and we are not involved or responsible for the collection and handling of such data.

2. Our service providers
Your Personal Data may be shared with our service providers (including agents and contractors) which process Personal Data on our behalf to help us administer and operate our business and our Sites to conduct data analytics, to help aggregate and anonymise the personal data, or to carry out any of the purposes set out in Section 6 above. These may include IT vendors, back-office and front-end or ancillary service providers, logistic and delivery service providers, call centre operators, marketing agencies, data management and analytics service providers, and customer contact services.

3. Professional advisors and assignees
When necessary, we may share your Personal Data with our professional advisors, including lawyers, accountants, financial advisors and insurers. Your Personal Data may also be shared with third parties in connection with any merger, acquisition, consolidation, restructuring, sale of assets, financing or any other similar scenarios involving the transfer of some or all of our business assets.

4. Government and regulatory authorities
We will disclose your Personal Data to courts, law enforcement, regulatory or other governmental agencies if we are required to do so by law, or by a warrant, subpoena or court order.

5. Other recipients
We will transfer your Personal Data in the following scenarios:
a) To data analytical firms, such as Google Analytics Inc. (to the extent that such Personal Data is not aggregated or anonymised);
b) in an emergency, such as life, health or property of an individual; and/or
c) with your consent to proceed to share your Personal Data with third parties where required by law.

HOW LONG DO WE PROCESS YOUR PERSONAL DATA?
We will store your Personal Data only until the aforementioned purposes for which we have collected or received your Personal Data are fulfilled and once our statutory obligations to preserve records have expired as further described in Section 5.

WHAT ARE YOUR RIGHTS?
If certain requirements are fulfilled, you have the right to:
• obtain from us confirmation as to whether or not we process Personal Data from you and, where that is the case, access to your Personal Data;
• rectification of inaccurate Personal Data;
• withdraw you consent for marketing communications; and
• withdraw your consent for use of Cookies (via adjusting the setting under your web browser).

HOW DO WE PROTECT YOUR PERSONAL DATA?
We maintain appropriate technical and organizational measures to protect the Personal Data you provide to us against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to your Personal Data.

CAN WE CHANGE OUR PRIVACY POLICY?
We may change this Privacy Policy from time to time by posting the updated version of the Privacy Policy here. We encourage you to visit this area frequently to stay informed.