1. INTRODUCTION
Strivita Pharma, including its subsidiaries and affiliates (collectively, "Strivita Pharma," "we" or "us") believes that effective privacy and data protection are not just important legal matters, but they are also an integral part of good corporate governance and essential to maintaining trust with our clients and partners in the drug development ecosystem.
In this Privacy Notice, we explain how Strivita Pharma collects, uses, discloses and otherwise processes the personal data of our business contacts, customers, website visitors, on-site visitors and other business relations ("you," "your" or "yours"). Personal data means any information or set of information that, directly or indirectly, identifies you.
Note that we maintain separate privacy notices to address other categories of individuals, which will be provided to you when applicable. In addition, our website domains may contain links to third-party websites. Be aware that this Privacy Notice does not apply to the processing of personal data by those third-party websites. We recommend you consult and carefully read the privacy notices of such third parties when visiting their websites.
Our privacy practices are subject to applicable laws in the places in which we operate. This means we engage in the practices described in this notice in a particular jurisdiction only if permitted under the laws of those places.
This Privacy Notice will be amended from time-to-time. The handling of your personal data is subject to the most recent version of this Privacy Notice.
2. WHO WE ARE
Strivita Pharma is a specialized Contract Research Organization (CRO) focused on providing comprehensive Drug Metabolism and Pharmacokinetics (DMPK) services, including both in vitro and in vivo studies, to support pharmaceutical and biotechnology companies throughout the drug development process. Our expertise spans ADME-Tox studies, pharmacokinetic profiling, bioanalysis, and metabolic pathway characterization to help our clients advance their drug candidates efficiently and reliably.
Unless otherwise stated in this Privacy Notice or in any other specific privacy notice provided to you, the data controller of your personal data is Strivita Pharma.
3. PERSONAL DATA WE PROCESS
We process personal data from our business contacts, customers, website visitors, on-site visitors and other business relations. Depending on the category you belong to, we process the following categories of personal data for the relevant purposes specified in Section 4:
- Identification and Contact Details, such as your name, gender, company name, business function, contact and address details.
- Account and Usage Details, such as your username and password, your Internet Protocol (IP) address, pages you access on our website and what browser you are using.
- Financial Details, such as your credit card or bank details for invoicing and payment processing related to our DMPK services.
- Inquiry Details, such as the nature of your inquiry to us, project specifications, study requirements, the content of your communication with us and any accompanying information you share in your inquiry.
- Project-Related Details, such as study protocol contacts, project management correspondence, and technical point-of-contact information related to our DMPK service engagements.
- Event-Related Details, such as your dietary wishes or disabilities which you may choose to voluntarily share with us when registering for an event, photos or videos taken during an event.
- Visitor Details, such as the time of your visit to us, your vehicle license plate and CCTV footage for laboratory facility access and security.
- Other Details, such as personal data that you disclose to us voluntarily.
We receive your personal data from the following sources: from you as a data subject who interacts with us or uses our services or products; third-party partners such as event sponsors or marketing partners and service providers; others providing information in connection with claims or disputes; publicly available sources.
Subject to local laws, we may process sensitive or special categories of personal data. This may, for example, include information related to racial or ethnic origin, political opinions, trade union membership, physical or mental health, biometric or genetic data, government identifiers, or similar data which entails a high level of reasonable expectation of privacy.
4. PURPOSES OF PROCESSING PERSONAL DATA
We may process the categories of personal data set out in Section 3 for various purposes. Below you will find an overview of these purposes.
A. Handling inquiries
If you have a question or request regarding our DMPK services, you may contact us through our online contact form, by e-mail or phone. We process your personal data for the following specific purposes:
- to administer your question or request, and to direct it to the relevant scientific or business contact person within our organization;
- to answer and facilitate your question or request, including any data subject right requests, and to review and improve the level of service we provide.
If and to the extent local applicable laws or regulations require a specific legal basis for the processing of personal data, we rely on the following legal bases:
- our need to form or perform a contract to which you are subject, or to take pre-contractual steps at your request;
- our legitimate interest, and in particular, our need to handle your questions and requests properly, or
- our need to comply with legal obligations to which we are subject.
B. Managing our business and DMPK service delivery
If you have a business relationship with us as a prospective or current customer, supplier or business partner, we may process personal data to establish or manage our business relationship with you and to deliver our DMPK services effectively:
- to enter into, maintain and execute our relationship with you;
- to provide and administer our DMPK services, including in vitro and in vivo study coordination, project management, and scientific reporting;
- to communicate with you in light of our commercial relationship;
- to safeguard our business, laboratory facilities and sites;
- to improve our business and conduct business development;
- to initiate disciplinary and legal processes and procedures; and
- to ensure compliance with legal, regulatory and contractual requirements, including GLP standards.
C. Facilitating events
Strivita Pharma may host or sponsor events, such as scientific seminars, webinars, workshops or DMPK-focused training sessions. We process your personal data for the following specific purposes:
- to organize the event and inform you about it;
- to manage your information and share such details with affiliated event sponsors or partners; and
- to follow up after an event for commercial opportunities.
D. Conducting marketing initiatives and administering surveys
As part of our marketing initiatives, we may send you communications including invitations to scientific seminars, symposia and webinars focused on DMPK topics, surveys, and featured news or resources.
Note that if you have signed up to receive promotional communications, you may unsubscribe at any time by following the unsubscribe instructions included in such communications.
E. Administering visits to our sites and laboratories
When you visit one of our physical sites or laboratory facilities, we may request your personal data to facilitate your visit. Given the sensitive nature of our laboratory operations and regulatory requirements, access to our facilities is carefully controlled.
- to ensure the safety and security of our visitors and site staff;
- to maintain the safety and security of our property, laboratory facilities, and study samples;
- to investigate non-compliance, potential criminal activities and other incidents; and
- to collect and disclose evidence for legal claims.
F. Our Use of Cookies and Similar Technologies
We may use cookies and similar technologies on our website domains. The various types of cookies we use may process the following personal data:
- Required Cookies - Necessary to enable basic site features to function.
- Functional Cookies - Allow for analysis of website usage to evaluate and improve performance.
- Advertising Cookies - May be used to track activity across multiple websites and domains.
5. THE SHARING OF PERSONAL DATA
Your personal data may be shared by us internally and externally. When third parties are given access to your personal data, we take required contractual, technical and organizational measures to ensure that your personal data is shared to the extent it is legitimate and necessary for the defined purposes.
Strivita Pharma Legal Entities
Personal data may be stored and processed in any country where we have facilities or provide services. Your personal data will be disclosed on a need-to-know basis.
Business Partners
We may disclose your personal data to business partners involved in the production and execution of orders and services, such as logistics partners for sample transport and specialized analytical service providers.
Service Providers
We may disclose personal data to third parties who provide or perform services on our behalf, including cloud storage providers, facility maintenance parties, and professional service firms.
Government and Law Enforcement Agencies
We may disclose personal data to government bodies, supervisory authorities, regulatory agencies, law enforcement agencies, or other third parties if necessary to:
- comply or respond to a claim, order, investigation, regulatory audit or lawful request;
- protect our rights and the rights and safety of our employees, customers, partners, or others; or
- investigate or respond to security threats or illegal/unethical activity.
Legitimate Business Reasons
If we are involved in an actual or prospective audit, bankruptcy, merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to a third party, to the extent required or permitted by law.
6. DATA TRANSFERS
If your personal data will be transferred between different jurisdictions, we take the required measures to ensure that your personal data is adequately safeguarded.
Should your personal data be transferred to a country that does not benefit from a formally recognized adequate level of protection, we will ensure that any legally required safeguards are put in place, such as EU Standard Contractual Clauses (SCCs) or similar contractual arrangements.
To accommodate data transfers within the Strivita Pharma group, we operate under an Intra-Group Data Processing Agreement governed by appropriate contractual data transfer safeguards.
7. DATA RETENTION
We retain your personal data for as long as necessary to fulfill the purposes mentioned in this Privacy Notice, including for any legal, accounting, regulatory or reporting purposes. Given the regulatory nature of our DMPK services, certain study-related records may need to be retained for extended periods in compliance with GLP and other applicable regulatory requirements.
To determine and document the appropriate retention periods, we have considered factors such as statutory retention periods, the purposes for which personal data were initially collected, and the amount, nature and sensitivity of the personal data.
8. THE SECURITY OF YOUR PERSONAL DATA
We have implemented reasonable technical, physical, and organizational measures to protect your personal data against accidental or unlawful destruction, or accidental loss, damage, alteration, unauthorized disclosure, or access. Our laboratory and data security protocols are designed to meet industry standards for pharmaceutical research organizations, including appropriate access controls, data encryption, and regular security assessments.
9. YOUR DATA SUBJECT RIGHTS
Depending on the applicable laws, you may have the following rights related to the processing of your personal data:
- the right of access and right to know your personal data;
- the right to correct or update your personal data;
- the right to delete your personal data;
- the right to restrict the use of your personal data;
- the right to object to the processing of your personal data and to decisions based solely on automated processing;
- the right to transfer your personal data;
- the right to revoke given consent; and
- the right to opt-out of sale and sharing of your personal information.
You also have the right not to be discriminated against for exercising these rights.
To help protect your privacy and maintain security, Strivita Pharma will take steps to verify your identity before granting you access to your personal data or acting on your request.
10. PERSONAL DATA OF MINORS
Our websites, products and services are not intended or designed to attract or engage with minors. Where personal data from minors is knowingly collected, we will collect explicit consent from their legal guardian prior to such processing, to the extent required by applicable laws.
11. CONTACT US
Any concerns or questions related to this Privacy Notice or our processing of your personal data may be directed to the contacts below:
Strivita Pharma Privacy Team
Email: grace.liu@strivita-biotech.com
Strivita Pharma Data Protection Officer (DPO)
Email: it001@strivita-biotech.com
If you have a complaint about the way we process your personal data, we kindly request that you contact us first to discuss your complaint. Should you feel that your complaint was not handled sufficiently, you have the right to file a complaint with your local data protection authority.
This Privacy Notice was last updated on July 22, 2026.
--- END OF NOTICE | FULLY READ ---