We use the Personal Date that we collect for various purposes, including the following:

• To provide and maintain our Service and the services you sign up for;
• To notify you about changes to our Service;
• To allow you to participate in interactive features of our Service when you choose to do so;
• To provide customer support, including to respond to your queries and resolving complaints;
• To use data analytics to improve our Service, products/services, marketing, customer relationships and experiences;
• To monitor the usage of our Service;
• To administer and protect our business and the Service (including for accounting and records, troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data);
• To deliver personalized Service content and information to you and measure or understand the effectiveness of the Service we provide to you;
• To provide you with news, technology information, platform information, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information;
• To comply with applicable laws and regulations; and
• To fulfill any other purpose for which you provide Personal Data.

Analytics
We use Google Analytics to monitor and analyze the use of our Service. Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. For more information on Google's privacy practices, please see Google's Privacy and Terms:https://policies.google.com/?hl=en

You can opt-out of having your data used by Google Analytics by installing the Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout

Marketing
In relation to marketing communications, we may provide you with an "opt in" or "opt-out" mechanism depending on where in the world you are located. An "opt-in" mechanism will provide you the opportunity to positively indicate that you would like or do not object to our sending you such further communications and we will not send you any unless you have "opted-in." An "opt-out" mechanism will provide you the opportunity to indicate that you do not want us to send you such further communications, and if you "opt-out" we will not send you any.

Please also see our Cookies Policy for further information.

We may share your Personal Data with the parties, or in the circumstances, set out below. We require third parties to respect the security of your Personal Data and to treat it in accordance with the law. We do not allow our third-party Service Providers to use your Personal Data for their own purposes and only permit them to process your Personal Data for specified purposes and in accordance with our instructions in furtherance of performance of the Service. We may further disclose Personal Data as described below and in this Privacy Policy:

• To our subsidiaries and affiliates: We may share information collected through the Service with other companies affiliated with Insilico Medicine. These affiliates are permitted to use your information for their own marketing purposes and in a manner otherwise consistent with this Privacy Policy.
• Service Providers: We may employ third-party companies and individuals to facilitate our Service, to provide the Service on our behalf, to perform Service-related activities or to assist us in analyzing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
• Business Transaction: If we are involved in a merger, acquisition or asset sale, your Personal Data may be transferred to another third party. If a change happens to our business, then the new owners may use your Personal Data in the same way as set out in this Privacy Policy.
• Disclosure for Law Enforcement: Under certain circumstances, we may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court, a government agency, or law enforcement organization).
• Legal Requirements: We may disclose your Personal Data to such third parties where such action is necessary to: comply with a legal obligation, protect and defend our rights or property, prevent or investigate possible wrongdoing in connection with the Service, protect the personal safety of users of the Service or the public, or protect against legal liability.
• Professional Advisors: We will share your Personal Data with our professional advisors, including legal advisors and insurers, where this is necessary for the advice they provide. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
• Marketing Partners: We may share your information with our marketing partners that assist in marketing products and services for Insilico Medicine. Please see "Marketing" above.
• Others: We may disclose your Personal Data to fulfill the purpose for which you provide it, for any other purpose disclosed by us when you provide the information, or with your consent.

You can review and change your Personal Data input by you on the Service by logging into the Service and visiting your account profile page. We may not change your Personal Data, if we believe the change would violate any law or legal requirement or cause the information to be incorrect. If you remove or change your Personal Data, prior copies of your Personal Data may be retained or remain viewable in archived pages.

The security of your data is important to us, but no method of transmission over the internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

Your information, including Personal Data, may be transferred to — and stored on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ to those in your local jurisdiction.

If you are located outside Hong Kong and choose to provide information to us, please note that this information, including Personal Data, is processed in Hong Kong.

Subject to applicable law, your consent to this Privacy Policy OR use of the Service and your submission of such information constitutes your agreement to the transfer of your information to the Hong Kong.

InSilico Medicine will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. No transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place in relation to the security of your data (including Personal Data).

InSilico Medicine retain your Personal Data for as long as needed or permitted in light of the purposes for which it was obtained, consistent with applicable law, such as during use or term of engagement with the Service. We will also retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

InSilico Medicine also retain Usage Data for internal analysis and statistical purposes. Usage Data is generally retained for a shorter period of time than other Personal Data, except when such data is used to strengthen the security of the Service or to improve the functionality of our Service, or we are legally obligated to retain such data for longer time periods.

To determine the appropriate retention period for Personal Data, we consider the amount, nature and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

We do not support "Do Not Track". While Do Not Track may be a preference you can set in your web browser to inform websites that you do not want to be tracked, we do not recognize or respond to Do Not Track signals.

For users located in the European Economic Area ("EEA"), and to the extent applicable, InSilico Medicine is the data controller and is responsible for the Personal Data of EEA users of the Service.

If you are located in the EEA, our legal basis for collecting and using your Personal Data, as described in this Privacy Policy, depends on the Personal Data we collect and the specific context in which we collect it.

Generally, We processes your Personal Data on the basis of one or more of the following legal grounds:

• We need to perform a contract with you;
• You have given us permission to do so;
• The processing is in our legitimate interests and it's not overridden by your rights. Such "legitimate interests" include:
• – to study how customers use the Service,

• – to develop the Service and grow our business,
• – to manage our business, including the provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganization or group restructuring exercise,
• – to inform our marketing and advertising strategy; or

• To comply with our legal and regulatory obligations.
• We may process your Personal Data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your Personal Data.

If you are located in the EEA, and subject to national or local law exemptions, you have certain data protection rights in certain circumstances. Please contact us if you would like to exercise any of these rights.
Right to withdraw consent at any time: This applies where we are relying on consent to process your Personal Data.
Access: This enables you to receive a copy of the Personal Data we hold about you and to check that it is accurate and that we are processing it lawfully.
Object: This enables you to object to processing of your Personal Data where we are relying on a legitimate interest and there is an impact on your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override certain of your rights and freedoms. You also have the right to object where we are processing your Personal Data for direct marketing purposes.
Correction: This enables you to have any incomplete or inaccurate Personal Data we hold about you corrected, though we may need to verify the accuracy of the new Personal Data you provide to us.
Erasure: This enables you to ask us to delete or remove Personal Data where there is no good reason for us continuing to process it. Note, however, that we may not always be able to comply with your request for erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Portability: This enables you to request the transfer of your Personal Data to you or to a third party. We will provide to you, or a third party you have chosen, your Personal Data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Restriction: This enables you to ask us to suspend the processing of your Personal Data in the following circumstances: (a) if you want us to establish the information's accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the Personal Data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your Personal Data but we need to verify whether we have overriding legitimate grounds to use it.

Please note that we may ask you to verify your identity before responding to such requests.

You have the right to complain to the relevant EU Data Protection Authority about our collection and use of your Personal Data at any time. However, we would appreciate the opportunity to address your complaint in the first instance.

Our Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the privacy policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third party sites or services.

Our Service is not intended for anyone under the age of 18 and we do not knowingly collect Personal Data from anyone under the age of 18. If you are under 18, do not use or provide any Personal Data in connection with the Service or register on the Website. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers. If you believe that we might have any information from or about a child under 18, please contact us at privacy@insilico.com .

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "effective date" at the top of this Privacy Policy. Where we make material changes to this Privacy Policy, we will endeavor to notify you specifically via email or a prominent notice on our Service. Nevertheless, you are advised to review this Privacy Policy periodically for any changes and to ensure that we have an up-to-date email address for you. Changes to this Privacy Policy are effective when they are posted on this page.

If you have any questions about this Privacy Policy, please contact us:

By email: privacy@insilico.com,

By mail:
InSilico Medicine
Attn: Privacy Policy
Unit 307A
Core Building 1
No. 1 Science Park East Avenue
Science Park
Pak Shek Kok, Hong Kong