Skip to content Skip to footer

Privacy Policy

Last update: August, 2025

PRIVACY POLICY OF FIND THERAPEUTICS INC.

Find Therapeutics Inc. (“Find”, “we” or “us”) is committed to protecting the personal information we collect in the course of our business. This privacy policy (the “Policy”) describes in clear and simple terms how we meet our privacy obligations and more specifically our practices regarding the collection, use, disclosure, retention and destruction of your personal information. Our privacy officer (the “Privacy Officer”), whose full contact details can be found at Section 10 is responsible for ensuring that the Policy is respected and implemented.

In order to ensure the implementation of the Policy, please be assured that we have put in place internal practices concerning the management of your personal information. These practices include a framework on :

  • The security of your personal information;
  • Managing and preventing confidentiality incidents;
  • Conducting privacy impact assessments; and
  • Preserving your information throughout its life cycle.

Our commitment to you is clear:

  • Be concise, clear and transparent;
  • Obtain your consent when necessary;
  • Allow you to exercise your rights with respect to your personal information; and
  • Protect the confidentiality of your personal information.

Our Policy has been developed in accordance with applicable privacy legislation, including the Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5, the Act Respecting the Protection of Personal Information in the Private Sector, RLRQ, c. P-39.1 and other similar provincial legislation.

Policy Content
  1. WHO IS OUR POLICY AIMED AT?
  2. WHAT PERSONAL INFORMATION DO WE COLLECT AND FOR WHAT PURPOSES?
  3. HOW DO WE COLLECT YOUR PERSONAL INFORMATION?
  4. DO WE USE COOKIES?
  5. HOW DO WE PROTECT YOUR PERSONAL INFORMATION?
  6. TO WHOM MAY WE COMMUNICATE YOUR PERSONAL INFORMATION?
  7. CAN YOUR PERSONAL INFORMATION BE DISCLOSED OR STORED OUTSIDE QUEBEC OR CANADA?
  8. HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?
  9. WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL INFORMATION?
  10. HOW TO CONTACT OUR PRIVACY OFFICER?
  11. POLICY UPDATE
1.  WHO IS OUR POLICY AIMED AT?

The Policy applies to personal information collected in the course of all our activities, with the exception of personal information collected in respect of our current, prospective and former employees and consultants. In particular, it applies to personal information collected when you visit our website https://www.findtherapeutics.com/ (the “Website”), when you visit us at our offices, or when you contact us by any other means of communication, including the contact form available on our Website. The Policy therefore applies, for example:

  • To all users of our Website; and
  • To all the people who contact us.

Please note, however, that you are always responsible for protecting your personal information when you visit third-party websites. Our Policy does not apply to the collection, use, disclosure or retention of your personal information by other websites, although certain links on our Website may allow you to access the content of other third parties. We are not responsible for their privacy policies and encourage you to read their privacy notices or policies.

This Policy does not apply to the personal information of our employees, former employees or applicants for employment with us, as another policy applies specifically to them, and they may consult it by contacting our Privacy Officer at the contact details provided in Section 10.

2.  WHAT PERSONAL INFORMATION DO WE COLLECT AND FOR WHAT PURPOSES?

Personal information is any information relating to a natural person that directly or indirectly allows that person to be identified, whether this information is used in isolation or in combination with other information. For greater clarity, personal information is any information that makes it possible to identify:

  • a person directly, for example, an identifier such as a name and a government identification number; or
  • indirectly through the combination of several specific elements specific to its physical, physiological, genetic, psychological, economic, cultural or social identity.

Please note that we only collect personal information that is necessary to provide you with our products and services. Below are the categories of personal information we collect and examples of each category. This information is all collected for a specific purpose detailed in the following table.

CATEGORIES OF PERSONAL INFORMATION

EXAMPLE

Identity and contact information

• Full name
• E-mail address
• Phone number
• Postal address

Information about your communications with us

• History and report on our discussions with you
• E-mail exchanges
• Content filed in the Contact Form of our Website
• Telephone recordings of service calls
• Record of surveillance cameras if you visit our offices

Information about your digital interactions

To learn more about our use of cookies, please visit Section 4 of this Policy.

• Information about your devices
• Language settings used for navigation

Generally speaking, we collect your personal information in order to offer and improve our products and services to you and to contact you. Except as provided by law, if we need to use your personal information for purposes other than those set out in this Policy, we will obtain your consent before using such information.

We collect your personal information, to the extent permitted by law, in order to:

2.1  To identify you

When we exchange with you, we require certain information for identification purposes. This information will be used in particular to find your file and ensure that your information is associated with your account when you exchange with us.

In general, we collect identity and contact information for this purpose. Your information may also be used in certain cases to authenticate you, for example to ensure that you are the right person when you wish to access your file.

2.2  Communicate with you

As part of our business relationship with you, we may contact you from time to time to inform you of important changes to our Policy.

In general, we collect identity and contact information for this purpose.

2.3  Managing our risks

As a company, we need to take a number of preventive measures to manage the risks associated with our activities, in order to avoid financial losses, operational breakdowns and internal and external fraud.

2.4  Meeting our legal and regulatory obligations

As part of our business operations and due to the nature of our activities, we must comply with certain legal and regulatory obligations. We are therefore obliged to use your personal information to, for example:

  • Comply with income tax legislation;
  • Defend against legal claims and demands.
2.5  Send you press releases and other news regarding Find and any other communication by e-mail

If you have opted to receive press releases and other news from us, we may use your contact information and preferred ways of contact (e-mail, mail, etc.), for the purpose of sending you relevant updates and news.

Please note that we will only send you these communications if you have chosen to receive them, where required by law, and that you may withdraw your consent at any time.

3. HOW DO WE COLLECT YOUR PERSONAL INFORMATION?

Most of the time, we collect your personal information directly from you. However, in certain situations, we may collect your personal information from other sources, with your consent or as required by law:

  • Affiliated companies; and
  • Other third parties, to help us serve or protect you, such as business partners;
4. DO WE USE COOKIES?

Cookies are files containing an identifier (a series of letters and numbers) sent by a Web server to a Web browser and stored by the latter. The identifier is then sent to the server each time the browser requests a page from the server. Although cookies generally do not contain information that personally identifies a user, the personal information that Find stores about you may be linked to information contained in or obtained from cookies. However, we do not use cookies to identify, locate or profile individuals.

Our service providers also use cookies that may be stored on your computer or device when you browse our Website.

Currently, only necessary cookies are used on this site. These cookies are essential to enable core functionalities, such as language selection, display optimization, secure navigation. These cookies cannot be disabled, as they are required for the proper functioning of the site. They are not used to collect personally identifiable information.

You can view the detailed list of cookies used on our site by visiting the About Cookies page. From any page of the site, you may also click on the blue cookie icon located at the bottom left corner of the screen to access this information. Consent is not required, as no optional cookies are installed.

5. HOW DO WE PROTECT YOUR PERSONAL INFORMATION?

We are committed to protecting personal information in our possession in accordance with applicable standards. To this end, we implement reasonable security measures to protect your personal information against loss, theft, unauthorized access, disclosure and unauthorized use. Our security measures are appropriate to the amount and sensitivity of the personal information and include, especially:

MEASUREMENT TYPES

EXAMPLES OF MEASURES

Technical measures

  • Use strong internal passwords
Administrative measures
  • Access management on a “need-to-know” basis
  • Internal policies and training on the protection of personal information
  • Mandatory privacy training for our employees
  • Our employees are bound by confidentiality agreements that survive the end of their employment

Material measures

  • Lock filing cabinets
  • Access to offices is restricted by access card
  • Surveillance cameras

Please note, however, that the transmission of personal information over the Internet is never completely secure. While we take every precaution to protect your personal information, we cannot guarantee the security of personal information transmitted over the Internet. You choose to transmit information over the Internet at your own risk.

6. TO WHOM MAY WE COMMUNICATE YOUR PERSONAL INFORMATION?

Within Find, access to your personal information is limited to those employees who need it to perform their duties. These employees are made aware of the need to protect personal information, and policies are in place to ensure its protection.

However, in order to offer you affordable, quality products and services and conduct our research activities, we must communicate some of your personal information outside our company. Rest assured that we require the third parties to whom we disclose your personal information to respect the standards set by law and the security measures required to protect your personal information. We never sell your personal information and only disclose it in compliance with applicable privacy laws.

6.1  To our service providers

In order to achieve certain objectives described in the Policy, we work with service providers to whom we may communicate or give access to your personal information when it is necessary for the performance of their service contract.

However, rest assured that we have put in place written contracts with our service providers in order to, among other things:

  • Guarantee the confidentiality of your personal information;
  • Please ensure that the information is only used to perform the services;
  • Ensure that the service provider does not retain any personal information when it is no longer required for the performance of the services, with the exception of information contained in backup systems, which will be deleted according to the deletion cycle predetermined by the service provider;
  • Ensure that the service provider contacts us immediately in the event of a confidentiality incident or attempted incident.

The categories of service providers we work with are as follows:

  • Cloud hosting service;
  • IT and technical services;
  • Software for marketing and customer service;
  • Communication and marketing firms;
  • Security and surveillance camera services.
6.2 Courts, law enforcement authorities, regulators, government officials or prosecutors

Specifically, we may disclose your personal information to comply with a search warrant, to respond to an investigative body, to comply with a court order, if we believe disclosure is necessary to comply with applicable laws, if required by law, to pursue a legal claim or defence.

6.3 To our various legal entities within the same group

We may share some of your personal information with other legal entities within our group when necessary to comply with our legal and regulatory obligations and to properly manage your employment relationship.

6.4 To other third parties

We may disclose your personal information to other third parties in certain specific circumstances, always within the limits authorized by law or after obtaining your consent, for example:

  • As part of a business transaction (merger, acquisition by another company, obtaining a loan or financing, for example);
  • In the event of insolvency or bankruptcy.
7. CAN YOUR PERSONAL INFORMATION BE DISCLOSED OR STORED OUTSIDE QUEBEC OR CANADA?

Yes, the subcontractors with whom we do business and other third parties to whom we disclose your personal information may carry out their activities or have access to your personal information outside Quebec and Canada.

In all cases where we disclose your personal information outside Quebec or Canada, we ensure that your personal information is handled securely and in accordance with this Policy, and that there is a written agreement with the third party regarding the handling of your personal information. In addition, before disclosing your personal information outside Quebec, we always conduct a privacy impact assessment to evaluate, among other things, the risks inherent in disclosure and the legal regime applicable in the state where your information would be disclosed.

We will not disclose your personal information unless we are satisfied that it will be adequately protected.

8. HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?

The personal information we collect is retained only as long as necessary to fulfill the purposes set out in Section 2 of this Policy and to comply with our legal and regulatory obligations. We have implemented internal procedures and policies to ensure that your personal information is subject to a specific retention schedule and that it is securely destroyed or, where permitted by privacy laws, made anonymous at the end of that period. If the information has been anonymized, it is no longer possible to identify you directly or indirectly, as this is an irreversible process.

If you have any questions regarding the retention of your personal information, please contact our Privacy Officer at the contact details provided in Section 10.

9. WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL INFORMATION?
9.1 Access to your personal information

Subject to legal exceptions, you have the right to request a copy of, or access to, the personal information we hold about you. At your request, we will confirm the existence of the personal information, disclose it to you and allow you to obtain a copy. At your request, computerized personal information collected from you will be provided to you in the form of an intelligible written transcript. If you have certain limitations, reasonable accommodations will be provided upon request to enable you to exercise your right of access under this section. You may exercise your right of access by contacting our Privacy Officer at the contact details set out in Section 10. Please also note that:

  • Access to your personal information is free of charge. However, in certain circumstances, for example if the request is excessive or unfounded, we may charge an administrative fee for transcribing, reproducing, transmitting or requesting additional copies of your personal information. We will inform you of any such charges before processing your request;
  • We generally respond to all requests for access within 30 days of receiving the necessary information. If we are unable to grant access or if additional time is required to respond to a request, we will notify you in writing;
  • Unless this raises serious practical difficulties, computerized personal information collected from you that is not created or deduced from your personal information will be communicated to you, at your request, in a structured and commonly used technological format. It will also be communicated, at your request, to any person or organization authorized by law to collect such information.
9.2 Rectify your personal information

If you feel that your personal information is inaccurate or incomplete, you may rectify it by contacting our Privacy Officer at the contact details given in Section 10. It is your responsibility to inform us of any changes to your personal information so that we can ensure that your personal information remains up to date.

9.3 Obtain information on the processing of your personal information

You have the right to obtain further information regarding the processing of your personal information. If you cannot find the answer to your questions in the Policy, you can contact our Privacy Officer at the contact details provided in Section 10.

9.4 Withdraw your consent

When you give your consent for secondary purposes, i.e. purposes that are not essential to offering you our products and services, you may withdraw it at any time, without any consequences.

However, if you refuse to provide us with personal information that is necessary for us to offer you our products and services or that is required by law, we may no longer be able to provide you with some of our products and services. In this case, we may have to cancel our commitment to you. You will, however, be informed of the occurrence of such a situation.

9.5 Being informed if you are the subject of a decision based exclusively on automated processing

If we use your personal information to make a decision based exclusively on automated processing, we will notify you no later than the time we inform you of the decision. In such a case, you also have the right, upon request:

  • to be informed of the information used to make the decision;
  • the reasons as well as the main factors and parameters that led to the decision;
  • to have the personal information used to make the decision rectified; and
  • to present your observations to a member of our team able to review the decision if necessary.

You may exercise this right by contacting our Privacy Officer at the contact details provided in Section 10.

9.6 Dissatisfaction with the management of your personal information

If you have any questions, concerns or dissatisfaction regarding this Policy or the processing of your personal information, or if you wish to file a complaint, you may contact our Privacy Officer at the contact information listed in Section 10.

10. HOW TO CONTACT OUR PRIVACY OFFICER?

The protection of your Personal Information is important to us. We have appointed a Privacy Officer who is responsible for ensuring compliance with and implementation of applicable privacy legislation. You can contact him/her at the following address:

Chief Executive Officer of Find Therapeutics Inc.
Privacy Officer
7171 Frederick-Banting Street,
Montréal (Québec)
H4S 1Z9 Canada

Email: or

11. POLICY UPDATE

This Policy takes effect on the date mentioned at the top of the page and replaces all previous versions. The history of previous versions of the Policy can be obtained on request from our Privacy Officer.

The Policy may be updated at our sole discretion to reflect changes in our practices and in privacy legislation. When the Policy is updated, the revision date is modified and a notice is added on the Policy web page. When changes are material in nature or require your consent, we will notify you by e-mail if we have your e-mail address.