Overview

Jaguar Gene Therapy, LLC (“we”, “us”, “our”) respects your privacy. This Privacy Notice explains our practices with respect to personal data we collect and process in connection with your relationship with us. This includes information we collect through, or in association with, our website, together with all products and services we may offer from time to time via our website, or otherwise through your interactions with us, including interactions with patients, caregivers, health care professionals, researchers, advocacy organizations, vendors, consultants, job applicants, and other business contacts (the website, products, services, collectively, the “Services”).

Please review the following to understand how we process personal data about you. By using any of our Services, whether by visiting our website or otherwise, and/or by voluntarily providing personal data to us, you acknowledge that you have read and understand the practices contained in this Privacy Notice. This Privacy Notice may be revised from time to time, so please ensure that you check this Privacy Notice periodically to remain fully informed.

What Information Do We Collect?

We collect personal data from and about you through the Services, including:

• When you provide it to us directly;
• Automatically through logging and analytics tools, cookies, pixel tags, and as a result of your use of and access to the Services; and
• From third-party sources, including service providers such as Google Analytics.

Finally, we may collect data that is not identifiable to you or otherwise associated with you, such as aggregated data, and is not personal data. To the extent this data is stored or associated with personal data, it will be treated as personal data; otherwise, the data is not subject to this notice.

Information You Share With Us

We collect personal data from you when you provide it to us, including through website forms, applying for a job with us, or contacting us with questions or comments. Depending on the nature of your interaction with us, this may include contact information, professional information, employment-related information, and information you choose to provide regarding health, disease state, genetic conditions, treatment experience, clinical trial interest, caregiver status or other information relating to you or another individual.

If you provide health, genetic, or other sensitive personal information, we may process it as described in this Privacy Notice and as necessary to respond to your inquiry, comply with legal or regulatory obligations, evaluate safety or quality matters, or otherwise operate our business.

For example, if you contact us for information or with questions, you must provide us with your contact information.

To apply for a job with us, you may be asked to submit your contact information and your resume through a form on the website. This information will form the job application that you submit to us in response to a job posting and will be used in our recruitment process once submitted, including to evaluate your qualifications, communicate with you, conduct reference or background checks where permitted by law, and comply with legal obligations.

Information Collected Automatically

When you browse or use the Services, we utilize commonly used logging and analytics tools, including Google Analytics, to collect information about your device, the network used to access the Services, and information about your use of the Services (such as how you navigate and move around the Services).

We also use certain technologies on the Services, including cookies and pixel tags, that allow us, our service providers, and other third parties to store information locally on your device, identify your device, track your interactions with messages we send, and track activity over time and across websites.

Information collected automatically includes the software and hardware attributes of the device you use to access the Services, unique device ID information, regional and language settings, performance data about the Services, network provider, and IP address (a number assigned to your device when you use the Internet). In addition, information is collected passively in the form of log files and third-party analytics (including Google Analytics) that record website activity. For example, log file entries and analytics data are generated every time you visit a particular page on our website, and track the dates and times that you use the Services, the pages you visit, the amount of time spent on specific pages, and other similar usage information, and general data (including the name of the web page from which you entered our website).

Cookies, Web Tracking, and Advertising

We use cookies and pixel tags to personalize and enhance your experience in regard to our Services, to collect data about your visit to our Services, to help diagnose problems with our servers, to administer and market the Services, to permit analytics providers to gather information about your visit to the Services, and to gather broad demographic information about our users.

Information Obtained from Third Parties

We receive personal data from third parties that we have engaged to provide services to us, as well as from third parties that provide web analytics and usage information to us such as Google Analytics.

How Do We Process Personal Data?

Operational Uses

We process your personal data as part of our operations, which include:

• Managing your inquiries, responding to inquiries and requests via email, and communicating with you through any newsletters or other updates, where permitted by law;
• Communicating with patients, caregivers, healthcare professionals, researchers, advocacy organizations, vendors, consultants, and other business contacts;
• Responding to medical, scientific, clinical trial, disease-state, or other informational inquiries;
• Receiving, evaluating, documenting, and reporting safety information, adverse events, product complaints, quality concerns, or other information that may be relevant to our legal, regulatory, pharmacovigilance, or product safety obligations;
• Operating, maintaining, and improving the quality of the Services and such content, products and/or services as we may make available through the Services;
• Recruiting activities, including assessing your qualifications and/or capability for a particular job, role, or task and processing pre-employment background checks;
• Compliance with applicable laws, regulations, rules, industry standards, legal process, and requests of relevant law enforcement and/or other governmental agencies, including, where applicable, reporting information to health authorities or other regulators;
• Endeavoring to protect our and our partners’ rights, property, or safety, and the rights, property, and safety of our users and other third parties; and
• For other purposes, as permitted or required by law.

Sharing of Personal Data

Some of the above processing involves sharing collected personal data with third parties, including service providers and other third parties.

• We share personal data with our service providers, including software and Web developers, commercial email providers, security consultants, clinical, regulatory, safety, and compliance vendors, and other vendors we engage so that they may provide services to us or on our behalf. We require our service providers to process personal data only as instructed by us and not for their own independent marketing purposes;
• We may share personal data we collect with certain affiliates, partners, prospective partners, professional advisors, and service providers in connection with operating our business, evaluating or entering into collaborations, financing, licensing, research, development, corporate transactions, or other business relationships, subject to appropriate confidentiality, contractual and legal restrictions. We do not permit such parties to use patient, caregiver, health, genetic, or clinical inquiry information for their own independent marketing purposes; and
• We share personal data with third parties when we believe it is required by, or necessary to comply with, applicable law, regulation, legal process, governmental request, pharmacovigilance, product safety, product quality, or other regulatory obligation.

Your California Privacy Rights. California Civil Code Section 1798.83, known as the “Shine the Light” law, permits our users who are California residents to request and obtain from us a list of what personal data (if any) we disclosed to third parties for their own direct marketing purposes in the preceding calendar year and the names and addresses of those third parties. Requests may be made only once per year per person, must be sent to the email address below, and are free of charge.

We do not disclose personal data protected under the “Shine the Light” law to third parties for their own direct marketing purposes.

Additional State Privacy Rights. Residents of certain U.S. states may have rights under applicable privacy laws, which may include the right to request access to, correction of, or deletion of personal data, the right to request information about our processing of personal data, and the right to opt out of certain processing activities. These rights may be subject to limitations and exceptions under applicable law. To submit a privacy request, please contact us using the information below. We will respond to requests in accordance with applicable law.

Security

We employ reasonable physical, technical, and organizational safeguards designed to promote the security of our systems and protect the confidentiality, integrity, availability, and resilience of personal data. However, no method of safeguarding information is completely secure. While we use measures designed to protect personal data, we cannot guarantee that our safeguards will be effective or sufficient. In addition, you should be aware that Internet data transmission is not always secure, and we cannot warrant that information you transmit utilizing the Services is or will be secure.

Retention

We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Notice, including to comply with legal, regulatory, safety, pharmacovigilance, clinical, employment, accounting, contractual, and record-keeping obligations. The length of time we retain personal data depends on the nature of the information, the purposes for which it was collected, and applicable legal and regulatory requirements.

Your Choices

You have the ability to make certain choices about how we communicate with you, and how we process certain personal data.

Cookies, Web Tracking, and Advertising

It is possible to change your browser settings to block the automatic collection of certain information. Please note that disabling or removing cookies may prevent the Services, or certain functionality on the Services, from working correctly or at all. Depending on your location, you may have additional rights to opt out of certain analytics, advertising, or tracking activities. Where required by law, we will provide additional notice or choices regarding such technologies.

Other Important Information About Personal Data and the Services

Clinical Trials, Research, and Other Programs

This Privacy Notice applies to personal data collected through the Services and other interactions with us. Personal data collected in connection with clinical trials, research studies, expanded access programs, genetic testing programs, registries, or similar activities may be governed by separate informed consent forms, authorizations, privacy notices, agreements, or program materials. If those materials apply, they will govern the processing of personal data for the applicable activity.

Healthcare Providers and HIPAA

This Privacy Notice does not replace any notice of privacy practices or other privacy information provided by your healthcare provider, health plan, clinical trial site, laboratory, or other third party that may be subject to the Health Insurance Portability and Accountability Act of 1996, as amended, or similar health privacy laws. Information you provide directly to us may be processed by us as described in this Privacy Notice.

Collection of Personal Data from Children

Children under 16 years of age are not permitted to use the Services, and we do not knowingly collect information from children under the age of 16 without appropriate consent where required by law. By using the Services, you represent that you are 18 years of age or older, or are 16 years of age or older and have valid parental consent to do so. Parents, guardians, and caregivers should not provide personal data about a child unless they have authority to do so and the information is relevant to their inquiry or interaction with us.

Third-Party Websites and Services

As a convenience, we may reference or provide links to third-party websites and services. When you access these third-party services, you leave our Services, and we are not responsible for, and do not control, the content, security, or privacy practices employed by any third-party websites and services. You access these third-party services at your own risk. This Privacy Notice does not apply to any third-party services; please refer to the privacy notice or policies for such third-party services for information about how they collect, use, and process personal data.

Business Transfer

We may, in the future, sell or otherwise transfer some or all of our business, operations or assets to a third party, whether by merger, acquisition or otherwise. Personal data we obtain from or about you via the Services may be disclosed to any potential or actual third-party acquirers and may be among those assets transferred.

Do Not Track

We use analytics systems and providers that process personal data about your online activities over time and across third-party websites or online services, and these systems and providers may provide some of this information to us. We do not currently process or comply with any web browser’s “do not track” signal or similar mechanisms.

Modifications and Updates to this Privacy Notice

This Privacy Notice replaces all previous disclosures we may have provided to you about our information practices with respect to the Services. We reserve the right, at any time, to modify, alter, and/or update this Privacy Notice, and any such modifications, alterations, or updates will be effective upon our posting of the revised Privacy Notice. Your continued use of the Services following our posting of any revised Privacy Notice will constitute your acknowledgement of the amended Privacy Notice.

Applicability of this Privacy Notice

This Privacy Notice is subject to any agreements, including the Terms of Service that govern your use of the Services. This Privacy Notice applies regardless of the means used to access or provide information through the Services.

This Privacy Notice does not apply to information from or about you collected by any third-party services, applications, or advertisements associated with, or websites linked from, the Services. The collection or receipt of your information by such third parties is subject to their own privacy policies, statements, and practices, and under no circumstances are we responsible or liable for any third party’s compliance therewith.

Additional Information and Assistance

If you have any questions or concerns about this Privacy Notice, how we process personal data, or if you would like to submit a privacy rights request, please contact us at:

Jaguar Gene Therapy, LLC
Two Conway Park
150 N. Field Drive, Suite 300
Lake Forest, IL 60045
legal@jaguargenetherapy.com

In order to make this Privacy Notice reasonably accessible to users with disabilities, we follow the Web Content Accessibility Guidelines (WCAG 2.1). Users with disabilities may access the Services, and this Privacy Notice, using standard navigation on the website through the aid of additional software, such as screen readers.

Effective: May 2026