We at Wockhardt Regenerative Ltd respect your privacy and are committed to protecting your personal data. In this privacy policy, we explain how we collect, use and process your personal information when you access, visit our Website www.gfctherapy.com. Services mean to include all the content, information, and related services made available to you “as is” from our Website.

If you have any questions about your privacy on our website, or our use of your personal data, please contact us.

Please note that links from our website may take you to external websites which are not covered by this policy. We recommend that you check their privacy policies before submitting any personal information to such sites. We will not be responsible for the content, function or information collection policies of these external websites.

1. What information do we collect about you and how do we collect it?

1.1 We will only require you to provide personal information to us where it is necessary for us to provide you with a service at your request, such as when you contact us, register an account on our website or undergo an online consultation and purchase the products available on our platform. Certain identifiers will be collected by us automatically, and some identifiers will have to be fed by you directly. We are enumerating the list as the following.

1.2 Information collected by us: We may collect personal information about you whenever you use our Services, such as by doing the following, some of the following categories of information are collected directly by us, and some are provided by you directly for the performance of certain functions: • accessing our Website by means of any web browser; • enquiring about our products or services; • initiating and maintaining correspondence with us via the use of telephone, writing by post or emailing us • enquiring about, or applying for, job vacancies. This information may include but may not be limited to the following: • Identification information, such as your full name and title, date of birth, age, gender; • Contact information, such as your postal address, email address and telephone numbers; • Information about your health, including your current health and wellbeing status, your medical history and records, and details of any medicines or treatment that you are presently undergoing, or underwent; • Additional information relevant to your use of our Website and Services, such as your marketing preferences, survey responses and feedback We understand that any information concerning your health is particularly sensitive (known as “special categories” of personal data in certain jurisdictions). We take extra precautions to ensure that such sensitive personal data is kept secure and confidential and we will only retain this data for as long as necessary for the purposes for which we collect it.

1.3 Information we collect about you from our Website. We collect information using cookies and other similar technologies to help distinguish you from other users of our Website. This is used to streamline your online experience by saving you from re-inputting some information and it also allows us to make improvements to our website and analyze user statistics. For more information about how and why we use cookies, please take a look through our Cookie Policy. When you visit our website, we may collect the following information: • Which pages you access, view and which links you follow; • Your IP address and general location; • Details of the hardware and software that you are using to access the website; • Any passwords that you use on our website; • A device identifier (cookie or IP address) for fraud prevention; • URL and time stamps; • Details of your visits to our website and the resources that you access, including, but not limited to, traffic data, location data, weblogs and other communication data.

1.4 You must be at least 18 years old to use our website and services. We do not knowingly collect any personal data relating to children, and persons below the age of 18 years may not be permitted to make avail of our Services.

1.5 You may choose to unsubscribe from our Services, correspondence trail, marketing campaigns at any given time. You will have to follow the procedure mandated under your account settings and may reach out to us at regmedicine1@gmail.com

1.6 Information we collect about you from other sources We may collect information about you from other sources. This may include the following: • Publicly available information; • Information you have shared publicly, including on social media (particularly in respect of job applications); • Information from your other healthcare providers (only with your consent, or where it is necessary for us to provide our service or comply with our legal obligations). This list is not exhaustive and, in specific instances, we may need to collect additional data for the purposes set out in this policy.

1.7 Information we receive about you from other sources Sometimes you will have given your consent to other websites, services or third parties to provide information to us. This could include information we receive about you if you use any of the other websites that we operate or the other services that we provide, in which case we will have informed you when we collected that data if we intend to share those data internally and combine it with data collected on this website. We will also have told you for what purpose we will share and combine your data. It could also include information from third parties that we work with to provide our products and services, such as payment processors, delivery companies, technical support companies and advertising companies. Whenever we receive information about you from these third parties, we will let you know what information we have received and how and why we intend to use it.

2. Cookies

2.1 A cookie is a small text file that is sent by a website server to your browser and stored on your computer. Cookies allow website operators to accumulate useful information, such as whether the computer (or its user) has visited the site before. Cookies are needed for a number of functions which make websites work, or work more efficiently, and they can provide information to website owners about how you use their website. Cookies can also be used to show you adverts that are relevant to you, based on your browsing habits, to personalize your user experience.

2.2 How do we use cookies? We use cookies to monitor how people use our website, including estimating audience size and patterns of use, to help us provide you with a better service. Cookies also make it easier for you to use the website on future visits, and allow us to personalize the content of the website to you by recording information about your preferences. We use both persistent cookies (which expire on a specified date) and session cookies (which expire when you close your browser). Please note that third parties (including, for example providers of external services like web traffic analysis services such as Google Analytics, or advertising services and vendors) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.

2.3 You decide which cookies we use You can configure cookie settings in your web browser. You can find out more about how to do this at the following links: • Chrome • Firefox • Safari • Opera • IE and Edge However, please bear in mind that if you don’t allow us to use certain cookies, it may prevent you from accessing parts of our website or result in a loss of functionality which degrades your experience of the website.

3. Marketing Preferences.

We may use your information to identify and tell you about our products or Services that we think may be of specific interest to you. We will only do this where you have separately informed and consented to to receiving marketing communications, such as where you subscribe to our newsletter. You may update your preferences at any time by Contacting Us. We may also use your information to invite you to participate in patient feedback surveys and other market research. If we do contact you about market research, you do not have to participate. If you tell us that you do not want to receive market research communications, we will respect this. Whether you choose to receive marketing communications or market research communications is entirely up to you. You can choose to receive both, none, or just one or the other. Your choice will not affect any products or Services that you have purchased from us, nor will it affect any quotes for products or Services you buy in future..

4. Sharing your information with third parties.

We may share your data with selected third parties. For example, we may share your information with: • Any service provider which maintains our service infrastructure. They will only access your data in the event that there is a problem with your order which needs to be resolved. • Our payment service provider, to process payments on our behalf. We will share your full name, address, phone number, email address and details of your order for this purpose. Our payment provider will collect and process your payment details; we will not store or have access to your full credit or debit card details. • Any parcel transfer service that receives your parcel from our pharmacy and passes it on to our shipping partners. We will only share your full name, postal address and phone number or email address. • Third party couriers in order to arrange delivery or your order. Again, we will only share your full name, postal address and phone number or email address. • Our RMPs, they will have access to all the health and medical information you provide. • Contact management systems, to send emails, instant messages, social media messages and SMS messages. There are certain other exceptional circumstances in which we may disclose your information to third parties. This would be where we believe that the disclosure is: • Required by the law, or in order to comply with judicial proceedings, court orders or legal or regulatory proceedings. • Necessary to protect the safety of our employees, our property or the public. • Necessary for the prevention or detection of crime, including exchanging information with other companies or organizations for the purposes of fraud protection and credit risk reduction. • Proportionate as part of a merger, business or asset sale, in the event that this happens we will share your information with the prospective seller or buyer involved.

5. How long do we keep your personal information?

We will only store your personal information for as long as we need it for the purposes for which it was collected. Where we provide you with any service, such as where you register an account as a patient on our website, we will retain any information you provide to us at least for as long as we continue to provide that service to you. Generally, we may retain personal data relating to prescriptions issued and dispensed and other care records for a period of 10 years. In all other circumstances (such as where you contact us without making a purchase), we will keep your information for a period of no more than 3 years.

6. How do we protect your personal information?

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this policy. We try to ensure that all information you provide to us is transferred securely via the website (always check for the padlock symbol in your browser, and “https” in the URL, to ensure that your connection is secure). Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access. All information you provide to us is stored on secure servers. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

7. What rights do you have in respect of your personal information?

If you require any further information about your rights as explained below, or if you would like to exercise any of your rights, please contact us. You have the right to access your personal data You have the right to ask us to confirm whether or not we hold any of your personal information. If we do, you have the right to have a copy of your information and to be informed of the following: • Why we have been using your information. • What categories of information we were using. • Who we have shared the information with. • How long we envisage holding your information. In order to maintain the security of your information, we will have to verify your identity before we provide you with a copy of the information we hold. The first copy of your information that you request from us will be provided free of charge, if you require further copies we may charge an administrative fee to cover our costs. Please contact us to request access to your data. You have the right to correct any inaccurate or incomplete personal data If you believe that any of the information we hold about you is inaccurate, incomplete, or out of date, you have the right to require us to rectify that information. You can update or change your personal information in the patient area on our website. Alternatively, please contact us so that we can correct our records. You have the right to be forgotten There may be times where it is no longer necessary for us to hold personal information about you. This could be if: • The information is no longer needed for the original purpose that we collected it for • You withdraw your consent for us to use the information (and we have no other legal reason to keep using it) • You object to us using your information and we have no overriding reason to keep using it • We have used your information unlawfully • We are subject to a legal requirement to delete your information In these situations you have the right to require us to delete your personal data (although please be aware that we may be required to retain certain information in order to comply with our legal obligations). If you believe one of these situations applies to you, please contact us. You have the right to have your data transferred to you or a third party in a common format Also known as data portability, you have the right to require us to transfer your personal information, in a structured, commonly used and machine-readable format, either to you or to another service provider. If you would like us to do this, please contact is. There is no charge for you exercising this right. You have the right to withdraw your consent In most cases, we do not require your consent to use your personal information in the ways set out in this policy. However, where we do rely on your consent (such as where you subscribe to our newsletter), you have the right to withdraw that consent at any time. You can use the “unsubscribe” links in any of the communications that we send you, or contact us to withdraw your consent.

8. Changes to our Privacy Policy

Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our privacy policy. This version was last updated on 25/05/2021 and historic versions can be obtained by contacting us.

9. Contact Us.

If you have any questions about your privacy or our use of your personal data, please contact our Data Protection Officer at Wockhardt Regenerative Ltd