Privacy Policy

In this Privacy Policy, 'us' 'we' or 'our' means Kembi Therapeutics Pty Ltd (ABN 98 644 137 753) and our related bodies corporate.

We are committed to respecting your privacy. Our Privacy Policy sets out how we collect, use, store and disclose your personal information. Where applicable, we are bound by the Australian Privacy Principles contained in the Privacy Act 1988 (Cth) (Privacy Act) and the Health Records and Information Privacy Act 2002 (NSW).

Personal information includes information or an opinion about an identified individual or an individual that is reasonably identifiable. For example, this may include your name, age, gender, postcode and contact details.

Additionally, we may also handle categories of “sensitive information”, which is given additional protection under the Privacy Act. “Sensitive information” is a subset of personal information, and is any of the following about you:

• health information;
• genetic information;
• racial or ethnic origin;
• political opinions or membership of a political association;
• religious beliefs or affiliations or philosophical beliefs;
• membership of a professional or trade association, or trade union;
• sexual orientation or practices;
• criminal record;
• biometric information (when used for automated biometric verification or biometric identification) and biometric templates.

In this Privacy Policy, we describe the key ways in which we typically handle personal information and sensitive information in the ordinary course of our business.

What personal information do we collect?

The types of personal information we collect will depend on how and why you engage with us, and may include the following types of personal information:

• if you are a consultant or personnel of a business we deal with, such as a staff member of a hospital or medical clinic, we generally collect your name, contact details, place of employment, your job title and any information necessary for your interactions with us;
• if you are a patient of a hospital or medical clinic we work with or participant in a clinical trial or research program we run or with which we are affiliated, we generally do not collect your personal information. In the ordinary course of our business we are normally only provided with aggregated de-identified data from hospitals and medical clinics. However, it is possible a hospital or third party may choose to provide some of your personal information to us. In these circumstances, where it is lawful and practicable, we will take reasonable steps to notify you that we have received your information from a third party, unless doing so would be unreasonable or impracticable;
• if you are a health practitioner who has expressed interest in our business, products or development work, we may collect your name, contact details, place of work and job title, and any other information that you choose to provide to us;
• if you are a job applicant or seeking to provide consulting services to us, we generally collect your name, contact details, qualifications, working history and relevant records checks from any recruitment consultant, your previous employers and others who may be able to provide information to us to assist in our decision on whether or not to make you an offer of employment or engage you under a contract;
• if you submit any enquiries to us, subscribe to our mailing list or follow us on social media, we generally collect your name, contact details and details of the matters, products or services that you have enquired about, the nature in which you have made your enquiry, and any additional information necessary to respond to your enquiries;
• if you choose to provide us with it, we may collect sensitive information, including health information, genetic data, or information relating to your participation or desired participation in clinical trials or research programs (collected only with your express consent);
• any other personal information that you provide to us or that may be required in order to facilitate your dealings with us.

The types of personal information we collect about you will also depend on how you choose to interact with us and what you tell us during those interactions. We generally keep records of interactions, whether they are by email, phone, using forms through our website, in person or through social media.

Our website may use cookies to collect data about your device ID, device type, geo-location information, computer and connection information, statistics on page views, traffic to and from the sites, ad data, IP address and standard web log information as described in the “Using our website and cookies” section of this Privacy Policy.

How do we collect personal information?

We may collect these types of personal information either directly from you, or from third parties. We may collect this information when you:

• register on our website or app;
• communicate with us through correspondence, chats, email, or when you share information with us from other social applications, services or websites;
• interact with our sites, services, content and advertising; or
• invest in our business or enquire as to a potential investment in our business.

In some cases, specific collection notices or informed consent forms provided at the time of a clinical trial or research study will override or supplement this general Privacy Policy.

In some circumstances, we may collect personal information about you from third parties. For example, we may receive an application for employment from a recruiter you have engaged or we may receive a referral in relation to the provision of consulting services. Also, if you are a patient of a hospital or medical clinic with which we work, or a participant in a clinical trial or research program we run or with which we are affiliated, it is possible that a hospital or clinic may choose to provide some of your personal information to us. Where it is lawful and practicable, we will take reasonable steps to notify you that we have received your information from a third party, unless doing so would be unreasonable or impracticable in the circumstances.

Why do we collect, use and disclose personal information?

We generally use your personal information for the primary purpose for which we collected it. We generally collect, hold, use and disclose your personal information for one or more of the following purposes:

• to enable you to access and use our website;
• to respond to any of your queries or expressions of interest;
• to operate, protect, improve and optimise our website, business and our users' experience, such as to perform analytics, conduct research and for advertising and marketing;
• to send you service, support and administrative messages, reminders, technical notices, updates, security alerts, and information requested by you;
• to send you marketing and promotional messages and other information that may be of interest to you, including information sent by, or on behalf of, our business partners that we think you may find interesting;
• to administer promotional activities or events sponsored or managed by us or our business partners;
• to comply with our legal obligations, resolve any disputes that we may have with any users of our products, business partners or investors, and to enforce our agreements with third parties; and
• to consider your employment application.

We may also disclose your personal information to a trusted third party who also holds other information about you. This third party may combine that information in order to enable it and us to develop de-identified or aggregated data consumer insights so that we can better understand your preferences and interests, personalise your experience and enhance the products and services that you receive.

Do we use your personal information for direct marketing?

We may use your personal information, including your contact details, to provide you with information we think will interest you about our business, research, products or services, where we have your express or inferred consent. This may include emails, SMS, mail or other forms of communication, in accordance with the Spam Act and the Privacy Act. You may opt-out of receiving marketing materials from us by contacting us using the details set out below or by using the opt-out facilities provided (eg an unsubscribe link).

When might we disclose your personal information?

We may disclose your personal information to third parties where this disclosure is for one of the primary purposes for which we collected it.

In the ordinary course of our business, we may disclose personal information for the purposes described in this privacy policy to:

• our employees and related bodies corporate;
• third party suppliers and service providers (including providers for the operation of our websites and/or our business or in connection with providing our products and services to you);
• professional advisers, dealers and agents;
• publicly online, where we publish details regarding partnerships or other professional or commercial arrangements with your prior consent;
• payment systems operators (eg merchants receiving card payments);
• our existing or potential agents, business partners, investors or partners;
• anyone to whom our assets or businesses (or any part of them) are transferred;
• specific third parties authorised by you to receive information held by us; and/or
• other persons, including government agencies, regulatory bodies and law enforcement agencies, or as required, authorised or permitted by law.

Disclosure of personal information outside Australia

We may disclose personal information outside of Australia to our Scientific Advisory Board members, consultants and other third party suppliers, including information technology and communications services providers such as cloud providers. Some of the IT systems we use store personal information outside Australia in countries such as the USA. Some of our Scientific Advisory Board members and consultants are also located in the USA.

To the extent permitted by law, including the Privacy Act, when you provide your personal information to us, you consent to the disclosure of your information outside of Australia and acknowledge that we are not required to ensure that overseas recipients handle that personal information in compliance with Australian Privacy Law. We will, however, take reasonable steps to ensure that any overseas recipient will deal with such personal information in a way that is consistent with the Australian Privacy Principles.

Using our website and cookies

We may collect personal information about you when you use and access our website.

While we do not use browsing information to identify you personally, we may record certain information about your use of our website, such as which pages you visit, the time and date of your visit and the internet protocol address assigned to your computer.

We may also use 'cookies' or other similar tracking technologies on our website that help us track your website usage and remember your preferences. Cookies are small files that store information on your computer, TV, mobile phone or other device. They enable the entity that put the cookie on your device to recognise you across different websites, services, devices and/or browsing sessions. You can disable cookies through your internet browser but our websites may not work as intended for you if you do so.

We may also use cookies to enable us to collect data that may include personal information. For example, where a cookie is linked to your account, it will be considered personal information under the Privacy Act. We will handle any personal information collected by cookies in the same way that we handle all other personal information as described in this Privacy Policy.

How do we hold your personal information?

We may hold your personal information in either electronic or hard copy form. We take reasonable steps to protect your personal information from misuse, interference and loss, as well as unauthorised access, modification or disclosure and we use a number of physical, administrative, personnel and technical measures to protect your personal information. However, we cannot guarantee the security of your personal information. The Internet is not a secure environment. If you do use the Internet to send us any information, including your email address, please be aware that it will be sent at your own risk.

We also implement policies and procedures to ensure our personnel understand their obligations to comply with these requirements.

If the personal information we hold about you is affected by a data breach, we will notify you and the Office of the Australian Information Commissioner if the loss, unauthorised access or disclosure is likely to result in serious harm to you.

Links

Our website may contain links to websites operated by third parties. Those links are provided for convenience and may not remain current or be maintained. Unless expressly stated otherwise, we are not responsible for the privacy practices of, or any content on, those linked websites, and have no control over or rights in those linked websites. The privacy policies that apply to those other websites may differ substantially from our Privacy Policy, so we encourage individuals to read them before using those websites.

Accessing or correcting your personal information

You can access the personal information we hold about you at any time by contacting us using the information below or the contact us function. We will provide you with access, unless an exception in the Privacy Act applies. If we refuse access, we will explain to you why. We will respond to your request within a reasonable time. We may also need to verify your identity when you request your personal information. We will not charge you for making a request to access your personal information, however if providing you with access is not straightforward, we may charge you a reasonable amount (which we will let you know about in advance) to cover the costs we incur retrieving your information and providing it to you.

We take reasonable steps to make sure that the personal information that we collect, use or disclose is accurate, complete and up-to-date. If you consider that information we hold about you requires updating, please contact our Privacy Officer (contact details are below). We will respond to your request within a reasonable time. We are usually able to action such a request. If we refuse your request, we will provide you reasons why. You can ask us to associate a statement with the information about you that we hold indicating your disagreement with it.

You can contact us with any questions, comments or complaints

We take your privacy concerns seriously.

If you have any questions, comments or complaints regarding this Privacy Policy, your personal information or our compliance with our privacy obligations, you can contact us using the details set out below. Please include your name, email address and/or telephone number and clearly describe your complaint. We will acknowledge your complaint and respond to you regarding your complaint within a reasonable period of time, usually within 30 days.

If you are unhappy with our response time, you can lodge a written complaint with the Office of the Australian Information Commissioner at:

Office of the Australian Information Commissioner (OAIC)
GPO Box 5218
Sydney NSW 1042
email: enquiries@oaic.gov.au

You can also call the OAIC on 1300 363 992, and see their website for more information at: https://www.oaic.gov.au/.

Updates to this Privacy Policy

This Privacy Policy was last updated in April 2026.

We may make changes to this Privacy Policy from time to time to ensure that it is up to date and accurate, and to reflect any changes to the law or our operations. As a result, we may update and change this privacy policy from time to time, and the updated version will be published on our website. We encourage you to check our website periodically to ensure that you are aware of our current Privacy Policy.

Contact Us

For further information about our Privacy Policy or practices, or to access or correct your personal information, or make a complaint, please contact us using the details set out below:

Contact