Privacy Policy

1. Introduction
   At Firebird Biologics (“we”, “us”, “our”), we are committed to safeguarding
   the personal data of our stakeholders, including healthcare professionals,
   patients, employees, partners, and website visitors. This General Data
   Protection Policy outlines how we collect, use, disclose, and protect your
   personal data in compliance with applicable data protection laws such as the
   General Data Protection Regulation (GDPR), Personal Data Protection Act
   (PDPA), and other local laws.

2. The term “personal data” as used in this Policy shall have the meaning
   prescribed under the Personal Data Protection Act 2012 and its
   accompanying regulations (“PDPA”).

3. Collection, Use, and Disclosure of Personal Data
   The Company handles personal data in accordance with the key obligations under
   the PDPA, as set out below:
   a. Purpose
   The Company collects and processes personal data solely for legitimate and
   necessary business purposes, which include but are not limited to:
   Maintaining communications with clients and contacts, including, where
   permitted by law, providing updates on market developments, services,
   seminars, and other relevant events tailored to the individual’s stated
   preferences;
   Executing business operations such as processing transactions, managing
   payments, and responding to service requests;
   Supporting recruitment, employment administration, and internal human
   resource functions;
   Complying with legal and regulatory obligations, including required
   submissions to relevant authorities;
   Ensuring the safety and security of operations, as well as adherence to
   applicable laws and regulations;
   Engaging with shareholders on matters relating to corporate performance and
   offerings;
   Disclosing data to third-party service providers, agents, or
   government/regulatory bodies—locally or internationally—as necessary to
   fulfil the above purposes;

4. Facilitating other related or incidental business activities necessary for efficient operations.

b. Consent and Notification

The Company will notify individuals of the purposes for which their personal data is
collected, used, or disclosed. Consent will be obtained before such processing,
unless exceptions under the PDPA apply.

c. Withdrawal of Consent
You may withdraw your consent at any time by contacting our Data Protection Officer
(DPO). Note that withdrawal of consent may affect our ability to continue providing
certain services or fulfill contractual obligations.

d. Accuracy
The Company relies on the accuracy and completeness of the personal data you
provide. Please inform us promptly of any changes so we can update our records
accordingly.

e. Access and Correction
Requests to access or correct personal data, or to withdraw consent, may be
directed to the Company’s Data Protection Officer (DPO). The Company aims to
respond within 30 days and may charge a reasonable administrative fee where
applicable.

f. Protection
The Company implement industry-standard security measures to protect personal
data from unauthorized access, misuse, loss, or damage. Data is disclosed strictly
on a need-to-know basis and in accordance with legal or consent requirements.

g. Retention
Your personal data will be retained only for as long as necessary to fulfill the original
purpose for which it was collected, or as required by law or internal policies.

h. Transfers
Where necessary, personal data may be transferred overseas. We ensure such
transfers comply with PDPA requirements and that receiving entities provide a
comparable level of protection.

1. Links to Other Websites
   Our website may contain links to other websites. The Company is not responsible for
   their data protection practices. Please review the privacy policies of these third-party
   sites before providing your personal data.

2. Use of Cookies
   The Company’s website(s) may use cookies to gather non-personally identifiable
   information (e.g., IP address, page views). Cookies do not collect personal data. You
   may modify your browser settings to manage cookie preferences, but doing so may
   affect certain site features.

3. Photography and Filming
   Photos, videos, and audio may be taken during our events and used for promotional

materials (e.g., brochures, websites, social media). Attendance at our events implies
consent unless you inform us otherwise during registration.

Updates to this Policy
This Policy is intended to supplement the Company’s existing policies governing
internet and electronic communications. The Company reserves the right to amend
or update this Policy at its sole discretion without prior notice. The most current
version shall be published and deemed to be in effect.
Last Updated: 30 July 2025

Governing Law
This Policy is governed by the laws of Singapore.

Complaints Procedure
Complaints related to data protection may be submitted to the Data Protection
Officer (DPO) via email or phone. The DPO will review and address the matter within
10 working days where possible, or provide regular updates on the progress and
expected resolution timeline.
Data Protection Officer (DPO)
Email: dpo@firebirdbiologics.com