Privacy Policy

We collect information you provide directly when you: • Create an account (name, email address, password) • Place an order (shipping address, order details, payment reference) • Contact us (name, email, message content) • Subscribe to our newsletter (email address) We also collect information automatically through your use of our website: • Usage data (pages visited, time on site, browser type, device type) • IP address and approximate location (country/region level) • Cookies and similar tracking technologies (see Cookie Policy below) We do not collect or store payment card data. All bank transfer payments are made directly to our bank accounts — no payment processor stores card information on our behalf.

We use the information we collect to: • Process and fulfill your research compound orders • Send order confirmations, shipping notifications, and invoices • Generate and deliver Certificates of Analysis • Respond to customer service inquiries • Send marketing communications (only with your explicit consent) • Improve our website and product offerings • Comply with legal and regulatory obligations We will never sell, rent, or trade your personal information to third parties for marketing purposes.

For customers in the European Economic Area (EEA), we process your personal data under the following legal bases: • Contract performance: Processing necessary to fulfill your orders • Legitimate interests: Website analytics, fraud prevention, and service improvement • Consent: Marketing communications and optional cookies • Legal obligation: Tax records, customs documentation, and compliance reporting You have the right to withdraw consent at any time where processing is consent-based.

We share your personal information only with: • Shipping carriers (name, address, contact details) to fulfill your order • Our logistics and customs partners (for international shipments) • Payment processors (order amount and reference only — no card data) • Analytics providers (anonymized usage data) • Legal authorities if required by applicable law All third-party service providers are bound by data processing agreements and may not use your information for their own marketing purposes.

We retain your personal information for as long as: • Your account remains active • Required to fulfill the purposes described in this policy • Required by applicable law (typically 7 years for financial records) You may request deletion of your account and personal data at any time, subject to legal retention obligations. Order records are retained as required by tax law.

Depending on your location, you may have the right to: • Access the personal information we hold about you • Correct inaccurate or incomplete information • Request deletion of your personal information • Object to or restrict certain processing activities • Data portability (receive your data in a machine-readable format) • Withdraw consent at any time To exercise any of these rights, contact us at privacy@nexorapharma.com. We will respond within 30 days.

We use cookies and similar technologies to: • Maintain your session when logged in • Remember your cart contents • Analyze website usage (via anonymized analytics) • Personalize your experience You can control cookie settings through your browser preferences. Disabling cookies may affect some website functionality. We do not use cookies for targeted advertising.

We implement industry-standard security measures including: • HTTPS encryption for all data transmitted to and from our website • Encrypted storage of account passwords (bcrypt hashing) • Regular security assessments of our infrastructure • Access controls limiting employee access to personal data While we take security seriously, no system is completely secure. If you believe your account has been compromised, contact us immediately at security@nexorapharma.com.

Nexora Pharma is headquartered in Switzerland. If you are located in the EEA or UK, your information may be transferred to and processed in Switzerland, which the European Commission has determined provides adequate data protection. Where we use service providers outside the EEA, we ensure appropriate safeguards are in place through Standard Contractual Clauses or equivalent mechanisms.

Data Controller: Nexora Pharma, Basel, Switzerland Privacy inquiries: privacy@nexorapharma.com Response time: Within 30 days If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority (in the EEA) or the Swiss Federal Data Protection and Information Commissioner (FDPIC).