Privacy Policy - Aardvark Therapeutics

Last Updated: April 2025

This Website Privacy Policy (“Privacy Policy”) applies to the collection of information by Aardvark Therapeutics (“we”, “us”, “our”, “Aardvark”) through our websites located at https://aardvarktherapeutics.com/ https://ir.aardvarktherapeutics.com/ https://hero4pws.com[(our “Sites”) and in our interactions with you regarding our products and services (our “Services”). Please note, our other privacy notices and policies may also apply to you, including where we or our service providers are collecting, or you are providing us with any health-related information. Residents of California should also see our California Privacy Notice at Collection.

By using or accessing our Sites or using our Services, you agree that you have read and understand this Privacy Policy. If you do not agree with any portion of this Privacy Policy, please do not use our Services, access our Sites or provide us with any information that is linked or can be reasonably linkable to an identified or an identifiable natural person (“Personal Data”).

For any questions regarding this Privacy Policy or our collection and processing of Personal Data, please contact us using the details listed in the “Contact Us” section below.

A PDF of this Website Privacy Policy, including our California Privacy Notice, is available here.

Additional information about Personal Data collected in clinical trials including protected health information is in our internal GXP Policy.

Personal Data We Collect and Use

The chart below describes the Personal Data we collect when you visit our Sites, use our Services, contact us, subscribe to our email alerts, or otherwise interact with us online or through our support and service mechanisms. We also provide details on our purposes for collecting and using Personal Data, our legal bases for processing your Personal Data, whether your Personal Data is sold or disclosed, and how we collect Personal Data (e.g., the sources). Please note, we do not “sell” (as that term is defined under the applicable data protection laws) your Personal Data; however, we may disclose certain information to our service providers, advertising and marketing companies, our business partners, and other third-party vendors as directed by you.

Category of Personal Data Collected	Types of Personal Data Collected	Sources of Personal Data	Purposes of Collection, Use and Disclosure	Categories of Third Parties with Whom We have Disclosed Personal Data
Identifiers	Name, contact information (email address, mailing address, zip code, phone number), date of birth, gender, business contact information.	Directly from you.	Fulfilling your requests, including providing you with information via electronic communications, and complying with applicable laws.	Service Providers Business Partners Marketing and Advertising Entities
Sensitive Personal Data	Health and medical information.	Directly from you.	Fulfilling your requests, including determining your eligibility as a clinical trial participant, and complying with applicable laws. Processing complaints regarding clinical trials and products.	Business Partners Service Providers
Internet, computer, or other similar network activity	IP address, browsing history, search history, your interactions with our Sites.	Cookies, online tracking technologies.	Providing and improving our Site and complying with applicable laws.	Service Providers Marketing and Advertising Entities
Inferences from Other Personal Data	Information used to generate a profile about you.	Directly from you, cookies, online tracking technologies.	Fulfilling your requests, including determining your eligibility as a clinical trial participant, communicating with you, and complying with applicable laws.	Service Providers Business Partners Marketing and Advertising Entities

Where necessary, including to comply with any legal or business operations obligations, we may also disclose the above categories of Personal Data to the following categories of third parties: (i) judicial courts, regulators, or other government agents purporting to have jurisdiction over the group or opposing counsel and parties to litigation; (ii) any relevant third party acquirer(s), in the event that we sell or transfer all or any relevant portion of our business or assets; (iii) other third parties as may otherwise be permitted by law; and (iv) with your direction or consent.

Cookies and Other Online Tracking Technologies

Like many websites, we use cookies and other online tracking technologies, such as pixels, Flash objects, web beacons, embedded scripts, clear GIFs, and location-identifying technologies to collect information about you, your device and your visit to our website, Site, including to identify you and/or your location, record your preferences, track your usage of the Sites, and improve the Sites. Other technologies, including web storage and identifiers associated with your device, may be used for similar purposes.

You can delete cookies and other online tracking technologies from your device by clearing your browser history. This will delete all online tracking technologies from all websites and applications you have visited since you last cleared your browser history. You can also set your browser to prevent certain online tracking technologies from being placed on your device. If you delete cookies, change your browser settings, switch browsers or computers, or use another operating system, you may need to opt-out again. To learn more, please see the links below:

Please note, if you disable the use of online tracking technologies on our Site, this may affect your experience. For example, certain features of the Site may not work. If you use different devices to visit our Site, (for example, your computer, smartphone, tablet etc.), you must ensure that each browser on each device is adapted to your preferences. To learn more about cookies, please see: https://www.aboutcookies.org/.

Your Choices & Rights

Depending upon where you reside, certain choices and rights with respect to your Personal Data may be available to you under applicable data protection laws. If you have questions about what rights may apply to you, please contact us.

You may also have the follow rights based upon the data protection laws in your state:

Right to Know and Access: You may have the right to know and access the Personal Data we have collected about you. We will provide to you your Personal Data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit your Personal Data to another controller.

Right to Delete: You may have the right to request that we delete the Personal Data we have collected about you, subject to certain legal exceptions.

Right to Withdraw Consent: You may have the right to withdraw any consent to the collection and/or use of your Personal Data that you have given to us.

Right to Correct: You may have the right to request that we correct any inaccurate Personal Data we have collected about you.

Rights to Restrict or Limit Processing, Opt-Out of Targeted Advertising, Sale of Personal Data and/or Profiling: You may have the right to opt-out of our processing of your Personal Data for the purposes of (i) targeted advertising, (ii) the sale of Personal Data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. If you choose to exercise this right through an opt-out preference signal and we detect such a signal, it will be honored. If you submit a request to opt-out, including through an opt-out preference signal, after you have consented to our sale or processing of Personal Data for targeted advertising, we will opt you out of any further selling sale or processing of Personal Data for targeted advertising.

Right to Appeal: You may have the right to appeal any of our responses with respect to your Personal Data privacy rights requests.

Right to No Discrimination: You will not receive any discriminatory treatment by us for the exercise of your privacy rights as outlined in this Privacy Policy.

Do Not Track: Our Site is not designed to respond to “do not track” requests from browsers.

Verifying Your Request: Only you, or a person that you authorize to act on your behalf, may make a request related to your Personal Data. In the case of access and deletion, your request must be verifiable before we can fulfill such request. Verifying your request will require you to provide sufficient information for us to reasonably verify that you are the person about whom we collected Personal Data, or a person authorized to act on your behalf. We will only use the Personal Data you have provided in a verifiable request in order to verify your request. Please note that we may charge a reasonable fee or refuse to act on a request if such request is excessive, repetitive or manifestly unfounded.

Authorized Agents: If you are submitting a privacy rights request on behalf of another individual, we may require more information from you, or you authorized agent to verify that you are the person directing the agent. We may ask you to provide a signed authorization for your agent to make the request or to verify your identity or confirm your request directly with us.

Cross-Border Transfers

We may transfer your Personal Data to a third party that is located in a jurisdiction other than the one from which it was collected, including to countries that have not been deemed to have an adequate level of protection for the rights and freedoms of data subjects. If we do transfer your Personal Data to another jurisdiction, we will do so following due diligence and provided that the data recipient is subject to contractual agreements imposing obligations on it to ensure appropriate technical and organization measures are implemented and maintained at all times consistent with our obligations under applicable data protection laws.

Retention of Personal Data

We will only retain your Personal Data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

Security of Personal Data

We and our third-party service providers maintain reasonable administrative, technical, and physical safeguards designed to protect Personal Data that we receive against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure or use. We may use encryption, password protection, secure socket layers, internal restrictions and other security measures to help prevent unauthorized access to the information we collect from and about you. However, any information you provide to us is at your own risk. We cannot guarantee that such information will not be lost, accessed without authorization, disclosed, altered, or destroyed.

Links to Other Websites

We may provide links to other websites or resources provided by third parties. These links are provided for your convenience only. We have no control over the content of those websites or resources and accept no responsibility for them or for any loss or damage that may arise from your use of them. If you decide to access any of the third-party links on the Sites, you do so entirely at your own risk and subject to the terms and conditions of those websites.

Children

We do not knowingly collect Personal Data from children under the age of 18 through our Sites. If you are under 18, please do not give us any Personal Data. If you are a parent or legal guardian of a child who is interested or actively participating in a study, please use caution in the types of information that you are entering into the portal, answer the specific questions that are provided, and do not provide more information than necessary. We encourage parents and legal guardians to monitor their children’s internet usage and to help enforce our Policy by instructing their children never to provide us Personal Data. If you have reason to believe that a child under the age of 18 has provided Personal Data to us, please contact us, and we will endeavor to delete that information from our databases.

Changes to this Privacy Policy

This Privacy Policy is effective as of the date stated above. We may change this Privacy Policy from time to time. By accessing and using the Sites and Services after we notify you of such changes, you are deemed to have accepted such changes. Please refer back to this Privacy Policy on a regular basis.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at [email protected].

California Privacy Notice

Last Updated: April 2025

This section of the Privacy Policy applies to those visitors or users of our online services and others who are residents of California, as required under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), and supplements the information provided above in our Website Privacy Policy.

As outlined in our Website Privacy Policy, depending on how you interact with us, we may collect or use information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household (“Personal Information”).

Under the CCPA, you have certain rights with respect to your Personal Information, including the:

Right to Notice. You have the right to be notified which categories of Personal Information are being collected and the purposes for which the Personal Information is being used, as outlined in our California Notice at Collection, our Website Privacy Policy and this California Privacy Notice.
Right to Request Access to Specific Information and Data Portability Rights. You have the right to request that we disclose certain information about our collection and use of your Personal Information over the past 12 months. We may ask that you provide certain information to identify yourself so that we may compare it with out records in order to verify your request. You may request the following:

The categories of Personal Information we have collected about you.
The categories of sources for the Personal Information we have collected about you.
The specific pieces of Personal Information we have collected about you.
Our business or commercial purpose for collecting and/or selling your Personal Information. The categories of third parties to whom we have sold or shared your Personal Information, if any, and the categories of Personal Information that we have shared with each third-party recipient.

Right to Opt-Out of the Sale or Sharing of Personal Information. You have the right to opt-out of the sale of your Personal Information and/or the sharing of your Personal Information with third parties for the purposes of cross-context behavioral advertising, including email marketing, or profiling by submitting a request to us. You can also exercise your right to opt-out of the sale or sharing of Personal Information clicking the “Your Privacy Choices” link on the footer of the page or through an opt-out preference signal. If you choose to exercise this right through an opt-out preference signal and we detect such a signal, it will be honored. If you submit a request to opt-out, including through an opt-out preference signal, after you have consented to our sale or sharing of Personal Information, we will opt you out of any further selling or sharing of Personal Information. Please note, we do not sell Personal Information, including the Personal Information of any individuals under the age of 16.
Right to Limit Use of Sensitive Personal Information. You have the right to request that we limit our use of any sensitive Personal Information, as defined under the CCPA, to those uses which are necessary to provide our services and/or products or for other business purposes as identified in the CCPA.
Right to Delete. You have the right to request that we delete any Personal Information that we collect and retain from and/or about you, subject to certain exceptions. Once we receive and confirm your verifiable request, we will delete (and direct our service providers to delete) the relevant Personal Information from our records, unless an exception under the law applies.
Right to Correct. You have the right to request that we correct any inaccurate Personal Information we maintain about you, taking into account the nature of the Personal Information and the purposes for which we are processing such Personal Information. We will use commercially reasonable efforts to correct such inaccurate Personal Information.
Right to No Discrimination. You will not receive any discriminatory treatment by us for the exercise of your privacy rights conferred by the CCPA.

Sale and Sharing of Personal Information

We do not sell your Personal Information for monetary consideration or as that term is traditionally defined. However, certain of our marketing or advertising activities or analytics tools used could be considered a “sale” or “sharing” of Personal Information under the CCPA. You have the right to opt-out of these types of disclosures of your Personal Information. An explanation of how to exercise your opt-out rights is provided below in Exercising Your CCPA Privacy Rights. We do not knowingly sell or share the Personal Information of California residents under 18 years old.

In the preceding 12 months, we have sold or shared the following categories of Personal Information (as described in more detail above) to the following categories of third parties:

Category of Personal Information Sold or Shared	Categories of Third Parties to Which Personal Information is Sold or Shared	Business or Commercial Purposes
Identifiers	Online advertising services and networksData analytics providersBusiness and joint marketing providers, including Clinical Trial Organizations	Providing advertising and marketing servicesAuditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing complianceShort-term, transient use, such as non-personalized advertising shown as part of your current interaction with usHelping to ensure security and integrityDebugging to identify and repair errors that impair existing intended functionalityUndertaking internal research for technological development and demonstration
Sensitive Personal Information
Internet or Other Similar Network Activity

Shine the Light Law (Cal. Civ. Code § 1798.83): We only share Personal Information with third parties for direct marketing purposes if you either specifically opt-in, or are offered the opportunity to opt-out and elect not to opt-out of such sharing at the time you provide Personal Information. If you do not opt-in or if you opt-out at that time, we will not share your Personal Information with that identified third party for direct marketing purposes.

“Shine the Light” and “Eraser” Laws: Residents of the State of California may request a list of all third parties to which we have disclosed certain information during the preceding year for those third parties’ direct marketing purposes.

Verifying Your Request: Only you, or a person that you authorize to act on your behalf, may make a request related to your Personal Information. In the case of access and deletion, your request must be verifiable before we can fulfill such request. Verifying your request will require you to provide sufficient information for us to reasonably verify that you are the person about whom we collected Personal Information, or a person authorized to act on your behalf. We will only use the Personal Information you have provided in a verifiable request in order to verify your request. Please note that we may charge a reasonable fee or refuse to act on a request if such request is excessive, repetitive or manifestly unfounded.

Authorized Agents: If you are submitting a privacy rights request on behalf of another individual, we may require more information from you, or you authorized agent to verify that you are the person directing the agent. We may ask you to provide a signed authorization for your agent to make the request or to verify your identity or confirm your request directly with us.

Exercising Your CCPA Rights

In order to exercise any of your rights under the CCPA, please contact us at [email protected].

Please include a subject line specifying your email is a consumer request. We will disclose and deliver the required information free of charge within 45 days of receiving your verifiable request. The time period to provide the required information may be extended once by an additional 45 days when reasonably necessary and with prior notice.

Any disclosures we provide will only cover the 12-month period preceding the verifiable request’s receipt. For data portability requests, we will select a format to provide Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

Changes to this California Privacy Notice

This California Privacy Notice is effective as of the date stated above. We may change this Notice from time to time. By accessing and using the Sites and Services after we notify you of such changes, you are deemed to have accepted such changes. Please refer back to this California Privacy Notice on a regular basis.

Contact Us

If you have any questions about this Notice or our privacy practices, please contact us at [email protected].

Get in Touch to Discover More