Privacy Policy
1. Purpose and scope
STARKAGE THERAPEUTICS respects the privacy of visitors to this website. This Privacy Policy explains what personal data we collect through the website, why and on what legal basis we process it, who may receive it, how long it may be retained and the rights available to you under Regulation (EU) 2016/679 (the “GDPR”) and applicable French data protection law. This Policy applies only to personal data processed through this corporate website. It does not govern clinical trials, research studies, pharmacovigilance activities, employment relationships or other processing activities that are subject to separate privacy notices. Please do not submit health data, medical records or other sensitive personal data through the website contact form.
2. Data controller and privacy contact
The data controller is STARKAGE THERAPEUTICS, SAS, whose registered office is at 1 rue du Professeur Calmette, 59800 Lille, France (SIREN 841 065 923). For any question about this Policy or the processing of your personal data, or to exercise your rights, contact our privacy contact at: benjamin.lecalve@StarkAgeTX.com
3. Personal data we may collect
Depending on how you use the website, we may process the following categories of personal data:
• Identity and professional data: first name, last name, title, organisation, role or similar identifiers that you choose to provide.
• Contact data: email address, telephone number, postal address or other contact details that you choose to provide.
• Correspondence data: the content of your message, your request and any subsequent exchanges with us.
• Technical data: IP address, browser type and version, device and operating-system information, language, time zone, referring page, security logs and similar connection data.
• Usage data: pages viewed, links selected, session information and interactions with the website, where the corresponding cookies or technologies are permitted.
• Consent data: your cookie preferences and information needed to demonstrate or manage those choices. Fields identified as mandatory in a form are necessary for us to process the relevant request. If you do not provide them, we may be unable to respond. Other fields are optional
4. Purposes and legal bases
We may process personal data for the following purposes:
• Responding to enquiries and managing professional relationships: to receive, assess and answer messages, partnership enquiries and other requests. The legal basis is our legitimate interest in communicating about our activities and, where your request concerns a possible contract, taking steps at your request before entering into a contract.
• Operating, securing and maintaining the website: to deliver pages, prevent fraud and abuse, troubleshoot errors, maintain security and ensure technical continuity. The legal basis is our legitimate interest in providing a secure and reliable website.
• Audience measurement and improvement: to understand how visitors use the website and improve its content, performance and usability. Where the technologies used require consent, the legal basis is your consent. Audience-measurement technologies that meet all conditions for a legal exemption may be used on the basis permitted by applicable law.
• Managing cookie preferences: to record, apply and demonstrate your cookie choices. This processing is necessary to comply with our legal obligations and to respect your preferences.
• Compliance and legal claims: to comply with laws, regulations, court orders or requests from competent authorities, and to establish, exercise or defend legal claims. The legal basis is a legal obligation or our legitimate interest in protecting our rights.
• Communications requiring consent: if we later offer a newsletter or similar electronic communications, these will be sent on the basis of your consent where consent is required. You may withdraw consent at any time. We do not use personal data collected through this website for decisions based solely on automated processing that produce legal effects or similarly significant effects on you.
5. Recipients and service providers
Personal data may be accessed, on a need-to-know basis, by authorised personnel of STARKAGE THERAPEUTICS and by service providers acting on our instructions, including website hosting, IT support, website maintenance, security, consent-management and analytics providers. These providers are required to process personal data only for authorised purposes and to apply appropriate safeguards. Data may also be disclosed to professional advisers, competent authorities, courts or other third parties where required by law or necessary to protect our rights. We do not sell personal data collected through this website.
6. International transfers
Some of our service providers, including Wix and its subcontractors, may process personal data outside the European Economic Area. Where such transfers occur, we rely on a valid transfer mechanism, such as an adequacy decision adopted by the European Commission, the European Commission’s Standard Contractual Clauses, or another safeguard recognised by applicable law. Information about the relevant safeguards may be requested at contact@starkage.com.
7. Retention periods
We retain personal data only for as long as necessary for the purpose for which it was collected, subject to legal requirements and the need to establish, exercise or defend legal claims. In particular:
• Contact requests and related correspondence are kept for the time needed to handle the request and, where relevant to a prospective professional relationship, for up to three years from the collection of the data or the last meaningful contact from you.
• Technical and security logs are retained for the period reasonably necessary to operate and secure the website and investigate incidents, and are then deleted or anonymised unless a longer period is required by law or justified by an incident.
• Cookie and consent data are retained for the periods described in the Cookie Policy or displayed by the consent-management interface.
• Data required for legal obligations or legal claims may be archived for the applicable statutory limitation or retention period. 8. Security We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Data transmitted between your browser and the website is protected using TLS encryption. No online system can nevertheless guarantee absolute security.
9. Your rights
Subject to the conditions and limits provided by law, you may exercise the following rights:
• the right to access your personal data and obtain a copy;
• the right to rectify inaccurate or incomplete personal data;
• the right to request erasure of your personal data;
• the right to restrict processing;
• the right to object to processing based on legitimate interests, and an absolute right to object to direct marketing;
• the right to data portability where the processing is based on consent or a contract and carried out by automated means;
• the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal; and where applicable under French law, the right to issue instructions concerning the handling of your personal data after your death. To exercise a right, email contact@starkage.com and describe your request. We may ask for additional information when reasonably necessary to verify your identity. We will respond without undue delay and, in principle, within one month. This period may be extended by a further two months where permitted by the GDPR, in which case we will inform you within the initial one-month period. You may also lodge a complaint with the French data protection authority:
Commission Nationale de l’Informatique et des Libertés (CNIL), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France – https://www.cnil.fr.
10. Children
This corporate website is not directed at children and we do not knowingly seek to collect personal data from minors through it. If you believe that a minor has provided personal data through the website, please contact us so that we can take appropriate action.
11. Third-party websites
The website may link to websites operated by third parties. Their privacy practices are governed by their own notices, and STARKAGE THERAPEUTICS is not responsible for their processing activities. 12. Changes to this Policy We may update this Privacy Policy to reflect changes in our processing activities, service providers or applicable law. The current version will be published on the website with its last-updated date. Material changes may also be brought to your attention by an appropriate notice.
Last updated: 29 July 2026.
