Adopted: October 2025

Purpose Pharma International AB

1. Introduction

At Purpose Pharma International AB, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679.

We only collect and process personal data necessary to provide our services and operate our business.

2. Data Controller

Purpose Pharma International AB
Registered office: Grev Turegatan 13B, 114 46 Stockholm
Email: privacy@purposepharma.com
Phone: +46-709-75 10 15

The Data Protection Officer (DPO) is until further notice Jacob Gunterberg, CFO.

The company acts as the Data Controller, responsible for determining the purposes and means of processing your personal data.

3. What Data We Collect

We may collect the following types of personal data:

• Identity details: name, email address, phone number, postal address.
• Contractual details: information needed to deliver our services/products.
• Financial details: payment information (processed securely through third-party providers).
• Technical details: IP address, browser type, and usage data (if you use our website).
• Medical data in cases of adverse events etc which will be handled via the pharmacovigilance routines and relevant SOPs.

4. How We Use Your Data

We process your data for the following purposes:

• To provide our services and fulfill contracts.
• To communicate with you regarding inquiries, support, and updates.
• To issue invoices and process payments.
• To comply with legal obligations (e.g., tax and accounting).
• To improve our services and website.

5. Legal Basis for Processing

We process your personal data under the following GDPR bases:

• Contract: when processing is necessary to fulfill a service or contract.
• Legal obligation: when required to comply with laws (e.g. tax regulations and laws governing the sale and distribution of pharmaceutical products).
• Legitimate interests: for business operations such as communication and service improvement.
• Consent: when you have given explicit consent (e.g., newsletter subscription).

6. Data Sharing and Transfers

We do not sell or rent your personal data.
We may share your data with trusted third parties such as:

• IT service providers (hosting, email, payment processors).
• Professional advisors (accountants, lawyers).
• Authorities, when legally required.

Data is stored within the EU/EEA. If transferred outside, we ensure adequate safeguards (e.g., Standard Contractual Clauses).

7. Data Retention

We keep personal data only as long as necessary for the purposes collected, including:

• While you are a customer.
• As required by law (e.g., tax records for 10 years).
• Until consent is withdrawn (for marketing communications).

8. Your Rights

Under GDPR, you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Erase your data (“right to be forgotten”).
• Restrict or object to processing.
• Data portability (receive your data in a structured format).
• Withdraw consent at any time (for consent-based processing).
• Lodge a complaint with your local Data Protection Authority.

To exercise these rights, contact us at privacy@purposepharma.com 

9. Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

10. Updates to This Policy

We may update this Privacy Policy occasionally. Any changes will be posted on our website with the updated date.