Privacy Policy

Humacyte Global, Inc. (“Humacyte” or “we”) recognize the importance of protecting the privacy of your personal information, and we have prepared this Privacy Policy to provide you with important information about our privacy practices. This Privacy Policy applies when you use any website, application, or other online service that links to or refers to this Privacy Policy and that is owned and operated by Humacyte (the “Services”). This Privacy Policy does not apply to information collected through other websites or online services.

Please take a moment to review the terms of our Privacy Policy. If you have any questions about this Privacy Policy, please reach out to us by completing our Contact Us page.

INFORMATION WE COLLECT AND HOW WE COLLECT IT

We may collect personal information about our users in various ways. For example, in the twelve months prior to this Privacy Policy taking effect, we may have collected:

Information You Provide To Us. We may collect information from you directly, including:

Contact information, such as first and last name, address, telephone number, email address, and other contact information you choose to provide us as part of the Services
Professional or employment-related information, such as if you apply for a job with us through the Services
Correspondence you sent to us
Demographic information, such as your age and gender
Health and medical information, such as information about physical and mental health conditions and diagnoses. For example, we may collect health information in connection with providing patient support programs, distributing and marketing our products, managing compassionate use and expanded access programs, or tracking adverse event reports
Commercial information, including records of products or services purchased
Transaction and billing information, including bank account and payment card details

Information Collected Automatically, such as internet activity and other information from the devices and browsers that you use, including your device type, IP address, and information about the links you click, pages you view, and advertising you interact with on Humacyte’s online services. We collect this information, in part, through the use of technologies such as cookies, which are discussed in greater detail below.
Information From Third-Party Sources. We may receive information about you from publicly and commercially available sources, as permitted by law, which we may combine with other information we receive from or about you. For example, if you apply for a job with us by connecting your LinkedIn profile, we may collect information available on your LinkedIn profile.

Some of the categories of personal data we collect may be considered sensitive under applicable laws. We do not use or disclose sensitive data for any purpose other than those permitted by applicable law.

We may combine personal data from multiple online and offline sources.

HOW WE USE INFORMATION

Over the last 12 months, we may have used your personal information for the following purposes in accordance with applicable law:

To Provide the Services You Request based on contractual necessity. This includes, for example, processing your job application and delivering the Services you requested.
To Contact You, based on our legitimate interests to manage and improve our website(s) and other Services. We may use your personal information to respond to questions that you may submit to us via the Services or to communicate with you about our products and services, such as e-mailing press releases, company announcements, and product-related information. If you provide a resume to us through the Services, we may retain your resume in our files in order to contact you for current or future job openings.
To Analyze Your Use of our Services, based on our legitimate interests to better understand our users and improve our Services. We may use information we gather to determine which areas of the Services are most frequently visited to understand how to enhance the Services.
To Comply With Regulatory Monitoring and Reporting Obligations, including those related to adverse events, product complaints, spend transparency, and patient safety.
To achieve any additional purpose where you have provided your consent. We may occasionally request your consent to process your information for additional purposes, not listed above, that we will specifically disclose to you at the time we request your consent.

If you do not provide certain information to us, we may, in some circumstances, be unable to comply with our obligations or provide you with the Services. We will tell you about the implications of not providing certain information in those instances.

SHARING OF INFORMATION

We may disclose your personal information under certain circumstances, including:

Service Providers. We rely on third parties to perform a variety of services for us, such as processing job applications and providing data analysis. To do so, we may need to provide your personal information to those businesses.
Business Transfers and Affiliates: We may share your information with companies or organizations connected or affiliated with us in the course of our business activities.
Other Parties When Required by Law or As Necessary to Protect Our Services. We reserve the right to disclose visitor information in cases when we have reason to believe that disclosing this information is necessary to identify, contact or bring legal action against someone who may be causing injury to or interference with the rights or property of us, other visitors, or anyone else that could be harmed by such activities. We also reserve the right to disclose visitor information when we believe in good faith that the law requires it or when doing so is necessary to respond to a government request.
Other Parties in Connection With a Corporate Transaction. We reserve the right to transfer any information we have about you in the event that we sell or transfer all or a portion of our business or assets to a third party, such as in the event of a merger, acquisition, or in connection with a bankruptcy reorganization.

We also may share other information with third parties in a manner that does not identify particular visitors, including, for example, aggregate information about how the Services are used. We also may share personal information if you provide us your consent or direct us to share your information.

In the twelve months prior to this Privacy Policy taking effect, Humacyte has not sold your information to third parties nor has it shared your information with third parties for interest-based advertising.

ONLINE TRACKING

We and third parties that provide content, or functionality on our Services may use cookies and other technologies to facilitate administration and navigation on the Services, to better understand and improve the Services, and to provide you with a customized online experience, although our sites may differ based on the Services you use and where you are located. Cookies are small files that are placed on your computer when you visit a website. Cookies may be used to store a unique identification number tied to your computer or device so that you can be recognized as the same user across one or more browsing sessions, and across one or more sites. Cookies serve many useful purposes. For example, some of the Services allow visitors to increase the font size of the text contained on the applicable Service to make it easier to read. Cookies enable the Service to automatically use your preferred font size the next time you visit the Service. Most browsers are initially set up to accept cookies.

You may be able to refuse or disable cookies by adjusting your web browser settings. Some browsers have options that allow the visitor to control whether the browser will accept cookies, reject cookies, or notify the visitor each time a cookie is sent. Because each web browser is different, please consult the instructions provided by your web browser (typically in the “help” section). If you choose to refuse, disable, or delete these technologies, some of the functionality of the services may no longer be available to you and any differences in service are related to the data. Deleting cookies may in some cases cancel the opt out selection in your browser.

Some of our third-party partners are members of the Network Advertising Initiative, which offers a single location to opt out of ad targeting from member companies. To learn more, please click here or here. Due to differences between websites and mobile apps, you may need to take additional steps to opt out of interest based advertising for mobile applications. Please check your device settings and mobile app permissions for additional information on how to opt out. You also may stop further data collection from a mobile application by removing it from your mobile device.

DO NOT TRACK SIGNALS

Some web browsers may transmit “do not track” signals to the websites and other online services with which a user communicates. Because of differences in how web browsers incorporate and activate this feature, it is not always clear whether users intend for these signals to be transmitted, or whether they even are aware of them. We currently do not take action in response to these signals. If and when a standard is established and accepted, we may revisit our policy on responding to these signals.

LINKS TO OTHER SITES

We provide links to websites or resources outside of our Services for your informational purposes only. These other sites may send their own cookies to you, collect data or solicit personal information from you. We are not responsible for the privacy or other practices of such sites and cannot guarantee the security of any of your personal information that you provide or is collected by such sites. We encourage you to review the privacy policies and terms and conditions on those linked sites.

DATA RETENTION AND SECURITY

We have adopted physical, technical, and administrative safeguards to help protect against theft, loss, misuse, and unauthorized access to or disclosure of the information we collect and receive. However, please note that no data transmission over the Internet can be guaranteed to be 100% secure. As a result, while we strive to protect your personal information and privacy, we cannot guarantee or warrant the security of any information you disclose or transmit to us online and cannot be responsible for the theft, destruction, or inadvertent disclosure of your personal information.

Information will be retained only for so long as reasonably necessary for the purposes set out above, in accordance with applicable laws.

INTERNATIONAL TRANSFERS

By using the Services and providing us with information, you understand and agree that we may transfer and store your information on servers located outside your resident jurisdiction. To the extent you are a resident of a country other than the United States, you consent to the transfer of such data to the United States for processing by us in accordance with this Privacy Policy.

CHILDREN’S PRIVACY

We do not knowingly collect any personal information from children under the age of 13 without parental consent, unless permitted by law. If we learn that a child under the age of 13 has provided us with personal information, we will delete it in accordance with applicable law.

YOUR RIGHTS AND CHOICES

Depending on where you live, you may be entitled, in accordance with applicable law, to request access to, correction, restriction of processing, deletion, and portability of your information, or more information about our information practices. Requests should be submitted in writing as set out below. If you become aware of changes or inaccuracies in your information, you should inform us of such changes so that the information may be updated or corrected. In some cases, we may need to collect additional information from you in order to verify your identity before providing you access to or deleting your information, such as a government-issued identification. You may be entitled, in accordance with applicable law, to submit a request through an authorized agent. To designate an authorized agent to exercise your rights, we will require written proof that the authorized agent has been authorized to act on your behalf or a copy of the power-of-attorney document granting that right.

If you disagree with a decision made in response to a request to exercise your rights, you may be entitled, in accordance with applicable law, to appeal the decision. To appeal a decision, please contact us at customercare@humacyte.com.

To exercise your privacy rights, contact us at customercare@humacyte.com.

Please note that these rights are not absolute. For example, we may not be able to respond to a request if we cannot verify your identity.

Humacyte will not discriminate against you for exercising your rights, but we may not be able to provide you with services or programs that you have requested if we are not able to use your information.

[Residents in the EEA also have the right to lodge a complaint with their data protection authority. In addition, where we process your personal information based on your consent, you may withdraw consent at any time, without affecting the lawfulness of processing prior to such withdrawal.]

CHANGES TO OUR PRIVACY POLICY

We may modify this Privacy Policy from time to time. When we update the Privacy Policy, we will revise the “Effective Date” date above and post the new Privacy Policy. We recommend that you revisit this Privacy Policy periodically to ensure that you are aware of our current privacy practices, although we may also elect to notify you by e-mail or by posting something on some or all of our Services. Your continued use of the Services following the posting of changes will mean you accept the Privacy Policy and any changes.

CONTACT US

If you have any questions about this Privacy Policy, please reach out to us by completing our Contact Us page or emailing us at customercare@humacyte.com.

CONSUMER HEALTH DATA POLICY

The privacy of information that identifies your physical or mental health status is important to us. As described above in “INFORMATION WE COLLECT AND HOW WE COLLECT IT,” we may collect categories of data that may be considered “consumer health data” under Washington’s My Health My Data Act and other similar state laws when you interact with our services, including:

Individual health conditions, treatment, diseases, or diagnosis;
Diagnoses or diagnostic testing, treatment, or medication; and
Use or purchase of prescribed medication

For additional details about the types of data we collect and how we collect it, please review “INFORMATION WE COLLECT AND HOW WE COLLECT IT” in the Privacy Notice.

We use and otherwise process each of the categories of information identified above to provide and maintain our products or services, with your consent, and as otherwise permitted by law. For additional details about how we may use your data, please review “HOW WE USE INFORMATION” in the Privacy Notice.

We may share personal information, including each of the categories of consumer health data, as reasonably necessary to provide you products and services, including with service providers, business partners, within our corporate group (i.e., Humacyte Inc. and Humacyte Europe Ltd.), to other parties when required by law or as necessary to protect our services, other parties in connection with a corporate transaction, and with your consent or as otherwise permitted by law. For additional details about how we share information, please review “SHARING OF INFORMATION.”

You may be entitled to, in accordance with applicable law to, submit a request to know, access, correct or delete the information we have collected about you. Please review “YOUR RIGHTS AND CHOICES” to exercise these rights.

Last Updated: 12/17/2024