Privacy Policy

Privacy Policy

This Privacy Policy describes how Context Therapeutics Inc. and its subsidiaries (“Context”, “we”, “us”, “our”) may collect, use and share the information you provide us and the information we collect about you in the course of operating our business, including in association with your use of this website and any website linking to this Privacy Policy that is owned and operated by Context (collectively, the “Services”).

BEFORE ACCESSING THE SERVICES, PLEASE READ THIS PRIVACY POLICY CAREFULLY. BY ACCESSING THE SERVICES, YOU SIGNIFY YOUR AGREEMENT TO THIS PRIVACY POLICY. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, PLEASE DO NOT USE THE SERVICES. YOU SHOULD REVIEW THIS POSTING OF THE PRIVACY POLICY EACH TIME YOU ACCESS THE SERVICES AS THE POLICY MAY CHANGE AT ANY TIME AT OUR SOLE DISCRETION, AND YOUR USE OF THE SERVICES AFTER SUCH CHANGE WILL SIGNIFY YOUR ACCEPTANCE OF THE CHANGED TERMS.

For those who reside in California, please see “Additional Information for California Residents” below.
For those who reside in Nevada, please see “Additional Information for Nevada Residents” below.
For those who reside in the European Economic Area, please see “Additional Information for European Economic Area Residents” below.

How We Collect Your Personal Information
As used in this Privacy Policy, “personal information” is any information that may reasonably identify you. We may collect personal information about you from a variety of sources, including:

From you: We collect information that you submit to us. For example, some of our Services ask you to submit personal information for you to benefit from the specified features or to participate in a particular activity. On the registration screen for such feature or activity, we clearly label which information is required for registration or participation, and which information is optional and may be given at your discretion. You may always refuse to provide information to us, but this may lead to our inability to provide you with certain information, products or services or for you to participate in certain activities.

From your devices: When you use our Services, we may collect information about the devices you use to access the Services, including hardware model, operating system and version, Internet Protocol (“IP”) address and other unique device identifiers, mobile network information, and information about the device’s interaction with our Services. We also collect information about how you use our Services, including your access times, browser types, and language. This type of data enables us to understand how often individuals use parts of the Services so we can analyze and improve them. To collect this information, we use cookies and web beacons, and other similar technologies. To learn more about how we automatically receive and record information when you interact with the Services, please see the section “Cookies, Tracking, & Third-Party Advertising” below. Note that this Privacy Policy covers only how we use information collected via cookies; it does not cover the use of such information by third parties.

From third parties: We may obtain information about you or your use of the Services from third parties and sources, such as our vendors, like web hosting providers, analytics providers, marketing vendors or advertisers, research partners and government entities. You may give us permission to access your information from services offered by third parties. The information we obtain from third party services depends on your account/privacy settings with those third parties and the third parties’ privacy policies, so be sure to check those policies and to adjust your settings to meet your preferences. When you access the Services through third-party platforms, you are authorizing Context to collect, store and use such information and content in accordance with this Privacy Policy. Please keep in mind that any information provided to us by a third party may also be subject to that third party’s privacy policy.

What Personal Information We Collect About You

Currently and in the preceding 12 months, Context has collected the following categories of personal information at the bottom table:

How We Use Your Personal Information

We may use personal information collected through the Services for any lawful purpose including the purposes described below.

Relationship Management—To respond to your request, to improve the content of the Services, to customize the Services to your preferences, to analyze use of our products and the Services, to communicate information to you, as well as for any other purpose specified and communicated to you, to identify potential business partners, on-board and off-board business partners, and manage business partner relationships; respond to requests and concerns; offer services, events, and educational activities and materials; and to define and manage appropriate patient engagement activities, and patient support programs.

Business Operations—For conducting routine and regular business operations such as identity and credential management, including identity verification and authentication, system and technology administration, and legal and regulatory compliance and corporate governance;

Marketing—To develop, personalize and execute sales, marketing and customer relationship management including the delivery of programs and materials.

Market Research—To administer and analyze surveys and other market research.

Research & Development—For staffing, facilitating, conducting and managing clinical trials, including prospectively vetting potential participation by investigators and investigative sites in clinical trials and other research and development activities and facilitating the delivery of product to patients participating in clinical trials.

Personnel Services—To identify you; communicate with you; help others identify and communicate with you, for instance, to offer you services (including educational opportunities, products that may be useful to you at work, etc.), including for business development and training; to market your services; maintain a company directory and offering functions, events, and education; to determine what information may be of interest to you.

Personnel Administration—For determining eligibility to work, administering pay and benefits, offering accommodations for health and other conditions, managing holiday, sick leave and any other absences like family leave and sabbaticals; emergency and family points of contact and beneficiary information; managing business expenses and travel;; identifying and assessing candidates for positions with us or our partners, managing recruitment, evaluating applications, and on-boarding and retention processes; authenticating and monitoring access to our buildings, systems, information, and networks (e.g., employee badges); maintaining personnel records.

Lawful Bases for Processing

We rely on lawful bases to process your personal information including:

Consent

We may obtain your consent to process your personal information in certain circumstances, which may include when you elect to receive information from us. We may also rely upon our legitimate interest in developing our business as a basis for sending you marketing information and information about the Services.

Performance of a Contract

We may process your personal information in connection with the performance of a contract which we have with you or your company or institution, or when we take steps in anticipation of entering into a contract with you, your company or institution, for example in connection with the provision of the Services to you, your company or institution and the management of our relationships with third parties.

Compliance with a Legal Obligation

We rely on this lawful processing ground when we process your personal information to meet legal and regulatory obligations that apply to us.

Legitimate Interests

We may process your personal information to provide the Services, to respond to specific requests, to manage our business operations, to manage our relationships with you and with third parties in connection with our business, and when we provide you with marketing information or other information in relation to the Services which we believe may interest you.

If you wish to have more information regarding the legitimate interests we rely on, please contact us at dataprivacy@contexttherapeutics.com.

How We Disclose Your Personal Information

We may disclose personal information you provide through the Services to third parties, such as:

1. to agents, contractors and business partners we use to support our business, including our lawyers, auditors, consultants, and service providers, in which case we intend for such third parties’ use of such data to be restricted to the purposes for which it has been provided, and in compliance with applicable data privacy standards. However, Context shall not be responsible for third parties’ unauthorized uses, disclosures or other violations of this Privacy Policy or any other rights of users of these Services; or

2. to a purchaser or successor entity in connection with the sale, merger, assignment, or other transfer of Context, or line of business or product of Context, or sale of substantially all of the assets of Context; or

3. to enforce our Terms of Use; to protect our operations; to protect the rights, privacy, safety or property of Context, you or others; or to permit us to pursue available remedies or limit the damages that we may sustain; or

4. if you have consented to the disclosure.

Specific Services may include additional or different provisions relating to the collection, use and disclosure of personal information. In the event of a conflict between such provisions and this Privacy Policy the terms for such specific Services shall govern. Except in limited circumstances, we are not responsible for removing personal information from the databases of third parties with whom we have already shared your personal information and shall not be responsible for any damages resulting from the loss, corruption or unauthorized acquisition or misuse of such personal information by third parties.

Submissions

Your feedback and comments regarding our company, products and services are valuable to us. We will be free to use, for any purpose whatsoever, any feedback, comments or other information you provide as further set forth in our Terms of Use.

Personal Information Protection

We take appropriate technical and organizational measures designed to prevent unauthorized intrusion to the Services and the alteration, acquisition or misuse of personal information. We also maintain physical and electronic safeguards that limit access to your personal information to our employees (and others working on our behalf under confidentiality agreements or professional duty), who through the course of standard business activities, need to access your personal information. Despite our efforts to protect your personal information, there is always a risk that an unauthorized third party may circumvent such procedures or that transmissions of your information over the Internet may be intercepted. The confidentiality of any communication or material transmitted to or from us via the Services or via email cannot be and is not guaranteed. Therefore, we will not be responsible for loss, corruption or unauthorized acquisition or misuse of personal information that you provide through the Services or that is stored by us, or for any damages resulting from such loss, corruption or unauthorized acquisition or misuse.

Other Websites

The Services may contain links or references to other websites. Please be aware that we do not control and are not responsible for these linked websites and that this Privacy Policy does not apply to those websites. It is possible that these links may be used by third parties or others to collect personal or other information about you. We encourage you to read the privacy policy of every website you visit.

About Children

The Services are not intended for children under the age of 13. We do not knowingly collect personal information through the Services from visitors in this age group, and if we learn we have collected personal information from a child under 13, we will delete that information. If You are under the age of 13, please do not submit any personal information through the Services. If You have reason to believe that we may have accidentally received personal information from an individual under age 13, please contact us immediately at dataprivacy@contexttherapeutics.com. All users must be at least 18 years of age in order to use the Services.

Additional Information for California Residents

Personal Information Under the California Consumer Privacy Act (CCPA)

Context collects “personal information” as defined by the CCPA, which is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information does not include de-identified or aggregate information, publicly available information that is lawfully made available from federal, state, or local government records, and information covered by certain sector-specific privacy laws, such as medical information under California’s Confidentiality of Medical Information Act and protected health information under Health Insurance Portability and Accountability Act of 1996 (“HIPAA”).

Your CCPA Rights
California residents have certain rights under the CCPA as further described below.

The Right to Know

You have the right to request any or all of the following information relating to your personal information we have collected and disclosed in the last 12 months, upon verification of your identity: 

• The specific pieces of personal information we have collected about you;

• The categories of personal information we have collected about you;

• The categories of sources of the personal information;

• The categories of personal information that we have disclosed to third parties for a business purpose, and the categories of recipients to whom this information was disclosed;

• The categories of personal information we have sold about you (if any) and the categories of third parties to whom the information was sold; and

The business or commercial purposes for collecting or, if applicable, selling personal information about you.

The Right to Request Deletion

You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions.

The Right to Opt-Out of Personal Information “Sales”

You have the right to opt-out of the sale of personal information.

Context does not sell personal information.   

The Right to Non-Discrimination

You have the right not to receive discriminatory treatment for exercising these rights. 

In the past 12 months, Context collected the specific type and categories of personal information indicate above in “What Personal Information We Collect About You” for the purposes indicated above in “How We Use Your personal information.” The categories of third parties that we have disclosed such information to is indicated above in “How We Disclose Your Personal Information.”

How to Exercise Your Rights

If you wish to make a request to know or to delete your information, please email us at dataprivacy@contexttherapeutics.com.

When submitting your request, please indicate your relationship with us as well as your specific request with enough information to allow us to understand and respond appropriately. We may request additional personal information from you in order to verify your identity. We will only use personal information provided in connection with a rights request under California law to review and comply with the request. If we are unable to verify your identity, we may decline a request to exercise rights under California law.

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. To make a request on your behalf, an authorized agent may contact us via email at dataprivacy@contexttherapeutics.com provided such authorized agent includes proof of your written and signed permission to do so. Note that Context may also require you to verify your identity and confirm that you gave permission.

Once we are able to verify your identity, we will proceed with processing your request. Please note that we may require additional information from you in order to honor your request, and there may be circumstances where we will not be able to honor your request. For example, if you request deletion, we may not be able to honor your request, for example, if we need to retain certain personal information to comply with our legal obligations or for other permitted purposes.

Additional Information for Nevada Residents

Although Context does not sell personal information, Nevada residents may have the right to opt-out of the any future sale of personal information we have collected or will collect. To make such a request, please email us at dataprivacy@contexttherapeutics.com.

Additional Information for Residents of the European Economic Area and the United Kingdom

Your Personal Data is processed at Context’s operating offices and in any other places where the parties involved in the processing are located. This means that this information may be transferred to devices located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction. In particular, when Context shares clinical trials data with its business partners and service providers as permitted by this Privacy Policy, your Personal Data, which will be pseudonymized or anonymized in any case, would be stored and processed within third countries. Where this occurs, Context will ensure that:

• the security and confidentiality of your Personal Data is secure at all times;

• any Data Controller (as defined in the UK and/or EU General Data Protection Regulation (“GDPR”)) receiving your Personal Data has entered into an agreement with Context which contains standard data protection clauses as required by GDPR or there is an alternative appropriate safeguard in place governing the transfer; and,

• any Data Processor (as defined in the GDPR) receiving your Personal Data has entered into an applicable agreement which contains the required Data Processor clauses as well as standard data protection clauses as required by UK and/or EU GDPR or there is an alternative appropriate safeguard in place governing the transfer.

If you reside or are based in the UK or EU and we were required to transfer your Personal Data out of the UK or EU to countries not deemed by the ICO or European Commission (as relevant) to provide an adequate level of Personal Data protection, the transfer will be based on safeguards that allow us to conduct the transfer in accordance with the Data Protection Legislation, such as the specific contracts containing standard data protection clauses approved by the ICO or European Commission (as relevant) providing adequate protection of Personal Data. You can obtain a copy of this documentation by contacting the EU Representative or DPO identified in the Contact Us section below.

Where the processing of personal data is based on your consent, you are free to withdraw your consent at any time. You also have a range of further rights over your information:

1. Right of Information About Collection and Use of Personal Data: You have the right to be informed about the collection and use of your personal data. We ensure we do this with our internal and external European Privacy Notices (including this document). These are regularly reviewed and updated to ensure these are accurate and reflect our data processing activities

2. Right to Access Your Personal Data: You have the right in many circumstances to access the Personal Data that we hold about you by making a request. This is sometimes termed ‘Data Subject Access Request’. If we agree that we are obliged to provide Personal Data to you (or someone else on your behalf), we will provide it to you or them free of charge and aim to do so within 1 month from when your identity has been confirmed. We would ask for proof of identity and sufficient information about your interactions with us that we can locate your Personal Data. 

3. Right to Rectify Your Personal Data: If any of the Personal Data we hold about you is inaccurate, incomplete, or out of date, you may ask us to correct it. 

4. Right to Erasure: You have the right to have personal data erased. This is also known as the ‘right to be forgotten’. The right is not absolute and only applies in certain circumstances. For instance, the right to erasure does not apply where we have a legal obligation to retain your Personal Data. 

5. Right to Restrict Processing: You have the right to ask us to restrict the processing of your personal data. For example, this may be because you have issues with the accuracy of the data we hold or the way we have processed your data. The right is not absolute and only applies in certain circumstances. 

6. Right to Portability: The right to portability gives you the right to receive personal data you have provided to a controller in a structured, commonly used, and machine-readable format. It also gives them you the right to request that a controller transmits this data directly to another controller. 

7. Right to Object: You have the right to object to our processing of some or all of the personal data that we hold about you. This is an absolute right when we use your data for direct marketing but may not apply in other circumstances where we have a compelling reason to do so, e.g., a legal obligation.  

8. Rights Related to Automated Decision-Making: You have the right to object to our processing where a decision is made about you solely based upon automated processed and which has significant or legal effects. Context does not intend to conduct any automated decision-making for your Personal Data. 

If you would like to exercise one of your rights as set out above, or you have a question or a complaint about this Privacy Policy or the way your Personal Data is processed, please contact our Data Protection Officer (The DPO Centre), or “DPO”, by one of the following means:

By email: dpo@contexttherapeutics.com
By telephone: +1 267 225 7416
By post: 2001 Market Street, Suite 3915, Unit 15, Philadelphia, PA 19103 USA

Context’s EU Representative for EU GDPR matters is Context Therapeutics Ireland Limited, who can be contacted via email: EURep@contexttherapeutics.com
Context’s UK Representative for UK GDPR matters is The DPO Centre who can be contacted via email: UKRep@contexttherapeutics.com

You may also make a complaint to your local Data Protection Authority. You can find details of your local authority at: https://digital-strategy.ec.europa.eu/en/library/list-personal-data-protection-competent-authorities

Other International Users

As noted above, we are headquartered in the United States, and our Website is hosted there.  If you are using our Website from another country, the laws governing our collection and use of information may be different from the laws of your country. If you decide to use our Website or share your Personal Data with us, you are consenting to the transfer of your Personal Data to the United States and to any other country to which Context transfers your Personal Data. You also consent to the use and disclosure of your Personal Data in accordance with this Privacy Policy, as well as applicable U.S. federal and state laws and the laws of the countries to which your Personal Data are transferred.

Cookies, Tracking, & Third-Party Advertising

We use cookies, tags, and beacons on our Services in order to offer you a full range of functions and to make the use of our Services more convenient for you. Cookies are small pieces of text sent by your web browser by a website you visit. A cookie file is stored in your web browser and allows the website or a third party to recognize you and make your next visit easier and the website more useful to you. Pixel tags are electronic images that may be associated with cookies.  Specifically, we use Google Analytics. The Google Analytics opt-out policy is available here.

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page here. If you wish to amend your cookie preferences for our website, you can do this through your browser settings or through the cookie banner settings on our site. Your browser’s ‘help’ function will tell you how to do this. You may also manually delete your cookies here. Note that blocking or disabling certain types of cookies may result in a deterioration of the website experience and the services we provide.

We do not respond to web browser “do not track” signals or other mechanisms that provide a method to opt out of the collection of information across the networks of websites and online services in which we participate. If we do so in the future, we will describe how in this Privacy Policy. Visit the following website, here, for more information on this developing area.

How Long We Keep Personal Information

Personal Information will be saved for a period of time needed to fulfill legitimate and lawful business purposes in accordance with our record retention policies and applicable laws and regulations. When determining the appropriate retention period for personal information, we take into account various criteria, such as the amount, nature and sensitivity of the personal information, potential risk of harm from unauthorized use or disclosure, purposes for which we process your personal information, whether we can achieve those purposes through other means, and our business operations and legal requirements.

Changes to This Privacy Policy

Please note that Context reserves the right to revise this Privacy Policy at any time at our sole discretion. Any changes will be effective immediately upon posting to these Services. Therefore, you are urged to review the Privacy Policy each time you access these Services to ensure that you are familiar with the most current version. Use of the Services following such modification constitutes your agreement to the revised Privacy Policy then in effect.

This Privacy Policy was last updated on December 22, 2025.