PRIVACY POLICY

Last updated: 01 October 2026

This Privacy Policy explains how we process personal data when you visit our website, contact us, or when we contact you as a business contact. It is based on the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).

1. Who is responsible

Apex Life Sciences AG (in formation), Zug, Switzerland. Until the company is entered in the commercial register, its founders Olivier Van de Steen and Kevin Clement are responsible for the processing described here.

For any privacy question or request, contact us at privacy@apex-lifesciences.com.

2. What personal data we process

  • Website visits: IP address, date and time of access, pages visited, browser and operating system, and the referring website. Our website platform, Squarespace, records this automatically.

  • Cookies and similar technologies: see section 7.

  • Contact form and email: your name, email address, company, role, and the content of your message, plus any other information you choose to share.

  • Meeting bookings: if you book a meeting through Calendly, your name, email address, the chosen time and any information you add.

  • Business contacts: name, role, company, business contact details and our correspondence with you. We collect this from you directly or from publicly available professional sources, such as company websites, professional networks and industry events.

Please do not send us health data or data about patients or trial participants through the contact form or by email.

3. Why we process it

  • Operating the website and keeping it secure, using website visit data and strictly necessary cookies. Legal basis: our legitimate interest in a functioning, secure website (Art. 6(1)(f) GDPR).

  • Answering your enquiries and arranging meetings, using contact form, email and booking data. Legal basis: steps taken at your request before a possible contract (Art. 6(1)(b) GDPR) or our legitimate interest in responding (Art. 6(1)(f) GDPR).

  • Understanding how visitors use the website and measuring our LinkedIn activity, using analytics and tracking cookie data. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

  • Introducing our company and future services to professionals in the life sciences sector, using business contact data. Legal basis: our legitimate interest in business development (Art. 6(1)(f) GDPR).

  • Meeting legal obligations and protecting our rights, using any of the above data as needed. Legal basis: legal obligation (Art. 6(1)(c) GDPR) or our legitimate interest (Art. 6(1)(f) GDPR).

The legal bases above apply where the GDPR applies.

You can object at any time to being contacted for business development purposes. We will then stop contacting you.

4. Who receives your data

We do not sell your personal data. We share it only with:

  • our website platform and host, Squarespace, which also stores contact form submissions;

  • our email provider, Proton AG in Geneva, Switzerland;

  • Calendly, when you book a meeting with us;

  • Google and LinkedIn, for website statistics and measuring our LinkedIn activity, only if you accept the related cookies;

  • professional advisers, such as lawyers and accountants, where needed;

  • authorities, where required by law.

Service providers process data on our behalf under contract. Some providers, such as Google and LinkedIn, may also use data for their own purposes under their own privacy policies.

5. Transfers abroad

Your data is processed in Switzerland, the EU/EEA and the United States. Our email provider, Proton, is based in Switzerland. Squarespace, Google, LinkedIn and Calendly may process data in the United States. Squarespace, Inc. is certified under the EU–US and Swiss–US Data Privacy Framework. For other transfers to countries without an adequate level of data protection, we rely on the recipient's certification under the Data Privacy Framework or on standard contractual clauses.

6. How long we keep it

  • Website visit data: 7 days.

  • Enquiries, meeting bookings and business contact data: up to 24 months after our last contact, unless a business relationship follows or a longer period is required by law.

  • Cookies: for the period shown in our cookie banner. Your cookie choice is stored for up to 6 months, after which we ask again.

7. Cookies and analytics

We use cookies and similar technologies such as tracking pixels. Cookies that are strictly necessary for the website to work are placed automatically. All other cookies and tools are used only after you accept them in our cookie banner. You can change or withdraw your choice at any time via the "Cookie settings" link at the bottom of each page.

  • Necessary cookies (Squarespace): security, site functions and storing your cookie choice. Always used.

  • Squarespace Analytics (Squarespace): visitor statistics. Only with your consent.

  • Google Analytics (Google): visitor statistics. Only with your consent.

  • LinkedIn Insight Tag (LinkedIn): measuring the results of our LinkedIn activity. Only with your consent.

  • Google Fonts (Google): displaying fonts. Your IP address is sent to Google if fonts load from Google's servers.

  • Calendly (Calendly): booking meetings through an embedded scheduler. Only with your consent, or when you open the scheduler.

8. Data security

We use appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.

9. Your rights

Within the limits of applicable law, you have the right to:

  • request access to your personal data;

  • have inaccurate data corrected;

  • have your data deleted;

  • object to processing or have it restricted;

  • receive your data in a common electronic format;

  • withdraw any consent you gave, without affecting earlier processing.

Send requests to privacy@apex-lifesciences.com. We may ask you to confirm your identity. We do not make decisions based solely on automated processing.

10. Complaints

You can raise a concern with a data protection authority:

  • Switzerland: Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch

  • Belgium: Data Protection Authority (APD-GBA), Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be, www.dataprotectionauthority.be

  • Other EU countries: the data protection authority in your country of residence

11. Changes to this Privacy Policy

We may update this Privacy Policy, for example when the company is registered or our services change. The current version is published on this page.