ONLINE PRIVACY POLICY
FIBROBLAST, INC.
Last modified: June 1, 2014

1. INTRODUCTION
Purpose. The purpose of this Privacy Policy is to describe how Fibroblast, Inc. (“Company,” “we,” “us,” “our”) collects, uses and shares information about you through our U.S. online interfaces (e.g., websites and mobile applications) owned and controlled by us, including www.fibroblast.com and all linked pages (collectively referred to herein as the “Site”). Please read this notice carefully to understand what we do. If you do not understand any aspects of our Privacy Policy, please feel free to contact us at info@fibroblast.com.

Our Privacy Policy explains:
• Information We Collect and Why We Collect It
• How We Use and Share Your Information
• Access to Your Information and Choices
• Security of Your Information
• International Privacy Practices
• Changes to Our Privacy Policy
• Questions and How Contact Us
• Scope

Third Party Sites. This Privacy Policy applies only to information we collect at and through the Site, and certain Company affiliated sites accessible through our Site, such as referrals.fibroblast.com and patients.fibroblast.com. Our Site also may contain links to third party sites that are not owned or controlled by Company. Please be aware that we are not responsible for the privacy practices of such other sites. We encourage you to be aware when you leave our Site and to read the privacy statements of each and every website that collects personal information.

Terms of Use. Please note that your use of our Site is also subject to our Terms of Use.

2. INFORMATION WE COLLECT AND WHY WE COLLECT IT
Information You Provide To Us. Types of personal information we collect when you provide it to us include:

• Name
• Home address
• Work address
• Email address
• Home telephone number
• Work telephone number
• Mobile telephone number
• Account number

Information We Collect Automatically. Like many websites, we collect certain information automatically as you use our Site, such as:

• IP address
• Browser type
• Computer or device type
• Unique device identifiers
• Operating system version
• The website from where you navigated to our Site
• Time and date of using our Site
• The pages on our Site that you view
• The name of your Internet service provider (ISP)
• Location / Geolocation information

Information Collected Through Third Party Analytics.

We use third party analytics services (“Analytics Services”) to collect certain non-personally identifiable information relating to your use of the Site. These Analytics Services use “cookies”, which are text files placed on your computer, to help us analyze how users use the Site. The information generated by the cookie about your use of the Site (including your IP address) will be transmitted to and stored by the Analytics Services on servers. The Analytics Services will use this information for the purpose of evaluating your use of the Site, compiling reports on Site activity for Site operators and providing other services relating to Site activity and internet usage. The Analytics Services may also transfer this information to other third parties where required to do so by law, or where such third parties process the information on the Analytics Services’ behalf. The Analytics Services will not associate your IP address with any other data held by them. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of the Site. By using the Site, you consent to the processing of data about you by the Analytics Services in the manner and for the purposes set out above. For more information regarding two of the Analytics Services, please visit: (1) MixPanel’s website, and pages that describe its use of information that it gathers, such as www.mixpanel.com/privacy; (2) Google’s website, and pages that describe Google Analytics, such as www.google.com/analytics/learn/privacy.html.

Information Collected Through Cookies and Similar Technologies.

We and our service providers may use both session and persistent cookies, Local Shared Objects (also known as Flash cookies), web beacons (also known as pixel tags), and other technologies to receive and store certain types of information whenever you interact with our website through your computer or mobile device. A cookie is a small file containing a string of characters that is sent to your computer when you visit a website. When you visit the website again, the cookie allows that site to recognize your browser. Cookies may store unique identifiers, user preferences and other information. You can reset your browser to refuse all cookies or to indicate when a cookie is being sent. However, some website features or services may not function properly without cookies. We use cookies to improve the quality of our service, including for tracking user trends. Pixel tags are small graphic files that allow us to monitor the use of our websites. Pixel tags are placed on a website or within the body of an email for the purpose of tracking activity on websites, or when emails are opened or accessed, and are often used in combination with cookies. A pixel tag can collect information such as the IP (Internet Protocol) address of the computer that downloaded the page on which the tag appears; the URL of the page on which the pixel tag appears; the time the page containing the pixel tag was viewed; the type of browser that fetched the pixel tag; and the identification number of any cookie on the computer previously placed by that server.

No Information From Children Under Age 13.

If you are under the age of 13, please do not attempt to register with or use the Site, or otherwise provide any personal information about yourself to us. If we learn that we have collected personal information from a child under the age of 13, we will promptly delete that information. If you believe we have collected personal information from a child under the age of 13, please contact us immediately at info@fibroblast.com or call us at (800) 396-6463.

3. HOW WE USE AND SHARE YOUR INFORMATION
To Provide Services and Information. As described above, we collect information from you so that we can: (a) provide the communications, capabilities, and services that you use and access using the Site; (b) provide the information that you request from us; (c) send you service-related announcements, newsletters, advertisements, and other promotional materials; (d) establish, register, service and maintain your account; (e) contact you in response to a request; (f) improve and customize services we provide; and (g) protect the security and integrity of the Site and our business. We may provide information to third party service providers that help us process, fulfill, and deliver services and information that you access through the Site.
We may use third parties to help host our Site, send out email updates about the Site, provide marketing and advertising services for us, remove repetitive information from our user lists, and process payments. These service providers will have access to your personal information in order to provide these services, but when this occurs we implement reasonable contractual and technical protections to limit their use of that information to helping us provide the service.

Your Consent. In addition to the sharing described elsewhere in this Policy, we will share personal information with companies, organizations or individuals outside of Company when we have your consent to do so. We are committed to protecting the privacy and security of all individually identifiable information about you.

Legal Proceedings. We will share personal information with third party companies, organizations or individuals outside of Company if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to:

• Meet any applicable law, regulation, subpoena, legal process or enforceable governmental request.
• Enforce applicable Terms of Use, including investigation of potential violations.
• Detect, prevent, or otherwise address fraud, security or technical issues.
• Protect against harm to the rights, property or safety of Company, our users, customers or the public as required or permitted by law.

Transfer in the Event of Sale or Change of Control. If the ownership of all or substantially all of our business changes or we otherwise transfer assets relating to our business or the Site to a third party, such as by merger, acquisition, bankruptcy proceeding or otherwise, we may transfer your personal information to the new owner.

4. ACCESS TO YOUR INFORMATION AND CHOICES
You may access, modify, and delete certain information we have relating to your online account. If you have questions about personal information we have about you or need to update your information, you can contact us at info@fibroblast.com or call us at (800) 396-6463. You can opt-out of receiving marketing and promotional e-mails from Company by contacting us at info@fibroblast.com, and by using the opt-out or unsubscribe feature contained in the e-mails.
You can cancel your account by emailing us at info@fibroblast.com. If you close your account, we will no longer use your online account information or share it with third parties. We may, however, retain a copy of the information for archival purposes, and to avoid identity theft or fraud.

5. SECURITY OF YOUR INFORMATION
We use industry standard physical, technical and administrative security measures and safeguards to protect the confidentiality and security of your personal information. However, since the Internet is not a 100% secure environment, we cannot guarantee, ensure, or warrant the security of any information you transmit to us. There is no guarantee that information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards. It is your responsibility to protect the security of your login information. When you use the Site, including when you provide us with information during registration, we encrypt all information about your usage using Secure Socket Layer technology (SSL). Please note that e-mails and other communications you send to us through means outside the Site itself are not encrypted, and we strongly advise you not to communicate any confidential information through these means.

6. INTERNATIONAL PRIVACY PRACTICES
By using and accessing our Sites, residents and citizens of countries and jurisdictions outside of the United States agree and consent to the transfer to and processing of personal information on servers located in the United States, and that the protection of such information may be different than required under the laws of your residence or location.

7. CHANGES TO OUR PRIVACY POLICY
Our Privacy Policy may change from time to time. We will not reduce your rights under this Privacy Policy without your consent in accordance with applicable law. We will post any privacy policy changes on this page and, if the changes are significant, we will provide a more prominent notice (including, for certain services, email notification of privacy policy changes). We will also keep prior versions of this Privacy Policy in an archive for your review.

8. QUESTIONS AND HOW CONTACT US
If you have any questions, concerns, complaints or suggestions regarding our Privacy Policy or otherwise need to contact us, please email us at info@fibroblast.com, call us at (800) 396-6463, or contact us by US postal mail at the following address:

Fibroblast, Inc.
2835 N. Sheffield Ave.
Suite 303
Chicago, IL 60657