PRIVACY POLICY AND COOKIES

Revised November 25, 2025

Lytos Therapeutics ("Company" or "We") respect your privacy and are committed to protecting it by complying with this policy. This policy describes how we collect, use, disclose, and protect the personal information of our website users ("you") when you visit the website https://lytostx.com (our "Website").
Privacy laws in Canada generally define "personal information" as any information about an identifiable individual, which includes information that can be used on its own or with other information to identify, contact, or locate a single person.

Please read this policy carefully to understand our policies and practices for collecting, using, disclosing, and storing your information. If you do not agree with our policies and practices, your choice is not to use our Website. By accessing or using this Website, you indicate that you understand, accept, and consent to the practices described in this policy.

Information We Collect About You
We collect and use several types of information from and about you, including:

Personal information, that we can reasonably use to directly or indirectly identify you, such as your name, mailing address, e-mail address, telephone number, Internet protocol (IP) address used to connect your computer to the Internet, and any other identifier we may use to contact you ("personal information").
Non-personal information, that does not directly or indirectly reveal your identity or directly relate to an identifiable individual, such statistical or aggregated information. Statistical or aggregated data does not directly identify a specific person, but we may derive non-personal statistical or aggregated data from personal information. For example, we may aggregate personal information to calculate the percentage of users accessing a specific Website feature.
Technical information, including your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, or information about your internet connection, the equipment you use to access our Website, and usage details.
Non-personal details about your Website interactions, including the full Uniform Resource Locators (URLs), clickstream to, through and from our Website (including date and time), products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, or any phone number used to call our customer service number.

How We Collect Information About You
We use different methods to collect your information, including through:

Direct interactions with you when you provide it to us, for example, when you fill out information on the “Contact Us” part of our Website, or corresponding with us by email or otherwise.
Automated technologies or interactions, as you navigate through our Website. Information collected automatically may include usage details, IP addresses, and information collected through cookies, web beacons and other tracking technologies. We use essential cookies for Website functionality, as well as performance and analytics cookies from services such as Google Analytics. See below for more information on Google Analytics.

Information You Provide to Us
The information we collect directly from you on or through our Website may include information that you provide by filling in forms on our Website, or records and copies of your correspondence (including email addresses), if you contact us.

Information We Collect Through Cookies and Other Automatic Data Collection Technologies
As you navigate through and interact with our Website, we may use cookies or other automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

Details of your visits to our Website, including traffic data, logs, and other communication data and the resources that you access and use on the Website.
Information about your computer and internet connection, including your IP address, operating system, and browser type.

The information we collect automatically is statistical information and may include personal information and we may maintain it or associate it with personal information we collect in other ways or receive from third parties. It helps us to improve our Website and to deliver a better and more personalized service, including by enabling us to:

Estimate our audience size and usage patterns.
Store information about your preferences, allowing us to customize our Website according to your individual interests.
Speed up your searches.
Recognize you when you return to our Website.

The technologies we use for this automatic data collection may include:

Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Website.
Web Beacons . Pages of our Website may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).

Google Analytics
We use Google Analytics to collect information about how visitors use our Website. Google Analytics collects information such as how often users visit the Website, what pages they visit, and what other websites they used prior to coming to our Website. We use this information to understand and improve the performance of our Website and services.

Google Analytics collects only the IP address assigned to you on the date you visit the Website, along with information about your browser and device. We do not combine the information collected through Google Analytics with personally identifiable information.

Google’s ability to use and share information collected by Google Analytics about your visits is restricted by the Google Analytics Terms of Service and the Google Privacy Policy. You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-On.

How We Use Your Information
We use information that we collect about you or that you provide to us, including any personal information:

To present our Website and its contents to you.
To provide you with information that you request from us.
To fulfill the purposes for which you provided the information or that were described when it was collected, or any other purpose for which you provide it.
To carry out our obligations and enforce our rights arising from any contracts with you, including to comply with legal requirements.
To notify you about changes to our Website or any products or services we may offer or provide though it.
To improve our Website, products or services.
In any other way we may describe when you provide the information.
For any other reasonable purpose with your consent.

Disclosure Of Your Information
We may disclose aggregated information about our users without restriction, where such information does not include personal information. We may disclose personal information that we collect or you provide as described in this privacy policy:

To our subsidiaries and affiliates.
In accordance with applicable law, to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Lytos Therapeutics’ assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Lytos Therapeutics about our customers and users is among the assets transferred.
To contractors, service providers, and other third parties we use to support our business (such as analytics and search engine providers that assist us with Website improvement and optimization) and who are contractually obligated to keep personal information confidential, use it only for the purposes for which we disclose it to them, and to process the personal information with the same standards set out in this policy.
To fulfill the purpose for which you provide it.
For any other purpose disclosed by us when you provide the information.
With your consent

We may also disclose your personal information:

To comply with any court order, law, or legal process, including to respond to any government or regulatory request, in accordance with applicable law.
To enforce or apply our terms of use and other agreements.
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Lytos Therapeutics, our customers, or others.

Retention of Personal Information:
The personal information that you provide will be retained by us in accordance with applicable laws. However, we will take reasonable steps to destroy or permanently de-identify personal information we hold if it is no longer needed for the purposes for which it was collected.

Access and Correction:
We will take reasonable steps to ensure the personal information we hold is accurate, complete and up-to-date. Upon your written request, and subject to certain exceptions provided by law, we will inform you of the existence, use, and disclosure of your personal information and give you access to that information. We may charge a minimal fee for providing such access to you. If you believe that the personal information that we hold about you is not accurate or complete, you may write to us at info@lytostx.com. If you are able to establish that the information is not accurate or complete, we will take reasonable steps to delete and/or correct the information so that it is accurate, complete, and up-to-date. In order to facilitate a request to correct or update information, we may ask you to provide additional information to confirm your identity. Any such information will only be used for the purpose of confirming your identity and will not be retained by us.

Canada’s Anti Spam Law (“CASL”)
We will only send you commercial electronic messages (“CEMs”) where we have your express or implied consent to do so. Your consent to receive CEMs is implied where we have an existing business relationship with you, or you have reached out to us and made an inquiry within a certain time frame. You may unsubscribe from receiving CEMs at any time, by clicking the unsubscribe button on an email or following the direction provided in a text message.

Transferring Your Personal Information
Note that Personal information may be stored, accessed, used and otherwise processed inside and outside of Quebec and/or Canada. When Personal Information is located outside Quebec and/or Canada, it may be subject to laws that have different standards of protection and may allow for foreign law enforcement and governmental access.

Data Security
The security of your personal information is very important to us. We use physical, electronic, and administrative measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure.
Unfortunately, the transmission of information via the Internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.

Children Under The Age Of 13
Our Website is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at info@lytostx.com.

Withdrawing Your Consent
Where you have provided your consent to the collection, use, and transfer of your personal information, you may have the legal right to withdraw your consent under certain circumstances. To withdraw your consent, if applicable, contact us at info@lytostx.com. If you withdraw your consent (or if you decide not to provide certain personal information), you acknowledge that we may not be able to provide you, or continue to provide you, with certain products, services, or information that may be of value to you.

Changes To Our Privacy Policy
It is our policy to post any changes we make to our privacy policy on this page. If we make material changes to how we treat our users' personal information, we will notify you through a notice on the Website home page.

We include the date the privacy policy was last revised at the top of the page. You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you, and for periodically visiting our Website and this privacy policy to check for any changes.

Contact Information and Challenging Compliance
We welcome your questions, comments, and requests regarding this privacy policy and our privacy practices. Please contact us at: info@lytostx.com.

We have procedures in place to receive and respond to complaints or inquiries about our handling of personal information, our compliance with this policy, and with applicable privacy laws. To discuss our compliance with this policy please contact our Privacy Officer using the contact information listed above.