Privacy Statement

Valorum Biologics, LLC respects your privacy. This Privacy Statement explains what information we collect when you interact with us, why we collect it, how we use and share it, and the choices you have.

Last updated: May 21, 2026 | Effective: May 21, 2026

This Privacy Statement (the "Statement") describes how Valorum Biologics, LLC and its affiliates (collectively, "Valorum," "we," "us," or "our") collect, use, disclose, and protect personal information when you visit valorum.bio and any related Valorum-operated websites, microsites, or digital services that link to this Statement (collectively, the "Site"), and when you otherwise interact with us as a healthcare professional, patient, caregiver, business partner, investor, job applicant, or member of the public.

Valorum is focused exclusively on the regulatory approval, launch, and commercialization of biosimilar medicines in the United States. This means we routinely interact with healthcare professionals, specialty pharmacies, payers, group purchasing organizations, distributors, and patients, and our information-handling practices reflect that context. This Statement describes those practices and explains the choices and rights available to you.

By using the Site or providing personal information to Valorum, you acknowledge that you have read and understood this Statement.

01 Scope of this statement

This Statement applies to personal information Valorum collects through the Site and through related interactions, including business meetings, conferences, scientific exchanges, vendor relationships, and recruiting. It does not apply to:

information governed by separate clinical-trial informed-consent documents, which describe how information collected during a clinical trial is handled;
protected health information ("PHI") that Valorum may receive from a covered entity in a limited capacity under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), which is governed by HIPAA and any applicable business associate agreement (see Section 18); or
websites or services operated by third parties, even if linked from the Site (see Section 20).

02 Information we collect

The categories of personal information we collect depend on how you interact with us:

CATEGORY	EXAMPLES
Identifiers & contact information	Name, postal address, email address, telephone number, professional credentials, NPI number (for healthcare professionals), employer, job title.
Professional information	Specialty, institution, areas of clinical or research interest, publications, business or consulting relationships with Valorum, payment information for fee-for-service engagements.
Investor & partner information	Investor or partner contact details, organization, role, and information you provide in due diligence and business development communications.
Recruiting information	Information you provide as a job applicant, including résumé/CV, work history, education, references, and information collected during the interview process.
Inquiry & correspondence content	Information contained in messages you send us, including medical information voluntarily provided in a medical-information inquiry or adverse-event report.
Device & usage information	IP address, device identifier, browser type, operating system, referring URL, pages visited, time spent on pages, links clicked, approximate geolocation derived from IP address, and similar analytics data.
Cookies & similar technologies	Cookies, pixel tags, and similar tracking technologies as described in Section 6.

We do not seek to collect "sensitive personal information" (as defined under U.S. state privacy laws) through the Site. If you voluntarily provide such information — for example, in a medical-information inquiry — we will handle it consistently with this Statement and applicable law.

03 How we collect information

We collect personal information from the following sources:

Directly from you, when you contact us, complete a form on the Site, attend an event, engage in a business or consulting relationship with us, or apply for a position;
Automatically, when you interact with the Site, through cookies, server logs, and similar technologies;
From service providers, including web analytics, hosting, communications, recruiting, and marketing-technology providers; and
From third-party and public sources, including data brokers, professional directories, publication databases, governmental and regulatory disclosure systems (e.g., Open Payments / Sunshine Act), social-media platforms, and conference registration lists.

04 How we use information

We use the information we collect for the following purposes:

Operate the Site — to provide, maintain, secure, and improve the Site and our digital services;
Communicate with you — to respond to your inquiries, provide medical information, and send you administrative communications;
Business development & partnerships — to evaluate, enter into, and manage licensing, supply, distribution, and other commercial relationships;
Healthcare professional engagement — to identify and engage qualified healthcare professionals as described in Section 14, in compliance with applicable laws;
Recruiting — to evaluate job applicants and manage employment relationships;
Pharmacovigilance & product quality — to receive, investigate, and report suspected adverse events and product-quality complaints, as required by law (see Section 17);
Analytics — to understand how users interact with the Site and improve content and design;
Marketing & outreach — to send communications about Valorum, its products, and its activities, where permitted by law and consistent with your preferences;
Compliance, legal, and safety — to comply with applicable laws and regulatory obligations, including FDA, OIG, and state requirements; to enforce our Terms of Use; to detect and prevent fraud, abuse, and security incidents; and to establish, exercise, or defend legal claims.

05 How we share information

Valorum does not sell personal information for monetary consideration. We may share personal information with the following categories of recipients:

Affiliates & subsidiaries of Valorum, for the purposes described in this Statement;
Service providers who perform services on our behalf — for example, hosting, IT support, analytics, marketing, recruiting, payment processing, regulatory and compliance reporting, and professional advisors — under contractual obligations to protect the information;
Commercial partners, including licensors, manufacturers, distributors, and co-promotion partners, as necessary to manage and perform commercial arrangements;
Regulatory and government authorities, including the FDA, the Centers for Medicare & Medicaid Services (CMS), the Department of Health and Human Services (HHS), the Office of Inspector General (OIG), state attorneys general, and other authorities, where required by law (for example, Sunshine Act / Open Payments reporting and adverse-event reporting);
In a business transaction — in connection with a contemplated or completed merger, acquisition, financing, reorganization, or sale of all or part of Valorum’s business, in which case personal information may be transferred subject to appropriate confidentiality protections; and
To protect rights and safety, where we believe in good faith that disclosure is necessary to comply with a legal obligation, to enforce our agreements, or to protect the rights, property, or safety of Valorum, our personnel, our partners, or others.

For purposes of the California Consumer Privacy Act, as amended ("CCPA"), our disclosure of identifiers, internet activity, and similar information to analytics and advertising providers in connection with cookies and similar technologies may constitute "sharing" for cross-context behavioral advertising. See Section 11 for details and your opt-out rights.

06 Cookies & online tracking

Valorum uses cookies, pixel tags, web beacons, and similar technologies on the Site to operate the Site, remember your preferences, measure performance, and conduct analytics.

Strictly necessary cookies are required to operate the Site and cannot be switched off.
Performance & analytics cookies help us understand how visitors use the Site so we can improve it (for example, Google Analytics).
Functional cookies remember choices you make to provide enhanced features.
Marketing cookies, where used, help us deliver relevant communications and measure their effectiveness.

You can manage cookies through your browser settings and, where available, through our cookie preference tool on the Site. The Site responds to "Global Privacy Control" (GPC) signals from supported browsers as an opt-out of cross-context behavioral advertising and "sale" or "sharing" under applicable U.S. state laws.

07 Data security

Valorum maintains administrative, technical, and physical safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. No method of transmission over the internet or method of electronic storage is, however, completely secure, and we cannot guarantee absolute security.

08 Data retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. Retention periods vary based on the type of information, the nature of our relationship with you, and applicable legal requirements (for example, recordkeeping for pharmacovigilance and Sunshine Act reporting). When personal information is no longer required, we will securely delete or anonymize it.

09 International transfers

Valorum is headquartered in the United States, and our service providers and partners may be located in other countries. If you access the Site or otherwise provide personal information to Valorum from outside the United States, your information will be transferred to, and processed in, the United States, where data-protection laws may differ from those of your jurisdiction. Where required by applicable law (for example, for transfers from the European Economic Area or the United Kingdom), Valorum will implement appropriate safeguards, such as the Standard Contractual Clauses.

10 Your rights & choices

Depending on where you live, you may have certain rights with respect to your personal information:

Access — request a copy of the personal information we hold about you.
Correction — ask us to correct information that is inaccurate or incomplete.
Deletion — request that we delete personal information, subject to certain exceptions.
Portability — receive a copy of certain information in a portable, machine-readable format.
Opt-out — opt out of certain uses, including targeted advertising and "sale" or "sharing."
Marketing — unsubscribe from marketing emails at any time via the "unsubscribe" link.

To exercise any of these rights, contact us using the details in Section 22. We will verify your identity before responding, and we will not discriminate against you for exercising a privacy right. You may also designate an authorized agent to make a request on your behalf, subject to applicable verification requirements.

11 California residents

If you are a California resident, the CCPA provides you with additional rights regarding your personal information.

Categories collected and disclosed

In the preceding 12 months, Valorum has collected the categories of personal information described in Section 2. We have disclosed those categories to the recipients described in Section 5 for the business purposes described in Section 4. Valorum has not "sold" personal information for monetary consideration in the preceding 12 months. Valorum may "share" identifiers and internet activity for cross-context behavioral advertising as described in Section 6; you can opt out by adjusting cookie preferences on the Site or by sending a GPC signal.

Your California rights

California residents have the right to (i) know what personal information we collect, use, disclose, and share; (ii) request access to and deletion of personal information; (iii) correct inaccurate personal information; (iv) opt out of the "sale" or "sharing" of personal information; (v) limit the use of sensitive personal information; and (vi) be free from retaliation for exercising these rights.

"Shine the Light"

California Civil Code § 1798.83 permits California residents to request information about disclosure of personal information to third parties for those parties’ direct-marketing purposes. To make such a request, please contact us at privacy@valorum.bio.

12 Other U.S. state privacy rights

Residents of states with comprehensive privacy laws — including, without limitation, Colorado, Connecticut, Delaware, Indiana, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia — may have rights similar to those described in Section 10 with respect to their personal information. To exercise any of these rights, please contact us using the details in Section 22. You may also have the right to appeal a denial of a privacy request; instructions will be provided in our response.

13 EEA & UK residents

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the EU General Data Protection Regulation, UK GDPR, or Swiss data-protection law may apply. Valorum acts as the controller of personal information collected through the Site that is directed to residents of these regions.

The legal bases on which we rely include: (i) your consent; (ii) the performance of a contract with you; (iii) our compliance with a legal obligation; and (iv) our legitimate interests in operating, securing, and improving the Site and engaging with healthcare professionals, business partners, and the public, except where overridden by your fundamental rights.

You may have the right to access, rectify, erase, restrict, or object to the processing of your personal information; to data portability; and to lodge a complaint with your local supervisory authority. To exercise any of these rights, contact us at privacy@valorum.bio.

14 Healthcare professional engagement

Engagement with healthcare professionals ("HCPs") is central to the commercialization of biosimilar medicines. Valorum collects and uses HCP information — including name, professional credentials, National Provider Identifier (NPI), specialty, institution, contact details, prescribing patterns, and information regarding professional interests — to:

identify qualified HCPs for scientific exchange, medical-affairs interactions, advisory boards, speaker programs, and consulting engagements;
deliver educational information regarding biosimilars, including information on FDA-approved labeling, interchangeability designations (where applicable), and supportive scientific evidence;
execute and administer fee-for-service arrangements (including contracting, payment, and tax reporting); and
satisfy Valorum’s legal and reporting obligations, including reporting payments and other transfers of value to HCPs and teaching hospitals under the federal Physician Payments Sunshine Act ("Open Payments") and analogous state laws.

Information regarding payments and other transfers of value reported under Open Payments is publicly available through the Centers for Medicare & Medicaid Services. Valorum’s interactions with HCPs are conducted in accordance with applicable laws, including the federal Anti-Kickback Statute, the False Claims Act, the Prescription Drug Marketing Act ("PDMA"), the FDA’s guidance regarding promotional and scientific communications, and state pharmaceutical-compliance laws (including, where applicable, state restrictions on gifts to HCPs and state HCP-spend reporting requirements). HCP information may be obtained from the HCP directly, from third-party data sources (including the National Plan and Provider Enumeration System (NPPES), licensure databases, professional directories, publications, and HCP-data providers), and from our commercial partners. Valorum maintains an HCP master data set for the purposes described above and applies access controls and retention practices appropriate to its sensitivity.

15 Patient Support Programs

Valorum may make available — directly or through authorized third-party administrators, hub services, specialty pharmacies, or other partners — patient support services in connection with its biosimilar products, which may include co-pay assistance, reimbursement support, prior-authorization and appeals assistance, nursing support, injection or infusion support, adherence support, and patient education (collectively, "Patient Support Programs").

Patient Support Programs typically operate under separate, program-specific privacy notices, authorizations, and terms, which describe in detail the information collected, the purposes of processing, the parties involved, and the choices available to enrolled individuals. Patients should review the program-specific notice provided at enrollment.

What this Statement covers, and what it does not

This Statement applies only to information collected through the Site or through Valorum’s general business interactions. It does not govern:

protected health information ("PHI") collected by, or on behalf of, a Patient Support Program, which is handled in accordance with the program’s specific notices and authorizations and, where applicable, HIPAA and any applicable business associate agreement; or
information collected by a healthcare provider, pharmacy, or payer in connection with a patient’s treatment, payment, or healthcare operations, which is governed by that entity’s privacy notice and HIPAA.

Federal healthcare program restrictions

Co-pay assistance and other patient financial assistance offered under a Patient Support Program may be limited by federal and state law, including restrictions applicable to patients enrolled in Medicare (including Medicare Part D), Medicaid, TRICARE, the Veterans Administration, the Department of Defense, the Indian Health Service, and similar federal or state healthcare programs. Eligibility criteria are set forth in the program-specific terms.

Working with hub and pharmacy partners

Patient Support Programs are typically operated through one or more contracted third-party administrators ("hubs"), specialty pharmacies, and reimbursement-support vendors. Where Valorum receives information from these partners, Valorum receives it under written agreements that restrict use and disclosure to the purposes of the program. Valorum may receive aggregated or de-identified data, and (where lawful and consistent with the program’s notices and authorizations) limited individually identifiable information necessary to administer the program, monitor product safety, or comply with legal obligations.

16 Payer & specialty pharmacy data

The commercialization of biosimilar medicines depends on relationships with payers (including commercial health plans, pharmacy benefit managers, Medicare Part D plans, and state Medicaid programs), specialty pharmacies, distributors, group purchasing organizations ("GPOs"), integrated delivery networks, and data aggregators. In connection with these relationships, Valorum may receive or process the following types of information:

Prescription and dispense data sourced from specialty pharmacies, distributors, and data aggregators (for example, anonymized patient tokens, prescriber identifiers, product, quantity, dates of fill, and geographic information), which Valorum uses to understand market dynamics, measure commercial performance, support patient-program operations, and meet contractual reporting obligations;
Claims and reimbursement data in connection with payer contracting, rebate administration, formulary management, and government-price reporting (including data required under Medicaid Drug Rebate Program and Medicare reporting obligations);
Account-level information regarding institutional customers (such as hospitals, infusion centers, clinics, GPOs, and integrated delivery networks), including contacts, contracts, purchasing history, and 340B status where relevant; and
Aggregated or de-identified information derived from any of the above, used for analytics, business planning, and reporting.

Where the data Valorum receives includes individually identifiable information about prescribers or patients, Valorum receives it under contractual restrictions appropriate to the type of data, and Valorum applies access controls and use limitations consistent with applicable law (including HIPAA, where applicable to a data partner) and with the source provider’s authorizations and consents.

17 Adverse event reporting

If you report a suspected adverse event, product-quality complaint, or other safety information related to a Valorum product, Valorum is required by law to collect and process certain personal information about the patient and the reporter (such as initials, age, gender, and medical history) and to share that information with regulatory authorities (such as the FDA) and our pharmacovigilance partners for the purpose of monitoring product safety. We collect only the minimum information needed for these purposes and retain it for the period required by applicable law.

18 HIPAA & health information

Valorum is generally not a "covered entity" under HIPAA, and the Site is not intended to receive PHI. To the extent Valorum receives PHI from a covered entity in a limited capacity (for example, as a business associate), Valorum will handle that PHI in accordance with HIPAA and any applicable business associate agreement. Please do not submit PHI through the Site outside of a designated, authorized channel.

19 Children’s privacy

The Site is not directed to children under the age of thirteen (13), and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, please contact us at privacy@valorum.bio, and we will take appropriate steps to delete that information.

20 Third-party links

The Site may contain links to third-party websites and resources. Valorum is not responsible for the privacy practices or content of any third-party site. We encourage you to review the privacy statement of any site you visit.

21 Changes to this Statement

Valorum may update this Statement from time to time to reflect changes in our practices or applicable law. The most current version will always be posted on the Site, with the "Last updated" date noted at the top. Material changes may also be communicated by other reasonable means. We encourage you to review this Statement periodically.

22 Contact us

If you have questions about this Statement or our privacy practices, or if you wish to exercise any of your rights, please contact us at:

Valorum Biologics, LLC

Attn: Privacy Office
555 Madison Avenue, Suite 11D
New York, NY 10022
Email: privacy@valorum.bio