Privacy Policy
Last updated: April 21, 2026
1. Our commitment to your privacy
Serif Biomedicines, Inc. (“Serif”) recognizes that your privacy is very important to you and we are committed to protecting your (“your,” “you”) Personal Data.
“Personal Data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
This privacy policy (“Privacy Policy”) describes the Personal Data that Serif or its service providers collect, how it is processed as well as the purposes for such processing. This Privacy Policy applies to Personal Data we receive and handle about participants in connection with:
The Services may be made available to you through any of the existing and future electronic systems, APIs, SMS platforms and other platforms (collectively, the “Systems”).
- Your use of this website and mobile applications (collectively, our “Site”);
- Communication with Serif;
- Marketing messages;
- Recruitment processes;
- Your use of Serif Services;
- Ability to connect with Serif representatives or advisors;
- Use of the APIs, SMS and other platforms through which Serif makes the Services available.
By providing Personal Data, using our Site, or accessing Systems and/or Services, you agree to be bound by the terms of this Privacy Policy.
A separate policy applies to the collection and use of Personal Data of Serif employees, contractors and other staff.
2. The kinds of information that we collect and process
The kinds of Personal Data we collect and process, by or on behalf of us, include:
Contact Information: such as: your name, address, email address, telephone number,
Personal Details Information: such as: your name, date of birth, social security number, employer, profession and job title.
Technical Information: such as: technical data collected about your interaction with our websites, mobile applications and email communications including IP address; log files; unique device identifiers; pages viewed; date and time of access; content of request; username; encrypted authentication information; usage data; device type; browser type and settings; language settings; aggregate statistical information; transferred volume of data; and website requesting access.
Location Information: such as location data.
Marketing Data: such as certain: cookie data; browsing history; advertising interests; responses to direct marketing and opt-outs from direct marketing.
You can choose not to provide your Personal Data to us, but generally the information we request from you is required in order for us to provide you the goods and services we offer.
3. How we collect Personal Data
Generally, we collect Personal Data from:
Direct Interactions: such as when you contact us, inquire about our products or Services, and/or participate in surveys or questionnaires.
Mobile Applications: such as when you download or use one of our apps. Some apps may have specific privacy statements that include more specific information that you should review. Section 18 contains additional app specific terms.
Cookies and Automated Technologies: such as when you visit or interact with our Site or click on links on emails or text messages.
Public Sources: such as when we need to collect Personal Data from publicly available sources including, land registries and government agencies.
Social Media: such as Personal Data that you make available by linking to social media platforms using social media plug-ins, or your social media profile(s).
Products and Services: such as when you provide us with information in connection with our products and Services, as well as information gathered through our Services.
Private Third-Party Sources: such as when third parties provide information to us.
4. Cookies
With regard to Site use, components of our Site may use “cookies” (these are small text files that are stored on your local browser by some websites to identify you and your web use patterns and/or store stateful information) to enhance or personalize your use of our Site. Cookies allow for the collection of information such as:
- browser type;
- time spent on our Site;
- pages visited;
- language preferences
- Improve the functionality of our Site;
- Process your purchase orders;
- Display information more effectively;
- Personalize your experience while using our Site;
- Gather information of how our Site is used and compile anonymous and aggregate statistics.
These cookies may also be used to collect and store information about your usage of certain components of our Site. We may use third-party advertising platforms (e.g., Google Ads, Meta/Facebook, LinkedIn) to deliver targeted advertising, and that these platforms may collect or receive information (such as cookie data or hashed contact details) to help serve relevant ads. We or our service providers may in any case collect anonymous information that allows us to review information about the date, time and duration of visits to our Site (including components of our Site) without identifying you.
Pixel tags, web beacons, clear GIFs, or other similar technologies may be used in connection with our Site to track the way you use our Site and to compile statistics about site usage and response rates. This information is generally automatically provided to us by your web browser.
You may choose to refuse cookies by turning them off in the browser; however, if you do not accept them, you may experience some difficulty in your use of certain components of our Site.
We may use cookies to:
- Process your purchase orders;
- Display information more effectively;
- Personalize your experience while using our Site;
- Gather information of how our Site is used and compile anonymous and aggregate statistics.
5. How we use Personal Data
The primary purpose(s) we collect your Personal Data is to:
- verify your identity;
- respond to your queries;
- maintain our relationship with you;
- provide our products and Services to you;
- send you statements and invoices;
- collect payments from you;
- provide you with information about our products and Services;
- update you on changes to our Services terms, conditions, policies and other administrative information;
- conduct research for our own internal purposes;
- enable the creation of offers and acceptances to the extent applicable;
- send you communications and contact you about our goods and Services, programs, events, campaigns, functions or news updates that may be relevant or of interest to you; and
- administering, maintaining and monitoring Site performance and usage.
You agree that we may use your Personal Data for any of these purposes.
6. Legal basis for Processing Personal Data
The legal basis for processing your Personal Data in connection with the purposes may, depending on the circumstances, rely on any of the following legal bases:
- The processing is necessary in connection with a contract entered into with you, or for your benefit;
- We or a partner has obtained your prior written consent to the processing;
- The processing is required by laws, statutes or regulations applicable to us;
- We have a legitimate interest in carrying out the processing (including our legitimate interest in providing goods and Services to you, maintaining or improving our products or Services, operating our business, alerting you to other products or services that may be of interest to you) and there is no undue risk to your right, freedoms or interests;
- The processing is necessary to protect the vital interests of any individual; and
- Any other lawful basis.
7. The circumstances in which we may disclose Personal Data
We may disclose your Personal Data to third-parties to the extent that we are required to do so by law, including in connection with any legal proceedings, anticipated legal proceedings or regulatory administrative matters, or in order to comply with any legal obligation, or to establish, exercise or defend our legal rights or in response to a request from law enforcement or governmental agencies. We may sell, transfer, or otherwise disclose our database of Personal Data to an actual or potential successor entity, purchaser, or investor in connection with a corporate merger, consolidation, sale of our assets or a substantial part of our assets, share sale, investment transaction or other corporate rearrangement.
If you make a payment via our Site or one of our apps or directly to us or one of our service providers your Personal Data may need to be provided to third parties for the purpose of processing such payments.
You agree that we may disclose your Personal Data in any of the circumstances described in this policy. We disclaim all liability for any privacy breaches by third parties to whom we have disclosed your Personal Data in accordance with this policy.
Serif will assure that any third-party service provider that Serif shares or discloses information with will legally be required to provide the same or equal protection of user data as provided by Serif.
You may withdraw your consent to use or disclose your Personal Data at any time. To withdraw this consent please contact us at the details below. Please note that withdrawing your consent may mean that we are unable to provide you with any services. If you withdraw your consent, this will not affect the lawfulness of processing of Personal Data collected prior to your withdrawing consent.
All Other Personal Data
So that we may use your information for the purposes identified above (see Section 5), we may disclose it to external providers of services, for example, without limitation, entities providing validation services, crop analysis, providers of security, marketing and IT services. We may also outsource certain functions of our business.
We may disclose Personal Data to related entities for the purposes identified above (see Section 5). You may receive communications directly from these entities in order that you may receive information about products, services and/or event that may be of interest to you. These communications may include information and marketing communications about their products and services. We use reasonable efforts to ensure that these companies do not breach any U.S. laws, however, we disclaim all liability for any unlawful use of your Personal Data by an affiliated or associated company.
8. Security of your Personal Data
Once in our possession, we take all reasonable precautions to protect the personal and credit information we hold about you from misuse, interference and loss and unauthorized access, modification or disclosure.
We will use reasonable efforts to provide a secure online environment, there are inherent risks associated with the transmission of information via the internet and no data transmission over the internet can be guaranteed to be completely secure. We therefore cannot warrant the security of any information you provide to us over the internet and you do so at your own risk.
We encourage you to play an important role in keeping your Personal Data secure, by maintaining the confidentiality of any passwords and account details used on our Site. It is your sole responsibility to maintain such confidentiality and we will not be liable for any damage, loss or expense suffered due to such disclosure.
Serif processes Personal Data in a manner that ensures appropriate security of the Personal Data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.
9. Third parties
With regard to your use of certain components of the Site, certain components of our Site may contain links to third party websites and social media features that are hosted by a third party. Our Site may include embedded third-party content (including without limitation iframes, widgets, and forms) which may collect Personal Data; such collection is governed by the third party’s privacy policies. Links to other websites do not constitute sponsorship, endorsement or approval of the information found on those websites. You should evaluate the accuracy, relevance and suitability for your purposes of any such information. We are not responsible for the privacy policies or practices of third-party websites, and your interactions with any third-party features are governed by the privacy policies and practices of the hosting entities.
10. Access to and correction of your information
We aim to ensure that your personal information is accurate, complete and up to date. To assist us, please contact us via the details below if any of your details provided have changed or if you believe that the information we hold is inaccurate. If you are located in a jurisdiction that provides additional privacy rights (including the EEA, UK, Switzerland, California, or other U.S. states with comprehensive privacy laws), please refer to the applicable jurisdiction-specific sections of this Privacy Policy for a description of your rights.
You may request us to provide you with access to the personal information we hold about you at any time. We will respond to your access request as soon as possible, however, prior to disclosing any such information it may be necessary for you to satisfactorily verify your identity.
There are exceptional circumstances where access to or correction of your personal information may be refused by us such as where access would be unlawful. We will advise you of such circumstances if they arise.
11. How You Can Manage Your Privacy
You may limit the collection of certain website information by deleting or disabling cookies. Most internet browsers enable you to erase stored cookies, block cookies, or receive a warning before a cookie is stored. Disabling cookies may prevent you from using specific features on our Site or other websites, such as ordering products or Services and maintaining an online account.
Please note that many opt outs use browser cookies or device controls and are specific to the device, or browser, you are using. If you buy a new computer, change web browsers or devices, or delete the cookies on your computer, you may need to opt out again.
You may request deletion of your Personal Data collected by Serif by contacting Serif as set forth in the contact section. Use of your Personal Data such as your name and contact details are necessary to process and respond to your request. We may require you to sign in to your account and, in some cases, provide additional information to verify your identity. Verification data is only used for identity verification, and it is not retained longer than necessary. In certain circumstances, we may decline or limit a request, for example where required by law, where necessary for fraud prevention or security or legal proceedings, or where the request is extremely impractical or unreasonable. When data is deleted, we follow processes designed to remove it from our systems or de-identify it so that it can no longer reasonably be linked to an individual. Deletion from backup or archival systems may take additional time.
12. Privacy of Children
We do not knowingly intend to collect information from or direct Serif Services to children age 13 and under. If Serif learns that information has been received from a child under 13, then Serif will delete such information.
13. Retention of Information
Serif retains your Personal Data only for the period necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or allowed by law or to otherwise fulfill a legal obligation. For the purpose of business continuity, Serif backs up your data within the Serif infrastructure. As soon as these retention periods are complete, the data will be deleted or properly anonymized in order that you may no longer be identified from it.
14. Marketing
Serif may contact you by phone, email, text or via other electronic communication to provide you with marketing information and materials about Serif products or services that may be on interest to you. If you do not wish to receive such communications, you may contact Serif or, as applicable, follow the unsubscribe options provided in the electronic marketing communications.
15. Privacy Policy Updates
From time to time, we may change and post revisions to this Privacy Policy and such changes to this Privacy Policy will become effective upon the posting of the revised Privacy Policy on our Site. Your use of our Site following these changes means that you accept the revised Privacy Policy.
16. California Resident Users
If Serif performs business in the State of California, California residents have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and may: request (a) information pertaining to the categories and specific pieces of Personal Data about you that Serif collects, uses and discloses; (b) deletion of your Personal Data collected by Serif; © correction of inaccurate Personal Data that Serif maintains about you; and (d) that Serif opt you out of the sale or sharing of your Personal Data, if applicable. You may exercise these rights by contacting Serif as set forth in the contact section. Your exercise of these rights will not result in discriminatory treatment or a lower quality of service to you. Serif does not sell or share (as those terms are defined under the California Consumer Privacy Act) the personal information of California residents.
17. Connecticut Users
If Serif performs business in the state of Connecticut:
- Serif shall not print your Social Security number on any card required for you to access products or Services;
- Serif shall not transmit your Social Security number over the Internet, unless the connection is secure or the Social Security number is encrypted; or
Serif shall not require you to use your Social Security number to access an Internet web site, unless a password or unique personal identification number or another authentication device is also required to access the Internet web site.
18. Additional U.S. State Privacy Rights
Residents of states with comprehensive privacy laws, including but not limited to Virginia, Colorado, Texas, Oregon, and Montana, may have the following rights under applicable law:
- Right to Know and Access: You may request confirmation of whether Serif processes your Personal Data and request access to such data.
- Right to Correct: You may request correction of inaccurate Personal Data.
- Right to Delete: You may request deletion of your Personal Data, subject to certain exceptions.
- Right to Data Portability: You may request a copy of your Personal Data in a portable and readily usable format.
- Right to Opt Out: You may opt out of (i) the sale of your Personal Data, (ii) targeted advertising based on your Personal Data, and (iii) profiling in furtherance of decisions that produce legal or similarly significant effects.
- Right to Appeal: If Serif denies your privacy request, you have the right to appeal that decision. To submit an appeal, contact Serif as set forth in the contact section and specify the basis for your appeal. Serif will respond to your appeal within the timeframe required by applicable law. If your appeal is denied, you may contact your state attorney general to submit a complaint.
To exercise any of these rights, please contact Serif as set forth in the contact section. Serif will respond to your request within the timeframe required by applicable law. Serif will not discriminate against you for exercising your privacy rights.
19. Rights of Individuals in the European Economic Area, United Kingdom and Switzerland
If you are located in the European Economic Area (“EEA”), the United Kingdom (“UK”) or Switzerland, you have certain rights under applicable data protection laws, including the General Data Protection Regulation (“GDPR”) and the UK GDPR. These rights include:
- Right of Access: You may request confirmation of whether Serif processes your Personal Data and, if so, request a copy of such data.
- Right to Rectification: You may request that Serif correct any inaccurate or incomplete Personal Data we hold about you.
- Right to Erasure: You may request that Serif delete your Personal Data, subject to certain exceptions permitted by law.
- Right to Restriction of Processing: You may request that Serif restrict the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or object to our processing.
- Right to Data Portability: Where processing is based on your consent or a contract and is carried out by automated means, you may request that Serif provide your Personal Data in a structured, commonly used and machine-readable format, or transmit it directly to another controller where technically feasible.
- Right to Object: You may object to the processing of your Personal Data where Serif relies on legitimate interests as the legal basis for processing. Serif will cease processing unless it demonstrates compelling legitimate grounds that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defense of legal claims. You have the right to object to direct marketing at any time, and Serif will cease processing your Personal Data for such purposes upon receipt of your objection.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal.
- Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority if you believe that Serif’s processing of your Personal Data violates applicable law.
To exercise any of these rights, please contact Serif as set forth in the contact section. Serif will respond to your request within the timeframes required by applicable law. Serif may require you to verify your identity before processing your request.
20. Contact Us
If you have any questions or complaints about this Privacy Policy or our treatment of your personal information, or if you would like to access or amend your Personal Data, please contact us:
Serif Biomedicines, Inc.
124 First Street
Suite 402
Cambridge, MA 02141
info@serifbiomedicines.com
You also have the right to lodge a complaint with your local data protection supervisory authority.
This policy will be reviewed from time to time to take account of new laws and/or changes to our operations. Any information we hold about you will be governed by our most current policy. We recommend that you periodically review this policy for any changes.