Last updated: 22 October 2024

Our Policy

Welcome to the web site of Boundless Bio, Inc. (“Boundless Bio, Inc.”, “we”, “us” and/or “our”). This web site at www.boundlessbio.com and other websites operated by Boundless Bio, Inc. (collectively “Website”) have been created to provide information about our company to our visitors (“you” or “your”). This Privacy Policy provides information about how Boundless Bio, Inc. collects, uses, shares and safeguards personally identifiable data (“Personal Data”), and information about your rights and choices regarding our processing of your Personal Data. Please review this document carefully, as our processing of your Personal Data is subject to this Privacy Policy. 

Information We Collect

When you interact with us, we may collect Personal Data and other information from you, as further described below:

Personal Data That You Provide 

We collect Personal Data from you when you voluntarily provide such information, such as your name, address, telephone number, or email address when you contact us with inquiries, correspond with us, respond to one of our surveys, or use certain portions of the Website. Healthcare professionals may choose to provide us with information relating to their specialties, and professional status and affiliations. We may combine Personal Data we have about you with information obtained from public sources. Wherever Boundless Bio, Inc. collects Personal Data we make an effort to provide a link to this Privacy Policy. 

This Privacy Policy does not cover any information collected during clinical trials or other research endeavors that Boundless Bio, Inc. participates in, sponsors, or is affiliated with. For information about clinical trials, refer to the Information and Consent form for that trial or study. Please note that if you provide Personal Data to Boundless Bio, Inc. through a sign-up form and indicate that you wish to learn more about a clinical trial, we intend to share this information with clinical trial sites conducting trials so that they may contact you about the possibility of your enrolling in one or more trials.

This Privacy Policy also does not apply to Personal Data relating to employees, job applicants, and contractors, who will be provided a separate Privacy Statement from Boundless Bio, Inc. where required by law.

By voluntarily providing us with Personal Data, you are consenting to our collection, use and sharing of it in accordance with this Privacy Policy, subject to your rights and our obligations under applicable law. If you provide us with any Personal Data relating to other people, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy.

If you provide Personal Data to us, you acknowledge and agree that such Personal Data may be transferred from your current location to the offices and servers of Boundless Bio, Inc. and the authorized third parties referred to herein located in the United States. 

Information Collected from Website Use & Navigation

We collect information when you use and navigate the Website or interact with our emails, such as the URL of the site you came from, the browser software you use, your Internet Protocol (IP) address, date/time of access, data transferred, pages visited, amount of time you spend on the Website, information about transactions conducted on the Website, and other “clickstream” data. This data is generated and collected automatically, as part of the standard operation of the Website. Boundless Bio, Inc. may store such information itself or such information may be included in databases owned and maintained by Boundless Bio, Inc. affiliates, agents or service providers. We may use such information and pool it with other information to track, for example, the total number of visitors to our Website, the number of visitors to each page of our Website, and the domain names of our visitors’ Internet service providers.

Cookies 

In operating the Website, we may use a technology called “cookies.” A cookie is a piece of information that the computer that hosts our Website gives to your browser when you access the Website. We use cookies, web beacons, tracking pixels, and similar technologies to save your preferences, improve your site experience, and collect information when you use and navigate our sites or interact with emails from us. For instance, our Website may set a cookie on your browser that allows you to access the Website without needing to remember and then enter a password more than once during a visit to the Website. Tracking pixels are transparent graphic images, sometimes called web beacons or tracking beacons, that are placed on a web page or in an email to indicate that the page or email has been viewed. Pixels collect information about your browser or device and can also set cookies. 

Many browsers and devices accept cookies until you change your settings. On most web browsers, you will find a “help” section on the toolbar. Please refer to the help section for information on how to receive notification when you are receiving a new cookie and how to turn cookies and other tracking technologies off. You can learn more about cookies by visiting www.allaboutcookies.org, which includes additional useful information on how to block cookies using different types of browsers. We recommend that you leave cookies turned on because they allow you to take advantage of some of our features. If you access the Website using a mobile device, the device ID or IP address may be recorded and used for purposes similar to those of cookies.

Our Website uses Google Analytics, a web analytics service provided by Google, Inc. Google Analytics may collect information about your use of the sites, including your IP address. Google uses cookies to provide information about visits to our sites, including number of visitors, the websites from which visitors have navigated to our sites, and the pages on our sites to which visitors navigate. More information on Google Analytics can be found at the following link: www.google.com/policies/privacy/partners/

Our Website may use social media platform features, such as LinkedIn and the Facebook “like” button, the “Tweet” button and other sharing widgets. These features, which are either hosted by the respective social media network or hosted directly on our Website, allow you to post information to your third-party social media profile page and share it with others in your network. When you click through social media features from particular websites (including ours), the social media network may receive information showing the websites you have visited. If you are logged in to your social media account, the social media network can link your visit to our sites and other websites with your social media profile, and may deliver advertisements or promotions about our products or services tailored to your interests. Your interactions with social media features are governed by the privacy policies of the companies providing these features.

Our Use of Your Personal Data and Other Information

Boundless Bio, Inc. uses the Personal Data you provide in a manner that is consistent with this Privacy Policy. This section describes the purposes for which we use the Personal Data we collect. Please note that there may be other uses, which we would describe to you when we collect the Personal Data.

Our Legitimate Business Interests

We process your Personal Data to pursue our legitimate business interests, including to:

• understand you and your preferences to enhance your experience and enjoyment using our Website;

• operate, maintain, and improve the content, design and navigation of our Website;

• respond to comments and questions, provide requested services and information, and otherwise communicate with you;

• develop and deliver products and services;

• send you information about our programs, offerings and company developments;

• provide you with information about our clinical trials and potential enrollment;

• study Website traffic patterns, detect and correct technical errors; and

• protect, investigate, and deter against fraudulent, unauthorized, or illegal activity, and comply with legal or regulatory obligations.

If you provide Personal Data for a certain reason, we may use the Personal Data in connection with the reason for which it was provided. For instance, if you contact us by email, we will use the Personal Data you provide to answer your question or resolve your problem. Also, if you provide Personal Data in order to obtain access to certain features, we will use your Personal Data to provide you with access to such features and to monitor your use of such features.

To the extent permitted by applicable law, we may combine the various types of data we collect. We use this combined information to identify, update, expand, and analyze business opportunities. Such analysis may be conducted through third party services, using anonymous data and aggregate statistics generated by our information collection. We may use aggregate and/or de-identified data about visitors to our Website for various business purposes, including development and improvement activities.

To contract with you

We may use your Personal Data to help us fulfill a contract with you, when you use our Website under the applicable Terms of Use, and for other contractual purposes. We may also use this information to enforce our rights arising from such contracts. 

Consent

We may use your Personal Data when we have your consent to do so, where required or permitted under applicable law. If we are using your Personal Data on the basis of consent, you may withdraw your consent at any time (which will not affect the lawfulness of the processing before consent was withdrawn, or as otherwise agreed in writing) by contacting us at privacy@boundlessbio.com. 

Compliance with Legal Obligations

We reserve the right to use your Personal Data (i) as required by law, court order, legal process or government or regulatory requirement; (ii) to respond to a request from public or government authorities; or (iii) to protect the safety, rights, or property of the public or Boundless Bio, Inc. 

Our Disclosure of Your Personal Data and Other Information

We do not rent, sell or otherwise transfer your Personal Data to a third party for monetary consideration. There are, however, certain circumstances in which we may share your Personal Data with certain third parties without further notice to you, as set forth below:

• Business Transfers: As we develop our business, we might sell or buy businesses or assets. In the event of a corporate sale, merger, reorganization, dissolution or similar event, Personal Data may be part of the transferred assets.

• Related Companies: We may also share your Personal Data with our subsidiaries and affiliates for purposes consistent with this Privacy Policy.

• Agents, Consultants and Related Third Parties: Boundless Bio, Inc., like many businesses, sometimes hires other companies to perform certain business-related functions. Examples of such functions include mailing information, maintaining databases and processing payments. When we employ another entity to perform a function of this nature, we only provide them with the information that they need to perform their specific function, and they may use Personal Data we provide to them only as instructed by us.

• Legal Requirements: Boundless Bio, Inc. may disclose your Personal Data if required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation or government or regulatory requirement, (ii) protect and defend the rights or property of Boundless Bio, Inc., (iii) act in urgent circumstances to protect the personal safety of our users, employees or the public, or (iv) protect against legal liability.

In addition, we may disclose information about you to a third party at your request, or if you consent to the disclosure. We may also disclose aggregate or de-identified data that is not personally identifiable to third parties for any purpose.

Your Privacy Choices 

You can always opt not to disclose information to us, but keep in mind some information may be needed to contact us or use some features on our Website. You may update your Personal Data and your preferences, or request that we delete your Personal Data, by contacting us as described below. Our response to such requests will be limited to information under our direct control. We will respond to your request in the time and manner required by applicable law. Please note that we may need to retain certain Personal Data for recordkeeping purposes and/or to fulfill any pending request.

You may update your communications preferences or unsubscribe from email communications at any time by following the unsubscribe instructions in our emails. We will comply with these requests unless such communications are required by law or contract, or do not require your consent under applicable laws.

Children

Our Website is not intended for use by children under age 18. Boundless Bio, Inc. does not knowingly collect Personal Data from children under the age of 18. If you are under the age of 18, you should obtain permission from a parent or guardian before using our Website, and please do not submit any Personal Data to us.

Parents and Guardians

We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce our Privacy Policy by instructing their children never to provide Personal Data to us without their permission. If you have reason to believe that a child under the age of 18 has provided Personal Data to Boundless Bio, Inc., please contact us, and we will endeavor to delete that information from our databases.

Links to Other Websites

This Privacy Policy applies only to websites owned or controlled by Boundless Bio, Inc. Our Website may contain links to other websites not operated or controlled by Boundless Bio, Inc. (the “Third-Party Websites”). The policies and procedures we described here do not apply to the Third-Party Websites. Please be aware that we are not responsible for the privacy policies of such Third-Party Websites or how they operate or treat your Personal Data. Any links from our Website do not imply that Boundless Bio, Inc. endorses or has reviewed the Third-Party Websites. We suggest contacting those sites directly for information on their privacy policies.

Security

Boundless Bio, Inc. takes reasonable steps to protect Personal Data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. In particular, email sent to or from us may not be secure. Therefore, you should take special care in deciding what information you send to us via email. DO NOT SEND INFORMATION RELATING TO YOUR MEDICAL CONDITIONS OR THOSE OF A FAMILY MEMBER OR ANY OTHER SPECIFIC PERSONAL HEALTH INFORMATION VIA OUR WEBSITE, AS WE CANNOT BE RESPONSIBLE FOR PERSONAL HEALTH INFORMATION SENT THROUGH OUR WEBSITE. Please keep this in mind when disclosing any Personal Data to Boundless Bio, Inc. via the Internet.

Data Retention and Access 

We retain Personal Data for as long as needed or permitted in light of the purpose(s) for which it was obtained and as outlined in this Privacy Policy. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you; (ii) whether there is an applicable legal obligation; or (iii) whether retention is advisable to enforce our agreements, satisfy applicable statutes of limitations, resolve disputes, or manage litigation or regulatory investigations.

International Data Transfers and Processing

Any Personal Data you provide to Boundless Bio, Inc., and any Personal Data that we share with affiliates, agents, vendors and service providers, may be stored and processed, transferred between and accessed from the United States and other countries, which may not guarantee the same level of protection of Personal Data as the country in which you reside. However, we will handle Personal Data in accordance with this Privacy Policy, and in compliance with applicable law.

Location-Specific Policies

Information for European, United Kingdom and Swiss Residents 

If you are in the European Economic Area, United Kingdom, or Switzerland, your Personal Data may be protected by the European Union General Data Protection Regulation, United Kingdom Data Protection Act, or the Swiss Federal Act on Data Protection (collectively, “European Privacy Laws”). If your Personal Data is protected by the European Privacy Laws, you are entitled to certain rights related to your Personal Data. You have the right to access the Personal Data we have collected about you, the right to correct any inaccurate Personal Data we may have collected about you, and the right to supplement any incomplete Personal Data we may have collected from you. In certain circumstances, you have the right to the deletion or removal of your Personal Data, the right to restrict the processing of your Personal Data, the right to obtain and transmit your Personal Data to a third party, and the right to object to the way your Personal Data is being used (including when your Personal Data is processed for direct marketing purposes, or when your Personal Data is processed based upon our legitimate interests).

If you wish to exercise these data privacy rights, or if you have questions or concerns about how we use your Personal Data, please contact us at privacy@boundlessbio.com and we will make efforts to respond to and/or resolve any issues consistent with applicable law. For your protection, when you seek to exercise the rights described above, it will be necessary for us to verify your identity or authority to make the request and confirm that the Personal Data relates to you. 

If we are using your Personal Data based on your consent, you may withdraw this consent at any time. Your withdrawal of consent does not impact the lawfulness of our processing up to the point of consent withdrawal, or as otherwise agreed in writing.

Please note that there are exceptions to the various rights listed above. As an example, in the context of a deletion request, in certain circumstances we may have a legal obligation to retain some of your Personal Data.

Our Data Protection Representative for purposes of compliance with the European Privacy Laws is Medpace Spain SL. If you want to raise a question or concern with Boundless Bio, Inc. or otherwise exercise your rights with respect to your Personal Data, you may contact Medpace Spain SL at Paseo de la Castellana, numero 259C, planta 14 Madrid, 28046, or by telephone at 34-(0)-91-790-0565.

If you have a data privacy or data use concern that you feel has not been fully addressed, you also have the right to lodge a complaint regarding use of your Personal Data with the applicable data protection authority. A list of the European Union data protection regulatory authorities can be accessed here: https://edpb.europa.eu/about-edpb/board/members_en. The data protection authority for the United Kingdom can be reached via the following link: https://ico.org.uk. The Swiss data protection authority can be reached at: https://www.edoeb.admin.ch/edoeb/en/home.html

Other Terms and Conditions

Your access to and use of the Website is subject to the Terms of Use at www.boundlessbio.com/terms-of-use.

Changes to Boundless Bio, Inc.’s Privacy Policy

Our business may change from time to time. As a result, at times it may be necessary for Boundless Bio, Inc. to make changes to this Privacy Policy. Boundless Bio, Inc. reserves the right to update or modify this Privacy Policy at any time and from time to time without prior notice. Changes to the Privacy Policy will become effective when posted on the Website. Please review this Privacy Policy periodically, and especially before you provide any Personal Data. This Privacy Policy was last updated on the date indicated above. Your continued use of the Website after any changes or revisions to this Privacy Policy shall indicate your agreement with the terms of such revised Privacy Policy.

Access to Information; Contacting Boundless Bio, Inc. 

To keep your Personal Data accurate, current, and complete, please contact us as specified below. We will take reasonable steps to update or correct Personal Data in our possession that you have previously submitted to us.

Please also feel free to contact us if you have any questions about Boundless Bio, Inc.’s Privacy Policy or our information practices.

You may contact us as follows:

9880 Campus Point Drive, Ste. 120, San Diego, CA 92121 or privacy@boundlessbio.com.