Company: TVRD
Filing Date: 2025-10-20
Form Type: S-1/A
Source: 0001104659-25-100896
Chunk: 114

Company: Tvardi Therapeutics, Inc.
Filing Date: 2025-10-20
Form: S-1/A
Chunk 114
---
 also be contractually required to indemnify and hold harmless third parties from the costs or consequences of non-compliance with any laws, rules and regulations or other legal obligations relating to privacy or any inadvertent or unauthorized use or disclosure of data that the Company stores or handles as part of operating its business. Any of these events could adversely affect the Company’s reputation, business, or financial condition, including but not limited to: loss of customers; interruptions or stoppages in its business operations (including clinical trials); inability to process personal information or to operate in certain jurisdictions; limited ability to develop or commercialize its products; expenditure of time and resources to defend any claim or inquiry; adverse publicity; or substantial changes to its business model or operations.

The Company cannot be certain that its CROs, CMOs or other third-parties with access to its or its suppliers’, manufacturers’, clinical trial participants’ and employees’ sensitive information in relation to which the Company is responsible will not breach contractual obligations imposed by the Company, or that they will not experience data security incidents, which could have a corresponding effect on its business, including putting the Company in breach of its obligations under privacy laws and regulations and/or which could in turn adversely affect its business, financial condition, results of operations and prospects. The Company cannot be certain that its contractual measures and its own privacy and security-related safeguards will protect the Company from the risks associated with the third-party processing of such information. Any of the foregoing could adversely affect its business, financial condition, results of operations and prospects.

The Company posts certain of its privacy policies which describe its practices concerning its collection, use, disclosure and other processing of the personal information. Although it endeavors to comply with its public statements and documentation, the Company may at times fail to do so or be perceived to have failed to do so. The Company’s publication of its privacy policies and other statements it publishes that provide promises and assurances about privacy and security can subject the Company to potential state and federal action if they are found to be deceptive, unfair or misrepresentative of its actual practices.

Any actual or perceived failure by the Company to comply with federal, state or foreign laws, rules or regulations, industry standards, contractual or other legal obligations relating to data privacy or security, or any actual, perceived or suspected cybersecurity incident, whether or not resulting in unauthorized access to, or acquisition, release or transfer of personal information or other data, may result in enforcement actions and prosecutions, private litigation, significant fines, penalties and censure, claims for damages by customers