INVESTORS CONTACT US ABOUT US OUR SCIENCE OUR PIPELINE RESOURCES JOIN US PRIVACY POLICY Our Commitment To Privacy Our Privacy Policy was developed as an extension of our commitment to act with the highest level of integrity in dealing with our clients and partners. The Policy is designed to assist you in understanding how we collect, use and safeguard the personal information you provide to us and to assist you in making informed decisions when using our site and our products and services. This Privacy Policy explains how we use information collected from you if you browse our websites or otherwise provide your personal information to us in the course of our business. We may update this Policy, so we recommend that you review the terms periodically. Your continued use of our websites or providing your information to us after the changes are communicated constitutes acceptance of the revisions. As used in this Policy, “Personal Information” includes any information that, alone or in combination with other information processed by Palatin, is sufficient to identify or be associated with a specific individual or household, as well as other information defined as Personal Information by applicable law. Personal Information does not include information that is anonymous, nor does it include publicly available information that has not been combined with non-public Personal Information. Our Privacy Practices On This Website As a rule, the personal data processed by us is provided by you when using this website (the “Site”). The personal data we could collect or that you may provide through your use of the Site may include the following categories of data: Name; Contact details, such as email address, address and phone number; Information relating to customer relationship, such as billing information; Language preferences; and Customer interaction, customer contacts and replies, including the organization for which you work, when you provide details on the site or otherwise interact with the Site. We may also collect technical data on the use of the Site, which may be associated with you. The technical data we collect includes the following types of data: Time stamps and log data relating to the use of the Service; and Device ID, device type, operating system used and application settings. Similar to other commercial websites, our Site may use a standard technology called “cookies” and Web server logs to collect information about how our Site is used. Cookies are a feature of Web browser software that allows Web servers to recognize the computer used to access a website. Cookies are small pieces of data that are stored by a user’s Web browser on the user’s hard drive. Cookies can remember what information a user accesses on one Web page to simplify subsequent interactions with that website by the same user or to use the information to streamline the user’s transactions on related Web pages. This makes it easier for a user to move from Web page to Web page and to complete commercial transactions over the Internet. Cookies should make your online experience easier and more personalized. Information gathered through cookies and Web server logs may include the date and time of visits, the pages viewed, time spent at our Web site, and the Web sites visited just before and just after our Web site. We use software tools such as Web server logs to gather information about our Web site users’ browsing activities, in order to constantly improve our Web site and better serve our visitors. This information assists us in designing and arranging our Web pages in the most user-friendly manner and to continually improve our Web site to better meet the needs of our customers and prospective customers. Web server logs allow us to count how many people visit our Web site and evaluate our Web site’s visitor capacity. We do not use these technologies to capture your individual email address or any personally identifying information about you although they may permit us to send focused online banner advertisements or other such responses to you. We process personal data we obtain in connection with your use of this Site for the following additional purposes: Providing service and managing our relationship with you The primary purpose of collecting personal data is to manage and improve your experience with this Site and to manage and maintain the customer relationship between us and you or the company you represent. Marketing & data analytics We may communicate with you to inform you about new features of the Site, ask you for feedback, or provide you other relevant information about our products and services. We may use your information to deliver information to you that, in some cases, is targeted to your interests. We may ask you to provide us voluntarily with additional information regarding your personal or business interests, experience or requests, which we may use to customize our services for you. We also may use the data provided by you for analyzing and enhancing our advertising, marketing, market research, and sales activities. In this respect, processing of personal data is based on our legitimate interest to provide you relevant information regarding our products and services, as well as to develop future services. Service development and information security We also process personal data to ensure the security of the Site, to improve the quality of the Site and to develop new features of the Site. In these cases, the processing of personal data is our legitimate interest to ensure that our Site has an adequate level of data security, and that we have sufficient and relevant information at hand to develop our Service. Transfers and disclosures of personal data We may disclose personal data you provide through your use of the Site to third parties: when permitted or required by law, such as to comply with requests by competent authorities or related to legal proceedings; when our trusted services providers provide services to us on behalf of us and under our instructions. Palatin does not sell Personal Information you provide to or through this Site as “sell” is defined in applicable law; if we are involved in a merger, acquisition, or sale of all or a portion of our stock, assets, or business; and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government or court demand or request. Our General Privacy Practices Categories of Personal Information We Gather and Process In the course of our relationship with you, we may collect basic identification information, such as your name, title, position, company name, email and postal address, and your telephone or mobile phone number; financial information; information regarding the status of promotional and marketing efforts; data gathered through our products and services; and any additional information you voluntarily provide. Collection and Processing of PERSONAL INFORMATION Your PERSONAL INFORMATION may be collected whenever Palatin: interacts with individuals who are prospective and existing customers, suppliers, or service providers; interacts with individuals who are representatives or contact persons of prospective and existing customers, suppliers, or service providers that are legal entities; Obtains information as a result of our customers’ use of our products or services; or uses public databases to facilitate the provision of goods or services. We also gather health information in connection with clinical trials. We disclose to participants and potential participants information about how we gather, use, disclose, and store clinical trial information at the time of and in connection with the studies. When processing Personal Information, Palatin shall follow these principles: Notice and Consent Palatin endeavors to inform persons whose Personal Information Palatin collects, in accordance with applicable law. When you provide Personal Information to Palatin, you acknowledge that you have read this Policy and, where required under applicable law, consent to the collection, use and disclosure of your Personal Information in accordance with this Policy and other applicable Palatin privacy policies. You may, as provided by applicable law, be free to refuse or withdraw your consent. Palatin, and third parties on its behalf, use the Personal Information collected from you for purposes such as, but not limited to, user registration; product and service development and improvement; administering and tracking a purchase, payment, return, warranty, or rebate; arranging for services; inviting participation in online surveys; requesting feedback on products and services; and otherwise communicating with you through various channels. Disclosure and Transfer to Third Parties Palatin does not selling Personal Information to others as “sell” is defined by applicable law, but may share your Personal Information with our affiliates and with third-party service providers that perform services on Palatin’s behalf. Examples of these services include fulfilling orders; performing and reporting on clinical trials; obtaining regulatory approval for our products; sending postal mail and e-mail; analyzing data; assisting in the development and improvement of our products and services; complying with applicable laws, rules, regulations, and standards; providing marketing assistance; processing payments; providing customer service; requesting feedback on products and services; and sending you marketing and promotional materials, service updates and reminders. Palatin may buy or sell business operations, subsidiaries, or business units. In these types of transactions, Personal Information is generally one of the business assets that is transferred. That Personal Information remains subject to the obligations stated in any pre-existing Privacy Policy. In the event that Palatin or substantially all of its assets are acquired, Personal Information will be one of the transferred assets. Cross-Border Transfers Personal Information collected by or for Palatin in one country may be processed in another country, the laws of which may provide different levels of protection from those in the country where the Personal Information was first collected. Personal Information gathered in one country may be subject to access by and disclosure to law enforcement agencies of jurisdictions other than the country where the Personal Information was first collected. Palatin also may share Personal Information with organizations and entities that perform services on its behalf, and these organizations and entities may be located in countries other than the country in which the Personal Information was first collected Your California Rights If you are an individual residing in California, you may have additional rights with regard to the information we gather about you. Upon verifiable written request, we will provide to you information regarding the personal information we gather about you, the types of sources from which we obtain the information, the purposes for which the information is gathered, and the types of third parties with which we share or to whom (if any) we sell the information. In addition, upon verifiable request or when required or otherwise appropriate, and within periods (if any) set by applicable law, we will grant you reasonable access to the personally identifiable information that we hold about you provided that you establish to our reasonable satisfaction that you are the person whose personal information is requested. We may deny such access where the denial is permitted by applicable law and every request from an individual will be assessed on a case by case basis. In the event a request is denied, we will notify you regarding the reasons for the denial in writing. Consistent with how your personally identifiable information is maintained in the ordinary course of our business, we will provide the information in an understandable form, and to the extent feasible in a format that permits you to use the information on other systems. We may impose a reasonable charge when a request is made (e.g., for photocopying or postage) to the extent permitted under applicable law. In addition, we will take reasonable steps to permit you to correct or amend personally identifiable information that is demonstrated to be inaccurate or incomplete. We also will delete personal information we have gathered about you when you make a verifiable request that we do so, except to the extent applicable law permits or requires us to maintain that information. To guard against fraudulent requests for access, we will require sufficient information to allow us to confirm the identity of the individual making the request before granting access or deleting the information. We will not discriminate against consumers who exercise their rights under California law. However, we may charge different prices or provide a different quality of goods or services if the difference is reasonably related to the value provided by your personal information and may offer financial incentives to an individual for the collection, sale, or deletion of personal information if the individual provides its prior consent to the terms of those incentives. Residents of the State of California may request a list of all third parties to which we have disclosed certain personal information (as defined by California law) during the preceding year for those third parties’ direct marketing purposes. If you are a California resident and want such a list, please contact us via the Contact Us information provided below. For all requests, you must put the statement “Your California Privacy Rights” in the body of your request, as well as your name, street address, city, state, and zip code. In the body of your request, please provide enough information for us to determine if this applies to you. You need to attest to the fact that you are a California resident and provide a current California address for our response. Please note that we are not responsible for responding to notices that are not labelled or sent properly, or that do not have complete information. European Union (EU) Privacy Disclosure Palatin processes personal information in accordance with the legal bases set forth in the EU General Data Protection Regulation (GDPR) and EU Member State law. For example, our processing of Personal Information on individuals (as described above) is justified based on statutory provisions that (1) processing is based on the consent; (2) processing is necessary for Palatin’s legitimate interests; or (3) processing is necessary for the performance of a contract to which you are a party. If you are in the EU or afforded protection under the GDPR, you may have certain rights with respect to the Personal Information. To the extent permitted by applicable data protection laws, you may access the Personal Information we hold about you; request that inaccurate, outdated, or no longer necessary information be corrected, erased, or restricted; and, request that we provide your Personal Information in a format that allows you to transfer it to another service provider. You also may withdraw your consent at any time where we are relying on your consent for the processing of your Personal Information. You may object to our processing of your Personal Information where that processing is based on our legitimate interest. You have the right to lodge a complaint with your competent Information protection authority. If you wish to exercise any of these rights, please contact us in accordance with the instructions provided below. Children’s Privacy We believe that protecting the privacy of children is very important. Our sites are not designed for access or use by individuals under the age of 18. In accordance with the Children’s Online Privacy Protection Act, we do not collect or store any Personal Information, about children under the age of 13. If we discover we have received any information from a child under the age of 13 in violation of this policy, we will delete that information immediately. If you believe that Palatinhas any information from or about anyone under the age of 13, please contact us at the contact points specified below. How Do We Secure Information Transmissions? E-mail that you may send to us, or forms that you may submit, may not be secure unless we advise you that security measures will be in place prior to your transmitting the information. For that reason, we ask that you do not send confidential information such as Social Security or account numbers to us through an unsecured email or forms. What About Legally Compelled Disclosure Of Information? We may disclose information when legally compelled to do so, in other words, when we, in good faith, believe that the law requires it or for the protection of our legal rights. What About Other Web Sites Linked To Our Web Site? We are not responsible for the practices employed by Web sites linked to or from our Web site nor the information or content contained therein. Often links to other Web sites are provided solely as pointers to information on topics that may be useful to the users of our Web site. Contact Us If you have questions regarding this Privacy Policy, our handling of your Personal Information, or would like to request more information or exercise a data right, please contact us at legal@palatin.com, by mail at Palatin Technologies, Inc., 4B Cedar Brook Drive, Cranbury, NJ 08512, or by telephone at (823) 258-5690. 11/21 Copyright 2021 Palatin Technologies, Inc. All rights reserved. 4-B Cedar Brook Drive Cedar Brook Corporate Center Cranbury, NJ 08512 © 2021 PALATIN | ALL RIGHTS RESERVED | PRIVACY POLICY | TERMS OF USE | ACCESSIBILITY STATEMENT