Privacy Policy

This Privacy Policy explains how CutisBio Co., Ltd. (“CutisBio”, “we”) handles personal data when you visit www.cutisbio.com (the “Website”) or send us an inquiry through it.

It applies to this corporate website only. Product sites such as the Blugene website may have their own policies.

1. Who we are (data controller)

The controller responsible for personal data processed through the Website is CutisBio Co., Ltd., a synthetic biology and advanced biomanufacturing company based in Seoul, Republic of Korea.

General contact: [email protected]

2. Personal data we collect

You can browse the Website without providing any personal data. We collect personal data only when you choose to send us an inquiry through the contact or partner form, or by email.

Technical data. When the online form endpoint is enabled, the form is submitted to our hosting platform, which may process technical data such as your IP address, browser type (user agent) and the time of submission for security and spam prevention. When the endpoint is not enabled, the form opens a message in your own email client and no form data is sent to our servers.

Our hosting provider also processes connection data (such as IP address, requested pages and browser information) in server logs in order to deliver the Website securely. We do not use this data to identify individual visitors.

Please do not send us sensitive personal data. The Website is not a channel for patients, medical consultation or health-related information; see the Terms of Use.

The inquiry forms ask for the following information:

• Full name
• Business email address
• Organisation
• Country or region
• Inquiry type (and, on the partner form, collaboration type)
• Your message or project summary
• Your privacy consent, and the page and language from which the form was sent

3. Why we use your data (purposes)

We use the personal data described above for the following purposes:

• To respond to your inquiry and communicate with you about a potential collaboration, supply, media or careers request
• To assess whether and how we can work together, including preparing a confidentiality agreement where appropriate
• To maintain the security of the Website and prevent spam and abuse
• To comply with legal obligations that apply to us

4. Legal bases

Under the Personal Information Protection Act of the Republic of Korea and, where applicable, the data protection laws of your country, we process your personal data on the following bases:

• Your consent, given when you submit an inquiry form
• The steps needed to prepare or perform a contract with you or your organisation
• Our legitimate interest in operating a secure website and responding to business contacts, where that interest is not overridden by your rights
• Compliance with a legal obligation

5. How long we keep your data

We keep inquiry data for as long as needed to handle your request and any follow-up discussion, and afterwards only where a law requires us to keep it.

When the retention period ends, we delete or anonymise the data without undue delay.

6. Sharing with third parties

We do not sell personal data and do not share it with third parties for their own marketing.

We disclose personal data only with your consent, where a law requires it, or to the service providers listed in the next section, which process data on our behalf.

7. Service providers (processors)

We rely on the following service providers, which process data under contract and only on our instructions:

• Cloudflare, Inc. — website hosting and content delivery (Cloudflare Pages), including security protection of the Website

8. Cookies and analytics

The Website does not set tracking cookies and does not use analytics by default.

If we enable a privacy-conscious analytics service in the future, we will update this section to name the provider, the data it collects and how you can object, before it takes effect.

Strictly necessary technical cookies may be set by the hosting provider for security purposes; they are not used for tracking.

9. International transfers

CutisBio is based in the Republic of Korea. Our hosting provider operates a global network, so data submitted through the Website may be stored or processed on servers outside the Republic of Korea.

Where personal data is transferred abroad, we take steps to ensure it remains protected under this policy and applicable law, including contractual safeguards with the provider.

10. Your rights

Subject to applicable law, you have the rights listed below. To exercise them, email [email protected]. We will verify your identity and respond within the period required by law. You may also act through an authorised representative.

• Access the personal data we hold about you
• Ask us to correct or delete it
• Ask us to suspend or restrict its processing
• Withdraw your consent at any time, without affecting processing already carried out
• Lodge a complaint with a supervisory authority

11. Security measures

We apply administrative, technical and physical measures appropriate to the risk, including:

• Limiting access to inquiry data to staff who need it to respond
• Transmitting Website traffic over encrypted connections (HTTPS)
• Not accepting file uploads through the forms and limiting the data the forms collect
• Protecting the forms against automated abuse
• Keeping form contents out of server logs

12. Children

The Website is intended for business audiences and is not directed at children. We do not knowingly collect personal data from children under 14 years of age (or the applicable age in your country). If you believe a child has provided us with personal data, contact us and we will delete it.

13. Privacy officer

We have designated a privacy officer responsible for overseeing personal data processing and for handling related complaints and remedies.

Until a dedicated contact is published, privacy requests can be sent to [email protected].

14. Changes to this policy

We may update this policy when our services, legal obligations or providers change. The date at the top of this page shows when it was last revised. Material changes will be announced on the Website before they take effect.