Quva Pharma Privacy Notice

Revised: July 22, 2025

QuVa Pharma, Inc. (collectively, “we,” “our,” “us,” or “Quva Pharma”) is committed to your privacy.  This privacy notice (“Privacy Notice”) has been compiled to better serve those who are concerned with how their personally identifiable information (“PII”) is being used online. PII, as used in US privacy law and information security, is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. Please read this Privacy Notice carefully to understand how we collect, use, protect or otherwise handle your PII in accordance with this Quva Pharma website and other URLs controlled or operated by Quva Pharma which link to this Privacy Notice (together, the “Site”).

What PII do we collect?

We collect information from you when you fill out a form, browse our Site, enter information on our Site, register, make a purchase, sign up for our newsletter, respond to a survey or marketing communication, or use certain other Site features. The information collected includes your: name, online identifier, internet protocol address, email address, telephone number, employment.  We also collect information on the products or services purchased, obtained, or considered, or other purchasing histories or tendencies, information on your interaction with an internet website or advertisement.

How do we use your information?

We may use the information we collect from you in the following ways:

• to better serve you and respond to your correspondence; and
• to analyze usage of our Site.

How do we protect your information?

We use technical, administrative and procedural measures designed to safeguard your personal data from unauthorized access or use. No such measure is ever 100% effective though, so we do not guarantee that your personal data will be secure from theft, loss, or unauthorized access, disclosure or use, and we make no representation as to the reasonableness, efficacy, or appropriateness of the measures we use to safeguard such data.

Do we use ‘cookies’?

Yes. Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your Web browser (if you allow) that enable the site’s or service provider’s systems to recognize your browser and capture and remember certain information. For instance, we use cookies to help us remember and process the items in your shopping cart. They are also used to help us understand your preferences based on previous or current site activity, which enables us to provide you with improved services. We also use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.

We use cookies to compile aggregate data about Site traffic and Site interactions in order to offer better Site experiences and tools in the future. We may also use trusted third-party services that track this information on our behalf.

You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. Each browser is a little different, so look at your browser’s Help menu to learn the correct way to modify your cookies.

If you disable cookies, some features will be disabled. It can affect the user’s experience and make the Site experience less efficient, and some of our services will not function properly.

Third-party disclosure

We do not sell, trade, or otherwise transfer to outside parties your PII without advance notice. This does not include website hosting partners and other parties who assist us in operating our Site, conducting our business, or serving our users, so long as those parties agree to keep this information confidential. We may also release information when appropriate to comply with the law, enforce our Site policies, or protect ours or others’ rights, property, or safety.

However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.

Third-party links

Occasionally, at our discretion, we may include or offer third-party products or services on our Site. These third-party websites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked websites. Nonetheless, we seek to protect the integrity of our Site and welcome any feedback about these websites.

Google Analytics

Google Analytics features have been implemented based on Display Advertising to allow for Google Analytics Demographics and Interest Reporting.  You can opt-out of Google Analytics for Display Advertising and customize Google Display Network ads using the ads settings. We will not facilitate the merging of personally-identifiable information with non-personally identifiable information previously collected from Display Advertising features that is based on the DoubleClick cookie unless you have robust notice of, and the user’s prior affirmative (i.e., opt-in) consent to, that merger. We use data from Google’s Interest-based advertising or 3rd-party audience data (such as age, gender and interests) with Google Analytics to better understand our customers and to better tailor our Site and products to meet your needs.

California Visitors

California law allows California residents to ask companies with whom they have an established business relationship to provide certain information about the companies’ sharing of personal information with third parties for direct marketing purposes. If you are a California resident, please see the California-Specific Notices
, below.

How does our Site handle do not track signals?

We honor do not track signals and do not track, plant cookies, or use advertising when a Do Not Track (DNT) browser mechanism is in place.

Does our Site allow third-party behavioral tracking?

No.  We do not allow third-party behavioral tracking.

COPPA (Children Online Privacy Protection Act)

When it comes to the collection of personal information from children under 13, the Children’s Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, the nation’s consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children’s privacy and safety online.

We do not market to children under 13.

Fair Information Practices

The Fair Information Practices Principles form the backbone of privacy law in the United States and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information.

In order to be in line with Fair Information Practices we will take the following responsive action, should a data breach occur.

We also agree to the Individual Redress Principle, which requires that individuals have a right to pursue legally enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only those individuals have enforceable rights against data users, but also that individuals have recourse to courts or government agencies to investigate and/or prosecute non-compliance by data processors.

Revisions to This Privacy Notice

We reserve the right to amend this Privacy Notice, for any reason and at any time, without notice to you, other than the posting of the amended Privacy Notice on the Site. You should check the Privacy Notice frequently to become aware of any changes that may have been made to it. The provisions contained herein supersede all previous notices or policies regarding our privacy practices that govern the use of our Site. Your continued use of our Site following the posting of changes constitutes your acceptance of such changes.

Contact Us

If you have any questions or concerns about this Privacy Notice, please contact us at privacy@OneQuva.com or by writing to us at the following address:

QuVa Pharma, Inc.

Attn: Privacy

3 Sugar Creek Center Blvd

Suite 250

Sugar Land, TX 77478

California-Specific Notices

This supplemental notice for California residents only applies to our processing of personal information that is subject to the California Consumer Privacy Act of 2018 (“CCPA”).

The CCPA provides California residents with the right to know what categories of personal information Quva Pharma has collected about them, and whether Quva Pharma disclosed that personal information for a business purpose (e.g., to a service provider) in the preceding twelve months. California residents can find this information below:

The categories of sources from which we collect personal information and our business and commercial purposes for using personal information are set forth in “What PII do we collect” and “How do we use your information” sections, above.

“Sales” of Personal Information under the CCPA

We do not “sell” personal information, nor do we have actual knowledge of any “sale” of personal information of minors under 16 years of age as the term “sell” is commonly understood.

Additional Privacy Rights for California Residents

Non-Discrimination. California residents have the right not to receive discriminatory treatment by us for the exercise of their rights conferred by the CCPA. 

Access, Correction, and Deletion. If you wish to access, correct, or delete your personal information, you may access, correct, or delete such information by contacting us as set forth in the “Contact Us,” paragraph, above.

Right to Opt Out. You may contact us if you wish to opt out of any information sharing described above. However, please note that opting out of such sharing may limit your use of the Site. If you wish to opt out of any specific information sharing, please contact us as set forth in the “Contact Us” paragraph, above.

Authorized Agent. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. To authorize an agent, provide written authorization signed by you and your designated agent and contact us as set forth in the “Contact Us,” above.

Verification. To protect your privacy, we will take steps to reasonably verify your identity before fulfilling your request. These steps may involve asking you to provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, or to answer questions regarding your account and use of our services.

De-Identified Information. If we create or receive de-identified information, we will not attempt to reidentify such information, except to comply with applicable law.

Contact Us. If you are a California resident and would like to exercise any of your rights under the CCPA, please contact us as set forth in the “Contact Us” section, above. We will process such requests in accordance with applicable laws.