TAIHO ONCOLOGY WEBSITE PRIVACY NOTICE

Last Updated: 09/22/2026

SCOPE

Taiho Oncology, Inc., its parent company, subsidiaries, and affiliates (collectively, “Taiho,” “we,” “our”, or “us”) operate a number of U.S. websites that provide, among other things, health resources, patient assistance programs, and product information.

Some of our sites are intended for patients and caregivers; others are designed for healthcare professionals or business contacts. This Website Privacy Notice (this “Privacy Notice”) explains how we collect, use, protect, and share your personal information when you visit any of our sites. Because our sites serve different audiences and involve different types of data collection, some sections of this Privacy Notice apply generally while others apply only to specific sites, forms, portals, programs, or request workflows identified below.

We encourage you to read this Privacy Notice in its entirety to understand our practices before submitting any information. By using any of our websites or submitting or requesting information, you acknowledge that you’ve read and understood the provisions of this Privacy Notice.

Additional disclosures for residents of certain U.S. states, including California, are provided in the U.S. State Privacy Rights section below.

WHAT INFORMATION WE COLLECT

What we collect depends on how you use our sites. You can browse most of our websites without telling us who you are or providing us with any information about you (“personal information,” which includes what some U.S. state privacy laws call “personal data”). If you register for a program, submit an inquiry, or request information, we may ask for your first and last name, your mailing address, your age, date of birth, and email address. Some sites collect additional information as described in the Additional Disclosures section below. We only collect what we need for the purposes described in this Privacy Notice.

If you contact us with a question or comment, we may ask for your name and email address so we can respond. Providing this information is always voluntary.

COOKIES AND SIMILAR TECHNOLOGIES

When you visit our sites, we may automatically collect certain data using cookies and similar technologies. Cookies are small text files stored on your device that help us recognize repeat visits, support site functionality, and understand how our sites are used. Some cookies may also support content improvement and targeted advertising.

The data we collect automatically may include your IP address, browser type, the date and time of your visit, and the pages you viewed and the website that referred you to us. We use this data to operate and improve our sites and to measure the effectiveness of our content.

You can manage certain cookie preferences through your device or browser settings, or, where available, through our cookie preference center. Please note that disabling certain cookies may affect the functionality of some of our sites and services.

DATA SECURITY

We use appropriate technical, administrative, and physical safeguards to protect your personal information against loss, unauthorized access and disclosure, misuse, or alteration. However, no data transmission over the Internet can be guaranteed to be completely secure, and we encourage you to protect your own passwords and devices.

WHO WE SHARE YOUR DATA WITH

We only share your personal information when there is a clear reason to do so. We may also use and share information in aggregated or de-identified form for our business purposes or as otherwise permitted by law. Our sharing of personal information may include sharing with:

Taiho group companies: your data may be shared within the Taiho group, including subsidiaries and affiliates.
Service providers: we use providers to help deliver our services (for example, website hosting, IT support, call center operations, and email platforms). These providers act only on our instructions.
Research and collaboration partners: where relevant to the site or program you are using, we may share data with academic institutions, contract research organizations, healthcare providers, or pharmacies to support the services described in this Privacy Notice.
Marketing and analytics providers: we may share browsing and usage data collected via cookies with third-party analytics and marketing providers. See the U.S. State Privacy Rights section for details, including your right to opt out.
Business transfers: we may share personal information in connection with a merger, sale, or transfer of all or part of our business.
Legal and regulatory: we may disclose personal information where required by law, in response to a court order, or to protect our legal rights.

CHILDREN'S ONLINE PRIVACY

Our websites are not directed at children and are designed for individuals who are aged 18 years or older. If your child has submitted personal information, you can request its removal by contacting: privacyofficer@taihooncology.com.

LINKS TO OTHER WEBSITES

Our websites may contain links or references to external websites as a convenience to you. This Privacy Notice does not cover the practices of websites external to Taiho. Taiho does not control the content of these external websites and is not responsible for the privacy practices of those websites. Please review the privacy notices of any site that you visit.

HOW LONG WE KEEP YOUR DATA

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Notice, including to provide our sites and services, comply with legal or regulatory obligations, resolve disputes, and enforce our agreements. Retention periods may vary depending on the nature of the information, the context in which it was collected, and subject to applicable law.

CHANGES TO THIS PRIVACY NOTICE

This Privacy Notice is effective as of the date noted above. We may update it from time to time to reflect changes in applicable laws, our practices, or our websites. If we make material changes, we will post the revised Privacy Notice on this site. We encourage you to review the Privacy Notice each time you visit our site. This Privacy Notice is not intended to and does not create any contractual or other legal rights in or on behalf of any party.

HOW TO CONTACT US

If you have any questions about our Privacy Notice, its implementation, the accuracy of your personal information, or the use of the information collected, please contact us at:

Taiho Oncology, Inc., General Counsel

Address: 101 Carnegie Center, Suite 300, Princeton, New Jersey, 08540,
Phone: (609) 285-5214 | Toll Free: 1-844-688-2446 |

Relationship to Other Sections

The additional categories of personal information described in this section are also subject to the disclosures and rights described in the U.S. State Privacy Rights section of this Privacy Notice, where applicable.

HOW WE HANDLE YOUR PERSONAL INFORMATION ON SPECIFIC TAIHO SITES (ADDITIONAL DISCLOSURES)

Certain Taiho Sites and Services involve more detailed interactions and may require the collection of additional categories of personal information beyond those described in the general sections above. The disclosures in this section apply only to the specific sites, forms, and programs identified below.

PRODUCT INFORMATION SITES

(https://www.lonsurf.com, https://www.inqovi.com & https://www.lytgobi.com)

These sites provide product and disease information for U.S. patients, caregivers, and healthcare professionals. They do not collect any categories of personal information beyond those described in the general sections above. Information collected automatically when you browse these sites, and the choices available to you, are described in the Cookies and Similar Technologies section. If you choose to enroll in patient support, request resources, upload voluntary information, or contact us through links on these sites, that processing is described in the Patient Support Site section below.

Because each of these sites relates to a specific product, visiting them may suggest an interest in a particular health condition. How we treat that information, and how you can limit its use, is explained in the U.S. State Privacy Rights section.

MEDICAL INFORMATION REQUEST SITE (taihomedicalinformation.com)

This site is intended for use by U.S. licensed healthcare professionals. If you choose to submit an inquiry, we may collect:

first and last name
address
professional information (e.g., profession, degree, institution)
the content of your inquiry or any information you choose to provide
phone number, fax number and email address

We use this information to respond to and manage medical information requests and to maintain records of inquiries for compliance and regulatory purposes. Providing this information is voluntary, but may be necessary for us to respond to your request.

PATIENT SUPPORT SITE (taihopatientsupport.com)

Taiho Oncology Patient Support is operated on our behalf by CareMetx, a third-party program administrator that collects and processes enrollment information as our service provider. If you or your healthcare provider choose to enroll you in Taiho Oncology Patient Support Services, an enrollment form may need to be completed and submitted. Depending on the information, this may include:

identifiers and contact information (e.g., name, address, phone, email)
treatment and prescription information
health-related information (e.g., diagnosis, diagnostic test results, ICD-10 code)
insurance and benefits information
healthcare provider and specialty pharmacy information
physical characteristics (e.g., height, weight, body surface area)
financial or eligibility-related information, including information used for income verification and, where authorized, credit-related checks
IRS documentation (e.g., Form 990, W-9, Letter of Determination)

We use this information to:

administer patient support and assistance programs
verify eligibility and benefits
coordinate services with healthcare providers, pharmacies, and vendors (e.g., to fulfill written prescriptions)
comply with legal and regulatory obligations

Submission of this information is voluntary, but may be required to enroll in or receive services through these programs.

RESEARCH AND FUNDING PORTAL (researchportal.taihooncology.com)

This portal supports submissions for Investigator Initiated Trials (IITs), Independent Medical Education (IME) grants and Charitable Contributions and Sponsorships. To submit a proposal, you will need to create a portal account. We may collect:

name, email address, institution or organization, and professional role
study proposals, protocols and supporting documents (including principal investigator CVs)
itemized budgets and financial information related to proposed studies or grants
ongoing study updates, closeout and reconciliation reports, and publication records
charitable contribution or sponsorship request details

We use this information to evaluate and administer research proposals and funding requests, manage awarded grants and studies, monitor compliance with contractual and regulatory obligations, and maintain records of submissions and awards. Providing this information is voluntary, but is required to submit a proposal or receive funding.

TAIHO MEDICAL PORTAL (taihomedicalportal.com)

This portal provides educational resources, publications and congress materials for U.S. healthcare professionals. Access to downloadable content requires verification of your professional status. When you request access to content, we may collect:

full name and email address
professional designation (e.g., MD, PharmD, NP)
license number or National Provider Identifier (NPI)

We use this information to verify that you are a licensed U.S. healthcare professional and to provide access to scientific and medical resources. We may also use this information to understand how healthcare professionals engage with our medical content. Providing this information is voluntary, but is required to access downloadable resources.

JOB APPLICATIONS

Job applications are submitted through Dayforce, a third-party recruitment platform operated by Dayforce, Inc. If you apply for a position with Taiho, Dayforce may collect your name, contact information, CV or resume, employment history, education, and other information you choose to provide. This data is processed by Dayforce on behalf of Taiho to manage the recruitment process. For information about how Dayforce handles your personal information, please refer to Dayforce’s own privacy notice. For information about how Taiho handles your personal information through that process, please see our Job Candidate Privacy Notice.

OTHER DATA COLLECTION

If you subscribe to receive news releases or other communications from Taiho, we will collect your email address and use it to deliver the requested updates. You can unsubscribe at any time.

U.S. STATE PRIVACY RIGHTS

This Supplemental Notice for Privacy Rights of Residents of Certain U.S. States ("Supplemental Notice") applies only to information collected by our website about U.S. consumers who reside in states with comprehensive data protection laws that apply to Taiho Oncology Inc. (“Taiho,” “we,” “us,” or “our”).

This Supplemental Notice describes how we collect, use, and share personal information under applicable state privacy laws and explains how to submit data subject requests. Some provisions apply only to residents of particular states, and we indicate this where relevant. This Supplemental Notice does not cover employees, job applicants, or other individuals with whom we interact in an employment-related context, or business contacts. California business contacts may refer to our separate California Business Contact Privacy Notice.

If you have a disability and need to access this Supplemental Notice in an alternative format, please email us at privacyofficer@taihooncology.com or call us at 1-844-688-2446.

Categories and Sources of Personal Information We Collect

Depending on how you interact with our sites and services, we may collect the following categories of personal information:

Identifiers and contact information (e.g., name, email)
Internet or other electronic network activity information
Information you choose to submit through forms, portals, or other interactions with us
Sensitive personal information, including health-related information and inferences about health conditions (for example, an inference that may be drawn from your browsing of product- or condition-specific pages), and any sensitive information you choose to submit through our forms, portals, or programs

“Sensitive personal information" means the categories of personal information treated as sensitive under applicable U.S. state privacy laws. We treat the health-related inferences described above as sensitive personal information to the extent applicable law requires us to do so.

We may collect such personal information directly from you or automatically through your interactions with our sites and services. For certain sites, forms, and programs, we may also collect additional categories of personal information as described in the Additional Disclosures section above.

Sale, Sharing, & Targeted Advertising

Under applicable U.S. state privacy laws, “Sell,” “Sale,” “Selling,” or “Sold” means renting, releasing, or transferring an individual’s personal information to a third party for money or other valuable consideration, and “Share,” “Shared,” or “Sharing” means transferring an individual’s personal information to a third party for cross-context behavioral advertising or targeted advertising purposes, whether or not for money or other valuable consideration. “Share,” “Shared,” or “Sharing” includes processing of personal information for targeted advertising, as the term “targeted advertising” is defined by applicable U.S. state privacy laws.

We may Sell and Share internet and other electronic network activity information, such as browsing history and interactions with our websites and advertisements, for marketing and analytics purposes. We have sold and shared this category of Personal Information in the past twelve months. Further, because disclosures of your internet and other electronic network activity information to third-party marketing and analytics providers via some of our websites could potentially suggest that you have a particular health condition or are taking a particular medication, we provide the following notice for compliance with the U.S. Privacy Laws:

NOTICE: Because visiting our product-specific websites may suggest an interest in a particular health condition, information inferred from your browsing activity may be considered sensitive personal information under applicable law. You have the right to limit the use of this information.

You have the right to opt out of the Sale and Sharing of your Personal Information.

Further, we use Sensitive Personal Information for the purposes described in this Supplemental Notice, which include purposes other than those expressly permitted by applicable law. Depending on your state of residence, you may have the right to limit the use of your Sensitive Personal Information to purposes expressly permitted by law or to revoke your consent to the processing of your Sensitive Personal Information. To exercise that right with respect to Sensitive Personal Information we may process about you, you can contact our Privacy Office at privacyofficer@taihooncology.com, or by calling 1-844-688-2446 and submitting details regarding your request.

We do not have actual knowledge that we Sell or Share Personal Information of residents who are under 16 years of age. We also do not process Personal Information for purposes of Profiling or to engage in automated decision making in furtherance of decisions that produce legal or similarly significant effects (which means a decision that results in the provision or denial of financial or lending services, housing, insurance, education enrollment or opportunity, criminal justice, employment opportunities, health-care services, or access to essential goods or services).

Purposes for Processing & Disclosing Personal Information

We collect, process, and disclose the Personal Information described in this Supplemental Notice for the following purposes:

to operate, manage, and maintain our business;
to create and manage user accounts;
to respond to inquiries and provide requested information or resources
to administer forms, portals, programs, and related services
to communicate with you;
to perform, develop, improve, and maintain our services;
to analyze usage and improve site functionality and performance;
to better understand the market for our existing services, and potential new services, and to adjust our research, development, and marketing strategies accordingly;
to maintain a safe and secure Internet environment for the company and employees by monitoring malicious cyber behavior;
to comply with legal or regulatory requirements, such as the U.S. Food and Drug Administration’s reporting requirements;
to deliver publications and reports to a wider audience.

We will not collect a category of Personal Information not listed above or use any Personal Information collected in any of the above categories for a business purpose materially different than those listed above without first providing you with additional notice.

Categories of Entities to Whom We Disclose Personal Information

Affiliates & Service Providers. We may disclose your Personal Information to our affiliates and Service Providers for the purposes described in Section C of this Supplemental Notice. Our Service Providers provide us with services for our websites, as well as other products and services, such as web hosting, data analysis, payment processing, customer service, infrastructure provision, technology services, email delivery services, legal services, and other similar services. We grant our Service Providers access to Personal Information only to the extent needed for them to perform their functions, and require them to protect the confidentiality and security of such information.
Third Parties. For each category of Personal Information identified in Section A, we disclose such Personal Information to the following categories of third parties:
- At Your Direction. We may disclose your Personal Information to any third parties with your consent or at your direction.
- Marketing and Analytics Providers. We may disclose Personal Information we collect via cookies and other online tracking technologies to third-party marketing and analytics providers for targeted advertising, including cross-context behavioral advertising, and for marketing and analytics purposes.
- Business Transfers or Assignments. We may disclose Personal Information to other entities as reasonably necessary to facilitate a merger, sale, joint venture or collaboration, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).
- Legal and Regulatory. We may disclose Personal Information to government authorities, including regulatory agencies and courts, as reasonably necessary for our business operational purposes, to assert and defend legal claims, and otherwise as permitted or required by law.

Data Subject Rights

Residents of certain U.S. states, including California, Colorado, Connecticut, Indiana, Kentucky, Oregon, Rhode Island, Texas, Utah, and other states with applicable privacy laws, may have the following rights regarding our collection and use of the Personal Information, subject to certain exceptions. Please read this section carefully as some rights vary by state.

Exercising Data Subject Rights. You may exercise the data subject rights applicable to you by contacting us at privacyofficer@taihooncology.com or by calling 1-844-688-2446 and submitting details regarding your request. Consumers in some states may also authorize an agent to make data subject requests on their behalf via the above-listed methods. We may ask you to provide information that will enable us to verify your identity in order to comply with your data subject request. In particular, when a California consumer authorizes an agent to make a request on their behalf, we may require the agent to provide proof of signed permission from the consumer to submit the request, or we may require the consumer to verify their own identity to us or confirm with us that they provided the agent with permission to submit the request. In some instances, we may decline to honor your request if an exception applies under applicable law. We will respond to your request consistent with applicable law.

Rights that Require Verification.

Right to Know: You have the right to know the following details about our privacy practices at or before the point of collection. You may request that we provide you with information about the following aspects of how we have handled your Personal Information specifically in the 12 months preceding your request:
- The categories of Personal Information we have collected about you and their sources;
- The business or commercial purpose for collecting, Selling, or Sharing Personal Information about you;
- The categories of Personal Information about you that we disclosed or sold to third parties and those categories of third parties;
- If we collect Sensitive Personal Information, the categories of Sensitive Personal Information to be collected, the purposes for which it is collected or used, and whether that information is Sold or Shared; and
- The length of time we intend to retain each category of Personal Information, or if that is not possible, the criteria used to determine that period.
Right to Deletion: You may request that we delete any Personal Information about you that we collected from you.
Right to Correction: You may request that we correct any inaccurate Personal Information we maintain about you. Please note this right does not apply to Iowa and Utah residents.
Right to Access Specific Pieces of Personal Information and Data Portability: You may ask to obtain the specific pieces of Personal Information we have collected about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the Personal Information to another entity without hindrance. You may not exercise this right more than two times in a calendar year.

Rights that Do Not Require Verification.

Right to Opt-Out of Sale: You have the right to opt out of the Sale of your Personal Information.
Right to Opt-Out of the Sharing of Your Personal Information or the Use of Your Personal Information for Targeted Advertising. You have the right to opt out of the Sharing of your Personal Information or our use of your Personal Information for targeted advertising purposes.
Right to Revoke Consent for or Limit the Use of Your Sensitive Personal Information. You also have the right to revoke consent for or limit the use of your Sensitive Personal Information to the purposes authorized by the applicable U.S. Privacy Laws. To exercise that right with respect to Sensitive Personal Information we may process about you, you can contact our Privacy Office at privacyofficer@taihooncology.com, or by calling 1-844-688-2446 and submitting details regarding your request.
As described above, we do not engage in Profiling or automated decision making that have legal or similarly significant effects. But if we did, you would have the right to opt out of the profiling of data in furtherance of solely automated decisions that have legal effects or similarly significant effects concerning consumers.

Opt-Out Preference Signals. Some web browsers or devices offer settings where you may pre-set a signal to websites that you do not want to have your online activity and behavior tracked, sold, shared, or otherwise used for targeted advertising purposes. We recognize the opt-out preference signals that we are required to recognize for compliance with applicable law. Where required by U.S. Privacy Laws, we treat the opt-out preference signals we are required to comply with as a valid request to opt-out of sale, sharing, and processing for purposes of targeted advertising, as applicable, for the browser or device through which the signal is sent and any consumer profile we have associated with that browser or device, including pseudonymous profiles. Further, if we know the identity of the consumer from the opt-out preference signal, we will also treat the opt-out preference signal as a valid request to opt out of sale and sharing for such consumer. Consumers may use opt-out preference signals by downloading or otherwise activating them for use on supported browsers and setting them to send opt-out preference signals to websites they visit. Please note, however, that our sites are not currently configured to recognize the “Do Not Track” signal.

Non-Discrimination. We will not discriminate against you for exercising your data subject rights. For example, we will not deny goods or services to you, or charge you different prices or rates, or provide a different level of quality for products or services as a result of you exercising your data subject rights.

Appeals. Residents of certain states have the right to appeal our decisions on their data subject requests. This section does not apply to California or Utah consumers, or to residents who reside in other states where the applicable U.S. Privacy Law does not give them the right to appeal controllers’ decisions regarding data subject rights. To appeal our decision on your data subject requests, you may contact our Privacy Office at privacyofficer@taihooncology.com or by calling us at 1-844-688-2446. Please enclose a copy of or otherwise specifically reference our decision on your data subject request, so that we may adequately address your appeal. We will respond to your appeal in accordance with applicable law.

Other Disclosures

Residents Under Age 18. If you are under the age of 18 and a registered user of our website, you may ask us to remove content or data that you have posted to the website by writing to privacyofficer@taihooncology.com or by calling us at 1-844-688-2446. Please note that your request does not ensure complete or comprehensive removal of the content or data, as, for example, some of your content or data may have been reposted by another user.
Disclosure About Direct Marketing for California Residents. California Civil Code § 1798.83 permits California residents to annually request certain information regarding our disclosure of Personal Information to other entities for their direct marketing purposes in the preceding calendar year. We do not distribute your Personal Information, as defined under California Civil Code § 1798.83, such as your name or email address, to other entities for their own direct marketing purposes.
Financial Incentives for California Consumers. Under California law, we do not provide financial incentives to California consumers who allow us to collect, retain, sell, or share their Personal Information. We will describe such programs to you if and when we offer them to you.
Disclosure for Nevada Residents. To the extent we collect Personal Information that identifies you through an online website or service among the categories of Personal Information listed in Section A, we do not sell that Personal Information for monetary consideration.
Changes to our Supplemental Notice. We reserve the right to amend this Supplemental Notice at our discretion and at any time. When we make material changes to this Supplemental Notice, we will notify you by posting an updated Supplemental Notice on our website and listing the effective date of such updates.
Contacting Us. If you would like additional information regarding our Supplemental Notice, please email us at privacyofficer@taihooncology.com with details regarding your request or call us at 1-844-688-2446.

DATA PRIVACY FRAMEWORK (EU, UK AND SWITZERLAND)

Taiho, along with its subsidiaries in the U.S. (Taiho Ventures, LLC), complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.

Taiho has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal information received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Taiho has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal information received from Switzerland in reliance on the Swiss-U.S. DPF.

If there is any conflict between the terms in this Privacy Notice and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit the Data Privacy Framework website.

In compliance with these Principles, Taiho commits to resolve complaints about our collection or use of your personal information. Individuals in the European Union, United Kingdom and Switzerland with inquiries or complaints regarding our policies related to these Principles should first contact Taiho at privacyofficer@taihooncology.com.

Taiho has further committed to refer unresolved complaints with respect to these Principles to JAMS, an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please contact or visit JAMS at https://www.jamsadr.com/dpf-dispute-resolution for more information or to file a complaint. The services of JAMS alternative dispute resolution are provided at no cost to you.

Under certain limited conditions, individuals may invoke binding arbitration as a last resort. The FTC has jurisdiction over Taiho’s compliance with these Principles. Taiho may disclose your personal information in response to a lawful request by a public authority for national security or law enforcement purposes.

Disclosures about Taiho’s sharing of personal information with third parties can be found in the section above entitled, “Who We Share Your Data With.” With respect to onward transfers, Taiho remains liable should our service providers or third-party recipients process personal information in a manner inconsistent with this Privacy Notice or the Principles of the Data Privacy Framework (DPF).

If you interact with Taiho in a business capacity (for example, as a healthcare professional, vendor or service provider), additional information about how we handle your personal information is available in our separate California Business Contact Privacy Notice.