FORUS Therapeutics Inc. (“FORUS Therapeutics” “we,” “us,” or “our”) takes the privacy of personal information seriously. This Privacy Policy describes how we collect, use, disclose and otherwise process personal information that we collect in connection with our website.

COLLECTION AND USE OF PERSONAL INFORMATION
You can visit our website without providing us with personal information. However, if you contact us or sign up for our email alerts, we will collect your personal information.

Contacting Us: If you choose to contact us with an inquiry or question, or to request information about our business or products, you will be asked to provide information that identifies you, such as your name, company name and email address, along with additional information relating to your inquiry, question, or request. We use this information to respond to your inquiry, question, or request. We may also use this information to provide you with additional information about our company and products.

Email Alerts: If you choose to register for our email alerts, we will collect your name and email address. We use this information to send you email updates. You can opt-out of receiving these updates at any time by following the opt-out or “unsubscribe” instructions provided in the email, or by contacting us as set out below.

In addition to the purposes described above, we also use the personal information we collect for standard business purposes, such as maintaining business records for reasonable periods and complying with legal and regulatory requirements.

SHARING OF PERSONAL INFORMATION
Service Providers: We may transfer (or otherwise make available) personal information to service providers who perform certain functions on our behalf, such as to hosting our website, data storage and back-up services (including cloud-based service providers), analytics, marketing and communications. Some of our service providers may be located outside of Canada, including in the United States. Our service providers are given access to the information they need to perform their designated functions. For more information, please contact us as set out below.

Sale of Business: We may transfer personal information in connection with a prospective or completed merger, acquisition, or sale (including transfers made as part of insolvency or bankruptcy proceeding) involving all or part of FORUS Therapeutics or as part of a corporate reorganization or other change in corporate control.

Legal: FORUS Therapeutics and our service providers may disclose your personal information in response to a search warrant or other legally valid inquiry or order (which may include lawful access by Canadian or foreign governmental authorities, courts, or law enforcement agencies) or as otherwise required or permitted by applicable law.

INFORMATION COLLECTED AUTOMATICALLY
When you visit our website, we automatically collect certain information using cookies and similar tools. This information includes your IP address, browser type, domain names, the date and time of your visit, the pages you visit, the features you use, and the referring URL’s you came from. We use this information to operate and improve our website and services and to generate general statistics regarding the use of the Website.

We also use cookies and similar technologies to help our website function, remember your preferences and settings when you navigate through our website, and for security purposes.

You may be able to control cookies using your browser settings. For example, you may be able to set your browser to block or delete cookies, or to notify you before a cookie is set. If you block cookies, you may not be able to use all of the features of our website.

LEGAL BASIS FOR PROCESSING
We rely on one or more of the following legal grounds (as appropriate) to process personal information:

• To enter and perform a contract with you or to perform any steps you require from us before entering into a contract.
• To pursue our legitimate business interests in establishing, managing, or concluding our relationship with you.
• Where you have specifically consented to us processing your personal information.
• To comply with our legal obligations and establish, exercise, or defend our legal rights.

Where personal information is processed with consent, you may (subject to contractual and legal restrictions) refuse to provide your consent, or choose to withdraw your consent, to our processing of your personal information by contacting us as described below. Note that if you refuse to consent, or withdraw your consent, to certain processing of your personal information, we may not be able to provide certain of our services.

THIRD PARTY SITES
Our website may contain links to other websites, including social media platforms, that we do not own or operate. We do not have any control over such websites. We encourage you to read the privacy policy of every website you visit.

SECURITY OF PERSONAL INFORMATION
We have implemented administrative, technical, and physical safeguards in an effort to protect against unauthorized access, use, modification and disclosure of personal information in our custody and control. However, please note that no security measures can offer absolute security and we cannot guarantee that your personal information will not be stolen or accessed without authorization.

RETENTION OF PERSONAL INFORMATION
Personal information is maintained on our servers or those of our service providers and is accessible by authorized employees, representatives and agents who require access for the purposes identified in this Privacy Policy.

ACCESS TO PERSONAL INFORMATION
You may request access, updating or correction of your personal information (subject to limited exceptions prescribed by law) by submitting a written request to us (see “Contact Us” below). You may also have the right, in specified circumstances, to object to our use of your personal information, to request the deletion of your personal information or restrict its use, to request a copy of the information you have provided to us be transferred to another person, or to lodge a complaint with a supervisory authority. If you have any questions about these rights, or you would like to exercise any of them, please contact us as described in the “Contact Us” section below. We may take steps to verify your identity prior to responding to your requests.

UPDATES TO OUR PRIVACY POLICY
This Privacy Policy may be updated periodically. The revised Privacy Policy will be posted on our website. We encourage you to review this Privacy Policy often.

CONTACT US
Please contact privacy@forustherapeutics.com if you have any questions, comments, or complaints about this Privacy Policy.

Last Updated: September 24, 2021