This Privacy Policy describes how Park City Biotech Investors (“PCBI”, “we”, “us”, or “our”) collects, uses, discloses, and protects personal information in connection with our websites, investor portals, events, and related services (together, the “Services”). It also explains the choices and rights available to individuals under applicable data protection and privacy laws, including, where applicable, the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”) and other similar laws.
Information we collect
We may collect the following categories of personal information, depending on how you interact with us.
Identifiers and contact details, such as name, email address, postal address, phone number, employer, and job title.
Professional and investment information, such as accreditation status, investment interests, deal access preferences, financial qualification information you choose to provide, and information included in pitch decks or submissions.
Online activity information, such as IP address, device identifiers, browser type, pages viewed, referring URLs, and interaction with emails or online content, collected via cookies or similar technologies.
Event and communications information, such as RSVPs, attendance at events, responses to surveys, and information you provide in emails or calls.
Regulatory and compliance information, such as information required for know‑your‑customer (KYC), anti‑money‑laundering (AML), suitability checks, and other legal or regulatory obligations, where applicable.
We may collect this information directly from you, from your organization, from investment platforms or service providers you authorize, from publicly available sources (such as professional networking sites), or from third-party data providers and compliance vendors.
How we use personal information
We use personal information for the following purposes, to the extent permitted by applicable law.
To operate and improve the Services, including managing our website, investor communications, application forms, and deal flow tools.
To evaluate and facilitate investment opportunities, including coordinating investor syndicates, assessing eligibility, and communicating about specific deals or funds.
To manage relationships and communications, including sending transactional emails, investor updates, newsletters, event invitations, and information tailored to your interests.
To comply with legal, regulatory, and risk‑management obligations, including SEC and other regulatory requirements, KYC/AML procedures, tax and recordkeeping obligations, and to respond to lawful requests and legal process.
To maintain security and prevent misuse, including detecting and responding to security incidents, fraud, and abuse, and monitoring and improving the security of our systems.
To conduct analytics and business planning, including understanding use of our Services, improving user experience, and developing new offerings.
Where required by law, we rely on appropriate legal bases for processing, such as performance of a contract, compliance with legal obligations, our legitimate interests in operating and growing our investment activities, or, where applicable, your consent.
Cookies and similar technologies
Our website may use cookies, web beacons, and similar technologies to operate the site, remember your preferences, and analyze traffic patterns. Some cookies are essential for site functionality, while others relate to analytics or, where used, marketing.
You can manage cookie preferences through your browser settings and, where provided, through our cookie banner or settings tool. If you disable certain cookies, some features of the site may not function as intended.
How we share information
We may share personal information with the following categories of recipients, as permitted by law.
Service providers and vendors that perform services on our behalf, such as IT hosting, CRM platforms, email delivery, compliance and KYC providers, analytics providers, and event management platforms, subject to appropriate contractual safeguards.
Professional advisers, such as lawyers, auditors, and consultants, to obtain professional services and manage legal, compliance, and governance obligations.
Investment partners and portfolio companies, such as syndicate leads, co‑investors, or companies in which PCBI or its members may invest, where necessary to evaluate or execute transactions and where permitted by confidentiality obligations.
Legal and regulatory authorities, where required to comply with laws, regulations, court orders, or regulatory requests, or to protect our rights, privacy, safety, or property or that of others.
Successors or acquirers, in connection with a corporate transaction such as a merger, reorganization, or sale of assets, where permitted by law and subject to appropriate protections.
We do not sell personal information for money in the ordinary sense of that term, and do not knowingly “share” or sell personal information for cross‑context behavioral advertising where such terms are defined by CCPA/CPRA, unless explicitly stated in an updated version of this Policy.
Data security
We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include access controls, encryption or pseudonymization where appropriate, and ongoing review of our security procedures in light of evolving threats and regulatory expectations, including updated SEC Regulation S‑P requirements where applicable.
No security program is completely risk‑free, so individuals should take care in how they share information and notify us promptly of any suspected unauthorized use of their information related to our Services.
Data retention
We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Policy, including:
The duration of your relationship with PCBI and a reasonable period thereafter to respond to inquiries or manage ongoing investment matters.
Periods required by legal, regulatory, tax, or accounting obligations, including recordkeeping requirements under securities and financial regulations.
When personal information is no longer needed, we will take reasonable steps to delete, anonymize, or otherwise de‑identify it, consistent with our legal obligations and internal policies.
Your privacy rights
Depending on your location and applicable law, you may have certain rights with respect to your personal information.
These may include the right to:
Request access to, or a copy of, personal information we hold about you.
Request correction of inaccurate or incomplete personal information.
Request deletion of your personal information, subject to applicable exemptions (for example, where retention is required by securities, tax, or other laws).
Request restriction of or object to certain processing, including certain profiling or direct marketing activities, where permitted by law.
Request information about how your data is used and whether we “sell” or “share” personal information, as those terms may be defined by CCPA/CPRA or similar laws.
Exercise data portability rights, where applicable.
To exercise these rights, please contact us using the contact details in the “Contact us” section below and indicate the nature of your request and your relationship with PCBI. We may need to verify your identity before responding to your request and may deny or limit requests where permitted or required by law, such as where we must retain information for regulatory compliance.
If you reside in California, you may also have the right to designate an authorized agent to submit certain requests on your behalf, subject to verification requirements.
International data transfers
If you are located outside the United States, your personal information may be transferred to, stored in, or accessed from the United States or other jurisdictions that may not provide the same level of data protection as your home jurisdiction. Where required by law, we implement appropriate safeguards for such transfers, which may include contractual protections such as standard contractual clauses or comparable mechanisms.
Third‑party links and services
Our Services may link to third‑party websites, platforms, or services that are not controlled by PCBI. This Policy does not apply to those third‑party services, and their privacy practices are governed by their own policies, which you should review before providing personal information.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the “Last updated” date at the top of this page and, where required by law, provide additional notice or obtain consent.
Third‑party links and services
If you have questions about this Privacy Policy or our privacy practices, or if you wish to exercise a privacy right, please
contact us.
If you believe that we have not addressed your concern, you may have the right to lodge a complaint with your local data protection authority or regulator, where applicable.
