Privacy Policy

Last updated: December 2025

1. Introduction

Enodia Therapeutics (hereinafter “Enodia”, “we”, “us” or “our”) is committed to protecting your privacy and personal data. This privacy policy explains how we collect, use, store and protect your personal information when you visit our website www.enodiatx.com (the “Site”).

This policy is established in accordance with the French law “Informatique et Libertés” of January 6, 1978, and the General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679 of April 27, 2016.

2. Data controller

The data controller responsible for the processing of your personal data is:

Enodia Therapeutics
26 rue Bosquet
75007 Paris, France
Email: contact@enodiatx.com

Enodia Therapeutics is a French company registered with the Paris Trade and Companies Register (RCS Paris).

3. Personal data we collect

3.1 Data you provide directly

When you use our Site, you may voluntarily provide us with the following personal data:

Your email address (when subscribing to our newsletter or contacting us)
Your name and contact details (when filling out contact forms)
Any other information you choose to share with us

3.2 Data collected automatically

When you browse our Site, certain technical data may be collected automatically through cookies and similar technologies:

IP address
Browser type and version
Operating system
Pages visited and browsing behavior
Date and time of your visit
Referring website

4. Purposes of data processing

We process your personal data for the following purposes:

To respond to your inquiries and requests
To send you our newsletter and company updates (with your consent)
To improve and optimize our Site and services
To analyze website traffic and usage patterns
To comply with our legal obligations

5. Legal basis for processing

We process your personal data based on the following legal grounds:

Consent: when you subscribe to our newsletter or agree to the use of non-essential cookies
Legitimate interest: for website analytics and security purposes
Legal obligation: to comply with applicable laws and regulations

6. Cookies policy

Our Site uses cookies to provide you with a better browsing experience. A cookie is a small text file stored on your device when you visit a website.

6.1 Types of cookies we use

Strictly necessary cookies (functional): These cookies are essential for the proper functioning of the Site. They enable basic functions such as page navigation and secure access. The Site cannot function properly without these cookies.
Preference cookies: These cookies allow the Site to remember your choices and preferences (such as language settings) to provide a more personalized experience.
Statistics cookies: These cookies help us understand how visitors interact with our Site by collecting and reporting information anonymously. This helps us improve the Site.
Marketing cookies: These cookies are used to track visitors across websites and display relevant advertisements. They may also be used to limit the number of times you see an advertisement.

When you first visit our Site, a cookie consent banner will appear allowing you to accept, deny, or customize your cookie preferences. You can change your preferences at any time by clicking on the “Manage consent” link in the footer of our Site.

You can also configure your browser settings to block or delete cookies. Please note that blocking certain cookies may affect your experience on our Site.

7. Data retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

Contact form data: 3 years from the last contact
Newsletter subscription data: until you unsubscribe
Cookie data: maximum 13 months (in accordance with CNIL recommendations)

We do not sell, trade, or otherwise transfer your personal data to third parties for commercial purposes.

Your data may be shared with trusted service providers who assist us in operating our Site (such as web hosting providers and analytics services). These providers are contractually bound to process your data only on our behalf and in accordance with our instructions.

If your data is transferred outside the European Economic Area, we ensure that appropriate safeguards are in place to protect your data, such as Standard Contractual Clauses approved by the European Commission.

9. Your rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:

Right of access: you can request a copy of the personal data we hold about you
Right to rectification: you can request correction of inaccurate or incomplete data
Right to erasure: you can request deletion of your personal data under certain circumstances
Right to restrict processing: you can request limitation of data processing in certain cases
Right to data portability: you can request to receive your data in a structured, commonly used format
Right to object: you can object to the processing of your data for marketing purposes
Right to withdraw consent: you can withdraw your consent at any time where processing is based on consent

To exercise any of these rights, please contact us at: contact@enodiatx.com

You also have the right to lodge a complaint with the French data protection authority (CNIL) if you believe your rights have been violated: www.cnil.fr

10. Data security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include encryption, access controls, and regular security assessments.

11. Children’s privacy

Our Site is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us so we can take appropriate action.

12. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the updated policy on this page with a new “last updated” date. We encourage you to review this policy periodically.

13. Contact us

If you have any questions about this privacy policy or our data practices, please contact us at:

Enodia Therapeutics
26 rue Bosquet, 75007 Paris, France
Email: contact@enodiatx.com

14. Applicable law and jurisdiction

This privacy policy is governed by French law. Any dispute arising from or in connection with this policy shall fall under the exclusive jurisdiction of the French courts.