7. Purposes for Collection, Use, and Sharing. We use and disclose the personal information we collect solely for purposes of the Study, to comply with law and for your or our protection, as further described in this Privacy Policy.

8. Your Rights. You have the right to request access to your personal information and request corrections, subject to legal and scientific limitations. You may withdraw your consent and request destruction of your unused sample(s) and associated personal information at any time, unless your sample(s) and data have already been anonymized or used in research in a way that makes retrieval or destruction impossible. Requests for access, correction, or withdrawal will be addressed promptly and in accordance with applicable regulations.

9. State Specific Privacy Notice. If you are a resident of California, Colorado, Connecticut, Delaware (as of January 1, 2025), Iowa (as of January 1, 2025), Maryland (as of October 1, 2025), Minnesota (as of July 31, 2025), Montana, Nebraska (as of January 1, 2025), New Hampshire (as of January 1, 2025), New Jersey (as of January 15, 2025), Oregon, Tennessee (as of July 1, 2025), Texas, Utah, and Virginia, the law in your state may provide you with the following rights:

Information: The Privacy Policy describes the types of “Personal Information” as defined in applicable laws we collect and the sources through which we collect in the “Information We Collect About You and How We Collect It” section above. We describe the purposes for which we use and share this data in the “How We Use Your Information” section above and the “Disclosure of Your Information” section above.

4904-6347-7846

Access: You can request a copy of the Personal Information that we maintain about you.

Deletion: You can ask to delete the Personal Information that we have collected from you.

Correction: You can ask to correct inaccuracies in your Personal Information.

Opt-out of sale and sharing of your Personal Information: We do not sell or share your Personal Information or process your Personal Information for purposes of targeted advertising, and/or profiling in furtherance of decisions that produce legal or similarly significant effects.

Freedom from Discrimination: You have the right to be free from unlawful discrimination for exercising any of your privacy rights.

Right to Restrict the Use of Sensitive Personal Information: You have the right to restrict the use of your sensitive personal information.

To make a request in relation to the above rights, please contact us using the information below. To fulfill your request, we will need to verify your identity. Only you or someone legally authorized to act on your behalf may make a request related to your personal information. To designate an authorized agent, the authorized agent must provide sufficient information that allows us to reasonably verify that you authorize them to act on your behalf.

California's "Shine the Light" law (Civil Code Section § 1798.83) permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email or write us at the contact information listed below.

10. International Data Transfers. Element Biosciences is based in the State of Maryland in the United States. We provide the Website for use only by persons located in the United States. If you access the Website from outside the United States, you do so on your own initiative and are responsible for compliance with local laws. Your personal information will be transferred to, and stored on, computers located outside of your state, province, or country where data protection laws may diOer from those of your jurisdiction. Our servers are located in the United States. If you are accessing the Site from outside the United States, please be aware that your data may be subject to U.S. laws and regulations.

11. Canada, European Union and United Kingdom Privacy Rights. If our processing of your personal information is subject to GDPR, UK GDPR, and/or PIPEDA, and unless subject to an exemption, you may have the following rights with respect to your personal information:

Right of Access: You have the right to view and request copies of your personal information.

Right to Rectification: You have the right to request that your inaccurate or outdated personal information be updated or corrected.

Right to be Forgotten/Right to Erasure: You have the right to request your personal information be deleted, upon providing verification to us.

Right to Restrict Processing: You have the right to request the restriction or suppression of our processing of your personal information.

Right to be Informed: You have the right to be informed about the collection and use of your personal information.

Right to Data Portability: You have the right to ask for your personal information to be transferred to you or to another controller.

Right to Withdraw Consent: You have the right to withdraw previously given consent to process your personal information.

Right to Object: You have the right to object to the processing of your personal information.

Right to Object to Automated Processing: You have the right to object to decisions being made with your personal information solely based on automated decision making or profiling.

We will need to verify your identity to process any requests described in this Section and may deny your request if we are unable to verify your identity. Government or other identification may be required.

If you are a resident of the European Economic Area (“EEA”), when we process your personal information, we will only do so in the following situations:

· We need to use your information to perform our responsibilities under our agreement with you;

· We have a legitimate interest in processing your personal information; or

· We have your consent to do so.

If your personal information is subject to GDPR or UK GDPR, we will transfer personal information from the EEA to a location outside the EEA only when there has been a documented adequacy determination, or where we have confirmed adequate privacy protections. If your personal information is subject to PIPEDA, we will transfer personal information from Canada to locations outside Canada only where we have confirmed adequate privacy protections. If we transfer personal information to a third party acting asour agent, we will also obligate the third party to have adequate privacy protections in place.

12. Third-Party Services on Website. Our Website does not contain links to third-partywebsites or services that are not operated by us.

13. Security and Retention. We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All physical samples and paper records will be stored in secure, access-controlled facilities. Electronic data will be stored on encrypted, password-protected systems with access limited to authorized personnel. Personal identifiers will be separated from research data and samples, and coded or de-identified to protect participant identity.

Access to identifiable participant information is restricted to personnel who require it for research purposes and have received appropriate training. Unfortunately, the transmission of information via the internet is not completely secure.

Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.

We retain personal information and samples only for as long as is necessary to fulfill the research objectives of the Study, in accordance with applicable laws and regulations.When retention is no longer required, secure procedures will be used for the destruction of data and samples.

14. Changes to Our Privacy Policy. This Privacy Policy will be reviewed and updated as required by changes in laws, regulations, or organizational practices. If we make changes we will update the "Last Modified" at the top of this page and notify you of significant changes by posting a notice on the Website or via email. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Contact Information:

To ask questions or comment about this Privacy Policy and our privacy practices, contact us at:

Element Biosciences

1812 Ashland Ave, Suite 100

Baltimore, MD 21205

Email: support@strandsforcancer.com

4904-6347-7846

Phone: 1 (410) 929-3465

PRIVACY POLICY

Last modified: July 17, 2025

Privacy Policy

Last modified: July 17, 2025

1. Introduction. Element Biosciences, LLC (“Element Biosciences”, “we” , or “us”;) respects your privacy and is committed to protecting it through our compliance with this policy. This policy describes the types of information we may collect from you as a user of our Website and, if applicable, donor of sample(s) (“you” or “your”) that you may provide when you visit our website https://www.strandsforcancer.com/ (“theWebsite”;) and donate your hair sample(s) for use in our research study to investigate how differences in metabolic rate of elements (carbon, nitrogen, oxygen, etc.) can be used to better understand cancer and potentially used as a non-invasive way to detect cancer in patients (“Study”). This policy also outlines the procedures and safeguards implemented by us to protect the privacy and confidentiality of individuals participating in the Study involving the collection of hair sample(s). The policy is intended to comply with applicable laws and ethical standards, and demonstrates our commitment to respecting the rights and dignity of all participants.

This policy applies to all employees, contractors, and collaborators involved in the collection, handling, storage, analysis, and dissemination of human samples and associated data at Element Biosciences.

2. Acceptance of Privacy Policy. Please read this policy carefully to understand ourpolicies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Website or donate any hair sample(s) for use in the Study. By accessing or using the Website and donating your hair sample(s), you agree to this Privacy Policy. This policy may change from time to time (see the “Changes to Our Privacy Policy” section below). Your continued use of the Website after we make changes is deemed to be acceptance of those changes, so Please check the policy periodically for updates.

IF YOU DO NOT CONSENT AND AGREE WITH THE TERMS OF THIS PRIVACY POLICY, YOU CANNOT, AND WE DO NOT AUTHORIZE YOU TO, ACCESS, BROWSE, OR USE THE WEBSITE OR DONATE ANY HAIR SAMPLE(S) FOR USE IN THE STUDY.

3. Website Visitors Under the Age of 18/ Children. Our Website is not intended for any use by persons under 18 years of age. No one under age 18 may provide any information to or on the Website. We do not knowingly collect personal information from minors and children under 13. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at support@strandsforcancer.com.

4. Information We Collect About You and How We Collect It. We collect several types of information from and about you:

· By which you may be personally identified, such as name, postal address and email address and other identifiers by which you may be contacted online or offline(“personal information”);

. Information that confirms your donation of hair sample(s) for use in the Study, such as the completed and signed Consent;

. other information that you voluntarily choose to provide to us, including personal information in messages you send to us.

We collect this information:

· Directly from you when you provide it to us; or

· Through your interaction with the Website when you fill out questionnaires and forms

We only collect personal information necessary to evaluate your suitability to donate samples for the Study, to mail you sample collection kits and for the research objectives of the Study. Prior to sample donation and collection, you will be provided with a written informed consent (“Consent”) which will inform you about how your information will be used, stored, and shared.

5. How We Use Your Information:

We use information that we collect about you or that you provide to us, including any

personal information:

· To fulfill the purpose for which you provide it;

. To prepare a package for mailing the collection kit to you;

. To prepare a Consent for your signature;

· To comply with regulatory and legal obligations;

· To respond to any questions you may have about the Study and your sample(s);

· For any other purpose with your express written consent.

While will collect personal information about you in this Study we do not maintain any record that includes information that could be used to identify you or link you to an analyzed specimen.4904-6347-7846

We may create and use aggregated data, de-identified data, or other anonymous data from your personal information that we collect, for research purposes for the Study. We also use anonymous data for research purposes to help us and our research partners answer important questions about how cancerous tissues metabolize elements at different rates than non-cancerous tissues.

6. Disclosure of Your Information:

We do not disclose your personal information or identifiable samples to any third party without your explicit consent, unless required by law or if necessary for your or our protection.

We may disclose your personal information and identifiable samples:

· To comply with any court order, law, or legal process, including to respond to any government or regulatory request; or

· If we believe disclosure is necessary or appropriate to protect your or our rights, property, or safety. This includes exchanging information for the purposes of fraud protection.

Once we receive your hair sample(s), all personal identifiers will be removed from your sample(s) and associated data, each sample will be labeled with a unique code and the link between your identity and the code will be securely stored and accessible only to authorized personnel, and will not be shared with third parties. Once your sample(s) and data are fully anonymized, it will not be possible to re-identify you. Anonymized or de-identified samples and data may be shared with research partners, regulatory agencies, or third-party service providers for research purposes. All recipients are required to use the data only for approved research and to maintain its confidentiality. No personal identifiers or code keys will be shared with third parties. All records maintained by the Study will not contain information that will allow you to be directly identified or linked to a specific hair sample.

California Privacy Rights.

In the preceding 12 months, we collected and disclosed for a business purpose the following categories of personal information about California consumers: