Effective Date: 【January 31, 2026】
Last Updated: 【January 31, 2026】

1. Introduction
Enorna Biotechnology Co., Ltd. ("Enorna," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Global Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit our website (www.enorna.com), interact with us for business purposes, or apply for a position with us.
This policy is designed to meet the requirements of data protection laws applicable in the jurisdictions where we operate, including but not limited to the General Data Protection Regulation (GDPR) in the European Union/European Economic Area (EU/EEA), the UK GDPR, the California Consumer Privacy Act (CCPA) as amended by the CPRA, and other global regulations.

2. The Data We Collect and How We Use It
We collect information to provide and improve our services, communicate with you, and ensure the security of our operations.

3. Data Retention
We retain personal data only as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

• Business Inquiries: Up to 2 years from last meaningful contact.
• Job Applications: Up to 1 year from receipt, unless you consent to a longer period for future opportunities.
• Website Logs: Up to 6 months.
• Data for Contract Performance: For the duration of the contract plus a period necessary for legal, tax, or regulatory purposes.

4. How We Share Your Information
We do not sell your personal data. We may share it only in the following circumstances:

• With Your Consent: For purposes you have explicitly authorized.
• With Service Providers: Trusted third parties who provide services on our behalf (e.g., web hosting, cloud services, recruitment platforms) under strict contractual data protection obligations.
• For Legal Reasons: To comply with legal obligations, valid legal processes, or to protect the rights, property, or safety of Enorna, our users, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, where your data may be transferred as a business asset, subject to confidentiality commitments.

5. International Data Transfers
As a global company, your personal data may be transferred to, stored, and processed in countries outside your country of residence, including China, where data protection laws may differ. We ensure all such transfers comply with applicable laws and are protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by relevant authorities.

6. Your Data Protection Rights
Depending on your location and applicable law, you may have rights including:

• Right to Access & Portability: Request a copy of your data or its transfer to another controller.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data under certain conditions.
• Right to Restrict Processing: Request limitation on how we use your data.
• Right to Object: Object to processing based on our legitimate interests.
• Right to Withdraw Consent: Withdraw previously given consent at any time.
• Right to Opt-Out of Sale/Sharing (CCPA/CPRA): We do not sell your data as defined under CCPA.
  To exercise your rights, please contact us using the details in Section 9. We will respond within the timeframe required by law and may need to verify your identity.

7. Data Security
We implement appropriate technical and organizational measures (encryption, access controls, security audits) to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

8. Cookies and Similar Technologies
Our website uses cookies to enhance functionality and analyze usage. You can manage your cookie preferences via your browser settings. Disabling essential cookies may affect website functionality.

9. Contact Us & Data Protection Officer
For any questions, to exercise your rights, or to lodge a complaint regarding our data processing, please contact:
Data Protection Officer/Privacy Team
Enorna Biotechnology Co., Ltd.
Email: bd@enorna.com (Please use subject line: "Privacy Policy Inquiry")
Office Address: 63 Keji Avenue, Bldg. 6, Fl. 6, Yixing, Jiangsu, China

You also have the right to lodge a complaint with your local data protection supervisory authority.

10. Policy Updates and Third-Party Links
We may update this policy periodically. The "Last Updated" date at the top will indicate changes. We encourage you to review it regularly. Our website may contain links to third-party sites; this policy does not apply to their practices.

11. Children's Privacy
Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us immediately.