Date updated: October 19, 2026

Website Privacy Notice

1. Introduction

Cellular Intelligence (referred to as “We, “Our” or “Us”, "the Company", or "CI") is committed to protecting the privacy and security of Your Personal Data.

‍

“You”, “Your”, or "User", means the individual (the “Data Subject” under EU and UK GDPR) who accesses or uses the Service, or the entity on whose behalf they do so.

‍

This CI Privacy Notice may apply to You if You are:

A service User of this website https://www.cellularintelligence.com/;
An employee, contractor or other associated party contracted by CI’s Service Providers;
A shareholder or investor in CI; or,
Any other individual with whom CI may conduct commercial dealings.

‍

Separate Notices apply if You are:

An employee, contractor, or a candidate applying for a role at CI (a supplementary Privacy Notice will be provided to You separately).
A CI clinical trial participant, a partner or child of a participant, a healthcare professional conducting a CI clinical trial, or a participant in a CI-funded trial [here].

‍

This Notice explains what Personal Data We collect, how We use and protect it, and Your rights and choices. Please read it so that You understand how and why We use Your Personal Data.

‍

2. Definitions

For the purposes of this CI Privacy Notice:

‍

Term	Definition
AI (Artificial Intelligence)	A machine-based system that generates outputs, such as text, predictions, or recommendations, that influence the environments it interacts with. This includes AI-powered tools used to assist with drafting, summarizing or analyzing information.
Company	Cellular Intelligence, (referred to as either “CI”, “the Company”, “We”, “Us” or “Our” in this Notice) refers to Somite Therapeutics Inc, dba Cellular Intelligence, 56 Broad St STE 77197, Boston, MA 02109, and Cellular Intelligence Denmark ApS, Ole Maaløes Vej 3, 2200 København N, Denmark.
Data Controller	Under EU and UK GDPR, refers to the Company as the legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data. CI is the Data Controller (‘Controller’) for the Personal Data We process, unless otherwise stated.
Data Processor	Under EU and UK GDPR, refers to the Company’s Service Providers where they process Personal Data on CI's behalf.
Data Protection Legislation	Throughout this document We refer to Data Protection Legislation. European Union Where data is processed by a controller or processor established in the European Union (EU) or comprises the data of people in the European Union, it is subject to the General Data Protection Regulation (Regulation (EU) 2016/679) (‘EU GDPR’) as well as any local data protection implementation laws. This includes any replacement legislation coming into effect from time to time. United Kingdom In the United Kingdom (UK), Data Protection Legislation means the Data Protection Act 2018 (“DPA 2018”), United Kingdom General Data Protection Regulation (“UK GDPR”), the Privacy and Electronic Communications (EC Directive) Regulations 2003 (“PECR”), the Data (Use and Access) Act 2025, and any legislation implemented in connection with the aforementioned legislation, including any replacement legislation coming into effect from time to time. United States In the United States of America (USA), Data Protection Legislation refers to any federal, state, sectoral, or case laws and regulations governing the privacy and security of Personal Data. This includes applicable state privacy legislation, including, but not limited to, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), as well as other relevant state and federal regulations. This definition also encompasses any legislation implemented under these laws and any replacement or additional legislation enacted from time to time. Other Jurisdictions Depending on Your jurisdiction, additional Data Protection Legislation may apply.
Data Protection Officer (DPO)	The independent person We have appointed to help Us monitor internal compliance, inform, and advise on data protection obligations, and act as a point of contact for data subjects and supervisory authorities. You can contact Our DPO using the details in the Contact Us section below.
Device	Any Device that can access the Service such as a computer.
Personal Data	Any information that relates to an identified or identifiable individual.
Service	Means any services provided by the Company, including provision of the Website, relevant clinical trials, or handling of enquiries received by Us.
Service Provider	Means any natural or legal person who processes the data on behalf of the Company. Including any third-party companies, Investigator Sites and individuals that provides services to CI or on CI’s behalf.
Usage Data	Data collected automatically through the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
Website	Refers to the Company’s website, accessible from https://www.cellularintelligence.com/.

3. Your Personal Data

We only collect Personal Data in accordance with the Data Protection Legislation. The type of Personal Data that We will collect about You, and how We collect it, will depend on Your relationship with Us, and how You interact with Us.

‍

Data Subject Type	Data Fields
CI's Service Provider Personnel	Your name Your contact details (telephone number, email address, and mailing address) Your employment details and availability Where relevant, Your CV and training records
Website Users*	Your name Your contact information (email address) Your Contact Us form responses Your Usage Data (e.g., Your IP address) Cookies and Tracking Technologies
CI’s Shareholders and/or Investors	Your name Your contact details (telephone number, email address and mailing address) Your Contact Us form responses Where relevant, information about Your shares or other pertinent financial records

‍* You are under no statutory or contractual requirement or obligation to provide Us with Your Personal Data; however, We may require some of the information above in order for Us to deal with You for the purposes You request.

‍

3.1 Children’s Privacy

Except where required by clinical trial legislation, We do not knowingly collect Personal Data about children under 13. If We become aware that We have done so, We will take reasonable steps to delete it. A parent or guardian who believes their child has provided Us with Personal Data may contact Us using the details provided below to request its deletion.

‍

4. How We Use Your Personal Data

We will only process Your Personal Data where the law allows. We will only use and disclose it for the purposes for which We collected it, unless We reasonably consider that another purpose is compatible with the original one or is otherwise permitted by Data Protection Legislation. If We need to use it for an unrelated purpose, We will, where required, notify You and explain the legal basis. We may process Your Personal Data without Your knowledge or consent where required or permitted by law. Where EU or UK GDPR applies, We rely on the following lawful bases under Article 6(1): (a) consent; (b) contract; (c) legal obligation; (d) vital interests; (e) public interest; and (f) legitimate interests. Where We rely on consent, You may withdraw it at any time by contacting Our DPO using the details provided below.

‍

We may use Your information for the following purposes:

‍

Data Category	Processing Activity	Lawful Basis (Applicable where EU or UK GDPR applies)
CI's Service Provider Personnel Personal Data	To collect information from You or Your employer and make available Our services to Your employer	Our Legitimate Interest in managing CI’s affairs
CI's Service Provider Personnel Personal Data	Where You are a contractor, to collect information from You and take payment from you, make a payment to you, give You a refund or request a refund	Contractual Obligation
CI's Service Provider Personnel Personal Data	To collect information from You or Your employer and liaise with Your employer about Your contact details and/or the nature and performance of Your work, as required	Our Legitimate Interest in managing CI’s affairs
Website User Personal Data	To collect information from You and monitor, provide, and maintain Our Service	Our Legitimate Interest in providing Services to You
Website User Personal Data	To contact You following Your inquiry where You have provided Your contact information and to reply to any questions, suggestions, issues, or complaints, including any Data Subject Requests, about which You have contacted us	Our Legitimate Interest in providing Services to You
Website User Personal Data	To collect Your Usage Data in order to power Our security measures and services so You can safely access Our website and other Services	Our Legitimate Interest in providing a secure platform
CI's Service Provider Personnel Personal Data Website User Personal Data Shareholder/Investor Personal Data	To contact you, where You have provided Your contact information, about news and information relating to Our Services through service messages	Our Legitimate Interest in contacting You about Our Services
CI's Service Provider Personnel Personal Data Website User Personal Data Shareholder/Investor Personal Data	B2B direct marketing to you, where You have provided Your contact information, about products and services from Us, where permitted by applicable electronic marketing laws	Our Legitimate Interest in marketing Our Services to You, or, Consent where You are a sole trader, partnership or other individual subscriber
CI's Service Provider Personnel Personal Data	To retain any accounting information generated during the course of Our interaction for statutory accountancy retention periods	Legal Obligation
Shareholder/Investor Personal Data	To retain any records relating to shares or investments, to communicate with You as shareholders or investors, or take any actions necessary relating to the provision of shares or investments in Our Company	Legal Obligation
CI's Service Provider Personnel Personal Data Website User Personal Data Shareholder/Investor Personal Data	To respond to and defend against legal claims, where You have provided Us with information which may give rise to legal claims	Our Legitimate Interest in exercising, establishing, or defending against legal claims
CI's Service Provider Personnel Personal Data Website User Personal Data Shareholder/Investor Personal Data	To take any action necessary to protect Your vital interests, or the vital interests of a third party	Your Vital Interests, or the Vital Interest of a third party
CI's Service Provider Personnel Personal Data Website User Personal Data Shareholder/Investor Personal Data	To correspond with You, including using AI-powered tools to assist with drafting, summarizing, or analyzing correspondence and related documentation.	Our Legitimate Interest

5. Who We Might Share Your Information With

We may share Your Personal Data with other organizations in the following circumstances:

Where required by law or a public authority;
To establish, exercise or defend legal rights, including to detect and prevent fraud;
With other parties who help Us operate Our services; or,
For purposes otherwise permitted under the Data Protection Legislation.

‍

We use Service Providers acting as Data Processors, such as Our IT providers (for example Google LLC) and AI service providers who supply AI-powered tools to assist with drafting, summarizing and analyzing correspondence. We have Data Processor Agreements in place. These mean Processors may only act on Our instructions, may only share Your Personal Data with Us or with sub-processors bound by the same terms, must keep it secure, and must retain it only for the period We instruct.

‍

6. How Long We Keep Your Information For

We keep Your Personal Data only for as long as necessary for the purposes for which it was collected, in accordance with Data Protection Legislation. Where EU or UK GDPR applies, CI follows a Retention Schedule. Unless the law requires otherwise, the retention periods below run from the date of CI’s last contact with You or last review of Your record to confirm it is still active (or, where a different trigger is stated below, from that date). Your Personal Data is then securely deleted in accordance with Our internal policies.

‍

Data Subject	Retention Period
CI's Service Provider Personnel Personal Data	6 years following the end of Our contract with the relevant Service Provider
Website User Personal Data	1 year
Shareholder/Investor Personal Data	As required by applicable law, or otherwise 6 years following the termination of Your shareholder agreement or investment
Any other individual with whom CI conducts commercial dealings	6 years

7. How We Keep You Updated On Our Products and Services

If You are Service Provider Personnel, a Shareholder/Investor, a Website User who has given Us Your contact details, or another business contact, We may send You news about Our services, including by email, where We have a legitimate interest or Your consent, or where otherwise permitted by law. All such marketing emails will include an unsubscribe link, and You can also update Your preferences at any time by contacting Our DPO (see Contact Us).

‍

8. Third Party Websites, Links and Giving Your Reviews and Sharing Your Thoughts

Our Website may link to third-party websites and social networks and may allow You to share or review Our Services through them. We do not control these third parties and are not responsible for their content or privacy practices. When You use them, Your Personal Data may be visible to the provider and its other users, and any information You give them is subject to their privacy notices. You are responsible for setting Your privacy settings on those platforms.

‍

9. Your Rights Over Your Information

9.1 European Union, European Economic Area, and the United Kingdom

Where EU and UK GDPR apply, You have the following rights over Your Personal Data. If You would like to contact Us about any of the below rights, please refer to the Contact Us section below.

‍

The Right to be Informed About Our Collection and Use of Personal Data	You have the right to be informed about the collection and use of Your Personal Data. We ensure We do this with Our internal and external Privacy Notices (including this document). These are regularly reviewed and updated to ensure these are accurate and reflect Our data processing activities.
The Right to Access Your Personal Data	You have the right to access the Personal Data that We hold about You in many circumstances, by making a request. This is sometimes termed ‘Data Subject Access Request’. If We agree that We are obliged to provide Personal Data to You (or someone else on Your behalf), We will provide it to You or them free of charge and aim to do so within 1 month from when Your identity has been confirmed. We would ask for proof of identity and sufficient information about Your interactions with Us that We can locate Your Personal Data.
The Right to Rectify Your Personal Data	If any of the Personal Data We hold about You is inaccurate, incomplete, or out of date, You may ask Us to correct it.
The Right to Erasure	You have the right to have Personal Data erased. This is also known as the ‘right to be forgotten’. The right is not absolute and only applies in certain circumstances. For instance, the right to erasure does not apply where We have a legal obligation to retain Your Personal Data
The Right to Restrict Processing	In certain circumstances, such as where You contest the accuracy of Your data, You may ask Us to limit how We use it.
The Right to Portability	The right to portability gives You the right to receive Personal Data You have provided to a controller in a structured, commonly used, and machine-readable format. It also gives them You the right to request that a controller transmits this data directly to another controller.
The Right to Object	You have the right to object to Our processing of some or all of the Personal Data that We hold about you. This is an absolute right when We use Your data for direct marketing but may not apply in other circumstances where We have a compelling reason to do so, e.g., a legal obligation.
Rights Related to Automated Decision-Making	You have the right to object to Our processing where a decision is made about You solely based upon automated processed and which has significant or legal effects. CI does not intend to conduct any automated decision-making on Your Personal Data.

In the EU/EEA, and the UK, data protection and privacy matters are regulated by the national data protection authorities. In the UK, the Information Commissioner’s Office (ICO) regulates data protection and privacy matters (https://ico.org.uk/for-the-public). In the EU/EEA, You can find Your authority at: https://edpb.europa.eu/about-edpb/about-edpb/members_en.

‍

You may complain to the data protection authority at any time, but We hope You will contact Us first so that We can resolve the issue. If you would like to make a Data Protection Complaint, please complete the form in Appendix A of this Privacy Notice. We will acknowledge your Data Protection Complaint within 30 days and respond without undue delay.

‍

9.2 United States

If You are a US resident, We process Your Personal Data in accordance with applicable US state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). Our practices are designed to adhere to the standards set forth by these laws, ensuring that We respect the privacy rights of all individuals. As US privacy laws continue to evolve, We will monitor these changes, adjust Our privacy practices, and update Our Privacy Notice(s) accordingly. We may collect personal information directly from USA state residents, and/or Our Service Providers. Depending on where You live, You may have the right to:

know what personal information We collect, use, disclose, sell or share (the categories are set out in ‘Your Personal Data’ above, and we have collected, shared, and disclosed the personal information set out in the ‘Your Personal Data’ section above in the 12 months prior to the last updated date of this Privacy Notice);
access a copy of Your personal information;
correct inaccurate personal information;
delete Your personal information, subject to legal exemptions;
opt out of the sale or sharing of Your personal information;
limit the use and disclosure of sensitive personal information; and
not be discriminated against for exercising these rights.

‍

To exercise these rights, you can contact Us using the details below. We may need to verify Your identity first. We may refuse a request, in whole or in part, where an exemption applies, for example where We need to retain the information to comply with the law, detect fraud or maintain transaction records. US state privacy laws prohibit businesses from discriminating against You for exercising Your rights under the law.

‍

9.2.1 We Do Not Sell Your Personal Information

CI does not sell your personal information. Please note a “sale” does not include when We disclose Your personal information at Your direction, or when otherwise permitted under law.

‍

9.2.2 We May Share Your Personal Information

We may “share” Your personal data, as defined under applicable USA state laws, for the purposes outlined in this Privacy Notice.

‍

9.2.3 Do Not Track

Due to varying practices among browser providers and the lack of a market standard, We do not respond to Do Not Track signals at this time.

‍

10. Security

CI has put in place appropriate technical and organizational measures to protect Your Personal Data from accidental loss, unauthorised access, use, alteration or disclosure.

‍

We take security measures to protect Your information including:

Physical access controls to Our buildings and resources (e.g., by use of passes, key card access and other related technologies);
Implementing access controls, policies and procedures, and technical security measures across Our information technology, networks, and Website; and,
Managing a data security breach reporting and notification process which allows Us to monitor and communicate information on data breaches with You or with the applicable regulator when required to do so by law.

‍

11. International Transfers

Your Personal Data may be processed outside Your country, including in countries whose data protection laws differ from those where You live. Where We transfer Personal Data of individuals in the UK or EU/EEA to a country that has not been recognised as providing an adequate level of protection by the UK Government or the European Commission (as relevant), We ensure an appropriate safeguard is in place, such as standard contractual clauses approved by the European Commission or the UK International Data Transfer Agreement or Addendum. This applies to transfers to both controllers and processors. You can request a copy of the relevant safeguards by contacting Our DPO (see Contact Us).

‍

12. What Happens if Our Business Changes Hands?

If We sell or transfer control of all or part of Our business, Personal Data relevant to the part transferred may be transferred with it. The new owner may use that Personal Data only for the purposes for which We originally collected it, in line with this Notice.

‍

13. Cookies and Online Tracking Technologies

Cookies are small pieces of data that are stored into Your browser when You visit a website, which are stored there for a certain length of time. Cookies allow the website to customize itself to You. Our website may use cookies and other similar online tracking technologies. Our Website currently uses only cookies and similar technologies that are Strictly Necessary for the secure and reliable operation of the Website. These technologies help Us protect the Website against abusive traffic, maintain its security and availability, and provide the Website and its functionality to You. Because these technologies are Strictly Necessary, We do not require Your consent before using them. This section provides details of the cookies and similar technologies We use, including their purposes and how long they remain on Your Device.

‍

13.1 How Do We Use Cookies?

Cookies can be “Persistent” or “Session” Cookies. Persistent Cookies remain on your personal computer or mobile Device when You go offline, while Session Cookies are deleted as soon as You close your web browser. We only use Strictly Necessary Cookies (cookies that are essential to provide You with services available through the Website and to enable You to use some of its features) on our Website. We do not use any of the following Cookies on Our Website:

Functional Cookies (cookies that would allow Us to remember choices You make when You use the Website, such as remembering Your language preference).
Advertisement Cookies (cookies that would allow the creation of user profiles to offer relevant or personalized marketing content, display relevant targeted advertising, and/or limit adverts).
Analytics Cookies (cookies that would be used to track information about traffic to the Website and how users use the Website).

‍

13.2 What Cookies Do We Use on Our Website?

The following cookies are currently used on Our Website:

‍

Cookie Name	Cookie Description	Cookie Type	Duration
_cfuvid	Cloudflare security cookie used for rate limiting and to distinguish legitimate users to maintain secure and reliable access to the Website.	Strictly Necessary Cookie	Session

13.3 Managing and Deleting Cookies

Our Website currently uses only Strictly Necessary Cookies. These cookies cannot be switched off through a cookie preference panel. You may be able to block or restrict these cookies through Your browser settings. However, doing so may affect the security, availability or functionality of the Website. Most browsers allow You to view, block or delete cookies individually or all at once. Please note that these cookies may be set again when You return to the Website. For further information about managing cookies, please refer to Your browser’s help section.

‍

14. Contact Us

You can contact the Data Privacy Team at CI at dataprivacy@cellularintelligence.com.
If You would like to exercise one of Your rights as set out above, or You have a question or a complaint about this Privacy Notice or the way Your Personal Data is processed, please contact Our Data Protection Officer (DPO) by one of the following means:
- By email: dpo@cellularintelligence.com, with the subject of your email containing: “FAO Cellular Intelligence’s DPO”
- By telephone: +44 (0) 203 797 1289
- By post: FAO Cellular Intelligence’s DPO, The DPO Centre Limited, 50 Liverpool Street, London, UK, EC2M 7PY
You can contact our UK Data Protection Representative by one of the following means;
- By email: ukrep@cellularintelligence.com, with the subject of your email containing: “FAO Cellular Intelligence’s UK Representative”
- By telephone: +44 (0) 203 797 1289
- By post: FAO Cellular Intelligence’s UK Data Protection Representative, The DPO Centre Limited, 50 Liverpool Street, London, UK, EC2M 7PY
If You have a question about this website’s use of cookies, please contact us by email to: hello@cellularintelligence.com.

‍

15. Changes to Our Privacy Notice

Thank You for taking the time to read Our Privacy Notice. We may change this Privacy Notice from time to time (for example, if the law changes). We recommend that You check this Privacy Notice regularly to keep up-to-date.

‍

This Notice was last updated on 16th October 2026.

‍

Appendix A – Data Protection Complaints Form

‍

This form allows you to raise concerns about how CI handles your Personal Data under applicable Data Protection Legislation. Your Personal Data provided in this form will only be used to process Your complaint and will be handled in accordance with our Privacy Notice. We aim to resolve your complaint promptly. If you are not satisfied with our response, you may contact your relevant Supervisory Authority. If we require any further information from you to investigate your Data Protection Complaint, we will contact you.

Your submission has been received. We will contact you shortly.

Something went wrong while submitting the form.