Privacy Policy

Last Updated: November 18, 2025

This Privacy Notice (“Privacy Notice”) sets forth the policies and practices used by Marker Therapeutics, Inc. (“Marker Therapeutics”) regarding how we collect, use, and disclose any information associated with an identified or identifiable individual (“Personal Information” or “Personal Data”). It also explains the rights and choices individuals have concerning their Personal Information. Marker Therapeutics, the owner and operator of www.markertherapeutics.com (the “Website”), is a corporation formed under the laws of the State of Texas.

If you have any questions or complaints regarding this Privacy Notice, our general privacy standards (as described in greater detail herein), or our handling of Personal Information, you may contact the Marker Therapeutics privacy team at any time by emailing privacy@markertherapeutics.com.

I. WHAT INFORMATION DO WE COLLECT?

Information You Voluntarily Submit: We collect Personal Information from you when you voluntarily provide such information, such as when you contact us, register for access to our Website or Services, sign up for alerts or updates, or enroll or participate in one of our clinical trials. Personal Information may include, but is not limited to:

• Identifying information, such as name and email address.
• Contact information such as your address, phone number, or other communication details.
• Employment-related information, such as job titles, department names, job history, or performance metrics.
• Demographic information, such as age, gender, occupation, or education.
• Your social media accounts/profiles if you contact us through a social media site or if you access your social media profiles through our site.
• Any information you provide in communications with us, such as via social media or e-mail.
• Sensory Data, including call recordings (e.g., customer support calls) and video recordings from security systems, where applicable to our facilities or events.
• Other data we are required or entitled by applicable law to collect and process for authentication or identification, or for the verification of data we collect.

Information Collected Automatically: When you interact with the Website, we automatically collect the following information about you:

• Device Information. We collect device-specific information, such as your operating system version, device type, and the name of the mobile network you are using. Our system logs may record certain information about your visits to our Websites, including web requests, Internet Protocol (“IP”) addresses, device and mobile ad identifiers, browser information, and other such information. We may also collect device information from emails you receive from us, which helps us track which emails are opened and which links recipients click. If you use your login information while connected to a Virtual Private Network, we may also collect that information.
• Location Information. Depending on your device permissions, when you access the Website or use our Services, we automatically collect and process information about your general or precise location. We use various technologies to determine location, including IP address, GPS, Wi-Fi access points, and mobile towers.
• Client and Log data. We collect technical details, including your device’s Internet Protocol (IP) address, time zone, and operating system. We will also store your login information (registration date, date of last password change, date of last successful login), type, and version of your browser.
• Usage Information. We collect information about your activity on our Website, including timestamps for each visit, the advertisements or content you click, your interactions with those advertisements, clickstream data, the duration of your visit, and the order in which you engage with our content. Based on your interactions and use of the Website, we may also collect additional information generated as part of such use, such as transaction details, transaction times and locations, amounts bid, requested, or spent.
• Cookies. If you access our Website through a web browser, we use cookies to manage your session, store your preferences and language choice, and deliver relevant advertisements to you. “Cookies” are small text files transferred by a web server to your device’s hard drive and may collect data such as the date and time of your visit, your browsing history, preferences, and username. You can set your browser to refuse all or some cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our Website or Services may become inaccessible or not function properly.

Most web browsers are set to accept cookies by default. You can usually configure your browser to remove or block cookies. Keep in mind that if you choose to remove or reject cookies, it may impact the availability and functionality of our Services. Please note that not all tracking will stop even if you delete cookies.

Information Collected from Other Sources: We may collect information from third parties, including advertising and marketing partners, public databases, and social media platforms (such as those from individuals you are friends with or otherwise connected to). If we do, this Privacy Notice explains how we use that information, whether such use is independent of or in combination with the information you have provided.

Information Collected from Job Applicants: If you apply for a job through our Website or via third-party vendors we have retained to collect or process applications, your application and any additional information that you provide may be used to asses your skills and interests as they relate to any career opportunities with Marker Therapeutics, and for any reporting purposes that may be required by applicable law. We may also use your information to communicate with you and to inform you of career opportunities.

Information Related to Services and Registering Interest in Clinical Trials: We collect Personal Information from you through and related to our Services, for example, when you register interest in or sign up for a clinical trial, attend our events, or subscribe to our email updates. If you enroll in a clinical trial, you will receive detailed information about any data processing, including the collection and use of Personal Information related to that clinical trial, during the initial registration process.

Sensitive Personal Information: We do not collect sensitive Personal Information from you when you use the Website unless you choose to provide it. However, we may collect certain Sensitive Personal Information from you if you participate in a clinical trial. Sensitive Personal Information (as defined by applicable law, including the CPRA) may include precise geolocation; racial or ethnic origin; health and genetic data (e.g., in clinical trial contexts); and government identifiers where legally required. If you submit such information to us or we collect it as part of a clinical trial or for another legitimate business purpose, it will be governed by this Privacy Notice. We do not use or disclose Sensitive Personal Information for purposes other than those permitted by law, and you have the right to limit certain uses and disclosures as described below.

II. HOW DO WE USE YOUR PERSONAL INFORMATION?

Marker Therapeutics may use Personal Information as permitted by law, for the following business purposes:

To provide you with the Services

• To operate and maintain the Website and other Digital Properties.
• To provide you with user support.
• To process, complete, and administer payment card and other financial transactions.
• To fulfill or meet the reason the individual provided the information (e.g., process orders, provide information).
• To manage and maintain ongoing relationships and contracts (including vendor, employment, and ambassador).

To communicate with you

• To respond to your comments or inquiries and fulfill your requests.
• To communicate with you about orders, transactions, services, and accounts.
• To send you administrative communications, such as confirmation e-mails, technical notices, policy updates, or security alerts.

To send you marketing and/or promotions

• To send you promotional information, including information and advertisements from our affiliates, and on behalf of our promotional and strategic partners.
• To notify you of new information or services that may be of interest to you, including promotions, campaigns, programs, contests, or sweepstakes.

For analytics, research, and product and Service improvements

• To track and measure Website performance.
• To perform quality control of our Website and Services through analytics and market research, and to otherwise determine the effectiveness and improve the quality of our Website and Services.

For personalization and advertising

• To review the effectiveness of our Website marketing and analyze other general demographic trends.

To ensure the security and integrity of the Services

• To protect, investigate, and deter against unauthorized or illegal activity.
• To enforce the legal terms that govern our business and commercial relationships.

We may also use Personal Information as we believe to be necessary or appropriate for certain essential purposes, including:

• To comply with law and legal process and protect rights, safety, and property.
• To detect, prevent, or investigate security incidents, breaches, or fraud.
• To enforce our Terms of Use or any other applicable terms or policies.
• For other purposes requested or permitted by our users or other relevant individuals, such as website visitors.

Profiling and Automated Decision-Making: We do not engage in profiling or use automated processing or decision-making on your Personal Information for decisions that produce legal or similarly significant effects within the meaning of applicable U.S. privacy laws or the E.U. AI Act.

Disclosure of Personal Information: To the extent permitted by law, your Personal Information may be disclosed to the following:

• Parent Companies and Affiliates. For business-related functions, we may share Personal Information with a parent company, any subsidiaries, or other companies under a common control (collectively, our “Affiliates”), but only to the extent such information is provided an equal or greater level of protection as provided by this Privacy Notice.
• Clinical Trials. We may disclose Personal Information that we collect or that you provide to us to support our clinical trials or other services as described herein. Any third party to whom we disclose Personal Information for this purpose is bound by contractual obligations to keep the information they receive confidential and only use it for the purposes for which we disclose it to them.
• Business Transfers. If we sell or transfer all or part of our business assets, Personal Information may be included. We will make every effort to ensure that any transferred Personal Information receives protection equal to or greater than that provided by this Privacy Notice. In the event of such a transfer, you are encouraged to contact the recipient with any questions about their applicable privacy practices.
• Agents, Consultants and Related Third Parties. For business-related functions (such as mailings, database maintenance, and payment processing), we may share Personal information with third parties, but only to the extent necessary to perform their designated function.
• When Legally Required. We may share Personal Information with law enforcement authorities, regulators, courts and tribunals, governmental or public bodies, and other relevant third parties as we believe necessary or appropriate to protect people or property, to protect our services, rights or property, to comply with legal or regulatory requirements and to respond to legal process, law enforcement requests and requests from other public and government authorities.
• Third Party Vendors. We share Personal Information with vendors who provide products and services related to the operation and maintenance of the Website, the performance of certain services, the analysis of user behavior, and the promotion of the Services and evaluation of our advertising efforts (the Third Party Vendor’s Privacy Notice explains their use of your Personal Information), including the following Third Party Vendor service providers:
  • Tracking: To improve our Website and Services, we may share your de-identified, anonymized, and/or aggregated information with analytics providers that help us analyze how people use our Services. For example, we use industry-standard analytics software to understand how people use our app, enabling us to improve the Services and increase engagement. We use the following third-party service providers for tracking: Google Analytics: Privacy Notice
  • Surveys and Forms: Marker Therapeutics utilizes Ninja Forms to create and manage online surveys and other forms, facilitating the collection and organization of information. Personal Information may be collected and maintained as a result of interacting with any surveys or forms.
  • Email Marketing: Marker Therapeutics uses Notified as its email marketing vendor.
  • Events: Marker Therapeutics uses third-party vendors, such as Notified, to create, plan, and host online and in-person events. If you sign up for, attend, or purchase tickets to any in-person or online events, seminars, or webinars, you will be required to submit Personal Information to register and log in. You may also receive emails with reminders and playback links. The vendor stores all the information you submit and is subject to their privacy policies. By participating in any of these events, the Personal Information you provide will be shared with the vendors listed in this section.
  • Online Contact and Support: We provide various ways for you to contact us, including online contact forms and email. We may use AI systems to deliver some or all of these services. If you contact us through a form, the information you submit will be stored by the vendor providing the service, in accordance with that company’s Privacy Notice.
• Other Third Parties. We send your Personal Information to whom you ask us to send your information.

Disclosure of Other Information

In addition to collecting Personal Information, we may collect information that does not identify you and is not associated with your Personal Information. We may also de-identify, anonymize, or aggregate information so it no longer identifies you. When we use or share de-identified information, we keep it in de-identified form, do not attempt to re-identify it unless allowed by law, and require recipients to do the same through contractual agreements.

Analysis of Website Performance. We may collect and combine such information with other data to monitor, for example, the total number of visitors to our Website, the number of visitors to each page, and the domain names of our visitors’ Internet service providers. It is important to note that no Personal Information is involved or used in this process.

Customer Research. To better serve and understand the needs of the Website’s users, we may conduct research on their demographics, interests, and behavior using the Personal Information and other data we collect. This research may be compiled and analyzed in the aggregate, and we may share this aggregated data with our affiliates, agents, and business partners. This aggregate information does not personally identify you. Marker Therapeutics may also disclose aggregated user statistics to describe our services to current and potential business partners, as well as to other third parties for lawful purposes.

Except as described herein, Marker Therapeutics does not sell, donate, transfer, or otherwise provide any data we collect to any third party for any purpose.

Legal Basis for Processing Your Personal Information

Some jurisdictions require that companies tell you about the legal grounds that allow your data to be used or disclosed. Below are the types of lawful bases that we will rely on to process your Personal Information:

• Legitimate Interest: The purpose of conducting and managing our business to enable us to provide you with the best service, product, and a secure experience. We balance the potential positive and negative impacts on you and your rights. If the impact on your rights outweighs our legitimate business interests, we do not use or disclose your Personal Information without your consent, unless required or permitted by law. You can obtain further information about how we evaluate our legitimate interests against any potential impact on you for specific activities by contacting us at privacy@markertherapeutics.com.
• Performance of Contract: Processing your Personal Information where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.
• Comply With a Legal or Regulatory Obligation: Processing your Personal Information where it is necessary for compliance with a legal or regulatory obligation.
• Consent: You have given express permission to a particular use of your Personal Information.

III. YOUR RIGHTS RELATED TO YOUR PERSONAL INFORMATION

We provide several ways for you to exercise certain privacy choices about your Personal Information that we process. We are committed to respecting your privacy rights under all applicable data protection and privacy laws. Some privacy laws require us to give specific details about individual rights to consumers, which we have set forth in Section IX of this Privacy Notice.

Marketing. You may opt out of marketing-related communications from us at any time by contacting us through the contact information provided in this Privacy Notice or by using the unsubscribe mechanism contained in each email. We will make efforts to honor your request as soon as reasonably possible. Please note that even if you opt out of marketing emails, we may still send you important administrative messages, which you cannot opt out of.

Automated Decision Making.  You may have a right not to be subject to a decision made solely using automated means, where such a decision would have a legal effect on you or produce a similarly significant effect.

Cookies Preferences.  To review and update your preferences for most types of cookies (other than those that are necessary) for our Services, click the “Cookie Preferences” link in the footer of the Website.

Location Information. You can choose whether to allow the Website to collect and use real-time location information from your device in your device’s privacy settings.

Access, Amendment, and Deletion.  Under applicable privacy laws, you may have the right to request to review, make amendments, have deleted, or otherwise exercise your rights over your Personal Information that we hold, subject to certain legal limitations and requirements. If you are subject to such a privacy law, you may submit a request to us related to your Personal Information:

• By submitting an email request to us at privacy@markertherapeutics.com
• By contacting us at +1 (713) 400-6400

We will process any request in accordance with – and where required by – applicable law with respect to your Personal Information. We will take steps to verify your identity before implementing your request. Unless prohibited by applicable law, we reserve the right to charge a reasonable fee to cover costs for providing copies of Personal Information that you request.

Although our active systems and databases will reflect updates that have been requested and processed, we may retain all Personal Information for backups, archiving, fraud and abuse prevention, analytics, and to satisfy other legal obligations that we reasonably believe apply.

We may need to retain certain information for recordkeeping purposes and to complete transactions you started before requesting a change or deletion. Some residual information may also remain in our databases and records and will not be removed. We may not always be able to fully fulfill your request, especially if doing so would compromise our duty of confidentiality or if we are legally allowed to handle the request differently.

For jurisdiction-specific data privacy policies, please consult Section IX of this notice for additional information.

IV. CHANGES TO THIS PRIVACY NOTICE

We may periodically update this Privacy Notice.  Please reference the “LAST UPDATED” legend at the top of this page to see when this Privacy Notice was last revised.  Any changes to this Privacy Notice will take effect upon the posting of the revised Privacy Notice on the Website.

V.  AGE RESTRICTIONS

Marker Therapeutics does not knowingly collect any Personal Information from children under 13. We encourage parents and legal guardians to monitor their children’s Internet activity and to help enforce this Privacy Notice by instructing their children never to provide Personal Information on this or any Website without parental permission. If a parent or guardian believes that Marker Therapeutics has Personal Information about a child under the age of majority in our records, please contact us immediately at privacy@markertherapeutics.com. We will make every effort to promptly remove such information and unsubscribe the child from any marketing lists.

VI.  THIRD PARTY PRIVACY PRACTICES

Our Website may contain links to third-party websites or apps. If you click on one of these links, be aware that each site will have its own Privacy Notice. We do not control these websites/apps and are not responsible for their policies. When you leave the Website, we encourage you to read the Privacy Notice of every website you visit.

We are not responsible for the privacy and data security practices of other organizations, such as Facebook, Instagram, Apple, Google, Microsoft, X, or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider, or device manufacturer. Please read their privacy policies and consider customizing your browser or device settings to limit the disclosure of certain information, such as location data.

Any Personal Information that you provide through these third-party websites, mobile applications, or social platforms will be subject to the Privacy Notice of its operator, and not this Privacy Notice.

VII. DO NOT TRACK SIGNALS

We do not monitor or follow “Do Not Track” (DNT) signals because there is no standard interpretation or practice for DNT signals. Therefore, we handle all user information consistent with this Privacy Notice.

VIII. MISCELLANEOUS TERMS AND CONDITIONS

Other Terms and Policies

This Privacy Notice is to be read in conjunction with this Website’s Terms of Use, Disclaimer, and Cookie Policy. Your access to and use of the Website may also be subject to any separate agreements or terms and conditions you have signed or agreed to with Marker Therapeutics. Please refer to those agreements as needed.

Reservation of Rights

Regardless of any other part of this Privacy Notice, we reserve the right to disclose any personally identifiable or non-personally identifiable information about you to: (a) fulfill a government request; (b) conform with the requirements of the law or legal process; (c) protect or defend our legal rights, property, Website, or other users; or (d) in emergencies, to protect the health and safety of our customers or the general public. This includes exchanging information with third parties and organizations to reduce credit risk and protect against fraud.

Security of Personal Information

We use standard physical, technical, and administrative measures designed to reduce the risk of loss, misuse, unauthorized access, disclosure, or modification of your Personal Information. Unfortunately, no system or network can be guaranteed to be 100% secure. If you believe that your interaction with us is no longer secure (for example, if you suspect that the security of specific Personal Information you provided has been compromised), please notify us immediately at privacy@markertherapeutics.com.

Retention of Personal Information

We retain each category of Personal Information for only as long as necessary to fulfill the purposes described in this Privacy Notice or as required by law. We consider the amount, nature, and sensitivity of the Personal Information; the potential risk of harm from unauthorized use or disclosure; the purposes for which we process it and whether those purposes can be achieved through other means; and any relevant legal, regulatory, tax, accounting, or reporting requirements.

IX.  ADDITIONAL INFORMATION FOR CERTAIN JURISDICTIONS

Residents of certain countries or U.S. states have additional rights under applicable privacy laws, as described in this section. The term “Personal Information” encompasses “Personal Information” as defined by Canadian law, as well as “Personal Data” as defined by the EU and the UK. See the list below for which section applies to you.

• If you are a resident of the EEA or the United Kingdom, please review Section A.
• If you are a California resident, please review Section B.
• If you are a resident of another U.S. state, please review Section C.
• If you are a resident of Canada, please review Section D.
• If you are a resident of Israel, please review Section E.

A. Residents of the European Economic Area or the United Kingdom

The GDPR, Swiss, and UK data protection laws (where applicable) give data subjects the following rights regarding their Personal Information:

Right of Access: You have the right to know whether or not Personal Information concerning you is being processed and, if so, to request access to the Personal Information. You have the right to request the purposes of the processing, the categories of Personal Information concerned, and the recipients or categories of recipient to whom the Personal Information has been or will be disclosed. You have the right to obtain a copy of the Personal Information that is being processed. For further copies requested by you, we may charge a reasonable fee based on administrative costs.

Right to Rectify and Complete Personal Information: You may request corrections to any inaccurate Personal Information and the completion of incomplete Personal Information. We will notify relevant third parties who have received your Personal Information about any rectifications and completions if required by law.

Right to Erasure (Right to Be Forgotten): You have the right to request that we erase Personal Information in limited circumstances where:

• It is no longer needed for the purposes for which it was collected;
• You have withdrawn your consent (if the data processing was based on consent);
• Following a successful right to object;
• It has been processed unlawfully; or
• To comply with a legal obligation to which we are subject.

We are not required to comply with your request to erase Personal Information if the processing of your Personal Information is necessary for compliance with a legal obligation, or the establishment, exercise, or defense of legal claims.

Right to Restriction of Processing: You have the right to restrict the processing of your Personal Information. In this case, the relevant data will be marked and processed solely by us for specific purposes. This right can only be exercised, subject to certain limitations, when: (i) the accuracy of your Personal Information is contested; (ii) the processing is unlawful, but you do not want the Personal Information erased; (iii) it is no longer needed for the purposes for which it was collected, but you still need it to establish, exercise, or defend legal claims; or (iv) you have exercised the right to object, and verification of overriding grounds is pending.

Right to Data Portability: You have the right to receive a copy of the Personal Information you have provided to us in a structured, commonly used, machine-readable format. You also have the right to transmit this data to another entity without our interference, but only when the processing is (a) based on your consent or the performance of a contract with you, and (b) conducted by automated means.

Right to Object: You have the right to object at any time to any processing of your Personal Information that is being processed based on our legitimate interests. You may exercise this right without incurring any costs. If you object, we are allowed to show that we have compelling legitimate interests that override your rights and freedoms. The right to object does not exist, in particular, if the processing of your Personal Information is necessary to take steps before entering into a contract or to perform an existing contract.

Right to Object to Our Use of Your Personal Information for Direct Marketing: You can request that we change the manner in which we contact you for marketing purposes. You can request that we not transfer your Personal Information to unaffiliated third parties for direct marketing or any other purposes.

Right to Withdraw Consent: If you have given us your consent for the processing of your Personal Information, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Right to Complain to Your Local Supervisory Authority: You have a right to complain to your local supervisory authority if you have concerns about how we are processing your Personal Information. We kindly request that you attempt to resolve any issue with us first, although you have the right to contact your supervisory authority at any time.

You may submit your GDPR, UK GDPR, or Swiss Federal Act on Data Protection request to us via:

Phone: +1 (713) 400-6400

Email: privacy@markertherapeutics.com

International Transfers. We may transfer Personal Data outside of the EEA/UK.  Where we do so, we rely on appropriate safeguards, such as European Commission–approved Standard Contractual Clauses (and the UK Addendum/IDTA, as applicable), and supplementary measures, or on adequacy decisions where available.

B. Residents of the State of California

CCPA Personal Information Use Disclosure

The California Consumer Privacy Act of 2019 (“CCPA”) requires that we disclose certain categories of Personal Information that we collect, the sources of that Personal Information, the purpose of collecting such information, and the categories of third parties with whom we share that information.

Categories of Personal Information that we collect and disclose. Our collection, use, and disclosure of Personal Information about a California resident will vary depending upon the circumstances and nature of our interactions or relationship with such resident.  Below, we describe the categories of Personal Information we may collect about California residents (including the categories of Personal Information that we have collected about California residents in the past 12 months):

• Identifiers: Includes direct identifiers such as a real name, alias, address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.  
• Characteristics of protected classifications: Such as disability and health information (e.g., which we may collect to, for example, make accommodations available to you at events we host), as well as inferences made about such characteristics based on other types of information we have collected from you or from third parties.
• Usage data: Internet or other electronic network activity information, including, without limitation, browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application, or advertisement.
• Location data: Location information about a particular individual or device.
• Employment history: Professional or employment-related information, including inferences about such information based on other types of information we have collected from you or from third parties.
• Education information: Education history and background, including inferences about such information based on other types of information we have collected from you or from third parties.
• Sensitive Personal Information: In limited circumstances, we may collect certain information considered to be sensitive Personal Information under the CCPA, including Social Security number and tax ID; driver’s license, state identification card, passport number, or other government identifier; health and medical data; citizenship or immigration status; and gender or gender identity/expression. If we process Sensitive Personal Information, California residents may also exercise the ‘Limit the Use and Disclosure of My Sensitive Personal Information’ option by contacting us as described above.

The chart below summarizes the CCPA disclosure requirements and where you can find this information in this Privacy Notice:

Per‑Category Disclosures

We do not ‘sell’ Sensitive Personal Information. We may ‘share’ (for cross-context behavioral advertising) the following categories via cookies and tracking technologies: (A) Identifiers and (E) Internet/Network Information.  You may opt out as described above.

In addition, we may disclose any of the categories of Personal Information we collect about you to other third parties as directed by or consented to by you, or where necessary to fulfill your specific requests.

Sales and Sharing

The CCPA defines a “sale” as disclosing or making available Personal Information to a third party in exchange for monetary or other valuable consideration, and “sharing” broadly includes disclosing or making available Personal Information to a third party for cross-context behavioral advertising. While we do not disclose Personal Information to third parties in exchange for monetary compensation, we may “sell” or “share” (as defined by the CCPA): (i) identifiers, usage data, customer records, commercial information, and profiles with our affiliates and subsidiary companies (e.g., so they can improve or enhance their own records and for other purposes); (ii) identifiers, customer records, and commercial information related to property sales and transactions with partners and third-party businesses, who may use or process the information for their own commercial purposes; and (iii) identifiers, usage data, and commercial information to ad networks, social media platforms, and data analytics providers (e.g., to improve and measure our ad and marketing campaigns). Some third-party cookies and similar technologies on our Website may constitute a ‘sale’ or ‘sharing’ of Personal Information under California law. You can manage these by using the ‘Cookie Preferences’ or by enabling GPC in your browser.

Sources of Personal Information

We may collect Personal Information from the following sources:

• Directly from the individual;
• Advertising networks;
• Data analytics providers;
• Social networks;
• Government entities;
• Data brokers;
• Affiliate and subsidiary companies; and
• Service providers.

Purposes of Collection, Use, and Disclosure

As described in more detail in Sections I and II, we collect, use, disclose, and otherwise process Personal Information (including sensitive Personal Information) for the following business or commercial purposes or as otherwise directed or consented to by you:

• Providing support and related services
• Analyzing and improving our business
• Advertising, marketing, and promotional purposes
• Securing and protecting our business
• Defending our legal rights
• Planning and facilitating business transactions
• Auditing, reporting, corporate governance, and internal operations
• Complying with any legal obligations

Retention 

We will retain your Personal Information for the period necessary to fulfill the purposes outlined in this Privacy Notice or otherwise disclosed to you at the time of collection, unless an extended retention period is required or permitted by law. We may retain Personal Information for longer where required by our legal and regulatory obligations, professional indemnity obligations, or where we believe it is necessary to establish, defend, or protect our legal rights.

California law may permit you to request that we:

• Provide you with a list of the categories of Personal Information we have collected or disclosed about you in the last twelve (12) months; the source category of such information; the business or commercial purpose for collecting or selling the information; and the categories of third parties to whom we disclosed the information.
• Provide access to and/or a copy of the Personal Information we have collected about you.
• Delete certain Personal Information we have collected about you.
• Do not sell your Personal Information to any third parties.

Certain information is exempt from such requests under applicable law. You may also have the right to receive information about the financial incentives we offer you (if any). You also have certain rights under the CCPA not to be subject to negative consequences for exercising your CCPA rights.

Minors

We do not knowingly sell or share Personal Information of consumers under 16 years of age. If we become aware that a consumer is between 13 and 16 years old, we will obtain that consumer’s affirmative authorization (opt-in) before any sale or sharing; for consumers under 13, we will obtain parental/guardian consent.

Submitting CCPA Requests

California residents may exercise their CCPA privacy rights to know/access, delete, correct, and limit use/disclosure of sensitive Personal Information by submitting a verifiable request to us via:

• Phone at +1 (713) 400-6400
• Email at privacy@markertherapeutics.com

We will respond to verified requests received from California residents as required by law. When you submit a request to know or delete, we will take steps to verify your identity by matching the information you provide with the information we have on file. You must provide all requested information so that we can process and verify your request. In some cases, we may ask for additional information to verify your request or, if necessary, to process it. If we are unable to verify a request, we will notify the requester. Authorized agents can submit a request on behalf of another individual by contacting us via email or phone. To do so, they will need to provide proof of their authorization. Additionally, we may also require the relevant consumer to directly verify their identity and the authority of the authorized agent.

Requests to Opt Out 

Our Website responds to global privacy control — or “GPC” — signals, which means that if we detect that your browser is communicating a GPC signal, we will treat that as a request to opt out of sales and sharing (such as through cookies and tracking tools) on the Website. Note that if you come back to the Website from a different device or use a different browser on the same device, you will need to opt out or set GPC for that device and browser as well. You can also manage your preferences for targeting and other cookies on our Website through the “Cookie Settings” link in the footer of each Website.

For more information about GPC, please visit: https://globalprivacycontrol.org/.  You may also submit a request to opt out of other sharing and sales by submitting a request via:

• Phone at +1 (713) 400-6400
• Email at privacy@markertherapeutics.com

Incentives

We may make certain programs or offerings available that are considered “financial incentives” under the CCPA. In such cases, we will provide notice of the material terms of these incentives and obtain consent from individuals before including them in these incentive programs. You can opt out of such programs at any time through the opt-out mechanism provided in the program information.

Rights Under California Shine the Light Law

California residents may request from businesses with whom they have an established business relationship: (1) a list of categories of Personal Information, such as name, address, e-mail address, and the type of services provided to the customer, that a business has disclosed to third parties during the immediately preceding calendar year for the third parties’ direct marketing purposes and (2) the names and addresses of all such third parties. To request the above information, please contact us by writing to us under the “Contact Us” section above. We will respond to such requests within 30 days of receipt.

For more information about our privacy practices, contact us as set forth above.

C. Residents of Other U.S. States

Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia provide (now or in the future) their state residents with rights to:

• Confirm whether we process their Personal Information, and if so, provide limited information about the nature of the Personal Information collected, processed, and disclosed, the business or commercial purpose, and information concerning third parties to whom the Personal Information was disclosed.
• Access and delete certain Personal Information.
• Correct inaccuracies in their Personal Information, considering the Personal Information’s nature and processing purpose (excluding Iowa and Utah).
• Data portability.
• Opt-out of Personal Information processing for:
  • targeted advertising (excluding Iowa);
  • sales; or
  • profiling in furtherance of decisions that produce legal or similarly significant effects (excluding Iowa and Utah).
• Either limit (opt-out of) or require consent to process sensitive Personal Information.

The exact scope of these rights may vary by state. To exercise or appeal a decision regarding a consumer rights request, please contact us at privacy@markertherapeutics.com.

If we deny your request, you may appeal our decision by emailing us and including ‘Appeal’ in the subject line and a brief explanation.  We will inform you in writing of any action taken or not taken in response to the appeal within 45 days, including a written explanation of the reasons.

Nevada provides its residents with a limited right to opt out of the sale of certain Personal Information. However, please note that we do not currently sell data that triggers the statute’s opt-out requirements.

D. Residents of Canada

Canadian privacy laws, including the Federal Personal Information Protection and Electronic Documents Act (“PIPEDA”), the Personal Information Protection Act, SBC 2003 c 63, in British Columbia, the Personal Information Protection Act, SA 2003 c P-6.5, in Alberta, and the Act Respecting the Protection of Personal Information in the Private Sector, CQLR c P-39-1 (“Quebec Private Sector Act”), in Quebec, apply to the collection of Personal Information from and about Canadian residents. “Personal Information,” as used in this Privacy Notice, includes “Personal Information” as defined under those laws.

Marker Therapeutics’ Privacy Officer is responsible for managing Personal Information, including under the Quebec Private Sector Act. You may contact them by email at privacy@markertherapeutics.com. When Marker Therapeutics collects Personal Information from Canadian residents, including those in Quebec, it transfers that data to data centers in the United States. When Marker Therapeutics relies on service providers to process Personal Information as described herein, these providers may also be located outside of Canada or Quebec. Personal Information may be processed in the United States and other countries by Marker Therapeutics and its service providers. While your Personal Information is stored outside Canada, it will be subject to the laws of that foreign jurisdiction, which may differ from Canadian law.

You have the right to request access or rectification of the Personal Information Marker Therapeutics holds related to you or to withdraw any consent given to the processing of such Personal Information.  You may exercise those rights by contacting Marker Therapeutics’ Privacy Officer at privacy@markertherapeutics.com.  If Marker Therapeutics has your Personal Information that was initially collected with your consent by an entity that subsequently provided it to Marker Therapeutics, please contact that entity for any questions related to that entity’s privacy policies and consent practices.

E. Residents of Israel

If you are a resident of Israel, please note the following:

No Legal Obligation

You are under no legal obligation to provide us your Personal Information. If you do not agree to the collection and use of your Personal Information as described herein, you may be ineligible for some or all of our Services. In that case, you should stop all communication with Marker Therapeutics, end any involvement with this Website, and cease using our Services.

Cross-Border Data Transfers

When we disclose Personal Information as described above, we may transfer this Personal Information to recipients outside of Israel. By interacting with this Website, our Services, or our company, or by providing us with your Personal Information, you confirm that you consent to the transfer of this information, including any subsequent transfers, for the purposes described herein.