PRIVACY POLICY

Last Updated: October 12, 2026

Cosette Pharmaceuticals, on behalf of itself and its subsidiaries and affiliates (“Cosette” or “We” or “Us”), respects your (“You” or “Your”) privacy and is committed to protecting it through our compliance with this Privacy Policy (“Privacy Policy”).

This Privacy Policy informs You about Cosette’s privacy practices, including what information We collect; how We use that information; and to whom We may disclose that information. This Privacy Policy applies to all information collected through our website, www.cosettepharma.com, and through any services or sites that link to this Privacy Policy (we refer to them collectively in this Privacy Policy as the “Website” or “Services”).

By visiting and/or using the Services or otherwise providing Us with Your personal information, You are agreeing to the terms of this Privacy Policy and the Terms of Use available here Terms of Use. Please read this Privacy Policy carefully to understand our policies and practices regarding your information.

If You do not agree to these policies and practices as described in this Privacy Policy and Terms of Use, please do not use the Website or otherwise provide Us with personal information.

We may update this Privacy Policy at any time. Any modifications to this Privacy Policy are effective as of the date they are posted to the Website. Your continued use of the Website after any modifications constitutes Your acceptance of the modified Privacy Policy. You may access the most recent version of this Privacy Policy at any time through the link provided on the Website’s homepage.

INFORMATION WE COLLECT

Information You Provide or That Is Otherwise Provided to Us

We may collect a variety of personal information from or about You when You interact with Our Services. The personal information that We collect depends on the context of Your interactions with Us and the Services, the choices You make, and the products and features You use.

The types and categories of personal information We may collect include:

  • Contact information, including name, address, email address, and other contact information You provide to Us.
  • Location information, including general geographic location such as country, state or province, or city.
  • Anonymized demographic information in connection with the use of our products.
  • Content, including photographs, and other information You elect to provide to Us through the Services, emails, or other communications sent to Us, including information related to adverse events, product quality, or general inquiries.
  • Content and information You otherwise permit Us to collect.

Information Collected Automatically

We may automatically collect or receive additional information regarding Your use of the Website and the computers and mobile devices You use to access the Website (collectively, the “Traffic Data”). Traffic Data may include (a) Your IP address, which may consist of a static or dynamic IP address and will sometimes point to a specific identifiable computer or mobile device; (b) login credentials and login tracking data; (c) information about Your mobile device, including, but not limited to, network and carrier; (d) browser type and language; (e) any modifications made to Your account; (f) geolocation information; (g) referring and exit pages and URLs; (h) date and time of access to Cosette’s Websites; and (i) details regarding Your activity on the Website, such as search queries and other performance and usage data.

Cookies: We may use cookies, pixel tags, and other similar technology to collect information about You and how You use the Website. Cookies are small text files the Website can use to recognize You as a repeat visitor and may include both session cookies, which expire once You close the Website, and persistent cookies, which stay on Your computer or mobile device until You delete them. Pixel tags recognize a browser’s cookie when a browser visits a particular Website on which the pixel tag is located in order to learn which advertisement brings You to a given Website. By using the Website, You consent to the processing of data about You by these analytics providers for the purposes set forth in this Privacy Policy.

We may use this type of technology for various purposes, including to: (a) identify Your computer or mobile device; (b) personalize Your experience; (c) utilize and provide features of social media platforms; (d) analyze which portions of the Website are visited and used most frequently; (e) enhance and improve the Website and Your experience using the Website; and (f) measure and optimize advertising and promotional effectiveness.

Third-Party Analytics: We may use third-party analytics services (e.g., Google Analytics) to evaluate Your use of the Website, compile reports on Your activity, analyze performance metrics, and collect and evaluate other information relating to the products and services marketed and promoted via the Website. We may also engage third-party technology providers, ad exchanges, ad networks, advertisers, agencies, and ad servers to perform these services on Cosette’s behalf. Cookies and other technologies may be used to help analyze and provide Us with this analytical data.

For more information on Google Analytics, including how Google Analytics collects, uses, and discloses information, refer to the following page: www.google.com/policies/privacy/partners/.

You can set your browser to refuse all or some browser cookies or other tracking technology files, or to alert You when these files are being sent. If You disable or refuse cookies or similar tracking files, some Services features may be inaccessible or not function properly. Visit https://thenai.org/how-to-opt-out/ to learn more about opting out of cookies or other tracking technologies. While some browsers include a “Do Not Track” (DNT) setting, Our Services do not currently respond to browser DNT signals.

HOW WE USE YOUR INFORMATION

We may use information that We collect about You or that You provide to Us, including any personal information, to:

  • Provide You with the Services and any contents, features, information, products, or services that we make available through the Services, including to create an account for You.
  • Provide customer support or communicate with You, including to solicit Your feedback.
  • Improve Our Services, including by analyzing Your information and creating aggregated data derived from Your information to develop, maintain, analyze, improve, optimize, measure, and report on Our Services and their features and how users interact with them.
  • Promote Our Services, business, and offerings through marketing and advertising communications. If You do not wish for Us to use Your information to promote Our own or third parties’ products or services, You can opt out by unsubscribing to any email sent by Us to You.
  • Carry out Our obligations and enforce Our rights arising from any contracts entered into between You and Us.
  • Notify You when Services updates are available and about changes to any products or services We offer or provide.
  • Communicate with Cosette’s parent companies, subsidiaries, joint ventures, or other companies under common control with Us.
  • In any other way We may describe when You provide the information.
  • Fulfill any other purpose for which You provide it.
  • For any other purpose with Your consent.

In an ongoing effort to better understand users of the Website, We may analyze certain aspects of Your information in anonymized and aggregate form so that it is no longer personal information. We may use this aggregated data to operate, maintain, manage, and improve the Website and/or to provide new and additional products and services.

HOW WE DISCLOSE INFORMATION

We may disclose personal information that we collect or You provide as described in this Privacy Policy:

  • To Our subsidiaries and affiliates.
  • To contractors, service providers, and other third parties We use to support Our business and use it only for the purposes for which We disclose it to them.
  • To parties and networks that provide online tracking technologies that We use to conduct internal analytics relative to the use of the Services and as described above. Under certain state privacy laws, these activities may be deemed “sales,” “sharing,” or “targeted advertising.” You have the right to opt out of the use or disclosure of your personal information for these purposes and may request to opt out through your browser settings or our cookie preferences tool, or by contacting us at privacy@cosettepharma.com.
  • To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Us is among the assets transferred.
  • To fulfill the purpose for which You provide it.
  • For any other purpose disclosed by Us when You provide the information.
  • With Your consent.

We may also disclose Your personal information:

  • To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
  • To enforce or apply Our website Terms of Use and other agreements, including for billing and collection purposes.
  • If We believe disclosure is necessary or appropriate to protect the rights, property, or safety of Our organization, or others.

HOW WE RETAIN YOUR INFORMATION

We will retain Your information in compliance with applicable law and for as long as reasonably necessary to fulfill the purposes described, such as to provide You with certain services, respond to any request or communication You send to us, or as otherwise may be necessary for Us to comply with any legal, regulatory, or contractual obligations We may have.

HOW WE PROTECT YOUR INFORMATION

We use commercially reasonable measures designed to protect Your information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no system or service is completely secure. We cannot guarantee the security of Your information transmitted to, through, using, or in connection with the Services. In particular, e-mail, texts, and chats sent to Us may not be secure, and You should therefore take special care in deciding what information You send to Us via e-mail, text, and chat. Any transmission of personal information is at Your own risk.

NOTICE TO NON-U.S. RESIDENTS

We use third party vendors to host the Website. The Website and its servers are operated in the United States. However, information collected through the Website may be replicated and stored in other places for archival, disaster recovery, and back-up purposes. If You are located outside of the United States, please be aware that Your information, including Your personal information, may be transferred to, processed, maintained, and used on computers, servers, and systems located outside of Your state, province, country, or other governmental jurisdiction where the privacy laws may not be as protective as those in Your jurisdiction. If You are located outside the United States and choose to use the Website, You hereby irrevocably and unconditionally consent to such transfer, processing, and use in the United States and elsewhere.

LINKS TO THIRD PARTY WEBSITES

You may find links to the websites and services of unaffiliated third parties on Cosette’s Website. This Privacy Policy does not govern Your use of these third party websites and services. We do not control the content or links that appear on these websites and We are not responsible for the practices employed by these third parties. You should review the terms and conditions of any third-party websites and services before supplying any of Your information.

CHILDREN

The Website is not directed to children under the age of 16 and We do not knowingly collect personal information from any child under the age of 16 except where required to comply with FDA (and other) regulations with regard to the safety of Cosette’s products. If We learn We have collected or received personal information from a child under 16 without verification of parental consent, We will delete that information. If You become aware of any information We have collected from children under age 16, please contact Us at privacy@cosettepharma.com.

YOUR PRIVACY RIGHTS

Depending on Your state or country of residence, You may have certain rights related to Your personal information, including:

  • Access and Data Portability. You may confirm whether We process Your personal information and request a copy of the personal information We process. To the extent feasible and required by law, information will be provided in a portable format.
  • Correct. You may request that We correct inaccuracies in Your personal information that We maintain, taking into account the nature of the information and processing purpose.
  • Delete. You may request that We delete personal information about You that We maintain, subject to certain exceptions under applicable law.
  • Opt Out of Using Personal Information for Targeted Advertising, Profiling, and Sales. If applicable, You may request that We do not use your personal information for these purposes.

Important: The exact scope or existence of these rights varies by jurisdiction. There are also several exceptions where We may not have an obligation to fulfill Your request. We will not discriminate against You in response to any privacy requests You make.

In order to ensure that a request is genuine, We may need to take steps to verify Your identity or the identity of an agent making a request on Your behalf.

If You are a resident of California, please see the “California Residents” section below for additional information that may apply to You.

To exercise any of these rights, please email us at privacy@cosettepharma.com

Right to Appeal. Depending on Your state of residence, if We decline to take action on Your request, You may appeal Our decision within thirty (30) days after receiving Our response. To submit an appeal, please email Us at privacy@cosettepharma.com with the subject line “Privacy Request Appeal” and include a description of Your original request and the reason You believe Our decision should be reconsidered. We will respond to Your appeal in writing within the time period required by applicable law (generally forty-five (45) or sixty (60) days of receipt, depending on Your state of residence), including a written explanation of any action taken or not taken in response to the appeal and the reasons for Our decision.

CONTACT US

If You have questions about this Privacy Policy or to exercise any of Your rights, You can contact us via e-mail at privacy@cosettepharma.com, via phone at 1-800-922-1038, or via mail at the following address: 200 Crossing Boulevard, 4th Floor, Bridgewater, NJ 08807 Attn: Customer Service.

CALIFORNIA RESIDENTS

This California Resident Privacy Notice supplements the information and disclosures contained in our Privacy Policy. It applies to individuals residing in California from whom we collect, use, and disclose Personal Information as a business under the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (California Civil Code §§ 1798.100 to 1798.199) and its implementing regulations, as amended or superseded from time to time (“CCPA”).

California Personal Information does not include, and this section of the Privacy Policy does not apply to:

    • Information that is exempt or excluded from the CCPA;
    • Deidentified or aggregated information; or
    • Personal Information we collect, use, and share on behalf of our customers as a “service provider” under the CCPA.

CATEGORIES OF PERSONAL INFORMATION COLLECTED

In addition to the information provided under the “Information We Collect” section above, the following list describes the CCPA categories of personal information collected by Cosette Pharmaceuticals in the last 12 months:

      • Identifier: Name, postal address, email address, phone number, unique personal identifier, online identifier, Internet Protocol (IP) address, and other similar identifiers in connection with product inquiries and/or complaints or optional newsletters. Name, postal address, email address, phone number, online identifier, Internet Protocol (IP) address, professional identification numbers, prescribing information, and other similar identifiers in connection with product outreach to healthcare providers.
      • Customer Records: See Identifiers above solely in connection with product inquiries and/or complaints or newsletters (requiring customer sign-up).
      • Protected classification characteristics under California or federal law: Not collected.
      • Commercial: Not collected.
      • Biometric: Not collected.
      • Internet or network activity: Information regarding a consumer’s interaction with Cosette’s websites, application, or advertisement, passwords and pins created to access Cosette’s websites.
      • Geolocation data: Geographic location based on URL.
      • Sensory data: Not collected.
      • Professional or employment-related information: NPI and other healthcare provider designations and identifiers, and/or specialties.
      • Non-public education information: Not collected.
      • Inferences: Cosette Pharmaceuticals may make certain inferences from individual or combined pieces of Information above.
      • Personal Information does not include: Publicly available information from government records; De-identified or aggregated consumer information; personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.

SOURCES OF COLLECTION OF PERSONAL INFORMATION

We collect Personal Information from the sources described in the “Information We Collect” section of this Privacy Policy. In addition, we collect Personal Information from the following categories of sources:

      • You/Your Devices
      • Affiliates
      • Advertising Networks
      • Analytics Providers
      • Business Partners

USE OF PERSONAL INFORMATION

We may use the categories of Personal Information that we collect, as described above, for one or more of the business purposes and commercial purposes described in the “How We Use Information” section above.

DISCLOSURES OF PERSONAL INFORMATION IN LAST 12 MONTHS

We may disclose the categories of Personal Information that we collect as indicated above to the categories of parties described in the “How We Disclose Information” section above. In addition:

      • Cosette Pharmaceuticals discloses Your personal information as required by law or for a business purpose to Cosette affiliates, service providers and third parties where You or Your agent(s) have authorized that disclosure.
      • Cosette Pharmaceuticals does not collect information from minors. Cosette Pharmaceuticals may come into possession of information about minors in connection with product inquiries, complaints, and/or adverse events, in which case Cosette Pharmaceuticals complies with all FDA and other applicable regulations.

In the last twelve months, we have disclosed Personal Information to parties and networks that provide online tracking technologies that We use to conduct internal analytics relative to the use of the Services and as described in this Privacy Policy. These activities may be deemed “sales,” “sharing,” or “targeted advertising.” You have the right to opt out of the use or disclosure of your personal information for these purposes and may request to opt out through your browser settings or our cookie preferences tool, or by contacting us at privacy@cosettepharma.com.

RETENTION OF PERSONAL INFORMATION

We retain Personal Information for as long as necessary to carry out the processing activities described in this Privacy Policy, including but not limited to providing the Services, providing You with customer service, answering your queries or resolving technical problems, fulfilling our legal obligations, establishing, protecting or defending legal claims, or enforcing our agreements. We may also retain cached or archived copies of Your information for a reasonable period of time. For all of our sites except Vyleesi.com, we retain Google Analytics user data for two (2) months and event data for fourteen (14) months. At Vyleesi.com, we retain both user data and event data for fourteen (14) months.

YOUR RIGHTS

See below for rights You may have in addition to, or that supplement, the rights identified in the “Your Privacy Rights” section above.

RIGHT TO KNOW
California residents have the right to request that Cosette Pharmaceuticals disclose certain information to You about Cosette’s collection, use, disclosure, and sale of Your Personal Information. If Cosette Pharmaceuticals receives and confirms a verifiable consumer request, Cosette Pharmaceuticals will disclose to You, depending on the scope of the request:

        • The categories of Personal Information that Cosette Pharmaceuticals collected about You.
        • The categories of sources for the Personal Information that Cosette Pharmaceuticals collected about You.
        • Cosette Pharmaceuticals’ business or commercial purpose for collecting or selling that Personal Information.
        • The categories of third parties with whom Cosette Pharmaceuticals sold or shared that Personal Information.
        • The specific pieces of Personal Information Cosette Pharmaceuticals collected about You (also called a data portability request).
        • If Cosette Pharmaceuticals disclosed Your Personal Information for a business purpose, identifying the Personal Information categories that each category of recipient obtained.

RIGHT TO DELETE OR CORRECT
You have the right to request that Cosette Pharmaceuticals delete or correct Your Personal Information, subject to certain exceptions. Once Cosette Pharmaceuticals receives and confirms Your verifiable consumer request, We will delete or correct (and direct Cosette’s service providers to delete or correct) Your Personal Information from Cosette’s records, unless an exception applies. Cosette Pharmaceuticals may deny Your request if retaining the information is necessary for Us or Cosette’s service provider(s) to:

        • Complete the transaction for which Cosette Pharmaceuticals collected the Personal Information, provide a good or service that You requested, take actions reasonably anticipated within the context of Cosette’s ongoing business relationship with You, or otherwise perform Cosette’s contract with You.
        • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
        • Debug products to identify and repair errors that impair existing intended functionality.
        • Exercise a right provided for by law.
        • Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et seq.).
        • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if You previously provided informed consent.
        • Enable solely internal uses that are reasonably aligned with consumer expectations based on Your relationship with us.
        • Comply with a legal obligation such as retaining records in connection with complaints and/or adverse events for the statutory required period(s).
        • Make other internal and lawful uses of that information that are compatible with the context in which You provided it.

EXERCISING YOUR RIGHTS
To exercise your rights described above or the rights identified in the “Your Privacy Rights” section above, please submit a verifiable consumer request to Us by email at privacy@cosettepharma.com or by mail at the following address: 200 Crossing Boulevard, 4th Floor, Bridgewater, NJ 08807, Attn: Customer Service. You may also reach Us at 1-800-922-1038.

Only You, or a person authorized to act on Your behalf, may make a verifiable consumer request related to Your Personal Information. You may also make a verifiable consumer request on behalf of Your minor child. You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

        • Provide sufficient information that allows Cosette Pharmaceuticals to reasonably verify You are the person about whom Cosette Pharmaceuticals collected Personal Information or an authorized representative.
        • Describe Your request with sufficient detail that allows Us to properly understand, evaluate, and respond to it.

Cosette Pharmaceuticals cannot respond to Your request or provide You with Personal Information if Cosette Pharmaceuticals cannot verify Your identity or authority to make the request and confirm the Personal Information relates to You.

Cosette Pharmaceuticals will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

You have the right not to receive discriminatory treatment, and We will not discriminate against You for exercising Your rights.

REQUESTS, RESPONSES, AND TIMING

Cosette Pharmaceuticals will respond to a verifiable consumer request within forty-five (45) days of its receipt. If Cosette Pharmaceuticals requires more time, Cosette Pharmaceuticals will inform You of the reason and extension period in writing. Cosette Pharmaceuticals will deliver Cosette’s written response by mail or electronically, at Your option. Any disclosures Cosette Pharmaceuticals provides will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response Cosette Pharmaceuticals provides will also explain the reasons Cosette Pharmaceuticals cannot comply with a request, if applicable. For data portability requests, Cosette Pharmaceuticals will select a format to provide Your Personal Information that is readily useable and should allow You to transmit the information from one entity to another entity without hindrance. Cosette Pharmaceuticals does not charge a fee to process or respond to Your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If Cosette Pharmaceuticals determines that the request warrants a fee, Cosette Pharmaceuticals will tell You why Cosette Pharmaceuticals made that decision and provide You with a cost estimate before completing Your request.

Under California Civil Code Section 1798.83, California residents who have an established business relationship with Us may choose to opt out of Cosette’s sharing their contact information with third parties for direct marketing purposes. If You are a California resident and You wish to opt out, please send an e-mail to privacy@cosettepharma.com or call us at 1-800-922-1038.