Privacy Notice

We are committed to protecting the privacy of visitors to our web site. We will not use any personal information collected at this site for any purpose other than internal use.

This Privacy Notice explains the practices that Bellus Health, Inc. and all of its subsidiaries (“BELLUS”) follow in connection with the personal data that we collect through this website, when contacted directly and through our research.

What is Personal Data?

In the context of the work that we perform, personal data refers to any information that relates to an identified or identifiable individual such as a name, email, mailing address, phone number, or any information related to an individual’s health.

Personal Data Collection

We collect personal data provided during direct communication with any of our representatives either through email or by phone.

We do not collect identifiable personal data directly from our website. However, we will track visitor activity to our site using IP addresses and set temporary cookies to track user sessions. This data helps us keep track of the number of visitors and help facilitate the dynamic nature of our site. This information is not connected in any way with personal information (name, address, etc.). The user’s identity remains anonymous with this type of information.

To conduct clinical research, we do not collect personal data directly. Personal data is collected through the partners (“Site”) that manage the clinical trials that we sponsor. They collect personal data of participants of the clinical trial or as a Site investigator, employee or contractor involved in the clinical trial.

Personal Data Processing

To communicate with you when you contact us by calling or sending us an email, we collect contact information including name, email address, and in some cases, phone number in order to reply to inquiries.

To conduct clinical research, the patient data that we obtain and use from the Sites is pseudonymized and managed through an identifier that we cannot link back to participants. Only the Site that collected personal data can link it with the identifier they provide to us. The data we obtain and process includes an identifier to track future data against and health-related data for clinical outcome assessment.

The investigator, employee, or contractor data that we obtain from the Site is used to verify the individual’s qualifications, satisfy documentation requirements for the clinical trial, and for other administrative purposes.

Purpose of Personal Data Processing

We will process personal data for the following purposes:

  • To communicate with you if you request information from us
  • To review the outcomes of clinical trial research
  • To review the qualifications of contracted third-parties

Legal Basis for Processing

In order to comply with different privacy and data protection regulations around the world and specifically to comply with the General Data Protection Regulation (“GDPR”) in the EU, we are required to provide a legal basis for the processing of personal data.

We will not process personal data unless we have a legal justification to do so. We will only process personal data if:

  • We or the Sites we partner with have obtained explicit consent prior to the processing of personal data
  • If we need personal data to perform a contractual obligation
  • If we need to process personal data to fulfill our legal and regulatory obligations
  • If we have a legitimate interest that will not put your rights and freedoms at risk

Personal Data Disclosure

We will only disclose personal data to the following parties under specific circumstances:

  • To BELLUS personnel, if required, to fulfill your request
  • To contracted third-parties that support our systems or support the activities of clinical trials, including the Sites that hold personal data about patients and investigators, employees or contractors
  • To law enforcement, regulatory bodies or courts, when we are required to do so under applicable laws and regulations
  • In connection with the sale or reorganization of all or part of our business, as permitted by applicable law

Personal Data Security

We are committed to protecting the personal data we collect, process, and disclose. We maintain appropriate safeguards and have undertaken reasonable steps to protect all personal data, ensure that we limit its use and that we disclose it only to the parties that have a legitimate reason for having access to it.

If you sign up to our mailing list, this information will be used to initiate contact with BELLUS only. Only BELLUS’s authorized personnel or representatives will have access to your personal information.

Personal Data Transfers

Personal data will be transferred to BELLUS systems that reside in the US and Canada. The data will be protected and in some cases pseudonymized to ensure that the risks to your privacy are minimized.

We have implemented Standard Contractual Clauses with the parties that reside in the EU and that will transfer personal data to BELLUS in the US and Canada.

Personal Data Retention

BELLUS will retain contact information for a minimum period of 10 years.

BELLUS and the Sites that we partner with will retain personal data for as long as necessary for the purpose of research and to comply with legal and regulatory obligations.

Rights You Can Exercise About Your Personal Data

Subject to any exceptions provided by law, you have the right to request access to, update, or deletion of your personal data.

You also have the right to request the restriction of or object to the processing of your personal data. Additionally, you have the right to request to have your data transferred to another organization in a readable electronic format.

In each particular case, we will inform you of the consequences of your request and whether there are any exemptions to honouring your requests based on legal or contractual requirements.

During a clinical trial, your rights to access, update or delete your personal data may be limited as we need to process data in specific ways in order to maintain the reliability and accuracy of the clinical research.

To submit any request about your personal data you may contact us via email at privacy@nullbellushealth.com

Contact Us

If you have any further questions regarding the personal data that BELLUS or any of our contracted third-parties partners collect and process or if you have feedback regarding this Privacy Notice, you may contact us at privacy@nullbellushealth.com

EU Individuals – Right to Lodge a Complaint with a Supervisory Authority

If you reside in the EU and want to lodge a complaint with a Supervisory Authority (Data Protection Authority) you may do so in the member state where you reside, where you work, or where you may have experienced an issue with the processing of your personal data.

EU & UK Representative

General Data Protection Regulation (GDPR) – European Representative

Pursuant to Article 27 of the General Data Protection Regulation (GDPR), Bellus Health has appointed European Data Protection Office (EDPO) as its GDPR Representative in the EU. You can contact EDPO regarding matters pertaining to the GDPR:

  • By using EDPO’s online request form: https://edpo.com/gdpr-data-request/
  • By writing to EDPO at Regus Paris- Champs Elysées, 12/14 rond-point des Champs Elysées, Paris, 75008, France

UK General Data Protection Regulation (GDPR) – UK Representative

Pursuant to Article 27 of the UK GDPR, Bellus Health has appointed EDPO UK Ltd as its UK GDPR representative in the UK. You can contact EDPO UK regarding matters pertaining to the UK GDPR:

Third-Party Privacy Policies

Please be aware that other websites accessible through our site may collect personally identifiable information. The information practices of those third-party websites linked to BELLUS’s website are not covered by this privacy statement