Privacy Policy

Last updated April 18, 2024

Thank you for choosing to be part of our community at Atea Pharmaceuticals Inc, a Delaware corporation, with its principal place of business located at 225 Franklin Street, Suite 2100, Boston, Massachusetts 02110 (“Atea”, “company”, “we”, “us”, or “our”). We are committed to protecting your personal data and your right to privacy. If you have any questions or concerns about our policy, or our practices with regards to your personal data, please contact us at [email protected]. For the purpose of the General Data Protection Regulation (the “GDPR”), we are the data controller.

When you visit our website at www.ateapharma.com (the “Site”), you trust us with your personal data. In this privacy notice, we describe our privacy policy (the “Privacy Policy”). We explain what information we collect, how we use it, the basis on which we will process any personal data or usage information we collect from you or that you provide to us and what rights you have in relation to it.

Please read this Privacy Policy carefully as it will help you make informed decisions about sharing your personal data with us.

WHAT INFORMATION DO WE COLLECT?

Personal data you disclose to us

We collect personal data that you voluntarily provide to us when expressing an interest in obtaining information about us or our product candidates, when participating in activities on the Site or otherwise contacting us, such as via email, telephone or otherwise.

The personal data that we collect depends on the context of your interactions with us and the Site, the choices you make and the products and features you use.

The personal data we collect can include the following:

• your name and contact information;
• email address; and
• telephone number.

The Site is not intended to be used for the reporting of information about adverse events or side effects that may occur while enrolled in any Atea clinical trials. You should report such events to your study doctor or a designee at the clinical trial site for the applicable trial.

Information automatically collected

We automatically collect certain information sent to us by your computer, mobile phone or other access device when you visit, use or navigate the Site. This information does not reveal your specific identity (like your name or contact information) but will include device and usage information, such as your IP address, browser and device characteristics, operating system, referring URLs, device name, country, location, information about how and when you use our Site, mobile network information and other technical information and standard web information such as your browser type and the pages you access on our Site.

As it is in our legitimate interests to process your data to provide useful content to you, we collect this information to maintain the security and operation of our Site, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies. Please refer to Section 4 below (Do We Use Cookies and Other Tracking Technologies) for more information.

Information collected from other sources

We may also obtain information about you from other sources, such as:

• from our business partners, who may provide us with information about you;
• public databases;
• when we monitor other websites, these may include your public personal data, for example if we monitor digital conversations on public platforms to understand what people are saying about us or our industry more generally. We may combine information that we have about you from various sources; and
• when you enroll in a clinical trial sponsored by Atea.

2. HOW DO WE USE YOUR INFORMATION?

We use your personal data to:

• contact and interact with you in response to your requests;
• operate our business;
• comply with applicable laws, regulations and guidance;
• comply with demands or requests made by regulators, governments, courts and law enforcement agencies;
• investigate and take action against illegal or harmful behavior of users;
• enforce our terms, conditions and policies; and
• improve our day-to-day operations, including to analyze data, identify usage trends, to evaluate and improve our Site and your experience, to ensure we have up-to-date contact information for you.

3. ON WHAT BASIS DO WE USE YOUR PERSONAL DATA?

Data protection law sets out a number of reasons on which a company may rely to collect and use your personal data. We use your personal data for the following reasons:

• For legitimate business purposes: We use your personal data to make our communications with you relevant and personalized to you. It also helps us to operate and improve our business.
• To comply with our legal obligations and other demands for information: We need to be able to comply with laws, regulations and guidance, as well as the other requests or demands for data as set out here. They affect the way in which we run our business.
• You have given your consent: At times we may need to get your consent to allow us to use your personal data for one or more of the purposes set out above. See the “Your rights regarding your personal data” section for information about the rights that you have if we process your information on the basis of your consent.

4. WILL YOUR INFORMATION BE SHARED WITH ANYONE?

• Vendors, Consultants, Advisors and Other Third-Party Service Providers. We will share your data with third party vendors, consultants, advisors, service providers, contractors or agents who perform services for us or on our behalf and require access to such information to do that work. Examples include: data analysis, email delivery, and hosting services. We will allow selected third parties to use tracking technology on the Site, which will enable them to collect data about how you interact with the Site over time. This information will be used to, among other things, analyze and track data, determine the popularity of certain content and better understand online activity.
• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

We will share your information with law enforcement agencies, public authorities or other organizations if legally required to do so, or if we have a good faith belief that such use is reasonably necessary to:

• comply with a legal obligation, process or request;
• enforce our terms and conditions and other agreements, including investigation of any potential violation thereof;
• detect, prevent or otherwise address security, fraud or technical issues; or
• protect the rights, property or safety of us, our users, a third party or the public as required or permitted by law (exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction).

We do not sell, rent or lease your personal data to others.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

We use cookies and similar tracking technologies (like web beacons and pixels) to access or store information about your browsing activities over time and across our Site. Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your web browser (if you allow) that enables the site’s or service provider’s systems to recognize your browser and capture and remember certain information. Cookies allow us to recognize and count the number of users that interact with our Site and to see how users move around our Site when they are using it. They are also used to help us understand your preferences based on previous or current Site activity. We also use cookies to help us compile aggregate data about Site traffic and site interaction so that we can offer better Site experiences and tools in the future. You can find more information about cookies and how to manage them at http://www.allaboutcookies.org.

In addition, we use Google Analytics for the purpose of providing better service. Google uses first-party cookies (such as the Google Analytics cookies) and third-party cookies (such as the DoubleClick cookie) or other third-party identifiers, tracks user interactions and compiles data regarding traffic throughout the Site so we can improve the Site for the best user experience. These web analytic tools help us understand how users engage with our Site. This information is used to compile reports and help us improve our Site. The reports disclose website trends without identifying individual visitors. Users can set preferences by using the Google Ad Settings page or opt out by using the Google Analytics Opt Out Browser add on. For more information on opting out of being tracked by Google Analytics across all websites you use, visit this Google page: http://tools.google.com/dlpage/gaoptout. You can opt out of Google Analytics without it affecting how you use our Site.

We will also use trusted third-party service providers that track this information on our behalf.

You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. Since each browser is a little different, look at your browser’s help menu to learn the correct way to modify your cookies.

If you turn cookies off, it may affect your user experience with our Site.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

We will only keep your personal data for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements). When we have no ongoing legitimate business need to process your personal data, we will either delete or anonymize it, or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store your personal data and isolate it from any further processing until deletion is possible.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

We have implemented technical and organizational security measures designed to protect the security of any personal data we process. However, please also remember that we cannot guarantee that the internet itself is 100% secure. Although we will do our best to protect your personal data, transmission of personal data to and from our Site is at your own risk. You should only access the Site within a secure environment. Once we have received your information, we will take technical and organizational measures to safeguard your personal data against loss, theft and unauthorized use, access or modification.

We will, from time to time, host links on and from our Site to third party websites. If you follow a link to any of these websites, these websites will have their own privacy policies and we do not accept any responsibility or liability for these policies. Please check these policies before you submit any information to those websites.

8. WHERE DO WE STORE YOUR PERSONAL DATA?

Your information, including personal data, may be transferred to, and maintained on, computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that the information you provide, including personal data, is transferred to the United States and is processed there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

Atea will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your personal data will take place to an organization or a country unless there are reasonable controls in place including the security of your data and other personal information.

9. DO WE COLLECT INFORMATION FROM CHILDREN?

We do not knowingly solicit data from or market to children under 13 years of age. By using the Site, you represent that you are at least 13 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Site. If we learn that personal data from users less than 13 years of age has been collected, we will take reasonable measures to promptly delete such data from our records. If you become aware of any data we have collected from children under age 13, please contact us at [email protected].

10. WHAT ARE YOUR PRIVACY RIGHTS?

You may access and use the Site without providing any personal data. If you choose to provide any personal data, you may have the right to request to review, update, correct, suppress, restrict or delete personal data that you have provided to us through the Website. To make a request, please contact us as indicated below and we will respond to your request in a manner that is consistent with applicable law within a reasonable period of time. For your protection, we may need to verify your identity before taking action with your request

If you are resident in the European Economic Area and you believe we are unlawfully processing your personal data, you also have the right to complain to your local data protection supervisory authority in the EU country in which you live or work or where you think we have infringed data protection laws. You can find their contact details here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

Do Not Track. Do Not Track (DNT) is a privacy preference that users can set in some web browsers, allowing users to opt out of tracking by websites and online services. We do not currently respond to or recognize DNT.

11. DO WE MAKE UPDATES TO THIS PRIVACY POLICY?

Yes, we will update this Privacy Policy as necessary to stay compliant with relevant laws.

We will update this Privacy Policy from time to time. The updated version will be indicated by an updated “Revised” date and the updated version will be effective as soon as it is accessible. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.

12. HOW CAN YOU CONTACT US ABOUT THIS PRIVACY POLICY?

If you have any further questions or comments about us or our Privacy Policy, you may contact us at: Atea Pharmaceuticals, Inc., 225 Franklin Street, Suite 2100, Boston, Massachusetts 02110 Attention: General Counsel, by phone at 857-284-8891 or by e-mail us at [email protected].