Apellis Pharmaceuticals, Inc.
Dated: May 28, 2023

Apellis Pharmaceuticals Inc, based at 100 5 th Avenue, Waltham, MA 02451, US,
(“we”, “us” and “our”) as the data controller responsible for this website recognizes the
importance of and is committed to respecting and protecting your privacy. This Privacy
Policy applies to our collection and use of personal information through our website
apellismedicalhub.ca (the ”Site”).

We collect the following personal data about you:

• When using our website, we collect data that your browser transmits to our
  server (so-called ‘’server log files’’). When you visit our website, we collect the
  following data that is technically necessary for us to display the website to you
  (date and time at the moment of access, amount of data sent in bytes,
  source/reference from which you came to the page, browser used, operating
  system used, IP address used).
• Contact information: full name, email address, mailing address, street address, ZIP
  code, state, country, phone number
• Professional credentials: Occupation, specialty, salutation, organization name,
  institution, HCP type
• Health information: Disease state
• Any personal information included by the HCP in the medical question area

Also, when you select the Compassionate Use Request in the ‘Resources’ (Early Access
Program) area of our Site you should know that you will be redirected to an online form of a
third-party Site ‘Smartsheet’ where the following data will be collected:

• Treating Physician: full name, Institution, address, city, postal code, country, email
• Patient: Date of birth, gender, disease/condition, medical history/current status,
  laboratory values and any other data shared via files and the area of rationale for
  request.

The linked websites are not under the control of Apellis, and Apellis is not responsible for
the content available on any other website linked to this website. For more information
check Apellis Terms and Conditions

We collect this data from:
You (HCPs)

Your Consent to Collection, Use and Disclosure
We collect, use and disclose your personal data with your consent or as permitted or
required by Canadian privacy laws. How we obtain your consent (i.e., the form we use) will
depend on the circumstances, as well as the sensitivity of the information collected. Subject
to applicable laws, your consent may be express or implied, depending on the circumstances
and the sensitivity of the personal data in question.

If you choose to provide personal data to us, we assume that you consent to the collection,
use and disclosure of that personal data as outlined in this Privacy Policy.

Purposes for which we collect personal data
We process your personal data for the following purposes:

• To remain compliant with our legal and regulatory obligations
• To create a scientific exchange with Healthcare Professionals answering their
  medical questions and providing them with the information they request via the
  online form
• To arrange a meeting with a MSL (Medical Science Liaison)
• To ensure the stability and upgrade the functionality of the website

We retain personal data:
For duration of service delivery

We share your personal data with:
Third party processors such as IT services and website hosting companies,
(internet) connectivity providers

Your rights
You have the right to withdraw your consent, you can access all your personally identifiable
information that we collect online. You may also demand the deletion of your personal data
unless the applicable laws and regulations oblige us to store your personal data.

You can request to be provided with information about data which we store/process about
you. In addition, you have the right to have any personal data blocked or deleted, to object
to the processing of your data, to have any incorrect data corrected.

You can correct factual errors in your personally identifiable information by sending us an
email that credibly shows the error. You likewise have the right to request the correction of
incorrect personal data.

To protect your privacy and security, we will also take reasonable steps to verify your
identity before making corrections. Should you have other questions or concerns about this
privacy policy or want to have your data deleted from our database, please send an email to
privacy@apellis.com.

We may update or amend this policy at any time by posting the amended version on the
Site.

International data transfers
Apellis uses servers and other storage facilities in the United States and EU. Apellis may
transfer personal information outside of its country of origin for the purposes, and in the
manner, set out in this privacy policy, including for processing and storage by service
providers and affiliates in connection with such purposes. In all situations, Apellis takes
reasonable steps to ensure that your privacy is protected. Such steps include, but are not
limited to, implementing privacy, security, and contractual controls, as well as steps noted in
this privacy policy, as required by applicable law.

Apellis endeavors to obtain assurances from its service providers and affiliates that they will
safeguard personal information consistent with this privacy policy. An example of
appropriate assurances that may be provided by service providers and affiliates includes a
contractual obligation that they provide at least the same level of protection as is required
by Apellis’s privacy principles set out in this privacy policy. Where Apellis has knowledge that
a service provider or affiliate is using or disclosing personal information in a manner contrary
to this privacy policy, Apellis will take appropriate steps to prevent or stop the use or
disclosure.

Security of your personal information
The security of your personal information is important to us. We take reasonable steps,
including technical, administrative and physical safeguards, designed to protect the personal
information submitted to us from loss, misuse and unauthorized access, disclosure,
alteration and destruction. Such measures may include but are not limited to: the encryption
of communications via SSL, encryption of information while it is in storage, firewalls, access
controls, separation of duties, and similar security protocols. However, no method of
security or method of transmission over the Internet is entirely secure. You should always
use caution when transmitting personal information over the Internet.

Contact Us
Before sending an e-mail, please be aware of the following:
If you have any questions about this Privacy Policy or concerns about the way Apellis
processes your personal information, or require assistance in managing your privacy choices,
please get in touch with us at:

Apellis Pharmaceuticals Inc
100 5th Avenue, Waltham, MA 02451, US
Email: info@apellis.com

Our data protection officer can be contacted as follows:
E-mail: privacy@apellis.com