Privacy Policy | REV Clinical

Effective Date: January 05, 2026

I. Your Privacy Is Important to Us

REV Clinical (“we,” “us,” or “REV Clinical”), operating through its affiliates/subsidiaries located throughout the world (collectively, the “Company”), is committed to protecting your privacy and security of your personal information. This REV Clinical Privacy Policy (“Privacy Policy”) describes
the types of personal information and other information we collect from and above you when
you interact with us or use our website, web portals, software (including but not limited to mobile applications), or other services (collectively “Services”); how we use and share your information;
and what choices you have with respect to the information.

We may change this Privacy Policy to accommodate changes to our services, new technologies or industry practices, updated regulatory or legal requirements, or for other purposes. We reserve the right to modify or amend the terms of this Policy from time to time without notice. Your continued use of our services and website following the posting of changes to these terms will mean you accept those changes. Notices may be emailed to the most recent email address you provided us, by posting notice of such change on the services or our website, or by other communication channels. You consent to receiving notices in these ways. We reserve the right to determine the form and means of providing notifications to you, consistent with applicable law.

BY USING OUR SERVICES OR WEBSITE, YOU ARE EXPRESSLY ACCEPTING THE PRACTICES DESCRIBED IN OUR POLICY, INCLUDING OUR USE OF COOKIES AND SIMILAR ONLINE TOOLS.

(1) This Privacy Policy may contain information not applicable to you because of where you are located or the type(s) of personal information we collect about you.
(2) Certain types of information we collect may be covered under another REV Clinical policy, such as our Terms of Service. If your information falls under one of these other policies, then the terms of the other policies will apply.
(3) Our Services may contain links to third party websites (see below). Once you leave our Services,
we are no longer responsible for the protection and privacy of any information you provide.

II. Information We Collect

The types of information that we may collect and receive from you while you use the Services
are described in this section and include both information that you provide to us, information
that we collect automatically when you use the Services, and information that we collect from third party sources.

Personal Information: Personal information is information from which an individual may be identified directly or indirectly. Personal information may include information such as your name, postal address, telephone number, email address, date of birth, device and browsing information, such
as your IP address, and health, financial and professional information. We may collect personal information that you provide to us through our Services. For example, you may provide your personal information to us: through your completing forms or setting up accounts on one of our websites or web portals; through an enrollment form to register for one of our programs or services; through
your requests to receive marketing materials and information about our products or services; by contacting a customer service department; or by responding to questionnaires or surveys.

Cookies and other similar technologies: When you use our Services, we may also collect information relating to your usage or visits to our websites and your devices. This information is generally collected using server log files, cookies, “pixel tags,” and tools, such as, Google Analytics.

Server Log Files: Your Internet Protocol (IP) address is an identifying number that is automatically assigned to your computer by your Internet Service Provider (ISP). This number is identified and logged automatically in our server log files whenever you visit our websites, along with the time(s)
of your visit(s) and the page(s) that you visited. We use the IP addresses of all visitors to our websites to calculate our websites’ usage levels, to help diagnose problems with website servers, and to administer the websites. We may also use IP addresses to communicate with or block access by visitors who fail to comply with our terms and conditions for use of our Services. Collecting IP addresses is standard practice on the Internet and is carried out automatically by many websites.

Cookies: Cookies are data that a web server transfers to an individual’s computer for record-keeping purposes. Cookies are an industry standard used by most websites and help facilitate users’ ongoing access to and use of a particular website. Cookies do not cause damage to your computer systems
or files, and only the website that transferred a particular cookie to you can read, modify, or delete such cookie. If you do not want information collected using cookies, there are simple procedures in most browsers that allow you to delete existing cookies, to automatically decline cookies, or to be given the choice of declining or accepting the transfer of cookies to your computer. You can set your browser to refuse cookies, but some portions of our websites may not work properly if you refuse cookies. A session cookie is one that exists for the time-period that your browser is open. A persistent cookie is one that is saved on your device/computer even after the browser is closed. Like many websites, we may use both session cookies and persistent cookies. To find out how to see what cookies have been set and how to reject and delete cookies, please visit //www.allaboutcookies.org.

Pixel Tags: Our websites may use so-called “pixel tags”, “web beacons”, “clear GIFs” or similar means (collectively, “pixel tags”) to compile aggregate statistics about website usage and response rates. Pixel tags allow us to count users who have visited certain pages on our websites, to deliver branded services, and to help determine the effectiveness of promotional or advertising campaigns. When used in HTML-formatted email messages, Pixel Tags can tell the sender whether and when the email has been opened.

Google Analytics: We may use Google Analytics, a web analysis service provided by Google, to
better understand website usage. Google Analytics collects information such as how often users visit websites, what pages they visit and what other websites they used prior to visiting. Google uses the data collected to track and examine the use of the websites, to share such data with other Google services, or to personalize the ads of its own advertising network. Google’s ability to use and share information collected by Google Analytics is restricted by the Google Analytics Terms of Service and the Google Privacy Policy. To opt-out of analysis by Google Analytics on our websites, please visit //tools.google.com/dlpage/gaoptout.

III. Our Uses of Information

The information that is collected in connection with our Services may be used in any of the
following ways:

To provide, operate, maintain, and improve our Website and our Services;
To communicate with you and with our partners to provide you our Services;
To notify you when Website updates are available, and of changes to any Services we offer or provide though it;
For marketing, advertising, and promotional purposes
To create a customized and engaging customer experience with relevant content and offers, and
To share with third parties, such as service providers, marketing partners, third-party sites and services, data collaborators, government, law enforcement authorities, regulatory agencies, and others.

The information that we collect from your devices is used to better design our Website. We analyze the information we collect to enhance our Websites’ security and to track the popularity of certain pages on the websites, the success of our email notifications, traffic levels on the websites, and
other usage data, all of which helps us to provide content tailored to your
interests and improve our websites and related Services.

IV. Global Access And Data Transfer

REV Clinical operates in many countries around the world and your personal information may
be accessible to or shared with any of our locations, our affiliates, consultants, contractors, service providers, suppliers and vendors in various countries for the purposes specified in this Privacy Policy. The laws in certain countries may not provide the same level of protection as the laws in your country or region. When that is the case, and as required by applicable laws, we take steps to protect your information. By using our websites or Services or you are otherwise providing information to us, you hereby expressly consent to the transfer of your personal information outside your country or region.

V. Third Party Advertising

REV Clinical has relationships with third party advertising companies to place advertisements
on this website and other websites, and to perform tracking and reporting functions for this website and other websites. These third party advertising companies may place cookies on your computer when you visit our websites or other websites so that they can display targeted advertisements to
you. This Privacy Policy does not cover the collection methods or use of the data collected by
these vendors.

VI. Links To Other Websites

Our websites may contain links to third party websites, which are not operated or controlled by REV Clinical and for which REV Clinical is not responsible. The links from the websites do not imply that REV Clinical endorses or has reviewed the third party websites. Once you leave one of our websites, we are not responsible for the protection and privacy of any information you provide. We suggest contacting those third parties directly for information regarding their privacy practices.

VII. Your Choices And Rights

If you would like your personal information removed from our systems, changed or updated,
or if you would like to opt out of your personal information being disclosed to third parties or from being used for a purpose that is materially different from the purpose for which it was originally collected or subsequently authorized, please email us at contact@revclinical.com. Also, if requested,
we will promptly verify and delete your account and you will no longer receive emails or other communications from REV Clinical. Your removal from the mailing list or our systems will not remove records of past transactions or delete information stored in our data backups and archives where
we are required to keep your data for legitimate business or legal requirements. Data on past transactions and data stored in backups and archives will be deleted in the normal course of
our business.

Under applicable laws, you may have one or more of the following rights with respect to your personal information:

The Right of Access: You have the right to access personal data and supplementary information. You can ask us for a copy of your personal information;
The Right to Rectification: You can ask us to change, update or fix your data in certain cases, particularly if it is inaccurate;
The Right to Erasure: You can ask us to erase or delete all or some of your personal information (e.g., if it is no longer necessary to provide Services to you) without undue delay;
The Right to Restriction of Processing: You can ask us to stop using all or some of your personal information (e.g., if we have no legal right to keep using it) or to limit our use of it (e.g., if you think your personal information is inaccurate or unlawfully held);
The Right to Data Portability: You have the right to data portability which provides the right to receive your personal data in a structured, commonly used and machine-readable format, and have the right to transmit the same to another controller;
The Right to Object: You have the right to object to the processing of personal data;
Automated individual decision-making, including profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you (data subject);
The right to withdraw consent: You have the right to withdraw your consent at any time with effect for the future. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal; and/or
The right to withdraw consent: You have the right to withdraw your consent at any time with effect for the future. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

These rights are not necessarily absolute and may be limited in some jurisdictions by applicable law. We will respond to your requests within the time period prescribed by applicable laws. Under certain circumstances, REV Clinical may ask you for specific information to confirm your identity and ensure the exercise of your rights. This is a security measure to safeguard personal information. We will notify you when your request is completed, if we deny your request to exercise your rights (because, for example, an exception applies), or if there is a fee associated with processing your request.

You may designate an authorized agent to exercise your rights on your behalf. In such case, we will also need to verify your agent’s identity and obtain proof of your authorization. We may need to deny a request from an agent whose identity or authorization we cannot verify.

Please note, if your personal information is stored with a third party, any requests regarding your personal information must be addressed to that third party. For example, if you are participating in a clinical trial or research study,
it may be necessary for the third party requesting the clinical trial or research study to address your requests with respect to clinical trial or research project data that they control.

VIII. Children’s Privacy Protection

Protecting the privacy of children is especially important to us. We take seriously our obligations under applicable laws concerning the collection of personal information from children. We do not knowingly allow children to communicate with us or use any of our websites or Services. We request that children do not provide any personal information through our websites or in connection with the Services.

IX. Data Security

REV Clinical stores personal information and other data using reasonable physical, technical
and administrative safeguards to secure information and data against foreseeable risks, such
as unauthorized use, access, disclosure, destruction or modification. Please note, however, that
while REV Clinical has endeavored to create secure and reliable websites for our users, the confidentiality of any communication or material transmitted to or from one of our websites or
via e-mail cannot be guaranteed. You should take special care in deciding what information
you transmit, upload, send, or otherwise submit to REV Clinical. Please note that we are not responsible for any data stored by any third party. For example, your clinical trial or research
study related data may be stored by affiliates and/or third parties. We are not responsible for
the loss or damage caused by breach of third parties.

In case of a personal information security incident, as required by applicable laws, we will inform you in a timely manner and report the incident to the relevant regulatory authorities.

X. Data Retention

We only retain your information for as long as it is necessary for the purposes set out in this Privacy Policy, unless required by law to retain it for a longer period of time. To determine the appropriate retention period for information, we consider the amount, nature and sensitivity of the information,
the potential risk of harm from unauthorized use or disclosure of the information, the purposes for which we process the information, whether we can achieve those purposes through other means,
and all applicable global legal, regulatory, and compliance requirements.

XI. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. At a minimum, we will post an updated version on our websites. REV Clinical encourages you to review this Privacy Policy regularly for any changes. Any changes will be effective immediately upon posting of the revised Privacy Policy.

XII. California Consumer Privacy Act Notice

This notice covers the requirements of the California Consumer Privacy Act (“CCPA”). When
we use the term “personal information” in this notice, we are referring to information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household such as your real name, alias, postal address, unique personal identifier, online identifier Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers. Personal information does not include publicly-available information and certain other information that is regulated by certain other applicable laws that are exempted from the requirements of the CCPA, such as
personal health information subject to The Health Insurance Portability and Accountability Act of 1996 (“HIPAA”).

XIII. Cross-Border Data Transfers

Please note that REV Clinical is based in the United States and personal data provided by individuals in the EU, EEA, UK and Switzerland may be transferred to the United States and, possibly to other countries. These jurisdictions may provide a lesser level of data protection that the law in your country. By providing personal information to REV Clinical you consent to the transfer of the personal data you provide to the United States and other third countries
as required by the Services.

XIV. California Consumer Privacy Act Notice

XV. How to Contact Us

If you have questions or comments or would like to contact us concerning our Privacy Policy
or if you feel your inquiry or request has not been handled to your satisfaction, please contact us at contact@revclinical.com or send notice to: 6501 Truxtun Avenue Bakersfield, CA 93309.