This Privacy Policy describes how Alyssum Labs Pte. Ltd.("Alyssum Labs," "we," "us," or "our") collects, uses, discloses, and protects personal data in connection with the website located at www.alyssumlabs.com(the "Site").

We are committed to handling personal data with care, transparency, and in accordance with applicable data protection laws — including the Singapore Personal Data Protection Act 2012 (PDPA), the EU General Data Protection Regulation (GDPR), the UK Data Protection Act 2018 and UK GDPR, and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), where applicable.

By accessing or using the Site, you acknowledge that you have read and understood the practices described in this Policy.

Alyssum Labs Pte. Ltd. is a private limited company incorporated in Singapore.

• UEN: 202610112W
• Registered office: 190 Middle Road, #12-07, Fortune Centre, Singapore 188979
• Contact for data protection matters: connect@alyssumlabs.com

For the purposes of GDPR, Alyssum Labs Pte. Ltd. is the data controller of personal data collected via the Site.

We collect personal data only when it is provided to us directly through the Site.

Enquiry form submissions:

• Name
• Organisation name
• Email address
• Area of interest (Life Sciences / Private Capital / Other)
• Message content

Automatically collected information: We may collect limited technical information when you visit the Site — including IP address, browser type, device type, operating system, referring URL, and pages visited. This information is collected for security, analytics, and Site performance purposes. See our Cookie Policy for further detail.

We do not knowingly collect any special categories of personal data through this Site. Visitors are asked not to submit such information through the enquiry form.

Under PDPA, we rely on consent for the collection, use, and disclosure of personal data for the purposes set out above. Under CCPA/CPRA, the purposes above constitute "business purposes" as defined in the legislation.

We do not sell personal data. We do not share personal data for advertising or marketing purposes.

We may disclose personal data only to:

• Service providers acting on our behalf — including website hosting providers, email service providers, and analytics service providers
• Professional advisers — including legal, accounting, and audit advisers, where reasonably necessary
• Regulatory authorities or law enforcement — where required by law
• Successors in interest — in connection with a merger, acquisition, restructuring, or sale of assets

Alyssum Labs is based in Singapore. Personal data collected through the Site may be transferred to and stored in jurisdictions outside your country of residence, including Singapore and other countries where our service providers operate.

Where personal data is transferred outside the EU/UK, we ensure appropriate safeguards are in place — including the use of EU Standard Contractual Clauses or equivalent mechanisms.

Under PDPA, we ensure that any personal data transferred outside Singapore is subject to a standard of protection comparable to the PDPA.

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law.

• Enquiry form submissions are retained for 24 months from the date of last interaction, unless the enquiry results in an ongoing commercial relationship
• Technical and analytics data is retained for the periods set out in our Cookie Policy

When personal data is no longer required, it is securely deleted or anonymised.

The rights available to you depend on the jurisdiction in which you reside.

Rights under PDPA (Singapore): access, correction, and withdrawal of consent (subject to legal or contractual restrictions).

Rights under GDPR (EU/UK): access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and the right to lodge a complaint with a supervisory authority.

Rights under CCPA/CPRA (California): right to know, delete, correct, opt out of sale or sharing (we do not sell or share personal information as defined under CCPA/CPRA), and right to non-discrimination.

To exercise any of these rights, please contact us at connect@alyssumlabs.com. We may need to verify your identity before responding. We will respond within the timeframes required by applicable law.

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include access controls, encryption in transit, and secure infrastructure. While we take security seriously, no method of transmission over the internet is entirely secure.

The Site is intended for use by individuals aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have collected such data, please contact us at connect@alyssumlabs.com.

The Site uses cookies and similar technologies. Please refer to our Cookie Policy for full details.

The Site may contain links to third-party websites. We are not responsible for the privacy practices of those websites, and we encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this Policy and, where appropriate, provide additional notice through the Site.

For questions, requests, or concerns regarding this Privacy Policy, please contact:

Alyssum Labs Pte. Ltd.
Attn: Data Protection Officer
190 Middle Road, #12-07, Fortune Centre, Singapore 188979
Email: connect@alyssumlabs.com

If you are in the EU or UK and are not satisfied with our response, you may lodge a complaint with your local supervisory authority. If you are in Singapore, you may contact the Personal Data Protection Commission of Singapore at www.pdpc.gov.sg.