Privacy Policy

Welcome to eyepoint.bio (the “Site”). The following Privacy Policy tells you about the information we, and our subsidiaries or affiliates, collect through the Site and in any other way. In addition, it explains how we use that information and how you can opt out of certain uses of information we may collect. By using our services, providing your personal information and/or accessing our Site, you are consenting to the information collection and use practices described in this statement, as modified from time to time by us. If this Privacy Policy is not acceptable to you, please do not use this Site or provide your personal information. If we decide to materially change our Privacy Policy, we will post a new statement on our Site. Therefore, we encourage you to check the date of our Privacy Policy whenever you visit this Site for any updates or changes.

Reference to “we” or “us” the owner of the Site including any company it controls or which controls it (for example a parent company of the Site owner or a subsidiary of the Site owner) and its members, directors, officers, employees and agents.

Information About You

We collect several types of information about you. We collect “personal information” if you submit a Contact Form to the Site: namely, your first and last name, employer/company name and address or home address, email address, phone number (including extension, landline and/or mobile phone number). We also collect “non-personal information,” which is information about you that does not itself identify you individually. Examples of non-personal information include age range and gender. We also collect your geolocation, IP Address, operating system, hardware details, device settings, software, browser type, language, connection information, and other information which helps us improve the Site in various ways including by optimizing our software to serve you and by monitoring usage for violation of security safeguards and our Terms of Use, see https://eyepoint.bio/terms-and-conditions. We also collect “aggregate information,” which is information that helps us understand how people use our Site or our services, for example, which pages are visited, frequency of usage, paths of usage, interactions between users, and interaction with other software. Additionally, we use Google Analytics to enable us to see reports on user demographics and interests. See https://support.google.com/analytics/answer/2700409/?hl=en&utm_id=ad&authuser=1 for an explanation of Google Analytics and what it collects.

The following is a more detailed explanation of these types of information as well as when and how we collect and use them.

User Information

As noted we collect personal information identifying you when you submit a Contact Form to the Site. Additionally if you submit an inquiry or comment to the site we collect personal information so we can respond appropriately to you.

Use of Your Personal and Non-Personal Information

Except as disclosed in this Privacy Policy, we do not sell, rent, lease or disclose information that identifies you individually or makes it possible for other parties to contact you directly without your consent. Unless we have your permission or are required by law, we only share your personal information with our related companies and third parties who are acting on our behalf for the uses described below and with any company who acquires us or the Site. We may, however, use, sell, disclose or otherwise dispose of personal information we collect in the following circumstances:

Data Integrity

We process personal information for the purposes for which it was collected and in accordance with this Privacy Policy. We review our data collection, storage and processing practices to ensure that we only collect, store and process the personal information needed in connection with the uses set out in this Privacy Policy.

Internal Use of Your Information

We use all the information we have to help create and improve the Site for users. For example:

• Information we have is used to improve safety and security for you and your content on your Site, including for violation of our terms and policies.
• We use information about you for statistical, design or operational purposes such as to estimate our audience size, to measure aggregate traffic patterns and/or to and understand demographics, customer interest, consumer insights, purchasing and other trends among our users and customers.
• We conduct research about our Site, including new features, in surveys, and other testing to collect feedback for improving our Site.
• We also use your personal information for the marketing and/or promotion of us, the Site, our subsidiaries and/or affiliated companies, including their products and services.
• We use cookies and user’s IP addresses and other similar technologies to deliver and improve our Site as set forth herein under “Tracking Tools”.
• Additionally, as noted, we use your information, to respond to your customer service inquiries.
• Other sites or services may receive information about you and your content if you use our Site on any third-party apps, websites, or other services.
• We may outsource all of these tasks to third parties on a confidential basis. If you do not want to receive promotional email or other materials from us or the third parties we have engaged, please unsubscribe when you receive an email.

Disclosures to Comply with Legal Requirements

We may disclose personal information:
(a) to conform with the law, respond to claims or comply with legal process served on us (e.g., a lawful subpoena, warrant or court order);
(b) to enforce or apply our policies or agreements (including to initiate, render, bill and collect for amounts owed to us);
(c) to protect and defend our or our users’ rights or property, the Site, our employees, users or the public, including fraudulent, abusive or unlawful use of our Site; or
(d) if we reasonably believe that an emergency involving immediate danger of death or serious physical injury to any person requires disclosure of communications or justifies disclosure of records without delay.

Company Sale

Information collected through our Site is considered a trade secret owned by us. As the owner of such information, we may disclose or sell such information as an asset of the company in conjunction with the sale to a third party of our company or a portion of our assets.

Aggregate Information

We collect aggregate information about you and your use of our Site whenever you visit our Site (See “Information About You” above). For instance, we may collect various forms of “click stream” information such as entry and exit points for our Site (i.e., referring URLs or domains), site traffic statistics, page views, impressions, and operating system and browser type. In addition, when you request pages on our Site, our servers automatically log your IP addresses. An IP address is a number that is automatically assigned to your computer whenever you are surfing the internet.

We also use third-party software that tracks traffic directed to the Site from affiliate Sites and the purchases that result from this traffic. This information is aggregated and is not tied to an individual purchase.

This aggregate information generally will not identify you or be correlated to you individually for external purposes. We may collect, compile, store, publish, promote, report, sell, or otherwise disclose or use any and all aggregate information provided that such information does not reveal your identity. When we share such information with other companies, it is not traceable to any particular user, and will not be used to contact you. If we do correlate any aggregate information to you, such information will be treated like any other personal information under this statement.

Tracking Tools

We and our third-party vendors such as Google collect personal and other information about users over time and across different websites when you use this Site or the services offered on the Site. We use browser-based “cookies”, users’ IP addresses, and other technologies such as “pixel tags,” “web beacons,” “clear GIFs,” or similar technologies to help us and third parties obtain information about your visits to the Site, deliver content for us and others specific to your interests, process your requests, and/or to analyze your visiting patterns, monitor traffic patterns on the Site, and to optimize and enhance your online experience on the Site. “Cookies” are pieces of information stored within your computer’s or device’s Internet browser that automatically identify your browser to our server whenever you interact with the Site. Such technology is a common feature of many web sites and is necessary in order for certain features of our site to function properly or in order to provide an online service to you. We also use cookies to help us understand the content that you are shown while visiting our Site. We may combine information which we obtain through the use of cookies with other information, including a unique identifier we have assigned to you, or with information we obtain from third party sources. As noted, we use the advertising features of Google Analytics. Further information about what Google Analytics tracks can be found at this link: https://support.google.com/analytics/answer/2700409/?hl=en&utm_id=ad&authuser=1

Managing Tracking Tools

You may customize the browser settings to notify you when a cookie is sent or to disable cookies altogether. Please check your browser for instructions on how to make these adjustments. Because cookies allow you to take advantage of some of the Site’s essential features, we recommend that you allow them on your browser. Your browser may also have a “Do Not Track” feature that lets you tell websites that you do not want to have your online activities tracked. These browser features are not uniform, so we are not currently set up to respond to those signals. While we do not offer the ability to opt out of tracking directly on the Site, users may access a browser add-on in order to block the Site’s tracking at the following link: https://tools.google.com/dlpage/gaoptout/.

Links to Other Sites

Please be aware that we may provide links to third-party web sites or our promotional partners’ sites as a service to our users, and that we are not responsible for the content or information collection practices of those pages. Please note that these web sites’ privacy policies may differ from ours. We encourage you to review and understand their privacy practices before providing them with information.

Children

Our Site is intended for a general audience. However, it is not designed nor intended to collect personal information from children under the age of 18. To respect the privacy of children and to comply with the Children’s Online Privacy Protection Act, children under the age of 18 are not permitted to use the Site. We ask that parents supervise their children while online.

Security

We are committed to safeguarding and securing your personal information. To maintain data accuracy, prevent unauthorized access to or disclosure of, and ensure the appropriate use of your personal information, we have put in place physical, electronic and managerial procedures. Such procedures represent our best efforts to maintain security and we work continuously to enhance security.

Choice/Opt-Out

We will not use or share your personal information in ways unrelated to the uses described above without first notifying you and offering a choice. We will also provide you the opportunity to opt-out at any time of certain or all contact from us. You may also choose to change information associated on the Contact Form by calling us at (617) 926-5000. As noted above, we may use your e-mail address and other contact information provided to us through the Site to send notifications to you. If you do not want to receive such notifications you can remove yourself from our notification e-mail list at any time by calling us at (617) 926-5000 or emailing us at info@eyepoint.bio. If you have any difficulty with opting out, please mail your request to:

480 Pleasant Street
Suite B300
Watertown MA 02472
United States

Notwithstanding any preference that you select, we may contact you from time to time to provide services that you have requested or for customer service matters, such as responding to service-related inquiries, updating our policies or notifying you of changes to existing services.

If you have any questions about this Privacy Policy or our use of your information, or if you need help changing or deleting your information, you can call us at (617) 926-5000.

California Privacy Policy

As a California resident you have the legal right to request from businesses with whom you have an established business relationship, (1) a list of the categories of personal information, such as your name, address, email address and the type of services provided to the customer, that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes, and (2) the names and addresses of all such third parties. To request the above information, please mail your written request to:

480 Pleasant Street
Suite B300
Watertown MA 02472
United States

Privacy Notice for EEA/UK/Brazil users

This Privacy Notice applies to the processing of data related to the use of the website https://eyepoint.bio/ (hereinafter “the Website”).

EyePoint, Inc. as the Controller, hereinafter as “EyePoint”, “we” or “us”, of the personal data, has committed to comply with:

• The General Data Protection Regulation N°EU 2016/679 (hereinafter, the “GDPR”);
• The General Data Protection Regulation as it forms part of the law of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018 (hereinafter the “UK GDPR”) and the UK Data Protection Act 2018 (amended 2020) (hereinafter the “Data Protection Act”);
• The Brazilian Law N° 13.709 of 14 August 2018, General Personal Data Protection Law (as amended by Law No. 13.853 of 8 July 2019) (“LGPD”);
• And all EU applicable laws and regulations regarding data protection.

Collectively referred to as “Data Protection Laws”.

With this Privacy Notice, EyePoint wants to make sure that you understand what personal information is collected about you, how your personal information is used and how it is kept safe.

General warning and use of social media

Access to the Website implies the User’s full and unreserved acceptance of this Privacy Notice (hereinafter the “Notice”), as well as its general terms of use and the Cookies Notice . The User acknowledges having read the information below.

The Notice is valid for all pages hosted on the Website. It is not valid for the pages hosted by third parties to which EyePoint may refer and whose privacy notices may differ. EyePoint cannot therefore be held responsible for any data processed on these websites or by them. This Notice also applies to any other website that EyePoint may operate, including our Company pages on Facebook, LinkedIn and X (Twitter).

Please, note that for the use of social media, EyePoint will be Joint-Controller with Facebook, LinkedIn or X only for the following activities: accessing and processing statistical aggregate data provided by these social media providers. For any other processing on the platform, the social media platform shall be considered as the sole Data Controller.

Facebook, including Instagram, and LinkedIn have created an “addendum” to their user agreements for company pages for the processing for which they are Joint-Controllers with us. Such agreement is not currently provided by Twitter.

1. Why, how and for how long do we collect your personal data?

Depending on the purpose for which we process your personal data, we need to process one or other personal data. We will keep them for no longer than necessary to fulfill the purposes for which we collected it, including any legal requirements.

Depending on each case, the processing will therefore be as follows:

2. Data sharing

We do not sell or trade to outside parties your personal data.

Nevertheless, EyePoint has contracted with the following Services Providers to manage the Website that may have access to your personal data:

• SiteGround for web hosting.
• Notified for Investor Relations
• iCIMS for Job Listings and Job Applications.
• Google for Web Analytics.

Sharing your personal data as explained above may involve a transfer of personal data to a country outside the European Economic Area (EEA), and/or the UK. EyePoint is therefore committed to complying with the transfer rules under applicable Data Protection Laws and therefore ensure to:

• Transfer your data to countries where the data recipient is located that has been recognized as adequate by the European Commission, by the UK secretary of state, or
• Where a country has not received an adequacy decision from the European Commission, or the UK secretary of state, to implement appropriate safeguards, such as the EU Standard Contractual Clauses (“SCCs”) (and the UK addendum), and/or the International Data Transfer Agreement (“IDTA”).

You can contact our Data Protection Officer, hereinafter as DPO, (see contact details below), if you want to have more details about the mechanism supporting data transfer.

3. How do we protect your information?

EyePoint treats your personal data in a confidential manner and provides for a sufficient and adequate level of protection of your personal data.

Your personal data is contained behind secured networks and only accessible by a limited number of persons who have special access rights to such systems and are required to keep the information confidential.

4. Your rights

According to the GDPR, and/or UK GDPR and the LGPD, you have the following rights subject to limitation as set forth by applicable data protection law:

• Access. You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, information related to the processing of data and a copy of the data being processed.
• Rectification. You have the right to require rectification of inaccurate or incomplete data about you.
• Right to be forgotten. To obtain the deletion of your personal data under certain specified circumstances.
• Restrict processing. You have the right to restrict processing of data under certain specified circumstances.
• Data portability. You have the right to request for the receipt or the transfer to another organization, in a machine-readable form, of your personal data.
• Object to processing. You have the right to object, on grounds relating to your particular situation, at any time to the processing of your data.
• Right to withdraw consent. When you have given your explicit consent for the processing of your data, you can withdraw it at any time without any cost nor justification.

Please note that all these rights are not absolute and will be assessed on a case-by-case basis by our DPO.  

If you would like to exercise your rights, please let us know by contacting our DPO, EyePoint.dpo@mydata-trust.info.

You have also the right to lodge a complaint if you consider that your personal data is not processed in accordance with the GDPR, the UK GDPR, and the LGPD.

If you are an EEA resident: You have the right to lodge a complaint with the Supervisory Authority in the Member State of the European Union of your habitual residence, place of work or place of the alleged infringement.

If you are a UK resident: you may file a complaint with the Information Commissioner’s Office (“ICO”), the Supervisory Authority of UK, following the instruction available in the service channels.

If you are a Brazilian resident: you may file a complaint with the National Data Protection Authority of Brazil (“ANPD”), following the instructions available in the service channels.

Please find the contact information of all Authorities in section 6 “Contacts”.

5. Changes to this Privacy Notice

This Notice is effective as of the date stated at the top of this page. We may change this Notice from time to time. Please refer to this Notice on a regular basis.

6. Contacts

EyePoint, acting as Controller
1.833.393.7646

Data Protection Representative
MyData-TRUST France, 2140B Rue de
Rennes 75006 Paris (FRANCE)
EyePoint.dpr.eu@mydata-trust.info

Data Protection Officer
EyePoint.dpo@mydata-trust.info

EU Data Protection Authorities
https://edpb.europa.eu/about-edpb/about-edpb/members_en

UK Supervisory Authority (“ICO”)
Tel: +55 (0)3 03 12 31 11 3
Website: https://ico.org.uk/global/privacy-notice/your-right-to-complain/

For Brazil Supervisory Authority (“ANPD”)
Website: https://www.gov.br/anpd/pt-br

Last Edited on June 3, 2025