Privacy notice

Last updated: August 11, 2026

Who we are

Azalla Pharmaceuticals is a preclinical biopharmaceutical company based in San Jose, California, United States. For the purposes of data protection law we are the controller of the personal information described in this notice. You can reach us through the contact form.

What we collect

We collect only what you type into a form on this site.

• Inquiry form. Your name, email address, organization if you give one, the category of your inquiry, and the content of your message.
• Trial notification list. Your name, email address, and country if you give one. We deliberately do not ask whether you are a patient, a caregiver or a clinician, and we do not ask which condition you are interested in.
• Technical information. Standard server records generated when any browser requests a page, including IP address, timestamp and browser type. These are used for security and to keep the site running.

We do not use advertising cookies, analytics that profile you across other websites, tracking pixels and third-party marketing tags. The only cookie-equivalent this site sets is a local preference remembering whether you chose light or dark mode, which stays in your own browser and is never sent to us.

Health information

We ask you not to send us health information, and we do not request a diagnosis, medical history or clinical records on any form. If you send health information anyway, we will hold it only as part of your message, treat it with the same protection as everything else here, and delete it on request. Azalla is not a healthcare provider and is not acting as a covered entity under HIPAA in operating this website.

Why we hold it, and on what legal basis

• To answer you. Where you have made an inquiry, we process your information because it is necessary to respond to your request and in our legitimate interest to conduct correspondence.
• To notify you about a trial. Where you have joined the patient notification list, we process your information on the basis of the consent you gave when you ticked the box. You may withdraw that consent at any time.
• To keep the site secure. Server records are processed in our legitimate interest in preventing abuse.

What we will never do

• Sell your information, or share it with anyone for their own marketing.
• Add you to a general mailing list because you sent an inquiry.
• Use the patient notification list to market an approved product, or to contact you about anything other than the opening of a clinical trial in an area you selected.

Who else sees it

Your information is read by the small number of people at Azalla who handle correspondence and, where an inquiry is technical, by the relevant program leadership. We use third-party providers for website hosting and email delivery; those providers process information on our instructions and are not permitted to use it for their own purposes. We will disclose information if we are legally required to do so.

Where it is held

Our systems are operated in the United States. If you contact us from outside the United States, your information will be transferred there. Data protection law in the United States differs from that in the United Kingdom, the European Economic Area and other jurisdictions, and we rely on your consent or on the necessity of the transfer for responding to you.

How long we keep it

• Inquiries: up to twenty-four months after our last exchange, then deleted, unless the correspondence forms part of a business relationship we are required to document.
• Patient notification list: until you ask to be removed, or until three years after a trial in your selected area has opened or the program has been discontinued, whichever comes first.
• Server records: a rolling short-term window for security purposes.

Your rights

Wherever you are, you can ask us to show you what we hold about you, correct it, delete it, or stop using it. If you are in the United Kingdom or the European Economic Area you have these rights under the UK GDPR and the EU GDPR, together with the right to object, the right to restrict processing, the right to data portability and the right to lodge a complaint with your supervisory authority. If you are a California resident you have rights under the CCPA as amended by the CPRA, including the right to know, delete and correct, and the right to opt out of sale or sharing — we do not sell or share personal information as those terms are defined, and we do not process sensitive personal information for inferring characteristics. We will not treat you differently for exercising any of these rights.

To exercise any of them, use the contact form and say what you would like us to do. We will respond within the time the applicable law allows, and in any event without unnecessary delay.

Children

This site is not directed at children and we do not knowingly collect information from anyone under sixteen. If you believe a child has submitted information, contact us and we will delete it.

Security

Form submissions are transmitted over an encrypted connection and stored on access-controlled systems. No system is perfectly secure, and we ask again that you do not send us sensitive health information through this website.

Changes

If we change this notice we will update the date at the top. If a change materially affects how we use information you have already given us, we will contact those affected directly.