Bright Minds Biosciences Inc. Website Privacy Policy

Effective Date: July 15, 2026

Last Updated: October 3, 2026

Your privacy is important to us. We are committed to protecting and ensuring the confidentiality of any Personal Information you provide to us.

This Privacy Policy (“Privacy Policy”) addresses how Bright Minds Biosciences Inc. and its subsidiaries and affiliates (“we,” “our,” “Bright Minds”) handles personal information we gather from users of brightmindsbio.com and investors.brightmindsbio.com (collectively, our “Website”) and users of the Services (as defined below) associated with the Website (“Users”). This Privacy Policy describes the ways we collect, use, store, disclose, communicate, and share Personal Information collected through our Website. Our Privacy Policy applies whenever you visit the Website.

Please read this Privacy Policy carefully. By using our Website, or otherwise providing us with your Personal Information (defined below), you are hereby consenting to Bright Minds’ collection, use, store, disclosure, communication, sharing or processing of your Personal Information in accordance with this Privacy Policy, except that, where applicable law requires your express consent or another legal basis for a particular processing activity, we will rely on that consent or basis.

You may decline optional cookies and continue to use our Website. If you do not want us to process Personal Information that you provide voluntarily, please do not submit that information through the Website.

For the purposes of this Privacy Policy,

“Personal Information” means any information that relates to you (and, if you are in the United States, you or your household) and either identifies you directly, or could be used to identify you with other information available.

“Services” means the use of the Website by a User or an individual’s participation at any online or offline events hosted by Bright Minds.

Questions regarding this statement should be emailed to our Privacy Officer at privacy@brightmindsbio.com or mailed to Royal Centre, Suite 1500, 1055 West Georgia Street, PO Box 11117, Vancouver, British Columbia, Canada V6E 4N7 (ATTN: Bright Minds Biosciences Inc.).

This Privacy Policy applies to all users of the Website. If you are a resident of the United States, the European Economic Area, the United Kingdom, Switzerland, or Australia, the supplemental sections at the end of this Privacy Policy set out additional rights and disclosures that apply to you under the privacy laws of your jurisdiction, in addition to the information set out elsewhere in this Privacy Policy. The supplemental section for your region of residence applies in addition to (and not in place of) the rest of this Privacy Policy.

Privacy Policy Content

Not Intended for Children
Changes to the Privacy Policy
Third Party Links
How We Collect Your Personal Information
How We Use Your Personal Information
How We Share Your Personal Information
Data Location and Data Transfers
How We Protect Your Personal Information
Our Data Retention Practices
Your Data Protection Rights
Additional Information for U.S. Residents
Additional Information for Residents of the EEA, United Kingdom or Switzerland
Additional Information for Australian Residents
Contact Us

1. Not Intended for Children

Bright Minds’ Website and Services are not intended for children under the age of majority in your place of residence. We do not knowingly collect data relating to children. If you are under the age of majority in your place of residence, do not use or provide information on this Website. If you are aware of information about children provided to Bright Minds, please let us know and we will take steps to remove the information.

2. Changes to the Privacy Policy

This Privacy Policy may change from time to time, as reflected in the revision date above, to reflect changing legal, regulatory or operational requirements. Where required by law, Bright Minds will provide notification of material changes to this Privacy Policy through the Website at least thirty (30) days prior to the change taking effect. Where appropriate, we may also email Users who have opted to receive communications from us notifying them of changes to this Privacy Policy. If we are required by applicable laws to obtain your consent to any material changes to this Privacy Policy, then we will do so before such changes take effect.

Your continued use of this Website after we make changes constitutes deemed acceptance of these terms.

3. Third Party Links

This Website may contain links to third party websites, plug-ins and applications. Clicking those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third party websites, plug-ins and applications and are not responsible for their privacy statements and practices. When you leave our Website, we encourage you to read the privacy policy of every website you visit.

4. How We Collect Your Personal Information

We may collect Personal Information about you when authorized by applicable law and as described below:

Registration Information. You may provide us with your contact information such as name, signature, email address and company name when you register for an account or our Services (“Registration Information”). For some Services, we may also ask Users for additional Personal Information such as their professional background, technical expertise and plans for participating at our events.
Log Data and Activity Information: Bright Minds collects certain information automatically from you, such as your internet protocol (IP) addresses, the type of your web browser and operating system, your browsing history, browser type, device model, referring domains, timestamps (time a page was accessed as well as time spent on each web page), User clicks, visit duration, as well as the speciﬁc pages visited by the User, the speed of your connection and information concerning your server. This information is collected to help us ensure the proper functioning of our Website and Services, analyze usage patterns, detect and prevent fraudulent activity, and improve your overall experience.
Cookies and Similar Technologies. We collect certain information automatically using cookies and similar tracking technologies such as web beacons tags, embedded content, or pixels. Cookies may record details such as information about your device, session information, language preference, Website pages you visit and similar usage information. We use this information to operate the Website, remember your preferences, improve Website functionality, analyze Website traffic and performance, and, where permitted or authorized by law, support marketing and advertising activities. These cookies may include (i) strictly necessary cookies, which are required for the operation, security, and functionality of the Website and cannot be switched off through our cookie preference tool; (ii) analytics cookies, which help us understand how visitors use the Website and improve its performance; and (iii) marketing cookies, including third-party cookies set by embedded content such as YouTube videos, which may transmit information to the relevant third party (e.g., Google) and are used to track your interaction with that content. Marketing cookies are set only where permitted and you have provided your prior consent. You can manage your cookie preferences at any time through the cookie consent banner on our Website, and you may also control cookies through your browser settings, although disabling certain cookies may affect features of the Website. More detailed information about the cookies used on the Website, including their provider, purpose, duration, and category, is available in our Cookie Policy / cookie preference tool.
User Data: In the course of providing the Website and Services, we may collect Personal Information that you provide, including when you submit a form or an inquiry using Website, when you email us, call us, or contact us through other means, or when you subscribe to our newsletter.
Marketing Communications: Where permitted or subject to your prior consent as required by applicable law, we may collect Personal Information for marketing and communication purposes, such as your name, email address, and communication preferences, to send you newsletters, promotional materials, or information about our products and services. You may withdraw your consent to receive marketing and promotional communications at any time by following the unsubscribe instructions provided in our messages or by contacting us at privacy@brightmindsbio.com.
Other. We also collect and use certain aggregate or anonymized data, such as statistical data regarding use of our Website and Services, for lawful purposes. For example, we may aggregate Website usage information to calculate the percentage of Users accessing specific website features.

5. How We Use Your Personal Information

We may use and process your Personal Information when authorized by applicable law and as described below:

Website and Service Communications. Your name, contact and registration information, and any information that you choose to provide to us may be used or processed to communicate with you regarding the Services and responding to your contact requests through the Website and to manage our relationship with you.
Support Services. We may use and process your Personal Information to provide customer support services and technical support. We may collect your name, email address, phone number, contact and registration information, communication records, and details about your inquiries or reported issues when using the Website or Services. We process this information to respond to your questions, troubleshoot technical problems, and ensure the efficient operation of our services. You are responsible for maintaining the confidentiality and security of your user registration and password.
Improvement of Website and Services. We use or process your Personal Information to help deliver a better experience, to diagnose technical problems, identify opportunities for improvement, develop new features, improve User experience, and so that we may better administer and improve the quality of both the Website and the Services. This may include the analysis of Service usage patterns, and log information.
Marketing and Promotion. Where permitted or subject to your prior consent, we may use or process your Personal Information, such as your name, email, contact information, demographic information, usage information, and log information, to contact you to further discuss your interest in the Website, or to send you information regarding our products and services, such as information about new features, promotions and events, and to measure the effectiveness of our advertising campaigns. Any such communications will be sent in accordance with your marketing preferences and consent choices. We may also email you with service-related information concerning the Services or the Website to the extent allowed by law and in light of the commercial relationship between us. You may opt out of receiving marketing materials at any time by adjusting your marketing preferences on your browser or following the unsubscribe instructions included in our marketing communication.
To Enforce Compliance with Our Policies. We may use or process your Personal Information to investigate a suspected violation of this Privacy Policy or any of our terms of service, including the Terms of Use, codes of conduct, or any and any applicable policies. Such processing helps us ensure that our Website and Services are used appropriately and in accordance with established standards.
To Maintain Legal or Regulatory Compliance. We may use or process your Personal Information as necessary to comply with applicable legal and regulatory requirements, lawful requests, and court orders. This may include retaining certain records, verifying identity information, or disclosing your Personal Information to competent authorities when required or permitted by law. Without using your Personal Information for such purposes, we could not perform the Services in accordance with our legal and regulatory requirements.

6. How We Share Your Personal Information

We may disclose, share, or communicate your Personal Information when authorized by applicable law and in the following ways:

Within the Organization. Within Bright Minds, your Personal Information may be used and accessible to our personnel with a need to know the information in order to perform their duties. Depending on the type of Personal Information handled, this may include personnel in customer service, IT and security, legal and compliance, management and administration, marketing and content creation, and finance roles.
Third Party Service Providers. We may share your Personal Information with third-party service providers that support our business operations and provide services to us. These providers include:
- Website hosting providers, who may process Personal Information to provide and improve the Website and manage its security.
Data storage providers, who may process Personal Information we collect and store in the course of providing, troubleshooting and managing our data storage solutions.
Analytics and reporting service providers, who may process Website usage information, including personally identifiable information about our Website visitors as well as anonymized or aggregated information, to provide analytical insights to help us understand and develop our Website, products, and services.
Marketing service providers, who may process Personal Information, marketing and communications information in order to help facilitate our marketing and promotional campaigns.
Webcast service providers, who may process Personal Information and Registration Information in order to facilitate online or offline events hosted by Bright Minds.
Investor relations service providers, who may process Personal Information collected through our investor website and inquiry forms to facilitate investor communications and relations.
Affiliates and Related Companies. From time to time, we may disclose, share, or communicate your Personal Information to our affiliates, subsidiaries and other entities within the Bright Minds group of related entities so that those entities may assist us in providing the Website and Services to you.
Potential Acquirers. If Bright Minds is involved in a merger, acquisition or asset sale (each a “transaction”), some or all of your Personal Information may be disclosed, shared, or communicated to the parties involved in the transaction for the purposes of evaluating or carrying out the transaction. In such a case, we will require the relevant parties, by contract or other appropriate safeguards to handle the Personal Information in the same manner as provided in this Privacy Policy, and you will be notified to the extent required by applicable laws.
Law Enforcement. We may be required in certain circumstances to disclose, share, or communicate Personal Information in response to a lawful request by public authorities, courts, law enforcement, or to comply with national security requirements, or as otherwise required by the applicable law. To the extent allowed by law, we will notify you before a disclosure or communication is made.
We may disclose, share, or communicate your Personal Information with third parties where we have consent to do so, except as otherwise prohibited by law.

7. Data Location and Data Transfers

We may disclose, share, or communicate your Personal Information to our third-party service providers or third parties that may be located outside of Canada, the United States and other countries where our service providers may process or store data. Accordingly, such information may be accessible to courts, law enforcement and national security authorities of foreign countries. If you live in Quebec, your personal information may be communicated to entities outside of Quebec.

If you have any questions or wish to obtain further written information about Bright Minds’ policies and practices with respect to the collection, use, disclosure or storage of your Personal Information by service providers or affiliates, you may contact us at the information set out below.

8. How We Protect Your Personal Information

Bright Minds uses appropriate administrative, technical, organizational, and physical security measures to protect your Personal Information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure and access. We use standard industry practices to protect your Personal Information, including the establishment of ﬁrewalls, SSL encryption, system redundancies, access controls, and secure controlled environment.

However, no method of transmission or storage is completely secure, and we cannot guarantee the absolute security of your Personal Information. We have procedures in place to address any actual or suspected security breach and will notify you and any applicable regulator of a breach involving your Personal Information, as required by applicable law. We are committed to protecting your Personal Information and have established governance policies and practices to ensure the security and proper management of your Personal Information.

9. Our Data Retention Practices

We retain Personal Information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with the Website and the Services you have requested, to comply with applicable legal, contractual, tax or accounting requirements, or to defend ourselves from possible legal actions). When we have no ongoing legitimate business need to process your Personal Information, we will delete it or anonymize it in accordance with applicable laws. Retention periods for cookies are set out in the cookie table in the Cookie Policy below.

Data Minimization. We limit our collection of Personal Information to what is reasonably necessary and proportionate for the purposes described in this Privacy Policy. Where required by applicable law, we conduct data protection assessments for processing activities that present heightened risks to consumers, such as targeted advertising or the processing of sensitive data.

10. Your Data Protection Rights

You can exercise any one of the following rights as may be available to you under applicable law by contacting us as set forth in the introduction to this Privacy Policy. In certain jurisdictions, we may need to verify your identity before responding to your request. Depending on your location, you may have the following rights:

The right to access, correct, update or request deletion of the Personal Information we collect about you.
The right to opt out of marketing communications, even if you have previously consented to receiving them. You may opt out at any time.
The right to request a portable copy of your Personal Information.
The right to de-indexation, re-indexation or cessation of dissemination of your Personal Information.
If we have collected and process your Personal Information with your consent, then you may have the right to withdraw your consent by contacting us through one of the methods below – see the heading “Contact Us”.

11. Additional Information for U.S. Residents

If you are a resident of the United States, the following additional information applies to your Personal Information, in addition to the information set out elsewhere in this Privacy Policy. This subsection is intended to satisfy the disclosure requirements of the California Consumer Privacy Act (as amended by the California Privacy Rights Act) (the “CCPA”) and any other comprehensive U.S. state privacy laws that may apply to our processing of your Personal Information.

Categories of Personal Information We Collect. In the past twelve (12) months, Bright Minds has collected the following categories of Personal Information from U.S. residents through the Website, using the categories defined in the CCPA. The processing of this information for the business purposes described elsewhere in this Privacy Policy applies to all U.S. residents.

Category	Collected	Sources	Recipients
A. Identifiers (name, email, IP address)	Yes	Directly from you; automatically via cookies	Service providers; BMB personnel; legal authorities if required
B. Customer records (Cal. Civ. Code §1798.80(e))	Yes — contact form inquiries	Directly from you	Service providers; BMB personnel
C. Protected classifications	No	—	—
D. Commercial information	No	—	—
E. Biometric information	No	—	—
F. Internet or network activity	Yes — site interactions, device/browser info	Automatically via cookies and similar technologies	Service providers (analytics); BMB personnel
G. Geolocation (non-precise, IP-derived)	Yes	Automatically via your device	Service providers; BMB personnel
H. Sensory information	No	—	—
I. Professional or employment information	No	—	—
J. Education information	No	—	—
K. Inferences	Limited (interest from pages visited)	Derived from site interactions	Service providers; BMB personnel
L. Sensitive Personal Information	No	—	—

Sale, Sharing, and Sensitive Personal Information. Bright Minds does not collect or process Sensitive Personal Information through the Website. Because the Website uses third-party cookies, including cookies set by embedded YouTube content and, on the investor relations site, analytics cookies, some of these uses may constitute a “sale” or “share” of Personal Information under applicable U.S. state privacy laws. You may exercise the opt-out rights described below, and Bright Minds honors recognized opt-out preference signals, including Global Privacy Control.

Additional Rights for U.S. Residents. In addition to the rights described above under “Your Data Protection Rights,” U.S. residents may have the following rights under applicable state privacy laws, subject to exceptions and limitations under those laws:

California. California residents have rights under the CCPA, including to know and access the Personal Information we collect (including the categories described in the table above), to correct inaccurate Personal Information, to delete Personal Information subject to certain exceptions, to opt out of the sale or sharing of Personal Information, to limit the use and disclosure of Sensitive Personal Information, and not to receive discriminatory treatment for exercising any of these rights.
Virginia, Indiana, Kentucky, Montana, Nebraska, New Hampshire, New Jersey, Rhode Island, and Texas. Residents of these states have the following rights: to confirm whether we process their Personal Information and to access it; to correct inaccuracies; to delete Personal Information, subject to certain exceptions; to obtain a portable copy of Personal Information they provided; to opt out of targeted advertising, the sale of Personal Information, and certain profiling in furtherance of decisions that produce legal or similarly significant effects; and to appeal our decision on a request, as described below.
Colorado. Colorado residents have the rights described in subsection B. Colorado also requires recognition of certain opt-out preference signals, which Bright Minds honors as described under “Global Privacy Control” below.
Connecticut. Connecticut residents have the rights described in subsection B. Connecticut likewise requires recognition of certain opt-out preference signals, which Bright Minds honors as described under “Global Privacy Control” below.
Delaware. Delaware residents have the rights described in subsection B. Delaware also requires recognition of a universal opt-out mechanism, which Bright Minds honors in the same manner.
Florida. Florida residents have rights to access, correct, and delete personal data, to obtain a portable copy, and to opt out of targeted advertising, the sale of personal data, and certain profiling. Florida law also provides additional opt-out rights relating to certain sensitive data and the collection of certain biometric or voice and facial recognition data.
Iowa. Iowa residents have rights to access and delete certain personal data, to obtain a portable copy of personal data they provided, and to opt out of targeted advertising and the sale of personal data.
Maryland. Maryland residents have the rights described in subsection B. Maryland also provides an additional right to request certain information about third parties to which personal data has been disclosed.
Minnesota. Minnesota residents have the rights described in subsection B. Minnesota also provides additional rights relating to certain profiling decisions, including to question certain profiling outcomes and to request an explanation.
Oregon. Oregon residents have the rights described in subsection B. Oregon also provides the right to obtain a list of the categories of third parties to which personal data has been disclosed.
Tennessee. Tennessee residents have rights substantially similar to those described in subsection B, including to opt out of targeted advertising, the sale of personal information, and certain profiling.
Utah. Utah residents have rights to access and delete certain personal data, to obtain a copy of certain personal data, and to opt out of targeted advertising and the sale of personal data.

Regardless of your state of residence, Bright Minds will not discriminate against you for exercising any of these rights, and will not deny goods or services, charge different prices, or provide a different level or quality of service because you exercised your privacy rights.

How to Exercise Your U.S. Rights. To exercise any of the rights described in this subsection or in “Your Data Protection Rights” above, U.S. residents may use either of the following methods: If we decline to take action on your request, you may appeal by replying to our response or by contacting us using the methods above. We will respond to your appeal within forty-five (45) days, and if your appeal is denied, we will provide information about how you may contact your state attorney general or other applicable regulator.

Email: privacy@brightmindsbio.com
Postal mail: Royal Centre, Suite 1500, 1055 West Georgia Street, PO Box 11117, Vancouver, British Columbia, Canada V6E 4N7 (ATTN: Bright Minds Biosciences Inc.).

To protect your Personal Information, we will verify your identity before responding to your request. We may ask for information that allows us to reasonably match you to the Personal Information we hold. You may also designate an authorized agent to make a request on your behalf, in which case we will require written proof of authorization and may also require you to verify your identity directly. We will acknowledge your request within ten (10) business days and respond substantively within forty-five (45) days, with one extension of up to forty-five (45) additional days where reasonably necessary. We do not charge a fee for processing your request unless it is manifestly unfounded, excessive, or repetitive.

Global Privacy Control. Bright Minds recognizes Global Privacy Control (“GPC”) signals. When a GPC signal is detected, Analytics and Marketing cookies remain disabled unless the visitor expressly enables them and saves that choice through the cookie preference center. Bright Minds records both the detected signal and any express choice made by the visitor for that browser or device.

California “Shine the Light” and Financial Incentives. California Civil Code Section 1798.83 permits California residents to request information about our disclosure of Personal Information to third parties for those third parties’ direct marketing purposes. Bright Minds does not disclose Personal Information to third parties for their own direct marketing purposes. Bright Minds does not offer financial incentives or price or service differences in exchange for the retention or sale of Personal Information.

12. Additional Information for Residents of the EEA, United Kingdom, and Switzerland

If you are located in the European Economic Area (“EEA”), the United Kingdom, or Switzerland, the following additional information applies to your Personal Information, in addition to the information set out elsewhere in this Privacy Policy. This subsection is intended to satisfy the disclosure requirements of the EU General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”), the UK General Data Protection Regulation (“UK GDPR”) together with the UK Data Protection Act 2018, and the Swiss Federal Act on Data Protection (“FADP”).

Data Controller. Bright Minds Biosciences Inc., Royal Centre, Suite 1500, 1055 West Georgia Street, PO Box 11117, Vancouver, British Columbia, Canada V6E 4N7, is the controller of your Personal Information for the purposes of the GDPR, the UK GDPR, and the FADP.

Data Protection Officer. We have appointed a Data Protection Officer who can be contacted at privacy@brightmindsbio.com regarding any questions about this Privacy Policy or the processing of your Personal Information.

EU Representative. For the purposes of Article 27 GDPR, our representative in the European Union is: Silicon Marketing SAS, with a registered office at 8 rue Roublot, F-94120 Fontenay sous-Bois, France

Legal Bases for Processing. We process your Personal Information on the following legal bases under Article 6 GDPR (and the equivalent provisions of the UK GDPR and FADP):

Consent (Art. 6(1)(a)) — where you have given us consent to process your Personal Information for a specific purpose, such as subscribing to our investor email communications or newsletter, or consent to non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Legitimate interests (Art. 6(1)(f)) — where processing is necessary for our legitimate business interests, provided that those interests are not overridden by your interests, rights, and freedoms. This may include operating, maintaining, securing, and improving the Website; using strictly necessary cookies; analyzing Website usage on an aggregated basis; responding to inquiries; managing investor relations communications; detecting and preventing fraud and security incidents; protecting our rights; and facilitating corporate transactions
Legal obligation (Art. 6(1)(c)) — where processing is necessary to comply with applicable law, regulatory requirements, or lawful requests by public authorities.
Contract (Art. 6(1)(b)) — where processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract.

Additional Rights Under EU/UK/Swiss Law. In addition to the rights described above under “Your Data Protection Rights,” you have the following rights under the GDPR, UK GDPR, and FADP, subject to exceptions and limitations under those laws:

Right to request restriction of the processing of your Personal Information;
Right to object to processing based on our legitimate interests, including profiling. Where you object to processing for direct marketing purposes, we will no longer process your Personal Information for those purposes.
Right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you. Bright Minds does not engage in such automated decision-making through the Website or our Services.
Right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement. A list of EU data protection supervisory authorities is available at europa.eu. UK residents may lodge a complaint with the Information Commissioner’s Office (ico.org.uk). Swiss residents may lodge a complaint with the Federal Data Protection and Information Commissioner (edoeb.admin.ch).

International Data Transfers. Personal Information collected from individuals located in the EEA, UK, or Swiss may be transferred to and processed in countries outside the EEA, the United Kingdom, or Switzerland, including Canada and the United States.

Where Personal Information is transferred to a country that has been recognized as providing an adequate level of data protection, we may rely on the relevant adequacy decision or adequacy regulation, where applicable.

Where we transfer Personal Information to a country that has not been recognized by the European Commission, the UK Government, or the Swiss Federal Council as providing an adequate level of data protection, we rely on appropriate safeguards under Article 46 GDPR (and equivalent UK and Swiss provisions). These may include the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum or International Data Transfer Agreement, the Swiss addendum or equivalent Swiss safeguards, or other lawful transfer mechanisms.

Where applicable, transfers to U.S. organizations certified under the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, or the Swiss-U.S. Data Privacy Framework may also be relied upon as permitted by applicable law.

You may request a copy of the safeguards in place by contacting our Data Protection Officer at privacy@brightmindsbio.com.

How to Exercise Your Rights. To exercise any of the rights described above, contact our Data Protection Officer at privacy@brightmindsbio.com.

We will respond within one (1) month of receiving your request. Where your request is complex or where we have received multiple requests, we may extend that period by an additional two (2) months and will inform you of the reason for the extension. We do not charge a fee unless your request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to act on the request, where permitted by applicable law.

13. Additional Information for Australian Residents

If you are located in Australia, the following additional information applies to your Personal Information, in addition to the information set out elsewhere in this Privacy Policy. This subsection is intended to satisfy the requirements of the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (the “APPs”) set out in Schedule 1 of that Act.

Compliance with the Australian Privacy Principles. Bright Minds is committed to handling Personal Information in accordance with the APPs, where they apply. This Privacy Policy describes how we collect, hold, use, and disclose Personal Information, the purposes for which we do so, and how individuals can access and correct their Personal Information or make a privacy complaint.

Overseas Disclosure of Personal Information. Bright Minds is headquartered in Canada and engages service providers in Canada, the United States, and other countries where our service providers may process or store Personal Information. Personal Information collected from Australian residents may be disclosed to, transferred to, stored in, or processed in those countries.

Before disclosing Personal Information to an overseas recipient, we take reasonable steps to ensure that the recipient handles the Personal Information in a manner consistent with the APPs, where required by applicable law. These steps may include entering into contractual arrangements that impose data protection obligations on the recipient.

Notifiable Data Breaches. Where applicable, Bright Minds complies with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth). If we become aware of an eligible data breach involving Personal Information that is likely to result in serious harm to one or more individuals, we will notify affected individuals and the Office of the Australian Information Commissioner (“OAIC”) as required by law.

Complaints. If you have a complaint about how we have handled your Personal Information, please contact our Privacy Officer at privacy@brightmindsbio.com. We will acknowledge your complaint within a reasonable period and where possible, we aim to respond within thirty (30) days. If you are not satisfied with our response, you may lodge a complaint with the OAIC at oaic.gov.au or by telephone at 1300 363 992.

14. Contact Us

In order to exercise your rights or should you have any questions, concerns or complaint regarding our Privacy Policy or the collection or processing of your Personal Information, you may email our Privacy Officer at privacy@brightmindsbio.com.

The French version of the Privacy Policy is available here.

Cookie Policy – Main website

This Cookie Policy explains how Bright Minds uses cookies and similar technologies on our Website.

What are cookies and similar technologies? Cookies are small text files placed on your device when you visit a website. Similar technologies, such as pixels, tags, web beacons, local storage, and embedded content, may also be used to collect or store information on your device or to recognize your browser or device.

How we use cookies? We use cookies and similar technologies to operate and secure the Website, remember your preferences, understand how visitors use the Website, improve Website performance, and, where permitted and/or subject to your prior consent, support marketing and advertising activities.

Types of cookies we use

Strictly necessary cookies. These cookies are required and essential for the Website to operate, for security purposes, or to provide a service requested by you. They cannot be switched off through our cookie preference tool.
Analytics cookies. These cookies help us understand how visitors use the Website, which pages are visited, and how the Website performs.
Marketing cookies and similar technologies. These cookies and technologies may be used to understand your interaction with our content, including embedded third-party content, and to support marketing or advertising activities. They may be set by us or by third parties.
Third-party embedded content. The Website may include embedded YouTube videos. YouTube content and its associated cookies or storage technologies do not load unless you consent to Marketing cookies. After consent, YouTube/Google may collect information about your interaction with that content in accordance with its own privacy and cookie policies.

Managing your cookie preferences. When you first visit the Website, you can accept or reject non-essential cookies through the cookie consent banner. You can change or withdraw your preferences at any time through the cookie preference tool available on the Website. You can also control cookies through your browser settings. However, disabling certain cookies may affect the functionality of the Website. We will use cookies where permitted or with your prior consent to the extent required by applicable laws.

Consent records. To document cookie choices and demonstrate compliance, Bright Minds maintains a server-side consent record containing a randomly generated consent identifier, the visitor’s category choices, the date and time of the choice, the action taken, browser language, applicable banner and policy versions, and whether a Global Privacy Control signal was detected. The record does not contain the visitor’s IP address or browser user-agent string. Consent records are retained in accordance with the data-retention practices described in this Privacy Policy.

Cookie table. The specific cookies used on the Website are described below or in the cookie preference tool.

Cookie name	Provider	Category	Purpose	Duration
bmcc_consent, bmcc_id, bmcc_gpc_logged, bmcc_language	Bright Minds (first-party)	Strictly necessary	Stores cookie preferences, the selected cookie-interface language, a randomly generated consent-record identifier, and—when detected—a record that Global Privacy Control was processed. These cookies do not store an IP address or browser user-agent information.	Up to 6 months
YouTube (incl. VISITOR_INFO1_LIVE, YSC, __Secure-YEC, __Secure-ROLLOUT_TOKEN, __Secure-YNID, and YouTube player storage items such as ytidb::LAST_RESULT_ENTRY_KEY, YtIdbMeta#databases, LOGS_DATABASE, TESTCOOKIESENABLED)	YouTube / Google (third party)	Marketing	Loaded only after you consent to Marketing cookies. Used to estimate connection bandwidth, remember video-player preferences, measure interaction with embedded content, and support YouTube analytics and advertising. These cookies and storage items are controlled by YouTube/Google as third parties.	Session up to 13 months (some items persistent)

Updates to this Cookie Policy. We may update this Cookie Policy from time to time to reflect changes in the cookies and similar technologies used on the Website or changes in applicable law. The updated version will be made available on the Website.