Privacy Policy

Effective Date: October 17, 2026   |   Last Updated: October 17, 2026

Solid Biosciences Inc. (“Solid,” “we,” “us,” or “our”) respects the privacy of individuals and is committed to responsibly handling personal information. This Privacy Policy describes how Solid collects, uses, discloses, retains, transfers, and otherwise processes Personal Information (as defined below) when you interact with us, including through www.solidbio.com, our investor relations website, our Partner With Us activities, and other websites, digital properties, communications, and online services that link to this Privacy Policy (collectively, the “Site”).

Solid is a clinical-stage life sciences company focused on developing precision genetic medicines for rare neuromuscular and cardiac diseases. Because of the nature of our research and development activities, some interactions may involve health, medical, genetic, scientific, or other sensitive information. Additional or more specific privacy notices may apply to clinical trials and other research, adverse event and product safety reporting, Consumer Health Data, job applicants, or other activities. Where a more specific notice applies, that notice supplements this Privacy Policy and controls in the event of a conflict with respect to the information covered by that notice.

We will process any personal information we collect in accordance with applicable law and as described in this Privacy Policy (unless, as explained above, a separate policy or notice governs).

  1. SCOPE AND DEFINITIONS

This Privacy Policy applies to Personal Information Solid processes in connection with the Site and other interactions with Solid where this Privacy Policy is referenced.

This policy does not apply to information collected by: us offline or through any other means not included in the above-provided definition of our Site; or any third party, including through any application or content (including advertising) that may link to or be accessible from or on the Site.

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with an identified or identifiable individual. It includes “personal data” and similar terms under applicable privacy laws. Personal Information generally does not include information that has been lawfully aggregated, anonymized, or de-identified so that it is no longer reasonably linkable to an individual.

This Privacy Policy does not replace an informed consent form, clinical study privacy notice, authorization, protocol, or other privacy disclosure provided in connection with participation in a clinical trial or other research activity.

  1. PERSONAL INFORMATION WE COLLECT

Solid’s collection practices are intended to be proportionate to the way individuals interact with the Site. For general website browsing, Solid ordinarily collects contact information submitted by the individual and internet, device, and usage information. Health, medical, genetic, genomic, clinical trial, adverse event, and other sensitive information is generally collected only when voluntarily provided in a relevant interaction or processed under a separate clinical trial, research, pharmacovigilance, Consumer Health Data, or other activity-specific notice.

A. Contact, Identification, and Communications Information

Includes name; email address; telephone number; mailing address; employer or organization; job title; professional affiliation; the content of communications; and other information you provide when contacting Solid.

B. Patient, Caregiver, Health, and Medical Information

If you are a patient, caregiver, or other individual who voluntarily contacts Solid regarding a disease, clinical trial, investigational therapy, adverse event, product complaint, medical information inquiry, or other health-related matter, you may provide information concerning a medical condition or diagnosis, symptoms, treatment history, medications or therapies, age or date of birth, healthcare providers, family medical history, clinical trial participation or interest, treatment outcomes, adverse events, product complaints, and other health-related information. Solid does not use its general corporate Site to request health information from routine visitors, and information collected in clinical trials, research studies, pharmacovigilance activities, or other regulated programs is governed by the applicable study documentation, authorization, notice, consent, or law.

C. Genetic and Genomic Information

Because Solid develops genetic medicines for inherited diseases, certain interactions may involve information concerning a genetic diagnosis, mutation, variant, genetic testing, genomic information, or family genetic history. Solid does not seek detailed genetic or genomic information through general browsing of its corporate website or through general inquiry forms, and any genetic or genomic information collected in a clinical trial, research study, patient-support interaction, or other regulated activity is governed by the applicable study documentation, authorization, notice, consent, and law.

D. Healthcare Professional, Investigator, and Researcher Information

We may collect professional contact information, institutional affiliation, title, specialty, credentials, research interests, publications, clinical trial experience, scientific or medical inquiries, and information about interactions with Solid.

E. Business, Investor, Media, and Employment Information

We may collect professional and business contact information, correspondence, information relevant to business relationships or proposed transactions, investor or media inquiries, and applicant information such as resumes, employment history, education, qualifications, and references.

F. Internet, Device, and Usage Information

When you use the Site, we and our service providers may automatically collect IP address, browser and device type, operating system, device or online identifiers, referring and exit pages, pages viewed, links selected, date and time of access, duration of visits, approximate geographic location derived from IP address, and interactions with our Site.

G. Sensitive Personal Information

Certain information described above may constitute sensitive personal information, sensitive data, special category data, or Consumer Health Data under applicable law, including health and genetic information. Solid processes such information only with legally required consent or other authorization where applicable, and subject to safeguards, use limitations, and activity-specific notices required by law.

  1. PARTNER WITH US AND BUSINESS DEVELOPMENT DATA

Solid maintains a “Partner With Us” site through which corporations, academic institutions, research organizations, technology developers, investigators, and other potential partners may contact Solid regarding research collaborations, licensing opportunities, material transfer arrangements, shared development initiatives, delivery technologies, therapeutic programs, and other business development opportunities.

When you contact Solid through the Partner With Us page, the businessdevelopment@solidbio.com address, or another business development channel, we may collect and process:

    • Your name, business email address, telephone number, job title, employer, institution, and professional contact information;
    • Information about your organization, technology, product candidate, research program, intellectual property, platform, development stage, indication, scientific interests, or proposed collaboration;
    • Scientific, technical, preclinical, clinical, regulatory, manufacturing, commercial, intellectual property, financial, or other information included in your submission or subsequent diligence materials;
    • Communications, meeting notes, presentations, non-confidential summaries, and other materials exchanged with Solid; and
    • Information from public sources, scientific publications, patent databases, professional networks, diligence providers, advisors, or other sources that we use to evaluate a potential relationship.

We use Partner With Us information to receive and evaluate inquiries; assess scientific, technical, strategic, intellectual property, regulatory, commercial, and financial fit; conduct diligence; communicate with you and your organization; negotiate and administer confidentiality agreements, material transfer agreements, research collaborations, licenses, and other transactions; maintain records of opportunities and prior communications; protect Solid’s legal rights and intellectual property; comply with law; and establish, exercise, or defend legal claims.

Please do not submit confidential, proprietary, trade secret, patient-identifiable, or other sensitive information through our Site, including a general Partner With Us inquiry. Be advised that submission of information through our website or email inquiry does not by itself create a confidential, fiduciary, partnership, agency, or other special relationship with Solid.

We may disclose Partner With Us information to Solid personnel involved in business development, research, clinical development, regulatory, legal, finance, intellectual property, manufacturing, or management; our professional advisors and diligence providers; service providers acting on our behalf; and, where appropriate and subject to confidentiality protections, potential collaborators or transaction counterparties. We retain this information for as long as reasonably necessary to evaluate and administer the opportunity, maintain an appropriate record of prior discussions, protect legal rights, and satisfy applicable legal or contractual requirements.

  1. HOW WE COLLECT PERSONAL INFORMATION

    • Directly from you or your authorized representative, caregiver, or family member;
    • Automatically through your use of the Site and cookies or similar technologies;
    • From healthcare professionals, investigators, clinical trial sites, research institutions, contract research organizations, and laboratories;
    • From collaborators, licensors, licensees, vendors, advisors, diligence providers, and other business partners;
    • From recruiting services and professional networks; and
    • From public sources, including scientific publications, patent and corporate databases, websites, and social media or professional networking platforms.

  1. HOW WE USE PERSONAL INFORMATION

    • Operate, maintain, secure, troubleshoot, and improve the Site;
    • Respond to inquiries from patients, caregivers, healthcare professionals, researchers, investors, media, job applicants, and business partners;
    • Conduct scientific research, preclinical development, clinical development, and regulatory activities;
    • Administer and support clinical trials and evaluate potential research or clinical opportunities;
    • Receive and evaluate adverse events, product complaints, medical information inquiries, and other safety information;
    • Engage with healthcare professionals, investigators, researchers, and scientific collaborators;
    • Evaluate and administer research collaborations, licenses, material transfer arrangements, business development opportunities, and other transactions;
    • Recruit and evaluate personnel;
    • Perform analytics and understand use of the Site;
    • Maintain cybersecurity, detect fraud or misconduct, and protect Solid and others;
    • Comply with legal, regulatory, pharmacovigilance, clinical research, accounting, record-retention, and reporting obligations; and
    • Establish, exercise, or defend legal claims.

  1. GOOGLE ANALYTICS, COOKIES, AND SIMILAR TECHNOLOGIES

Solid may use Google Analytics, a web analytics service provided by Google, and other analytics technologies to understand how visitors use our Site(s), measure website performance, identify usage trends, diagnose technical issues, and improve our websites.

Google Analytics may collect or receive information such as online identifiers, cookie identifiers, IP address and information derived from it, browser and device information, approximate location, pages viewed, referring pages, interactions with website features, session information, and dates and times of visits. Google may process information on Solid’s behalf in accordance with applicable contractual terms and, depending on Solid’s Google Analytics configuration and data-sharing settings, may act as an independent controller for certain data made available to Google.

Solid will configure Google Analytics and its consent management practices to comply with applicable law. For visitors in the European Economic Area (“EEA”), United Kingdom, Switzerland, and other jurisdictions requiring prior consent, non-essential analytics cookies and comparable storage or access technologies will not be used unless and until the visitor provides the required consent. Visitors may withdraw or change consent at any time through our Cookie Settings or consent management tool. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

Where implemented, Google Consent Mode communicates consent choices to Google and adjusts Google tag behavior based on those choices. Solid configures its production implementation so that analytics and advertising-related storage are denied by default in jurisdictions requiring prior consent, and so that the implementation reflects the choices communicated through Solid’s consent management platform.

Solid does not use Google Analytics or cookies to collect names, email addresses, health information, genetic information, or other information that directly identifies an individual. Solid does not send patient-identifiable information, clinical trial eligibility information, medical information inquiries, adverse event information, or Partner With Us form contents to Google Analytics through event names, URLs, custom dimensions, form analytics, or similar mechanisms.

If Solid enables Google Analytics advertising features, Google Signals, remarketing, Google Ads linking, or other functionality beyond ordinary website measurement, Solid will provide any additional disclosures and choices required by applicable law and Google’s applicable policies.

You can manage available cookie choices through the Cookie Settings or Your Privacy Choices link on the Site. Browser settings may also allow you to block or delete cookies, although doing so may affect website functionality.

  1. LEGAL BASES FOR PROCESSING UNDER GDPR AND UK GDPR

Where the EU General Data Protection Regulation (“GDPR”), UK GDPR, or another law requires Solid to identify a legal basis, Solid processes Personal Information only where a recognized legal basis applies. Depending on the activity, the legal bases may include:

    • Consent (GDPR Article 6(1)(a)), including where required for non-essential analytics cookies and certain optional communications;
    • Performance of a contract or steps taken at your request before entering into a contract (Article 6(1)(b)), including certain Partner With Us and business relationship activities;
    • Compliance with a legal obligation (Article 6(1)(c)), including applicable regulatory, safety, pharmacovigilance, clinical research, accounting, and legal requirements;
    • Protection of vital interests (Article 6(1)(d)) where applicable;
    • Legitimate interests (Article 6(1)(f)), including operating and securing our business and websites, responding to professional and business inquiries, conducting appropriate business development and diligence, managing professional relationships, protecting legal rights, and improving our operations, where those interests are not overridden by the individual’s rights and interests; and
    • Other bases permitted by applicable law for scientific research, public health, and regulatory activities.

Where Solid processes special categories of Personal Information under GDPR Article 9, including health or genetic data, Solid will also rely on an applicable Article 9 condition, which may include explicit consent; processing necessary for the establishment, exercise, or defense of legal claims; reasons of public interest in the area of public health, including ensuring high standards of quality and safety of medicinal products; scientific research subject to applicable safeguards; or another condition permitted by law.

Where Solid relies on legitimate interests, it considers the nature of the information, the reasonable expectations of the individual, the benefits and risks of the processing, and appropriate safeguards. You may have a right to object to processing based on legitimate interests as described below.

  1. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose Personal Information to service providers and processors; clinical trial sites, investigators, contract research organizations, laboratories, and research institutions; collaborators, licensors, licensees, and business partners; professional advisors; regulators and governmental authorities; and parties involved in actual or proposed financings, investments, mergers, acquisitions, licenses, collaborations, reorganizations, or other corporate transactions.

Where required by GDPR or UK GDPR, processors acting on Solid’s behalf are subject to contractual obligations addressing data protection, confidentiality, security, and processing instructions.

  1. SALE, SHARING, AND TARGETED ADVERTISING

Solid does not sell Personal Information for monetary consideration. Certain disclosures involving cookies or online technologies may be treated as “sale,” “sharing,” or “targeted advertising” under some U.S. state laws even where no money is exchanged. To the extent Solid engages in such activity, Solid will provide legally required notices and opt-out mechanisms, including recognition of applicable opt-out preference signals such as Global Privacy Control where required.

Solid will review its production cookie and tag inventory, including Google Analytics configuration, Google Tag Manager, embedded media, social media pixels, investor relations technologies, and any advertising or remarketing tools, to determine whether any disclosures, opt-out mechanisms, or recognition of applicable opt-out preference signals are required by law.

  1. CLINICAL TRIALS AND RESEARCH

Information collected from participants in Solid-sponsored clinical trials is governed by the applicable informed consent form, study privacy documentation, protocol, and applicable law. Clinical trial information may be collected by investigators, hospitals, sites, laboratories, contract research organizations, and other research partners. Solid may receive information in coded or pseudonymized form and may not receive a participant’s direct identifiers.

Clinical trial information may be processed to conduct and monitor studies, evaluate safety and efficacy, analyze results, comply with legal and regulatory obligations, support regulatory submissions, conduct authorized or otherwise lawful research, and establish, exercise, or defend legal claims.

  1. ADVERSE EVENTS, PRODUCT COMPLAINTS, AND MEDICAL INFORMATION

If Solid receives an adverse event, safety report, product complaint, or medical information inquiry, Solid may collect information about the affected individual, reporter, investigational therapy, medical history, treatment, event, outcome, and other information necessary to evaluate and report the matter. Solid may be legally required to retain and disclose such information to regulatory authorities, investigators, ethics committees, collaborators, licensees, or other parties with safety responsibilities. Privacy rights such as deletion may therefore be limited where retention is legally required.

  1. INTERNATIONAL DATA TRANSFERS

Solid is headquartered in the United States. Personal Information may be transferred to, stored in, or accessed from the United States and other countries in which Solid, its research partners, business partners, or service providers operate. These countries may not provide the same level of data protection as the jurisdiction in which the information was collected.

For transfers of Personal Information subject to the GDPR or UK GDPR to countries not recognized as providing an adequate level of protection, Solid will use an appropriate transfer mechanism where required, such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum or International Data Transfer Agreement, an applicable adequacy decision, or another legally recognized safeguard. Where required, Solid will assess the circumstances of the transfer and implement supplementary measures appropriate to the risk.

  1. DATA RETENTION

Solid retains Personal Information only for as long as reasonably necessary for the purposes for which it was collected and to satisfy applicable legal, regulatory, scientific, contractual, accounting, and reporting requirements. Relevant factors include the nature and sensitivity of the information, the purpose of processing, clinical research and pharmacovigilance requirements, contractual obligations, statutes of limitation, legal holds, and the need to establish, exercise, or defend legal claims.

  1. INFORMATION SECURITY

Solid maintains administrative, technical, organizational, and physical safeguards designed to protect Personal Information against unauthorized or unlawful access, acquisition, use, loss, alteration, or disclosure. No information system or transmission method can be guaranteed to be completely secure.

  1. GDPR / UK GDPR RIGHTS

If GDPR or UK GDPR applies to Solid’s processing of your Personal Information, subject to applicable conditions and exceptions you may have the right to:

    • Obtain confirmation whether Solid processes your Personal Information and access that information;
    • Correct inaccurate or incomplete Personal Information;
    • Request erasure of Personal Information;
    • Restrict processing;
    • Object to processing based on legitimate interests and object at any time to processing for direct marketing;
    • Receive certain Personal Information in a structured, commonly used, machine-readable format and transmit it to another controller where the right to portability applies;
    • Withdraw consent at any time where processing is based on consent, without affecting prior lawful processing;
    • Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects, where applicable; and
    • Lodge a complaint with the competent supervisory authority, including in the EEA country where you live or work, the UK Information Commissioner’s Office where applicable, or the authority where you believe an infringement occurred.

These rights are not absolute. Solid may deny or limit a request where permitted or required by law, including where information must be retained for clinical research, pharmacovigilance, regulatory, legal, or record-retention purposes.

  1. U.S. STATE PRIVACY RIGHTS AND CONSUMER HEALTH DATA

Residents of U.S. states with applicable comprehensive privacy laws may have rights to access, correct, delete, or obtain a portable copy of Personal Information; opt out of certain sale, sharing, targeted advertising, or profiling; limit certain uses of sensitive information; and appeal certain privacy decisions. Solid will provide mechanisms required by applicable law.

Certain health-related information may constitute Consumer Health Data under laws including Washington’s My Health My Data Act and Nevada’s consumer health data law. Solid should maintain a separate Consumer Health Data Privacy Notice, where required, that describes applicable categories of Consumer Health Data, purposes of collection and use, categories of sources, categories of recipients, consent requirements, privacy rights, and how individuals may exercise those rights.

  1. CHILDREN

Solid’s general corporate Sites are not directed to children under 13, and Solid does not knowingly collect Personal Information directly from children under 13 through its general corporate website without appropriate authorization. Solid develops therapies for diseases that may affect children and may conduct pediatric clinical trials; information relating to pediatric research participants is processed under the applicable clinical study documentation and law.

  1. THIRD-PARTY WEBSITES AND SERVICES

The Site may link to third-party websites and services, including clinical trial registries, social media platforms, and other resources. Solid does not control those third parties’ privacy practices. Their processing is governed by their own privacy notices.

  1. EXERCISING YOUR PRIVACY RIGHTS

To submit a privacy request, contact Solid using the email or physical address  below. Solid may need to verify your identity before completing a request. Where permitted by law, an authorized agent may submit a request on your behalf, and Solid may request evidence of the agent’s authority.

Email: privacy@solidbio.com

Mail: Solid Biosciences Inc., Attn: Legal Department – Privacy, 500 Rutherford Avenue, Third Floor, Charlestown, MA 02129, United States

  1. CHANGES TO THIS PRIVACY POLICY

Solid may update this Privacy Policy periodically to reflect changes in its practices, technologies, services, development programs, business operations, or legal requirements. We will revise the Last Updated date and provide additional notice or obtain consent where required by law.

  1. CONTACT US

Solid Biosciences Inc.
Attn: Legal Department – Privacy
500 Rutherford Avenue, Third Floor
Charlestown, MA 02129
United States

If you are experiencing a medical emergency, contact emergency medical services or an appropriate healthcare professional immediately.

 

Last revised and effective as of: October 10, 2018

This Privacy Policy relates to information collected online by Solid Biosciences Inc. (“Solid Bio” “we” or “us” or “our”) through your use of the Solid Bio website at https://www.solidbio.com/ and any subdomains or associated sites linked thereto by Solid Bio, its subsidiaries and affiliates (excluding third-party websites) and any features, and information available thereon (along with associated and successor websites, applications, features and information, or any part thereof, the “Site”). This Privacy Policy is incorporated into, a part of, and governed by the Solid Bio Terms & Conditions. As used herein, “you” and “your” mean a user of the Site. You should carefully read this Privacy Policy. By using the Site, you are signifying your acceptance of this Privacy Policy. If you do not agree to this Privacy Policy, you may not use the Site.

To the extent that the Site is available to individuals located in the European Economic Area and the United Kingdom, this Privacy Policy sets out our practices and obligations under the General Data Protection Regulation 2016/679 (the “GDPR”). If your affiliated organization engages us for the provision of services, we may receive personal information about you directly from your affiliated organization, which will only be used as necessary to provide the services to your affiliated organization. Under the GDPR, in this context and to the extent applicable, we will act as a processor (as defined in the GDPR) on behalf of your affiliated organization in respect of that personal information and your affiliated organization will act as a controller (as defined in the GDPR) in respect of that personal information and is responsible for obtaining all necessary consents and providing you with all requisite information as required by applicable law.

As used in this Privacy Policy, the terms “using” and “processing” information include using cookies on a computer, subjecting the information to statistical or other analysis and using or handling information in any way, including, but not limited to collecting, storing, evaluating, modifying, deleting, using, combining, disclosing and transferring information within our organization or among our affiliates within the United States or internationally.

What information about me is collected?

Where and when is information collected (including through the use of cookies and action tags)?

Does Solid Bio collect information from children under the age of 13 years of age?

What does Solid Bio do with the information it collects?

When does Solid Bio disclose information to third parties?

Does this Privacy Policy apply when I link to other websites or services?

Is the information collected through the Site secure?

Could my information be transferred to other countries?

For how long will my personally identifiable information be kept?

What choices do I have regarding my personally identifiable information?

What does Solid Bio do in response to “Do Not Track” requests?

How will I know if there are any changes to this Privacy Policy?

Who do I contact if I have any privacy questions?

WHAT INFORMATION ABOUT ME IS COLLECTED?

Depending on your use of the Site, we may collect two types of information: personally identifiable information and non-personally identifiable information.

Personally Identifiable Information

Personally identifiable information is information that identifies you or can be used to identify or contact you. Such information may include your name, address, e-mail address and telephone number. Personally identifiable information amounts to ‘personal data’ for the purposes of and as defined in the GDPR. All references to personally identifiable information shall be deemed to include ‘personal data’ as defined and used in the GDPR.

Non-Personally Identifiable Information

Non-personally identifiable information is information, any single item of which, by itself, cannot be used to identify or contact you, including demographic information (such as age, profession, gender, current location (including city, state and country from which your device accessed the Site), zip code, birth date, or year of birth), internet service provider, IP addresses, browser types, unique device identifiers, device types, the way in which your device navigates the Site, requested URL, referring URL, browser language, the pages you view, the content you view on the Site and any searches or queries that you conduct during your visit to the Site, the date and time of your visit, domain names, and statistical data involving the use of the Site. Certain non-personally identifiable information may be considered a part of your personally identifiable information if it were combined with other identifiers (for example, combining your zip code with your street address) in a way that enables you to be identified. However, the same pieces of information are considered non-personally identifiable information when they are taken alone or combined only with other non-personally identifiable information (for example, your viewing preferences).

WHERE AND WHEN IS INFORMATION COLLECTED (INCLUDING THROUGH THE USE OF COOKIES AND ACTION TAGS)?

We will collect personally identifiable information that you submit to us. We may also receive personally identifiable information and non-personally identifiable about you from third parties providing analytics as part of your use of the Site.

Cookies and Action Tags

We may collect non-personally identifiable information passively using “cookies” and “action tags.”

“Cookies” are small text files that can be placed on your computer or mobile device in order to identify your Web browser and the activities of your computer on the Site and other websites. Cookies can be used to personalize your experience on the Site (such as dynamically generating content on webpages specifically designed for you), to assist you in using the Site (such as saving time by not having to reenter your name each time you use the Site), to allow us to statistically monitor how you are using the Site to help us improve our offerings, and to determine the popularity of certain content.

You do not have to accept cookies to use the Site. Although most browsers are initially set to accept cookies, you may reset your browser to notify you when you receive a cookie or to reject cookies generally. Most browsers offer instructions on how to do so in the “Help” section of the toolbar. However, if you reject cookies, certain features or resources of the Site may not work properly or at all and you may experience some loss of convenience.

For the avoidance of doubt, the Site uses third-party service platforms (including to help analyze how users use the Site). In addition to cookies that we may place on your computer or mobile device, cookies might also be placed on your computer or mobile device by third parties that we use to provide analytics and other services. In the course of providing such services, such third parties could place or recognize unique cookies on your browser, computer or mobile device. If you would like to disable “third party” cookies, you may be able to turn them off by going to the third party’s website.

Here is a link to the main third-party platform we use:

https://www.google.com/policies/privacy/

“Action tags,” also known as web beacons or gif tags, are a web technology used to help track website usage information, such as how many times a specific page has been viewed. Action tags are invisible to you, and any portion of the Site, including e-mail sent on our behalf, may contain action tags.

By using cookies and action tags together, we are able to gain valuable information to improve the Site.

Finally, you should be aware that third parties may use their own cookies or action tags when you click on a link to their websites or services on or from the Site. This Privacy Policy does not govern the use of cookies or action tags or the use of your information by such third-party websites or services.

Log Files

We also collect non-personally identifiable information through our Internet log files, which record data such as user IP addresses, internet service provider, device types, date and time of usage, the way in which your device navigates the Site, requested URL, referring URL, the content you view on the Site and any searches or queries that you conduct during your visit to the Site, browser types, domain names, and other anonymous statistical data involving the use of the Site. This information may be used to analyze trends, to administer the Site, to monitor the use of the Site, and to gather general demographic information. We may link this information to personally identifiable information for these and other purposes such as personalizing your experience on the Site and evaluating the Site in general.

DOES SOLID BIO COLLECT INFORMATION FROM CHILDREN UNDER 13 YEARS OF AGE?

We are committed to protecting the privacy of children. The Site is not designed for or directed to children under the age of 13. We do not collect personally identifiable information from any person we actually know is under the age of 13.

WHAT DOES SOLID BIO DO WITH THE INFORMATION IT COLLECTS?

We will only use your personally identifiable information to the extent that the law allows us to do so. Pursuant to the GDPR, legal bases for our processing your personally identifiable information may include (without limitation):

(a) where you have given consent to the processing;

(b) where it is necessary to perform the contract we have entered into or are about to enter into with you (whether in relation to the provision of the Site or otherwise); and/or

(c) where it is necessary for the purposes of our legitimate interests (or those of a third party) and your interests or fundamental rights and freedoms do not override those legitimate interests.

We use the information collected to provide the Site to you and process your transactions, to help us understand who uses the Site, for administrative and technical operations such as operating and improving the Site, and, if you “opt in”, so that we can contact you about products and services that may be of interest to you.

If you opt in, we and third parties may send you electronic newsletters, contact you about the Site, products, services, information and news that may be of interest to you. If you no longer desire to receive these communications, we will provide you with the option to change your preferences. If you identify yourself to us by sending us an e-mail with questions or comments, we may use your information (including personally identifiable information) to respond to your questions or comments, and we may file your questions or comments (with your information) for future reference.

We may also use the information gathered to perform statistical analysis of user behavior or to evaluate and improve the Site. We may link some of this information to personally identifiable information for internal purposes or to improve your experience with the Site.

WHEN DOES SOLID BIO DISCLOSE INFORMATION TO THIRD PARTIES?

We generally disclose information we gather from you through the Site to the following types of third parties and as otherwise set forth in this Privacy Policy or our Terms & Conditions or as specifically authorized by you.

Laws and Legal Rights

We may disclose your information (including personally identifiable information) if we believe in good faith that we are required to do so in order to comply with an applicable statute, regulation, rule or law, a subpoena, a search warrant, a court or regulatory order, lawful requests by public authorities, including to meet national security or law enforcement requirements, or other valid legal process. We may disclose personally identifiable information in special circumstances when we have reason to believe that disclosing this information is necessary to identify, contact or bring legal action against someone who may be violating the Solid Bio Terms & Conditions, to detect fraud, to meet contractual obligations with content and technology providers, to protect our rights to our property, for assistance with a delinquent account, or to protect the safety and/or security of our users, the Site or the general public. Without limitation of the foregoing, although unlikely, Solid Bio or a trusted third party may need to access personally identifiable information in connection with a digital forensic investigation of a potential security incident.

Third Parties Generally

We may provide to third parties non-personally identifiable information, including where such information is combined with similar information of other users of the Site. For example, we might inform third parties regarding the number of unique users who use the Site, the demographic breakdown of our users of the Site, or the products and/or services purchased using the Site and the vendors of such products and services. In addition to the above, when users use our Site, third parties (including analytics providers) may directly collect information about our users’ online activities over time and across different websites. The third parties to which we may provide or who may independently directly collect information may include providers of products or services (including analytics service providers, vendors (including providers of hosting services and cloud storage) and website tracking services), merchants, affiliates and other actual or potential commercial partners, sponsors, licensees, researchers and other similar parties.

Please note in particular that the Site uses Google Analytics, including its data reporting features. Information collected by Google Analytics includes but is not limited to web metrics. For information on how Google Analytics collects and processes data, please see the site “How Google uses data when you use our partners’ sites or apps”, currently located at www.google.com/policies/privacy/partners/. For information on opting out of Google Analytics, we encourage you to visit Google’s website, including its list of currently available opt-out options presently located at https://tools.google.com/dlpage/gaoptout.

Outside Contractors

We may employ independent contractors, vendors and suppliers (collectively, “Outside Contractors”) to provide specific services and products related to the Site, such as hosting and maintaining the Site, providing technical or other customer support services, billing, receivable or payable services, content acquisition or licensing services, and fraud screening, and developing applications for the Site. In the course of providing products or services to us, these Outside Contractors may have access to information collected through the Site, including your personally identifiable information. We use reasonable efforts to ensure that these Outside Contractors are capable of (1) protecting the privacy of your personally identifiable information consistent with this Privacy Policy, and (2) not using or disclosing your personally identifiable information for any purpose other than providing us with the products or services for which we contracted or as required by law.

Sale of Business

We reserve the right to transfer information to a third party in the event of a sale, merger or other transfer of all or substantially all of the assets of Solid Bio or any of its Corporate Affiliates (as defined below), or that portion of Solid Bio or any of its Corporate Affiliates to which the Site relates, or in the event that we discontinue our business or file a petition or have filed against us a petition in bankruptcy, reorganization or similar proceeding, provided that the third party agrees to adhere to the terms of this Privacy Policy.

Affiliates

We may disclose information (including personally identifiable information) about you to our Corporate Affiliates. For purposes of this Privacy Policy: “Corporate Affiliate” means any person or entity which directly or indirectly controls, is controlled by or is under common control with Solid Bio, whether by ownership or otherwise; and “control” means possessing, directly or indirectly, the power to direct or cause the direction of the management, policies or operations of an entity, whether through ownership of fifty percent (50%) or more of the voting securities, by contract or otherwise. Any information relating to you that we provide to our Corporate Affiliates will be treated by those Corporate Affiliates in accordance with the terms of this Privacy Policy.

DOES THIS PRIVACY POLICY APPLY WHEN I LINK TO OTHER WEBSITES OR SERVICES?

Our Site may provide you with access to other websites and services. This may include providing you with the ability to automatically post updates on Facebook and Twitter. Please be aware that we are not responsible for the privacy practices of any websites or services other than the Site. We encourage you to read the privacy policies or statements of each and every such website and service. This Privacy Policy applies solely to information collected by us through the Site.

IS THE INFORMATION COLLECTED THROUGH THE SITE SECURE?

We want your information (including personally identifiable information) to remain secure. We strive to provide transmission of your information from your computer or mobile device to our servers through techniques that are consistent with commercially reasonable standards and to employ administrative, physical, and electronic measures designed to protect your information from unauthorized access.

Notwithstanding the above, you should be aware that there is always some risk involved in transmitting information over the Internet. There is also some risk that others could find a way to thwart our security systems. As a result, while we strive to protect your information, we cannot ensure or warrant the security or privacy of any information you transmit to us, and you do so at your own risk.

COULD MY INFORMATION BE TRANSFERRED TO OTHER COUNTRIES?

Personally identifiable information collected on the Site may be transferred from time to time to our offices or personnel, or to third parties, located throughout the world, and the Site may be viewed and hosted anywhere in the world, including countries that may not have laws of general applicability regulating the use and transfer of such data. By using the Site and submitting such information on it, you voluntarily consent to the trans-border transfer and hosting of such information. Without limitation of the foregoing, you hereby expressly grant consent to Solid Bio to: (a) process and disclose such information in accordance with this Privacy Policy; (b) transfer such information throughout the world, including to the United States or other countries that do not ensure adequate protection for personally identifiable information (as determined by the European Commission); and (c) disclose such information to comply with lawful requests by public authorities, including to meet national security or law enforcement requirements. If you are a user accessing the Site from a jurisdiction with laws or regulations governing personal data collection, use, and disclosure that differ from those of the United States, please be advised that all aspects of the Site are governed by the internal laws of the United States and the Commonwealth of Massachusetts, USA, regardless of your location.

FOR HOW LONG WILL MY PERSONALLY IDENTIFIABLE INFORMATION BE KEPT?

We will only retain your personally identifiable information for as long as necessary to fulfill the purposes for which we collected it.

To determine the appropriate retention period for personally identifiable information, we consider the amount, nature, and sensitivity of that information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your personally identifiable information and whether we can achieve those purposes through other means, and the applicable legal requirements.

WHAT CHOICES DO I HAVE REGARDING MY PERSONALLY IDENTIFIABLE INFORMATION?

We generally use personally identifiable information as described in this Privacy Policy or our Terms & Conditions or as authorized by you or as otherwise disclosed at the time we request such information from you. You generally must “opt in” and give us permission to use your personally identifiable information for any other purpose. You may also change your preference and “opt out” of receiving certain marketing communications from us by following the directions provided in association with the communication or such other directions we may provide or by contacting info@www.solidbio.com.

Under certain circumstances and in compliance with the GDPR, you have the right to:

Request access to your personally identifiable information (commonly known as ‘subject access request’). This enables you to receive a copy of the personally identifiable information we hold about you and to check that we are lawfully processing it;

Request correction of the personally identifiable information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected;

Request erasure of your personally identifiable information. This enables you to ask us to delete or remove your personally identifiable information where there is no good reason for us to continue processing it. You also have the right to ask us to delete or remove all of your personally identifiable information in certain circumstances;

Object to processing of your personally identifiable information where we are relying on a legitimate interest (or that of a third party) and there is something about your particular situation which makes you want to object to processing on this ground;

Request the restriction of processing of your personally identifiable information. This enables you to ask us to suspend the processing of your personally identifiable information, for example, if you want us to establish its accuracy or the reason for processing it;

Request the transfer of your personally identifiable information to another party;

Lodge a complaint with the relevant supervisory authority (as defined in the GDPR). If you have any complaints about the way we process your personally identifiable information, please do contact us. Alternatively, you may lodge a complaint with the supervisory authority which is established in your country.

If you want to update, review, verify, correct or request erasure of your personally identifiable information, object to the processing of your personally identifiable information, or request that we transfer a copy of your personally identifiable information to another party, please contact info@www.solidbio.com.

Such updates, corrections, changes and deletions will have no effect on other information that we maintain, or information that we have provided to third parties in accordance with this Privacy Policy prior to such update, correction, change or deletion. To protect your privacy and security, we may take reasonable steps (such as requesting a unique password) to verify your identity before granting you profile access or making corrections. You are responsible for maintaining the secrecy of your unique password and account information at all times.

You should be aware that it may not be technologically possible to remove each and every record of the information you have provided to us from our system. The need to back up our systems to protect information from inadvertent loss means that a copy of your personally identifiable information may exist in a non-erasable form that will be difficult or impossible for us to locate. After receiving your request, we will use commercially reasonable efforts to update, correct, change, or delete, as appropriate, all personally identifiable information stored in databases we actively use and other readily searchable media as appropriate, as soon as and to the extent reasonably practicable.

WHAT DOES SOLID BIO DO IN RESPONSE TO “DO NOT TRACK” REQUESTS?

The term “Do Not Track” refers to a HTTP header offered by certain web browsers to request that websites refrain from tracking the user. We take no action in response to automated Do Not Track requests. However, if you wish to stop such tracking, please contact us with your request, using our contact details provided below.

HOW WILL I KNOW IF THERE ARE ANY CHANGES TO THIS PRIVACY POLICY?

We may revise this Privacy Policy from time to time. We will not make changes that result in significant additional uses or disclosures of your personally identifiable information without allowing you to “opt in” to such changes. We may also make non-significant changes to this Privacy Policy that generally will not significantly affect our use of your personally identifiable information, for which your opt-in is not required. We encourage you to check this page periodically for any changes. If any non-significant changes to this Privacy Policy are unacceptable to you, you must immediately contact us and, until the issue is resolved, stop using the Site. Your continued use of the Site following the posting of non-significant changes to this Privacy Policy constitutes your acceptance of those changes.

WHO DO I CONTACT IF I HAVE ANY PRIVACY QUESTIONS?

If you have any questions or comments about this Privacy Policy or feel that we are not abiding by the terms of this Privacy Policy, please contact our Legal Department in any of the following ways:

By e-mail:

info@www.solidbio.com

By postal mail or courier:

Attn: Legal Department
Solid Biosciences Inc.
141 Portland Street
Fifth Floor
Cambridge, MA 02139

BY USING THE SITE, YOU SIGNIFY YOUR ACCEPTANCE OF THIS PRIVACY POLICY. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, YOU SHOULD NOT USE THE SITE. CONTINUED USE OF THE SITE, FOLLOWING THE POSTING OF CHANGES TO THIS PRIVACY POLICY THAT DO NOT SIGNIFICANTLY AFFECT THE USE OR DISCLOSURE OF YOUR PERSONALLY IDENTIFIABLE INFORMATION, MEANS THAT YOU ACCEPT THOSE CHANGES.

Following is the jquery code that sets the body class to the page without a photo hero