# Privacy Policy

**Last Updated: December 17, 2025**

Gamida Ltd. (the “Company,” “Gamida,” “we,” “us,” or “our”) operates the website located at https://gamida.co.il/medical/ (the “Website”).

We respect the privacy of Website users and are committed to protecting personal information in accordance with the Israeli Privacy Protection Law, 5741–1981 (the “Privacy Protection Law”), the Privacy Protection Regulations (Data Security), 5777–2017, and any other applicable law and regulation.

This Privacy Policy explains how we collect, use, store, disclose, and otherwise process information obtained through the Website.

1. Information We Collect

When you use the Website, we may collect the following categories of information:

1.1 Information You Voluntarily Provide

We may collect information that you voluntarily provide to us, including:

* Full name

* Email address

* Telephone number

* Details included in messages or inquiries

* Any other information submitted through online forms or provided when contacting us.

1.2 Technical and Analytical Information

When you access or use the Website, certain technical and usage information may be collected automatically, including:

* IP address

* Browser and device type

* Operating system

* Pages visited on the Website

* Date, time, and duration of Website visits

* The website or source from which you were referred to the Website.

1.3 Cookies and Similar Technologies

The Website may use cookies and similar technologies for purposes including:

* Improving and optimizing the user experience

* Analyzing Website traffic and usage

* Personalizing content and advertisements

* Enabling certain Website functions and services

You may manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Website.

2. Purposes of Processing Information

We may use the information collected through the Website for the following purposes:

* Operating, maintaining, and improving the Website

* Providing services, information, and assistance

* Responding to inquiries, requests, and communications

* Contacting users where necessary in connection with their inquiries or use of the Website

* Sending updates, marketing communications, and promotional materials, where permitted by law and subject to obtaining any consent required by applicable law

* Complying with legal, regulatory, and other applicable obligations

* Protecting the security and integrity of the Website

* Preventing fraud, misuse, unauthorized access, and other unlawful activity

* Enforcing or protecting our legal rights.

3. Data Storage and Retention

Personal information collected through the Website may be stored in databases maintained by or on behalf of the Company, in accordance with applicable law.

We take reasonable technical and organizational measures designed to protect personal information against unauthorized access, use, disclosure, alteration, loss, or destruction. These measures may include encryption, access controls, monitoring, backups, and ongoing maintenance of our information systems.

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, to comply with legal and regulatory obligations, or as otherwise permitted or required by applicable law.

4. Disclosure and Sharing of Information with Third Parties

We may disclose or provide access to personal information to third parties in the following circumstances:

* To service providers who assist us in operating the Website or providing related services, such as hosting, website maintenance, analytics, communications, and mailing services

* Where disclosure is required by applicable law, regulation, legal process, or court order

* Where reasonably necessary to protect the rights, property, safety, or legal interests of the Company, Website users, or others

* In connection with a merger, acquisition, reorganization, sale of assets, or other corporate transaction involving the Company

Where appropriate, we require third-party service providers that process information on our behalf to comply with applicable privacy and information security requirements.

5. Transfer of Information Outside Israel

Personal information may be transferred to, processed, or stored on servers located outside the State of Israel, including in jurisdictions that may provide a different level of data protection than Israeli law.

Where required by applicable law, we will take appropriate measures to ensure that any transfer of personal information outside Israel is carried out in accordance with the applicable legal requirements.

6. Your Rights

Subject to the provisions and limitations of applicable law, you may have rights regarding personal information held about you.

Under the Israeli Privacy Protection Law, an individual may have the right to inspect information concerning them that is held in a database and, where applicable, request that inaccurate, incomplete, unclear, or outdated information be corrected or deleted.

Depending on the circumstances and applicable law, you may also have rights concerning:

* Withdrawal of consent, where processing is based on consent

* Deletion of personal information, where applicable

* Restriction of certain processing activities

* Data portability, where applicable

* Objection to certain processing activities, where applicable

Requests concerning your personal information or the exercise of applicable rights may be submitted by email to: tzahi.s@gamida.co.il

We may request reasonable information necessary to verify the identity of the requester and to process the request in accordance with applicable law.

7. Children and Minors

The Website is intended for individuals aged 18 and over.

We do not knowingly collect personal information from children or minors through the Website. If we become aware that personal information has been collected from a minor without the required consent of a parent or legal guardian, we will take reasonable steps to delete such information, subject to applicable law.

8. Information Security

We implement technical and organizational measures designed to protect personal information, including, as appropriate:

* Encryption of sensitive information

* Role-based and permission-based access controls

* Ongoing monitoring and security reviews

* Employee awareness and training regarding information security

* Regular backups

* Measures designed to detect and prevent unauthorized access and misuse

No method of transmission or storage can be guaranteed to be completely secure. Accordingly, while we take reasonable measures to protect personal information, we cannot guarantee absolute security.

9. Changes to This Privacy Policy

We may update or modify this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or services.

Any material changes will be published on the Website, together with the updated “Last Updated” date appearing at the beginning of this Privacy Policy.

Your continued use of the Website following the publication of an updated Privacy Policy will be subject to the updated policy, to the extent permitted by applicable law.

10. Contact Us

If you have questions, requests, or concerns regarding this Privacy Policy or the processing of your personal information, please contact us:

Gamida Ltd.

Data Protection Officer: Tzahi Segev

Email: tzahi.s@gamida.co.il

Telephone: +972-3-9277222

Address: 32 Shaham St., Petah Tikva, Israel

Document Creation Date: December 17, 2025