Skip to main content

Smarter Bioprocessing Starts Here: Explore the Cytiva x Culture Global Collaboration

nav_banner-logos
Login
Contact

Privacy Policy

Culture Biosciences, Inc.

Privacy Policy

Last Updated: April, 08. 2026

1. Introduction

Culture Biosciences, Inc. ("Culture Biosciences," "we," "us," or "our") is a cloud-enabled bioprocessing platform. We provide bioprocessing services through our Nexxys services offering, Stratyx hardware, and Console software-as-a-service platform (collectively, the "Services"), as well as our website at www.culturebiosciences.com (the "Site").

This Privacy Policy describes how we collect, use, disclose, and protect personal data when you visit our Site, use our Services, or otherwise interact with us. It also explains your rights regarding your personal data.

By accessing or using our Site or Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our Site or Services.

2. Scope

This Privacy Policy applies to personal data collected through:

  • Our website at www.culturebiosciences.com
  • The Console platform (our SaaS application)
  • Nexxys bioprocessing services
  • Stratyx hardware and related interactions
  • Email and other communications with us
  • Account Information: When you create a Console account, we collect your full name and email address.
  • Inquiry Information: When you contact us or request information, we collect your name, email address, company name, and any other details you choose to provide.
  • Service Data: When you use our Services, we may collect experiment design data and related technical information necessary to deliver our bioprocessing services.
  • Communications: When you correspond with us via email or other channels, we retain the content of those communications.
  • Log Data: IP address, browser type and version, device identifiers and characteristics, operating system, language preferences, and referring URLs.
  • Usage Data: Pages visited, features accessed, time spent on pages, clickstream data, and interaction patterns within the Console platform.
  • Approximate Location: We derive your approximate geographic location from your IP address.
  • Contract Performance: To create and manage your Console account, deliver our Services, and fulfill our contractual obligations to you.
  • Legitimate Interests: To operate, maintain, and improve our Site and Services; to analyze usage trends; to ensure security and prevent fraud; and to send you relevant marketing communications (where we have an existing relationship with you).
  • Consent: Where required by applicable law, to send marketing communications, place non-essential cookies, or process data for purposes beyond those described above.
  • Legal Obligation: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
  • Operating, maintaining, and improving our Site and Services
  • Creating and managing user accounts on the Console platform
  • Delivering bioprocessing services through Nexxys and Stratyx
  • Responding to inquiries, comments, and support requests
  • Sending administrative communications (e.g., service updates, security alerts)
  • Sending marketing communications (with your consent or where permitted by law)
  • Analyzing usage trends to improve user experience and develop new features
  • Ensuring the security and integrity of our Site and Services
  • Complying with legal obligations and enforcing our legal rights
  • Conducting audits, fraud monitoring, and prevention activities
  • Service Providers: We share information with third-party vendors who perform services on our behalf, such as website hosting, data analytics, email delivery, customer support, and cloud infrastructure. These providers are contractually required to use your data only to perform services for us and in accordance with this Privacy Policy.
  • Business Transfers: In connection with, or during negotiations of, any merger, acquisition, sale of assets, financing, or transfer of all or a portion of our business, your personal data may be disclosed or transferred to the acquiring entity.
  • Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
  • Protection of Rights: We may disclose information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, threats to safety, or as evidence in litigation.
  • Aggregated or De-identified Data: We may share aggregated or de-identified information that cannot reasonably be used to identify you for any purpose.
  • Account Data: Retained for the duration of your active account and for a reasonable period following account closure or termination of services.
  • Service and Experiment Data: Retained for the duration of the customer relationship and for a reasonable period following the end of the engagement, unless a longer period is required for regulatory, scientific, or contractual purposes.
  • Marketing Data: Retained until you unsubscribe or withdraw consent, plus a brief suppression period to honor your opt-out preference.
  • Log and Usage Data: Retained for a reasonable period for security, analytics, and operational purposes.
  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request that we correct inaccurate or incomplete personal data.
  • Deletion: Request that we delete or irreversibly anonymize your personal data, subject to certain legal and contractual exceptions.
  • Restriction: Request that we restrict processing of your personal data in certain circumstances.
  • Data Portability: Request a copy of your personal data in a structured, commonly used, machine-readable format.
  • Objection: Object to processing of your personal data based on our legitimate interests.
  • Withdraw Consent: Where we rely on your consent for processing, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

This Privacy Policy does not apply to third-party websites, services, or applications that may link to or integrate with our Site or Services, even if accessible through them.

3. Data Controller

Culture Biosciences, Inc. is the data controller for the personal data described in this Privacy Policy. If you have questions about how we process your data, you may contact us at:

Culture Biosciences, Inc.

233 E. Grand Avenue

South San Francisco, California 94080

Email: privacy@culturebiosciences.com

4. Information We Collect

4.1 Information You Provide to Us

We collect information that you voluntarily provide when you interact with us, including:

4.2 Information Collected Automatically

When you access our Site or use the Console platform, we automatically collect certain information, including:

4.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies to collect information about your browsing activity. We use Cookiebot as our consent management platform, which allows you to manage your cookie preferences. You can modify your cookie settings at any time through the Cookiebot consent banner on our Site.

For more information about the specific cookies we use and their purposes, please refer to the cookie declaration available through our Cookiebot integration on the Site.

4.4 Information We Do Not Collect

We do not collect sensitive personal data such as health or medical information, biometric data, financial or payment card information, dates of birth, phone numbers, or physical addresses of individual users.

5. How We Use Your Information

5.1 Lawful Bases for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), we process your personal data only when we have a valid lawful basis. The table below summarizes our processing activities and their corresponding lawful bases:

5.2 Purposes of Processing

We use the information we collect for the following purposes:

6. How We Share Your Information

We do not sell your personal data. We do not share personal data for cross-context behavioral advertising. We may disclose your information in the following circumstances:

7. International Data Transfers

Culture Biosciences is based in the United States. If you are accessing our Site or Services from outside the United States, please be aware that your personal data will be transferred to, stored, and processed in the United States.

For transfers of personal data from the EEA, UK, or Switzerland to the United States, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission as our primary transfer mechanism. We implement appropriate supplementary measures where necessary to ensure that your personal data receives an adequate level of protection.

If you have questions about our international data transfer practices or would like to obtain a copy of the applicable SCCs, please contact us at privacy@culturebiosciences.com.

8. Data Retention and Anonymization

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, and applicable legal requirements.

As a general guide:

8.1 Anonymization

When personal data is no longer required for its original purpose, our default practice is to anonymize the data rather than delete it. Anonymization involves irreversibly removing or transforming all personally identifiable elements so that the data can no longer be linked to an individual, either directly or indirectly. Once data has been properly anonymized, it is no longer considered personal data under applicable privacy laws (including the GDPR) and may be retained indefinitely.

We use anonymized data to support ongoing service improvement, product development, aggregate analytics, bioprocessing research, and benchmarking. In cases where anonymization is not feasible or appropriate, we will securely delete the data in accordance with our internal data management policies.

You may request deletion of your personal data at any time by contacting us at privacy@culturebiosciences.com. Where deletion is requested and no legal or contractual obligation requires further retention, we will either delete or irreversibly anonymize the data within a reasonable timeframe.

9. Data Security

We implement appropriate technical and organizational measures designed to protect the security, confidentiality, and integrity of your personal data. These measures include access controls, encryption, network security monitoring, and regular security assessments. We maintain industry-standard security certifications and undergo periodic independent audits of our security practices.

While we strive to protect your personal data, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security, and we encourage you to take steps to protect your own information, such as using strong passwords and keeping your login credentials confidential.

10. Your Rights and Choices

10.1 General Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

To exercise any of these rights, please contact us at privacy@culturebiosciences.com. We will respond to your request within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before fulfilling your request.

10.2 Rights for EEA/UK Residents

If you are located in the EEA or UK, you have the rights described in Section 10.1 under the General Data Protection Regulation (GDPR) and the UK GDPR. You also have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.

10.3 Marketing Communications

You may opt out of marketing emails at any time by clicking the "unsubscribe" link in any marketing email we send. Please note that even after you opt out of marketing communications, we may still send you transactional or administrative messages related to your account or our Services.

11. Third-Party Links and Services

Our Site and Services may contain links to third-party websites or services that are not operated by us. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the privacy practices of third parties.

12. Children's Privacy

Our Site and Services are not directed to individuals under the age of 16 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal data from children. If we learn that we have collected personal data from a child, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at privacy@culturebiosciences.com.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where required by law, by providing additional notice (such as an email notification or a prominent notice on our Site). We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Culture Biosciences, Inc.

233 E. Grand Avenue

South San Francisco, California 94080

Email: privacy@culturebiosciences.com

For privacy-related requests, we aim to respond within 30 days of receiving your inquiry.