Privacy Statement

Sofgen Pharma, S.A., together with all of its affiliates and subsidiaries (hereinafter, “Sofgen” or “we”), uses this Privacy Notice to explain how we collect, manage, and use the personal information of individuals who visit the website on which this document is published or linked (the “Site”), as well as those who interact with Sofgen through other related digital or in-person channels. By browsing or interacting with this Site, you agree that Sofgen may process your personal information in accordance with the terms described in this Privacy Notice, which may be reviewed and updated from time to time.

This document explains what types of information we collect about you through the Site and other related points of contact, the purposes for which we use such information, the measures we implement to protect it, and the options and decisions available to you regarding its processing. Please note that the Site may include links to third-party websites, content, or services that are not operated or controlled by Sofgen. Sofgen assumes no responsibility for the operation of such sites or for how they use your personal information. Accordingly, we recommend that you carefully review the privacy policies and terms and conditions applicable to those third-party sites before providing them with your data.

Additionally, because Sofgen operates in multiple countries through its affiliates and subsidiaries, this document includes references at the end to country-specific policies, terms, or notices applicable to the collection and use of personal data in the relevant jurisdictions.

Sofgen Pharma, S.A. is a parent company headquartered in Luxembourg and leads a corporate group with affiliates and subsidiaries primarily located in the United States, Latin America, and Central America. This Site is technologically administered and controlled by its indirect branch based in Colombia, Procaps S.A., which provides technological support and operational services to the Group.
In this context, Sofgen and its related entities process the personal information of individuals with whom they interact, including visitors to this Site, users of their services, healthcare professionals, suppliers, business partners, job applicants, patients or their representatives, and other stakeholders, in accordance with the regulations applicable to the entity collecting the data, its internal data protection policies, and the provisions of this Privacy Notice.

This Notice applies to personal information collected by Sofgen through:

• The central corporate website and its country-specific or business-line microsites.
• Online forms, applications, and other digital solutions that link to this Notice.
• ​Offline interactions, such as events, programs, visits, service channels, and direct communications, provided that this Notice is expressly referenced.

For purposes of this Notice, “Personal Data” means any information relating to you that allows you to be identified, directly or indirectly, such as your name, contact details, location information, professional information, or any other data that, alone or in combination, makes it possible to identify you as an individual.

We may collect Personal Data, among other situations, when you:

• Browse our Site or any of its microsites.
• Create a profile or register on a related platform, portal, or application.
• Subscribe to newsletters, events, webinars, programs, or initiatives promoted by Sofgen or its affiliates and subsidiaries.
• Download content, complete contact forms, or provide information through any link, button, or section that indicates the collection of personal data.
• Submit pharmacovigilance, technovigilance, or product-safety reports related to Group products through the designated forms, links, or channels.

We also collect Personal Data when you interact with Sofgen through:

• Support programs, information services, or customer service channels.
• In-person or virtual events, congresses, trade shows, and promotional activities.
• Commercial, contractual, or professional relationships.
• ​Talent acquisition and human resources processes.

Each form, platform, application, or channel through which Personal Data is requested will include more detailed information regarding how the data will be used, the specific purpose of processing, the applicable regulations governing the collecting entity, any required authorization or consent language, and instructions on how to exercise your data protection rights.

To respond to your inquiries, process your requests, follow up on your submissions, and maintain communications related to Sofgen’s products, services, and activities.

To manage Sofgen’s relationship with you or with the organization you represent, including contracts, services, orders, billing, support, and follow-up activities involving patients, users, customers, healthcare professionals, suppliers, and business partners.

To manage participation in programs, studies, medical education initiatives, scientific information activities, support programs, digital platforms, and other services offered by Sofgen.

To tailor website content and communications based on your preferences, interaction history, or area of interest, including reminders, suggested content, and personalized experiences.

To analyze the use of our sites and channels, generate metrics and reports, and improve our products, services, internal processes, security, and user experience.

To comply with regulatory requirements, audits, patient safety processes, quality standards, data integrity obligations, and other legal duties, as well as to prevent, detect, and investigate potential unlawful activities or contractual breaches.

“Cookies” are small text files stored on your device (such as your computer, tablet, or mobile phone) when you visit a website. They allow the site to remember information about your visit—such as preferences, settings, or actions—and help make your browsing experience more efficient and personalized.

Our websites and online resources may also collect basic information that does not directly identify you but may be associated with you or with a specific device. This information is used to ensure proper site functionality, understand how our digital resources are used, and manage, maintain, and improve them.

We also use this information to deliver content and communications aligned with your interests and preferences, based on how you navigate and interact with the Site and Sofgen’s resources. Information collected through cookies or generated by your browsing activity is not used for individualized commercial marketing purposes. Only personal data that you expressly provide through newsletter sign-ups, subscriptions, registrations, or similar mechanisms will be used for marketing purposes, and you will be clearly informed of the applicable commercial purpose.

We may share your personal data with Sofgen Pharma, S.A.’s affiliates and subsidiaries located in different countries. These entities will use your information for the same purposes described in this Privacy Notice and in accordance with the Group’s internal data protection policies.

We may also share your personal data with third parties, such as service providers and business partners acting on Sofgen’s behalf or in coordination with Sofgen, for purposes including:

• Supporting Sofgen’s and its affiliates’ business operations and transactions.
• Providing technical maintenance, administration, and improvement of websites, platforms, and digital resources.
• Facilitating mergers, acquisitions, corporate reorganizations, transfers of control, or other corporate or financial transactions.
• Complying with lawful requests from governmental or regulatory authorities and applicable legal obligations.
• Conducting corporate audits, risk management activities, and investigations related to complaints, security incidents, or potential policy or system integrity violations.

Sofgen is a global corporate group with affiliates, subsidiaries, and databases in multiple countries, each operated by the respective local entities. This Site is technologically operated by Procaps S.A. from Colombia and has been designed with Colombian data protection regulations as a reference framework, without prejudice to mandatory provisions applicable in other jurisdictions.

Accordingly, personal information you provide through this Site or related channels may be stored, processed, transferred, or accessed outside your country of residence, including Colombia, Luxembourg, the United States, Latin American and Central American countries, and other jurisdictions where Sofgen operates. Some of these countries may have data protection standards that differ from, or are less stringent than, those of your home country. Nevertheless, Sofgen will process your personal data in accordance with this Privacy Notice and the Group’s internal safeguards, regardless of where the data is stored or processed, and will endeavor to ensure that transfers comply with applicable Colombian law and contractual commitments.

We retain personal information for as long as necessary to fulfill the purposes for which it was collected and for any additional period reasonably required to meet contractual, operational, security, or risk-management needs.

In certain cases, data may be retained longer in order to:

• Comply with legal or regulatory obligations.
• Address potential future claims or inquiries.
• Maintain records required for quality, security, or audit purposes.
• Once the applicable purposes and retention periods have been met, Sofgen may delete, anonymize, or otherwise process the information so that individuals can no longer be identified, in accordance with its internal data lifecycle management policies.

Sofgen implements reasonable organizational, technical, and administrative measures to protect personal information against unauthorized access, loss, misuse, alteration, or unauthorized disclosure.

Our security practices include periodic risk assessments, access controls, acceptable use policies, employee training, and ongoing reviews of systems and processes involved in data processing.

While we strive to protect your data, no transmission or storage system is completely secure. Accordingly, we cannot guarantee absolute security, but we are committed to responding to and managing any incidents that may occur.

Depending on the laws applicable in your country or region, you may have the following rights with respect to your personal data:

• To request confirmation as to whether Sofgen processes your personal data and, if so, to access that information.
• To request correction or updating of inaccurate, incomplete, or outdated data.
• To request deletion of your personal data in certain circumstances, when it is no longer necessary for the purposes for which it was collected or when you believe it is not being processed in accordance with this Privacy Notice.
• To request restriction of processing for specific purposes when immediate deletion is not possible for legal, operational, or security reasons.
• To object to certain processing activities, particularly those related to commercial or marketing communications.

You may manage your communication preferences or unsubscribe using the opt-out mechanisms included in each message or by contacting us through the channels identified in this Notice.

Please note that deletion or restriction may not be possible where legal or contractual obligations require data retention. Where processing is based on your consent, you may withdraw that consent at any time; however, such withdrawal will not affect the lawfulness of processing carried out prior to withdrawal. In some cases, Sofgen may retain minimal information necessary to document your request, prevent unwanted future processing, or comply with recordkeeping obligations.

To exercise your rights or submit inquiries or complaints regarding the processing of your personal data, please contact us at: habeasdata@procaps.com.co You may also lodge a complaint with the competent data protection authority in your country or region, in accordance with applicable procedures.

Our sites and services are not designed for or directed to minors, and Sofgen does not intentionally collect personal data from this group. We do not promote registration or direct participation by minors through the channels described in this Notice, and interactions should generally be carried out by adults or through their legal representatives.

Where, exceptionally, it is necessary to process personal data of minors—such as in specific programs, product safety reports, or medical and scientific interactions—Sofgen will ensure compliance with applicable legal requirements, including obtaining valid parental or guardian consent where required and applying enhanced confidentiality, security, and purpose-limitation measures.

Parents and guardians are encouraged to supervise minors’ use of Sofgen’s sites and services and to contact us if they believe we have collected a minor’s personal data inappropriately. If Sofgen becomes aware that it has collected such data without meeting applicable requirements, it will take reasonable steps to review the situation and, where appropriate, delete or adjust the processing of the information.

We may update this Notice to reflect changes in our data processing practices, services, or operational models. When significant changes are made, we may notify you through prominent notices on our website, by updating the “last updated” date, or through other appropriate channels.

We encourage you to review this Notice periodically.
Last updated: January 1, 2026.

If you have questions, comments, or concerns regarding this Notice or the processing of your personal data by Sofgen, you may contact our privacy team through the channels indicated on the country-specific microsite or generally via habeasdata@procaps.com.co.

You may also contact our Data Protection Officer through the following link:
https://sofgenpharma.com/contact-us, or visit us in person at:
Calle 80 No. 78B – 201
Barranquilla, Colombia
Postal Code 080001

In addition to this general Privacy Notice, Sofgen Pharma, S.A.’s affiliates and subsidiaries that are legally required to do so maintain country-specific notices, policies, or documents that incorporate local legal requirements and further detail applicable procedures, purposes, and rights.

Below is a list of the countries in which Sofgen operates and for which additional policies, notices, or documents complement this global Privacy Notice: