Sofgen Pharma | Privacy Statement

Sofgen Pharma S.A., together with all of its affiliates and subsidiaries (hereinafter, “Sofgen” or “we/us”), uses this Privacy Notice to inform you how we obtain, manage, and use the information of individuals who visit the website from which this document has been published or linked (the “Site”), as well as of those who interact with Sofgen through other digital or in-person channels associated with it. By browsing or interacting with this Site, you agree that Sofgen may process your personal information in accordance with this Privacy Notice, which may be reviewed and updated from time to time.

This document describes the type of information we collect about you through the Site and other related points of contact, the purposes for which we use it, the measures we implement to protect it, and the options and choices available to you with respect to its processing. Please note that the Site may include links to third-party websites, content, or services that are not managed or controlled by Sofgen. Sofgen assumes no responsibility whatsoever for the operation of such sites or for the use they make of your personal information; therefore, we recommend that you carefully review the privacy policies and terms and conditions applicable to each of them before sharing your Personal Data.

Likewise, because Sofgen has a presence in different countries through its affiliates and subsidiaries, at the end of this document you may find the specific policies, terms, or notices applicable to the collection and use of Personal Data in the relevant jurisdictions, as applicable.

1. Who are we?

Sofgen Pharma S.A. is a parent company headquartered in Luxembourg, with affiliates and subsidiaries located mainly in Latin America and the United States of America. This website is administered and controlled, from a technological standpoint, by its indirect subsidiary headquartered in Colombia, Procaps S.A., which provides technology support and operational services to the parent company, its affiliates and/or subsidiaries. In this context, Sofgen and its related entities process personal information of the third parties with whom they interact, including visitors to this Site, users of its services, healthcare professionals, suppliers, customers, business partners, candidates for job vacancies, patients or their representatives, and other stakeholders, in accordance with the regulations applicable to the company collecting the data, its internal Personal Data protection policies, and the provisions of this Privacy Notice.

2. What is the scope of this Privacy Notice?

This Notice applies to the personal information that Sofgen collects through:

The central corporate website and its country- or business-line microsites.
Online forms, applications, and other digital solutions that link to this Notice.
Offline interactions, such as events, programs, visits, service channels, and direct communications, provided that explicit reference is made to this Notice.

3. How may we collect your Personal Data?

For purposes of this Notice, “Personal Data” means any information relating to you that allows you to be identified directly or indirectly, such as your name, contact details, location information, professional information, or any other data that, alone or in combination with other data, makes it possible to recognize you as an individual.

We may collect your Personal Data, among other cases, when:

You browse our website or any of its microsites.
You create a profile or register on any associated platform, portal, or application.
You sign up for newsletters, events, webinars, programs, or initiatives promoted by Sofgen or its affiliates and subsidiaries.
You download content, complete contact forms, or register your information through any link, button, or section that announces the collection of Personal Data.
You submit pharmacovigilance, technovigilance, or safety reports related to our products, using the forms, links, or channels provided for that purpose.

We also obtain Personal Data when you interact with Sofgen through:

Support programs, information services, or customer care channels.
In-person or virtual events, congresses, fairs, and promotional activities.
Commercial, contractual, or professional relationships.
Recruitment and talent management processes.

Each form, platform, application, or medium through which the provision of Personal Data is requested will include a more detailed explanation of the use that will be made of the information, the specific purpose of the processing, the regulations applicable to the company collecting the data, as well as the corresponding authorization or consent language and instructions on how to exercise your rights in connection with the protection of Personal Data.

4. What do we use your Personal Data for?

4.1. Management of inquiries, requests, and communications.

To answer your questions, process your requests, follow up on your requirements, and maintain communications related to Sofgen’s products, services, and activities.

4.2. Management of relationships with patients, users, customers, healthcare professionals, suppliers, and partners.

To manage the relationship that Sofgen maintains with you or with the organization to which you belong, including the management of contracts, services, orders, billing, support, and follow-up.

4.3. Provision of Sofgen services, programs, and activities.

To manage participation in programs, studies, medical education initiatives, scientific information activities, support programs, digital platforms, and other services offered by Sofgen.

4.4. Personalization of content and digital experience.

To adapt website content and communications based on your preferences, interaction history, or interest segment, including reminder features, suggested content, and personalized experiences.

4.5. Analytics, statistics, and continuous improvement of our services.

To analyze the use of our sites and channels, prepare metrics and reports, and improve our products, services, internal processes, security, and user experience.

4.6. Compliance with legal, regulatory, and reporting obligations.

To address regulatory requirements, audits, stakeholder security processes, quality, information integrity, and other duties that require the collection or retention of certain data, as well as to prevent, detect, and investigate possible unlawful activities or contractual breaches.

5. What are Cookies and how do we use your Personal Data for marketing purposes?

“Cookies” are small text files that are stored on your device (such as your computer, tablet, or mobile phone) when you visit a website. These files allow the site to remember certain information about your visit, such as your preferences, settings, or actions taken, and help make the browsing experience more efficient and personalized.

Our websites and other online resources may also collect certain basic information about you which, although it does not directly identify you, may be associated with you or with a specific device. Part of this information is used to enable the proper functioning of the Site and associated features, as well as to better understand how our sites and digital resources are used and, in general, to administer, maintain, and improve them.

Likewise, we use this type of information to offer content and communications aligned with your interests and preferences, taking into account the way in which you browse and interact with the Site and with the different sections and resources that Sofgen makes available to you. Under no circumstances will information collected through cookies or generated by your browsing on the Site be used for individualized commercial marketing purposes. Only the Personal Data that you expressly provide to us through newsletter forms, subscriptions, registrations, or other similar mechanisms available on the Site will be used for marketing purposes, and you will be clearly informed of the corresponding commercial purpose.

6. With whom may we share your Personal Data?

We may share your Personal Data with the affiliates and subsidiaries of Sofgen Pharma S.A., located in different countries. These entities will use your information for the same purposes described in this Privacy Notice and in accordance with the internal data protection policies applicable within the Organization. Information about Sofgen’s main related entities may be consulted through the corporate channels indicated on this Site or in the documentation that Sofgen makes available to the public.

We may also share your Personal Data with third parties, such as service providers and other partners acting on behalf of Sofgen, its affiliates and/or subsidiaries, or in coordination with them, for the following purposes:

To support the execution of Sofgen’s business operations and transactions and those of its affiliates or subsidiaries.
To perform the technical maintenance, administration, and improvement of our websites, microsites, platforms, and other digital resources.
To facilitate, in the event of a merger, acquisition, corporate reorganization, transfer of control, or similar transaction, where another company within the organization assumes ownership or control of the website and/or domain, the transfer of Personal Data to that company in order to ensure continuity of service.
To respond to legitimate requests from governmental or regulatory authorities, as well as to comply with obligations arising from applicable regulations, court decisions, or orders issued by competent authorities.
Where necessary for the performance of corporate audits, risk management, or to investigate and respond appropriately to complaints, security incidents, or potential breaches of our policies or of the integrity of our systems.

7. Under what conditions do we carry out international transfers of Personal Data?

Sofgen is a global Organization with affiliates and subsidiaries in different countries that directly operate databases in furtherance of their corporate purpose. This Site is controlled and operated, from a technological standpoint, by Procaps S.A. from Colombia and, with respect to its administration and the processing of the Personal Data collected through it, Colombian regulations on Personal Data protection have been taken as a reference framework, without prejudice to mandatory provisions that may apply in other jurisdictions.

Accordingly, the personal information that you provide to us through this Site or through channels linked to it may be stored, processed, transferred, or accessed from outside your country of residence, including, among others, Colombia, Luxembourg, the United States of America, Latin American countries, and other jurisdictions in which Sofgen has a presence through an entity. Some of the countries to which your information may be transferred may apply privacy and data protection obligations that are different from, and even less stringent than, those in force in your country of origin. However, Sofgen will process your Personal Data in accordance with this Privacy Notice and the internal protection measures adopted by the Organization, regardless of the place from which it is stored, accessed, or processed, and will seek to ensure that any transfer is carried out in compliance with applicable Colombian regulations and the contractual commitments assumed with its providers and related entities.

8. How long do we retain your Personal Data?

We retain personal information for the time necessary to fulfill the purposes for which it was collected, and for such additional periods as may be reasonably necessary to address contractual, operational, security, or risk management requirements.

In certain cases, we may retain the data for additional periods in order to:

Comply with legal or regulatory obligations.
Address possible subsequent claims or inquiries.
Maintain records required for quality, security, or audit purposes.

Once the applicable purposes and retention periods have been fulfilled, Sofgen may delete, anonymize, or apply other measures to ensure that the information no longer allows individuals to be identified, in accordance with its internal information life cycle management policies.

9. How do we protect your Personal Data?

Sofgen implements reasonable organizational, technical, and administrative measures to protect personal information against unauthorized access, loss, misuse, alteration, or unauthorized disclosure.

Our security practices seek to incorporate periodic risk assessments, access controls, acceptable use policies, personnel training, and ongoing reviews of the systems and processes involved in data processing.

Although we work to protect your data, no transmission or storage system is completely secure. Therefore, we cannot guarantee absolute security, but we do undertake to respond to and manage any incidents that may arise.

10. What rights may you exercise in relation to your Personal Data?

Depending on the applicable regulations in your country or region, you may have, among others, the following rights in relation to your Personal Data:

To request confirmation as to whether Sofgen processes your Personal Data and, if so, to access such information.
To request that your data be corrected or updated where it is inaccurate, incomplete, or no longer current.
To request, in certain cases, the deletion of your Personal Data when it is no longer necessary for the purposes for which it was collected, or when you consider that it is not being processed in accordance with this Privacy Notice.
To request the restriction of the processing of your Personal Data to certain purposes, when immediate deletion is not possible for legal, operational, or security reasons.
To object to certain processing activities, particularly those related to commercial or marketing communications.

You may manage your communication preferences or unsubscribe from our mailing lists by using the opt-out mechanisms included in each message or by contacting us through the channels indicated in this Notice.

Please note that deletion or restriction of processing will only be possible where there is no legal or contractual obligation requiring the retention of your data for an additional period. Where processing is based on your consent, you have the right to withdraw it at any time; however, this will not affect the lawfulness of processing carried out prior to such withdrawal on the basis of that consent. In some cases, Sofgen may retain certain minimum information necessary to keep a record of your request, prevent future unwanted processing, or comply with filing and recordkeeping obligations.

To exercise your rights or submit inquiries or claims related to the processing of your personal information, you may write to the following email address: habeasdata@procaps.com.co.

11. Do we collect Personal Data from minors?

Our sites and services are not designed for or directed at minors and, accordingly, Sofgen does not seek to intentionally collect Personal Data belonging to this group. We do not promote the registration or direct participation of minors through the channels described in this Notice, and any interaction must, in principle, be carried out by adults or through their representatives.

Where, exceptionally, it becomes necessary to process Personal Data of minors — for example, within the framework of specific programs, safety reports related to products, or medical and scientific interactions — Sofgen will seek to ensure that such processing is carried out in accordance with the requirements applicable in each jurisdiction. This includes, where applicable, obtaining valid consent from parents or legal guardians, as well as applying enhanced confidentiality, security, and purpose-limitation criteria.

We invite parents and guardians to supervise minors’ use of Sofgen’s sites and services and to contact us if they believe that we have obtained personal information from a minor under conditions that are not appropriate or not contemplated in this Notice. If Sofgen becomes aware that it has collected Personal Data from a minor without having complied with the corresponding requirements, it will adopt reasonable measures to review the case and, where appropriate, delete such information or adjust its processing.

12. How will we inform you about updates to this Privacy Notice?

We may update this Notice to reflect changes in our data processing practices, our services, or our operating models. When we make material changes, we may communicate them through prominent notices on our website, by updating the “last updated” date, or by using other appropriate channels.

We invite you to review this Notice periodically to stay informed.

Last updated: June 15th 2026

13. How can you contact us?

If you have questions, comments, or concerns about this Notice or about the processing of your Personal Data by Sofgen, you may contact our legal compliance team using the contact channels indicated on the microsite corresponding to your country or region or, generally, through the email address habeasdata@procaps.com.co.

You may also appear in person at the following address:
Calle 80 No. 78B – 201.
Barranquilla, Colombia.
Postal code 080001.

14. Does Sofgen have country-specific notices or policies?

In addition to this general Privacy Notice, the affiliates and subsidiaries of Sofgen Pharma S.A. that are required to do so have specific notices, policies, or documents in each country where they operate, which incorporate local legal requirements and further develop the procedures, purposes, and rights applicable in each jurisdiction.

Below is a list of the countries in which Sofgen has a presence and for which there is a policy, notice, or additional document that complements the provisions of this Global Privacy Notice: