Privacy and your personal information
Last updated: February 16, 2026
Privacy Policy
1. Introduction
This Privacy Policy describes our practices regarding the collection, use, and disclosure of personal information from the public, from third parties we may do business with, or from job applicants over the preceding 12 months and the rights available to California residents. Information regarding the categories of personal information we collect is also disclosed in our Notice at Collection.
2. Categories of Personal Information We May Collect & Retention Periods
We may collect the following categories of information for the business purposes described below. We retain personal information based on the category of data and the purpose for which it was collected, consistent with legal and business requirements. We do not retain personal information longer than is reasonably necessary for these purposes.
| Category of Personal Information | Purpose of Collection and Use | Retention Period |
|---|---|---|
| Identifiers (e.g., Name, email, business contact details, IP address) | To communicate with you and manage recruitment and hiring. | Duration of the relationship plus 7 years. |
| Professional or Employment Information (e.g., resumes, job titles, education, qualifications) | To evaluate candidates for employment and manage employee records. | Hired: Duration of employment + 7 years. Not Hired: Up to 3 years. |
| Network Activity (e.g., system/facility access logs) | To manage facility attendance and safety. | 12-24 months, unless involved in an active security investigation or legal hold. |
| Sensitive Personal Information (e.g., Government IDs) | To verify identity for employment and secure facility access. | Minimum period required by tax and labor laws (typically up to 7 years). |
3. Sources of Personal Information
We may collect personal information from the following categories of sources:
- Directly from you (e.g., employment applications or as part of establishing employment or services/employment agreement)
- Third Parties (e.g., from service providers acting on our behalf (e.g., background check providers)).
We do not sell personal information or share it for cross‑context behavioral advertising.
4. Categories of Third Parties to Whom We Disclosed Information
In the preceding 12 months, we have not disclosed any category of personal information to any category of third party. We do not sell or share any information for monetary gain or for cross-context behavioral advertising. No such sale or sharing has occurred in the preceding 12 months.
5. Your California Privacy Rights
If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:
- The right to know what personal information we have collected about you, including access to personal information collected since January 1, 2022
- The right to request deletion of personal information, subject to legal exceptions
- The right to request correction of inaccurate personal information
- The right to opt out of the sale or sharing of personal information (not applicable, as we do not sell or share personal information for cross-context behavioral advertising)
- The right to limit the use of Sensitive Personal Information, where applicable
- The right not to be discriminated against for exercising your privacy rights
Opt-Out Preference Signals: We support the Global Privacy Control (GPC), which is a browser-based signal that allows you to communicate your privacy preferences to websites. When we receive an opt-out request - including a Global Privacy Control signal - we will process it and display confirmation (e.g., 'Opt-out Request Honored' ) in your privacy settings or on our site. As we do not sell or share personal information for cross-context behavioral advertising, your use of the GPC signal will not change the functionality of our site, but we will honor it as a valid request to opt-out of any future sharing activities.
6. How to Exercise Your Rights
Individuals may submit requests regarding their personal information using one of the methods described below. We will process such requests in accordance with applicable law and our verification requirements.
Where to Submit Requests: To exercise your privacy rights, please contact us at:
- Telephone : Toll Free: 1-888-336-1987
- Email : privacy@drenbio.com
- Postal Mail : Dren Bio Management, Inc., 835 Industrial Rd., Suite 400, San Carlos, CA 94070, Attention: Privacy Officer.
Verification of Requests : To protect your data, we will verify your identity before fulfilling any request to know, delete, or correct.
- Verification Process: We will match the identifying information you provide in your request against the information we already maintain in our records. For most requests, this involves confirming two or three data points (such as your email address and a recent interaction date).
- Sensitive Requests: For requests seeking specific pieces of information or involving sensitive data, we may require a higher degree of verification, which may include a signed declaration under penalty of perjury.
- Inability to Verify: If we cannot verify your identity to a degree of certainty required by law, we will notify you and explain why we are unable to fulfill the request. We will only use personal information provided in a request for the purpose of verification."
Response Timelines:
- Acknowledgment: We will confirm receipt of your request within 10 business days. This acknowledgment will include information about our verification process and the expected timeframe for our response.
- Substantive Response: We aim to respond to a verifiable request within 45 calendar days of receipt.
- Extensions: If we require more time (up to an additional 45 days), we will notify you in writing of the reason and the extension period within the initial 45-day window.
Records: We maintain records of consumer privacy requests and our responses for at least 24 months, as required by applicable California law.
7. Security Measures
We implement administrative, technical, and physical safeguards designed to protect personal information from unauthorized access or disclosure. This includes encrypted storage for sensitive identifiers, restricted access to facility logs, and regular security training for personnel. While we maintain a robust written information security program, no system can be guaranteed 100% secure.
8. Minors’ Privacy
We do not knowingly collect personal information from individuals under 18. If we become aware of such data collection, we will promptly delete it. Parents or guardians can contact us if they believe a minor has provided information without consent.
9. International Users
If you access our website or provide information from outside the United States, your personal information may be transferred to and processed in the United States or other jurisdictions. Where required by applicable law, we rely on appropriate safeguards for such transfers, such as standard contractual clauses or other lawful transfer mechanisms.
10. Jurisdiction and Audience
This website and its services are intended for audiences located within the United States. All data collection and processing activities will comply with U.S. federal and California state laws. Users accessing this website from other jurisdictions do so at their own initiative and must comply with local laws.
11. Accessibility and Language Availability
This Privacy Policy is designed to be accessible to individuals with disabilities and is available in alternative formats upon request. We make this policy available in languages in which we ordinarily provide information to California consumers.
12. Changes to Our Privacy Policy
We review and update this Privacy Policy at least once every 12 months. Any changes will be posted here with an updated 'Last Updated' date. Material changes will be highlighted via a notice on our homepage or direct communication where appropriate.
13. Contact Us
or questions or comments about this Privacy Policy, please contact us at:
- Telephone: Toll Free: 1-888-336-1987
- Email: privacy@drenbio.com
- Postal Mail: Dren Bio Management, Inc., 835 Industrial Rd., Suite 400, San Carlos, CA 94070, Attention: Privacy Officer.
Notice At Collection
1. Scope
This notice describes the personal information we collect from visitors to our website, third parties we do business with, and job applicants. For our comprehensive data practices and information about disclosures made in the preceding 12 months, please read our Privacy Policy .
2. Categories of Personal Information We Collect (or May Collect) & Retention Periods
We collect the following categories of information for the business purposes described below. We do not retain personal information longer than is reasonably necessary for these purposes.
| Category of Personal Information | Purpose of Collection and Use | Retention Period |
|---|---|---|
| Identifiers (e.g., Name, email, business contact details, IP address) | To communicate with you and manage recruitment and hiring. | Duration of the relationship plus 7 years. |
| Professional or Employment Information (e.g., resumes, job titles, education, qualifications) | To evaluate candidates and third parties for employment and contracting, respectively. | Hired: Duration of employment + 7 years. Not Hired: Up to 3 years. |
| Network Activity (e.g., system/facility access logs) | To manage facility attendance and safety. | 12-24 months, unless involved in an active security investigation or legal hold. |
| Sensitive Personal Information (e.g., Government IDs) | To verify identity for employment and secure facility access. | Minimum period required by tax and labor laws (typically up to 7 years). |
3. No Sale or Sharing of Information
In the preceding 12 months, we have not sold personal information for monetary or other valuable consideration and have not shared personal information for cross-context behavioral advertising.
Our website recognizes and honors Global Privacy Control (GPC) signals. Because we do not sell or share your personal information, our processing of your data does not change when a GPC signal is detected.
4. Limited Use of Sensitive Personal Information
We collect Sensitive Personal Information (such as government identifiers and account credentials) solely for limited business purposes permitted under the CCPA/CPRA, including employment administration, security, and legal compliance. We do not use or disclose this information for purposes that would trigger the "Right to Limit."
5. Your Rights
To exercise your California privacy rights (Right to Know, Delete, or Correct), please visit the background "Your California Privacy Rights" section of our Privacy Policy or contact us at:
- Email: privacy@drenbio.com
- Toll Free: 1-888-336-1987