Privacy Policy.

Third Age Therapeutics Limited (“Third Age Therapeutics”, “we”, “our”, or “us”) operates this website:
www.thirdagetx.com

Data Controller (the legal entity responsible for your personal data):
Third Age Therapeutics Limited
Company number: 15914779
Registered office: 7 George Street, Shipley, England, BD18 3EZ

You can contact us about privacy matters at:
info@thirdagetx.com

We are committed to maintaining the trust and confidence of our visitors. We do not sell, rent, or trade email lists with other organisations for marketing purposes.

We are also committed to digital accessibility. We believe information about your privacy should be understandable to everyone, regardless of ability, familiarity with technology, or legal knowledge.

We have intentionally written this policy in plain English. Privacy policies are often difficult to understand. We believe you have the right to clearly know:

— what information we collect
— why we collect it
— how long we keep it
— what your rights are

Where technical terms are necessary (for example, “IP address”), we explain them in simple language.

1. When you visit our website

Our website is hosted by Squarespace, which collects limited technical information so the website can function and remain secure.

This includes:

Technical data:
— IP address (a number that identifies your device on the internet)
— browser type
— device type
— operating system
— network information

Usage data (analytics):
— pages visited
— clicks
— scrolling behaviour
— time spent on pages

This data does not directly identify you by name, but under data protection law technical identifiers such as IP addresses are still treated as personal data.

2. Fonts

Our website uses Google Fonts and Adobe Fonts.
When a page loads, these services may receive your IP address so the text displays correctly on your device.

3. Contact Form

If you contact us using the website contact form, we collect:
— your name
— your email address
— your message

This information is sent to info@thirdagetx.com and is used only to respond to your enquiry.

We do not add you to a mailing list and we do not send marketing emails unless you specifically request them.

We will keep correspondence for as long as reasonably necessary to deal with your enquiry and any follow-up matters. In some cases this may include keeping a record of the conversation so we can understand previous discussions if you contact us again.

Please note: email transmission over the internet is not completely secure. While we take reasonable precautions, you should avoid sending sensitive personal or medical information via the contact form.

Our website and contact form are intended for general enquiries only.

Please do not include medical information, health details, or information about medical conditions in your message. We are not able to provide medical advice, diagnosis, or treatment guidance through this website, and the contact form is not a secure method for sharing sensitive personal data.

If health-related information is sent to us, we will only use it to respond appropriately and may securely delete or redact it where it is not necessary for correspondence.

To reduce the risk of sensitive personal data being submitted, our contact form includes clear notices before a message can be sent.

Users are asked to confirm:

— “I have read the website privacy policy and understand not to submit sensitive health data.”

— The free-text message box also contains a reminder not to include medical or other sensitive personal information.

— These measures are intended to discourage the submission of special category personal data. If such information is nevertheless provided, we will not use it for any medical purpose and will limit handling to what is necessary to respond and, where appropriate, securely delete or redact it.

UK data protection law requires us to explain the legal reason we process personal data.

Website security and hosting
— Legitimate interests (keeping the website safe and operational)

Responding to enquiries
— Legitimate interests (communication and administration)

Essential cookies
— Legitimate interests

Analytics cookies
— Consent

Cookie preferences
— Consent

Our legitimate interests include operating our website, preventing misuse, maintaining security, and responding to enquiries.

What are cookies?

Cookies are small text files stored on your device. They help the website function and help us understand how visitors use the site.

You can choose to accept analytics cookies or remain with essential cookies only using our cookie banner.

You can also withdraw consent at any time by:

— reopening the cookie banner
— clearing cookies in your browser settings

Essential Cookies

— Crumb - Session - Prevents certain cyber-attacks (CSRF)
— ss_cookieAllowed - 30 days - Remembers cookie choice
— Test - Session - Checks browser cookie support

These are required for the website to work.

Analytics Cookies (only if you click “Accept”)

— ss_cid / ss_cpvisit - 2 years - Counts visitors over time
— ss_cvisit / ss_cvt - 30 minutes - Identifies a visit session

Some of our service providers (including Squarespace, Google, and Adobe) operate outside the United Kingdom.

This means limited personal data (such as IP address and technical information) may be transferred to countries including the United States.

Where this occurs, safeguards are used such as:

— Standard Contractual Clauses approved by UK authorities

— Recognised international data protection frameworks

UK data protection law does not set fixed retention periods. Instead, we keep personal data only for as long as it is necessary for the purpose it was collected, and no longer than reasonably required.

We regularly review the information we hold and securely delete or anonymise it when it is no longer needed.

Typical retention approaches are:

Contact enquiries
Kept while the enquiry is active and for a reasonable period afterwards in case of follow-up correspondence

Server security logs
Short-term retention for security monitoring (normally around 30 days)

Analytics data
Retained according to Squarespace system settings (generally up to 26 months)

Cookie preferences
Stored for 30 days

When we may keep information longer.

In some situations we may retain information for a longer period where there is a legitimate and justifiable reason, including:

— maintaining business records
— resolving disputes or complaints
— complying with legal or regulatory obligations
— defending potential legal claims
— preventing fraud or misuse of the website
— ensuring continuity if you contact us again about the same matter

We will always limit retention to what is proportionate and necessary and will not keep personal data indefinitely without a lawful reason.

We use trusted service providers who process data on our behalf:

— Squarespace (website hosting and analytics)
— Google Fonts
— Adobe Fonts
— our email hosting provider

These providers process data only under contractual confidentiality and security obligations.

We do not use automated decision-making or profiling.

This website is not intended for children under 13 and we do not knowingly collect personal data from children.

Under UK data protection law you have the right to:

— access your personal data
— correct inaccurate data
— request deletion
— restrict processing
— object to processing
— data portability (where applicable)
— withdraw consent (for cookies)

To exercise these rights, email: info@thirdagetx.com

If you are unhappy with how we handle your data, you have the right to complain to the UK regulator:

Information Commissioner’s Office (ICO)
https://ico.org.uk

We would, however, appreciate the opportunity to resolve your concern first.

We may update this policy from time to time.
— The current version will always be published on this page.
— This policy is effective from 9 February 2026.

— www.thirdagetx.com
— info@thirdagetx.com