Privacy Policy

SAB Biotherapeutics, Inc. Privacy Notice

Effective Date:  October 13, 2026

Welcome to the website of SAB Biotherapeutics, Inc. (“Company,” “we,” “us,” and/or “our”). We have prepared this privacy Notice (“Privacy Notice”) to describe how we collect, use, store, and share your information and data when (1) you access and/or use the Company website (“Site”); (2) you communicate with us in any manner, including by email, direct messaging, telephone, and/or in person (“Communications” or “Communicate”); and (3) we interact with certain third party partners. “You” refers to you as a user of the Site.

Please note the following sections that include important disclosures related to our Site:

• Cookies, Advertising, and Tracking Technology Disclosures: To learn more about how our Site and Communications use cookies and related technologies (including from Third Parties), see “Automatic Information Collection Technologies” below.

• Your Choices Disclosures: To learn more about your choices concerning your information, see “Your Choices” below.

• If you are located in the European Economic Area (“EEA”) (including the United Kingdom), please see the “Individuals in the European Economic Area (EEA)” below 

Information We Collect

Depending on how you interact with our Site, the nature of our Communications, and how we may interact with certain third party partners, we may collect the following pieces of your information:

• Basic Identifying Information. Information you provide when you contact us through the Site, such as your full name, e-mail address, phone number, and other similar identifiers.
• Device Identifier and other Unique Identifiers. Information such as your device identifier, internet protocol (IP) address, cookies, beacons, pixel tags, mobile ad identifier, and other unique identifiers.
• Internet or Other Network Activity. Information such as your browsing or search history, and other information regarding your interactions with our Site, emails, and advertisements.
• Geolocation Data. Information including imprecise location data (such as location derived from an IP address or data that indicates a city or postal code level) and, with your consent, precise location data (such as latitude/longitude data).
• User Content. Information such as your Communications with us and any other content you provide, such as responses, comments, reviews, testimonials, and other content.
• Inferences. Information such as inferences drawn from or created based on the information identified above.

You may choose to voluntarily provide other information to us that we do not request, We ask that you do not provide personal information that is not necessary for the purpose of your communication with us.

How We Collect Your Information

We collect your information in three ways: (1) directly from you when you use our Site and Communicate with us; (2) automatically using online technologies when you engage with our Site and Communications; and (3) from our third party partners.

• Directly from you. We collect information directly from you when you enter your information on our Site or engage in Communications with us.
• Automatically Using Online Technologies. When you visit our Site, open or click on emails we send you or related Communications, or interact with our advertisements, we or other third parties may automatically collect certain information about you using online tracking technologies such as cookies, pixels, web beacons, software developer kits, and related technologies. For more information, see “Automatic Information Collection Technologies” below.
• From Our Partners. We collect information from our third party partners, such as brands, data analytics providers, marketing or advertising providers, fraud prevention service providers, and vendors that provide services.

Automatic Information Collection Technologies

• A. Technologies Used
  • Cookies. Cookies are small bits of data cached or stored on your computer based on Internet activity. Information collected through cookies may be obtained directly by or shared with third parties so that those third parties can provide analytics and advertising services to us. We use first party and third party cookies and other tools to monitor individual activity in aggregate to improve the Site. The information we gather includes IP address, user language, the operating system, browser type, the presence/absence of “flash” plug-ins, screen resolution, connection type, browsing behavior, and information that identifies the cookie.
  • Pixels. Pixels (also known as web beacons) are types of code embedded in a website, video, email, or advertisement that sends information about your use to a server. When you access a website, video, email, or advertisement that contains a pixel, the pixel may permit us or a separate entity to drop or read cookies on your browser.
  • Analytic Tools. Analytic tools include technologies or software services that collect, measure, and analyze data about how users interact with our Site. These tools often use cookies, pixels, and similar technologies to gather information such as page views, clicks, and user behavior, which is then used to improve site functionality and user experience.
• B. Purpose For Using Automatic Information Collection Technologies
  • Targeted Advertising, Marketing Measurements: Pixel tags may be used to market our services to you, measure the success of our marketing campaigns, and compile statistics about our Site’s usage and response rates. In addition, we may use the information we have collected from you to enable us to display targeted third-party advertisements on our website. Some advertisements on this Site are served by third-party advertisers, ad networks, and ad servers. These third parties may use cookies, alone or in conjunction with web beacons or other tracking technologies, to collect information about you.
    Some of these tracking technologies may track your activities across time and services for purposes of associating the different devices you use, and delivering relevant ads and/or other content to you (“Interest-based Advertising”).
    We also use audience matching services to reach people (or people similar to people) who have visited our Site or are identified in one or more of our databases (“Matched Ads”). This is done by us uploading a customer list to a technology service or incorporating a pixel from a technology service into our own Site, and the technology service matching common factors between our data and their data.
    Third party technologies we have implemented on our Site and through our Services include the following:
    • Google Ads/DoubleClick: We use Google advertising and measurement technologies — such as the Google tag and Google Ads remarketing — to help show ads, measure their effectiveness, and understand how people use our Site. These tools allow Google and other third-party vendors to set and read identifiers (e.g., cookies or device identifiers) and to serve ads based on your past activity on our Site. More information about your choices can be found in “Your Choices” below.
  • Site and Behavioral Analytics. We also use pixels in combination with cookies to track activity by a particular browser on a particular device. These pixels are provided by a third party and certain information may be shared back with such provider.
    • Google Analytics: We use Google Analytics to help us understand how users access and use the Site through the use and sharing of cookies. You can learn about Google’s practices by going to www.google.com/policies/privacy/partners/.

For information about your choices related to automatic data collection technologies and your ability to opt out of certain sharing of information, please see “Your Choices” below.

How We Use Your Information

We use your information for a variety of purposes, including to:

• Provide our Site to You. We use your information to provide our Site, including to: (1) facilitate your access and use of our Site; (2) answer your Communications; and (3) perform other related business functions.
  • Categories of Information Used: Basic Identifying Information; Device Identifier and Other Unique Identifiers; Internet or Other Network Activity; User Content.
• Communicate with You. We use your information to engage in Communications with you, such as to respond to your requests, inquiries, issues, and feedback.
  • Categories of Information Used: Basic Identifying Information; Device Identifier and Other Unique Identifiers; User Content.
• Conduct Analytics and Personalization. We use your information to conduct research and analytics, including to improve our Site. We also use your information to understand your interaction with our Site, advertisements, and our Communications with you. We also use your information to personalize your experience, to save you time when you visit our Site, to better understand your needs, and to provide personalized recommendations.
  • Categories of Information Used: Device Identifier and Other Unique Identifiers; Internet or Other Network Activity; Geolocation Data; User Content; Inferences.
• Product and Service Improvement. We use your information to develop, test, and improve our Site and features, including to develop new products, services, and offerings. We also use your information to conduct internal research, perform quality assurance, and to train and improve our technology and systems.
  • Categories of Information Used: Device Identifier and other Unique Identifiers; Internet or Other Network Activity; User Content; Inferences.
• Security and Fraud Prevention. We use your information to detect, investigate, prevent, or take action regarding possible malicious, deceptive, fraudulent, or illegal activity. We also use your information to verify your identity, protect the security and integrity of our Site, enforce our terms and procedures, prevent security incidents, and prevent harm to other users of our Site.
  • Categories of Information Used: Basic Identifying Information; Device Identifier and Other Unique Identifiers; Internet or Other Network Activity; Geolocation Data; Inferences.
• Legal Obligations. We use your information to comply with our legal and regulatory obligations, to respond to legal process or requests for information issued by government authorities or other third parties, to establish and exercise our rights, and to defend against legal claims.
  • Categories of Information Used: Basic Identifying Information; Device Identifier and Other Unique Identifiers; Internet or Other Network Activity; Geolocation Data; User Content; Inferences.
• Aggregation and De-identification. We may aggregate and/or de-identify your information so that it may no longer be considered personal information. We may use such aggregated and de-identified information for any lawful purpose, including for research, analytics, marketing, and improving our Site.
  • Categories of Information Used: Any of the categories of information identified in the “Information We Collect” section above may be aggregated and/or de-identified for these purposes.
• With Your Consent or at Your Direction. We may use your information for purposes disclosed to you at the time you provide your information or otherwise with your consent or at your direction.
  • Categories of Information Used: Any of the categories of information identified in the “Information We Collect” section above may be used for these purposes, as applicable.

How We Disclose Your Information

We may disclose or share your information with affiliated and non-affiliated third parties, including in the following scenarios:

• With your Consent. We may disclose or share your information with your consent, which may be obtained in writing; online, through “click-through” agreements; when you accept the terms of use on our Site; orally, either in person or on the phone; or by other means.
• In a Business Transfer. We may disclose or share your information as part of a corporate business transaction, such as a merger or acquisition, joint venture, corporate reorganization, financing, or sale of company assets, or in the unlikely event of insolvency, bankruptcy, or receivership, in which such information could be transferred to third parties as a business asset in the transaction.
• To Non-Affiliated Third Parties. We may disclose or share your information with certain non-affiliated third parties to facilitate your access and use of our Site, and to provide us with certain business functions, including but not limited to sharing your information with brand partners, internet service providers, advertising networks, data analytics providers, governmental entities, operating systems and platforms, and other service providers who provide us a service (e.g., customer service, auditing, marketing, debugging to identify and repair errors that impair existing intended functionality on our Site, and/or protecting against malicious, deceptive, fraudulent, or illegal activity).
• For Legal Process And Protection. We may disclose or share your information to satisfy any law, regulation, legal process, governmental request, or where we have a good faith belief that access, use, preservation or disclosure of such information is reasonably necessary to: (1) enforce or apply our agreements; (2) protect our interests, property, or the safety of others; (3) in connection with claims, disputes, or litigation; and (4) to protect our Site.

How We Protect Your Information

Although no system can guarantee the complete security of your information, we take all commercially reasonable steps to ensure your information is protected in alignment with all applicable laws and regulations, as appropriate to the sensitivity of your information.

For How Long Do We Keep Your Information

We retain personal data only for as long as necessary for the purposes described in this Privacy Notice. In determining the applicable retention period, we consider the nature and purpose of the processing, the duration of our relationship or communications with you, applicable legal and regulatory requirements, relevant limitation periods, and whether retention is necessary to establish, exercise or defend legal claims.

Links To Third Party Sites

Our Site may contain links to third party websites and services. Please note that these links are provided for your convenience and information, and the websites and services may operate independently from us and have their own privacy policies or notices, which we strongly suggest you review.

Your Choices

A.    Cookies and Tracking Technologies

The following disclosures relate to your choices in connection with cookies and other tracking technologies:

• Do Not Track. Your browser settings may allow you to automatically transmit a “Do Not Track” signal to online services you visit. We do not currently monitor or take action with respect to “Do Not Track” signals. For more information on “Do Not Track,” visit http://www.allaboutdnt.com.
• Cookies and Pixels. Most browsers accept cookies by default. You can instruct your browser, by changing its settings, to decline or delete cookies. If you use multiple browsers on your device, you will need to instruct each browser separately. Your ability to limit cookies is subject to your browser settings and limitations. Below are links to instructions for managing cookies on commonly used browsers:
  

  • Google Chrome: https://support.google.com/chrome/answer/95647   

  • Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09   

  • Safari (macOS): https://support.apple.com/en-us/105082   

Please be aware that if you disable or remove tracking technologies, some parts of the Site may not function correctly. If you disable or refuse cookies, some parts of this Site may then be inaccessible or not function properly.

B.    Analytics and Interest-Based Advertising

Google provides tools to allow you to opt out of the use of certain information collected by Google Analytics at https://tools.google.com/dlpage/gaoptout and by Google Analytics for Display Advertising or the Google Display Network at https://www.google.com/settings/ads/onweb/.

The companies we work with to provide you with targeted ads are required by us to give you the choice to opt out of receiving targeted ads. Most of these companies are participants of the Digital Advertising Alliance (“DAA”) and/or the Network Advertising Initiative (“NAI”). To learn more about the targeted ads provided by these companies, and how to opt out of receiving certain targeted ads from them, please visit: (i) for website targeted ads from DAA participants, https://www.aboutads.info/choices; (ii) for app targeted ads from DAA participants, https://www.aboutads.info/appchoices; and (iii) for targeted ads from NAI participants, https://www.networkadvertising.org/choices/. Opting out only means that the selected participants should no longer deliver certain targeted ads to you, but does not mean you will no longer receive any targeted content and/or ads (e.g., in connection with the participants’ other customers or from other technology services).

To opt out of us using your data for Matched Ads, please contact us as set forth in the “Contact Us” section below and specify that you wish to opt out of matched ads. We will request that the applicable technology service not serve you Matched Ads based on information we provide to it. Alternatively, you may directly contact the applicable technology service to opt out.

Google Ads: Users can opt out of cookies used by Google for advertising. Each site where the privacy Notice is posted must provide users with at least one of the following two options for opting out:

• Opting out of Google advertising cookies. Users can opt out of Google’s use of cookies for advertising, including DoubleClick cookies, by visiting Google’s Ads Settings page.
• Opting out of cookies from all participating advertisers. Users can opt out of third-party advertising cookies from a wide range of advertising services, including Google, by visiting the NAI’s Opt-Out page.

Please note that if you opt out using any of these methods, the opt out will only apply to the specific browser or device from which you opt out. We are not responsible for the effectiveness of, or compliance with, any opt out options or programs, or the accuracy of any other entities’ statements regarding their opt out options or programs.

Children’s Privacy

Our Site is not intended for children under the age of 13. This includes any links to other websites that we provide for our convenience. We do not knowingly collect Personal Information from children under the age of 13.

Processing in the United States

Please be aware that your information and communications may be transferred to and maintained on servers or databases located outside your state, province, or country. The laws in the United States may not be as protective of your privacy as those in your location. By using our Site, you agree that the applicable laws in the United States will govern the collection, use, transfer, and disclosure of your information and communications.

Privacy Notice Changes

From time to time, we may change this Privacy Notice. If we change this Privacy Notice, any and all changes will be reflected on this page, and, where appropriate, provided in person or by another electronic method. Those changes will go into effect on the effective date shown at the top of the revised Privacy Notice. You should regularly check this page for any changes to this Privacy Notice.

Contact Us

If you have questions or concerns regarding this Privacy Notice, please email us at info@www.sab.bio.
You can also send us mail at our corporate headquarters: 777 W 41st St. Suite 401 Miami Beach, FL 33140

Individuals in the European Economic Area (EEA)

This section supplements the information provided above in relation to processing subject to the GDPR. If there is any inconsistency between this section and another part of this Privacy Notice, this section prevails for such processing.

A.    Role and Data Controller Contact Details

SAB Biotherapeutics, Inc. is the controller of the personal information collected from you as you engage with our Site or via Communications with us.

You can contact us at:
SAB Biotherapeutics, Inc.
777 W 41st St., Suite 401
Miami Beach, FL 33140
United States

Email: Dataprotection@sab.bio

B.    Lawful Basis for Processing

The GDPR and data protection laws in Europe require a “lawful basis” for processing personal information. Our lawful bases include the following:

Purpose	Legal basis for EEA individuals
Operating the Site and responding to inquiries	Legitimate interests in operating our website and responding to communications. Where processing is necessary to take steps at your request before entering into a contract, Article 6(1)(b) may apply.
Security and fraud prevention	Legitimate interests in protecting the Site, our systems and users.
Analytics using non-essential cookies or similar technologies	Consent.
Targeted advertising, remarketing and similar advertising technologies	Consent.
Improving the Site, products and services	Legitimate interests, where the processing does not rely on technologies requiring consent; otherwise consent.
Compliance with applicable legal obligations	Legal obligation.
Other processing expressly based on your consent	Consent.

Where we rely on consent under the GDPR, we obtain your freely given, specific, informed and unambiguous consent. Acceptance of our Terms and Conditions does not, by itself, constitute such consent.

Where we rely on a legitimate interest to process personal information, we carry out a balancing test to weigh the legitimate interest against your right to protection of your personal information; however, our processing of your personal information will never override your fundamental rights and freedoms, and you can always exercise your right to object to such processing.

For purposes of clarity, aggregated or de-identified information remains subject to the GDPR unless it qualifies as anonymous information under that Regulation.

C.    International Data Transfers

We operate and our servers are located in the United States. The information we collect is subject to state and federal law in the United States. If you are accessing our Site from outside the United States, please be advised that you are transferring your personal information to us in the United States where data protection and privacy laws may be different or less stringent than the laws of your country.

If the GDPR applies and your data is transferred outside the UK or the EEA to the United States or any other country, we will transfer your personal information subject to appropriate safeguards, such as an adequacy decision by the European Commission on the basis of Article 45 of Regulation (EU) 2016/679 or Standard Contractual Clauses, as provided from time to time by the European Commission. You can receive additional information about where your personal information is transferred and the appropriate safeguards by contacting us.

D.    Your Data Subject Rights

Subject to the conditions and limitations provided by applicable data protection law, you may have the right to:

• Access, rectify, or erase any personal information we process about you;
• Data portability – Where applicable, receive the personal information you have provided to us in a structured, commonly used and machine-readable format, and request its transmission to another controller where technically feasible;
• Restrict or object to our processing of your personal information; and
• Where applicable, withdraw your consent at any time for any processing of your personal information. Withdrawal of consent will not affect the lawfulness of processing carried out before your withdrawal.
• You also have the right to object at any time to the processing of your personal data for direct marketing purposes.

To exercise your rights, please email us at info@www.sab.bio.

E.    Complaints

If you have a complaint about our use of your personal information or our response to your request(s) regarding your personal information, you may submit a complaint to the Data Protection Supervisory Authority in your jurisdiction. We would, however, appreciate the opportunity to address your concerns before you approach a data protection regulator and welcome you to first direct an inquiry to us.

In addition to our contact details set out above, you can also contact our Designated Individual Overseeing Compliance of this Privacy Notice by emailing Dataprotection@sab.bio or writing us at:

777 W 41st St.
Suite 401
Miami Beach, FL 33140

For matters relating to the processing of personal data under the GDPR, you may also contact our representative in the EEA: 

EU Representative: Data Protection Representative for EU: MyData-TRUST France, Rue de Rennes, 140b, 75006 Paris, France.

UK Representative: Data Protection Representative for UK: MyData-TRUST LTD, Belmont Building, Belmont Road, Uxbridge, England, UB8 1HE

F.    Cookies and Similar Technologies

For users in the EEA, we obtain prior consent before using cookies or similar technologies that require consent under applicable law. You may refuse these technologies or withdraw your consent at any time through [Cookie Settings]. Further information is available in [Cookie Notice]