PTL Solutions Inc.

Last updated: July 9, 2026

1. Introduction

PTL Solutions Inc. ("PTL Solutions," "we," "us," or "our") is a Montreal-based consulting firm providing regulatory affairs, quality management, clinical strategy, and product development planning services to medical device and digital health companies.

We are committed to protecting the personal information entrusted to us. This policy explains what personal information we collect, why we collect it, how we use and protect it, and the rights available to you.

This policy is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) and, as a Quebec-based enterprise, by Quebec's Act respecting the protection of personal information in the private sector, as amended by Law 25.

2. Privacy Officer

PTL Solutions has designated a Privacy Officer who is responsible for our compliance with this policy and with applicable privacy legislation.

Thomas Moore, PhD Privacy Officer, PTL Solutions Inc. thomas.moore@ptl-solutions.com 438-680-8634 405 Greenwood Drive Beaconsfield, QC H9W 4Z7 Canada

Any question, request, or complaint concerning your personal information may be directed to the Privacy Officer at the contact information above.

3. Personal Information We Collect

We collect only the personal information necessary for the purposes described in this policy. Depending on your relationship with us, this may include:

Client and prospective client information: name, job title, employer, business email address, business telephone number, business mailing address, and the content of communications between us.

Event and communication information: name, email address, employer, and any information you provide when registering for an event, webinar, or office hours session at which PTL Solutions presents, or when you subscribe to receive communications from us.

Website information: if our website collects analytics or uses cookies, we may collect IP address, browser type, pages visited, and referring URL. Any such collection is limited to what is necessary to operate and improve the website.

We do not knowingly collect personal health information. Where a client engagement requires PTL Solutions to handle documentation that may contain personal health information, we do so only under a written agreement with the client that governs the handling, storage, and return or destruction of that information.

4. Why We Collect Personal Information

We collect, use, and disclose personal information for the following purposes:

• To provide, manage, and deliver our consulting services
• To communicate with clients and prospective clients about engagements, proposals, and scopes of work
• To respond to inquiries and requests
• To send commercial electronic messages about our services, insights, and events, where we have your consent to do so
• To meet our contractual, professional, legal, and regulatory obligations
• To administer, maintain, and improve our business operations and website

We will not use your personal information for any new purpose without first obtaining your consent, unless required or permitted by law.

5. Consent

We obtain your consent before collecting, using, or disclosing your personal information, except where the law permits or requires otherwise.

For commercial electronic messages, we rely on your express consent, obtained in accordance with Canada's Anti-Spam Legislation (CASL). You may withdraw that consent at any time by using the unsubscribe mechanism in any message you receive from us, or by contacting our Privacy Officer directly.

Withdrawing consent to receive commercial messages will not affect the delivery of any services you have engaged us to perform.

6. Disclosure to Third Parties

PTL Solutions does not sell, rent, or trade personal information.

We may disclose personal information in the following circumstances:

Subcontractors and consultants. PTL Solutions engages independent consultants to deliver client work. Where a consultant requires access to personal information to perform an engagement, that access is limited to what is necessary and is governed by confidentiality obligations.

Service providers. We use third-party providers for services such as email, file storage, accounting, and website hosting. These providers may process personal information on our behalf and are bound by contractual obligations to protect it.

Legal requirements. We may disclose personal information where required by law, court order, or a governmental or regulatory authority with jurisdiction.

Business transactions. In the event of a merger, acquisition, or sale of assets, personal information may be disclosed to the parties involved, subject to appropriate confidentiality protections.

7. Transfers Outside Quebec and Canada

Some of our service providers store or process information outside Quebec, including in the United States. Before transferring personal information outside Quebec, we conduct a privacy impact assessment as required by Law 25 and take reasonable steps to confirm that the information will receive adequate protection.

Personal information stored in another jurisdiction may be subject to the laws of that jurisdiction, including lawful access requests by its courts and authorities.

8. Safeguards

We protect personal information with security measures appropriate to its sensitivity. These include:

• Access controls limiting personal information to those who require it
• Confidentiality obligations in agreements with employees, consultants, and subcontractors
• Encrypted storage and transmission where reasonably practicable
• Secure disposal of records at the end of their retention period

No method of transmission or storage is entirely secure, and we cannot guarantee absolute security. We will notify affected individuals and the relevant authorities of any confidentiality incident that presents a risk of serious injury, as required by law.

9. Retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, or as required by law, professional obligations, or the terms of a client engagement. When personal information is no longer needed, it is securely destroyed, erased, or anonymized.

10. Your Rights

Subject to certain exceptions set out in law, you have the right to:

• Access the personal information we hold about you
• Correct personal information that is inaccurate, incomplete, or ambiguous
• Withdraw consent to our collection, use, or disclosure of your personal information
• Request deletion or de-indexing of your personal information in the circumstances provided by Law 25
• Receive the computerized personal information you have provided to us in a structured, commonly used technological format, and request that it be transferred to another organization

To exercise any of these rights, contact our Privacy Officer at the address above. We will respond within thirty days of receiving your request.

If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada or, in Quebec, with the Commission d'accès à l'information du Québec.

11. Changes to This Policy

We may update this policy from time to time. The current version will always be posted on our website, with the date of the most recent revision shown at the top. Material changes will be brought to the attention of affected individuals where required.

12. Contact

Questions, access requests, and complaints should be directed to:

Thomas Moore, PhD Privacy Officer PTL Solutions Inc. thomas.moore@ptl-solutions.com 438-680-8634 405 Greenwood Drive Beaconsfield, QC H9W 4Z7 Canada