Last updated: March 10, 2025
If you are a resident of the EU or UK, please refer to the General Privacy Notice for individuals in the EU and UK.
Introduction and overview
4D Molecular Therapeutics, Inc. (“4DMT,” “we,” “our” or “us”) respects your privacy and is committed to protecting it through our compliance with this Privacy Policy.
This Privacy Policy describes how we collect, use and share information about you as well as your rights and choices about such collection, use and sharing, and applies to 4DMT’s websites at https://4dmoleculartherapeutics.com and https://ir.4dmoleculartherapeutics.com (collectively, the “4DMT Website”).
Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use the 4DMT Website. By accessing or using the 4DMT Website, you agree to this Privacy Policy.
This Privacy Policy may change from time to time (see Changes to this Privacy Policy). Your continued use of the 4DMT Website after we make changes is deemed to be acceptance of those changes, so please check this Privacy Policy periodically for updates. If you have any questions about our privacy practices, please contact us as set forth in the Contact Us section below.
Information Collection
We collect the following types of information from users of the 4DMT Website.
- Information You Provide to 4DMT
We collect certain information you provide directly via the 4DMT Website:
- Your contact information when you contact us by email, telephone, or via a sign-up or contact form on the 4DMT Website.
- Professional information about you, including your employer.
- The content of your communications with us as necessary to provide you with the 4DMT Website.
Information Collected Automatically
As you navigate through and interact with the 4DMT Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions and patterns, including:
- Details of your use of the 4DMT Website, including traffic data, logs, referral URL, time on 4DMT Website, pages visited, links clicked, files downloaded and other communication data and the resources that you access and use on the 4DMT Website.
- Information about the type of device or browser you use, your device’s operating system, device type, your internet service provider, your device’s regional and language settings, approximate location and other similar information. This data may include IP address, MAC address, device advertising ID (e.g., IDFA or AAID), and other device identifiers.
The information we collect automatically helps us to improve the 4DMT Website, including by enabling us to:
- Estimate our audience size and usage patterns.
- Store information about your preferences, allowing us to customize the 4DMT Website according to your individual interests.
- Speed up your searches.
- Recognize you when you return to the 4DMT Website.
For more information about the technologies we use for this automatic data collection such as cookies, flash cookies and web beacons, please review our Cookie Notice.
Use of Information
We use information that we collect about you or that you provide to us, including any personal information:
- To present the 4DMT Website and its contents to you, including to provide customer support.
- To provide you with information, products, or services that you request from us.
- To fulfill any other purpose for which you provide it.
- If you have an account with 4DMT, to provide you with notices about your account.
- To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
- To notify you about changes to the 4DMT Website or any products or services we offer or provide through it.
- To allow you to participate in interactive features of the 4DMT Website.
- In any other way we may describe when you provide the information.
- For any other purpose with your consent.
We may also use your information to contact you about our goods and services that may be of interest to you. If you do not want us to use your information in this way, please let us know at privacy@4dmt.com.
We may use information that does not identify you (including information that has been de-identified) without obligation to you except as prohibited by applicable law.
For information on your rights and choices regarding how we use your information, see Your Rights and Choices below.
Sharing of Information
We share information about you as follows:
- Service Providers. We may share your information with our agents, vendors and other service providers (collectively “Service Providers”) in connection with their work on our behalf. Service Providers assist us with services such as payment processing, credit checks, data analytics, marketing and promotional services, website hosting, and technical support. Service Providers are prohibited from using your information for any purpose other than to provide this assistance, although we may permit them to use aggregate information which does not identify you or de-identified data for other purposes.
- Business Partners. We may share your information with our business partners in connection with offering you co-branded services, selling or distributing the 4DMT Website, or engaging in joint marketing activities.
- Merger or Acquisition. We may share your information in connection with, or during negotiations of, any proposed or actual merger, purchase, sale or any other type of acquisition or business combination of all or any portion of our assets, or transfer of all or a portion of our business to another business.
- Security and Compelled Disclosure. We may share your information to comply with the law or other legal process, and where required, in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We may also share your information to protect the rights, property, life, health, security and safety of 4DMT, the 4DMT Website or any third party.
- Consent. We may share your information for any other purpose disclosed to you and with your consent.
Without limiting the foregoing, in our sole discretion, we may share aggregated information that does not identify you or de-identified information about you with third parties or affiliates for any purpose except as prohibited by applicable law. For information on your rights and choices regarding how we share your information, please see Your Rights and Choices below.
Your Rights and Choices
- Review and Update of Account and Personal Information
You may access, update, or remove certain account or personal information that you have voluntarily submitted to us through the 4DMT Website by sending an email to us at privacy@4dmt.com. We may require additional information from you to allow us to confirm your identity.Please note that we will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. - Tracking Technology Choices
Cookies and Pixels. Most browsers accept cookies by default. You can instruct your browser, by changing its settings, to decline or delete cookies. If you use multiple browsers on your device, you will need to instruct each browser separately. Your ability to limit cookies is subject to your browser settings and limitations.Do Not Track. Your browser settings may allow you to automatically transmit a “Do Not Track” signal to online services you visit. Note, however, there is no industry consensus as to what site and app operators should do with regard to these signals. Accordingly, we do not monitor or take action with respect to “Do Not Track” signals or other mechanisms. For more information on “Do Not Track,” visit http://www.allaboutdnt.com.Please be aware that if you disable or remove tracking technologies, some parts of the 4DMT Website may not function correctly.For more information, please review our Cookie Notice. - Communications
You can opt-out of receiving promotional emails from us at any time by following the instructions as provided in emails to click on the unsubscribe link, or emailing us at privacy@4dmt.com with the word UNSUBSCRIBE in the subject field of the email. Please note that you cannot opt-out of certain non-promotional emails, such as those about your account, transactions, servicing, or 4DMT’s ongoing business relations with you.
Visitors Outside the United States
4DMT is a U.S.-based company. If you are a non-U.S. resident and provide us with your personal information, you acknowledge and agree that your personal information may be transferred to and processed in the United States, where the laws regarding processing of personal information may be less stringent than the laws in your country. By providing your information, you consent to such transfer and processing.
Children
The 4DMT Website are intended for a general audience and are not directed to children under 13 years of age. 4DMT does not knowingly collect personal information as defined by the Children’s Online Privacy Protection Act (“COPPA”) in a manner that is not permitted by COPPA. If you are a parent or guardian and believe 4DMT has collected such information in a manner not permitted by COPPA, please contact us as at privacy@4dmt.com and we will remove such information to the extent required by COPPA.
Data Security
We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure.
Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to the 4DMT Website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the 4DMT Website.
Changes to this Privacy Policy
We reserve the right to revise this Privacy Policy at any time. Any changes will be effective immediately upon posting of the revised Privacy Policy and updating the “last modified” date above. Your continued use of the 4DMT Website indicates your consent to the Privacy Policy then posted. If the changes are material, we may provide you additional notice to your email address. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our website and this Privacy Policy to check for any changes.
Contact Us
If you have any questions or comments about this Privacy Policy or our privacy practices, please contact us as follows:
4D Molecular Therapeutics, Inc.
5858 Horton St. Suite 455
Emeryville, CA 94608
privacy@4dmt.com
Last updated: March 10, 2025
Non-EU and non-UK residents should refer to the Privacy Notice for non-EU and non-UK individuals.
Introduction and overview
4DMT is a clinical-stage biopharma company inventing and developing innovative products to unlock the full potential of genetic medicine to treat large market diseases. We use our transformative vector discovery platform, termed Therapeutic Vector Evolution, to create customized and proprietary gene delivery vehicles (i.e., vectors) to deliver therapeutic payloads to specific tissue types associated with the underlying disease via the optimal route of administration. Our product design, development and manufacturing engine empowers us to efficiently create our valuable and diverse product pipeline. This combination of bold innovation and relentless execution gives 4DMT the capability to revolutionize genetic medicines and to strive for potential curative therapies.
You can find out more about 4DMT and Our services on our websites:
Throughout this Privacy Notice, we will refer to 4D Molecular Therapeutics, Inc., “4DMT”, “We”, “Our” or “Us”.
This Privacy Notice applies to all information which is obtained and processed by 4DMT and for which 4DMT is the Data Controller.
When are We acting as a Data Controller?
This Privacy Notice provides you with information on how We manage your personal data in your interactions with Us, regardless of your location.
Depending on your relationship with Us, We will hold and manage your information differently. 4DMT could be in possession of your information as a:
- User or visitor to our websites (linked above) or,
- Investor, or
- Vendor, or
- Service provider, or
- Delegate at an event, or
- Any other member of the public providing Us with unsolicited personal data, or
- If you contact Us by any other means.
This Privacy Notice details how We manage your information in all the above situations as a Data Controller unless otherwise stated. Unless otherwise stated, this Privacy Notice applies when We are acting as a Data Controller for your information.
In some cases, where We are collecting information for new or novel purposes, We will provide specific privacy information at the point that We collect your information. If We have provided the following to you, you should read Our:
- Healthcare Professional Privacy Notice
- Participant Informed Consent Form
If you are a website visitor, this Privacy Notice should be read together with our Cookie Notice.
Where there is a conflict between local law and the provisions of this Privacy Notice, local law will prevail.
Children
While Our website is designed for a general audience, We will not knowingly collect personal data of children. If you believe We might have any personal data from or about a child, please email Us at privacy@4dmt.com.
How does 4DMT collect my personal data?
Where We are acting as a Data Controller, We may have obtained your personal data directly or indirectly through a number of channels.
We may have collected your information directly from you when you have:
- Visited Our website
- Completed a contact form
- Contacted Us by phone
- Signed up to receive marketing material
- Responded to one of Our surveys
- Met with or engaged with Us at an event, exhibition or conference
- Visited Our office
- Interacted with Us on social media platforms (such as LinkedIn)
- Supported our clinical trials
In some circumstances, We may collect your information indirectly, such as:
- From publicly available sources when it is in Our legitimate interest to do so.
What personal data does 4DMT collect about me?
We collect the below categories of information when We are acting as a Data Controller:
| Personal data category | Personal data |
|---|---|
| Contact information | Any information you provide to Us that allows Us to contact you, e.g., your first and last name, your email address, mailing address, or telephone number. |
| Account information | Bank or other account details to facilitate payments. |
| Surveys and opinions | Information you provide when you participate in Our surveys or provide feedback. |
| Complaint information | Nature of your complaint. |
| Cookies | Please refer to Our Cookie Notice. |
| Website security | Cookies necessary for security purposes. Please refer to Our Cookie Notice.Google reCAPTCHA: ReCAPTCHA collects personal information from users to make this determination of whether they are human and not a bot to prevent spam. The reCAPTCHA algorithm checks to see if there is a Google cookie placed on the computer being used. An additional reCAPTCHA-specific cookie will then be added to the user’s browser allowing a complete snapshot of the user’s browser window at that moment in time. Information gathered includes: All cookies placed by Google over the last 6 months; how many mouse clicks you have made on that screen (or touches if on a touch device); the Cascading Style Sheets (CSS) information for that page; the date; the language your browser is set to; any plug-ins you have installed on the browser; all JavaScript objects; and the data you supply via Our forms. More information can be found at Google reCAPTCHA(opens in new tab) and Google’s Privacy Policy(opens in new tab). |
| Other information | Any other personal data that you choose to share with Us. |
We do not intentionally or knowingly collect or process special category data or criminal convictions and offences data where We are acting as a Data Controller under this Privacy Notice.
What is the purpose and lawful basis for processing my personal data?
The applicable lawful basis for Our processing will differ depending on the legislation that is applicable:
- Where you are from the UK, UK data protection legislation applies
- Where you are from the EU, EU data protection legislation applies
Please see below for information on the personal data processed, purpose, and the applicable lawful basis:
| What is the purpose of the processing? | What personal data Category is processed? | What is the lawful basis for processing personal data under the EU and UK General Data Protection Regulation (GDPR)? |
|---|---|---|
| To contact you, following your enquiry or to reply to any questions. | Contact information | Legitimate Interest (EU/UK) |
| Customer service enquiries, reply to suggestions, issues, or complaints you have contacted Us about. | Contact information; Complaint information; Other information | Legitimate Interest (EU/UK) |
| To manage data subject right requests. | Contact information; Other information | Legal Obligation (EU/UK) |
| To manage our investors, including anti-money laundering, anti-bribery and “know your client” processes, administration of investment, provision of investor services legal and regulatory compliance, and relationship management. | Contact information; Account information; Other information | Legitimate Interest, Contract, Legal Obligation (EU/UK) |
| To manage our vendors and service providers in general. | Contact information; Account information | Legitimate Interest (EU/UK) |
| Taking payment from you or giving you a refund and associated financial accounting. | Contact information; Account information | Legitimate Interest (EU/UK) |
| To ensure that Our IT network is safe and secure. | Contact information; Account information; Surveys and opinions; Complaint information; Other information | Legitimate Interest; Legal Obligation (EU/UK) |
| Contacting you about relevant news stories. | Contact information | Consent (EU); Legitimate Interest (UK) |
| Marketing and analytics from Our website using cookies. | Cookies; Website security | Consent (EU/UK) |
We may, in further dealings with you, extend this personal data to include your purchases, services used, subscriptions, records of conversations and agreements, and payment transactions.
The legal basis for processing your personal data is based on compliance with a Legitimate Interest, Legal Obligation, Contract, or your Consent that We will have requested/stated at the point the information was initially provided, therefore, We will not store, process, or transfer your data unless We have an appropriate lawful reason to do so.
We will only use your personal data for the purposes for which We collected it, unless We reasonably consider that We need to use it for another reason and that reason is compatible with the original purpose.
If we need to use your personal data for an unrelated purpose, We will notify you and We will explain the legal basis which allows Us to do so.
Please note that We may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
How We keep you updated on Our products and services
We will send you relevant news about Our services in a number of ways, including by email, but only if We have a Legitimate Interest or your Consent to do so. Where We rely on Legitimate Interest, We have completed a Legitimate Interest Assessment for the processing activity, or, for data of UK residents acting in a business environment, We rely on the Corporate Subscriber exemption.
When We send you marketing by email, each email communication will have an option to object to the processing. If you wish to amend your marketing preferences, you can do so by following the link in the email you receive from Us and updating your preferences, or by contacting Us at privacy@4dmt.com.
How long does 4DMT keep my personal data?
The period for which We will retain personal data will vary depending on the purposes that it was collected for, as well as the requirements of any applicable law or regulation. We retain data in line with our Data Retention Policy and Schedule.
We may also retain your personal data for longer periods where We need to exercise, establish, or defend against legal claims. When personal data is no longer required, We delete or anonymise data in line with Data Protection Legislation and appropriate industry guidance.
What are my data rights and can I object to you processing my personal data?
It is important that the personal data We hold about you is accurate and current. Please keep Us informed if your personal data changes during your engagement with Us.
Where We are acting as a Data Controller, and under certain circumstances, by law you have the right to:
- Request access to your personal data (commonly known as a Data Subject Access Request). This enables you to receive a copy of the personal data We hold about you.
- Request correction of the personal data that We hold about you. This enables you to have any incomplete or inaccurate information We hold about you corrected.
- Request erasure of your personal data. This enables you to ask Us to delete or remove personal data where there is no good reason for Us continuing to process it. You also have the right to ask Us to delete or remove your personal data where you have exercised your right to object to processing.
- Object to processing of your personal data where We are relying on a legitimate interest (or those of a third party) and there is something about your situation which makes you want to object to processing on this ground. You also have the right to object where We are processing your personal data for direct marketing purposes.
- Request the restriction of processing of your personal data. This enables you to ask Us to suspend the processing of personal data about you.
- Request the transfer of your personal data to another party.
- Right to withdraw Consent. In the limited circumstances where We are processing your data on the basis of Consent you have provided Us, and We have no other legal justification or obligation to continue the processing, you have the right to withdraw your Consent for that specific processing at any time.
For your protection and to protect the privacy of others, We may need to verify your identity before completing your request.
If you object to Us using your personal data or withdraw Consent for Us to use your personal data (when We are processing your personal data based on your Consent) after initially giving it to Us, We will respect your choice in line with applicable law.
If you would like to exercise any of these rights or would like to confirm the accuracy of your information, please contact privacy@4dmt.com.
Automated decision making
You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making.
Data security
We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure.
Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to the 4DMT Website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the 4DMT Website.
Will 4DMT share my Personal Data with other organisations?
We may disclose the personal data We hold about you to:
- Business partners to ensure that you receive the best service.
- With companies affiliated with Us when this is necessary to deliver Our services.
- Your employer or the corporate entity that you represent, solely for the purposes of providing the Services to you and/or your employer where We have a contract with your employer or the company you represent.
- Third party companies in the event that We are involved in a corporate transaction, such as an actual or potential merger, joint venture, consolidation, or asset sale. We may, from time to time, expand or reduce Our business and this may involve the sale and/or the transfer of control of all or part of Our business. Any personal data that you have provided will, where it is relevant to any part of Our business that is being transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this Privacy Notice, be permitted to use that data only for the purposes for which it was originally collected by Us.
- Our professional advisors, such as lawyers, accountants, auditors, financial services providers, and other professionals.
- Our service providers as Data Processors on Our behalf, including IT hosting companies. We may engage other companies and individuals to perform functions on Our behalf. We use Data Processors who are third parties who provide elements of services for Us. We have Data Processor Agreements in place with Our Data Processors. This means that they cannot do anything with your personal data unless We have instructed them to do it. They will not share your personal data with any organisation apart from Us or further Sub-Processors who must comply with Our Data Processor Agreement. They will hold your personal data securely and retain it for the period We instruct. Further, they must process the personal data in accordance with this Privacy Notice and as permitted by applicable data protection laws. Examples include data storage and hosting, sending newsletters, analysing data, providing marketing assistance, and providing customer services.
- Law enforcement agencies, courts, and other relevant tribunals.
Will my data be processed outside my home country?
Your data will be processed in the U.S as We are a U.S. based company. Our third-party Data Processors may be based outside your home country, in countries such as the US.
Where We transfer personal data to Data Processors or other third parties outside of the European Economic Area or UK, We will ensure that those transfers take place in accordance with the applicable data protection laws designed to ensure the privacy of your personal data, including by entering into data transfer agreements with recipients. If you would like more information about how your personal data may be transferred, please contact Us at privacy@4dmt.com.
How can I make a complaint?
You have the right to make a complaint if you are unhappy about how your personal data is processed. However, We would appreciate the chance to deal with your complaint before you approach the Supervisory Authority, so please contact Us in the first instance at privacy@4dmt.com. Your satisfaction is extremely important to Us and We will always do Our very best to solve any problems you may have. If you remain dissatisfied, you may wish to contact the Supervisory Authority.
You have the right to complain about the use of your personal data to the local Supervisory Authority.
If you are located within the EEA, you can find the contact details for your local Supervisory Authority on the link below
In the UK, the Supervisory Authority is the Information Commissioner’s Office, they can be contacted by:
- Phone: 0303 123 1113
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
- Email: icocasework@ico.org.uk
- Online
Updates and changes to this Privacy Notice
We may change this Privacy Notice from time to time, for example, if the law changes. Any changes become effective when We publish an update to this Privacy Notice. Any changes will be effective immediately upon posting of the revised Privacy Policy and updating the “last modified” date above. If there are significant changes, providing that we have your email address, We may contact you to notify you of the update.
Contact Us
If you would like to exercise one of your rights as set out in this Privacy Notice, or you have a question, query, or complaint about this Privacy Notice or the way your personal data is processed, please contact Our Data Protection Officer by email on privacy@4dmt.com.
We have appointed DPO Centre Europe as Our EU Representative and DPO Centre Limited as Our UK Representative for data protection matters. The contact details for Our EU and UK Representative can be found below.
For EU residents:
- Email: EURep@4dmt.com
- Phone: +39 02 3031 5236
For UK residents:
- Email: UKRep@4dmt.com
- Phone: +44 (0) 203 797 6340
For residents in all other countries, please contact Us by email on privacy@4dmt.com.