CALIFORNIA PRIVACY SUPPLEMENT

In this supplement, we provide additional information to California residents about how we handle their personal information, as required by the California Consumer Privacy Act (“CCPA”), and the privacy rights they have under the CCPA. This section does not address or apply to our handling of personal information that is exempt under the CCPA, and the references to “you” in this section apply to you only if you are a resident of the State of California

Categories of Personal Information Collected and Disclosed. While our processing of personal information varies based upon our relationship and interactions with you, the table below identifies the categories of personal information (as defined by the CCPA) that we have (1) collected about you in the preceding 12 months, as well as the (2) categories of third parties to whom we may have disclosed this information for a business or commercial purpose in the preceding 12 months. Personal information that may be considered sensitive is noted with an asterisk (*) below.

For more information about how we disclose your personal information, refer to the Disclosures of Personal Information section above.

Categories of Personal Information Collected Categories of Third-Party Disclosures
Identifiers
Includes direct identifiers, such as name, user ID, username, account number or other unique personal identifier; email address, phone number, address and other contact information; IP address and other online identifiers.
  • service providers
  • advisors and agents
  • regulators, government entities and law enforcement
  • affiliates and subsidiaries
  • advertising networks
  • data analytics providers
  • social networks
  • internet service providers, operating systems and platforms
  • data brokers
  • others as required by law, or directed or authorized by you
Also includes Social Security number*, driver’s license number*, passport number*, tax ID and other government identifiers*.
  • service providers
  • advisors and agents
  • regulators, government entities and law enforcement
  • others as required by law, or directed or authorized by you
Customer Records Includes personal information, such as name, account name, user ID, contact information, education and employment information, account number*, and financial or payment information* that individuals provide us in order to purchase or obtain our Services. For example, this may include information collected when an individual registers for an account, purchases or orders our products and services, or enters into an agreement with us related to our products and Services.
  • service providers
  • advisors and agents
  • regulators, government entities and law enforcement
  • affiliates and subsidiaries
  • data analytics providers
  • others as required by law, or directed or authorized by you
Commercial information Includes records of products or services purchased, obtained, or considered, or other purchasing or use histories or tendencies. For example, this may include demographic information that we receive from third parties in order to better understand and reach HCPs and other users and customers.
  • service providers
  • advisors and agents
  • regulators, government entities and law enforcement
  • affiliates and subsidiaries
  • advertising networks
  • data analytics providers
  • social networks
  • others as required by law, or directed or authorized by you
Internet and electronic network activity information Including, but not limited to, browsing history, clickstream data, search history, and information regarding interactions with an internet website, application, or advertisement, including other usage data related to your use of any of our Services or other online services.
  • service providers
  • advisors and agents
  • regulators, government entities and law enforcement
  • affiliates and subsidiaries
  • advertising networks
  • data analytics providers
  • social networks
  • internet service providers, operating systems and platforms
  • others as required by law, or directed or authorized by you
Location data Location information about a particular individual or device.
  • service providers
  • advisors and agents
  • regulators, government entities and law enforcement
  • affiliates and subsidiaries
  • data analytics providers
  • social networks
  • others as required by law, or directed or authorized by you
Audio, visual and other electronic data Includes audio, electronic, visual, thermal, or similar information, such as, thermal screenings and video recordings/
CCTV footage (e.g., collected from visitors to our offices, photographs and images (e.g., that you provide us or post to your profile) and call recordings (e.g., of customer support calls and webinars).
  • service providers
  • advisors and agents
  • regulators, government entities and law enforcement
  • affiliates and subsidiaries
  • others as required by law, or directed or authorized by you
Professional information Includes professional and employment-related information such as current and former employer(s) and position(s), business contact information and professional memberships).
  • service providers
  • advisors and agents
  • regulators, government entities and law enforcement
  • affiliates and subsidiaries
  • advertising networks
  • data analytics providers
  • social networks
  • others as required by law, or directed or authorized by you
Education Information Information about an individual’s educational history, such as the schools attended, degrees you were awarded, and associated dates.
  • service providers
  • advisors and agents
  • regulators, government entities and law enforcement
  • affiliates and subsidiaries
  • others as required by law, or directed or authorized by you
Profiles and inferences Including inferences drawn from any of the information identified above to create a profile reflecting a consumer’s preferences, characteristics, behavior or attitudes*.
  • service providers
  • advisors and agents
  • regulators, government entities and law enforcement
  • affiliates and subsidiaries
  • advertising networks
  • data analytics providers
  • social networks
  • others as required by law, or directed or authorized by you
Protected classifications We collect some information that is considered a protected classification under California/ federal law, such as your gender, race/ethnicity*, date of birth, marital status, sexual orientation*, and disability status.
  • service providers
  • advisors and agents
  • regulators, government entities and law enforcement
  • affiliates and subsidiaries
  • others as required by law, or directed or authorized by you
Biometric information Physiological, biological or behavioral characteristics that can be used alone or in combination with each other to establish individual identity*.
  • service providers
  • advisors and agents
  • others as required by law, or directed or authorized by you
Sensitive personal information As identified above, in limited circumstances, we may collect Social Security Number (SSN) and other government identifier; racial or ethnic origin, personal information concerning a consumer’s health and/or sexual orientation, financial information, passport number and other government identifiers; race and ethnicity; sexual orientation and other data that may be considered protected classifications under California and federal law; and data concerning an individual’s health.
  • service providers
  • advisors and agents
  • regulators, government entities and law enforcement
  • affiliates and subsidiaries
  • others as required by law, or directed or authorized by you

Sources of Personal Information. In general, we may collect the categories of personal information identified in the table above from the following categories of sources:

  • Directly from the individual
  • Advertising networks, analytics providers and social networks
  • Service providers
  • Affiliates and agents
  • From healthcare professionals
  • From contract research organizations and clinical trial investigators
  • From government agencies and/or public records
  • From third-party service providers, data brokers, or business partners
  • From business and collaboration partners
  • From industry and patient groups and associations

Purposes of Collection and Use. As described in more detail in Purposes of Use and Processing, we collect, use and otherwise process the above personal information in order to provide our Services to you, respond to and fulfil your orders and requests, as otherwise directed or consented to by you, and for the following business or commercial purposes:

  • Fulfilling and responding to requests
  • Responding to your inquiries
  • Administrative communications
  • Marketing communications
  • Research
  • Administering clinical trials
  • Payments and transaction
  • Online services
  • Security and protection of rights
  • Planning and implementing business transactions
  • Internal business purposes
  • Legal and regulatory

Sensitive Personal Information. Notwithstanding the purposes described above, we do not use or disclose sensitive personal information beyond the purposes expressly authorized by the CCPA. Accordingly, we only use and disclose sensitive personal information as reasonably necessary (i) to perform our services requested by you, (ii) to help ensure security and integrity, including to prevent, detect, and investigate security incidents, (iii) to detect, prevent and respond to malicious, fraudulent, deceptive, or illegal conduct, (iv) to verify or maintain the quality and safety of our services, (v) for compliance with our legal obligations, (vi) to our service providers who perform services on our behalf, and (vii) for purposes other than inferring characteristics about you.

Sales and Sharing of Personal Information

We may share identifiers, profiles and inferences about you with third-party advertising companies and social networks for them to use to target advertising to you based on your activity across websites, applications and other services “cross-context behavioral advertising.” We do this to improve and evaluate our advertising campaigns and to better reach health care providers and practitioners with more relevant content. We do not share for cross-context behavioral advertising any personal information about individuals who we know are under sixteen (16) years old, nor do we sell any personal information. To exercise the right to opt-out of our sale/sharing of personal information for cross-context behavioral advertising, please see the California Privacy Supplement.

Opt-Out Preference Signals. Our websites respond to browser opt-out preference signals sent through a browser connected with a specific device. If you have an opt-out preference signal enabled for your browser and specific, your personal information will not be accessed by or shared through cookies and pixels on our websites.

California Residents’ Rights. Under the CCPA, California residents have the following rights (subject to certain limitations):

  • To opt out of sales/sharing: To opt-out of our sale and sharing of their personal information for cross-context behavioral advertising.
  • To request deletion: to request deletion of their personal information, subject to certain exceptions.
  • To know/access: to know what personal information we have collected about them, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about them.
  • To request correction: to request correction of inaccurate personal information.
  • Non-discrimination: to not be subject to discriminatory treatment for exercising their CCPA rights.

To exercise any of these rights, refer to the Your Choices and Rights section of the US Privacy Policy.