UCB U.S. Privacy Notice

Effective Date: August 13, 2026

This privacy notice(“Notice”) describes how UCB, Inc. (“UCB,” “we,” “our,” or “us”) collects, uses, and discloses “personal information” (as that term is defined by applicable law) about You, as patients, healthcare providers, website visitors, and/or reporters of safety information in the U.S. and is a supplement to our Global Privacy Notice, available here: https://www.ucb.com/privacy-policies. Residents of certain U.S. states may have additional rights under applicable law. Please see Sections 11 12, and 13 for more information.

UCB is not a healthcare provider (e.g., a doctor, hospital, pharmacist, etc.) and is generally not subject to the Privacy Rule under the Health Insurance Portability and Accountability Act, commonly known as HIPAA, which imposes additional requirements on healthcare providers relating to protected health information. Certain UCB vendors, platforms, programs, or partners may be subject to additional privacy requirements, contractual safeguards, patient authorization requirements, consumer health data obligations, or program-specific notices depending on the context.

Personal Information We Collect

How and Why We Use Your Personal Information

Personal Information We Disclose to Other Parties

Retention of Personal Information

Online Tracking Technologies

How We Protect Your Personal Information

Children’s Privacy

Do Not Track Signals

Contact Us

Changes to the Notice

Additional Disclosures for Residents of California

Additional Disclosures for Residents of Nebraska, Connecticut, and Texas

Consumer Health Data Cross Reference

1. Personal Information We Collect

We collect information in connection with certain use of our products and services, such as when you visit our website (“Site”) or engage with us as a patient, healthcare provider, and/or reporter of safety information (collectively, the “Services”). “Personal information” or “Personal Data” means information that identifies You or could reasonably be used to identify You, and which is collected and/or maintained by UCB in an accessible form. Although the types of Personal Information We collect and share depend on the nature of Your relationship with UCB, as well as requirements of applicable laws, below are general categories of Personal Information that We may collect (either directly or indirectly):

• Identifiers, such as your name, postal address, unique personal identifier such as a UCB product identifier/code (e.g., a lot number) or your clinical study identifier, online identifier, IP address, email address, phone and fax numbers, or other similar identifiers.
• General Personal information, such as signature and physical characteristics or description.
• Characteristics of protected classifications under federal law, such as gender, age, nationality, sex, and disability status.
• Commercial information, such as products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
• Internet or other electronic network activity information, such as information regarding your interaction with any websites associated with UCB, such as cookies and other tracking technologies.
• Geolocation data, such as your state or country.
• Audio, electronic, visual, thermal, olfactory, or similar information, such as photographs or image recordings.
• Professional information, such as income, area of expertise, title, publications, educational background and expertise, organizational affiliation, and professional license number (National Provider Identifier (NPI) or Your DEA Registration number).
• Preferences, such as communications preferences, preferences related to your use of our Services, and any other preferences or requests you provide when interacting with us.
• Communications and interactions, such as your contact information, message, the nature of your inquiry, and any other information you choose to provide.
• Sensitive data, such as login details, racial or ethnic origin, health information (e.g., health insurance information, date of Your medical diagnosis or information related to medication(s) taken or other treatment(s) such as Your experience with certain therapies), bank account number, and genetic data. Other information defined as sensitive under applicable law, we may also collect other information defined as sensitive, health-related, or consumer health data under applicable law, where permitted and as described in this Notice or a separate applicable notice.

We collect Personal Information in different ways, including:

• Directly from you, such as when you use the Services or otherwise contact us.
• Automatically as you interact with our online Services, including through the use of cookies, pixel tags, and other similar technology.
• From our business partners and service providers.
• From authorized third-party sources such as your health care provider, employer, or an agent or third party acting on your behalf.

The specific types and sources of Personal Information depend on the Service and your interaction with us.

[Top]

2. How and Why We Use Your Personal Information

We may use Your Personal Information for the following business purposes:

• Providing you with the Services, including Our patient support programs.
• Account program registration, profile, and preference management, such as enabling you to register for programs, create or manage a profile where available, manage communication preferences, and participate in services or support programs.
• Communicating with You and providing support, such as to provide You information about the Services and to address Your inquiries and feedback, requests, and other communications You send us and We send You.
• Marketing, advertising, and profiling, such as to send you promotional communications about our Services, including new offerings and other information that you sign up to receive.
• Operating, evaluating, and improving our business, such as performing accounting, auditing, record keeping, and other internal functions; conducting research and surveys; developing new Services; and analyzing and improving Our Services.
• Complying with law, such as to comply with legal obligations and process and contractual obligations, as well as our policies.
• Identification and authentication, such as to verify your identity and to protect the security of your personal information.
• Exercising our legal rights where it is necessary to do so, for example to detect, prevent and respond to fraud claims, intellectual property infringement claims, or violations of law or our terms and conditions.
• Security and fraud monitoring, such as to safeguard our Services and business operations; to prevent and detect fraud, unauthorized access or activities, and other forms of misuse; and, where necessary, to investigate, prevent, or take action against illegal activities, suspected fraud, potential threats to the safety or legal rights of individuals or third parties, or violations of our Privacy Notices.
• General business and operational support, such as to assess and implement mergers, acquisitions, reorganizations, bankruptcies, and other business transactions such as financings, and to administer our business, accounting, auditing, compliance, recordkeeping, and legal functions.
• Protecting against harm as we deem necessary to protect the rights and safety of us, you, or others.

We also use the information in other ways for which we provide specific notice at the time of collection and obtain Your consent to the extent required by applicable law. We may aggregate or de-identify any information collected about You so that it no longer allows to identify You directly or indirectly. We do this to protect Your privacy and the security of Your information, and We may use and share that aggregated or de-identified information for any purpose, for example to conduct research and analytics, improve Our Services and the user experience, and develop new offerings. We also may share aggregate or de-identified information with third parties, including advertisers and investors.

When We maintain and use de-identified data, We will not attempt to re-identify You, unless expressly permitted or required by applicable law.

You may choose not to provide Your Personal Information to UCB, but in general, some information about You is required in order for You to interact with UCB. Examples include: a Website registration process; a request to subscribe to a newsletter; asking a question to UCB; or to initiate a transactions on our Website. If You choose not to provide certain Personal Information to UCB it may not be possible to respond to Your query or transaction.

[Top]

3. Personal Information We Disclose to Other Parties

We may disclose certain categories of Your Personal Information to other parties, including our service providers, business partners, or affiliates in order to achieve Our business purposes as follows:

• Service providers and business partners: We engage service providers and business partners to assist Us with operating our businesses and providing You with Our Services. These service providers or business partners may provide technology support, analyze information, and conduct other business activities. We require service providers and contractors to process personal information only as instructed by UCB and not for their own independent purposes unless separately disclosed and permitted by applicable law. Where we permit a business partner or third-party provider to process personal information for its own purposes, such processing is subject to appropriate contractual safeguards and may be governed by that third party’s own privacy notice and legal obligations.
• UCB companies: We may disclose Your Personal Information to other UCB entities for marketing purposes, security, compliance, optimization of Services, and internal reporting. Unless otherwise specified, UCB entities will only use Your information in the ways described in this Notice.
• Marketing and Analytics Providers: We may disclose or make available Personal Information to third-party platforms and providers that we use to provide or make available certain features or portions of the Services, or as necessary to respond to your requests. We may also make Personal Information available to third parties to support our marketing, analytics, advertising, and campaign management.
• To comply with law or cooperate with reasonable legal and regulators’ requests: We may disclose Your Personal Information to law enforcement agencies, courts, other government authorities or other third parties where We believe necessary to comply with a legal obligation or a regulator’s request. We may disclose personal information as we deem reasonably necessary to support lawful investigations or otherwise to protect our rights or the rights of you or any other party.
• Security and Protection of Rights: We may disclose Personal Information where we believe it is necessary to protect the Services, our rights and property, or the rights, property and safety of others. For example, we may disclose Personal Information in order to (i) prevent, detect, investigate and respond to fraud, unauthorized activities and access, illegal activities, and misuse of the Services, (ii) situations involving potential threats to the health, safety, or legal rights of any person or third party, or (iii) enforce, and detect, investigate and take action in response to violations of our Terms of Service. We may also disclose information, including Personal Information, related to litigation and other legal claims or proceedings in which we are involved, as well as for our internal accounting, auditing, compliance, recordkeeping, and legal functions.
• In the context of a transaction: We may disclose Your Personal Information to potential transaction partners, service providers, advisors, and other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which We are acquired by or merged with another company or We sell or transfer all or a portion of Our assets or business.

• As is otherwise described in this Privacy Notice or at the point of collection.

   

[Top]

4. Retention of Personal Information

We will keep Your Personal Information for as long as We have a relationship with You or until We no longer need it to fulfil the purposes for which it was collected, in accordance with our retention policies. Once Our relationship with You has come to an end or We no longer need the information to fulfil the purposes for which it was collected, we will retain Your Personal Information for a period of time that enables us to:

• Maintain business records for audit purposes.
• Perform internal research to assess and improve our business in accordance with applicable law.
• Comply with record retention requirements under the law, other relevant legal requirements, industry guidelines, or our internal document retention Notice.
• Defend or bring any existing or potential legal claims.

• Deal with any complaints regarding the Services.

   

[Top]

5. Online Tracking Technologies

We may use cookies, pixels, tags, web beacons, SDKs, scripts, server logs, local storage, link decoration, and similar technologies to operate our websites, remember preferences, measure performance, analyze usage, support advertising and campaign measurement, understand engagement, and improve our services.

On patient facing, caregiver facing, HCP facing, or other health related digital properties, because activity on patient facing, caregiver facing, HCP facing, or other health related digital properties may reveal or imply health related interests, conditions, treatments, or services, UCB evaluates such uses under applicable law and may implement additional notice, consent, configuration, vendor, or other controls as appropriate.

We use these automated technologies to collect information about Your devices, browsing actions, and usage patterns. The information We obtain in this manner includes IP address, device ID, and other identifiers associated with Your device, device type, device characteristics (such as operating system), the pages You visited on Our Sites, how You arrived at Our Sites, browser preferences and characteristics, clickstream data and other information about Your online activities. When You use Our online Services, both We and certain third parties (such as analytics providers) collect information about Your online activities, over time and across third-party websites, to analyze and improve Our services. We do this in accordance with applicable law.

You can manage Your preferences by using Our Privacy Preference Settings. Your browser may tell You how to be notified when You receive certain types of cookies or how to restrict or disable certain types of cookies. Note, however, that without cookies, You may not be able to use all of the features of our website. For mobile devices, You can manage how Your device and browser share certain device data by adjusting the privacy and security settings on Your mobile device.

With respect to analytics cookies, we use Google Analytics services on our Sites. To learn more about Google Analytics and how to opt out, visit: https://policies.google.com/technologies/partner-sites.

You can also download the Google Analytics Opt-out Browser Add-on to prevent their data from being used by Google Analytics at https://tools.google.com/dlpage/gaoptout.

[Top]

6. How We Protect Your Personal Information

We maintain administrative, technical, and physical safeguards designed to protect the personal information you provide against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use. Please be aware that despite our efforts, no data security measures can guarantee security.

[Top]

7. Children’s Privacy

UCB’s websites are designed for a general audience and are not directed at children under the age of 13. We do not knowingly collect or solicit personal information from children under the age of 13 through UCB’s websites. If you believe that a child under the age of 13 may have provided us with personal information, contact us as specified in the Contact Us section of this Notice. We encourage parents to talk to their children about their use of the Internet and the information they disclose via the Internet.

[Top]

8. Do Not Track Signals

Notice Our Site does not currently respond to web browser ‘Do Not Track’ signals. Do Not Track signals are distinct from Global Privacy Control and other legally recognized opt-out preference signals. Where required by applicable law and technically enabled, we process recognized opt-out preference signals as described in the ‘Opt-Out of Sale/Sharing and Targeted Advertising’ section.

[Top]

9. Contact Us

If you have questions about this Notice or our use of Your Personal Information, please contact us at dataprivacy@ucb.com, or at UCB, Inc., Attn: UCBCares, 1950 Lake Park Drive, Smyrna, GA 30080, or contact Us by email or telephone, or use our webform (located here) to access Your privacy rights.

[Top]

10. Changes to the Notice

We may modify or update this Notice from time to time. We encourage You to visit this Notice at least once per year to learn about any changes to the way We collect, use, or disclose Your Personal Information. If We make a material change to this Notice, We will take reasonable steps to notify You, as required by applicable law.

[Top]
 

11. Additional Disclosures for Residents of California

This section applies to Your Personal Information if You are a resident of California and supplements the other sections of this Notice, in case of conflict.

For information on the categories of Personal Information that We have collected in the past 12 months, the purposes for which We process that Personal Information, and how We disclose that Personal Information, please refer to Sections 1, 2, and 3 of this Notice. We use and disclose sensitive data, as defined in Section 1, only for purposes expressly permitted under California law.

We may disclose Your Personal Information to third parties for the business purposes outlined in Section 2 of this Notice. We also may “sell” or “share” information about Your website interactions that is collected after the effective date of this Privacy Notice (but not including sensitive data), as defined by applicable law, with third parties for those business purposes. In the preceding twelve (12) months, we may have disclosed Your Personal Information for a business purpose, or sold or shared website visitors’ Personal Information, to the following categories of third parties:

We do not have actual knowledge that We sell or share Personal Information of minors under 16 years of age.

Disclosures of Personal Information. We may disclose each category of personal information we collect to our service providers and contractors who perform functions on our behalf (e.g., for purposes of IT services, data storage, etc.).

Sources of Personal Information. We generally collect personal information from the following categories of sources: directly or indirectly from you; business partners; service providers; and from authorized third-party sources, such as your health care provider, employer, or an agent or third party acting on your behalf.

Purposes for Collection, Use, and Disclosure. As described in Section 2, How and Why We Use Your Personal Information, in general, we collect and otherwise process personal information for the following business or commercial purposes, or as otherwise directed or consented to by you:

• Providing you with the Services;
• Account Creation and management;
• Communicating with You and providing support;
• Marketing, advertising, and profiling;
• Operating, evaluating, and improving our business;
• Complying with law;
• Identification and authentication;
• Exercising our legal rights;
• Security and fraud monitoring;
• General business and operational support; and
• Protecting against harm.

Sensitive Personal Information. Notwithstanding the purposes described above, we do not collect, use, or disclose “sensitive personal information” beyond the purposes authorized by applicable privacy law. Accordingly, we only use and disclose sensitive personal information as reasonably necessary and proportionate: (i) to perform our services requested by you; (ii) to help ensure security and integrity, including to prevent, detect, and investigate security incidents; (iii) to detect, prevent and respond to malicious, fraudulent, deceptive, or illegal conduct; (iv) to verify or maintain the quality and safety of our services; (v) for compliance with our legal obligations; (vi) to our service providers who perform services on our behalf; and (vii) for purposes other than inferring characteristics about you.

Retention. As further described in Section 4 above, we retain the personal information we collect only as reasonably necessary for the purposes described above or otherwise disclosed to you at the time of collection. When deciding how long to keep your personal information, we consider whether we are subject to any legal obligations (e.g., any laws that require us to keep records for a certain period before we can delete them) or whether we have taken any legal positions (e.g., issued any legal holds or otherwise need to preserve the information). Rather than delete your data, we may also de-identify it by removing identifying details. Where we have committed to maintaining and using personal information in a deidentified form, we agree not to reidentify deidentified data except as permitted by applicable law.

Your California Privacy Rights

You may have certain rights regarding Your Personal Information, subject to certain exceptions, as described below.

• Access. You have the right to request, twice in a 12-month period, that We disclose to You the categories of Personal Information We have collected about You, the categories of sources from which the Personal Information is collected, the business or commercial purpose for collecting, selling, or sharing Personal Information, the categories of third parties to whom We disclose Your Personal Information, and the specific pieces of Personal Information We have collected about You.
• Data Portability. You have the right to request that We provide You with a copy of Your Personal Information that We have collected about You in a structured and machine-readable format.
• Correction. You have the right to request that We correct the Personal Information We maintain about You if that information is inaccurate.
• Deletion. You have the right to request that We delete certain Personal Information We have collected from You.
• Opt-Out of Sale or Sharing. You have the right to opt-out of the sale or sharing of Your Personal Information. To opt out of the sale of Your Personal Information or sharing of Your Personal Information for cross-context behavioral advertising, click here or use the Global Privacy Control signal. Note that if You clear your cookies on a particular browser or device, You may need to re-submit Your opt-out request. Requests sent using the Global Privacy Control will apply to the device and browser from which they are submitted. For more information about the Global Privacy Control, please visit https://globalprivacycontrol.org/.

Exercising Your Privacy Rights

• Right to know, access, delete, correct. To exercise these rights, including to submit a request as an authorized agent on behalf of another individual, You may (i) email us at datasubjectrequest@ucb.com with the subject line “CA Privacy Rights Request”, or (ii) at UCB, Inc., Attn: UCBCares, 1950 Lake Park Drive, Smyrna, GA 30080, or (iii) contact Us by email or telephone, or (iv) use our webform (located here) to access Your privacy rights. If applicable based on UCB’s tracking configurations, UCB may disclose or make available website interaction information, including identifiers and internet or network activity information, to advertising, analytics, social media, and similar technology providers for advertising, measurement, analytics, campaign management, and related purposes. On health-related pages, such activity may require additional review because the information may be sensitive personal information or consumer health data under applicable law.

Verifying Requests.

To help protect Your privacy and maintain security, We will take steps and may require You to provide certain information (such as the nature of Your relationship with UCB and other identifying information) to verify Your identity before granting You access to Your Personal Information or complying with Your deletion or correction request. If You designate an authorized agent to make an access, correction, or deletion on Your behalf, We may require You to provide the authorized agent written permission to do so and to verify Your own identity directly with Us (as described above).

• Right to Opt-Out of Sales and Sharing. To exercise your right to opt-out of the “sale” or “sharing” of your personal information targeted advertising, or certain disclosures of information through cookies, pixels, analytics, advertising, and similar tracking technologies, please use the “Your Privacy Choices” link in the footer of the applicable Site. The link will direct you to our preference center, where you can manage your cookie and tracking preferences. In addition, where required by applicable law and technically enabled, we will process recognized opt-out preference signals, such as Global Privacy Control ("GPC"), in accordance with applicable law.

In addition, where required by applicable law and technically enabled, if we detect that your browser or device is transmitting a recognized opt-out preference signal, such as Global Privacy Control, we will process that signal in accordance with applicable law. More information about GPC is available at: https://globalprivacycontrol.org/.

Additional Information.

If You choose to exercise any of Your rights under the CCPA, we will not discriminate or retaliate against you for exercising such rights. To the extent permitted by applicable law, We may charge a reasonable fee to comply with Your request.

[Top]

 

12. Additional Disclosures for Residents of Connecticut, Maryland, Nebraska, and Texas

This section applies to Your Personal Information if You are a resident of Connecticut, Maryland, Nebraska, or Texas and supplements the other sections of this Notice, in case of conflict.

For information on the categories of Personal Information that We collect, the purposes for which We process that Personal Information, and how We disclose that Personal Information to third parties, please refer to Sections 1, 2, and 3 of this Notice.

Sales of Personal Information

While we do not disclose personal information to third parties in exchange for monetary compensation, our use of third-party analytics and advertising cookies may be considered “selling” under applicable U.S. privacy laws. We may “sell” the following categories of personal information: identifiers and Internet and network activity information. We may disclose these categories to third-party advertising networks and analytics providers for purposes of marketing and advertising, to improve and measure our ad campaigns, and to better understand user activity on our Sites. You may opt out of the sale of your personal information as further described below.

Subject to certain exceptions, You have the following rights with respect to Your Personal Information:

• Access: the right to request that We confirm whether We process Your Personal Information and that We provide You access to such Personal Information.
• Data Portability: the right to request that We provide a copy of Your Personal Information in a portable and, to the extent technically feasible, readily usable format.
• Correction: the right to request that We correct inaccuracies in the Personal Information that We process.
• Deletion: the right to request deletion of Your Personal Information.
• Opt-Out: the right to opt out of certain types of processing, including:
  • To opt out of “sale” of personal information;
  • to opt out of targeted advertising by us;
  • to opt out of any processing of personal information for purposes of making decisions that produce legal or similarly significant effects.
• Revoke Consent. If you have provided your consent in order for us to process your personal information, you may revoke such consent.

You may submit requests to exercise Your other rights by emailing Us at datasubjectrequest@ucb.com or at UCB, Inc., Attn: UCBCares, 1950 Lake Park Drive, Smyrna, GA 30080, or contact Us by email or telephone, or use our webform (located here) to access Your privacy rights.

We will respond to your request as required under the applicable U.S. privacy law(s). When you submit a request, we will take steps to verify your identity and your request by matching the information provided by you with the information we have in our records. In some cases, we may request additional information in order to verify your identity, or where necessary to process your request. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for the denial.

You may also designate someone as an authorized agent to submit requests and act on your behalf. Authorized agents will be required to provide proof of their authorization, and we may also require the relevant consumer to directly verify the identity and authority of the authorized agent.

You may also have the right to appeal a refusal to take action on Your request by emailing Us at dataprivacy@ucb.com with the subject line “Appeal of Rights Request Decision.”

[Top]

13. Consumer Health Data Cross Reference

Where UCB collects consumer health data subject to Washington, Nevada, Connecticut, Maryland, or other consumer health privacy laws, UCB will provide a separate Consumer Health Data Privacy Notice or Notice describing applicable categories, purposes, sources, sharing, rights, and choices. Do not rely on this general Privacy Notice alone where a separate consumer health data notice is required.

[Top]

UCB Consumer Health Data Privacy Policy

This Consumer Health Data Privacy Policy provides information regarding how UCB Inc. (“UCB,” “we,” “our,” or “us”) processes “consumer health data” and analogous terms as defined by applicable consumer health data privacy laws.

In the event of a conflict between UCB’s Privacy Notice, available here: https://www.ucb.com/privacy-policies, or other privacy notices, including the US Privacy Notice Addendum, available here: https://www.ucb-usa.com/policy, and this Consumer Health Data Privacy Policy, this Consumer Health Data Privacy Policy will control with respect to the processing of consumer health data subject to such laws.

Note that this policy does not apply to personal information that is not subject to applicable consumer health data privacy laws, including to information that is specifically exempt from applicable consumer health data privacy laws, which includes, among other things, information collected in connection with a clinical trial or research study.

Table of Contents

Consumer health data we collect

How we use consumer health data

Sources of consumer health data

How we share consumer health data

Third parties and affiliates with which we share consumer health data

How to exercise your rights

Requesting Changes to Consumer Health Data

Third-Party Collection and Tracking Technologies

Changes to this Consumer Health Data Privacy Policy

Security and access controls

1. Consumer health data we collect

We collect consumer health data in connection with certain of our products and services, such as when you visit our website, participate in patient support programs, or contact us directly (collectively, the “Services”). The type of consumer health data depends on the Service and your interactions with us. Examples of consumer health data that we may collect, depending on the Service and your interaction with us, include:

• Information about your health-related conditions, diseases, symptoms, status, diagnoses, diagnostic testing, treatments, or medications;
• Information about social, psychological, behavioral, and medical interventions, including use or purchase of prescribed medication;
• Information about your health-related surgeries or procedures;
• Measurements of health characteristics, bodily functions, vital signs, symptoms, or measurements of physical or mental health status;
• Genetic data meaning any data, regardless of its format, that concerns a consumer’s genetic characteristics;
• Biometric data, where collected or processed in a health-related context and capable of identifying you, either alone or in combination with other data;
• Information that could identify you seeking health care services, such as visits to our website or use of our Services; and
• Other information that may be used to infer or derive data related to the categories above, where permitted and disclosed as required by applicable law.

[Top]

2. How we use consumer health data

We primarily collect and use consumer health data as necessary to provide you with products or services that you request, in accordance with applicable law, or for other purposes for which we obtain your consent as required by applicable law. This may include the following:

• providing you with our Services;
• communicating with you and providing support, such as to provide you information about the Services, address your inquiries and feedback, requests, and other communications you send us, and provide you with customer support services;
• operating, evaluating, and improving our business, such as to perform accounting, auditing, record keeping, and other internal functions, conducting research, developing new products and services, analyzing and improving our Services, and personalizing your experience, as well as to consider and implement mergers, acquisitions, reorganizations, bankruptcies, and other business transactions;
• complying with rules and laws, such as to comply with legal obligations and process, contractual obligations, and our policies and terms and conditions, as well as to respond to legal process and related legal proceedings;
• Any other lawful purpose for which we obtain your consent.

We may also collect and use consumer health data as necessary to protect the rights and safety of us, our affiliates, you, or others, such as to:

• Prevent, detect, protect against, or respond to security incidents, identity theft, fraud, harassment, malicious or deceptive activities, or any activity that is illegal under applicable state law or federal law;
• Preserve the integrity or security of our systems; and
• Investigate, report, or prosecute those responsible for any such action that is illegal under applicable state law or federal law.

We may deidentify consumer health data so that it cannot reasonably be reidentified by us or by another person, and we may use this deidentified data for any reason permitted by applicable law, including but not limited to research, analytics, and product development purposes, provided such uses comply with all applicable legal requirements and, where necessary, are based on your consent. If we deidentify information that was originally based on consumer health data, we maintain and use that information in deidentified form and will not attempt to reidentify the data, except as otherwise permitted under applicable law.

[Top]

3. Sources of consumer health data

We collect consumer health data from the following sources:

• Directly from you, such as when you use the Services;
• Automatically as you interact with our online Services;
• From our affiliates, business partners, or service providers, such as third-party patient support vendors; and
• From authorized third-party sources, such as healthcare providers (e.g., your physicians or clinics, pharmacies).

The specific sources of consumer health data depend on the Service and your interaction with us.

[Top]

4. How we share consumer health data

We may share each of the categories of consumer health data described in this Consumer Health Data Privacy Policy as necessary to provide you with a product or service you request, with your consent, or for certain security-related purposes, as described above in the “How we use consumer health data” section. We may also share consumer health data:

• To provide, administer, support, and improve the Services, including with service providers, vendors, affiliates, business partners, healthcare providers, pharmacies, and patient support vendors that help us operate programs, respond to requests, provide support, maintain systems, perform business operations, and otherwise carry out the purposes described in this Policy;
• To comply with law or cooperate with lawful requests: We may share your consumer health data with law enforcement agencies, courts, other government authorities or other third parties where we believe necessary to comply with a legal or regulatory obligation. We may share consumer health as we deem reasonably necessary to support lawful investigations or otherwise to protect our rights or the rights of you or any other party.
• In the context of a business transfer: We may share your consumer health data with potential transaction partners, service providers, advisors, and other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell or transfer all or a portion of our assets or business.

[Top]

5. Third parties and affiliates with which we share consumer health data

As necessary for the purposes described above, we share consumer health data with the following categories of third parties and affiliates:

• UCB affiliates, which are publicly listed and accessible at;
• Our agents, service providers, suppliers, and other business partners who assist in delivering our products and services;
• Parties to a business transfer;
• Third parties such as government agencies and law enforcement in response to valid legal process or other third parties as necessary to protect us, our affiliates, you, or others; and
• Other third parties as necessary to provide the services or products you requested or with your consent.

[Top]

6. How to exercise your rights

Subject to applicable law and exceptions, you may have the right to:

• Confirm whether UCB collects, shares, or sells consumer health data about you;
• Access consumer health data about you;
• Receive a list of third parties and affiliates with whom we have shared or sold consumer health data, and contact information or another legally required mechanism for contacting them where required;
• Request deletion of consumer health data about you;
• Withdraw consent for future collection or sharing of consumer health data;
• Request correction or changes to consumer health data where required or permitted by applicable law; and
• Appeal a denial of your request.

To exercise these rights, contact us at datasubjectrequest@ucb.com or at UCB, Inc., Attn: UCBCares, 1950 Lake Park Drive, Smyrna, GA 30080, or contact Us by email or telephone , or use our webform (located here) . We will use information you provide to verify your identity and may request additional information where necessary. If we deny your request, you may appeal by contacting dataprivacy@ucb.com with the subject line “Appeal of Consumer Health Data Request.” If your appeal is denied, you may contact the applicable state Attorney General.

[Top]

7. Requesting Changes to Consumer Health Data

You may request a change to your consumer health data by contacting us at datasubjectrequest@ucb.com. We will use information you provide in your request to verify your identity, and we may request additional information if necessary to complete the verification process.

[Top]

8. Third-Party Collection and Tracking Technologies

UCB does not intend for non-essential third-party tracking technologies to collect or share consumer health data through Services subject to this Policy unless the activity has been reviewed and configured in accordance with applicable law and UCB governance requirements. Where applicable law requires certain controls before third-party tracking technologies may collect or share consumer health data, UCB will implement those controls or will take steps to prevent the technology from operating for the affected Service or jurisdiction. For general information about cookies and tracking technologies, please see the Online Tracking Technologies section of the UCB U.S. Privacy Policy and the applicable cookie or privacy preference tool available on the relevant website.

[Top]

9. Changes to this Consumer Health Data Privacy Policy

We may modify or update this Consumer Health Privacy Policy from time to time. We encourage you to visit this Consumer Health Privacy Policy regularly to learn about any changes to the way we collect, use, or share your consumer health data. If we make a material change to this Consumer Health Privacy Policy, we will take reasonable steps to notify you as required by applicable law.

If you have questions about this Consumer Health Data Privacy Policy or would like to make a complaint to UCB, you can contact us at dataprivacy@ucb.com.

[Top]

10. Security and access controls

UCB maintains administrative, technical, and physical safeguards designed to protect consumer health data. We limit access to consumer health data to personnel, service providers, contractors, and other recipients who need access for the purposes described in this Policy or as otherwise permitted by applicable law.

[Top]