U.S. Caris MPI, Inc. d/b/a Caris Life Sciences and its affiliates and subsidiaries (collectively, “Caris”) is committed to adhering to the principles as set in the General Data Protection Regulation (“GDPR”), the United Kingdom (UK) GDPR, and the Swiss Federal Data Protection Act.

Caris has committed to cooperate with UK, EU data protection authorities (DPAs) and Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to complaints concerning personal information (PI) transferred to the U.S. from the UK, E.U. Members and/or Switzerland. In addition, Caris will adhere to the following:

• Caris will only use the select Non-HR personal information (PI) and HR PI (such as name, address, date of birth, gender, and certain health information) Caris collects for the purposes of providing Caris’ products and services or other purposes consistent with your authorization or consent. Caris will notify patients whose Non-HR PI may be transferred to the U.S. from the UK, E.U. Members and/or Switzerland of what steps Caris takes to protect such PI. Caris will also notify patients whose Non-HR PI may be transferred to the U.S. from the UK, E.U. Members and/or Switzerland that Caris may be required to disclose PI in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. Caris will provide the same types of notice to employees whose HR PI may be transferred to the U.S. from United Kingdom, E.U. Members and/or Switzerland.

• Caris will provide patients & employees whose PI will be transferred to the U.S. from the UK, E.U. Members and/or Switzerland an opportunity to opt into and/or out of certain disclosures, including transfer of PI to a third party. If any UK/E.U. Member/Swiss PI is transferred to a third party, such third party will also adhere to the Principles and enter into any required contractual arrangements. Caris remains liable if Caris’ agents process Non-HR PI or HR PI inconsistent with the principles, unless Caris is not responsible for the event giving rise to the damage.

• Caris will ensure that patients & employees whose PI has been transferred to the U.S. from the UK, E.U. Members and/or Switzerland have the opportunity to review and amend their own PI (where it remains PI, i.e., in identifiable form) by contacting Caris at privacy@carisls.com or in writing at Caris Life Sciences, Privacy Officer, 750 West John Carpenter Freeway, Suite 800, Irving, Texas 75039.

This privacy policy will explain how Caris uses the personal data we collect from you when you use our website and our products and services.

Topics:

• What data do we collect?
• How do we collect your data?
• How will we use your data?
• How do we store your data?
• Marketing
• What are your data protection rights?
• What are cookies?
• How do we use cookies?
• What types of cookies do we use?
• How to manage your cookies
• Privacy policies of other websites
• Changes to our privacy policy
• How to contact us
• How to contact the appropriate authorities

What data do we collect?

Caris collects the following data:

• Personal identification information such as name, address, date of birth, gender, and certain health information for the purposes of providing Caris’ products and services.

How do we collect your data?

You directly provide Caris with most of the data we collect. We collect data and process data when you:

• Voluntarily provide feedback on any of our message boards or via email.
• Use or view our website via your browser’s cookies.

Caris may also receive your data indirectly from the following sources:

• Through orders placed by physicians for molecular testing.

How will we use your data?

 Caris collects your data so that we can:

• Process your order and manage your account.
• If you agree, Caris will share your data with our partner companies so that they may offer you their products and services.

How do we store your data?

• We are based in the United States and any information collected through the services we provide is stored and processed in the United States. If you are located in the UK, E.U. Members and/or Switzerland, you understand that in using our services, your personal data will be transferred to and processed in the United States.

• We’ve taken appropriate safeguards to ensure that your personal data remains protected when it is processed in the United States and is stored in accordance with applicable data protection laws.

Marketing

• If you have agreed to receive marketing, Caris may send you information about products and services of ours that we think you might like, as well as those of our partner companies. You may always opt out at a later date. You have the right at any time to stop Caris from contacting you for marketing purposes.
• If you no longer wish to be contacted for marketing purposes, please contact us at InternationalSupport@carisls.com.

What are your data protection rights?

Caris would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

• The right to access – You have the right to request Caris for copies of your personal data. We may charge you a small fee for this service.

• The right to rectification – You have the right to request that Caris correct any information you believe is inaccurate. You also have the right to request Caris to complete information you believe is incomplete.

• The right to erasure – You have the right to request that Caris erase your personal data, under certain conditions.

• The right to restrict processing – You have the right to request that Caris restrict the processing of your personal data, under certain conditions.

• The right to object to processing – You have the right to object to Caris’s processing of your personal data, under certain conditions.

• The right to data portability – You have the right to request that Caris transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email: privacy@carisls.com

Or write to us:
Caris Life Sciences, Privacy Officer
750 West John Carpenter Freeway, Suite 800
Irving, Texas 75039, USA

What are cookies?

Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our websites, we may collect information from you automatically through cookies or similar technology.

How do we use cookies?

Caris uses cookies in a range of ways to improve your experience on our website, including:

• Keeping you signed in
• Understanding how you use our website

How to manage cookies

You can set your browser not to accept cookies, and the above website tells you how to remove cookies from your browser. However, some of our website features may not function as a result.

For detailed information about how we use and collect cookies, please review our Cookies Policy at https://www.carislifesciences.com/about/cookies-policy/

Privacy policies of other websites

The Caris website contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.

Changes to our privacy policy

Caris keeps its privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on July 20, 2022.

How to contact us

If you have any questions about Caris’s privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.

Email us at: privacy@carisls.com
Or write to us at:
Caris Life Sciences, Privacy Officer
750 West John Carpenter Freeway, Suite 800
Irving, Texas 75039, USA

How to contact the appropriate authority

Should you wish to report a complaint or if you feel that Caris has not addressed your concern in a satisfactory manner, you may contact the respective Information Commissioner’s Office.

United Kingdom: https://ico.org.uk/
European Union: https://edps.europa.eu/
Switzerland: https://www.edoeb.admin.ch/