EFFECTIVE DATE: January 10, 2022

This Privacy Notice is intended for:

• Users of Emergent BioSolutions products and services;
• Visitors to Emergent BioSolutions and Emergent BioSolutions-owned websites / digital assets with the exception of our narcan.com and narcannasalspray.ca websites;
• Individuals who are interested in contacting or are being contacted by Emergent BioSolutions in relation to its products and services;
• Individuals who order or make inquiries regarding any of our products;
• Individuals who report a concern through our third-party vendor, Converscent.

Emergent BioSolutions respects your privacy and is committed to protecting your personal data.  This Privacy Notice describes how Emergent BioSolutions Inc. (hereafter “Emergent”) collects, discloses, uses and protects any personal data that we collect.

For individuals located in Singapore:

• By interacting with us or our website;
• Submitting information to us;
• Signing up for or using any products or services offered by us;

in addition to any other lawful basis upon which we may handle your personal data, you agree and consent to us collecting and using your personal data and disclosing such personal data to our authorized service providers and relevant third parties, for the purposes set forth in this Privacy Notice.  Your consents provided to us here in accordance with this Privacy Notice supplement, but do not supersede nor replace, any other consents that you may have previously provided to us in respect of your personal data and are in addition to any right or basis which we may have under applicable law to collect, use and/or disclose your personal data.

We may collect the following categories of personal data relating to you as follows:

Information you provide directly to us

• Name, signature
• Personal contact information (e.g., personal email address, personal address, personal phone number)
• Professional contact information (e.g., title / occupation, business name, business address, business email address, business phone number, business fax number, National Provider Identifier (NPI) number)
• Professional credentials / education information (e.g., educational history, Medical / State License Number, License Status, DEA (Drug Enforcement Administration) /HIN (Health Industry Number) Number and expiration date)
• Online profile information
• Identifiable photograph or video
• Registration information – some of our services require registration to allow us to send you information, provide services or contact you regarding Emergent’s products and services.
• We may collect any other information you choose to provide to us, including correspondence you send to us or recorded testimonials you submit regarding your use of our products.

Information from third parties

• Name
• Professional contact information (e.g., title / occupation, business name, business address, business email address, business phone number, business fax number, National Provider Identifier (NPI) number)
• Professional credentials / education information (e.g., educational history, Medical / State License Number, License Status, DEA (Drug Enforcement Administration) /HIN (Health Industry Number) Number and expiration date)

Information we collect from our manufacturing sites and locations

• Visitor information – individuals visiting our manufacturing sites and locations complete a registration process.  In addition, Emergent facilities may employ the use of cameras for the purposes of safety and security and, in our manufacturing areas, quality control monitoring.

Information we collect automatically

• Online identifiers that correspond to your device(s) (e.g., IP address, device identifiers)
• Our websites may also collect internet or other electronic network activity information about your browser or mobile device automatically.  We may use cookies, web beacons, device identifies and similar technologies to help us understand your activity on our website.  Data we collect automatically includes (for example) your IP address, the name of the website from which you accessed the Emergent website and the date and time of your visit for the purposes of system administration and tracking.  For more information about the cookies and similar technologies we deploy on this website, please see the “Advertising, Cookies, and Similar Technologies” section below.
• We may collect inferences based on the information described above and other information described in this Privacy Notice.

We also collect, use and share aggregated data such as statistical or demographic data for various purposes.  “Aggregated data” refers to information that could be derived from your personal data but that will not directly or indirectly reveal your identity, e.g., aggregated data relating to all of our website visitors.

We may use and otherwise process your personal data provided to this website, including for the business purposes described in this section.  Where required by law, we will only collect, use and share your personal data where we are satisfied that we have an appropriate legal basis to do so.

We collect, use, disclose and process your personal data where it is necessary for the performance of a contract which you have entered into with us or respond to pre-contractual measures you have asked about, in particular for the following purposes:

• Responding to your requests and inquiries;
• Processing and responding to product orders; and
• Contacting you by email, regular mail, phone or text message to provide you with information about our products.

We also collect, use, disclose and otherwise process your personal data to comply with applicable legal requirements, including tax purposes, and where it is necessary for our legitimate interests for the following purposes:

• Creating customer profiles, based on our legitimate interests to know our customer base;
• Detecting, preventing and responding to potentially prohibited or illegal activities or other misuses of Emergent sites, based on our legitimate interests to ensure that our sites are used in an appropriate and legal manner; and
• To compile statistics about our website visitors and customers, based on our legitimate interests to conduct internal analysis and market research and improve the quality of the products and services we offer.

Emergent also may use your information for any other purposes disclosed to you at the time we collect your information or pursuant to your consent.

In certain circumstances, we may collect, use, disclose and/or otherwise process your personal data based on your consent.  If we have sought your consent to collect, use, disclose and/or otherwise process your personal data, you may subsequently withdraw it at any time by contacting us at the address listed below in the “How to Contact Us” section without affecting the lawfulness of collection, use, disclosure and/or otherwise processing based on consent before its withdrawal.

We will not discriminate against you for exercising your rights and choices, although some of the functionality and features available on this website may change or no longer be available to you.

We may disclose your personal data to third parties in certain cases:

• Other Emergent group companies.  We may share your personal data with other companies belonging to the Emergent group, who may use your personal data for the purposes and in a manner consistent with the information set out in this Privacy Notice.
• Service providers.  We may share or disclose your personal data to companies that provide services to us and our group companies, such as companies that operate this website on our behalf or for other business purposes such as customer service, market research, security and performance monitoring, data hosting, auditing, and data processing.  These service providers are not authorized by us to use or disclose the information except as necessary to perform services on our behalf or comply with legal requirements.
• Third parties where required by law.  We may disclose your personal data to a third party if it is necessary to comply with a legal obligation (e.g., our data breach notification requirements) or the decision of a judicial authority, a public authority or a government body, or if disclosure is necessary for national security, law enforcement or other issues of public importance.
• Business partners. We may disclose your personal data to our business partners if it is necessary for providing products and services to you.
• Third parties in connection with a business sale.  If we make a sale or transfer of assets, or are otherwise involved in a prospective or completed merger or business / asset transfer, we may transfer your personal data to one or more third parties as part of that transaction.
• Other third parties with your consent.  We may also share your personal data with other third parties when you consent to such sharing.

We do not sell your personal data to third parties.  We do disclose personal data for business purposes, including but not limited to services performed on our behalf to protect against fraud and malicious activity, and for other business purposes described in this Privacy Notice.  We do permit third parties to collect the information described above through the products and services to which this Privacy Notice applies.  We also disclose such information to third parties for business purposes as described in this Privacy Notice, including but not limited to providing advertising on the products and services to which this Privacy Notice applies and elsewhere based on users’ online activities over time and across different sites, services and devices (so-called “interest-based advertising”).  The information practices of these third parties are not covered by this Privacy Notice.  In addition, your information may be accessible to third parties with whom you interact or direct us to share your information through this website.

Your personal information may be collected, transferred to and stored by us in the United States and by our affiliates in other countries where we operate.  Your personal information may also be sent to third parties (see above).  Therefore, your personal information may be processed outside the European Economic Area (EEA) and/or Switzerland, and in countries which are not subject to an adequacy decision by the European Commission and which may not provide for the same level of data protection as the EEA and/or Switzerland.  In this event, we will use additional safeguards to ensure your data is protected, for instance by entering into standard contractual clauses for the transfer of data and, where needed, additional safeguards to ensure your data is protected.

Emergent uses reasonable procedural, technical and physical security measures to safeguard the personal data in our possession. Such measures are designed to protect your personal data from loss, unauthorized access, disclosure, alteration or destruction.  Although we take commercially reasonable precautions to protect the information we collect, no data transmission over the Internet can be guaranteed to be 100% secure.

We retain your personal data for the period necessary to fulfill the legitimate business purposes or uses outlined in this Privacy Notice in accordance with our data retention policy, unless a longer retention period is required or allowed by applicable data protection law or to otherwise fulfill a legal obligation.

We do not knowingly collect any information from children, as defined by applicable law, without parental consent or as otherwise permitted by applicable law.

Depending on where you live, you are entitled, in accordance with applicable law, to object to or request restriction of processing of your personal data, and to request access to, rectification, erasure, deletion, destruction and portability of your personal data. Requests should be submitted in writing to the address listed below in the “How to Contact Us” section or via our Personal Information Request Form.  Residents of California may also submit requests by calling 855-894-4986.

We will verify and respond to your request consistent with applicable law, taking into account the type and sensitivity of the personal information subject to the request.  For your protection, and to protect the privacy of others, we may need to verify your identity before completing what you have asked us to do.  We may need to request additional personal information from you, such as home address, email address and government issued ID, in order to protect against fraudulent or spoofed requests.  If you reside in California and would like to use an authorized agent to exercise your rights, we may request evidence that you have provided such agent with power of attorney or that the agent otherwise has valid written authority to exercise rights on your behalf.  If you reside in other jurisdictions (e.g., EEA, UK, Switzerland), the applicable law may also allow you to authorize a third party to exercise your rights.

If you are aware of changes or inaccuracies in your personal data, you should inform us of such changes so that the personal data may be updated or corrected.

Depending on where you live, you may also lodge a complaint with a supervisory authority if you consider that Emergent’s processing of personal data infringes applicable law.

Your Rights – EEA, UK, and Switzerland

If you are a resident in the European Economic Area, United Kingdom, or Switzerland, you have the right to:

• Opt-out of some collection or uses of your personal data, including the use of cookies and similar technologies, the use of your personal data for marketing purposes, and the anonymization of your personal data for data analyses;
• Access your personal data, rectify or complete it;
• Restrict or object to the processing of your personal data, or request its deletion;
• Receive the personal data you provided to us to transmit it to another company;
• Withdraw any consent provided;
• Lodge a complaint with your supervisory authority.

These rights are not absolute.  They may be subject to certain conditions and restrictions set out in applicable law.

Your Rights – California

Under the California Consumer Privacy Act, California residents have certain rights with respect to personal data about them we have collected.  If you are a California resident, you may exercise the following rights regarding your personal data, subject to certain exceptions and limitations:

• Right to access the personal data we have collected about you and learn our purpose in collecting it, the types of parties we may have disclosed it to, and other information about our processing practices;
• Right to request a copy of the personal information collected about you during the 12 months preceding your request;
• Right to request deletion of the personal data we have collected from you;
• Right not to receive discriminatory treatment for exercising the privacy rights conferred by the CCPA.

Your Rights – Canada

If you are a resident of Canada, you have the right to:

• Access your personal data and rectify it;
• Withdraw any consent provided;
• Where applicable, lodge a complaint with your supervisory authority.

Where required by law, we will obtain your consent before sending you direct marketing.  You can unsubscribe from receiving marketing emails at any time by clicking the “unsubscribe” link included at the bottom of each email.  To opt-out of text messages, please reply “STOP” to any text message you receive from us.   You can also adjust your email, text message, mail and telephone communication preferences with us by contacting us at the contact information provided in the “How to Contact Us” section below. Please note that you may continue to receive transactional or account-related communications from us.

When you use this website, we and our third party partners use cookies, pixel tags, local storage, and other similar technologies (collectively, “cookies”) to collect information from your browser or device.  To the extent permitted by law, by using this website, you consent to our use of cookies and similar technologies.

The following types of cookies are used on this website:

• Essential cookies – These cookies enable you to use this website.  These cookies are essential to enable you to browse our website and use certain features.  You can disable them through your browser settings.  Disabling them may prevent you from using certain parts of the website.  These cookies also help keep this website safe and secure.
• Preference cookies – These cookies store information such as your preferred country and language selection, login data and website preferences.  Without these cookies, our website may not be able to remember certain choices you’ve previously made (such as a saved country / language preference) or personalize your browsing experience by providing you with relevant information. These cookies can also be used to recognize your device so that you do not have to provide the same information more than once.
• Performance cookies – These cookies collect information about how you use this website such as which pages you visit regularly.  These cookies are used to provide you with a high-quality experience by doing things such as tracking page load, site response times, and error messages.
• Content / advertising cookies – These cookies gather information about your use of this website so we may improve your experience and provide you with more relevant content and advertising on this website and elsewhere online and across your devices.  They are also used to gather feedback on customer satisfaction through surveys.  They remember that you’ve visited this website and help us understand usage of this website.  Some of these cookies are from third parties that collect information about your use of this website in order to provide advertising (on this website and elsewhere, across your different devices) based on your online activities (so-called “interest-based advertising”) on this website and elsewhere online, across your different devices.  We do not control the privacy practices of these third parties, and their practices are not covered by this Privacy Notice.

We may also use web beacons (also known as pixel tags and clear GIFs) on our websites and in our HTML formatted emails to track the actions of users on our websites and interactions with our emails.   Web beacons are used to demonstrate that a webpage was accessed or that certain content was viewed to compile statistics about usage of our websites or the success of our marketing campaigns so that we can manage our content more effectively.

Some mobile and web browsers may be configured to transmit “do-not-track” signals to websites.  Because of differences in how web browsers incorporate and activate this feature, it is not always clear whether users intend for these signals to be transmitted, or whether they even are aware of them.  We currently do not take action in response to “do-not-track” or similar signals.  To find out more about “Do Not Track” please visit https://allaboutdnt.com/

If you do not wish to receive cookies, you may set your browser to reject cookies or to alert you when a cookie is placed on your device. You may also delete cookies as soon as you leave the website / digital asset.  Although you are not required to accept cookies when you visit our websites / digital assets, if you set your browser to reject cookies, you may not be able to use all of the features and functionality of the websites / digital assets.

You can learn more about how to manage your cookies by visiting the Help function of your browser, the settings of your mobile device or you can visit http://www.aboutcookies.org which provides detailed information on managing cookies on popular browsers, including how they are installed and how you can manage and delete them.

Emergent may amend this Privacy Notice from time to time to reflect changes in our practices, products and service offerings and/or any changes in legal or regulatory requirements.  If we modify our Privacy Notice, we will update the “Effective Date” and such changes will be effective upon posting.

If you have questions about this Privacy Notice, please contact us at privacy@ebsi.com or at the address below:

Emergent BioSolutions Inc.
Attention: Chief Ethics and Compliance Officer
400 Professional Drive, Suite 400
Gaithersburg, MD 20879
USA

If you are located in Canada or Singapore, our Data Protection Officer (DPO) may be contacted at privacy@ebsi.com or at the above mailing address.

Data subject requests may be submitted here