Website Privacy Policy

Effective date: June 5, 2015

Updated: November 1, 2022

THIS PRIVACY POLICY describes the type of information we collect from you when you visit our website, or request information from us.

PLEASE REVIEW IT CAREFULLY

Caris Life Sciences^® (referred to in this Website Privacy Policy as “Caris”, “we”, “us”, or “our”) and its affiliated online property CarisLifeSciences.com (“website”) collects information we get from your use of our website to provide better service to our users and to improve our business.

This privacy policy applies solely to information collected by this web site. It will notify you of the following:

• What personally identifiable information is collected from you through the website, how it is used and with whom it may be shared
• What choices are available to you regarding the use of your data
• The security procedures in place to protect the misuse of your information

Caris also has a separate Notice of Privacy Practices for how we collect and use medical information about you. This notice can be viewed by visiting the following link.

Information Collection, Use, and Sharing

Your access and continued use of this website signifies your consent to this Website Privacy Policy. If you do not agree to this Privacy Policy, do not use Caris’ website. Caris is the sole owner of the information collected on this website. We only have access to and collect information that you voluntarily give us via email or other direct contact from you. If you complete a web form on our website, we may use your contact information to tell you about our services or news about Caris Life Sciences. You may opt-out of certain promotional messages. However, certain communications are mandatory regarding our services such as service messages, critical notices, or legally mandated notices. We will not sell or rent this information to anyone.

When you use our website we may automatically collect and store certain information through the use of cookies and other similar technology. This information may include: details of how you used our website such as your navigation paths, pages visited, average time spent on page, search queries, internet protocol (IP) address, browser type or language, the date and time of your request and referral URL. Some of this data may uniquely identify your browser, mobile device, or operating system. This information may be used, for example, to alert you to software compatibility issues, or it may be analyzed to improve our website’s design and functionality. We use anonymous information such as web pages viewed, to look at trends in order to provide a better website experience and gather demographic information for aggregate use. We do not use this data in a manner that would identify you personally.

Certain pages on our website may allow you to leave comments. In order to leave your comments, you may be asked to create a profile which includes personally identifiable information and a screen name – the screen name may appear on our website.

Certain pages on our website allow you to share the content of that page using social media or email. If you share content from our site using your social media account, your unique social media alias related to any comments that you post will be displayed just like it is displayed in your social media account. Likewise, any content shared via our email sharing app will contain the email address you enter into the app. We do not access any other information from your social media or email accounts, and we do not directly post or share anything through your social media and email accounts.

Security

We take precautions to protect your information. When you submit sensitive information via the website, your information is protected both online and offline.

Wherever we collect sensitive information (such as credit card data), that information is encrypted and transmitted to us in a secure way.

While we use encryption to protect sensitive information transmitted online, we also protect your information offline. Only employees who need the information to perform a specific job (for example, customer service) are granted access to personally identifiable information. The computers/servers in which we store personally identifiable information are kept in a secure environment.

The Information We Collect and Cookie Usage

We may collect personal information about you, such as your name, and email address and other information that can be used to contact you. Certain features on this website use cookies to collect information. A cookie is a piece of data stored on a site visitor’s hard drive to help us improve your access to our site and identify repeat visitors to our site. Cookies can also enable us to track and target the interests of our users to enhance the experience on our site. You can set your browser to notify you when you receive a cookie, giving you the opportunity to decide whether to accept it. Usage of a cookie is in no way linked to any personally identifiable information on our site.

Third Party Sites

Our website may contain links to other sites. Our Website Privacy Policy only applies to CarisLifeSciences.com and we are not responsible for the privacy practices or the content of other websites. We also do not control the privacy policies and your privacy settings on third-party sites, including social networks. We encourage our users to be aware when they leave our site and to read the privacy statements of any other site that collects personally identifiable information.

De-identified Information

We may use your information to generate aggregated, de-identified or otherwise anonymous data, which does not directly identify and could not reasonably be used to identify any specific individual. There are specific rules under the law about what type of information needs to be removed before information is considered de-identified. Once the information has been de-identified as required by law, it is no longer considered personal information and not covered by this notice. We use this anonymous data to understand, develop, improve, and market our services, and it may be used or shared with third parties for any lawful purpose without further notice or compensation to you. We may disclose aggregated, de-identified or otherwise anonymous data about our users, which does not identify any individual, without restriction.

We maintain a database of de-identified health data from many patients, including de-identified DNA and RNA data, that is used to facilitate future health care discoveries. In connection with our laboratory testing services, we also typically retain leftover tissue, cells, and/or DNA or RNA extracted from your cells, which we use for internal purposes such as quality assurance and test validation. De-identified health data may be used and shared with our researchers and developers, as well as with third parties in or out of the United States, like academic researchers, universities, hospitals, laboratories, and life science, insurance, pharmaceutical, and other companies, all in accordance with applicable laws. These third parties may use the de-identified data for activities such as researching the causes of disease, developing new drugs and therapies, or helping pay for the cost of health care.

How We Share Information about Your Site Usage with Third Parties

Caris may share information related to your browsing habits on our website with its consultants, vendors and service providers who help us in maintaining our website and provide services. When we share your information to these third parties, we require them to use it only for the function they are helping us perform.

Caris will not sell, rent, loan or lease your personal information to others unless we have your permission or are required by law to do so.

We may share aggregated demographic information publicly and with our partners. This is not linked to any personal information that can identify any individual person. This information is used to help us analyze and use the data in marketing tools and/or advertising opportunities. For example, we may share information to show trends about the general use of our website (e.g. visitor site traffic, most visited pages).

If Caris becomes involved in a merger, acquisition or other transaction involving the sale of some or all of our assets, user information, including personal information collected from you through your use of our website, could be included in the transferred assets. Should such an event occur, we will use reasonable means to notify you, either through email and/or a prominent notice on the website.

California Privacy Rights

If you are a California resident, you have the right under the California Consumer Privacy Act (CCPA) to request and receive certain information about our practices with respect to the collection, use and sharing of personal information. For California residents, see our California Privacy Notice for information relating to your rights, including how to exercise your rights as a consumer under the CCPA.

EEA Privacy Rights

If you are located in the European Economic Area or another jurisdiction subject to the General Data Protection Regulation, Regulation (EU) 2016/679 (“GDPR”) or analogous European data protection laws, including the United Kingdom (collectively referred to here as “EEA”), you may have certain rights with respect to the personal information that we hold about you, which may include the right to access or correct (and sometimes, object to or delete) such information.

For purposes of this subsection, the terms “personal data”, “data subject”, “processing”, and “controller” have the meanings ascribed to them under GDPR. Terms defined under GDPR may differ in meaning from the common usage of the same terms used elsewhere in this Notice.

If you are in the EEA, when we process your personal data we will only do so in the following situations:

• We need to use your personal data to perform our responsibilities under our contract with you (e.g., to facilitate your participation in voluntary polls and surveys).
• We have a legitimate interest in processing your personal data. For example, we may process your personal data to send you marketing communications, to communicate with you about changes to our services, and to provide, secure, and improve our services.
• We find such processing is necessary to comply with our legal obligations.
• We have your consent to do so. When consent is the legal basis for our processing, you may withdraw such consent at any time.

You may have certain rights with respect to the personal data which we hold about you, including the right to access or correct (and sometimes, object to or delete) the information. If you wish to submit a request to review, correct, update, suppress, restrict or delete personal data that you have provided to us, object to the processing of personal data, or if you would like to receive an electronic copy of your personal data for purposes of transmitting it to another company (to the extent this right to data portability is provided to you by applicable law) you may contact us using the contact information below. We will respond to your request consistent with applicable law.

For your protection, we may only implement requests with respect to the personal data associated with the data subject making the request, or, for example, the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable. Please note that we may need to retain certain information for recordkeeping purposes or to complete any transactions that you began prior to requesting a change or deletion.

We retain personal data for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. The criteria used to determine our retention periods include:

• The length of time we have an ongoing relationship with you and provide our services to you (for example, for as long as you keep using our services);
• Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); and
• Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).

Your personal data may be stored and processed in any country where we have facilities or in which we engage service providers. Some of the non-EEA countries are recognized by the European Commission as providing an adequate level of data protection according to EEA standards (the full list of these countries is available at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en). We will only transfer personal data to non-EEA countries in accordance with applicable legal requirements

WE RESERVE THE RIGHT TO CHANGE THIS NOTICE

We reserve the right to make the revised or changed notice effective for medical information we already have about you as well as any information we receive in the future. We will post a copy of the current Notice on our website and will update the effective date accordingly.

COMPLAINTS

If you believe your privacy rights have been violated, you may file a complaint with Caris or with the Secretary of the Department of Health and Human Services, Office for Civil Rights. You will not be penalized for filing a complaint.

CONTACT INFORMATION

If you have any questions or complaints, please contact:

Caris Life Sciences

Corporate Compliance Officer
750 West John Carpenter Freeway, Suite 800
Irving, TX 75039
(214) 277-8700 main
(866) 771-8946 toll free

E-mail:  Legal@CarisLS.com