Home / Privacy & Website Policies / Privacy Notice

Policies

Privacy Notice & Your Privacy Rights

Effective Date: September 9, 2025

LAST UPDATED: July 22, 2026

U.S. CARIS MPI, Inc., d/b/a Caris Life Sciences, together with its subsidiaries and affiliates (collectively, “Company,” “Caris,” “us,” “we,” or “our”) is committed to protecting the privacy of Personal Data (i.e., information that identifies or is reasonably linked to a specific individual). This Privacy Notice describes how we process Personal Data collected through our websites, social media accounts, mobile applications, and other online interactions and communications such as email (collectively, our “Digital Properties”); molecular samples you submit for profile testing; in-person events and purchases; and other online and offline interactions.

This Privacy Notice applies to information we collect about individual consumers, such as general website visitors (“Individuals”) as well as information we collect about the personnel of our business partners, including healthcare providers or professionals (“HCPs”), vendors, and business customers, in business-to-business interactions (collectively, “Business Contacts”). However, this Privacy Notice does not apply to:

Information about our current/former employees, applicants, and other individuals who interact with us for employment-related purposes;
Protected health information subject to the Health Insurance Portability and Accountability Act. Please review our Notice of Privacy Practices for additional information on our processing of protected health information;
Personal Data that we handle on behalf of and under the instructions of our business customers; or
Personal Data collected as part of a clinical trial or other biomedical research study subject to the Common Rule (45 C.F.R. 46).

Whenever you interact with us on behalf of another individual or entity, such as if you refer a friend to us, you must obtain their consent (or have the legal authority without consent) to share their Personal Data with us.

Changes: We may update this Privacy Notice from time to time. Any updated Privacy Notice will be effective when posted. Please check this Privacy Notice periodically for updates.

1. Sources of Personal Data

We collect Personal Data about you from the following sources:

Directly from you. We may collect Personal Data you provide to us directly, such as when you provide us a sample for testing, contact us through our Digital Properties; interact with us in person; sign up for offers or newsletters; communicate with us; place or customize orders; or sign up for an account or other services.
Data collected automatically and through Cookies. We may automatically collect information or inferences about you; such as through cookies, pixels, tags, scripts, server-side tools, and other similar technologies (collectively, “Cookies”), when you interact with our Digital Properties. This may include information about how you use and interact with our Digital Properties, information about your device, and internet usage information. For more information about Cookies, please Section 5.
From third parties. We may collect Personal Data from third parties, such as HCPs who complete requisition forms to order tests or send samples to us for testing, distributors who coordinate the ordering process and/or may provide services to you, service and content providers, our affiliated companies and subsidiaries, business partners, data brokers, social media companies or other parties who interact with us.
From publicly available sources. We may collect Personal Data about you from publicly available sources, such as public profiles and websites.
We may combine information that we receive from the various sources described in this Privacy Notice, including third party sources, and use or disclose the combined information for the purposes identified below.

2. Types of Personal Data We Collect

We may collect the following types of Personal Data about you. Except as otherwise specified, we may collect this Personal Data about both Individuals and Business Contacts.

Identifiers, such as your name, email address, physical address, telephone number, business contact information, patient number (for Individuals), and device identifiers (e.g., cookie IDs and IP address).
Records about you, such as signatures; physical characteristics or a description of you; the content, timing and method of communications you have with us, such as online chats, calls, and emails; and information you share with or upload to our Digital Properties, such as reviews and comments.
Demographic information, such as age (including birthdates) and gender.
Commercial information, such as information related to your transactions; products or services purchased, obtained, or considered; subscription information; or other purchasing or consuming histories or tendencies.
Internet or other electronic network activity information, such as your browsing history, search history, preference information (including marketing and purchasing preferences), account settings (including any default preferences), and other information regarding your interactions with and use of the Digital Properties. For more information about Cookies, please see Section 5.
Non-precise geolocation data, such as your location as derived from your IP address.
Audio, electronic, visual, or other sensory information, such as photographs and audio/video recordings.
Professional or employment-related information (for Business Contacts), such as job title; organization; professional licenses, credentials, or affiliations; and other professional information.
Education information (for Business Contacts).
Inferences drawn from any of the information we collect about your preferences or behavior, including to assess the level of interest in our products and services based on frequency of visits and contact and determine your preferred frequency for receiving offers.
Sensitive Personal Data, including the following:
- Social Security number, driver’s license number, or passport number.
- Racial or ethnic origin.
- Genetic data, including DNA, RNA, protein, and other molecular data (for Individuals).
- Information about your health, including data on relevant treatment history and pathology reports, information about HCPs involved in the treatment of your tumor or cancer, and other data required for the treatment and analysis of tumors or cancer (for Individuals).
- Medical or health insurance information, including insurance policy number (for Individuals).

3. How We Use Personal Data

We may use Personal Data for the following purposes:

To provide you or your company products and services, such as conducting molecular profile testing and providing a report upon completion of testing; making our Digital Properties and other products and services available to you; registering, verifying, and maintaining your account with us; providing and delivering you the goods and services you request, including facilitating our rewards programs; providing customer service; processing or fulfilling orders and transactions (including processing payments); verifying customer information and eligibility for certain programs or benefits; communicating with you (including soliciting feedback or responding to requests, complaints, and inquiries); hosting informational webinars; and providing similar services or otherwise facilitating your relationship with us.
For our internal business purposes, such as day-to-day operation of our business; managing your tests; maintaining internal business records, such as accounting, document management and similar activities; administration and billing; enforcing our policies and rules; management reporting; auditing; and IT security and administration.
For our internal analysis and product improvement purposes, such as verifying or maintaining the quality or safety of our products or services; internal analyses; safety reporting; improving the quality or safety our products or services; designing new products and services; evaluating the effectiveness of our advertising or marketing efforts; and debugging and repairing errors with our systems, networks, and equipment.
For research and study-related purposes, such as conducting studies, trials, and medical testing; reusing your Personal Data and samples collected from testing; conducting research-related analysis on prior projects; using stored samples for future research projects; researching the causes of disease; and developing new drugs and therapies.
For legal, safety or security reasons, such as complying with legal, reporting, and similar requirements, including regarding the reliability and safety of our tests; investigating and responding to claims against us, our personnel, and our customers; for the establishment, exercise or defense of legal claims; protecting our, your, our customers’, and other third parties’ safety, property or rights; processing your requests to exercise your rights; detecting, preventing, and responding to security incidents and health and safety issues (including managing spread of communicable diseases); and protecting against malicious, deceptive, fraudulent, or illegal activity.
In connection with a corporate transaction, such as if we acquire assets of another business, or sell or transfer all or a portion of our business or assets including through a sale in connection with bankruptcy and other forms of corporate change.
For marketing and targeted advertising, such as marketing our products or services or those of our affiliates, business partners, or other third parties. For example, we may use Personal Data we collect to personalize advertising to you (including by developing product, brand, or services audiences and identifying you across devices/sites); to analyze interactions with us or our Digital Properties; or to send you newsletters, surveys, questionnaires, promotions, or information about events or webinars. You can unsubscribe from marketing via the link in marketing emails, by responding “STOP” to the text message, or by contacting us using the information in Section 9 (Contact Information) below.

We may use Personal Data to develop and improve algorithms, artificial intelligence, or machine learning tools and models in connection with all the above processing activities. We may also use anonymized, de-identified, or aggregated information for any purpose permitted by law.

4. How We Disclose Personal Data

We may disclose Personal Data to third parties, including the categories of recipients described below:

Affiliates and subsidiaries, including parent entities, corporate affiliates, subsidiaries, business units, and other companies that share common ownership.
Service providers that work on our behalf to provide the products and services you request or support our relationship with you, such as IT providers, local distributors, internet service providers, data and web hosting providers, software service providers, data analytics providers, and companies that provide business support services, financial administration, or event organization.
Professional consultants, such as accountants, lawyers, financial advisors, and audit firms.
Vendors necessary to complete transactions you request, such as shipping companies and logistics providers.
Law enforcement, government agencies, and other recipients for legal, security, or safety purposes, such as when we share information to comply with law or legal requirements, to enforce or apply our Terms of Service and other agreements or policies; and to protect our, our customers’, or third parties’ safety, property, or rights.
Other entities in connection with a corporate transaction, such as if we acquire assets of another entity, or sell or transfer all or a portion of our business or assets including through a sale in connection with bankruptcy and other forms of corporate change.
Business partners that may use Personal Data for their own purposes, such as:
- Advertisers, ad platforms and networks, and social media platforms;
- Third parties whose Cookies we use as described in Section 5;
- Commercial data partners to whom we make information available for their own marketing purposes; and
- Partners who work with us on promotional opportunities, including co-branded products and services.

. Where recipients use your Personal Data for their own purposes independently from us, we are not responsible for their privacy practices or Personal Data processing policies. You should consult the privacy notices of those third-party services for details on their practices.

The public, such as when you have an opportunity to make comments regarding us or our products that we may share with the public, including comments on our blog posts and reviews on our product pages. Any Personal Data in comments, reviews, or other content that you share in public areas of our Digital Properties may be read, collected, or used by other users or the public.
Research collaborators, such as academic researchers, universities, hospitals, laboratories, and life science, pharmaceutical, and other companies for the purposes of research, where you have provided us with consent to do so.
Your healthcare provider, or insurance, healthcare plan, or other payor, where applicable. For example, we may disclose medical information about you to (a) the appropriate doctors, nurses and health care personnel who you have authorized for treatment, and/or (b) third-party payors so that the treatment and services you receive may be billed to and payment may be collected from you.
Entities to which you have consented to the disclosure.

5. Cookies

Our Digital Properties and authorized third parties use Cookies to collect information about you, your device, and how you interact with our Digital Properties. This section contains additional information about:

The types of Cookies we use
The purposes for which we use these Cookies
The types of information we collect using these technologies
How we disclose or make information available to others
Choices you may have regarding these technologies

Types of Cookies

We and the third parties that we authorize may use:

Cookies, which are a type of technology that install a small amount of information on a user’s computer or other device when they visit our Digital Properties.
Pixels, web beacons, and tags, which are types of code or transparent graphics that contain a unique identifier. In addition to the uses described below, these technologies provide information about interactions with our Digital Properties (including communications such as email we may send to you) and help us customize our marketing activities. In contrast to cookies, which are stored on a user’s device hard drive, pixels, web beacons, and tags are embedded invisibly on our Digital Properties.
Session replay tools, which record your interactions with our Digital Properties, such as how you move throughout our Digital Properties and engage with our webforms. In addition to the uses described below, this information helps us improve our Digital Properties and identify and fix technical issues visitors may be having with our Digital Properties.
Embedded scripts and SDKs, which allow us to build and integrate custom experiences on our Digital Properties. Embedded scripts are temporarily downloaded onto your device from our web server, or from a third party with which we work, and are active only while you are connected to our Digital Properties and are deleted or deactivated thereafter.
Server-side technologies, which collect and process information about you and your interactions with our Digital Properties on our servers and transmit that data to third parties (such as through an API connection).

We may use both first-party Cookies, which are set by us, and third-party Cookies, which are set by other parties. Some of the Cookies we use may last solely for your browsing session and are deleted when you close your browser, while others are persistent and stored after you close your browser.

Purposes for Using Cookies

We and authorized third parties use these technologies for purposes including:

Strictly Necessary, such as determining when you are signed in, determining when your account has been inactive, providing you with privacy disclosures and choices, and for troubleshooting and security purposes (including preventing fraud and malicious behavior);
Functionality/Personalization, such as remembering language preferences and pages and products you have viewed in order to enhance and personalize your experience when you visit our Digital Properties;
Performance/Analytics, such asanalyzing how our websites are used to understand which pages within our Digital Properties are most popular and how users move around them. For example, we use Google Analytics to help us improve the user experience. Google Analytics may use Cookies to perform its services. To learn how Google Analytics collects and processes data, please visit: “How Google uses data when you use our partners’ sites or apps” located at https://policies.google.com/technologies/partner-sites;
Targeting/Advertising, such as conducting advertising and content personalization on our Digital Properties and those of third parties, tracking activity over time and across properties to develop a profile of your interests and advertise to you based on those interests (“interest-based advertising”), providing you with offers and online content that may be of interest to you, and measuring the effectiveness of advertising campaigns and our communications with you—including identifying how and when you engage with one of our emails.

Types of Data Collected

These Cookies collect data about you and your device listed above in Section 2 (Types of Personal Data We Collect). Examples of common data elements include your IP address, location, cookie ID, device ID, Ad ID, click ID, operating system, device type, device settings and other device information, browser used, browser history, search history, pages viewed, search queries, login information, shopping cart information, information entered into webforms, and information about how you interact with our Digital Properties (such as pages on our Digital Properties that you have viewed).

Disclosures of Data

We may disclose information to third parties or allow third parties to directly collect information using these Cookies on our Digital Properties, such as social media companies, advertising networks, companies that provide analytics (including providers of ad tracking and reporting services), security providers, and others that help us operate our business and Digital Properties.

Your Choices

As described in Section 10 (Supplemental U.S. State Privacy Disclosures) below, residents of certain states may be able to disable Cookies that constitute a “sale,” “sharing,” or “targeted advertising,” as those terms are defined under applicable laws.

In addition, you may be able to control how we use Cookies through other mechanisms. Please be aware that if you disable the use of Cookies, the functionality of our Digital Properties may be negatively impacted, and certain areas or features may not display or work correctly. If you change computers, devices, or browsers; use multiple computers, devices, or browsers; or delete your Cookies, you may need to repeat this process for each computer, device, or browser.

Interest-Based Advertising. Some of the third parties we work with participate with the Digital Advertising Alliance (“DAA”). The DAA provides a mechanism for you to opt out of interest-based advertising performed by participating members at https://youradchoices.com/. Opting out of interest-based advertising will not opt you out of all advertising, but rather only interest-based advertising from us or our agents or representatives. If you are using a mobile device, you can manage interest-based ads on your device by adjusting the settings provided by your device manufacturer or the operating system provider: Manage settings on iOS devices; and Manage settings on Android devices.
Browser Settings. You can also refuse or delete Cookies using your browser settings. If you want to disable the use of certain specific Cookies or remove them from your device, you can disable or delete them using your browser settings. Please be aware that not all Cookies can be deleted through browser settings. Please refer to your browser’s Help instructions to learn more about how to manage Cookies, or use the following links for instructions for commonly used browsers: Apple Safari; Google Chrome; Microsoft Edge; and Mozilla Firefox.
Do Not Track. Some web browsers may include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your preference to not have data about your online browsing activities monitored and collected over time and across websites. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As a result, we do not currently respond to DNT browser signals or similar mechanisms.

6. Data Security and Data Retention

Although we maintain reasonable security safeguards, no security measures or communications over the Internet can be 100% secure, and we cannot guarantee the security of your information.

Your Personal Data will be retained as long as necessary to fulfill the purposes we have outlined above unless we are required to do otherwise by applicable law. This includes retaining your Personal Data to provide you with the products or services you have requested and interact with you; maintain our business relationship with you; improve our business over time; ensure the ongoing legality, safety and security of our services and relationships; or otherwise in accordance with our internal retention procedures. Once you have terminated your relationship with us, we may retain your Personal Data in our systems and records in order to ensure adequate fulfillment of surviving provisions in terminated contracts or for other legitimate business purposes, such as to enable easier future user onboarding, demonstrate our business practices and contractual obligations, or provide you with information about our products and services in case of interest. If you would like to know more about the retention periods applicable to your Personal Data, you can contact us using details provided in the Contact Information below.

7. Children’s Privacy

Our Digital Properties are intended for individuals 13 years of age and older and are not directed at, marketed to, nor intended for, children under 13 years of age. Generally, we do not knowingly collect any Personal Data within the scope of this Privacy Notice from children under 13 years of age. If you believe that we have inadvertently collected Personal Data from a child under the age of 13, please contact us at the address in the Section 9 (Contact Information) below, and we will take prompt steps to delete the information.

8. External Links

Our Digital Properties may contain links to external sites or other online services that we do not control, including those embedded in third party advertisements or sponsor information. We are not responsible for the privacy practices or data collection policies of such third-party services. You should consult the privacy notices of those third-party services for details on their practices.

9. Contact Information

If you have questions regarding this Privacy Notice, please contact us at: Privacy@CarisLS.com.

10. Supplemental U.S. State Privacy Disclosures

Data Subject Rights

Depending on our relationship with you (i.e., whether you are an Individual or a Business Contact), and in which state you reside within the United States (such as California, Colorado, Oregon, Delaware, or Maryland), you may have certain rights regarding Personal Data that you may exercise by emailing us at Privacy@CarisLS.com or by calling us at (866) 771-8946:

Right to Know. You may have the right to request information about the categories of Personal Data we have collected about you, the categories of sources from which we collected the Personal Data, the purposes for collecting, selling, or sharing the Personal Data, and to whom we have disclosed your Personal Data and why. You may also request the specific pieces of Personal Data we have collected about you. Residents of states such as Oregon, Minnesota, and Connecticut may also request a specific list of third parties to whom we disclose your Personal Data.
Right to Delete. You may have the right to request that we delete Personal Data that we have collected about you.
Right to Correct. You may have the right to request that we correct inaccurate Personal Data that we maintain about you.
Right to Opt Out of Sale, Sharing, and Targeted Advertising. You may have the right to opt out of selling, sharing, and targeted advertising (as such terms are defined under applicable laws). We do not knowingly sell data about minors under 16. You can exercise the Right to Opt Out of Sale, Sharing, and Targeted Advertising through our webform or by calling us at (866) 776-8946.
Right to Opt Out of Profiling. You may have the right to opt out certain automated processing activities that are used to evaluate characteristics about you. We do not presently engage in such profiling.

To the extent required by law, we will honor opt-out preference signals sent in a format commonly used and recognized by businesses, such as an HTTP header field or JavaScript object. We will process opt-out preference signals at the browser level.

We will not discriminate or retaliate against you for exercising your privacy rights.

Locating Your Information and Verifying Your Identity: To process rights requests, we may need to obtain information to locate you in our records or verify your identity depending on the nature of the request.

For Requests to Opt-Out of Sale, Sharing, and Targeted Advertising: We collect your name and email to locate you in our records.
For Requests to Know, Delete, and Correct: We collect information necessary to verify your identity and that you are a resident of a state that provides for these rights, including name, email address, and phone number.

Authorized Agents: Authorized agents may exercise rights on your behalf by submitting a request via email at Privacy@CarisLS.com and indicating that they are submitting the request as an agent.

If you designate an authorized agent to submit a Request to Know, Delete, or Correct, we may reach out to you directly to verify your own identity or to confirm that you provided the authorized agent with permission to submit the request.
If you designate an authorized agent to submit a Request to Opt Out of Sale, Sharing, and Targeted Advertising, we may seek additional information directly from the authorized agent to process the request.

Appeal: If we deny your rights request, you may have the right to appeal. To submit an appeal, contact us at Privacy@CarisLS.com. We will inform you in writing our response to your appeal.

Nevada residents: Individuals may contact us at Privacy@CarisLS.com to inquire about your right to opt out of the sale of your Personal Data.

Additional Data Processing Disclosures for California Residents

In addition to the disclosures above, this section provides supplemental information about how we process Personal Data. These additional disclosures apply only to individuals who reside in California as required by the California Consumer Privacy Act (“CCPA”).

Disclosure of Personal Data

Below please find a chart detailing the categories of Personal Data we collected and to whom it was sold, shared, or disclosed for a business purpose in the past 12 months.

*Categories of Personal Data We Collect*	*Categories of Third Parties to Whom Personal Data is Sold or Shared for Targeted Advertising*
Identifiers (Section 2.A)	• Advertisers, ad platforms and networks, and social media platforms • Third parties whose Cookies we use as described in *Section 5 (Cookies)* • Commercial data partners to whom we make information available for their own marketing purposes • Partners who work with us on promotional opportunities, including co-branded products and services
Records about you (Section 2.B)	• Advertisers, ad platforms and networks, and social media platforms • Third parties whose Cookies we use as described in *Section 5 (Cookies)* • Commercial data partners to whom we make information available for their own marketing purposes • Partners who work with us on promotional opportunities, including co-branded products and services
Demographic Information (Section 2.C)	• Advertisers, ad platforms and networks, and social media platforms • Third parties whose Cookies we use as described in *Section 5 (Cookies)* • Commercial data partners to whom we make information available for their own marketing purposes • Partners who work with us on promotional opportunities, including co-branded products and services
Commercial information (Section 2.D)	• Advertisers, ad platforms and networks, and social media platforms • Third parties whose Cookies we use as described in *Section 5 (Cookies)* • Commercial data partners to whom we make information available for their own marketing purposes • Partners who work with us on promotional opportunities, including co-branded products and services
Internet or other electronic network activity (Section 2.E)	• Advertisers, ad platforms and networks, and social media platforms • Third parties whose Cookies we use as described in *Section 5 (Cookies)* • Commercial data partners to whom we make information available for their own marketing purposes • Partners who work with us on promotional opportunities, including co-branded products and services
Geolocation data (Section 2.F)	• Advertisers, ad platforms and networks, and social media platforms • Third parties whose Cookies we use as described in *Section 5 (Cookies)* • Commercial data partners to whom we make information available for their own marketing purposes • Partners who work with us on promotional opportunities, including co-branded products and services
Audio, electronic, visual, or other sensory information (Section 2.G)	• Not sold or shared
Professional or employment-related information (Section 2.H)	• Advertisers, ad platforms and networks, and social media platforms • Third parties whose Cookies we use as described in *Section 5 (Cookies)* • Commercial data partners to whom we make information available for their own marketing purposes • Partners who work with us on promotional opportunities, including co-branded products and services
Education information (Section 2.I)	• Not sold or shared
Inferences (Section 2.J)	• Advertisers, ad platforms and networks, and social media platforms • Third parties whose Cookies we use as described in *Section 5 (Cookies)* • Commercial data partners to whom we make information available for their own marketing purposes • Partners who work with us on promotional opportunities, including co-branded products and services
Sensitive personal information (Section 2.K)	• Not sold or shared

Sensitive Personal Data: We only use and disclose Sensitive Personal Information for the following purposes: (i) performing services or providing goods reasonably expected by an average consumer; (ii) detecting security incidents; (iii) resisting malicious, deceptive, or illegal actions; (iv) ensuring the physical safety of individuals; (v) for short-term, transient use, including non-personalized advertising; (vi) performing or providing internal business services; (vii) verifying or maintaining the quality or safety of a service or device; or (viii) for purposes that do not infer characteristics about you.

California Shine the Light: California’s “Shine the Light” law (Civil Code Section § 1798.83) permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to Privacy@CarisLS.com.

California Eraser Law: Any California residents under the age of eighteen (18) who have posted content or information on our Digital Properties can request removal by contacting us at Privacy@CarisLS.com, detailing where the content or information is posted, and attesting that you posted it. We will make reasonable, good faith efforts to remove the post from prospective public view or anonymize it so the minor cannot be individually identified to the extent required by applicable law. This removal process cannot ensure complete or comprehensive removal. For instance, third parties may have republished or archived content that we do not control.

11. Supplemental Information for the EEA, Switzerland and the UK

The following terms supplement the above disclosures with respect to our processing of EEA, Swiss, and UK Personal Data, and only apply to the extent that EEA, Swiss, or UK data protection laws apply to our processing of your Personal Data. To the extent applicable, in the event of any conflict or inconsistency between the other parts of the Privacy Notice and the terms of this Section 11, this Section 11 shall govern and prevail with regards to the processing of such EEA, Swiss and UK Personal Data.

Data Controller

Unless otherwise specified, the Caris entity responsible for the processing of your Personal Data as the controller is the entity that has the primary relationship with you. This may be the Caris group entity whose Digital Property you are viewing or using, that provides services to and accepts payment from you, that markets or provides promotional materials to you orthe primary Caris group entity in the region where you interact with us.

In some cases, more than one Caris group entity may make decisions on how your Personal Data is processed, such as when two Caris group entities co-sign a contract with you or multiple Caris group entities organize an event. In these situations, all such entities are jointly responsible for the lawfulness of the specific processing activities as joint controllers

In other cases, different Caris group entities may independently determine how your Personal Data is processed as independent controllers, such as when one Caris group entity uses Personal Data received from another Caris group entity to market to you.

The Caris group companies include: Caris MPI, Inc., Caris Molecular Pathology, and Caris Science, Inc. For further details, please do not hesitate to contact us using the contact details in the Contact Information section above.

Legal Bases for Processing

We process the following categories of personal data for the following processing purposes based on the following legal bases:

*Processing purposes*	*Categories of personal data*	*Legal bases*
To provide you with products and services (Section 3.A)	Identifiers (Section 2.A)Records about you (Section 2.B)Commercial information (Section 2.D)Professional or employment-related information (Section 2.H)	Your consent, when appropriate.Performance of a contract to which you are a party or to take steps at your request prior to entering into a contract.Legitimate interests as set out in the How We Use Personal Data section above.Provision of healthcare (including diagnostics)Public healthScientific Research (where applicable)
For our internal business purposes (Section 3.B)	Identifiers (Section 2.A)Commercial information (Section 2.D)	Performance of a contract to which you are a party or to take steps at your request prior to entering into a contract.Compliance with a legal or statutory obligation to which we are subjectLegitimate interests as set out in the How We Use Personal Data section above.Your consent, when appropriate.
For internal analysis and product improvement purposes (Section 3.C)	Commercial information (Section 2.D)Demographic information (Section 2.C)Internet or other electronic network activity information (Section 2.E)Inferences (Section 2.J)	Legitimate interests as set out in the How We Use Personal Data section above.Compliance with a legal or statutory obligation to which we are subjectYour consent, when appropriateScientific Research (where applicable)
For research and study-related purposes (Section 3.D)	Identifiers (Section 2.A)Records about you (Section 2.B)Demographic information (Section 2.C)Commercial information (Section 2.D)Inferences (Section 2.J)Sensitive Personal Data (Section 2.K)	Legitimate interests as set out in the How We Use Personal Data section above.Your consent, when appropriatePublic healthScientific Research (where applicable)
For legal, safety or security reasons (Section 3.E)	Identifiers (Section 2.A)Records about you (Section 2.B)Commercial information (Section 2.D)Sensitive Personal Data (Section 2.K)	Performance of a contract to which you are a party or to take steps at your request prior to entering into a contract.Compliance with a legal or statutory obligation to which we are subjectLegitimate interests as set out in the How We Use Personal Data section above.Establishment, exercise or defense of legal claimsProtection of vital interestsPublic healthYour consent, when appropriate
In connection with a corporate transaction (Section 3.F)	Commercial information (Section 2.D)	Legitimate interests as set out in the How We Use Personal Data section above.
For marketing and targeted advertising (Section 3.G)	Identifiers (Section 2.A)Demographic information (Section 2.C)Commercial information (Section 2.D)Internet or other electronic network activity information (Section 2.E)Non-precise geolocation data (Section 2.F)Inferences (Section 2.J)	Legitimate interests as set out in the How We Use Personal Data section above.Your consent, when appropriate

Your Data Protection Rights

Under the conditions set by applicable data protection laws, you may exercise certain rights regarding your Personal Data.

Right to Access. You have the right to obtain confirmation from us whether we are processing your Personal Data and related information, as well as the right to obtain a copy of your Personal Data undergoing processing.
Right to Data Portability. You may receive your Personal Data that you have provided to us in a structured, commonly used and machine-readable format.
Right to Rectification. You have the right to request the rectification of inaccurate Personal Data and to have incomplete data completed.
Right to Objection. You have the right to object to the processing of your Personal Data in certain cases.
Right to Restrict Processing. You may request that we restrict the processing of your Personal Data in certain cases.
Right to Erasure. You may request that we erase your Personal Data in certain cases.
Right to Lodge a Complaint. You have the right to lodge a complaint with a supervisory authority in the country where you reside or where the conduct that is the subject of the complaint occurred. You can also lodge a complaint with us using the information in Section 9 (Contact Information) if UK laws apply to you and you think we have infringed our UK data protection obligations when handling your Personal Data.
Right to Refuse or Withdraw Consent. In case we ask for your consent to process your Personal Data, you are free to refuse to give it. If you have given your consent, you may withdraw it at any time without any adverse consequences. The lawfulness of any processing of your Personal Data that occurred prior to the withdrawal of your consent will not be affected.
Right to Not Be Subject to Automated Decision-making. You have the right not to be subject to a decision based solely on automated processing and to be given more information about why any such decision was made. Caris does not currently engage in such activity or processing.

You may exercise these rights by contacting us using the details in the Contact Information section above.

International Transfers of Personal Data

Due to the global nature of our operations, some of the recipients mentioned in the How We Disclose Personal Data section of this Privacy Notice may be located in countries outside the EEA, Switzerland or the UK that do not provide an adequate level of data protection as defined by data protection laws in the EEA, Switzerland and the UK. Certain third countries have been officially recognized by the European Commission, Switzerland, and the UK Secretary of State as providing an adequate level of protection. Transfers within our corporate group or to third parties located in third countries that have not received such recognition take place using an acceptable data transfer mechanism, such as the EU and/or UK Standard Contractual Clauses, Binding Corporate Rules, approved Codes of Conduct and Certifications, on the basis of permissible statutory derogations, or any other valid data transfer mechanism issued by the EEA, Swiss or UK authorities.

Please reach out to us using the contact information in the Contact Information section above if you want to receive further information about how we transfer Personal Data or, where available, a copy of the relevant data transfer mechanism.

Data Protection Officer

If you have any questions in relation to our use of your Personal Data or this Privacy Notice, please contact our Privacy Officer: Caris Life Sciences, Privacy Officer, 750 West John Carpenter Freeway, Suite 800, Irving, Texas 75039, USA, or at Privacy@CarisLS.com.

EU Representative

DPO Service GmbH
Junghofstraße 9
60315 Frankfurt/Main
Germany

Caris Life Sciences to Report Second Quarter 2026 Financial Results on August 5, 2026

Caris Life Sciences Expands Precision Oncology in Metastatic Prostate Cancer with PTEN IHC Testing