Privacy Notice | Caris Life Sciences
Home / Privacy & Website Policies / Privacy Notice

Privacy Notice & Your Privacy Rights

Effective Date: February 3, 2025

LAST UPDATED February 3, 2025

U.S. CARIS MPI, Inc., d/b/a Caris Life Sciences, together with its subsidiaries and affiliates (collectively, “Company,” “Caris,” “us,” “we,” or “our”) is committed to protecting the privacy of Personal Data (i.e., information reasonably related to a specific individual). This Privacy Notice describes how we process Personal Data collected through our websites, social media accounts, mobile applications, and other online interactions and communications such as email (collectively, our “Digital Properties”); molecular samples you submit for profile testing; in-person events and purchases; and other online and offline interactions.

This Privacy Notice applies to information we collect about individual consumers, such as general website visitors (“Individuals”) as well as information we collect about the personnel of our business partners, including healthcare providers or professionals (“HCPs”), vendors, and business customers, in business-to-business interactions (collectively, “Business Contacts”).  However, this Privacy Notice does not apply to:

  1. Information about our current/former employees, applicants, and other individuals who interact with us for employment-related purposes;
  2. Protected health information subject to the Health Insurance Portability and Accountability Act. Please review our Notice of Privacy Practices for additional information on our processing of protected health information;
  3. Personal Data that we handle on behalf of and under the instructions of our business customers; or
  4. Personal Data collected as part of a clinical trial or other biomedical research study subject to the Common Rule (45 C.F.R. 46).

Whenever you interact with us on behalf of another individual or entity, such as if you refer a friend to us, you must obtain their consent (or have the legal authority without consent) to share their Personal Data with us.

Changes: We may update this Privacy Notice from time to time. Any updated Privacy Notice will be effective when posted. Please check this Privacy Notice periodically for updates. If required by law, such as if we intend to process your Personal Data for a purpose other than the purposes for which it was initially collected, we will contact you directly to provide you with an updated Privacy Notice.

We collect Personal Data about you from the following sources:

  1. Directly from you. We may collect Personal Data you provide to us directly, such as when you provide us a sample for testing, contact us through our Digital Properties; interact with us in person; sign up for offers or newsletters; communicate with us; place or customize orders; or sign up for an account or other services.
  2. Data collected automatically and through tracking technologies. We may automatically collect information or inferences about you; such as through cookies and other tracking technologies, when you interact with our Digital Properties. This may include information about how you use and interact with our Digital Properties, information about your device, and internet usage information. For more information about cookies and other tracking technologies, please see our Cookies Policy.
  3. From third parties. We may collect Personal Data from third parties, such as HCPs who complete requisition forms to order tests or send samples to us for testing, distributors who coordinate the ordering process and/or may provide services to you, service and content providers, our affiliated companies and subsidiaries, business partners, data brokers, social media companies or other parties who interact with us.
  4. From publicly available sources. We may collect Personal Data about you from publicly available sources, such as public profiles and websites.
  5. We may combine information that we receive from the various sources described in this Privacy Notice, including third party sources, and use or disclose the combined information for the purposes identified below.

We may collect the following types of Personal Data about you. Except as otherwise specified, we may collect this Personal Data from both Individuals and Business Contacts.

  1. Identifiers, such as your name, email address, physical address, telephone number, business contact information, patient number (for Individuals), and device identifiers (e.g., cookie IDs and IP address).
  2. Records about you, such as signatures; physical characteristics or a description of you; the content, timing and method of communications you have with us, such as online chats, calls, and emails; and information you share with or upload to our Digital Properties, such as reviews and comments.
  3. Demographic information, such as age (including birthdates) and gender.
  4. Commercial information, such as information related to your transactions; products or services purchased, obtained, or considered; subscription information; or other purchasing or consuming histories or tendencies.
  5. Internet or other electronic network activity information, such as your browsing history, search history, preference information (including marketing and purchasing preferences), account settings (including any default preferences), and other information regarding your interactions with and use of the Digital Properties. For more information about cookies and other device data, please see our Cookies Policy.
  6. Non-precise geolocation data, such as your location as derived from your IP address.
  7. Audio, electronic, visual, or other sensory information, such as photographs and audio/video recordings.
  8. Professional or employment-related information (for Business Contacts), such as job title; organization; professional licenses, credentials, or affiliations; and other professional information.
  9. Education information (for Business Contacts).
  10. Inferences drawn from any of the information we collect about your preferences or behavior, including to assess the level of interest in our products and services based on frequency of visits and contact and determine your preferred frequency for receiving offers.
  11. Sensitive Personal Data, including the following:
    • Social Security number, driver’s license number, or passport number.
    • Racial or ethnic origin.
    • Genetic data, including DNA, RNA, protein, and other molecular data (for Individuals).
    • Information about your health, including data on relevant treatment history and pathology reports, information about HCPs involved in the treatment of your tumor or cancer, and other data required for the treatment and analysis of tumors or cancer (for Individuals).
    • Medical or health insurance information, including insurance policy number (for Individuals).

We may use Personal Data for the following purposes:

  1. To provide you or your company products and services, such as conducting molecular profile testing and providing a report upon completion of testing; making our Digital Properties, products and services available to you; registering, verifying, and maintaining your account with us; providing and delivering you the goods and services you request, including facilitating our rewards programs; providing customer service; processing or fulfilling orders and transactions (including processing payments); verifying customer information and eligibility for certain programs or benefits; communicating with you (including soliciting feedback or responding to requests, complaints, and inquiries); hosting informational webinars; and providing similar services or otherwise facilitating your relationship with us.
  2. For our internal business purposes, such as day-to-day operation of our business; managing your tests; maintaining internal business records, such as accounting, document management and similar activities; administration and billing; enforcing our policies and rules; management reporting; auditing; and IT security and administration.
  3. For our internal analysis and product improvement purposes, such as verifying or maintaining the quality or safety of our products or services; internal analyses; safety reporting; improving the quality or safety our products or services; designing new products and services; developing and improving algorithms, artificial intelligence or machine learning tools and models; evaluating the effectiveness of our advertising or marketing efforts; and debugging and repairing errors with our systems, networks, and equipment.
  4. For research and study-related purposes, such as conducting studies, trials, and medical testing; reusing your Personal Data and samples collected from testing; conducting research-related analysis on prior projects; using stored samples for future research projects; researching the causes of disease; and developing new drugs and therapies.
  5. For legal, safety or security reasons, such as complying with legal, reporting, and similar requirements, including regarding the reliability and safety of our tests; investigating and responding to claims against us, our personnel, and our customers; for the establishment, exercise or defense of legal claims; protecting our, your, our customers’, and other third parties’ safety, property or rights; processing your requests to exercise your rights; detecting, preventing, and responding to security incidents and health and safety issues (including managing spread of communicable diseases); and protecting against malicious, deceptive, fraudulent, or illegal activity.
  6. In connection with a corporate transaction, such as if we acquire assets of another business, or sell or transfer all or a portion of our business or assets including through a sale in connection with bankruptcy and other forms of corporate change.
  7. For marketing and targeted advertising, such as marketing our products or services or those of our affiliates, business partners, or other third parties. For example, we may use Personal Data we collect to personalize advertising to you (including by developing product, brand, or services audiences and identifying you across devices/sites); to analyze interactions with us or our Digital Properties; or to send you newsletters, surveys, questionnaires, promotions, or information about events or webinars. You can unsubscribe from our email marketing via the link in the email, by responding “STOP” to the text message, or by contacting us using the information in Section 9 (Contact Information) below.

We may use anonymized, de-identified, or aggregated information for any purpose permitted by law.

We may disclose Personal Data to third parties, including the categories of recipients described below:

  1. Affiliates and subsidiaries, including parent entities, corporate affiliates, subsidiaries, business units, and other companies that share common ownership.
  2. Service providers that work on our behalf to provide the products and services you request or support our relationship with you, such as IT providers, local distributors, internet service providers, web hosting providers, data analytics providers, and companies that provide business support services, financial administration, or event organization.
  3. Professional consultants, such as accountants, lawyers, financial advisors, and audit firms.
  4. Vendors necessary to complete transactions you request, such as shipping companies and logistics providers.
  5. Law enforcement, government agencies, and other recipients for legal, security, or safety purposes, such as when we share information to comply with law or legal requirements, to enforce or apply our Terms of Service and other agreements or policies; and to protect our, our customers’, or third parties’ safety, property, or rights.
  6. Other entities in connection with a corporate transaction, such as if we acquire assets of another entity, or sell or transfer all or a portion of our business or assets including through a sale in connection with bankruptcy and other forms of corporate change.
  7. Business partners that may use Personal Data for their own purposes, such as:
    • Advertisers, ad platforms and networks, and social media platforms;
    • Third parties whose cookies and tracking tools we use as described in our Cookies Policy;
    • Commercial data partners to whom we make information available for their own marketing purposes; and
    • Partners who work with us on promotional opportunities, including co-branded products and services.
      Where required by law, we will obtain your consent prior to disclosing your Personal Data to our business partners. Where recipients use your Personal Data for their own purposes independently from us, we are not responsible for their privacy practices or Personal Data processing policies. You should consult the privacy notices of those third-party services for details on their practices.
  8. The public, such as when you have an opportunity to make comments regarding us or our products that we may share with the public, including comments on our blog posts and reviews on our product pages. Any Personal Data in comments, reviews, or other content that you share in public areas of our Digital Properties may be read, collected, or used by other users or the public.
  9. Research collaborators, such as academic researchers, universities, hospitals, laboratories, and life science, pharmaceutical, and other companies for the purposes of research, where you have provided us with consent to do so.
  10. Your healthcare provider, or insurance, healthcare plan, or other payor, where applicable. For example, we may disclose medical information about you to (a) the appropriate doctors, nurses and health care personnel who you have authorized for treatment, and/or (b) third-party payors so that the treatment and services you receive may be billed to and payment may be collected from you.
  11. Entities to which you have consented to the disclosure.

We may collect technical information from and about your device (such as your browser type, operating system, IP address, and domain name) via cookies and other tracking technologies. Please see our Cookies Policy available here for further information.

Although we maintain reasonable security safeguards, no security measures or communications over the Internet can be 100% secure, and we cannot guarantee the security of your information.

Your Personal Data will be retained as long as necessary to fulfill the purposes we have outlined above unless we are required to do otherwise by applicable law. This includes retaining your Personal Data to provide you with the products or services you have requested and interact with you; maintain our business relationship with you; improve our business over time; ensure the ongoing legality, safety and security of our services and relationships; or otherwise in accordance with our internal retention procedures. Once you have terminated your relationship with us, we may retain your Personal Data in our systems and records in order to ensure adequate fulfillment of surviving provisions in terminated contracts or for other legitimate business purposes, such as to enable easier future user onboarding, demonstrate our business practices and contractual obligations, or provide you with information about our products and services in case of interest. If you would like to know more about the retention periods applicable to your Personal Data, you can contact us using details provided in the Contact Information below.

Our Digital Properties are intended for individuals 13 years of age and older. The Digital Properties are not directed at, marketed to, nor intended for, children under 13 years of age. As a general rule, we do not knowingly collect any information, including Personal Data, from children under 13 years of age. If you believe that we have inadvertently collected Personal Data from a child under the age of 13, please contact us at the address in the Contact Information section below, and we will take prompt steps to delete the information.

Our Digital Properties may contain links to external sites or other online services that we do not control, including those embedded in third party advertisements or sponsor information. We are not responsible for the privacy practices or data collection policies of such third-party services. You should consult the privacy notices of those third-party services for details on their practices.

If you have questions regarding this Privacy Notice, please contact us at: Privacy@CarisLS.com.

  • Data Subject Rights
  • Depending on our relationship with you (i.e., whether you are an Individual or a Business Contact), and in which state you reside within the United States, you may have certain rights regarding Personal Data:

    • Right to Know. You may have the right to request information about the categories of Personal Data we have collected about you, the categories of sources from which we collected the Personal Data, the purposes for collecting, selling, or sharing the Personal Data, and to whom we have disclosed your Personal Data and why. You may also request the specific pieces of Personal Data we have collected about you.
    • Right to Delete. You may have the right to request that we delete Personal Data that we have collected from you.
    • Right to Correct. You may have the right to request that we correct inaccurate Personal Data that we maintain about you.
    • Right to Opt Out of Sales and Sharing for Targeted Advertising. You may have the right to opt out of (i) the sale or sharing of your Personal Data and (ii) targeted advertising.
    • Right to Opt Out of Profiling. You may have the right to opt out certain automated processing activities that are used to evaluate characteristics about you.

    You may exercise the any of the rights available to you by emailing us at Privacy@CarisLS.com or by calling us at (866) 771-8946.

    In order to fully exercise the Right to Opt Out of Sales and Sharing for Targeted Advertising you must undertake both of the following steps:

    1. Submit an Opt Out of Sales and Sharing for Targeted Advertising request through our webform.
    2. Disable the use of advertising cookies and other tracking technologies in the preference center . You must complete this step on each of our websites from each browser and on each device that you use. These steps are necessary so that we can place a first-party cookie signaling that you have opted out on each browser and each device you use. Please note:
      1. If you block cookies, we will be unable to comply with your request to opt out of sales and sharing for targeted advertising with respect to device data that we automatically collect and disclose to third parties online using cookies, pixels, and other tracking technologies.
      2. If you clear cookies, you will need to disable the use of all advertising cookies and other tracking technologies in the preference center again on each browser on each device where you have cleared cookies.

    To the extent required by law, we will honor opt-out preference signals sent in a format commonly used and recognized by businesses, such as an HTTP header field or JavaScript object. We will process opt-out preference signals at the browser level.

    We will not discriminate against you for exercising your privacy rights.

    Nevada residents: Individuals may contact us at Privacy@CarisLS.com to inquire about your right to opt out of the sale of your Personal Data.

    Verification: In order to process rights requests, we may need to obtain information to locate you in our records or verify your identity depending on the nature of the request. In most cases we will collect some or all of the following data elements: first and last name, email address, and telephone number. In some cases, we may request different or additional information, including a signed declaration that you are who you say you are, and will inform you if we need such information.

    Authorized Agents: Authorized agents may exercise rights on behalf of you by submitting a request via email at Privacy@CarisLS.com and indicating that they are submitting the request as an agent. We may require the agent to demonstrate authority to act on behalf of you by providing signed permission from you. We may also require you to verify your own identity directly with us or to directly confirm with us that you provided the authorized agent permission to submit the request.

    Appeal: If we deny your rights request, you may have the right to appeal. To submit an appeal, contact us at Privacy@CarisLS.com. We will inform you in writing our response to your appeal.

  • Additional Data Processing Disclosures for California Residents
  • In addition to the disclosures above, this section provides supplemental information about how we process Personal Data. These additional disclosures apply only to individuals who reside in California as required by the California Consumer Privacy Act (“CCPA”).

    Disclosure of Personal Data

    Although we have not “sold” Personal Data for money in the past 12 months, we engage in routine practices with our Digital Properties involving third parties that could be considered a “sale” or “sharing” as defined under California law. We do not knowingly sell or share any Personal Data of minors under the age of 16.

    Below please find a chart detailing the categories of Personal Data we collected and with whom it was sold, shared, or disclosed for a business purpose in the past 12 months.

    Categories of Personal Data We CollectCategories of Third Parties With Whom We Disclose Personal Data for a Business PurposeCategories of Third Parties to Whom Personal Data is Sold or Shared for Targeted Advertising
    Identifiers (Section 2.A)• Affiliates and subsidiaries
    •  Service providers
    •  Professional consultants
    •  Research collaborators
    •  Regulatory authorities
    • Vendors necessary to complete transactions you request
    • Law enforcement, government agencies, and other recipients for legal, security, or safety purposes
    • In connection with a corporate transaction
    • Your healthcare provider, or insurance, healthcare plan, or other payor
    • Entities to which you have consented to the disclosure
    • Advertisers, ad platforms and networks, and social media platforms
    • Third parties whose cookies and tracking tools we use as described in Section 5 (Cookies and Other Tracking Technologies)
    • Commercial data partners to whom we make information available for their own marketing purposes
    • Partners who work with us on promotional opportunities, including co-branded products and services
    Records about you (Section 2.B)• Affiliates and subsidiaries
    • Service providers
    • Professional consultants
    • Research collaborators
    • Regulatory authorities
    • Vendors necessary to complete transactions you request
    • Law enforcement, government agencies, and other recipients for legal, security, or safety purposes
    • In connection with a corporate transaction
    • Your healthcare provider, or insurance, healthcare plan, or other payor
    • Entities to which you have consented to the disclosure
    • Advertisers, ad platforms and networks, and social media platforms
    • Third parties whose cookies and tracking tools we use as described in Section 5 (Cookies and Other Tracking Technologies)
    • Commercial data partners to whom we make information available for their own marketing purposes
    • Partners who work with us on promotional opportunities, including co-branded products and services
    Demographic Information (Section 2.C)• Affiliates and subsidiaries
    • Service providers
    • Professional consultants
    • Research collaborators
    • Regulatory authorities
    • Vendors necessary to complete transactions you request
    • Law enforcement, government agencies, and other recipients for legal, security, or safety purposes
    • In connection with a corporate transaction
    • Your healthcare provider, or insurance, healthcare plan, or other payor
    • Entities to which you have consented to the disclosure
    • Advertisers, ad platforms and networks, and social media platforms
    • Third parties whose cookies and tracking tools we use as described in Section 5 (Cookies and Other Tracking Technologies)
    • Commercial data partners to whom we make information available for their own marketing purposes
    • Partners who work with us on promotional opportunities, including co-branded products and services
    Commercial information (Section 2.D)• Affiliates and subsidiaries
    • Service providers
    • Professional consultants
    • Research collaborators
    • Regulatory authorities
    • Vendors necessary to complete transactions you request
    • Law enforcement, government agencies, and other recipients for legal, security, or safety purposes
    • In connection with a corporate transaction
    • Your healthcare provider, or insurance, healthcare plan, or other payor
    • Entities to which you have consented to the disclosure
    • Advertisers, ad platforms and networks, and social media platforms
    • Third parties whose cookies and tracking tools we use as described in Section 5 (Cookies and Other Tracking Technologies)
    • Commercial data partners to whom we make information available for their own marketing purposes
    • Partners who work with us on promotional opportunities, including co-branded products and services
    Internet or other electronic network activity (Section 2.E)• Affiliates and subsidiaries
    • Service providers
    • Professional consultants
    • Vendors necessary to complete transactions you request
    • Law enforcement, government agencies, and other recipients for legal, security, or safety purposes
    • In connection with a corporate transaction
    • Entities to which you have consented to the disclosure
    • Advertisers, ad platforms and networks, and social media platforms
    • Third parties whose cookies and tracking tools we use as described in Section 5 (Cookies and Other Tracking Technologies)
    • Commercial data partners to whom we make information available for their own marketing purposes
    • Partners who work with us on promotional opportunities, including co-branded products and services
    Geolocation data (Section 2.F)• Affiliates and subsidiaries
    • Service providers
    • Professional consultants
    • Vendors necessary to complete transactions you request
    • Law enforcement, government agencies, and other recipients for legal, security, or safety purposes
    • In connection with a corporate transaction
    • Entities to which you have consented to the disclosure
    • Advertisers, ad platforms and networks, and social media platforms
    • Third parties whose cookies and tracking tools we use as described in Section 5 (Cookies and Other Tracking Technologies)
    • Commercial data partners to whom we make information available for their own marketing purposes
    • Partners who work with us on promotional opportunities, including co-branded products and services
    Audio, electronic, visual, or other sensory information (Section 2.G)• Affiliates and subsidiaries
    • Service providers
    • Professional consultants
    • Law enforcement, government agencies, and other recipients for legal, security, or safety purposes
    • In connection with a corporate transaction
    • Entities to which you have consented to the disclosure
    • Not sold or shared
    Professional or employment-related information (Section 2.H)• Affiliates and subsidiaries
    • Service providers
    • Professional consultants
    • Vendors necessary to complete transactions you request
    • Law enforcement, government agencies, and other recipients for legal, security, or safety purposes
    • In connection with a corporate transaction
    • Entities to which you have consented to the disclosure
    • Advertisers, ad platforms and networks, and social media platforms
    • Third parties whose cookies and tracking tools we use as described in Section 5 (Cookies and Other Tracking Technologies)
    • Commercial data partners to whom we make information available for their own marketing purposes
    • Partners who work with us on promotional opportunities, including co-branded products and services
    Education information (Section 2.I)• Affiliates and subsidiaries
    • Service providers
    • Professional consultants
    • Law enforcement, government agencies, and other recipients for legal, security, or safety purposes
    • In connection with a corporate transaction
    • Entities to which you have consented to the disclosure
    • Not sold or shared
    Inferences (Section 2.J)• Affiliates and subsidiaries
    • Service providers
    • Professional consultants
    • Vendors necessary to complete transactions you request
    • Law enforcement, government agencies, and other recipients for legal, security, or safety purposes
    • In connection with a corporate transaction
    • Entities to which you have consented to the disclosure
    • Advertisers, ad platforms and networks, and social media platforms
    • Third parties whose cookies and tracking tools we use as described in Section 5 (Cookies and Other Tracking Technologies)
    • Commercial data partners to whom we make information available for their own marketing purposes
    • Partners who work with us on promotional opportunities, including co-branded products and services
    Sensitive personal information (Section 2.K)• Affiliates and subsidiaries
    • Service providers
    • Professional consultants
    • Research collaborators
    • Regulatory authorities
    • Law enforcement, government agencies, and other recipients for legal, security, or safety purposes
    • In connection with a corporate transaction
    • Your healthcare provider, or insurance, healthcare plan, or other payor
    • Entities to which you have consented to the disclosure
    • Not sold or shared
    Identifiers (Section 2.A)
    Categories of Third Parties With Whom We Disclose Personal Data for a Business Purpose
    • Affiliates and subsidiaries
    •  Service providers
    •  Professional consultants
    •  Research collaborators
    •  Regulatory authorities
    • Vendors necessary to complete transactions you request
    • Law enforcement, government agencies, and other recipients for legal, security, or safety purposes
    • In connection with a corporate transaction
    • Your healthcare provider, or insurance, healthcare plan, or other payor
    • Entities to which you have consented to the disclosure

    Categories of Third Parties to Whom Personal Data is Sold or Shared for Targeted Advertising
    • Advertisers, ad platforms and networks, and social media platforms
    • Third parties whose cookies and tracking tools we use as described in Section 5 (Cookies and Other Tracking Technologies)
    • Commercial data partners to whom we make information available for their own marketing purposes
    • Partners who work with us on promotional opportunities, including co-branded products and services

    Records about you (Section 2.B)
    Categories of Third Parties With Whom We Disclose Personal Data for a Business Purpose
    • Affiliates and subsidiaries
    • Service providers
    • Professional consultants
    • Research collaborators
    • Regulatory authorities
    • Vendors necessary to complete transactions you request
    • Law enforcement, government agencies, and other recipients for legal, security, or safety purposes
    • In connection with a corporate transaction
    • Your healthcare provider, or insurance, healthcare plan, or other payor
    • Entities to which you have consented to the disclosure

    Categories of Third Parties to Whom Personal Data is Sold or Shared for Targeted Advertising
    • Advertisers, ad platforms and networks, and social media platforms
    • Third parties whose cookies and tracking tools we use as described in Section 5 (Cookies and Other Tracking Technologies)
    • Commercial data partners to whom we make information available for their own marketing purposes
    • Partners who work with us on promotional opportunities, including co-branded products and services

    Demographic Information (Section 2.C)
    Categories of Third Parties With Whom We Disclose Personal Data for a Business Purpose
    • Affiliates and subsidiaries
    • Service providers
    • Professional consultants
    • Research collaborators
    • Regulatory authorities
    • Vendors necessary to complete transactions you request
    • Law enforcement, government agencies, and other recipients for legal, security, or safety purposes
    • In connection with a corporate transaction
    • Your healthcare provider, or insurance, healthcare plan, or other payor
    • Entities to which you have consented to the disclosure

    Categories of Third Parties to Whom Personal Data is Sold or Shared for Targeted Advertising
    • Advertisers, ad platforms and networks, and social media platforms
    • Third parties whose cookies and tracking tools we use as described in Section 5 (Cookies and Other Tracking Technologies)
    • Commercial data partners to whom we make information available for their own marketing purposes
    • Partners who work with us on promotional opportunities, including co-branded products and services

    Commercial information (Section 2.D)
    Categories of Third Parties With Whom We Disclose Personal Data for a Business Purpose
    • Affiliates and subsidiaries
    • Service providers
    • Professional consultants
    • Research collaborators
    • Regulatory authorities
    • Vendors necessary to complete transactions you request
    • Law enforcement, government agencies, and other recipients for legal, security, or safety purposes
    • In connection with a corporate transaction
    • Your healthcare provider, or insurance, healthcare plan, or other payor
    • Entities to which you have consented to the disclosure

    Categories of Third Parties to Whom Personal Data is Sold or Shared for Targeted Advertising
    • Advertisers, ad platforms and networks, and social media platforms
    • Third parties whose cookies and tracking tools we use as described in Section 5 (Cookies and Other Tracking Technologies)
    • Commercial data partners to whom we make information available for their own marketing purposes
    • Partners who work with us on promotional opportunities, including co-branded products and services

    Internet or other electronic network activity (Section 2.E)
    Categories of Third Parties With Whom We Disclose Personal Data for a Business Purpose
    • Affiliates and subsidiaries
    • Service providers
    • Professional consultants
    • Vendors necessary to complete transactions you request
    • Law enforcement, government agencies, and other recipients for legal, security, or safety purposes
    • In connection with a corporate transaction
    • Entities to which you have consented to the disclosure

    Categories of Third Parties to Whom Personal Data is Sold or Shared for Targeted Advertising
    • Advertisers, ad platforms and networks, and social media platforms
    • Third parties whose cookies and tracking tools we use as described in Section 5 (Cookies and Other Tracking Technologies)
    • Commercial data partners to whom we make information available for their own marketing purposes
    • Partners who work with us on promotional opportunities, including co-branded products and services

    Geolocation data (Section 2.F)
    Categories of Third Parties With Whom We Disclose Personal Data for a Business Purpose
    • Affiliates and subsidiaries
    • Service providers
    • Professional consultants
    • Vendors necessary to complete transactions you request
    • Law enforcement, government agencies, and other recipients for legal, security, or safety purposes
    • In connection with a corporate transaction
    • Entities to which you have consented to the disclosure

    Categories of Third Parties to Whom Personal Data is Sold or Shared for Targeted Advertising
    • Advertisers, ad platforms and networks, and social media platforms
    • Third parties whose cookies and tracking tools we use as described in Section 5 (Cookies and Other Tracking Technologies)
    • Commercial data partners to whom we make information available for their own marketing purposes
    • Partners who work with us on promotional opportunities, including co-branded products and services

    Audio, electronic, visual, or other sensory information (Section 2.G)
    Categories of Third Parties With Whom We Disclose Personal Data for a Business Purpose
    • Affiliates and subsidiaries
    • Service providers
    • Professional consultants
    • Law enforcement, government agencies, and other recipients for legal, security, or safety purposes
    • In connection with a corporate transaction
    • Entities to which you have consented to the disclosure

    Categories of Third Parties to Whom Personal Data is Sold or Shared for Targeted Advertising
    • Not sold or shared

    Professional or employment-related information (Section 2.H)
    Categories of Third Parties With Whom We Disclose Personal Data for a Business Purpose
    • Affiliates and subsidiaries
    • Service providers
    • Professional consultants
    • Vendors necessary to complete transactions you request
    • Law enforcement, government agencies, and other recipients for legal, security, or safety purposes
    • In connection with a corporate transaction
    • Entities to which you have consented to the disclosure

    Categories of Third Parties to Whom Personal Data is Sold or Shared for Targeted Advertising
    • Advertisers, ad platforms and networks, and social media platforms
    • Third parties whose cookies and tracking tools we use as described in Section 5 (Cookies and Other Tracking Technologies)
    • Commercial data partners to whom we make information available for their own marketing purposes
    • Partners who work with us on promotional opportunities, including co-branded products and services

    Education information (Section 2.I)
    Categories of Third Parties With Whom We Disclose Personal Data for a Business Purpose
    • Affiliates and subsidiaries
    • Service providers
    • Professional consultants
    • Law enforcement, government agencies, and other recipients for legal, security, or safety purposes
    • In connection with a corporate transaction
    • Entities to which you have consented to the disclosure

    Categories of Third Parties to Whom Personal Data is Sold or Shared for Targeted Advertising
    • Not sold or shared

    Inferences (Section 2.J)
    Categories of Third Parties With Whom We Disclose Personal Data for a Business Purpose
    • Affiliates and subsidiaries
    • Service providers
    • Professional consultants
    • Vendors necessary to complete transactions you request
    • Law enforcement, government agencies, and other recipients for legal, security, or safety purposes
    • In connection with a corporate transaction
    • Entities to which you have consented to the disclosure

    Categories of Third Parties to Whom Personal Data is Sold or Shared for Targeted Advertising
    • Advertisers, ad platforms and networks, and social media platforms
    • Third parties whose cookies and tracking tools we use as described in Section 5 (Cookies and Other Tracking Technologies)
    • Commercial data partners to whom we make information available for their own marketing purposes
    • Partners who work with us on promotional opportunities, including co-branded products and services

    Sensitive personal information (Section 2.K)
    Categories of Third Parties With Whom We Disclose Personal Data for a Business Purpose
    • Affiliates and subsidiaries
    • Service providers
    • Professional consultants
    • Research collaborators
    • Regulatory authorities
    • Law enforcement, government agencies, and other recipients for legal, security, or safety purposes
    • In connection with a corporate transaction
    • Your healthcare provider, or insurance, healthcare plan, or other payor
    • Entities to which you have consented to the disclosure

    Categories of Third Parties to Whom Personal Data is Sold or Shared for Targeted Advertising
    • Not sold or shared

    Sensitive Personal Data: We only use and disclose Sensitive Personal Information for the following purposes: (i) performing services or providing goods reasonably expected by an average consumer; (ii) detecting security incidents; (iii) resisting malicious, deceptive, or illegal actions; (iv) ensuring the physical safety of individuals; (v) for short-term, transient use, including non-personalized advertising; (vi) performing or providing internal business services; (vii) verifying or maintaining the quality or safety of a service or device; or (viii) for purposes that do not infer characteristics about you.

    California Shine the Light: If you are a California resident, you may opt out of sharing your Personal Data subject to California Civil Code §1798.83 (the “Shine the Light law”) with third parties for those third parties’ direct marketing purposes by submitting an Opt Out of Sales and Sharing for Targeted Advertising request through our webform.

    California Eraser Law: Any California residents under the age of eighteen (18) who have posted content or information on our Digital Properties can request removal by contacting us at Privacy@CarisLS.com, detailing where the content or information is posted, and attesting that you posted it. We will make reasonable, good faith efforts to remove the post from prospective public view or anonymize it so the minor cannot be individually identified to the extent required by applicable law. This removal process cannot ensure complete or comprehensive removal. For instance, third parties may have republished or archived content that we do not control.

    The following terms supplement the above disclosures with respect to our processing of EEA, Swiss, and UK Personal Data in accordance with Regulation (EU) 2016/679 (“EU GDPR”), the UK General Data Protection Regulation (as defined in s.3(10) and as supplemented by s.205(4) of the UK Data Protection Act of 2018 (“UK GDPR”), and the Switzerland Federal Act on Data Protection (“FADP”) (EU GDPR, UK GDPR, and FADP together “GDPR”). These terms only apply to the extent that GDPR applies to our processing of your Personal Data. To the extent applicable, in the event of any conflict or inconsistency between the other parts of the Privacy Notice and the terms of this Section 11, this Section 11 shall govern and prevail with regards to the processing of such EEA, Swiss and UK Personal Data.

    1. How We Collect and Use Your Personal Data
    2. We may collect your data indirectly from the following sources:

      • In the EEA, an HCP who completes the requisition form ordering the test.
      • In the UK, an HCP who completes the requisition form or a distributor who co-ordinates the ordering process and/or may provide services to you.
      • The sample that is sent to us for testing.
      Purposes Description Legal bases
      Conduct molecular profile testing and provide a report upon completion of testing
      • The report will be used by your HCP to make decisions about your health care. The report may be shared with other persons specified on your consent or requisition form.
      • Consent
      • Provision of healthcare (including diagnostics)
      • Public health
      • Legitimate Interests
      • Consent
      • Scientific Research (where applicable)
      Further reuse for future research
      • To reuse your Personal Data collected for the test in order to conduct future research.
      • To use the future research’s results.
      • Legitimate Interests
      • Consent
      • Scientific Research (where applicable)
      Safety and Product Improvements to the tests
      • Safety reporting
      • Internal analyses, including for regulatory purposes.
      • Anonymization and/or pseudonymization of data for the above purposes.
      • Legitimate Interests
      • Public health
      Pre-litigation or litigation management
      • To take action against any identified breach.
      • To manage any dispute or litigation.
      • Legitimate Interests
      • Legal claims
      Compliance with legal and regulatory obligations
      • To comply with legal and regulatory obligations, in particular regarding the reliability and safety of the test.
      • To process your requests to exercise your rights.
      • Legal and regulatory obligations to which Caris is subject
      Operational and administrative purposes
      • Managing your tests.
      • Administration and billing.
      • Legitimate Interests

      We will only use your Personal Data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason compatible with the original purpose.

    3. What Personal Data We Collect
    4. Personal identification information, such as name, address, other contact details, patient number, date of birth, and gender.

      Sensitive Personal Data: Name and address of physicians, hospitals, and other HCPs involved in the treatment of the patient’s tumor or cancer; data on relevant treatment history and pathology reports; DNA, RNA, protein, and other molecular data; and other data required for the treatment and analysis of tumors or cancer.

    5. Recipients of Personal Data
    6. We may share your Personal Data with third parties, including:

      • Caris and its distributor in your region.
      • Companies that are part of Caris’s corporate group.
      • Our services providers (such as hosting providers and IT service providers).
      • Your healthcare insurance or healthcare plan, where applicable.
      • Your HCPs.
      • Regulatory authorities.
      • Lawyers and all interested parties but exclusively in the case of the management of possible disputes and other legal matters where appropriate.

      We may also share your Personal Data with academic researchers, universities, hospitals, laboratories, and life science, pharmaceutical, and other companies for the purposes of research, where you have provided us with consent to do so. A list of these companies is here. Before sharing any data with these organizations for the purpose of research, we take data minimization steps, such as pseudonymization or anonymization (where possible) and take steps to ensure the research is undertaken in accordance with relevant laws, including ethical consents where required.

    7. Retention and Security of Your Personal Data
    8. We will only retain your Personal Data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal or reporting requirements.

      We follow strict security procedures as to how your Personal Data is stored and used, and who sees it, to help stop any unauthorized person accessing it.

    9. Your Rights
    10. Subject to the exceptions under applicable laws, you may exercise the following rights:

      • You can access, correct, update or request deletion of your Personal Data.
      • In addition, you can object to the processing of your Personal Data, ask us to restrict processing of your Personal Data or request portability of your Personal Data.
      • In case we ask for your consent to process your Personal Data, you are free to refuse to give it. If you have given your consent, you may withdraw it at any time without any adverse consequences. The lawfulness of any processing of your Personal Data that occurred prior to the withdrawal of your consent will not be affected.

      If you want to exercise any of these rights, please contact Privacy@CarisLS.com. Under certain circumstances, we may ask you for specific information in order to confirm your identity. This is another appropriate security measure to ensure that Personal Data is not disclosed to an individual who does not have the right to receive it.

      You also have a right to lodge a complaint with your national data protection authority.

      For more information on your rights, please visit: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/individual-rights/.

    11. Where Your Personal Data Will Be Stored
    12. Your data will be stored in the United States.

    13. Transfer of Your Personal Data
    14. We may transfer your Personal Data for the purposes described in this notice to countries which do not provide an adequate level of protection according to the GDPR. In the absence of an adequacy decision and after having carried out an assessment of the level of protection of your rights on the territory of the third country where the recipient is established, we will implement all necessary measures through the adoption of appropriate safeguards (such as standard contractual clauses).

      If you want to be provided with a copy of these safeguards, please contact Privacy@CarisLS.com.

    15. Data Protection Officer
    16. If you have any questions in relation to our use of your Personal Data or this Privacy Notice, please contact our Privacy Officer: Caris Life Sciences, Privacy Officer, 750 West John Carpenter Freeway, Suite 800, Irving, Texas 75039, USA.