California Privacy Notice

Date Last Updated: January 1, 2023

If you are a California resident, the California Consumer Privacy Act and the California Privacy Rights Act (collectively, the “CCPA”) provide you with certain rights regarding your personal information, including the right to know about personal information collected, disclosed, or sold; the right to request that we delete personal information that we have collected from you; the right to update or correct your information; the right to opt-out of the sale or sharing of your personal information; the right to limit our use of your sensitive personal information; and the right not to be discriminated against for exercising your rights. These rights are subject to certain exceptions. For example, information that we process about you in a clinical trial setting may be exempt from the scope of the CCPA. You may also visit our Privacy Policy to learn more about how we protect your information.

Any capitalized terms in this California Privacy Notice that are not otherwise defined have the same meaning as they do in the CCPA or in our Privacy Policy.

Collection of Personal Information

If you visit our website (located at https://www.karyopharm.com/), interact with our mobile device software applications (including KaryoMPN), or use the features made available on the website or apps (collectively, the “Services”), we may collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“personal information”). We may have collected the following categories of personal information about you over the past 12 months:

Identifiers, such as your name, email address, and physical address.
Categories of personal information described in subdivision (e) of California Civil Code Section 1798.80, such as your name, physical characteristics or description, address, telephone number, or medical information.
Characteristics of protected classifications under California or federal law, such as your age, race, and gender.
Biometric information, such as weight and muscle mass, as well as sleep, activity, heart rate, respiration rate, and gait data.
Audio, electronic, visual, thermal, olfactory, or similar information.
Internet or other electronic network activity information, such as your cookies.
Geolocation data, in order to enable synchronization of data between our Services
Sensitive personal information (in relation to a clinical trial), such as information about your race or ethnic origin, genetic data, and information about your health.
Inferences drawn from any of the information identified above.

We collect the personal information listed above from the following sources:

From you directly, when you provide it to us.
From clinical trial sites.
Automatically from your browser or from our Services.
Other apps, such as the Apple Health Application.

We collect the personal information listed above for the following business purposes:

To maintain the safety and security of our Services.
As we believe to be required or appropriate under applicable law, to respond to requests from government authorities and comply with legal obligations.
To conduct research studies.
To compose and convey documents to government agencies throughout the world, including the FDA.
To report undesirable events to the FDA and other government health agencies.
To provide overall study results to other study doctors, including in publications.
To conduct new medical research.
To develop new medical products.
To request approval to market our products.
To manage our business.
To assist you with supportive care, as needed.

Disclosure of Personal Information

In the last 12 months, we may have disclosed for our business purposes the following categories of personal information subject to the CCPA:

Identifiers, such as your name, email address, and physical address.
Categories of personal information described in subdivision (e) of California Civil Code Section 1798.80, such as your name, physical characteristics or description, address, telephone number, or medical information.
Characteristics of protected classifications under California or federal law, such as your age, race, and gender.
Audio, electronic, visual, thermal, olfactory, or similar information.
Biometric information, such as weight and muscle mass, as well as sleep, activity, heart rate, respiration rate, and gait data.
Internet or other electronic network activity information, such as your cookies.
Geolocation data, in order to enable synchronization of data between our Apps and Devices.
Sensitive personal information (in relation to a clinical trial), such as information about your race or ethnic origin, genetic data, and information about your health.
Inferences drawn from any of the information identified above.

We may have disclosed or shared any of the information listed above with:

Our service providers and contractors, including app developers and data hosting providers.
Study doctors and study staff.
Other health care providers at the study site institution.
Your physician and his/her staff.
Our representatives and third parties working for or providing services for a study sponsor.
FDA or other competent and governmental authorities.
Other countries’ state or federal regulatory agencies.
An Institutional Review Board or Ethics Review Committee (i.e., a committee that oversees medical research to ensure that the rights and welfare of human research subjects are protected).
Other third parties when necessary to fulfill your requests for services; to complete a transaction that you initiate; to meet the terms of any agreement that you have with us or our partners; or to manage our business (e.g., contract research organizations and other businesses involved in clinical study management and drug development).
Other third parties for a legal purpose (such as in response to a court order or to defend against a legal claim).
Other third parties when necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, violations of our terms and conditions, or situations involving threats to our property or the property or physical safety of any person or third party.
Other third parties in the event of corporate sale, merger, reorganization, financing due diligence, dissolution, or similar event.

We disclose or share your personal information to the entities listed above for the following purposes:

To maintain the safety and security of our Services.
As we believe to be required or appropriate under applicable law, to respond to requests from government authorities and comply with legal obligations.
To conduct research studies.
To compose and convey documents to government agencies throughout the world, including the FDA.
To report undesirable events to the FDA and other government health agencies.
To provide overall study results to other study doctors, including in publications.
To conduct new medical research.
To develop new medical products.
To request approval to market our products.
To manage our business.
To assist you with supportive care, as needed.

Your Rights

If we maintain personal information about you that is subject to CCPA, you may exercise certain rights in connection with this data if you are a California resident.

Right to Know

California residents have the right to request that we disclose certain information about our collection and use of your personal information over the past twelve months (“Right to Know”). Once we receive and confirm your verifiable consumer request, we will disclose to you:

The categories of personal information we collected about you.
The categories of sources for the personal information we collected about you.
The categories of personal information that we have disclosed for a business or commercial purpose.
Our business or commercial purposes for collecting, selling, or sharing personal information.
The categories of third parties with whom we share or disclose that personal information.
The specific pieces of personal information we collected about you (i.e., a data portability request).

Right to Delete

California residents have the right to request that we delete the personal information that we collected from you and retain, subject to certain exceptions (“Right to Delete”). Once we receive and verify your request, we will delete (and direct our service providers/contractors to delete) your personal information from our records, unless an exception applies.

Right to Correct

California residents have the right to correct or amend the personal information we have on file (“Right to Correct”). You may correct or amend by logging into your account or by contacting us using the information below.

Right to Opt-Out of Sale or Sharing

The CCPA provides California residents with the right to opt-out of the “sale” or “sharing” of their personal information (“Right to Opt Out”). In the last 12 months, we have not sold or shared any categories of personal information subject to the CCPA. We also do not have actual knowledge that we sell or share the personal information of California residents under the age of 16.

Right to Limit the Use of Your Sensitive Personal Information

The CCPA provides California residents with the right to limit the use of their “sensitive personal information” for the purposes outlined in 11 CCR § 7027(m) of the CCPA.

We do not use your sensitive personal information for any purposes outside of those permitted in 11 CCR § 7027(m).

Right to Nondiscrimination

The CCPA provides California residents with the right not to receive discriminatory treatment for the exercise of their privacy rights conferred by the CCPA. We will not discriminate against you for exercising any of your CCPA rights.

Exercising Your Rights

If you are a California resident and wish to exercise your Right to Know, Right to Delete, or Right to Correct, you may submit a request to us by email at privacy@karyopharm.com or by regular mail addressed to:

Karyopharm Therapeutics Inc.

Attn: Associate General Counsel

85 Wells Ave., 2nd floor

Newton, MA 02459 USA

When you submit a request, we will confirm your identity by asking you to provide information associated with what we have on file for you, including your name, email address, and other identifying information. We may ask you for additional information to verify your identity or to comply with your request.

Authorized Agent

You may authorize an agent to make a request on your behalf. To designate an agent, please provide a written and signed document by both you and the agent that authorizes the agent to act on your behalf. You may also use a power of attorney. We will still require you to provide information to allow us to reasonably verify that you are the person about whom we collected personal information.

Data Retention

We retain personal information about you necessary to fulfill the purpose for which that information was collected or as required or permitted by law. We do not retain personal information longer than is necessary for us to achieve the purposes for which we collected it. When we destroy your personal information, we do so in a way that prevents that information from being restored or reconstructed.

Shine the Light Law

In addition to the CCPA, California’s “Shine the Light” law, Civil Code section 1798.83, requires certain businesses to respond to requests from California customers asking about the businesses’ practices related to disclosing personal information to third parties for the third parties’ direct marketing purposes. We do not disclose your personal information for these purposes.

Contact for More Information

If you wish to contact us regarding this California Privacy Notice, you may do so by email at privacy@karyopharm.com or by regular mail addressed to:

Karyopharm Therapeutics Inc.

Attn: Associate General Counsel

85 Wells Ave., 2nd floor

Newton, MA 02459 USA