Last Updated: May 5, 2021

Legend Biotech USA Inc. and its subsidiaries (“Legend Biotech,” “we,” “our,” and/or “us”) value the privacy of individuals who use our websites (including https://legendbiotech.com), applications, or services that link to this Privacy Policy (collectively, our “Services”). This privacy policy (the “Privacy Policy”) explains how we collect, use, and disclose personal information from users of our Services (“Users”). If you are located in the European Economic Area (“EEA”) or the United Kingdom, “personal information” means any information relating to an identified or identifiable individual. By using our Services, you agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. Beyond this Privacy Policy, your use of our Services is also subject to our Terms of Service .

Information We Collect

We may collect a variety of personal information from or about you or your devices from various sources, as described below.

A. Information You Provide to Us

Communications. If you contact us directly, we may receive additional personal information about you. For example, when you contact us for support, we will receive your name, email address, the contents of your message, and your phone number if you choose to provide it. If you subscribe to our marketing communications, we will receive your name and email address.

Careers. If you decide to apply for a job with us, you may submit your contact information and your resume online. We will collect the personal information you choose to provide us as part of your job application, such as your contact information, education, and employment experience. If you apply for a job with us through a third-party platform (such as LinkedIn), we will collect the personal information you make available to us through such third-party platform.

B. Information We Collect When You Use Our Services

Location Information. When you use our Services, we may infer your general location information. For example, your IP address may indicate your general geographic region.

Device Information. We receive information about the device and software you use to access our Services, including internet protocol (IP) address, device type, and operating system version.

Usage Information. To help us understand how you use our Services and to help us improve them, we automatically receive information about your interactions with them, such as the length of time you spend on a page, objects you click on, and the dates, times, and lengths of your sessions. When we send you emails, we may track whether you open them to learn how to deliver a better customer experience.

Analytics Partners. We use analytics services such as Google Analytics to collect and process certain analytics data. These services may also collect information about your use of other websites, apps, and online resources. You can learn about Google’s practices by going to https://www.google.com/policies/privacy/partners/ and opt-out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.

Information from Cookies and Similar Technologies. We and our third-party partners may collect information using cookies, pixel tags, or similar technologies. Our third-party partners, such as analytics partners, may use these technologies to collect information about your online activities over time and across different services. Cookies are small text files containing a string of alphanumeric characters. We may use both session cookies and persistent cookies. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to our Services.

Please review your web browser’s “Help” file to learn the proper way to modify your cookie settings. Please note that if you delete or choose not to accept cookies from the Services, you may not be able to utilize the features of the Services to their fullest potential. You can find more about our use of cookies by visiting our Cookie Policy .

C. Personal Information We Receive from Third Parties

Partners. We may receive personal information about you from third parties such as data or marketing partners and combine it with other personal information we have about you.

How We Use the Personal Information We Collect

We use the personal information we collect:

• To provide, maintain, improve, and enhance our Services;
• To communicate with you, provide you with updates and other information relating to our Site, provide information that you request, respond to comments and questions, and otherwise provide support;
• To process job applications;
• To find and prevent fraud, and respond to trust and safety issues that may arise;
• For compliance purposes, including enforcing our Terms of Service and other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and
• For other purposes for which we provide specific notice at the time the personal information is collected.

Legal Bases for Processing European Personal Information

If you are located in the European Economic Area or the United Kingdom, we only process your personal information when we have a valid “legal basis”, including when:

• Consent. You have consented to the use of your personal information, for example to use cookies.
• Contractual necessity. We need your personal information to provide you with the Services, for example to respond to your inquiries.
• Compliance with a legal obligation. We have a legal obligation to use your personal information, for example to comply with tax and accounting obligations.
• Legitimate interests. We or a third party have a legitimate interest in using your personal information. In particular, we have a legitimate interest in using your personal information for product development and internal analytics purposes, and otherwise to improve the safety, security, and performance of our Services. We only rely on our or a third party’s legitimate interests to process your personal information when these interests are not overridden by your rights and interests.

How We Share the Personal Information We Collect

We do not share or otherwise disclose personal information we collect from or about you except as described below or otherwise disclosed to you at the time of the collection.

Affiliates. We may share personal information we receive with our affiliates for any of the purposes described in this Privacy Policy.

Vendors and Service Providers. We may share any personal information we receive with vendors and service providers retained in connection with the provision of our Services.

Marketing. We do not rent, sell, or share personal information about you with nonaffiliated companies for their direct marketing purposes unless we have your permission.

Analytics Partners. We use analytics services such as Google Analytics to collect and process certain analytics data. These services may also collect information about your use of other websites, apps, and online resources. You can learn about Google’s practices by going to https://www.google.com/policies/privacy/partners/ and opt-out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.

As Required by Law and Similar Disclosures. We may access, preserve, and disclose your personal information if we believe doing so is required or appropriate to: (a) comply with law enforcement requests and legal process, such as a court order or subpoena; (b) respond to your requests; or (c) protect your, our, or others’ rights, property, or safety.

Merger, Sale, or Other Asset Transfers. We may transfer your personal information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets.

Consent. We may also disclose your personal information with your permission.

Your Rights and Choices

Marketing Communications. You can unsubscribe from our promotional emails via the link provided in the emails. Even if you opt-out of receiving promotional messages from us, you will continue to receive administrative messages from us.

Do Not Track. There is no accepted standard on how to respond to Do Not Track signals, and we do not respond to such signals.
Your European Privacy Rights. If you are located in the European Economic Area or the United Kingdom, you have the additional rights described below.

•  You may request access to the personal information we maintain about you, update and correct inaccuracies in your personal information, restrict or object to the processing of your personal information, have the personal information anonymized or deleted, as appropriate, or exercise your right to data portability to easily transfer your personal information to another company. In addition, you also have the right to lodge a complaint with a supervisory authority, including in your country of residence, place of work or where an incident took place.
• You may withdraw any consent you previously provided to us regarding the processing of your personal information, at any time and free of charge. We will apply your preferences going forward and this will not affect the lawfulness of the processing before you withdrew your consent.
• You may exercise these rights by contacting us using the contact details at the end of this Privacy Policy. Before meeting your request, we may ask you to provide reasonable information to verify your identity. Please note that there are exceptions and limitations to each of these rights, and that while any changes you make will be reflected in active user databases instantly or within a reasonable period of time, we may retain information for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so.

Third Parties

Our Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy and advertising practices of these third parties. Please be aware that this Privacy Policy does not apply to your activities on these third-party services or any personal information you disclose to these third parties. We encourage you to read their privacy policies before providing any personal information to them.

Retention

We take measures to delete your personal information or keep it in a form that does not permit identifying you when this personal information is no longer necessary for the purposes for which we process it, unless we are required by law to keep this personal information for a longer period. When determining the specific retention period, we take into account various criteria, such as the type of service provided to you, the nature and length of our relationship with you, and mandatory retention periods provided by law and the statute of limitations.

Security

We make reasonable efforts to protect your personal information by using physical and electronic safeguards designed to improve the security of the personal information we maintain. However, as no electronic transmission or storage of personal information can be entirely secure, we can make no guarantees as to the security or privacy of your personal information.

International Visitors

Our Services are hosted in the United States and intended for visitors located within the United States. If you choose to use our Services from the European Union or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your personal information outside of those regions to the United States for storage and processing. We may transfer personal information from the European Union or the United Kingdom to the United States as needed to perform the Services that you have requested from us, or with your consent. Also, we may transfer your data from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating the Services. By providing any information, including personal information, on or to our Services, you consent to such transfer, storage, and processing.

Children’s Privacy

We do not knowingly collect, maintain, or use personal information from children under 13 years of age, and no parts of our Services are directed to children. If you learn that a child has provided us with personal information in violation of this Privacy Policy, then you may alert us at info@legendbiotech.com

Changes to this Privacy Policy

We will post any adjustments to the Privacy Policy on this page, and the revised version will be effective when it is posted. If we materially change the ways in which we use or share personal information previously collected from you through our Services, we will attempt to notify you through our Services, by email, or other means.

Contact Information

If you have any questions, comments, or concerns about our processing activities, please email us at privacy@legendbiotech.com or write to us at:

Legend Biotech USA Inc.
2101 Cottontail Lane
Somerset, NJ 08873, USA