Kymera Therapeutics, Inc. (“Kymera,” “we,” “us,” or “our”) respects your privacy and is committed to protecting it through our compliance with the practices described in this notice, consistent with applicable law.
This notice describes our practices for collecting, using, maintaining, protecting, and disclosing the personal data we may collect from you or that you may provide when you visit our website(s) (the “Website”) as well as from other sources, including information collected offline or by third parties working on our behalf.
The Website may include links to third-party websites, plug-ins, services, social networks, or applications. Clicking on those links or enabling those connections may allow the third party to collect or share data about you. We do not control these third-party websites, and we encourage you to read the privacy notice of every website you visit.
Please read this Privacy Policy carefully to understand what personal data we collect, how we collect it, how we use it, how we protect it, who we may disclose it to, and how you can manage your personal data.
If you have any questions about this Policy or wish to exercise your rights regarding personal data that Kymera has collected from you, either directly or through a third party, please contact us as described in Section 1 below (“How to Contact Us”). We will comply with applicable law regarding your rights as a Data Subject.
Your access to and use of the Website is also subject to our Terms of Use.
Mailing address
Kymera Therapeutics, Inc.
200 Arsenal Yards Blvd., Suite 230
Watertown, MA 02472
Email address
privacy@kymeratx.com
We may collect, use, store, process, and transfer different categories of personal data about you, which may include:
We also collect, use, and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Privacy Policy.
Direct interactions. You may voluntarily give us your personal data, such as Identity Data, Contact Data, and Financial/Transaction Data, by filling in forms or by corresponding with us by mail, phone, and email or otherwise.
Automated interactions. As you interact with the Website, we may automatically collect Technical and Usage Data. This can include your preferences (e.g., the location you are in). We may also collect information such as the length of visits to certain pages and page interaction information. Automatic technologies we use may include cookies, pixels, and web beacons that are described in Section 6 below (“Cookies and Automated Data Collection Technologies”).
Third parties (or publicly available sources). We may receive categories of personal data about you from various third parties and public sources as set out below, such as:
We and/or our service providers, vendors, and other third parties operating on our behalf use your personal data to conduct our business operations. Examples of how we may use the personal data we collect include to:
Due to the nature of our business, Kymera may be subject to a number of legal requirements, thus requiring Kymera to Process Personal Information and sensitive information (including health information and mental and physical characteristics) to meet these requirements. When permissible under the law, we will attempt to limit and protection the Processing of your Personal Information to the extent possible, for example, pseudonymizing information, while still complying with our legal obligations.
We will only retain your personal data (which includes Personal Information for purposes of the California Consumer Privacy Act (“CCPA”) and similar U.S. State laws) for as long as necessary to fulfill the purposes for which we collected it. To determine the appropriate retention period for personal data (including Personal Information), we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and applicable legal requirements.
Individuals located in the European Economic Area (“EEA”) or United Kingdom (“UK”), please see the “Supplemental Notice to EEA/UK Data Subjects” for additional information.
We strive to provide you with choices regarding certain personal data uses, particularly around communications. We may use your Identity Data, Contact Data, and Technical and Usage Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which services, offerings, and information may be relevant for you. We have established the following personal data control mechanisms:
Online Analytics. We may use third-party web analytics services (such as those of Google Analytics) on the Website to collect and analyze the information discussed above, and to engage in auditing, research, or reporting. The information collected by various analytics technologies described in Section 6 below (“Cookies and Automated Data Collection Technologies”) may be disclosed to or collected directly by service providers, who evaluate information, including by noting the third-party website from which you arrive, analyzing usage trends, assisting with fraud prevention, and providing certain features to you. To prevent Google Analytics from using your information for analytics, you may install the Google Analytics Opt-out Browser Add-on by visiting http://tools.google.com/dlpage/gaoptout.
The Website uses cookies (small files placed on your device) or other automatic data collection technologies to distinguish you from other Website users. This helps us deliver a better and more personalized service when you browse our Website. It also allows us to improve our Website by enabling us to:
An IP address is a number assigned to your device whenever you access the Internet that allows devices and servers to recognize and communicate with each other. Kymera (or its service providers) may collect IP addresses to conduct system administration and report aggregate information, which may identify you, to affiliates, business partners, service providers and/or vendors to conduct Website and application analysis and performance reviews.
The Website pages may contain web beacons (small transparent embedded images or objects, also known as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count Website page visitors, or to compile other similar statistics such as recording Website content popularity or verifying system and server integrity.
Web beacons, cookies, and other tracking technologies do not automatically obtain your personal data. However, if you voluntarily provide personal data, these automatic tracking technologies may, for example, be used to provide further information about your activities.
Please note that you can change your browser settings to notify you when a cookie is being set or updated, or to block cookies altogether. For additional information, please consult your browser’s “help” section. If you choose to decline cookies through your browser settings, you may not be able to fully experience the features of the Website.
We may share your personal data with the parties set out below for the purposes set out in Section 4 above (“How We Use Your Personal Data”).
We require all third parties to respect the confidentiality of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions. We do not sell your personal data.
We have put in place commercially reasonable and appropriate security measures designed to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed while it is under our control, taking into consideration the risks involved in the processing and the nature of the personal data.
Unfortunately, the transmission of information via the Internet is not completely secure. Although we do take appropriate steps designed to protect your personal data, we cannot guarantee the security of your personal data transmitted to the Website or via e-mail transmission. Any transmission of personal data is at your own risk.
Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not currently respond to do not track signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com
For additional information relevant to California residents, including related to their privacy rights under the California Consumer Privacy Act (“CCPA”), please refer to our Supplemental Privacy Policy for California Residents, which is available here: Supplemental Privacy Policy for California Residents.
While in some instances we may collect personal data about children with the consent of a parent or guardian, such as for clinical activities, we do not otherwise knowingly solicit data from, or market to, children. The Website is not intended for children, and we do not knowingly collect personal data from children. If a parent or guardian becomes aware that his or her child has provided us with personal data, he or she should contact us as described in Section 1 above (“How to Contact Us”). We will take reasonable steps to delete such data within a reasonable time.
This Website may include links to third-party websites (including, without limitation, social media sites such as Facebook or Twitter), plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit. Please note that linked third-party websites may also use cookies or other tracking mechanisms. If you have any questions about how third-party websites use cookies, you should contact such third parties directly.
Please note Kymera may provide additional privacy notices to individuals at the time we collect their personal data. For example, we provide a specific privacy notice to clinical trial participants that describe our privacy practices in connection with conducting clinical trials. Employment applicants may also be provided with a separate privacy notice. In the event of any conflict or inconsistency, this type of an “in-time” notice will govern how we may process the information you provide at that time.
We reserve the right to modify this Privacy Policy at any time. We encourage you to periodically review this page for the latest information on our privacy practices. If we make any changes, the updated Privacy Policy will be posted with a revised effective date, unless another type of notice is required by applicable law. Your continued use of the Website and/or services or offerings after any such updates take effect will constitute acceptance of any changes.
*****
Privacy Policy Last Revised: November 17, 2023
*****