Privacy Notice

Effective Date: April 2, 2025

Emergent BioSolutions Inc. and its subsidiaries (“Emergent”) respect your privacy and are committed to protecting your personal information. This Privacy Notice (“Notice”) explains how we collect, use, store, and share personal information, as well as the measures we take to safeguard it.

Regional Notices

California Residents: This Notice outlines how we collect, use, disclose, and retain your personal information. For details about your rights, see the Laws and Rights That May Apply to You section below.
Canadian Residents: We collect, use, disclose, and retain your personal information when you:
- Interact with us or visit our website.
- Submit information to us.
- Sign up for or use our products or services.
Washington Residents (WA MHMDA): If you reside in Washington, the My Health My Data Act (MHMDA) provides additional protections for your health-related data. See the WA MHMDA section below for more information on how we collect, use, and share your health data, and your rights.

Who This Notice Applies To

This Notice applies to:

Users of Emergent products and services.
Job applicants submitting information through our careers site.
Visitors to Emergent-owned websites and digital platforms.
Individuals contacting Emergent or being contacted regarding our products and services.
Individuals ordering our products online or making inquiries.
Individuals reporting concerns through our third-party vendor, Convercent.

Your Consent & Our Legal Basis for Processing

By interacting with us, you consent to our collection, use, and disclosure of your personal information to authorized service providers and relevant third parties for the purposes outlined in this Notice. This consent supplements but does not replace any prior consents you have provided and does not limit any legal rights we have under applicable law to collect, use, or disclose your personal information.

Information We Collect

What Personal Data We May Collect

We collect personal data provided by you for the purposes outlined in this notice. Depending on your interactions with us, the categories of personal data we may collect include:

Personal Contact Information: Name, email, postal address, phone number, country, and social media identifiers.
Professional Contact Information: Job title, organization, business contact details, National Provider Identifier (NPI), tax identification numbers.
Professional Credentials: Resume/CV, employment details, certifications, professional memberships, educational background, research specializations, and publications.
Scientific & Research Information: Areas of expertise, clinical trial participation, research interests, academic affiliations, and publications.
Audio/Visual Data: Video recordings, photographs, and audio from event participation, office visits, or testimonials.
Registration Information: Contact details for event registration, access to materials, and industry collaborations.
Transaction Data: Payment information, billing/shipping addresses, order history related to product purchases or event registrations.
Compliance Data: Industry-required documentation, including conflict-of-interest disclosures, adverse event reporting, and healthcare professional interactions.
Survey & Feedback Data: Responses to surveys or communications related to partnerships.

Information We Collect from Other Sources

We may also collect personal data from external sources, including:

Recruitment Data: Information from employment agencies, including resumes, employment history, qualifications, and criminal background checks (post-offer).
Professional Data: Contact information, educational history, professional certifications, and license details.
Social Media Data: Interaction details and content from social media platforms.

Visitor & Facility Information

Visitors to our manufacturing or research sites may provide personal data for registration, safety protocols, and regulatory compliance. Surveillance systems at our facilities may capture video for security purposes.

Automatic Data Collection

We may automatically collect information through cookies and tracking technologies:

Online Identifiers: IP address, device identifiers, session details.
Website Interaction Data: Browsing behavior, links clicked, and referral information.
Transaction Data: Records of purchased products and services.
Analytics Data: Tracking trends and user engagement to enhance content and user experience.

Your Choices Regarding Tracking Technologies

You have control over how tracking technologies are used on our sites:

Browser Settings: Most web browsers, including Chrome, allow you to manage or block third-party cookies through your settings. Please note that blocking or deleting cookies may impact certain site features and functionalities.
Third-Party Analytics: We may use third-party analytics and advertising services to track your activity across different websites. You can opt out of targeted advertising through services such as the Network Advertising Initiative’s Opt-Out Page or the Digital Advertising Alliance’s Consumer Choice Page.

Please be aware that some sites may implement cookie banners to manage your preferences.

How We Use Your Personal Information

We may collect, use, and disclose your personal information for various business purposes, including those outlined in this section. Where required by law, we will only process your information when we have a valid legal basis to do so.

We may use your personal information for purposes such as:

Fulfilling contracts, including providing site functionality and services
Customer service, responding to inquiries, and engaging with healthcare professionals
Organizing professional events, sending educational kits, and processing grant and Expanded Access requests
Product testimonials, recruitment activities, and processing product orders
Conducting investigations, sending updates via email, phone, or text, and delivering marketing communications
Conducting analytics, advertising, and business operations, including fraud detection and legal compliance
Ensuring product safety, responding to adverse events, and maintaining customer profiles
Complying with legal obligations and responding to regulatory inquiries

We may also anonymize or de-identify your data and use it for any purpose, without attempting to reidentify it.

Emergent may use your data for purposes disclosed at the time of collection or with your consent. If we rely on legitimate interests for processing, those interests will not override your rights and freedoms.

You may withdraw your consent at any time, and we will respect your rights without discrimination, although some functionality may change. Failure to provide required information may limit our ability to offer certain services.

Disclosure for Business Purposes

We share personal information with third parties for legitimate business needs, including:

Fraud prevention and cybersecurity
Operational services like IT, hosting, marketing, and compliance support
Advertising and analytics, including tailored advertising and performance tracking
Third-party platforms where you interact with integrated tools or social media

We encourage you to review third-party privacy policies for their data practices.

Legal Basis for Processing

Emergent processes personal information based on the following legal bases:

Consent: For marketing, testimonials, and data processing in consent-required jurisdictions.
Legitimate Interests: To improve services, detect fraud, conduct marketing, and ensure secure operations.
Contractual Performance: To fulfill product orders and provide services.
Legal Obligations: To comply with regulations, monitor product safety, and respond to authorities.

International Data Transfers

Your personal information may be transferred and stored globally, including to countries outside the European Economic Area (EEA) and the UK. We implement safeguards, like standard contractual clauses, to ensure data protection during international transfers.

For more details, contact our Privacy Office at privacy@ebsi.com.

How We Protect Your Personal Information

Security of Personal Information

Emergent implements robust administrative, technical, and physical security measures to protect your personal information. These safeguards are designed to prevent accidental, unlawful, or unauthorized access, destruction, loss, alteration, or disclosure of your data. Our security practices align with applicable legal requirements and are tailored to the specific risks associated with processing your personal information.

In the event of a security incident, Emergent follows established policies and procedures to ensure compliance with breach notification laws and regulatory obligations.

When third parties process personal information on our behalf, we require them to implement appropriate security controls through contractual agreements.

Retention of Personal Information

We retain personal information only as long as necessary to fulfill the purposes outlined in this notice, comply with our data retention policy, or meet legal requirements. Retention periods vary depending on factors such as:

The type of personal information and its use
The duration of our relationship with you
Legal and regulatory obligations, including statutes of limitation
Business needs, including compliance with pharmacovigilance requirements

Once the retention period expires, we take appropriate steps to securely delete or anonymize your personal information, in accordance with legal and regulatory obligations.

Children’s Privacy (Under 16)

Emergent does not knowingly collect personal information from or target children under the age of 16. Our websites are not intended for use by children. If you are under 16, you may use our services only with the consent or supervision of a parent or legal guardian.

If you believe we have unintentionally collected personal information from a child without proper consent, please contact us using the details provided below.

Your Privacy Rights

Your rights may vary based on your place of residence. Depending on applicable laws, you may have the right to:

Access, correct, delete, or request portability of your personal information.
Restrict or object to how we process your personal information.
Opt out of certain data uses, including cookies and marketing.
Withdraw consent at any time (without affecting prior lawful processing).
File a complaint with a relevant supervisory authority.

To exercise your rights, submit a request via our Data Subject Request Form or the contact details below. California residents may also call 855-894-4980 (toll-free). We will verify and respond to requests in accordance with applicable laws. To protect your privacy, we may require identity verification. Authorized agents may be required to provide proof of authorization.

EEA & UK Residents

If you reside in the European Economic Area (EEA) or the United Kingdom (UK), you have additional rights, including the ability to:

Request access, correction, deletion, or restriction of your personal information.
Receive your personal information in a transferable format.
Object to certain data uses, including profiling and marketing.
Withdraw consent at any time.

Some rights may be subject to legal limitations.

California Consumer Privacy Rights

Under the California Privacy Rights Act (CPRA), California residents have rights regarding how we collect, use, and disclose personal information. Over the past 12 months, we may have collected the following:

Categories of Personal Information

Identifiers: Name, email, address, phone number, social media handles.
Professional Information: Job title, employer details, qualifications, licenses.
Audio/Visual Data: Video recordings, photographs, voicemail messages.
Internet Activity: Website interactions, advertisements engagement.

Sources of Personal Information

Directly from you (e.g., when ordering products, signing up for alerts, or submitting inquiries).
Your devices (e.g., website visits and interactions).
Employment agencies and third-party sources (e.g., healthcare qualifications).

How We Use Personal Information

We use collected data for business and legal purposes, including to:

Provide website functionality and customer support.
Communicate about our products, services, and promotions.
Process orders, grant requests, and employment applications.
Conduct analytics, improve user experience, and manage professional events.
Ensure legal and regulatory compliance, including responding to law enforcement requests.

For more details or to exercise your rights, please contact us using the methods above.

Third-Party Sharing & Notice to Canada and Washington State Residents

Sharing of Personal Information with Third Parties

We do not sell your personal information for monetary gain. However, we may share certain data with third parties (e.g., online advertisers) for cross-context behavioral advertising, which may be considered a "sale" or "sharing" under California law. You have the right to opt out of such disclosures.

In the past 12 months, we may have disclosed personal information for business purposes as outlined in the Use section.

Categories of Personal Information & Third-Party Disclosures

Category	Disclosed To	Shared With
Identifiers, online identifiers	Business partners	Data analytics providers, marketing partners

Retention of Personal Information

We retain personal information as long as necessary for legitimate business purposes, legal compliance, or regulatory obligations. Retention duration depends on:

The nature of the data and its purpose.
The length of our relationship with you.
Legal or regulatory requirements, including statutes of limitations.

Disclosure of Personal Information

As described in Sharing of Personal Information with Third Parties, we may disclose personal data to service providers, affiliates, law enforcement, or in the context of mergers and acquisitions, as required by law.

Privacy Rights by Region

California Consumer Privacy Rights

California residents may:

Request access to or correction of personal information.
Obtain a copy of data collected in the past 12 months.
Request deletion of their personal information.
Opt out of data sharing for cross-context behavioral advertising.
Not be discriminated against for exercising privacy rights.

Canada Privacy Rights

Canadian residents may:

Access, rectify, or request deletion of personal information.
Obtain a copy of their data or request its transfer.
Inquire about data collection, processing, and retention.
Withdraw consent, subject to legal restrictions.
File a complaint with their supervisory authority.

Washington My Health My Data Act (WA MHMDA) Notice

Effective Date: March 2025

This notice explains how we collect, use, and share consumer health data under WA MHMDA when you interact with our websites, product pages, or forms.

1. Information We Collect
We may collect health-related data when you:

Visit product websites related to medical countermeasures or wellness.
Submit forms (e.g., vaccine requests, medical inquiries, adverse event reports).
Use interactive tools (e.g., symptom checkers, eligibility screeners).

2. How We Use Consumer Health Data
We process this data to:

Provide product and health-related information.
Respond to medical inquiries and safety concerns.
Improve digital tools and user experience.
Comply with legal and regulatory requirements.

3. How We Share Consumer Health Data

We do not sell consumer health data. We may share it:

With service providers under strict data protection safeguards.
As required by law or regulatory authorities.

4. Consent & Your Choices
By using our websites or submitting forms, you consent to data collection as described. You can manage tracking via our cookie preference center or browser settings.

To withdraw consent or request access to your data, contact us at privacy@ebsi.com.

Marketing, Advertising, & Tracking Technologies

Direct Marketing

You can unsubscribe from marketing emails at any time by clicking the “unsubscribe” link in our emails. To opt out of text messages, reply “STOP” to any text message from us. You can also update your communication preferences (email, text, mail, or phone) by contacting us via the details in the How to Contact Us section. Please note that you may still receive transactional or account-related messages.

Cookies, Tracking, and Advertising

When you visit our websites or use our online services, we and our third-party partners use cookies, pixel tags, and similar technologies to enhance functionality, personalize content, analyze traffic, and support security measures.

We use different types of cookies, including:

Strictly Necessary Cookies – Essential for core website functions (e.g., security, fraud prevention).
Functional Cookies – Store preferences (e.g., language settings) to improve user experience.
Performance/Analytics Cookies – Track website interactions to optimize site performance.
Targeting/Advertising Cookies – Used by us and third parties to deliver personalized ads based on browsing behavior.
Social Media Cookies – Facilitate content sharing and measure engagement with embedded social features.

We may also use web beacons and pixel tags to analyze email engagement and compile site usage statistics. These tools support analytics platforms (e.g., Google Analytics) and may share data with third-party advertising partners like Google and Facebook for targeted advertising.

How to Manage Cookies and Tracking

Browser Settings – Most browsers allow you to block or delete cookies.
Ad Preference Tools – Platforms like Google and Facebook offer settings to control personalized ads.
Privacy Features – Some devices and browsers offer built-in tracking controls.
Website Banners – Certain sites may display cookie banners where you can set preferences.

Note: Some browsers transmit “Do Not Track” (DNT) signals, but as this technology is not standardized, we do not currently respond to these signals. For more information, visit allaboutdnt.com.

How to Contact Us

You can manage third-party cookies and tracking preferences through:

Changes to This Privacy Notice

We may update this Notice periodically to reflect changes in our practices, services, or legal requirements. If we make changes, we will update the “Effective Date,” and the revised Notice will take effect upon posting unless stated otherwise. We encourage you to review this Notice regularly to stay informed about our privacy and cookie practices.

How to Contact Us

Emergent BioSolutions Inc. is the controller of your personal information. If you have any questions about this Notice or how we process your personal information, you can contact us at:

Email: privacy@ebsi.com

Mailing Address:
Emergent BioSolutions Inc.
Attn: Privacy Office
400 Professional Drive, Suite 400
Gaithersburg, MD 20879, USA

For individuals in Canada, including Quebec, our Data Protection Officer (DPO) is responsible for overseeing the management of personal information and can be contacted at privacy@ebsi.com or at the mailing address above.