Regeneron Privacy Notice

Last updated November 20, 2025

View a printable copy of this Privacy Notice in the following languages:

This Privacy Notice ("Privacy Notice") will tell you how Regeneron Pharmaceuticals, Inc. and the following subsidiaries and affiliates: Regeneron Ireland Unlimited Company, Regeneron UK Limited, Regeneron Genetics Center LLC, Regeneron GmbH, Regeneron Belgium BV, Regeneron France SAS, Regeneron Italy S.r.l, Regeneron Japan KK, Regeneron Spain, S.L.U., Regeneron Switzerland GmbH, Regeneron Canada Company, Regeneron NL B.V., Regeneron Healthcare Solutions and Regeneron India Private Limited (“Regeneron,” “we,” “us,” or “our”), collect, use, and disclose Personal Data about you in connection with your use of Regeneron websites, our co-branded websites, and any other website or mobile application that links to this Privacy Notice (together, the “Regeneron Sites”), and any other activity where this Privacy Notice is incorporated by reference (collectively, the “Services”).

“Personal Data" means any information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, to an individual.

Your U.S. State Privacy Rights: If you are a resident of California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, please review our Supplemental U.S. State Privacy Disclosures for additional information regarding our processing of your Personal Data and the rights that you may have under applicable law.

Read our supplemental privacy notices for additional information regarding our processing of:

Personal Data about healthcare providers | Read our HCP Privacy Notice
Personal Data about Regeneron suppliers | Read our Supplier Privacy Notice
Personal Data collected as part of an adverse event | Read our Adverse Event Privacy Notice
Consumer health data subject to applicable law | Read our Consumer Health Data Privacy Notice

What Information Do We Collect?
How Do We Use Your Information?
How Do We Disclose Your Information?
How Long Do We Retain Your Information?
Our Use of Cookies and Similar Technologies
What are Your Rights and Choices?
International Transfers
How Do We Protect Your Personal Data?
Third Party Links
Children
Contact Us
Changes to this Privacy Notice
Supplemental U.S. State Privacy Disclosures
Supplemental Canada Notice
Supplemental EEA/UK Notice

What Information Do We Collect?

Depending on your interaction with us, we may collect Personal Data about you directly from you, automatically when you use the Regeneron Sites, or from third party sources.

Information We Collect Directly From You. We collect Personal Data that you choose to provide, such as when you contact us or submit a request through the Regeneron Sites or Services, send us an email, or interact with us on social media platforms. This includes information you post in public spaces on the Regeneron Sites or other publicly available resources, such as your comments, videos, or photos. We may also collect Personal Data that you provide about other people, for example, if you are an authorized or legal representative, family member, or caregiver. If you provide or permit us to collect Personal Data relating to another person, you are affirming that you are authorized to share that data and permit us to use the data as described in this Privacy Notice. The Personal Data that we collect directly from you may include your name, email address, mailing address, telephone number, government-issued identification number, feedback and preferences, the contents of your communications with us, and any other information you choose to provide. If you request updates about Regeneron products, we may also collect information that you provide about your individual health conditions, diagnoses, and treatments.
Information We Collect Automatically. We automatically collect information when you access or interact with the Regeneron Sites using cookies, pixel tags, clear GIFs, and similar technologies. This may include information such as your IP address, browser type and operating system, browsing history, clickstream data, and search history on the Regeneron Sites; the language and date of your visit, the length of time you visit the Regeneron Sites, and the referring URL or webpage that led you to the Regeneron Sites; the general physical location of your device or network connection; and information regarding your interaction with an internet website, application, email, newsletter, or advertisement, including access logs and other activity information related to your use of the Regeneron Sites. Read the section on Our Use of Cookies and Similar Technologies for more information.
Information We Collect From Other Sources. We collect Personal Data about you from other sources, such as publicly available databases, service providers, joint marketing partners, partners with whom we offer co-branded products, event sponsors, advertising partners, analytics partners, social networks, data aggregators, consumer reporting agencies and other third parties who verify the information you provide, healthcare providers (including specialty pharmacies), payors, and governmental or regulatory authorities. We also collect Personal Data about you from your authorized or legal representatives, family members, and caregivers.

We also collect Personal Data in the following circumstances:

Adverse Event, Product Complaint or Medical Inquiry. You may voluntarily provide us with Personal Data when you inquire about medical information, raise complaints or report adverse events regarding our products. If you are reporting a product experience involving one of our products, we may follow up to ask you for specific facts, including without limitation patient name, initials, age, gender and prescribing physician. If you are self-reporting, we may ask for additional contact information. Applicable regulations require us to collect identifiable information to file reports with regulatory agencies such as the U.S. Food and Drug Administration regarding the safety of our products. Read our Adverse Event Privacy Notice for more information regarding Personal Data collected as part of an adverse event report.
Patient Support Programs. If you participate in a Regeneron patient support program, we collect Personal Data directly from you, or from your healthcare provider (HCP), payor, or related third parties, such as your individual health conditions, diagnoses, and treatments, insurance information, and prescribing physician information. We may use and disclose your Personal Data to administer and manage the patient support program, including for facilitating benefit verification, to conduct HCP follow-up, safety monitoring, and as may otherwise be contemplated by applicable patient enrollment forms.

How We Use Your Information

We may use the Personal Data we collect about you for the following business purposes:

To provide Regeneron Sites and Services. We use your information to operate, manage, and maintain our business, to provide the Regeneron Sites and Services, to contact you about your use of the Regeneron Sites and Services, to process and fulfill your requests, to feature and verify content that you provide to us, to respond to your inquiries, and for other customer service and business administration purposes. We also use your information to process your program enrollment and provide services in our patient support programs.
To improve the Regeneron Sites and Services. We use your information to conduct research, analytics, and data analysis, to monitor, improve, and administer the Regeneron Sites and Services, and to develop new products, services, features, and functionality.
For identification and authentication purposes. We use your information to validate your identity, such as in connection with your participation in a patient support program.
To personalize your experience. We use your information to tailor the content and information that we may send or display to you, to offer location customization, to provide personalized help and instructions, and to otherwise personalize your experience on the Regeneron Sites and Services. We may also use your information to build segments and profiles based on your characteristics, preferences, and interests, including to personalize your experience and deliver relevant content, products, and services tailored to your specific needs and behaviors.
For marketing and promotional purposes. We use your information to send you news and newsletters, to communicate with you, and to advertise and market our products, as well as the co-branded products that we offer with our partners and collaborators.
To protect us and others. We use your information to conduct risk and security controls and monitoring, to detect, prevent, and respond to potential fraud, intellectual property infringement, violations of our Terms of Use, violations of law, or other misuse of the Regeneron Sites or Services. We may also use your information to ensure the safety of our properties, personnel, and visitors and to send communications in connection with the same (such as via SMS, email, call, audio-visual device prompts, etc.).
To comply with our legal obligations. We use your information where we believe necessary to comply with our legal obligations and internal policies, to establish, exercise, and defend our rights and legal claims or the rights and claims of a third party, to perform accounting, audit, and other internal functions (such as internal investigations), and to maintain records.
Deidentified data. We may aggregate, deidentify, or anonymize your Personal Data for any purpose permitted under applicable law, such as analytics, research and publication, and the development and improvement of Regeneron’s programs and related services, products, and medicines.

How Do We Disclose Your Information?

We may disclose the Personal Data we collect about you for our business purposes as follows:

Within our Family of Companies. We may disclose your Personal Data to other Regeneron companies for the purposes described in this Privacy Notice.
Partners and Collaborators. We may disclose your Personal Data to partners with whom we collaborate regarding our products or services, such as our alliance and co-promote partners in connection with products and services that we jointly develop or market.
Third Parties. We may disclose your Personal Data to our third-party business partners, such as our advertising and analytics partners, including through the use of cookies, pixel tags, and similar technologies on the Regeneron Sites. Read the section on Our Use of Cookies and Similar Technologies and the Cookie Policy linked to the footer of certain Regeneron Sites for additional information.
Service Providers. We disclose your Personal Data to service providers, contractors, and agents that we retain to perform services and functions on our behalf for the purposes set out in this Privacy Notice. For example, we engage service providers to support website hosting, data analytics and research, information technology and related infrastructure, email delivery, auditing, customer service, the provision of our patient support programs, and other business functions. We may also disclose your Personal Data to our attorneys, auditors, and consultants for the purposes described in this Privacy Notice.
In Connection with Business Transfers. If (i) we or our affiliates are or may be acquired by, merged with, or invested in by another company in whole or in part, or (ii) any of our assets are or may be transferred to another company in whole or in part, whether as part of a joint venture, assignment, bankruptcy, insolvency proceeding or otherwise, we may transfer the Personal Data we have collected about you to the other company. As part of the business transfer process, we may disclose certain of your Personal Data to lenders, auditors, and third-party advisors, including attorneys and consultants.
In Response to Legal Process. We may disclose your Personal Data where we believe necessary to comply with a law, judicial proceeding, regulation, court order, or other legal process, such as in response to a subpoena.
To Protect Us and Others. We may disclose your Personal Data where we believe it is appropriate to do so to investigate, prevent, or take action regarding actual or suspected illegal activities, fraud, situations involving potential threats to the safety of any person, violations of our Terms of Use or this Privacy Notice, or as evidence in litigation in which we are involved.

How Long Do We Retain Your Information?

We retain your Personal Data only for so long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law or necessary to establish, exercise, or defend legal claims. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you and provide any services to you (for example, for as long as you are using our services); (ii) whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of our relationship with you or your transactions for a certain period of time before we can delete them); and (iii) whether retention is advisable in light of our legal position (for example, in connection with applicable statutes of limitations and litigation or regulatory investigations).

&nbs;

Our Use of Cookies and Similar Technologies

We, and our third-party advertising and analytics partners use cookies, pixel tags, and similar technologies to track information about your use of the Regeneron Sites to better understand, customize, and improve your experience on the Regeneron Sites and Services, as well as for advertising purposes. We may combine this information with other information we collect about you (and our third-party business partners may do so on our and their own behalf). Where required under applicable law, we will ask for your consent to use cookies and similar technologies for the processing purposes set out in this Privacy Notice.

What are cookies? Cookies are small text files that are stored on the browser of your computer. They store certain information (for example, site settings) which your browser may (depending on the lifespan of the cookie) retransmit to us upon your next visit to the Regeneron Sites. A cookie can store information about the use and users of a website. Some cookies are necessary for the website to function, others allow customization and optimization of the content displayed, the collection of user preferences, audience monitoring, website error detection, or securing access to the Regeneron Sites. Please review your browser’s “Help” file to learn the proper way to modify your cookie settings. While you may still use the Regeneron Sites if you reject cookies, your ability to use some areas of the Regeneron Sites may be limited.You can learn more about cookies here.
Clear GIFs, pixel tags, and other technologies. Clear GIFs are tiny graphics with a unique identifier, similar in function to cookies. In contrast to cookies, which are stored on your computer’s hard drive, clear GIFs are embedded invisibly on web and app pages. We may use clear GIFs (a.k.a. web beacons, web bugs, or pixel tags) to, among other things, track the activities of visitors to the Regeneron Sites, help us manage content, and compile statistics about Regeneron Site usage. A clear GIF can collect information such as: the IP address of the computer that downloaded the page on which the tag appears; the URL of the page on which the pixel tag appears; the time the page containing the pixel tag was viewed; the browser type and language; the device type; geographic location; or the identification number of any cookie on the computer previously placed by that server. We and our third party business partners may also use clear GIFs in HTML emails to our customers, to help us track email response rates, identify when our emails are viewed, and track whether our emails are forwarded.
Session replay technologies. We may use session replay technologies to monitor and record your interactions with certain Regeneron Sites for purposes described in this Privacy Notice, including to diagnose errors and to otherwise improve the Regeneron Sites and Services.
Analytics. We may use third-party analytics tools, such as Google Analytics, to analyze your use of the Regeneron Sites in order to improve our products and services. The information collected by Google in connection with your use of the Regeneron Sites (including your IP address) will be transmitted to a server of Google in the United States, where it will be stored and analyzed. You can find out how Google Analytics uses data and how to opt out of Google Analytics.
Interest-based advertising. In certain instances, we may set tracking tools (for example, cookies or clear GIFs) provided by third-party advertising partners to collect information regarding your activities on the Regeneron Sites (for example, your IP address, page(s) visited, time of day) for advertising purposes. We may also share such information with third-party advertising partners. These advertising partners may use this information (and similar information collected from other websites) for purposes of delivering targeted advertisements to you when you visit unaffiliated websites within their networks. This practice is commonly referred to as “interest-based advertising” or “online behavioral advertising.” You may be able to opt-out of interest based advertising from third party advertising partners that participate in certain industry groups by visiting: Digital Advertising Alliance (US), European Interactive Digital Advertising Alliance, or AdChoices (Canada).

You can control which third-party advertising and analytics trackers are used on a Regeneron Site by clicking the “Your Privacy Choices,” or “Privacy Preference Center” link in the website footer.

What are Your Rights and Choices?

Depending on the region in which you reside, and subject to exceptions under applicable law, you may have certain rights regarding our processing of your Personal Data.

U.S. Residents:

You have certain rights under applicable U.S. state privacy laws if you are a resident of California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia. For information about those rights and how you can submit a request, review our Supplemental U.S. State Privacy Disclosures.

Residents of Other Jurisdictions:

Subject to applicable exceptions, you may have the following rights regarding our processing of your Personal Data under applicable law:

obtain confirmation regarding our processing of your Personal Data;
request access to or a copy of the Personal Data we have collected about you;
request that we correct, update, or amend the Personal Data that we hold about you;
request that we delete or anonymize your Personal Data;
request that we stop or restrict our use of your Personal Data (including opting out of emails or calls from us);
request the portability or transfer of the Personal Data we maintain about you to another organization, or to you, in a structured, commonly used, and machine-readable format; and
where you have provided consent to our processing of your Personal Data, withdraw such consent at any time for our future processing.

You may also have the right to object at any time, and in accordance with applicable law, to our processing of your Personal Data where such processing is based on our or a third party’s legitimate interests. If we process your Personal Data for direct marketing purposes, you may have a right to object to such processing.

In some jurisdictions, you have a right to lodge a complaint with the relevant data protection authority. Please click these links for contact information for the EU data protection authorities and UK data protection authority.

To exercise your rights under applicable law: Submit your request through our webform or contact us by email at [email protected]

International Transfers

Regeneron is a global organization with affiliates, partners and subcontractors located in many countries around the world. Your Personal Data may be stored and processed in any country where we or our collaborators have facilities or in which we engage service providers, including in the U.S. and where our affiliates operate.

If you are located in the EEA, for transfers to specific countries outside the EEA that provide an adequate level of protection for Personal Data, we rely on the relevant adequacy decision issued by the European Commission. Countries currently recognized by the European Commission that we transfer data to include Canada, Japan, Switzerland and the United Kingdom. You can access each adequacy decision here.

For transfers from the EEA to countries not considered adequate by the European Commission, we have put in place adequate measures, such as by ensuring that the recipient is bound by EU Standard Contractual Clauses, to protect your Personal Data. You may obtain a copy of these measures, by contacting us as indicated in the Contact Us section below.

How Do We Protect Your Personal Data?

Regeneron uses technical and organizational security measures designed to guard against unauthorized access to your Personal Data or against the unauthorized alteration, disclosure, destruction, or loss of such data. Although we endeavor to take reasonable precautions to protect the information we collect on the Regeneron Sites and Services, no data security measures can guarantee security.

Third Party Links

The Regeneron Sites and Services may contain links to third party websites and applications that are not owned or controlled by Regeneron. Any access to or use of such linked websites and applications is not governed by this Privacy Notice, but is instead governed by the privacy notices of those third-party websites and applications. We recommend that you read the privacy notices and terms associated with any third-party websites and applications that you choose to visit.

Children

The Regeneron Sites and Services are not designed for children under the age of 16. If we discover that a child under the age of 16 has provided us with Personal Data, we will take reasonable steps to delete such Personal Data from our systems.

Contact Us

If you have any questions about this Privacy Notice, or wish to contact the data protection officer for your country or region (if applicable), please email us at [email protected].

You may also contact us at the following postal address.:

Regeneron Pharmaceuticals, Inc.
Chief Privacy Officer
1 Rockwood Road
Sleepy Hollow, NY 10591
USA

For Regeneron Sites and Services specific to the UK or an EU country, the data controller for Personal Data collected through those Regeneron Sites and Services is the Regeneron entity located in that country. Each such Regeneron Site or Service will provide contact details for the responsible entity in the website footer. You can review a list of Regeneron offices and corresponding contact details.

Changes to this Privacy Notice

We may amend this Privacy Notice at any time. Any changes to this Privacy Notice will be posted on the Regeneron Sites. Should these amendments materially relate to any consents you may have given, we will post an updated Privacy Notice on the Regeneron Sites and Services, list the effective date of such updates, and in situations where legally required for the processing of your Personal Data, contact you to obtain your consent to any change in our use of your Personal Data.

Supplemental U.S. State Privacy Disclosures

You may have certain rights regarding our processing of your Personal Data under applicable U.S. state privacy laws, including if you are a consumer in California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia. If our processing of your Personal Data is governed by such laws, this section provides you with additional information regarding our processing of your information and your rights under applicable law.

Our Processing of Your Personal Data

The chart below describes the categories of Personal Data that we collect and the categories of third-parties to whom we may disclose, “sell,” or “share” each category of Personal Data for the purposes set out in the section on How We Use Your Information. We may “sell” or “share” your Personal Data for cross-context behavioral advertising purposes (as those terms are defined under applicable law). We do not knowingly “sell” or “share” the Personal Data of consumers under 16 years of age. We do not use or disclose your sensitive data for purposes other than permitted under applicable law.

Identifiers, such as your name, date of birth, email address, telephone number, mailing address, IP address, device identifier, unique online identifier, or similar identifiers.

Service providers
Internet service providers
Data analytics providers
Partners and collaborators
Affiliates, subsidiaries
Successors-in-interest as a result of business transfer or assignment
Regulatory authorities, government agencies and law enforcement
Others as may be required by law

Advertising networks
Data analytics providers

Commercial Information, such as records of services and resources obtained or considered, feedback you may provide, preferences you may express, and the contents of your communications with us.

Service providers
Internet service providers
Data analytics providers
Partners and collaborators
Affiliates and subsidiaries
Successors-in-interest as a result of business transfer or assignment
Regulatory authorities, government agencies and law enforcement
Others as may be required by law

Not applicable

Audio, visual, or similar information, such as voicemail and other call recordings when you contact us by phone, and videos or photographs that you choose to provide to us or make publicly available on the Regeneron Sites or other publicly available resources.

Service providers
Internet service providers
Data analytics providers
Partners and collaborators
Affiliates and subsidiaries
Successors-in-interest as a result of business transfer or assignment
Regulatory authorities, government agencies and law enforcement
Others as may be required by law

Not applicable

Geolocation Data, such as the general physical location of your device or network connection.

Service providers
Internet service providers
Data analytics providers
Partners and collaborators
Affiliates, subsidiaries
Successors-in-interest as a result of business transfer or assignment
Regulatory authorities, government agencies and law enforcement
Others as may be required by law

Not applicable

Internet or other electronic network activity, such as your browser type and operating system, browsing history, clickstream data, and search history on the Regeneron Sites; the language and date of your visit, the length of time you visit the Regeneron Sites, and the referring URL or webpage that led you to the Regeneron Sites; and information regarding your interaction with an internet website, application, email, newsletter, or advertisement, including access logs and other activity information related to your use of the Regeneron Sites.

Service providers
Internet service providers
Data analytics providers
Partners and collaborators
Affiliates and subsidiaries
Successors-in-interest as a result of business transfer or assignment
Regulatory authorities, government agencies and law enforcement
Others as may be required by law

Advertising networks
Data analytics providers

Inferences, such as those drawn to create a profile reflecting your preferences, characteristics, behavior, abilities, or attributes.

Service providers
Internet service providers
Data analytics providers
Partners and collaborators
Affiliates and subsidiaries
Successors-in-interest as a result of business transfer or assignment
Regulatory authorities, government agencies and law enforcement
Others as may be required by law

Advertising networks
Data analytics providers

Characteristics that may be protected under applicable law, such as your age and gender.

Service providers
Internet service providers
Partners and collaborators
Affiliates and subsidiaries
Successors-in-interest as a result of business transfer or assignment
Regulatory authorities, government agencies and law enforcement
Others as may be required by law

Not applicable

Sensitive Data, as defined under applicable law, such as your social security number or other government-issued identification number, certain characteristics that may be protected under applicable law, and health data, such as your health conditions, diagnoses, treatments, insurance information, and prescribing physician information.

Service providers
Internet service providers
Data analytics providers
Partners and collaborators
Affiliates and subsidiaries
Successors-in-interest as a result of business transfer or assignment
Regulatory authorities, government agencies and law enforcement
Others as may be required by law

Not applicable

Data Retention

We retain your Personal Data only for so long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law or necessary to establish, exercise, or defend legal claims. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you and provide any services to you (for example, for as long as you are using our services); (ii) whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of our relationship with you or your transactions for a certain period of time before we can delete them); and (iii) whether retention is advisable in light of our legal position (for example, in connection with applicable statutes of limitations and litigation or regulatory investigations).

Deidentified Data

We may deidentify your Personal Data in such a way that you may not reasonably be reidentified by us or another party, and we may use such deidentified data for any purpose permitted under applicable law. To the extent we deidentify data originally based on your Personal Data, we will maintain and use such data in deidentified form and will not attempt to reidentify the data, except as otherwise permitted under applicable law.

Your Privacy Rights

Except as otherwise noted, and subject to applicable exceptions, you may have the following rights under applicable law:

Request to know / access information regarding our processing of your Personal Data, including:

the categories of Personal Data we have collected about you;
the categories of sources from which we have collected your Personal Data;
our business or commercial purpose for collecting, “selling,” or “sharing” your Personal Data;
the categories of third parties to whom we have disclosed, “sold,” or “shared” your Personal Data;
the specific third parties to whom we have disclosed your Personal Data;
the specific pieces of Personal Data we have collected about you; and
the categories of Personal Data we have disclosed about you for a business purpose.

Request to delete the Personal Data we collected about you.
Request to correct or update the Personal Data that we hold about you.
Request to opt out of targeted advertising, “sales,” or “sharing” of your Personal Data (as those terms are defined under applicable law).
Right to be free from discrimination or retaliation for exercising your rights under applicable law.
Right to appeal a decision we have made relating to requests to exercise your rights under applicable law.

Please note that your rights may be limited or denied in some circumstances. For example, we may retain your Personal Data where required or permitted by applicable law.

Submitting Requests

To exercise your right to know / access, correct, or delete, or if you are an authorized agent exercising rights on behalf of a consumer under applicable law, please submit your request through this webform or contact us at 1-844-835-4137 or [email protected]. You or your authorized agent may be asked to provide information such as your mailing address, telephone number, and email address to verify your identity. Authorized agents may also be required to provide a copy of your signed permission authorizing the agent to submit a request on your behalf.
To exercise your rights to opt out of “sales,” “sharing,” or targeted advertising, or if you are an authorized agent exercising rights on behalf of a consumer under applicable law, please submit your request through the “Your Privacy Choices,” or “Privacy Preference Center” link in the footer of the Regeneron Sites. We also process requests submitted through opt-out preference signals recognized under applicable law, such as the Global Privacy Control. These signals set your opt-out preferences only for the particular browser or device you are using and any profile that we associate with that browser or device. For information about how to use the Global Privacy Control, please visit https://globalprivacycontrol.org/.
Where you have a right to appeal our decision on your data subject request under applicable law, you may contact our Privacy Office at [email protected]. Please enclose a copy of or otherwise specifically reference our decision on your data subject request, so that we may adequately address your appeal. We will respond to your appeal in accordance with applicable law.

Supplemental Canada Notice

How We Safeguard Your Information

We use safeguards designed to protect your Personal Data from loss and unauthorized access, use and disclosure, including:

A privacy governance program comprised of policies and procedures regarding the protection of Personal Data through its lifecycle and which defines the roles and responsibilities of Regeneron’s personnel regarding the handling of Personal Data.
Employee privacy and data security training.
Procedures for receiving, investigating and responding to complaints or inquiries regarding Regeneron’s information handling practices.
Contractual provisions and other measures to require our service providers with whom we share Personal Data to maintain adequate privacy protections and standards.

International Transfers of Personal Data

As part of the data processing activities described in this Notice, we may transfer your Personal Data outside of Canada, including to the United States. As such, your Personal Data may be subject to foreign laws and may be accessible by foreign governments, courts, law enforcement and regulatory agencies.

Supplemental EEA/UK Notice

We and our service providers rely on the following legal bases when processing Personal Data for the purposes described in the How Do We Use Your Information? Section:

Administering the Services

To provide the Regeneron Sites and Services, process and fulfill your requests, respond to your inquiries, and for other customer service and business administration purposes
To process your program enrollment and provide services in our patient support programs
To validate your identity, such as in connection with your participation in a patient support program
To contact you.

Name; contact information, IP address and device identifiers, device information; social media information; approximate geolocation information, personal data related to correspondence and inquiries

Legal obligations, such as to inform you of material changes to our terms and conditions to comply with applicable consumer laws and data protection laws, or when you submit a request to access your Personal Data
Legitimate interests, such as improving the functionality and user experience of the Regeneron Sites and maintaining operational efficiency and communicating with you.

Operations and general business

To operate, manage, and maintain our business
To monitor, improve, and administer the Regeneron Sites and Services
To maintain records

Personal Data as relevant for the specific business operation, such as name, contact information, government-issued identification, IP address and device identifiers, device information, social media information, and personal data related to correspondence and inquiries

Legitimate interests, such as ensuring operational efficiency, business continuity and developing new services
Legal obligations, for example, relating to financial transactions such as maintaining records
Consent, such as when we collect Personal Data through the use of cookies and similar technologies

Research and analytics

Conducting research, analytics, and data analysis
To build segments and profiles based on your characteristics, preferences, and interests, including to personalize your experience and deliver relevant content, products, and services tailored to your specific needs and behaviors

Personal Data as relevant for the specific business purpose, such as demographic information, website interactions, browsing history, preferences, device information, survey responses and feedback, consent records

Legitimate interests, such as developing and improving Regeneron's programs and related services, products and medicines
Consent, such as when we collect Personal Data through the use of cookies and similar technologies

Marketing

Personalizing, advertising, and marketing our products, as well as the co-branded products we offer with our partners
Featuring and verifying content that you provide to us

Name; contact information; device information; social media information; approximate geolocation information; demographic information, website interactions, browsing history, preferences, device information, survey responses and feedback; social media profiles and public posts, user-generated content, consent records

Consent for direct marketing via email, SMS, and phone where it has been collected and where required by applicable law.
Legitimate interests for marketing communications where permissible under applicable law and consent has not been obtained.
Legitimate interests for activities involving personalized marketing, advertising, and service improvements based on data collected from various sources, including but not limited to cookies, user interactions, and profile data, where permitted under applicable law.

Security and fraud prevention

Conducting risk and security controls and monitoring
To ensure the safety of our properties, personnel, and visitors and to send communications in connection with the same (such as via SMS, email, call, audio-visual device prompts, etc.)
To detect, prevent, and respond to potential fraud, intellectual property infringement, violations of our Terms of Use, violations of law, or other misuse of the Regeneron Sites or Services

Name; contact information; device information; social media information; approximate geolocation information, government-issued identification, communication data

Legal obligations, such as to detect and prevent cyber attacks and comply with health and safety regulations
Legitimate interests, such as to identify and/or prevent fraudulent transactions and monitor properties to ensure individuals’ safety
Protecting individuals’ vital interests, such as contacting medical or emergency services where an individual’s life is at risk

Legal and compliance

To comply with our legal obligations and internal policies
To perform accounting, audit, and other internal functions, such as internal investigations
To establish, exercise, and defend our rights and legal claims, or the rights and claims of a third party

Personal Data as relevant for the specific legal action, regulatory investigation, and/or legal processes in question, which may include: name; contact information; device information; profile information, social media information; approximate geolocation information, financial information, communication data

Legal obligations, such as to comply with legal processes and corporate governance obligations
Legitimate interests, such as to enforce terms and conditions, to protect our intellectual property and to bring or defend claims

Regeneron Privacy Notice

Table of Contents

What Information Do We Collect?

How We Use Your Information

How Do We Disclose Your Information?

How Long Do We Retain Your Information?

Our Use of Cookies and Similar Technologies

What are Your Rights and Choices?

International Transfers

How Do We Protect Your Personal Data?

Third Party Links

Children

Contact Us

Changes to this Privacy Notice

Supplemental U.S. State Privacy Disclosures

Supplemental Canada Notice

Supplemental EEA/UK Notice