California and Nevada Privacy Policy

The California and Nevada Privacy Policy supplements the information contained in the Global Privacy Policy and applies to the use of repligen.com (the “Website”) for residents of California and Nevada, where applicable.

Notice to California residents: The California Privacy Notice is intended to comply with the California Consumer Privacy Act ("CCPA") of 2018 and other applicable California law.

Notice to Nevada residents: The Nevada Privacy Notice is intended to comply with Nevada Senate Bill 220.

California Privacy Notice

The CCPA gives certain consumers that reside in California in the United States (“California Consumers”) the right to know what categories of Personal Information Repligen collects about them and how and for what purposes we use and share that information.

This California Privacy Notice provides the information required under the CCPA and applies to the Website for residents of California in the United States relating to California Consumers’ Personal Information.

As used in this California Privacy Notice, “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. Personal Information includes, but is not limited to, the categories of Personal Information identified below if such information identifies, relates to, describes, is reasonably capable of being associated with, or could be reasonably linked, directly or indirectly, with a particular individual or household.

If you are a resident of California and disagree with the terms of this California Privacy Notice, do not use the Website. If you are not a resident of California, this California Privacy Notice does not apply to you; instead, please refer to the Global Privacy Policy.

Repligen Does not Sell Your Personal Information

Repligen does not sell Personal Information of California Consumers.

Personal Information We Collect

The chart below outlines the categories of Personal Information (defined by the CCPA) that Repligen has collected and/or disclosed for a business purpose in the preceding twelve (12) months. The examples of Personal Information provided for each category are taken from the CCPA and are included to help you understand what the categories mean. The examples are not meant to indicate what we actually collect or disclose.

Category	Collect	Disclose
A. Identifiers Examples: Name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers	○	○
B. Categories of Personal Information in Cal. Civ. Code 1798.80(e) Examples: Name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.	○	○
C. Characteristics of Protected Classifications under California or Federal Law Examples: Race or color, ancestry or national origin, religion or creed, age (over 40), mental or physical disability, sex (including gender and pregnancy, childbirth, breastfeeding or related medical conditions), sexual orientation, gender identity or expression, medical condition, genetic information, marital status, military and veteran status.	×	×
D. Commercial Information Examples: Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	×	×
E. Biometric Information Examples: Physiological, biological, or behavioral characteristics, including DNA, that can be used, singly or in combination with each other or with other identifying data, to establish individual identity, such as imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.	×	×
F. Internet or Other Electronic Network Activity Information Examples: Browsing history, search history, and information regarding a consumer’s interaction with an internet website, application or advertisement.	○	×
G. Geolocation Data Examples: Precise physical location, GPS information.	×	×
H. Sensory Information Examples: Audio, electronic, visual, thermal, olfactory, or similar information	×	×
I. Professional or employment-related information Examples: Job application or resume information, past and current job history.	○	×
J. Non-Public Education Information (as defined in 20 U.S.C. 1232g; 34 C.F.R. Part 99) Examples: Records that are directly related to a student maintained by an educational agency or institution or by a party acting for the agency or institution.	×	×
K. Inferences Drawn from Personal Information Examples: Consumer profiles reflecting a consumer’s preferences, characteristics, psychological trends, preferences, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	○	×

Use of Personal Information

Repligen collects, uses, and discloses Personal Information pursuant to the Global Privacy Policy. This includes the collection, use, and disclosure of Personal Information in accordance with the specific CCPA Business Purposes (as defined in the CCPA) and the following related commercial purposes:

To provide the information, product or service requested by you or as reasonably expected given the context in which with the Personal Information was collected (such as customer credentialing, providing customer service, personalization and preference management, providing product updates, bug fixes or recalls, and dispute resolution)
Contracting with service providers to perform services on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider
For identity and credential management, including identity verification and authentication, system and technology administration
To protect the security and integrity of systems, networks, applications and data, including detecting, analyzing and resolving security threats, and collaborating with cybersecurity centers and law enforcement about imminent threats
For fraud detection and prevention
For legal and regulatory compliance, including all uses and disclosures of Personal Information that are required by law or for reasonably needed for compliance with company policies and procedures, as well as for compliance with civil, criminal, judicial, or regulatory inquiries, investigations, subpoenas, or summons
To exercise or defend the legal rights of Repligen and its employees, affiliates, customers, contractors, and agents
To comply with applicable tax, health and safety, anti-discrimination, immigration, labor and employment, and social welfare laws
For corporate audit, analysis and reporting
To enforce our contracts and to protect against injury, theft, legal liability, fraud or abuse, and to protect people or property
To de-identify the data or create aggregated datasets, such as for consolidating reporting, research or analytics
To make back-up copies for business continuity and disaster recovery purposes
For corporate governance, including mergers, acquisitions and divestitures
For other purposes for which we provide specific notice at the time the information is collected.

Repligen may share your Personal Information with the following categories of CCPA third parties:

Affiliates

Vendors and service providers, including for data analytics or marketing and advertising our products and services to you
Third parties integrated into our services
Third parties as required by law and similar disclosures
Third parties in connection with a merger, sale, or asset transfer
Other third parties for whom we have obtained your permission to disclose your Personal Information.

California Privacy Rights

If you are a California Consumer, you may exercise the following rights:

Right to Know and Access

You have the right to request from us:

The categories of Personal Information we have collected about you, the categories of sources from which the Personal Information is collected, the business purpose or commercial purpose for collecting the Personal Information, the categories of third parties with whom we share Personal Information, the categories of Personal Information we have shared and the reasons we shared it; and
A copy of the specific pieces of Personal Information we have collected about you in the preceding 12 months

Right to Delete

You have the right to request that Repligen delete the Personal Information we collect from you if applicable. In certain situations, we are not required to delete your Personal Information, such as when the information is necessary in order to complete a transaction for which the Personal Information was collected, to provide goods or services requested by you, to comply with a legal obligation, to engage in research, to secure our websites or other online services, or to otherwise use your Personal Information internally in a lawful manner that is compatible with the context in which you provided the information
Right Not to Be Subject to Discrimination

Requests for access to or deletion of Personal Information are subject to Repligen’s ability to reasonably verify your identity in light of the information requested and pursuant to relevant CCPA requirements, limitations, and regulations. If we are successful in validating your identity, Repligen will respond to your request within the time and in the manner required by CCPA. If Repligen cannot validate your identity, we will attempt to contact you to inform you of this issue.

Modifications

Repligen reserves the right to modify this California Privacy Notice at any time, and any changes made will be posted directly to this Website. Any changes will be effective when posted to this Website. You are responsible for checking this California Privacy Notice periodically for changes. Your continued use of this Website following the posting of changes will mean that you accept and agree to the changes.

Nevada Privacy Notice

If you are a Nevada resident, under Privacy and Security of Personal Information Chapter of the Nevada Revised Statutes Section 603A (“603A”), we are required to provide notice that Repligen does not sell personally identifiable information and does not have plans to start.

Contact Information

If you have any questions about the California Privacy Notice or the Nevada Privacy Notice, the data we hold on you, or you would like to exercise one of your rights under the CCPA or Nevada Senate Bill 220, please contact us by emailing [email protected] or calling 800.622.2259.