Syneos Health Privacy Notice

Syneos Health Privacy Notice

Syneos Health ("we," "us," or "Syneos Health"), operating through its affiliates and subsidiaries located throughout the world (collectively, the "Company") is committed to protecting your privacy and has implemented the measures below to protect the personal data we process about you ("Personal Data").

If you are a California resident, please read our Notice to California Residents for additional information that we are required by the California Consumer Privacy Act of 2018 (CCPA) to provide to you.

Our Business

Syneos Health is an end-to-end, fully integrated Business-to-Business solutions company primarily servicing the biopharmaceutical industry.

Our websites, mobile applications, and other services are principally designed for or provided on behalf of businesses. In connection with marketing our services, or providing services for or on behalf of our customers, we interact with individuals who represent businesses, such as doctors. When doctors and other business representatives share their information with us in the context of these interactions, it is with the understanding that we will share their details with our actual and potential customers. This is because our customers are looking to provide services to the businesses those individuals represent or obtain services from them. Facilitating these engagements is a core part of our business.

We treat all doctors and other healthcare providers who visit our websites as representatives of their business and who provide information through our websites in their business capacity. Except with respect to the portion of our websites dedicated to investors, or where otherwise identified by us, our websites, mobile applications and other services are not intended for individuals to use for personal or household purposes.

Scope

Except as set forth in the Exclusions section of this notice, this notice applies to all Personal Data gathered for and on behalf of Syneos Health through the various Syneos Health sites that link or refer to it, together with any and all offline sources including sales and marketing activities (collectively, the "Sources"). By using the Sources, you consent to the data collection and use practices described in this notice.

Effect of Other Notices. Syneos Health has additional privacy notices or terms that are tailored for the different ways your Personal Data is collected by different Syneos Health lines of business or functions. If you receive a privacy notice provided to you for a specific purpose, the terms of the more specific notice or contract will control your interaction with Syneos Health to the extent that notice conflicts with this notice.

Exclusions. This notice does not apply to third-party sites or to information that we process in connection with providing services to our customers under our contracts with them.

Identification of Data Controller. The Syneos Health legal entity that is the data controller of your Personal Data is the company entity located in your jurisdiction and with which you interacted to provide your Personal Data. A current list of all Syneos Health entities globally can be found at https://www.syneoshealth.com/our-office-locations.

1. Information We Collect

When you visit our websites or otherwise interact with Syneos Health, we may collect the following information about you. We may also collect information about you in the ordinary course of business in the context of an existing business relationship, from our customers or from third parties:

• Contact details, such as name, social media handle, job title and employer, email address, mailing address, phone number, and emergency contact information.
• Transaction history, such as details about the programs and activities in which you have participated.
• Professional credentials, such as your specialty, educational and professional history, and institutional affiliations.
• Financial information, such as payment card information, bank account number, or tax identification number.
• Usage information, such as information about how you use the services and interact with us.
• Survey data, such as your responses to our online and offline surveys.
• Communications that we exchange when you contact us.
• Publicly available information, including information published on social media and in publications.
• Device identifiers, such as browser type, IP address, device identifier, and operating system information.
• Online activity data, including browsing history, search history, clickstream data, and other information about your interactions with our services, websites, applications, social media pages, and email communications.

2. Sensitive Personal Data

We do not generally seek to collect Sensitive Personal Data through the Sources. If we seek to collect Sensitive Personal Data, we will do so in accordance with applicable law. Unless we have specifically requested such data, however, we ask that you not send to us, nor share with us, any Sensitive Personal Data.

3. How We Use Personal Data

We may use Personal Data for the following purposes:

• Service delivery, including to provide, operate and improve our business and the services we provide, communicate with you, provide support and maintenance, and respond to your requests, questions and feedback.
• Research and development, including to collect information about your experiences or opinions and to analyze and improve our sites, services, marketing, and business.
• Marketing and advertising, including sending Syneos Health-related marketing communications, as permitted by law, with opt-out choices available.
• Appending our databases, including assigning a unique identifier and combining information for analytics and insights consistent with this notice.
• Compliance, including complying with legal obligations, protecting rights and safety, auditing internal processes, enforcing our terms, and preventing fraudulent or harmful activity.

4. Disclosure to Third Parties

We may share Personal Data with third parties as described below:

• Affiliates for purposes consistent with this notice.
• Customers in connection with providing our services to those customers.
• Service providers who host systems, provide analytics, customer service, technical support, marketing assistance, or identity validation, subject to confidentiality and legal obligations.
• Business partners and professional advisors where necessary.
• Business transfers if we transfer a business unit or asset.
• Legal requirements if required to comply with law, legal process, or to protect rights, safety, or property.

5. Legal Basis for Processing Personal Data

• To perform contracts with you or to take steps at your request prior to entering into such contract.
• To comply with a legal obligation.
• For our legitimate business interests.
• With your consent or explicit consent where required.

6. Withdrawal of Consent

Where applicable, you may withdraw your consent in whole or in part at any time. The withdrawal of your consent does not affect the lawfulness of processing that occurred before its withdrawal.

7. Cross-Border Transfers

Syneos Health operates on a global basis, and your Personal Data may be transferred, accessed and stored globally as necessary for the uses stated in this notice. We have taken measures to protect the confidentiality, integrity, availability, and security of Personal Data when it is transferred.

8. Retention and Deletion

Syneos Health will retain your Personal Data for as long as your account is active, as needed to provide products or services, as necessary to comply with legal obligations, resolve disputes, and enforce agreements, or as otherwise permitted by law. At the end of the retention period, Syneos Health will delete your Personal Data in a manner designed to ensure that it cannot be reconstructed or read.

9. Protection of Information

The security of your Personal Data is important to Syneos Health. We use reasonable physical, electronic, and administrative safeguards designed to protect your Personal Data from loss, misuse and unauthorized access, disclosure, alteration, and destruction.

10. Cookies and Other Tracking Technologies

The Sources and third parties may use cookies, web beacons, scripts, tags, Local Shared Objects, Local Storage, and other similar tracking technologies to collect information automatically as you use the Sources. These technologies support content customization, analytics, advertising, user experience, site administration, and the purposes described in this notice.

Cookies. We may use session and persistent cookies, including first-party and third-party cookies. If you would like more information about cookies, including how to manage them, please see All About Cookies.

Other Tracking Technologies. We also use web beacons and local storage technologies. You may manage some preferences through your browser or device settings.

11. Children's Privacy

We do not knowingly collect or maintain personally identifiable information from any person we actually know is under the age of 13. If we determine that we have collected such information, we will delete it.

Your Privacy Choices

You may have an opportunity to elect to receive recurring informational or promotional email from us. Our email correspondence will include instructions on how to update certain Personal Data and how to unsubscribe.

You can contact us at data.privacy@syneoshealth.com to change your preferences with respect to marketing contacts.

You may also be able to opt out of targeted advertising using browser, device, or industry opt-out tools.

13. Your Rights as a Data Subject

In some jurisdictions, you may be entitled to certain rights in and to your Personal Data, subject to conditions and exceptions contained in applicable law. These rights may include:

• Requesting confirmation of whether your Personal Data is processed by us and obtaining access to it.
• Requiring correction of inaccurate or incomplete Personal Data.
• Directing us to stop processing your Personal Data under certain circumstances.
• Requesting deletion of your Personal Data.
• Restricting the further processing of Personal Data.
• Requesting not to be subject to certain automated decision-making.
• Requesting receipt or transfer of your Personal Data in a structured, commonly used, machine-readable format.

To protect your privacy and the security of your Personal Data, we will take reasonable steps to verify your identity before complying with such requests.

14. Exercising Your Rights or Raising Concerns

Should you have questions about the Personal Data that we process, or if you have a question, concern, or would like to exercise your legal rights in and to your Personal Data, please contact the Syneos Health Global Privacy and Data Protection Officer at: Privacy Office, Syneos Health, 1030 Sync Street, Morrisville, NC 27560, or by email at data.privacy@syneoshealth.com.

15. How Your Dispute or Complaint May Be Resolved

Any questions, concerns, or complaints regarding the use of your Personal Data should be directed to the Syneos Health Global Privacy and Data Protection Officer using the contact information above. Depending on your jurisdiction, you may also have the right to raise a complaint with your local regulator.

16. Changes to This Privacy Notice

We may periodically update this notice. When we post changes to this notice, we will also revise the last reviewed date appearing at the top of the page. Your continued use of the Sources after the posting of any amended notice shall constitute your agreement to be bound by any such changes.