Privacy Policy

Kymera Therapeutics, Inc. (“Kymera,” “we,” “us,” or “our”) respects your privacy and is committed to protecting it through our compliance with the practices described in this notice, consistent with applicable law.

This notice describes our practices for collecting, using, maintaining, protecting, and disclosing the personal data we may collect from you or that you may provide when you visit our website(s) (the “Website”) as well as from other sources, including information collected offline or by third parties working on our behalf.

The Website may include links to third-party websites, plug-ins, services, social networks, or applications. Clicking on those links or enabling those connections may allow the third party to collect or share data about you. We do not control these third-party websites, and we encourage you to read the privacy notice of every website you visit.

Please read this Privacy Policy carefully to understand what personal data we collect, how we collect it, how we use it, how we protect it, who we may disclose it to, and how you can manage your personal data.

If you have any questions about this Policy or wish to exercise your rights regarding personal data that Kymera has collected from you, either directly or through a third party, please contact us as described in Section 1 below (“How to Contact Us”). We will comply with applicable law regarding your rights as a Data Subject.

Your access to and use of the Website is also subject to our Terms of Use.

1. How To Contact Us

Mailing address
Kymera Therapeutics, Inc.
200 Arsenal Yards Blvd., Suite 230
Watertown, MA 02472

Email address
privacy@kymeratx.com

2. Personal Data We Collect About You

We may collect, use, store, process, and transfer different categories of personal data about you, which may include:

  • Identity Data such as name or similar identifier, title, social security number, date of birth, and gender;
  • Contact Data such as address, email address, and telephone number(s);
  • Financial/Transaction Data such as bank account, payment card details, insurance information, payment information (or other details regarding your transactions with us), and payroll data;
  • Applicant, Professional or Employment-related Data such as employment history, your resume, information you share on certain public social media sites, your immigration sponsorship status, gender, ethnicity, veteran status, disability status, and other information appropriate per the recruitment process;
  • Technical and Usage Data such as internet protocol (IP) address, browser type and version, timing and location, operating system and platform, and other technology on the devices you use to access the Website as well as information regarding your communication preferences, feedback and survey responses, and details on how you use the Website and other offerings;
  • Communications Data such as your preferences in receiving materials regarding our company, products, and any other information you may request from us and our third parties; and
  • Special Categories of Data such as information about your health and genetic and biometric data.

We also collect, use, and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Privacy Policy.

3. How We Collect Personal Data About You

Direct interactions. You may voluntarily give us your personal data, such as Identity Data, Contact Data, and Financial/Transaction Data, by filling in forms or by corresponding with us by mail, phone, and email or otherwise.

Automated interactions. As you interact with the Website, we may automatically collect Technical and Usage Data. This can include your preferences (e.g., the location you are in). We may also collect information such as the length of visits to certain pages and page interaction information. Automatic technologies we use may include cookies, pixels, and web beacons that are described in Section 6 below (“Cookies and Automated Data Collection Technologies”).

Third parties (or publicly available sources). We may receive categories of personal data about you from various third parties and public sources as set out below, such as:

  • Technical and Usage Data from analytics providers such as Google, advertising networks, and search information providers;
  • Contact Data and Financial/Transaction Data from providers of technical, payment, and delivery services;
  • Identity Data and Contact Data from placement agencies or publicly available sources; and
  • Special Categories of Data including health or medical data from health care providers, caregivers, patient advocacy organizations, contract research organizations, other labs, or vendors supporting clinical research on our behalf.

4. How We Use Your Personal Data

We and/or our service providers, vendors, and other third parties operating on our behalf use your personal data to conduct our business operations. Examples of how we may use the personal data we collect include to:

  • Engage with you as a vendor, business partner, collaborator, or service provider;
  • Recruit and discuss employment or consulting opportunities with you;
  • Fulfil the purposes for which you provided the personal data or that were described when it was collected;
  • Contact you to obtain more information or feedback;
  • Provide you with information that you have requested;
  • Perform and administer clinical trials, research, and product-improvement activities;
  • Monitor pharmacovigilance, safety and quality of our products;
  • Operate the Website;
  • Use data analytics to help us evaluate and modify the Website and its content and our existing practices, products, offerings, and services
  • Provide additional information that we believe may be of interest to you; or
  • To comply with our regulatory and legal obligations, including, but not limited to, transparency reporting requirements, monitoring fraud and abuse, responding to legal process and other government or law enforcement agency requests.

Due to the nature of our business, Kymera may be subject to a number of legal requirements, thus requiring Kymera to Process Personal Information and sensitive information (including health information and mental and physical characteristics) to meet these requirements. When permissible under the law, we will attempt to limit and protection the Processing of your Personal Information to the extent possible, for example, pseudonymizing information, while still complying with our legal obligations.

We will only retain your personal data (which includes Personal Information for purposes of the California Consumer Privacy Act (“CCPA”) and similar U.S. State laws) for as long as necessary to fulfill the purposes for which we collected it. To determine the appropriate retention period for personal data (including Personal Information), we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and applicable legal requirements.

Individuals located in the European Economic Area (“EEA”) or United Kingdom (“UK”), please see the “Supplemental Notice to EEA/UK Data Subjects” for additional information.

5. Communications and Analytics

We strive to provide you with choices regarding certain personal data uses, particularly around communications. We may use your Identity Data, Contact Data, and Technical and Usage Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which services, offerings, and information may be relevant for you. We have established the following personal data control mechanisms:

  • Opting in. You may receive communications from us if you have requested information from us and opted-in to receive that information.
  • Opting out. You can ask us or third parties to stop sending you messages at any time by following the opt-out links on any message sent to you. Remember, however, that even if you opt-out of receiving these communications, Kymera may still email you in order to provide an offering or information that you request. If you decide to opt-out from any of our communications, we will work to remove your information promptly, although we may require additional information before we can process your request.
  • Cookies. Most web browsers allow some control of most cookies through the browser settings. For additional information about how Kymera uses cookies and similar technologies, see Section 6 below (“Cookies and Automated Data Collection Technologies”).

Online Analytics. We may use third-party web analytics services (such as those of Google Analytics) on the Website to collect and analyze the information discussed above, and to engage in auditing, research, or reporting. The information collected by various analytics technologies described in Section 6 below (“Cookies and Automated Data Collection Technologies”) may be disclosed to or collected directly by service providers, who evaluate information, including by noting the third-party website from which you arrive, analyzing usage trends, assisting with fraud prevention, and providing certain features to you. To prevent Google Analytics from using your information for analytics, you may install the Google Analytics Opt-out Browser Add-on by visiting http://tools.google.com/dlpage/gaoptout.

6. Cookies and Automated Data Collection Technologies

The Website uses cookies (small files placed on your device) or other automatic data collection technologies to distinguish you from other Website users. This helps us deliver a better and more personalized service when you browse our Website. It also allows us to improve our Website by enabling us to:

  • Estimate our audience size and usage patterns.
  • Store your preferences so we may customize our Website according to your individual interests.
  • Speed up your searches.
  • Recognize you when you return to our Website.
  • Assist with security and other legitimate business purposes.

An IP address is a number assigned to your device whenever you access the Internet that allows devices and servers to recognize and communicate with each other. Kymera (or its service providers) may collect IP addresses to conduct system administration and report aggregate information, which may identify you, to affiliates, business partners, service providers and/or vendors to conduct Website and application analysis and performance reviews.

The Website pages may contain web beacons (small transparent embedded images or objects, also known as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count Website page visitors, or to compile other similar statistics such as recording Website content popularity or verifying system and server integrity.

Web beacons, cookies, and other tracking technologies do not automatically obtain your personal data. However, if you voluntarily provide personal data, these automatic tracking technologies may, for example, be used to provide further information about your activities.

Please note that you can change your browser settings to notify you when a cookie is being set or updated, or to block cookies altogether. For additional information, please consult your browser’s “help” section. If you choose to decline cookies through your browser settings, you may not be able to fully experience the features of the Website.

7. Disclosures Of Your Personal Data

We may share your personal data with the parties set out below for the purposes set out in Section 4 above (“How We Use Your Personal Data”).

  • Internal Parties: individuals or groups within Kymera to operate our business.
  • Our Collaborators: our collaborators, including other companies and institutions, including those listed or referenced on the Website.
  • External Third Parties: third parties who perform services or other activities on our behalf and help further our business objectives, including, without limitation, professional advisers.
  • Parties as part of a business transaction: third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Privacy Policy.
  • Government Authorities: the U.S. Federal Communications Commission, U.S. Internal Revenue Service, the U.S. Food and Drug Administration, the U.S. Federal Trade Commission and other government agencies, regulators and authorities (in the U.S. and around the world) as required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, (ii) protect and defend the rights or property of Kymera, (iii) act in urgent circumstances to protect the personal safety of users of the Website or the public, or (iv) protect against legal liability.

We require all third parties to respect the confidentiality of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions. We do not sell your personal data.

8. How We Secure Your Personal Data

We have put in place commercially reasonable and appropriate security measures designed to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed while it is under our control, taking into consideration the risks involved in the processing and the nature of the personal data.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we do take appropriate steps designed to protect your personal data, we cannot guarantee the security of your personal data transmitted to the Website or via e-mail transmission. Any transmission of personal data is at your own risk.

9. “Do-Not-Track” Signals

Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not currently respond to do not track signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com

10. Notice To California Residents

For additional information relevant to California residents, including related to their privacy rights under the California Consumer Privacy Act (“CCPA”), please refer to our Supplemental Privacy Policy for California Residents, which is available here: Supplemental Privacy Policy for California Residents.

11. Children’s Privacy

While in some instances we may collect personal data about children with the consent of a parent or guardian, such as for clinical activities, we do not otherwise knowingly solicit data from, or market to, children. The Website is not intended for children, and we do not knowingly collect personal data from children. If a parent or guardian becomes aware that his or her child has provided us with personal data, he or she should contact us as described in Section 1 above (“How to Contact Us”). We will take reasonable steps to delete such data within a reasonable time.

12. Third-Party Links

This Website may include links to third-party websites (including, without limitation, social media sites such as Facebook or Twitter), plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit. Please note that linked third-party websites may also use cookies or other tracking mechanisms. If you have any questions about how third-party websites use cookies, you should contact such third parties directly.

13. Effect Of Other Notices

Please note Kymera may provide additional privacy notices to individuals at the time we collect their personal data. For example, we provide a specific privacy notice to clinical trial participants that describe our privacy practices in connection with conducting clinical trials. Employment applicants may also be provided with a separate privacy notice. In the event of any conflict or inconsistency, this type of an “in-time” notice will govern how we may process the information you provide at that time.

14. Changes To The Privacy Policy

We reserve the right to modify this Privacy Policy at any time. We encourage you to periodically review this page for the latest information on our privacy practices. If we make any changes, the updated Privacy Policy will be posted with a revised effective date, unless another type of notice is required by applicable law. Your continued use of the Website and/or services or offerings after any such updates take effect will constitute acceptance of any changes.

*****

Privacy Policy Last Revised: November 17, 2023

*****

Supplemental Notice to EEA/UK Data Subjects

Supplemental Privacy Policy for California Residents