Privacy Policy

X. Disclosures for certain U.S. Residents

Residents who reside in states that have adopted comprehensive privacy legislation (collectively, “U.S. Privacy Laws”) have certain rights regarding our collection and use of PII, subject to certain exceptions. We provide details about these rights below. Please note that some rights vary by state. We process data subject rights requests in accordance with U.S. Privacy Laws applicable to us. In some instances, we may not be required to comply with Your request, such as if an applicable exception applies under U.S. Privacy Laws.

A. Data subject rights

Rights That Require Verification. U.S. Privacy Laws require us to verify Your identity prior to fulfilling certain types of data subject requests. This Section X.A. provides details about those rights, and Section X.B. provides information about how we verify Your identity and otherwise respond to such requests.

• Right to Know. On receipt of a verifiable request from You, You have the right to know certain information about our privacy practices at or before the point of collection. We have provided such information in this Policy. You may also request that we provide you with information about the following aspects of how we have handled Your PII specifically in the 12 months preceding your request:
• The categories of PII we have collected about You, including Sensitive Personal Information;
• The categories of sources from which the PII is collected;
• Our business or commercial purpose for collecting, selling, or sharing PII, if applicable; and
• The categories of third parties (excluding service providers and contractors) to whom we disclose PII, if any.
• Right to Delete. You may request that we delete any PII about you we that we collected from You, subject to certain exceptions.
• Right to Correction. You may request that we correct any inaccurate PII we maintain about You.
• Right to Access Specific Pieces of Personal Information and Data Portability. You may ask to obtain the specific pieces of PII we have collected about You in a portable and, to the extent technically feasible, readily usable format that allows You to transmit the PII to another entity without hindrance. You may not exercise this right more than two times in a calendar year.

Rights That Do Not Require Verification. Other types of data subject rights requests do not require verification, as described below.

Your Privacy Choices

• Right to Opt Out of Sale, Sharing, and Processing for Targeted Advertising. We sell, share, and process for targeted advertising purposes, and we have sold, shared, and processed for targeted advertising purposes in the past 12 months Identifiers and Internet or other similar network activity via cookies and other tracking technologies on our websites for marketing purposes to our third-party marketing and advertising partners, which may include health-related inferences. While we generally do not sell data for monetary consideration, U.S. state data protection laws broadly define the term “sale” to include disclosures of browsing data collected via cookies and other tracking technologies to third parties, which may include health-related inferences depending on which parts of our website you visit. You have the right to opt-out of sale and sharing of Your PII, and processing of Your PII for targeted advertising purposes, as applicable depending on the U.S. Privacy Law applicable to you. To do so, You can click here or contact us via the methods listed in Section X.B of this Policy.
• Right to Revoke Consent for or Limit the Use of Your Sensitive Personal Information. You also have the right to revoke consent for or limit the use of your Sensitive Personal Information to the purposes authorized by the applicable U.S. Privacy Laws, depending on the U.S. Privacy Law applicable to you. For California consumers – we use Sensitive Personal Information for the purposes listed in Section III, above, which includes purposes other than those expressly permitted by the CCPA regulations. Accordingly, California consumers have the right to limit the use of Your Sensitive Personal Information to the purposes listed in the CCPA regulations, including to perform services or provide goods to You, prevent and detect security incidents, fraud, and other illegal actions, ensure physical safety of natural persons, for short-term, transient use, such as non-personalized advertising as part of Your current interaction with us, perform services on our behalf, verify and maintain product and service quality, and collect or process Sensitive Personal Information where doing so is not for the purpose of inferring characteristics about You. To exercise Your right to revoke consent or your right to limit, You may click here or contact us via any of the methods listed in Section X.B of this Policy.

Nondiscrimination. You have the right to not be discriminated against by us because You exercised any of Your data subject rights. We will not deny goods or services to You, charge You different prices or rates for goods or services, provide You a different level or quality of goods or services, or otherwise retaliate against You for exercising Your data subject rights.

B. Exercising data subject rights

Exercising Your Rights. You may submit a request to us by either:

• Completing our webform
• Calling us at our Privacy Rights toll-free number: 1-844-4-INSMED (1-844-446-7633)

You may make a request on Your own behalf, and if You are the parent or guardian of a minor child, You also may make a request related to Your child’s PII.

Authorized Agents. Residents of some states, including California, may also designate an authorized agent to make requests on Your behalf. Authorized agents may use the same methods as You, described above, to submit requests to us. When we receive a request from an authorized agent, we may request further information from the agent and/or from You to confirm that You gave the agent permission to make the request. For example, we may ask the agent to provide proof that You gave them signed permission to make the request, or we may ask You to verify Your identity directly to us and/or directly confirm to us that You gave the agent permission to submit the request.

Verification. Depending on the type of request You submit, and to protect Your PII from unauthorized disclosure or deletion at the request of someone other than You or Your legal representative, we may verify Your identity prior to fulfilling Your request. We may request additional information from You, depending on the context and details of Your request, in order to do so, and we may not be able to fulfill Your request if we are unable to verify Your identity. Making a verifiable consumer request does not require You to create an account with us. We will only use information provided in Your request to verify Your identity and process Your request. Insmed reserves the right to take additional steps as necessary to verify Your identity where we have reason to believe a request is fraudulent.

Responding to Verifiable Requests. We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 45 additional days), we will inform You of the reason and extension period in writing.

Appeals. If You would like to appeal our decision with respect to your data subject request, You can do so by contacting us at the methods listed above. Please attach a copy of or otherwise specifically reference Your data subject request, so that we may appropriately process and respond to Your appeal.

Opt-Out Preference Signals. We recognize opt-out preference signals that we are required to recognize for compliance with applicable law. Where required by law, we treat such opt-out preference signals as a valid request to opt-out of sale and sharing for the browser or device through which the signal is sent and any consumer profile we have associated with that browser or device, including pseudonymous profiles. Further, to the extent required by law, if we know the identity of the consumer from the opt-out preference signal, we will also treat the opt-out preference signal as a valid request to opt out of sale and sharing for such consumer. Consumers may use opt-out preference signals by downloading or otherwise activating them for use on supported browsers and setting them to send opt-out preference signals to websites they visit. Please note that we while we recognize opt-out preference signals we are required to recognize by law, we do not currently recognize “Do Not Track” signals.

Profiling. We do not process PII for profiling in furtherance of legal or similarly significant effects.

Contact Information. If You have any questions or concerns about our Privacy Policy or our practices regarding the collection, use, disclosure, sale, sharing, and retention of Your PII, You may contact us by:

• Sending us an email at privacy@insmed.com; or
• Mailing us at:
  Insmed Incorporated
  700 US Highway 202/206
  Bridgewater, NJ 08807
  Attention: Chief Legal Officer
  Tel: (908) 977-9900