Website Privacy Statement

Last Updated: October 2020

This Privacy Statement outlines the types of information PTC Therapeutics Inc. and its subsidiaries (collectively, “PTC Therapeutics,” “we,” “us,” or “our”) may collect; the means by which we may collect, use, or share your information; the steps we take to protect your information; and choices you have with respect to the use of your information. By using ptcbio.com (the “Site”), you agree to the terms of this Privacy Statement. Please read this entire Privacy Statement before using or submitting information to us. Whenever you submit information to us, you consent to the collection, storage, use, and disclosure (collectively, “Processing”) of that information in accordance with this Privacy Statement. If you do not agree to this Privacy Statement, you are not permitted to access or use the Site.

For purposes of this Privacy Statement, “Personally Identifiable Information” (“PII”) is any information by which you can be individually identified directly or in conjunction with other publicly-available information, including, but not limited to your name, address, e-mail address, telephone number, and any financial information you may provide for purposes of completing a transaction with us. This Privacy Statement does not apply to any third-party web sites linked to this Site. PTC Therapeutics is not responsible for the privacy practices or the content of such third-party sites.

We are committed to collecting, maintaining and securing PII about you in accordance with this Privacy Statement, as well as applicable laws, rules and regulations. Please carefully review this Privacy Statement to learn more.

Your California Privacy Rights

If you are a resident of California, please see the addendum below for additional information concerning your rights under the California Consumer Privacy Act.

Not Intended for Minors

This Site is not designed or intended for use by children under the age of 18. We do not knowingly collect any PII from anyone under the age of 18. If you believe that a minor of whom you are a parent or guardian has registered on our Site or otherwise provided PII without your consent, please contact us at DataPrivacy@PTCBio.com, and we will make reasonable efforts to remove all PII related to the minor.

Information Collected

We collect PII about you in order to deliver services you have requested, process a request for information, and/ or to personalize your experience.  Several places on this Site require PII if you choose to use them, including but not limited to, registration, surveys, and content sharing features. We collect this information about you only if you voluntarily provide it to us. Please be aware that certain features of this Site may not be available to you if you elect not to provide certain PII. Any PII you provide to us will be Processed in accordance with this Privacy Statement. We may collect information to facilitate purchases, including your credit card, billing address, shipping address, and other related information.

In addition, we may collect information from your computer or Internet device to conduct statistical analysis of the use of this Site.

Use of Information

The PII PTC Therapeutics collects may be used for the following purposes:

• To respond to your inquiries.
• To provide information on products and services you request.
• To have a representative contact you regarding our products or services.
• To provide product announcements or information regarding health topics or disease states.
• To aggregate data about visitors to the Web Site for various business purposes including product, service, and program development and improvement.
• For market analysis.
• For any other purpose required or permitted by law.

We may combine the PII you share through this Site with other information you share with us, both online and offline. PTC Therapeutics uses this consolidated PII to deliver the services you have requested and to communicate information to you.

Sharing with Third Parties

PTC Therapeutics Inc. may share PII about you with our subsidiaries and affiliates. In addition, we may share your PII with outside third parties solely for the following purposes:

• To fulfill orders.
• To conduct technical maintenance of this Site and other PTC Therapeutics platforms.
• To facilitate a merger, consolidation, transfer of control, or other corporate reorganization in which PTC Therapeutics participates.
• To facilitate a financing agreement in which the assets implicated include PTC Therapeutics’ technical or information resources.
• Where required by applicable laws, government regulations, court orders, subpoeanas, or search warrants.
• Where needed for corporate audits or to investigate or respond to a complaint or security threat.

Any subsidiaries, affiliates, or other business partners with whom we share your PII will be required to treat such information in accordance with this Privacy Statement.

Social Plugins

This Site may use social plugins (e.g., the Facebook “Like” button) to enable you to easily share information with others. When you visit this Site, the operator of the social plugin may be able to place a cookie on your computer, enabling that operator to recognize individuals who have previously visited this Site. If you are logged into the associated social media web site (e.g., Facebook) while browsing on this Site, the social plugin allows that social media web site to receive information that you have visited this Site. The social plugin may also allow the social media web site to share information about your activities on this Site with other users of their social media web site. For more information about the information shared via a particular social media plugin, you should refer to that social media site’s privacy statement.

Analytics

PTC Therapeutics may use certain analytical services, including but not limited to Google Analytics, a service by Google, Inc. (“Google”), to analyze non-identified information to learn about how visitors interact with our Site (also known as “session tracking”), to help us improve the user experience. Google Analytics uses cookies to analyze use patterns and may collect information about your use of the Site, including your IP address. You may find more information about Google Analytics and Google’s Privacy Statement by visiting Google’s web site here: www.google.com/policies/privacy/partners/. In addition, our Site may use Google Analytics Advertising Features, which collects information through cookies, including Remarketing with Google Analytics, Google Display Network Impression Reporting, and Google Analytics Demographics and Interest reporting. If you would like to opt-out of having your data used by these cookies, please use the Google Analytics opt-out available here: https://tools.google.com/dlpage/gaoptout/.

Do Not Track Signals

Certain Web browsers and other programs may be used to signal your preferences to us about how or whether we or third parties may collect information about your online activities. Currently, PTC Therapeutics does not respond to such signals.

Use of PII for Marketing

PTC Therapeutics may use third-party advertising companies to place ads on other Web sites. These companies may use data about your visits to this Site and other web sites in order to measure advertising effectiveness and to provide advertisements about our goods and services that may be of interest to you. To opt out of such advertising, contact us at DataPrivacy@PTCBio.com.

Data Security

PTC Therapeutics takes steps to protect PII we access or receive from loss, misuse, and unauthorized access, disclosure, alteration or destruction. Nevertheless, we are unable to guarantee the security of your PII and we disclaim, to the fullest extent permitted by law, all liability and damages caused by loss, misuse, and unauthorized access, disclosure, alteration or destruction. You should consider the risk of a data breach before using the Site.

Notice, Choice and Control

Before you provide PII to us, we will provide you with notice (including through this Privacy Statement) about the purposes for which we collect and use PII, how to contact us with any inquiries or complaints, the types of third parties to whom we disclose PII, and the choices and means by which you can limit the use and disclosure of your PII. We also will provide you with notice before using or disclosing your PII for a purpose other than for which it was originally collected.

If you opt-in for particular services or communications, you will be able to unsubscribe or opt-out at any time by following the instructions included in each communication or by contacting PTC Therapeutics at DataPrivacy@PTCBio.com.

International Transfers of Your PII

PTC Therapeutics Inc. is headquartered in the state of New Jersey in the United States. Any PII you provide to us will be transferred to and stored in the United States. Please be aware that US laws governing the privacy and security of your PII may be different from the laws where you reside or from which you are accessing the Site. By submitting your PII to us, you are agreeing to the Processing of your PII in the United States.

Updates to this Privacy Statement

From time to time, PTC Therapeutics may revise this Privacy Statement. Any such changes to this Privacy Statement will be promptly reflected on this page. We recommend that you review this Privacy Statement regularly for any changes. Continued use of this Site after publication of any change in our Privacy Statement indicates your consent to the use of newly submitted information in accordance with the amended Privacy Statement. The date on which this Privacy Statement was last revised is located at the top of this Privacy Statement.

If you are located in the European Economic Area and you wish to know more about PTC’s privacy practices, please visit our Privacy Statement for this region.

Contact Us

If you have any questions about this Privacy Statement, please contact us at: DataPrivacy@PTCBio.com.

Addendum – PRIVACY STATEMENTFOR CALIFORNIA RESIDENTS

This PRIVACY STATEMENT FOR CALIFORNIA RESIDENTS supplements the information contained in the Web Site Privacy Statement and applies solely to visitors, users, and others who reside in the State of California (“consumers” or “you”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”) and other California privacy laws.  Any terms defined in the CCPA have the same meaning when used in this notice.

California Residents Under Age 18: If you are a resident of California under age 18 and a registered user of our services, you or your parent/guardian may ask us to remove content or data that you have posted to the services by  e-mailing us at DataPrivacy@PTCBio.com.

California Consumer Privacy Act Notice

Effective: January 1, 2020

1. Information We Collect

We may obtain information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (“Personal Information”). In particular, we have collected the following categories of Personal Information from consumers within the last twelve (12) months:

1. Sources of Personal Information We Collect

We obtain the categories of Personal Information listed above from the following categories of sources:

• Information that you submit or share directly with us, through registrations, surveys, applications, resumes, or telephone calls, and email and postal communications.
• Information passively collected from cookies and other website analytics.
• Information collected through third parties or from your browsing activity on other sites, such as on social media platforms and public databases.
• From one or more of our affiliates with which you have a business relationship.
• Service providers with whom we have a contractual relationship and to whom you have provided your Personal Information.

III.       Use of Personal Information

We collect the categories of Personal Information listed above for the following purposes:

• To respond to your inquiries and to fulfill your requests.
• To send you important information regarding our relationship with you or regarding this website, changes to our terms, conditions, and policies and/or other administrative information.
• For audits, to verify that our internal processes function as intended and are compliant with legal, regulatory, or contractual requirements.
• For fraud or crime prevention, and for technical security monitoring purposes.
• To facilitate the development of new products and services.
• To enhance, improve or modify our website or products and services.
• For data analysis that will allow us to understand website usage trends.
• To determine the effectiveness of our promotional campaigns, so that we can adapt our campaigns to the needs and interests of our users.
• To undertake quality and safety assurance measures.
• To perform accounting, audit, and other internal functions, such as internal investigations.
• To comply with law, legal process, and internal policies and exercising and defending legal claims.

We will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

1. Sharing Personal Information

We may disclose your Personal Information to a third party for a business purpose. When we disclose Personal Information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that Personal Information confidential and not use it for any purpose except performing the contract.

We disclose your Personal Information for a business purpose to the following categories of third parties:

• Service providers that help us to run our business, such as call centers and order fulfillment and distribution companies.
• Vendors that help us track the effectiveness of advertisements on our site.
• Vendors that help us to provide you with programs, services, or educational information we believe may be of interest to you.

In the preceding twelve (12) months, we have not sold any Personal Information.

For purposes of this CCPA Notice, “sold” or “sale” means the disclosure of Personal Information for monetary or other valuable consideration but does not include, for example, the transfer of Personal Information as an asset that is part of a merger, bankruptcy, or other disposition of all or any portion of our business.

1. Your Privacy Rights

You have the following rights regarding our collection and use of your Personal Information. To exercise those rights, you must submit a request via email to DataPrivacy@PTCBio.com. We may ask you to provide additional information to verify your request. We will not discriminate against you if you exercise your rights as described in this notice.

1. Right to Information

You have the right to request the following information regarding the Personal Information we have collected about you:

• Categories of Personal Information collected about you, and sources from whom it was collected.
• Our purposes for collecting Personal Information.
• Categories of third parties with whom the Personal Information was shared.
• A copy of the Personal Information collected about you.

You have the right to request the following information regarding the Personal Information we have disclosed about you:

• Categories of your Personal Information sold in the preceding 12 months. However, as noted, we have not sold any Personal Information in the preceding 12 months.
• Categories of third parties to whom your Personal Information has been disclosed.
• Categories of Personal Information that we disclosed about consumers for a business purpose.

1. Right to Opt Out of Sale of Personal Information

Under the CCPA, California residents have the right to direct a business that sells their Personal Information to cease such sales. As noted, we have not sold any Personal Information in the preceding 12 months and we will not sell your Personal Information.

1. Right to Request Deletion

You have the right to request that we delete the Personal Information we have about you. However, we are not required to delete information if it is necessary to retain your information to:

• Complete the transaction for which the Personal Information was collected, provide a good or service requested by you, or a transaction reasonably anticipated within the context of our or one of our affiliate’s ongoing business relationship with you, or to otherwise perform a contract we have with you.
• Detect security incidents, protect against malicious, deceptive, fraudulent or illegal activity or prosecute those responsible for that activity.
• Debug to identify and repair errors that impair existing intended functionality.
• Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law.
• Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code.
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when deletion of the information is likely to render impossible or seriously impact the achievement of such research, if you have provided informed consent.
• Facilitate solely internal uses that are reasonably aligned with your expectations based on your relationship with us or one of our affiliates.
• Comply with a legal obligation.
• Otherwise use the Personal Information, internally, in a lawful manner that is compatible with the context in which it was provided.

1. Contact Us

You can contact us with questions about this California Consumer Privacy Act Notice or to exercise your rights as described in this Notice.

Email address: DataPrivacy@PTCBio.com

Telephone: (888) 985-0646