Privacy Notice

Privacy Policy

Last Updated: October 6, 2026

This Privacy Notice (“Notice”) applies to personal data Tessera Therapeutics, Inc. (collectively, “Tessera,” “we,” “us,” or “our”) collects about our vendors, job applicants, and visitors. This Notice also covers rights and choices related to your personal data.

How We Protect and Retain Data

Transmission Of Data To Other Countries

Third-Party Applications/Websites

Changes To This Privacy Notice

Contact Information

Data We Collect

We collect data about you in different ways. For example, we collect data:

Directly from you. This includes when you contact us.
Automatically. This includes through cookies, server logs, and other tools on our website or apps.
From other sources. These can include our affiliates, vendors, [social media,] publicly available sources, and other companies.

We may receive pseudonymized information about individuals who participate in clinical trials. If you participate in a clinical trial, the collection and processing of your personal information in connection with that trial are governed by the privacy notice(s) provided to you in connection with the trial. Please refer to those privacy notice(s) for information about how your personal information is handled in connection with the clinical trial.

The following are a few examples of our collection and use of data:

Context	Examples of Personal data	Primary Purpose and Legal Basis
Contact Information	We collect the name and contact information, including email, phone number, and address, of individuals in the course of conducting research, engaging in clinical trials, or in our normal business activities. This includes business contact information for employees of third parties with whom we may have business dealings or individuals who contact us through our website.	We have a legitimate interest in contacting and communicating with third parties about business matters.
Job Applicants	If you apply for a job or provide us with your personal information for purposes of employment, we collect information needed to process your application. This may include any information on your resume, including your educational background and employment history. Providing this information is required for employment.	We have a legitimate interest in using data to evaluate your application or consider you for other positions. In some contexts, we are required by law to collect data about applicants.
Mailing List (Email or Mail)	When you sign up for our mailing lists, we collect your contact information.	We have a legitimate interest in sharing information about our products and services. Where required by law we will ask for your consent before communicating with you.
Use of Our Website	We use technology (e.g., a cookie or a pixel) to learn how you engage with our websites. This may include which links you click or what you type into our online forms. We may also track your IP address, the website that referred you to us, and data about your device.	We have a legitimate interest in making our website operate. We also use it to understand how you interact with our websites, gather analytics, improve our websites, and learn your preferences. We may also use this data to help detect and prevent fraud. Where required by law, we base the use of technologies upon consent.

How We Use Data

We also use data to identify you when you visit our sites, improve or create services and products, conduct analytics, connect with you (e.g., addressing your requests, inquiries, issues, or feedback), conduct marketing, find and prevent malicious, deceptive, fraudulent, or illegal activity or security incidents, enforce our policies and agreements, debug, find, and fix errors that impair our website and services, comply with legal or regulatory obligations, establish or exercise our rights, defend against legal claims, manage our relationships, for other reasons with your consent.

The sections above describe our main purposes in collecting your data, but often we have multiple purposes. As a result, our collection and processing of your data is based in different contexts on your consent, our need to perform a contract, our legal obligations, and/or our legitimate interest in conducting our business.

How We Share Data

In addition to the specific situations discussed elsewhere in this Notice we may share personal data in the following situations:

Affiliates and Acquisitions. We may share data with our affiliates (e.g., parent company, sister companies, subsidiaries, joint ventures, or other companies under common control). If a company acquires or enters negotiations to acquire, our company, our business, all of our assets, or part of our assets, we may share data with that company.
Clinical Trial Site Providers. We may share data with clinical trial site employees and healthcare providers.
Other Disclosures without Your Consent. We may share data to cooperate with law enforcement, participate in a legal process, or for legal compliance. We may share your data to establish or exercise our rights, to defend against legal claims, to investigate, prevent, or act on possible illegal activities, threats to safety of person or property, or a violation of our policies.
Service Providers. We may share your data with service providers, including clinical research organizations who may collect data on our behalf. Service providers may help us to run our website, conduct surveys, provide technical support, process payments, fulfill orders, and more.
Professional Services. We may share personal data with our professional service providers, such as auditors or lawyers.
Other Disclosures with Your Consent. We may share your data with third parties when you consent or direct us to.

Your Choices

Some jurisdictions give you a right to make the following choices:

Access. You may request access to your personal data or confirmation that we have data about you. In certain limited cases, you may ask to receive access to your data in a portable, machine-readable form.
Change. You can ask us to correct inaccurate or incomplete data by contacting us at the address below. We may keep historical data in our backup files as permitted by law.
Deletion. You may ask us to delete your personal data. If required by law, we will grant such a request, but note that in many cases, we must keep your personal data to comply with legal obligations, resolve disputes, enforce agreements, or for other business purposes.
Objection to or Request Restriction of Certain Processing. In certain circumstances, you may object to the processing of your personal data or ask that we restrict processing of your personal data. To do so, follow the instructions below.
Promotional Emails. You may provide us with your email address to allow us to send newsletters or other promotional content. You can stop receiving such emails by following the unsubscribe instructions at the bottom of those emails. If you choose not to receive such emails, we may still send you service-related communications.
Promotional Mailings. If you do not want to receive offers and/or circulars from us, email us with “NO SNAIL MAIL” in the subject line, and include your name, address, and zip code. Note that our mailings are prepared before we send them. We will remove your name from our mailing list after receiving your request, but you may receive mailings from us that were prepared prior to processing your request.

Revocation Of Consent. Where we process your personal data based upon consent, you may revoke consent. Note, if you revoke consent for processing personal data, we may no longer be able to provide you with some types of services. Not all the rights above are absolute, and they do not apply in all circumstances. We may limit or deny a request because the law permits or requires us to. We will not discriminate against individuals who exercise a privacy right.

Submitting Requests

You may exercise the above rights by contacting us via the contact information below.

We will require you to prove your identity when making most types of requests. We may verify your identity by phone or email. Depending on your request, we will ask for information such as your name and email address. We may also ask you to send us a signed declaration confirming your identity.

How We Protect and Retain Data

No method of internet transmission or electronic storage is fully secure. While we use reasonable efforts to protect personal data, we cannot guarantee its security. If we are required to inform you about a security incident, we will do so electronically, in writing, or by phone, as the law permits.

We keep your personal data for only as long as necessary to fulfil the purposes in this Notice unless a longer retention period is required or permitted by. This includes the purposes of satisfying legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the data. We also weigh the potential risk of harm from unauthorized use or disclosure of the data, the purposes for which we obtained the data and whether we can meet those purposes through other means, as well as applicable legal requirements.

Transmission Of Data To Other Countries

We may process your data in a country with less stringent privacy laws than the laws in the country that you reside. Where possible, we treat personal data using the same privacy principles that guide the law of the country in which we first receive your data. By submitting your personal data to us you agree to the transfer, storage, and processing of your data in a country other than your country of residence including, but not limited to, the United States. You may also request a copy of any Standard Contractual Clauses we use for the transfer of your data outside of the UK and EEA, which includes the categories of information transferred by contacting us using the contact information below.

Third-Party Applications/Websites

We may provide links to websites and other third-party content or services that we do not own or operate. We have no control over the privacy practices of websites or services we do not own. For details about such third parties’ privacy practices, see their privacy notices.

Changes To This Privacy Notice

We may change our Notice and privacy practices. New notices will be published on our website. If changes are material, we will notify you by website notice. Also, if changes are material, the Notice that was in place when you submitted personal data to us will generally govern that data unless you consent to the new Notice.

Contact Information

If you have questions, comments, or complaints on our privacy practices, or if you need to access this Notice in a different form due to a disability, please contact our Global Privacy Officer at tessera.privacy@mydata-trust.info. We will try to address your requests and provide you with additional privacy-related information.

As we are established outside the European Economic Area/ the United Kingdom, we have appointed EU/UK Representatives in accordance with Article 27 (UK) GDPR. Our representatives can be contacted using the information below.

If you are located in the European Economic Area, please contact our EU representative at:

MyData-TRUST France
Rue de Rennes, 140b, 75006 Paris, France
Tessera.dpr.EU@mydata-trust.info

If you are located in the United Kingdom, please contact our UK representative at:

MyData-TRUST LTD
Belmont Building, Belmont Road, Uxbridge, England, UB8 1HE
Tessera.dpr.UK@mydata-trust.info

If you are not satisfied with our response and are in the European Union or United Kingdom, you may have a right to lodge a complaint with your local supervisory authority.