Introduction

This Privacy Notice (this “Notice”) is made available by Precision BioSciences, Inc. and its affiliated entities to all Healthcare Professionals (HCP) we engage with (“you”, “your” or “user”). This Notice is intended to assist (i) HCPs and (ii) HCPs acting as a representative or contact person for a healthcare organisation (HCOs) in understanding how we collect, process, secure, and transfer your Personal Data. We also describe how you can contact us to learn more information about our privacy practices.

Definitions

Affiliate means an entity that controls, is controlled by, or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.

Aggregated Data means summarised data derived from your Personal Data. It is not considered Personal Data in law as this data will not directly or indirectly reveal your identity.

Company (referred to as “Precision BioSciences, Inc.”, “Precision”, “PBI”, “the Company”, “We”, “Us” or “Our”) refers to:

Precision BioSciences, Inc.
302 East Pettigrew St.
Durham, NC 27701 USA
Phone: 919.314.551 Fax: 480.393.5553
precisionbiosciences.com

Data Controller (for UK and EU GDPR) refers to Precision BioSciences as the legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data.

Data Processor refers to the Company’s Service Providers.

Data Protection Legislation includes the UK Data Protection Act 2018, UK GDPR, PECR 2003, and EU GDPR (Regulation (EU) 2016/679) and related local implementation laws.

Personal Data is any information that relates to an identified or identifiable individual (e.g., name, ID number, location data, online identifier, or factors specific to identity).

Process / Processing means any operation performed on Personal Data whether by automated means (such as collection, use or erasure).

Who we are

PBI is the study sponsor – and the Data Controller responsible for the processing of your Personal Data.

The data we collect about you

Clinical trial regulations require the Sponsor to collect personal data from individuals who participate in the conduct of a clinical trial to prove their qualifications. The personal information you provide will become part of the clinical trial databases and paper files needed for implementation, performance and archiving of the study.

PBI will collect and may utilize your Personal Data for the purposes described below:

Category of Data Purpose for Data Processing
Contact details (e.g., name, nationality, address, phone, email) Communication about clinical trials; respond to queries; product sample distribution; invites to meetings and events; direct marketing of updates; surveys; future collaboration contacts; study management and regulatory applications.
Compensation Information (e.g., bank account, financial details) Payment of salary, expenses and invoices; compliance with tax and regulatory requirements.
Employment history (e.g., job titles, workplace, history) Maintain professional records for future collaboration; trial participation consideration; conflict of interest assessment.
Professional Credentials (e.g., training, qualifications, memberships) Validate expertise and eligibility for trials; verify regulatory criteria and suitability.
Research-Related Data (e.g., interests, publications, studies) Evaluate suitability for trials; gather feedback and insights on clinical topics and PBI products to enhance services.

We also collect Aggregated Data (e.g., statistical or demographic data) which is not personal unless it identifies you. We may also receive information from business partners, affiliates, and public sources.

Legal basis for processing your Personal Data

  • Legitimate interests in conducting research and managing resources.
  • Compliance with legal and regulatory obligations and study qualification requirements.
  • Establishing or defending legal rights and fraud prevention.
  • Your consent (for example, ethnicity data for DEI reporting); you may withdraw consent at any time.
  • Performance of a contract (including payments, trial participation and pre-contractual steps).

Providing Personal Data is voluntary but necessary to take part in clinical trial activities; without it, we cannot perform our obligations.

Disclosures of your Personal Data

Precision BioSciences may share your Personal Data with third parties as needed to fulfil the purposes of this Notice, including outside your country of residence. Recipients agree to use your data only as instructed and to apply appropriate security measures.

Category of Third-Party Purpose for Disclosure
Subsidiaries and affiliates Internal business needs and contractual obligations.
Service Providers (IT, payroll, HR, benefits) Operational support and system management.
Cloud storage solutions Data storage and security.
Law enforcement and regulators Compliance and fraud prevention.
Professional advisors (insurers, lawyers, auditors) Professional services and legal support.
Financial and tax authorities Legal and compliance obligations.
Prospective or new PBI companies or buyers Corporate transactions or restructuring due diligence.
Potential employers References when requested by you.
Researchers, institutions, partners Support and conduct of clinical trials.

International cross-border data transfers

Your data may be transferred to countries whose data protection laws differ from yours, including the United States. Where transfers occur, we apply adequacy decisions or standard contractual clauses to ensure equivalent protection. Contact us for details of the mechanisms used.

Data security

  • Access restricted to those with a business need-to-know.
  • Staff training and confidentiality obligations enforced.
  • Incident response and breach notification procedures in place.
  • Encryption of data in transit and at rest where feasible.

Data retention

We retain Personal Data as required by law (up to 25 years after trial completion) and for legitimate purposes such as legal or regulatory requirements. When no longer needed, data is deleted or anonymised per our Data Protection Policy.

Your legal rights

You may request to exercise your data subject rights, including:

  • Confirmation of processing and information on data categories and purposes.
  • Access, rectification, erasure or restriction of your data.
  • Data portability in a machine-readable format.
  • Objection to processing in certain circumstances.
  • Request not to sell or disclose your data to third parties.
  • Complain to your local Data Protection Authority.

You will not be subject to automated decisions with significant impact unless lawfully permitted and notified.

Changes to the Notice

We may update this Notice from time to time. Please review periodically for changes or contact us for the latest version.

Your duty to inform us of changes

You must keep your Personal Data accurate and current and inform us promptly of any changes.

Providing other people’s data

If you provide Personal Data about others (e.g., next of kin), you must ensure a lawful basis for doing so and inform them of this Notice and their rights.

Questions

For questions or to exercise your rights, contact us:

Complaints

You may make a complaint to a supervisory authority, though we encourage contacting PBI first to resolve concerns. For unresolved matters we cooperate with the relevant authorities:

Independent dispute resolution processes are available at no cost to you.

Last Updated: October 21, 2025