Last Updated: September 8, 2025
This Consumer Health Data Privacy Policy describes our practices for “Consumer Health Data” defined as Information that is linked or reasonably linkable to a consumer and that identifies the consumer’s past, present, or future physical or mental health status or diagnosis, or as defined in Washington’s My Health My Data Act (MHMDA), Nevada’s Consumer Health Data Privacy Law (NV CHDP), or Connecticut’s Data Privacy Act (CTDPA – SB 3).
This Policy supplements our Privacy Policy, which describes how we collect, use, disclose and process Personal Information generally, to provide specific information to our handling of
Consumer Health Data.
CATEGORIES OF CONSUMER HEALTH DATA WE COLLECT FROM YOU
- Individual Health Conditions, Treatments, Disease, or Diagnosis
- Social, psychological, behavioral, and medical interventions
- Health-related surgeries or procedures
- Use or purchase of prescribed medication
- Bodily functions, vital signs, symptoms, or measurements of health information
- Diagnoses or diagnostic testing, treatment, or medication
- Biometric data
- Genetic data
- Data that identifies an individual seeking health care services
- Inferences of the above categories of health data derived or extrapolated from non-health information.
HOW WE COLLECT CONSUMER HEALTH DATA
We collect your Consumer Health Data:
- Directly from when you use our products or Services or otherwise communicate with us.
- From business partners (e.g., specialty pharmacies) and service providers who offer information about you or consumers using our products or Services, including social networks, data brokers, advertising networks, data analytic providers, operating systems and platforms, government entities, public databases, and other third parties.
- We may draw inferences from the data we collect about you, such as your preferences, characteristics, attributes, and abilities.
HOW WE USE YOUR INFORMATION
- We use Consumer Health Data about you for the following purposes:
- Providing you with customized experience related to any of our products or Services, providing and improving the products and Services, analyzing how you use the products and Services, and managing our network.
- To Communicate with you and respond to your inquiries.
- For marketing purposes, such as providing you with promotional materials that may be useful, relevant, valuable or otherwise of interest to you.
- In market research and to improve our Services. Where required under applicable law, we will obtain your prior opt-in consent to send you electronic marketing communications.
- To fulfill quality and safety monitoring obligations in accordance with applicable laws and regulations governing adverse events or product complaints. This includes reporting to regulatory authorities or sharing information with our business partners.
To submit an Adverse Event Report, please visit this form. - To enforce our Terms or other legal rights, including intellectual property infringement.
- For auditing and recordkeeping.
- For our internal research and product development.
- To comply with applicable laws and regulations or requested by any judicial process or governmental agency.
- To comply with industry standards and our internal policies.
HOW WE MAY DISCLOSE YOUR INFORMATION
Service Providers & Business Partners. We may share your information with our vendors, service providers, and other third parties that perform services on our behalf. We may share your information with selected business partners, such as third-party pharmaceutical companies, with whom we collaborate to offer products and services.
As Required by Law and Similar Disclosures. We may disclose information about you: (i) if we are required to do so by law, regulation, or legal process, such as a court order or subpoena; (ii) in response to requests by government agencies, such as law enforcement authorities; (iii) when we believe disclosure is necessary or appropriate to protect against or respond to physical, financial or other harm, injury, or loss to property or individuals; or (iv) in connection with an investigation of suspected or actual unlawful activity.
Merger, Sale, or Other Asset Transfers. We reserve the right to transfer your information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets.
Anonymous or Aggregated Data. In addition, we may use and share anonymous and/or aggregated reports with third parties. For example, if you contact Denali regarding your experience using one of our investigational or marketed products, we may use the information you provide in submitting reports to the U.S. Food and Drug Administration.
YOUR PRIVACY RIGHTS
Individuals in the United States may have the following rights regarding their Consumer Health Data, subject to certain exceptions and limitations. These rights include:
Right to Confirm and Access. You may have the right to confirm whether we are collecting, sharing, or selling your consumer health data and to access such data, including a list of all third parties and affiliates with whom we have shared or sold the consumer health data.
Right to Deletion. You may have the right to request the deletion of Personal Information we have collected from you or otherwise obtained about you, subject to certain exceptions.
Right to Correction. You have the right to request a correction of inaccurate Personal Information that we maintain about you.
Right to Withdraw Consent from Sharing of Consumer Health Data. Consistent with applicable law, you may have the right to withdraw consent from certain activities involving our collection and sharing of your consumer health data. Withdrawing consent does not affect the lawfulness of processing based on consent before it is withdrawn.
Right to Appeal. Residents of certain states may have the right to appeal privacy request decisions.
To exercise your rights, please contact us using the contact information provided in the “How to Contact Us” section of this Policy.
HOW TO CONTACT US
If you have any questions or comments about our privacy practices or if you would like to exercise your rights and choices, please contact us at [email protected] or by writing to us at:
Denali Therapeutics Inc.
161 Oyster Point Blvd.
South San Francisco, CA 94080
(650) 866-8548