Privacy Policy

Last Updated: September 28, 2025

At Denali Therapeutics Inc. (“Denali,” “our,” “we,” or “us”), we respect your privacy and appreciate the trust you have placed in us.

This Privacy Policy (“Policy”) explains how Denali collects, uses, and shares Personal Information of visitors to our websites and online services, individuals who engage with us offline (such as through Denali products and product related services, conferences, research, or clinical trials), job applicants, investors, and business partners (collectively, the “Services”). This Policy does not apply to Denali employees or to third-party websites or services. It is incorporated by reference into Denali’s Terms of Use (the “Terms”). By using our Services, you acknowledge that your Personal Information will be processed as described in this Policy.

For individuals located within the European Union (“EU”), European Economic Area (“EEA”), United Kingdom (“UK”) or Switzerland, please refer to the International Users Addendum for additional information regarding location specific rights and choices.

For California residents, please refer to the California Residents Supplemental Notice for additional information regarding your specific privacy rights.

For additional information on our processing of Consumer Health Data as defined under applicable U.S. state laws, refer to our Consumer Health Data Privacy Policy.

Job applicants should review our Applicant Privacy Policy, which explains how we handle applicant information.

DEFINITIONS

“Personal Information” means any information that identifies, relates to, or could reasonably be linked with a specific individual or household. Personal Information, as used in this policy, will include the concepts of “Personal Data” or “Personally Identifiable Information” under applicable U.S. privacy laws.

“Sensitive Personal Information” means any Personal Information defined as “sensitive” under applicable law such as health or genetic data, race/ethnicity, and precise geolocation.

CATEGORIES OF INFORMATION WE COLLECT

  • Identifiers and contact information including first and last name, email address, home address, phone numbers, Social Security Number, driver’s license number, and other unique personal identifiers.
  • Characteristics of protected classifications such as biographical and demographic information, marital or domestic partner status, age, gender, race or ethnicity.
  • Correspondence such as emails, stories, comments, photos, and other information you share with us.
  • Internet and device Information including username, password, search queries, cookie-derived information, IP address, web browser type, geolocation, operating system version, server log information, and device identifiers.
  • Professional or employment-related information which may include any information contained within a cover letter, resume, or other supporting documentation.
  • Financial and transactional information including tax identification numbers and financial account numbers;
  • Health data and medical information such as genetic information, health condition or status, disease, diagnosis, or medical treatment data and history.
  • Inferences drawn from the information listed above to develop a profile reflecting preferences, aptitudes, behavior, attitudes, characteristics, predispositions, and abilities.

HOW WE COLLECT YOUR INFORMATION

Information You Provide

We collect any information that you choose to provide us when you use our Services, customer service team, or otherwise communicate with us.

Denali Updates. You may elect to receive updates from us regarding our business, products, services, or research opportunities sponsored by, conducted on behalf of, or in collaboration with third-parties, including non-profit organizations, academic institutions, pharmaceutical companies, or health care providers (collectively, “Denali Updates”). When you sign up to receive these Denali Updates, we may ask you to provide your name, contact, or other information. To be alerted to the most relevant research and clinical trial information and opportunities, you may choose to provide health information about yourself or to specify health conditions or factors that are of interest or relevant to those for whom you care.

Job Applicant Information. You may elect to provide us with information in connection with an employment opportunity at Denali. Such information may include any information contained within a cover letter, resume, or other supporting documentation.

Information We Automatically Collect When You Use Our Services

We may automatically collect certain technical information from your computer or mobile device when you use the Services.

Device and Usage Information. We receive information from your device, including IP address, web browser type, operating system version (to the extent applicable), and device identifiers. We receive information about your interactions with our Services, such as the time spent interacting with content and the dates and times of your visits.

Cookies and Similar Technologies. We and our service providers may collect information using cookies or similar technologies. You can refer to our Cookies Notice for more information about what cookies we use and for what purposes. You can manage your cookies through our Cookies Preference Center which is linked in the footer of our websites. If you disable cookies, you may be unable to access or utilize certain parts of our Services.

Information We Collect from Third Parties

Other Sources. We may collect information from additional sources including, but not limited to, social networks, data brokers, advertising networks, data analytic providers, operating systems and platforms, government entities, public databases, service providers, business partners, and other third parties.

HOW WE USE YOUR INFORMATION

Service-Related Usage. We use the information we collect about and from you for service-related purposes, including: providing you a customized experience on our Services, providing and improving the Services, analyzing how you use the Services, and managing our network.

Communications. We use your information to communicate with you and respond to your inquiries. For example, we may send email to the email address you provide for informational purposes. In addition, if you have elected to receive Denali Updates, we will send you these communications.

Employment. We may use your information to process employment inquiries including to: (i) send you a confirmation email if you submit an inquiry or application; (ii) contact you if we need more information related to your employment application, account profile or employment search; (iii) process your employment application; (iv) respond to your questions; and (v) contact you about employment positions that may be of interest to you (including through our employees or third-party recruiters contracted on our behalf)

Marketing. We may use information we collect for marketing purposes, such as providing you with promotional materials that may be useful, relevant, valuable or otherwise of interest to you. Additionally, we may use your information in market research or to better improve our Services. Where required under applicable law, we will obtain your prior opt-in consent to send you electronic marketing communications.

Quality and Safety Reporting. We may use the information we collect associated with product safety and other adverse event reports to comply with legal regulatory obligations. To fulfill safety and quality monitoring obligations in accordance with applicable laws and regulations governing adverse events or product complaints. This includes reporting to regulatory authorities or sharing information with our business partners. To submit an Adverse Event Report, please visit this form.

Compliance with applicable law and our own obligations. We may also process the information we collect about you or from you for the following purposes: (i) to enforce our Terms or other legal rights, including intellectual property infringement; (ii) as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and (iii) to comply with industry standards and our internal policies.

Anonymous or Aggregated Data. We may use aggregate, anonymous, and other non-identifiable data for other purposes than described above related to our business.

HOW WE MAY DISCLOSE YOUR INFORMATION

Service Providers & Business Partners. We may share your information with our vendors, service providers, and other third parties that perform services on our behalf. We may share your information with selected business partners, such as third-party pharmaceutical companies, with whom we collaborate to offer products and services. These vendors, service providers and business partners will only receive access to Personal Information as needed to provide services to Denali or in furtherance of our collaboration, as applicable, and such access shall be subject to contracts that protect the confidentiality of the information.

As Required by Law and Similar Disclosures. We may disclose information about you: (i) if we are required to do so by law, regulation, or legal process, such as a court order or subpoena; (ii) in response to requests by government agencies, such as law enforcement authorities; (iii) when we believe disclosure is necessary or appropriate to protect against or respond to physical, financial or other harm, injury, or loss to property or individuals; or (iv) in connection with an investigation of suspected or actual unlawful activity.

Merger, Sale, or Other Asset Transfers. We may share your information with service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we license, sell, liquidate, or transfer all or a portion of our assets.

Anonymous or Aggregated Data. In addition, we may use and share anonymous and/or aggregated reports with third parties. For example, if you contact Denali regarding your experience using one of our investigational or marketed products, we may use the information you provide in submitting reports to the U.S. Food and Drug Administration.

Consent. We may also disclose your information for any other purposes disclosed at collection or pursuant to your consent or direction.

RETENTION OF DATA

Denali retains Personal Information about you for as long as it is necessary depending on the business purpose for collection, our document retention policies, and compliance with applicable laws or regulations.

YOUR PRIVACY CHOICES

Cookies
Our Services may use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities. Your browser may allow you to be notified when you receive certain types of cookies and restrict or disable certain cookies. Each browser is different, so you should check your browser’s “Help” menu to learn how to change your cookie preferences. Please be aware that if you disable or reject cookies, some features may not work properly. You can manage your cookies through our Cookies Preference Center. For more information about how we utilize cookies and similar technologies, please refer to our Cookies Notice.

Unsubscribe from Communications
You may unsubscribe from receiving non-service related emails from us by using the ‘Unsubscribe’ link or instructions provided in the emails.

Do Not Track Signals
At this time, our Services do not respond to or modify its practices in response to browser DNT signals. Denali is monitoring the development of industry standards for responding to DNT signals and may update its practices should such a standard emerge.

Global Privacy Control
Our Services respond to Global Privacy Control (GPC) signals. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use. More information about GPC is available at: https://globalprivacycontrol.org/.

YOUR PRIVACY RIGHTS

Individuals may have the following rights regarding their privacy, subject to certain exceptions and limitations.

These rights include:

  • Right to Confirm. You have the right to confirm whether your Personal Information is being processed.
  • Right to Access. You have the right to request we disclose or provide you with access to the Personal Information which we have collected about you.
  • Right to Deletion. You may have the right to request the deletion of Personal Information we have collected from you or otherwise obtained about you, subject to certain exceptions.
  • Right to Correction. You have the right to request a correction of inaccurate Personal Information that we maintain about you.
  • Right to Data Portability. You have the right to request that we export your Personal Information to you in a machine-readable format or transfer it to another party of your choice.
  • Right to Opt-Out of Sale or Sharing of Personal Information. You may have the right to opt out of the “sale” or “sharing” of your personal information. Denali does not “sell” your Personal Information for money as the term is commonly used. However, sharing browser information with third parties using cookies for targeted advertising or analytics may be considered a “sale” or “share” of Personal Information, depending on the applicable law. You can exercise your right by visiting the Cookies Preferences Center and managing your cookie settings. You can also opt out via a browser opt out preference signal such as Global Privacy Control.
  • Right to Opt Out of Automated Decision Making and Profiling. You may have the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects on you. The definition of, and the availability of a right to opt out of Profiling will vary based on the applicable law.
  • Right to Appeal. Residents of certain states may have the right to appeal privacy request decisions.
  • Right to Not Be Subject to Discrimination. You have the right to be free from discrimination or retaliation for exercising any of the rights described above.

EXERCISING YOUR RIGHTS

To exercise your rights, please contact us using the contact information provided in the “HOW TO CONTACT US” section of this Policy. When submitting your request, clearly indicate the specific right(s) you wish to exercise and provide details about the relevant Personal Information.

In some cases, we may need to request additional information from you to verify your identity or understand the scope of your request. If we suspect fraudulent or malicious activity related to your request, we will not comply with your request until we perform further verification to

determine whether your request is authentic, and you are the person about whom we have collected the Personal Information. If using an authorized agent to make a request on your behalf, they must submit proof of authorization from you.

Please note that some of the rights above are not absolute rights and we may be unable to comply with a request due to certain exemptions or limitations under applicable laws. We will attempt to fulfill the requests to the extent allowable under the applicable law.

HOW WE HOLD AND PROTECT YOUR INFORMATION

We take seriously the trust you have placed in us with your information. To protect against unauthorized destruction, loss, alteration, access, disclosure, or use (collectively, “Unauthorized Processing”), we maintain administrative, technical, and physical safeguards designed to protect the information you provide and that we collect about you. Unfortunately, despite these efforts, we cannot ensure or warrant the security of any information you provide to us. In addition, we are not responsible for the security of information you transmit to us over networks that we do not control, including the Internet and wireless networks. As a result, we will not be liable for any loss or damage arising from any Unauthorized Processing of your information.

INTERNATIONAL DATA TRANSFERS

Please note that we may transfer your information to recipients in countries other than the country in which the information was originally collected, including the United States of America. Those countries may not have the same level of data protection laws as the country in which you initially provided the information. If you would like to know more about how we protect your Personal Information, you can contact us using the information provided in the” HOW TO CONTACT US” section below.

THIRD PARTY SITES/LINKS

Our Services may also contain links to third party websites. Linked websites are not under our control, and we do not assume any responsibility or liability for their content. Please consult the privacy policy and terms of use of any third-party website you decide to access.

CHILDREN’S PRIVACY

Our websites are not directed at minors under 16 and we do not knowingly collect, maintain, disclose, or otherwise process Personal Information of minors below the age of 16 without consent or opt-in by the minor’s parents or legal guardians. If you believe we have any personal information from or about a minor under 16 without parental or guardian consent, please contact us as described in the “HOW TO CONTACT US” section so that we may identify and delete such information.

ACCESSIBILITY WITH A DISABILITY

Denali is committed to ensuring our communications are accessible to people with disabilities. For any accessibility related requests or barrier reports, please contact us as described in ‘How to Contact Us’.

CHANGES TO OUR PRIVACY POLICY AND PRACTICES

This Privacy Policy may be updated periodically and without prior notice to you to reflect changes in our information practices or relevant laws. To inform you of any change, we will post the updated Privacy Policy and indicate at the top of the Privacy Policy when it was updated.

HOW TO CONTACT US

If you have any questions or comments about this Privacy Policy, our privacy practices or if you would like to exercise your rights and choices, please contact us at [email protected] or by writing to us at:

Denali Therapeutics Inc.

161 Oyster Point Blvd.

South San Francisco, CA 94080
(650) 866-8548