CANADA
Last updated: October 2026
Jazz Pharmaceuticals plc and its corporate subsidiaries and affiliates including GW Pharmaceuticals companies and Chimerix, Inc. (“Jazz” “we”, “us” and “our”) recognise the importance of and are committed to respecting and protecting your privacy.
This Privacy Statement applies to our collection, use, and disclosure of your personal information through our websites, mobile pages, applications, devices, platforms, and other online and offline services and interactions (collectively the “Services”). This Privacy Statement also applies to our collection, use, and disclosure of personal information about our vendors, service providers, and their employees with whom we interact in a business-related capacity.
Please note that this Privacy Statement does not apply to personal information we collect about employees, job applicants, independent contractors, or healthcare professionals with whom we interact in a business-related capacity. For disclosures applicable to individuals who interact with us in those contexts, please see our Global Job Prospects and Applicants Privacy Notice, Employee Privacy Notice, and Healthcare Professionals Privacy Notice, as applicable.
As used in this Privacy Statement, “personal information” means any information or piece of information which could identify you either directly (e.g. your name) or indirectly (e.g. a unique ID number).
This Privacy Statement is part of the Terms of Use for the relevant Services. Please read this Privacy Statement carefully in order to understand how we collect, use, disclose and store your personal information. By continuing to use the Services or by providing your personal information to us, you agree to this Privacy Statement. If you do not agree with our use of your personal information as described in this Privacy Statement, please do not use the Services or otherwise provide personal information to us.
Consumers located in certain jurisdictions, including the European Economic Area, United Kingdom, and Switzerland and residents of certain U.S. states have certain rights with respect to the collection, processing, and disclosure of their personal information. For more information, please see the “Additional Disclosures for Individuals in the EEA, UK, and Switzerland” and “Additional Disclosures for Residents of Certain US States” sections of this Privacy Statement, our and our Consumer Health Data Privacy Policy, as applicable.
We may collect, and in the past 12 months may have collected, the following personal information about you:
Personal information that reveals your:
Social security, driver’s license, state identification card, or passport number;
Account log-in in combination with any required security or access code, password, or credentials for allowing access to an account;
Precise geolocation that is used or intended to be used to locate you within a small geographic area (less than a radius of 1,850 feet);
Genetic data; or
Neural data.
We may also collect additional personal information about you in connection with a report of a potential breach of Jazz Pharmaceuticals’ Code of Conduct, policies, laws or regulations and illegal or unethical behaviors (hereinafter “Whistleblowing”). In this context, the type of information that we collect will depend on whether you act as a reporter or are an individual referred to in a report. This information generally includes:
Subject to applicable data protection laws, we may collect, process, use, and disclose, and in the past 12 months may have collected, processed, used, and disclosed, your personal information, including sensitive personal information, listed in this Privacy Statement for the following purposes:
We may also aggregate and/or deidentify personal information and analyze those data for analytical, research, statistical, or any other purposes permitted by law. When we do so, we take reasonable measures to ensure that the information cannot be associated with an individual or household, and we maintain and use the information in deidentified form. We will not attempt to reidentify the information, except that we may attempt to reidentify the information solely for the purpose of determining whether our deidentification processes satisfy applicable legal requirements. After it has been deidentified, the information is no longer personal information and is not subject to this Privacy Statement.
Please note that, depending on locally applicable law, we may also process personal information via use of automated technologies, including artificial intelligence, for the purposes listed above. To the extent permitted by applicable law, we may also use personal information we collect to train automated technologies we use for the above purposes. We may also collect and use personal information for the purposes of training large language models, but we do not sell personal information for such purposes. We do not process personal information subject to this Privacy Statement using automated decision making technologies to make significant decisions concerning individuals or for profiling in furtherance of decisions that produce legal or similarly significant effects (meaning decisions that results in the provision or denial of financial or lending services, housing, insurance, education enrollment or opportunity, criminal justice, employment opportunities, health-care services, or access to essential goods or services).
Under certain state privacy legislation that applies to Jazz (“U.S. Privacy Laws”), “Sell,” “Sale,” or “Sold” means renting, releasing, or transferring an individual’s personal information to a Third Party for money or other valuable consideration, and “Share,” “Shared,” or “Sharing” means transferring an individual’s personal information to a Third Party for cross-context behavioral advertising, whether or not for money or other valuable consideration. “Share,” “Shared,” or “Sharing” includes processing of personal information for targeted advertising, as the term “targeted advertising” is defined by the U.S. Privacy Laws. Accordingly, we Sell and Share and in the past 12 months have Sold and Shared, [identifiers, such as IP addresses and other device identifiers, internet or other electronic network activity information, and inferences to third party marketing and analytics providers. We Sell and Share these categories of personal information for marketing and analytics purposes, including to analyze or predict consumer preferences to identify aggregated trends to develop, improve or modify our products, services and business activities and to deliver advertising, including interest-based advertising on our websites and applications and improving our advertising efforts]. Further, because this disclosure of personal information to third party marketing and analytics providers could potentially suggest that you have a particular health condition or are taking a particular medication, we provide the following notice for compliance with the U.S. Privacy Laws:
NOTICE: We may sell your sensitive data.
We do not Sell, Share, or process for targeted advertising purposes personal information that we collect outside of the cookie and online tracking context. Residents of certain US states, including California, have the right to opt out of the Sale and Sharing of your personal information and the processing of your personal information for targeted advertising purposes. To do so, click the “Your Privacy Choices” link in the footer of our websites and click “Reject All.”
We do not Sell or Share personal information of consumers we know, or reasonably should know, are under 18 years of age.
We may retain your personal information for as long as your account is active or as needed for the specific business purpose for which it was collected. In some cases, we may be required to retain information for longer to comply with laws or regulations or other legal obligations, resolve disputes and enforce our agreements.
In some jurisdictions, laws and regulations tell us how long we must keep your personal information. How long may depend on the laws of the jurisdiction you are in when we collect your personal information.
We collect your personal information from a variety of sources. In most cases we will obtain information directly from you in the following situations:
Our collection of your personal information is necessary for us to provide you with the requested service, including services available through the Services or to enter into an engagement with you. If you choose not to provide personal information, we may not be able to provide you with the requested services or enter into an engagement with you.
We may also receive personal information about you from other sources, which could include:
In addition, we passively collect personal information via cookies and other tracking technologies (“Cookies”) when you use our Services. This typically includes information about our website visitors, IP address, other device identifiers, and internet or other electronic network activity information. Please see the “Cookies and other similar technologies” section of this Privacy Statement for additional details about the information we collect through Cookies.
We may disclose, and in the past 12 months may have disclose, all the categories of personal information listed in this Privacy Statement in the following contexts:
Vendors. We may disclose the personal information to our vendors that provide us with services and act on our behalf. For example, we use vendors to provide information technology and hosting services; processing and fulfillment services; customer support and communication services; advertising and marketing services; consulting services; survey management services; legal and professional services; and similar services. We impose contractual limitations on our vendors’ use of personal information they collect in conjunction with providing services to us.
Health Care Professionals, Health Insurance Companies, and Authorized Representatives. We may disclose the personal information we collect to your healthcare professionals and providers (including specialty pharmacies), health insurance company or health plan, and your authorized/legal representatives, family members, and caregivers at your direction, with your consent, or where permitted or required by applicable law.
Third Parties for Marketing & Advertising Purposes. We may disclose your personal information to third parties, including third party marketing and advertising and analytics providers, who may process personal information for their own purposes.
For Personal Information collected as part of our Risk Evaluation and Mitigation Strategy (REMS) program: Mobile information/opt-in data will not be shared with third parties or affiliates for marketing or promotional purposes.
As Described in a Privacy Notice or With Your Consent. We may disclose personal information as described in any privacy notice we provide to you via our Services, or with your consent if we obtain it from you in a particular context, to the extent permitted by applicable law.
In Aggregate or Deidentified Form. We may aggregate or deidentify the personal information we collect, and we may disclose aggregated and/or deidentified information to our affiliates, vendors and to third parties for our business operational purposes and for any other purposes permitted by applicable law.
We may also disclose personal information in the following contexts:
For Compliance with Laws and Protection of Our Rights and the Rights of Others. We may disclose your personal information as required or permitted by law, to comply with a subpoena or similar legal process or government request, or when we believe in good faith that disclosure is legally required or otherwise necessary to protect our rights and property, or the rights, property or safety of others, including to advisers, law enforcement, judicial and regulatory authorities.
As Part of a Business Transfer. We may also transfer your personal information to another entity in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets, or shares (including in connection with any bankruptcy or similar proceedings). If such a transfer occurs, we will seek assurances that the successor organization will treat the Personal Information we disclose to it in accordance with this Privacy Statement.
Given the global nature of Jazz’s activities, your personal information may be transferred to countries located outside your country or region, including to countries that may not provide a similar or adequate level of protection to that provided by your country or region. In such a case, we will implement appropriate measures to protect your personal information where required by and in accordance with the applicable data protection laws.
The security of your personal information is important to us. We take reasonable steps, including technical, administrative and physical safeguards, designed to protect the personal information submitted to us from loss, misuse and unauthorised access, disclosure, alteration and destruction. However, no method of security or method of transmission over the Internet is entirely secure. We therefore cannot guarantee that your personal information will not be disclosed, misused, or lost by accident or by the unauthorised acts of others. You should always use caution when transmitting personal information over the Internet.
You may unsubscribe from receiving marketing or other commercial emails from Jazz by following the instructions included in the email. However, even if you opt out of receiving such communications, we retain the right to send you non-marketing or transactional communications (such as important product safety information, appointments, or changes in website or mobile application terms).
Jazz may use cookies or other similar technologies (“Cookies”) on our Services. Cookies are small text files that are stored on your computer or other web accessing devices by websites that you visit, and allow us to distinguish you from other users of a website, and to enhance our websites and your experience when you browse our websites. We use Cookies to make our websites work the way you expect them to; to assess how our websites are used; to personalize your experience; and to deliver online content tailored to your interests. For example, we use Google Analytics, a web analytics tool that helps us understand how visitors engage with our Services. To learn more about Google Analytics, visit http://www.google.com/intl/en/analytics/privacyoverview.html
You can find more information about the Cookies we use and change your Cookie settings by clicking on the [“Your Privacy Choices,” “Cookie Settings,” or “Cookie Preferences” link in the footer of each page of our websites and using the toggle buttons to accept or reject each type of cookie, and then click “Confirm My Choices.”]. In addition, depending on your Internet browser, you may be able to change your settings to block and/or erase Cookies from your device. You can check your browser instructions to lean more about these functions. Please note that if Cookies are disabled or rejected, some features or functionality of our Services may not function correctly. For more information about Cookies, please see our Cookie Notice.
Please note that our Services do not currently respond to the “Do Not Track” signal.
The Services may, from time to time, contain links to external sites operated by other entities. We are not responsible for these external sites or the content of such external sites. Once you have left our Services, we cannot be responsible for the protection and privacy of any information which you provide. Any information you provide on external sites is covered under the privacy and data collection policies of that site and is not covered by this Privacy Statement. You should exercise caution and look at the privacy statement for the websites you visit.
We may from time to time, where permitted by applicable laws operate a “Send” or “Share” service to enable you to easily share content from the Services with someone else. If you use this facility please ensure that you have obtained that person’s consent before you provide us with their personal information. We will use this personal information to send the individual a single email message on your behalf.
Our Services are not intended for or directed towards children under 13 years of age nor do we knowingly collect information directly from children under 13. If you are under 13, please do not use our Services or submit any personal information to us. If you believe that we have unintentionally collected personal information from a child under 13, please contact us using the information provided below so that we may take appropriate action.
This section provides additional information about Jazz’s processing of personal information about residents of states with U.S. Privacy Laws.
Some portions of this section only apply to consumers who reside in particular U.S. states. In those instances, we have indicated that such language only applies to those residents.
Residents in states with U.S. Privacy Laws have certain rights to their personal information. Depending on the state in which you reside, you may have the following rights under applicable local law regarding our collection and processing of your personal information, subject to certain exceptions. Please note that if you interact with us in a business-related capacity (i.e., a Jazz vendor or service provider) this section only applies to you if you are a resident of California.
Rights that Require Verification
Exercising the Rights to Know, Deletion, Correction, Access Specific Pieces of PI, and Data Portability:
You can make such a request by calling (888) 249-7888, or by clicking here and filling out the Privacy Request Form. To verify your identity, we will match the information provided in the request to the information we have in our records. If necessary, we may ask the requestor to provide additional information to verify your identity and confirm that the request is valid. Depending on your state of residence, you may be able to authorize an agent to submit a request on your behalf. Authorized agents may submit a request in the same manner as a consumer, as listed above. When you use an authorized agent, we may ask the authorized agent to provide a copy of the consumer’s signed permission authorizing the agent to act on the consumer’s behalf, and in certain circumstances, we may ask you to verify your own identity directly with us. In some instances, we may decline to honor your request if an exception applies under applicable law. We will respond to your request consistent with applicable law.
Rights that Do Not Require Verification
Opt-Out Preference Signals. We recognize opt-out preference signals that we are required to recognize for compliance with applicable law. Where required by U.S. Privacy Laws, we treat such opt-out preference signals as a valid request to opt-out of Sale, Sharing, and processing for purposes of targeted advertising, as applicable, for the browser or device through which the signal is sent and any consumer profile we have associated with that browser or device, including pseudonymous profiles. Further, if we know the identity of the consumer from the opt-out preference signal, we will also treat the opt-out preference signal as a valid request to opt out of Sale and Sharing for such consumer. Consumers may use opt-out preference signals by downloading or otherwise activating them for use on supported browsers and setting them to send opt-out preference signals to websites they visit. However, our sites do not respond to the “Do Not Track” signal, which is different from the opt-out preference signals described above.
Non-Discrimination. You have the right not to receive discriminatory treatment for the exercise of these rights. Jazz will not discriminate or retaliate against you for exercising your rights under this U.S. Supplemental Notice.
Appeals. Residents of certain states have the right to appeal our decisions on their data subject requests. This section does not apply to Alabama, California, or Utah consumers, or to residents who reside in other states where the applicable U.S. Privacy Law does not give them the right to appeal controllers’ decisions regarding data subject rights. To appeal our decision on your data subject requests, you may contact us at privacy@jazzpharma.com. Please enclose a copy of or otherwise specifically reference our decision on your data subject request, so that we may adequately address your appeal. We will respond to your appeal in accordance with applicable law.
This section provides additional information applicable to individuals located it the European Economic Area (“EEA”), United Kingdom (“UK”), and Switzerland.
Data controller. Jazz Pharmaceuticals plc, with an office at Waterloo Exchange, Waterloo Road, Dublin 4, D04 E5W7, is the controller of your personal information, either independently or jointly.
Legal basis. We rely on the following legal bases to process your personal information under the GDPR and UK GDPR:
With your consent (GDPR Art. 6(1)(a)), including for the following purposes: for market research purposes; to contact you and respond to your requests and inquiries and contacting you, including via email, with information that might be of interest to you, including newsletters, surveys, information about clinical trials and about our products and services; and to sign you up for our programs.
When the processing is necessary for the performance of a contract with you (GDPR Art. 6(b)), including for the following purposes: to communicate with you and send you communications of an operational nature about our Services; and to facilitate your visit to our facilities and offices.
When the processing is necessary for the compliance of a legal obligation to which Jazz is subject (GDPR Art. 6(1)(c)), including for the following purposes: to comply with a law or regulation, court order or other legal process, including to comply with post-market surveillance and vigilance reporting obligations under applicable regulations and to comply with requests from competent authorities; and for fraud prevention and detection.
When the processing is necessary in order to protect the vital interest of a natural person (GDPR Art. 6(1)(d), including for the following purposes: to protect someone's health, safety or welfare and to comply and enforce our policies; and for fraud prevention and detection.
When the processing is necessary for our legitimate interests in running our business successfully, including in managing our business and providing our products and services, communicating with our consumers, improving the consumer experience, marketing our products and services, developing and improving our products and services, ensuring our systems and services are secure, exercising our legal rights, and complying with legal and regulatory obligations (GDPR Art. 6(1)(f)), including for the following purposes: to provide you with the services and information offered through the Services; to respond to your requests and inquiries and to contact you, including via email, with information that might be of interest to you, including newsletters, surveys, information about clinical trials and about our products and services; to communicate with you and to send you communications of an operational nature about our Services; to facilitate your visit to our facilities and offices; to sign up consumers for our programs; to authenticate and verify consumer identity; to develop our products and services, including to conduct internal research for technological development and demonstration; for business administration, including statistical analysis; to personalize your visit to the Services and assist you while you use the Services; to improve the Services by helping us understand who uses the Services; to analyse or predict your preferences to identify aggregated trends to develop, improve or modify our products, services and business activities; to deliver advertising, including interest-based advertising on our websites and applications and to improve our advertising efforts; for social media listening; to manage our IT and communications systems and networks, including for network and information security; to maintain and protect the security and integrity of our premises and IT systems (including WiFi); and for the establishment, exercise or defence of legal claims or proceedings and to protect our rights or property.
We only collect and process sensitive personal information if such processing is allowed or required under applicable law. In addition, we only process such sensitive personal information where (in addition to having a legal basis as set out above) it is necessary for the establishment, exercise, or defense of legal claims, where it is necessary for reasons of public interest in the area of public health (such as ensuring high standards of quality and safety of medicinal products), where we have obtained your explicit consent to process such data, or where we are required or allowed to do so under EU member state, UK, or Swiss data protection law, as applicable.
Obligation to provide personal information. In most cases, providing your personal information is voluntary. However, where we process your data to perform a contract with you (such as to provide you with products or services you have requested), provision of certain personal information is a contractual requirement, and failure to provide it may prevent us from fulfilling your request. We will inform you at the point of collection if providing specific information is mandatory.
Transfers of personal information outside the EEA, UK, and Switzerland. We may transfer your personal information to the United States or other countries outside of the EEA, UK, or Switzerland. For the transfer of personal information from the EEA, UK, or Switzerland to any countries not recognized by the European Commission, UK, or Swiss governmental authorities as providing an adequate level of data protection according to EEA, UK, or Swiss standards, we have implemented adequate measures to protect the personal information, such as by ensuring the recipient is bound by standard contractual clauses adopted by the European Commission, UK, and Swiss governmental authorities. You can obtain information concerning such safeguards, including obtaining a copy of the standard contractual clauses, by contacting our data protection officer at dpo@jazzpharma.com.
All Jazz entities have entered into an Interaffiliate Data Processing and Transfer Agreement including Standard Contractual Clauses to govern the transfer of personal information within Jazz from the EEA, the UK, and Switzerland to other countries including the United States.
Data subject rights. Individuals located in the EEA, UK, and Switzerland have the following rights to their personal information, subject to certain exceptions.
Right of Access: you have the right to confirm what personal information is being processed, obtain information about the processing activities and to receive a copy of your personal information.
Right to Rectification: you have the right to request rectification / correction of your personal information where it is inaccurate or incomplete.
Right to Erasure: you have the right to request deletion of your personal information.
Right to Restriction: you have the right to ask that we restrict or suspend the processing of your personal information in certain contexts.
Right to Data Portability: you have the right to request to receive your personal information in a structured, commonly used, and machine-readable format and have the right to transmit that information to another data controller.
Right to Object: you have the right to object to the processing of your personal information in certain contexts, including for any direct marketing purposes.
Right to Withdraw Consent: to the extent our processing of your personal information is based on your consent, you have the right to withdraw your consent, at any time, without hindrance or cost, to prevent further processing. Please note that withdrawing your consent does not affect the lawfulness of our processing of your personal information based on such consent before the withdrawal.
Right to Lodge a Complaint: you have the right to file a complaint concerning our processing of your personal information with the competent data protection supervisory authority in the relevant jurisdiction.
You can make such a request by contacting us using any of the methods listed in the “How to contact us” section below. Please include your full name, email address, and relationship to Jazz, and type of request. We will respond to your request consistent with applicable law.
Data Protection Officer. If you have any questions about this Privacy Statement or our privacy practices, please contact our data protection officer at dpo@jazzpharma.com.
If you have any questions about this Privacy Statement or our privacy practices, please contact the Jazz Pharmaceuticals Privacy Office at:
Address: 3170 Porter Drive, Palo Alto, CA 94303, U.S.
Tel.: (650) 496-3777
Email: privacy@jazzpharma.com
We may update this Privacy Statement from time to time and will provide notice of such changes by updating the “Last Updated” date listed on this Privacy Statement. If required by applicable law, we will provide you with additional notice if we make a material change to the Privacy Statement, for example, by sending you an email or posting a banner on our Services.
