Consumer Health Data Privacy Policy

BridgeBio Pharma, Inc. and its affiliates and subsidiaries (collectively, “BridgeBio,” “we,” “our,” or “us”) is committed to protecting the privacy of your health information. This Consumer Health Data Privacy Policy (“Policy”) describes how we collect, use, and share consumer health data in connection with our consumer services. This Policy supplements the BridgeBioGlobal Privacy Notice and applies specifically to consumer health data as defined under applicable consumer health data privacy laws.

Categories of Consumer Health Data We Collect

We may collect the following categories of consumer health data:

  • Health-related conditions, symptoms, status, diagnoses, testing, treatments, or medications, including your use and purchase of such medication

  • Social, psychological, behavioral, and medical interventions

  • Precise location information that could reasonably indicate your attempt to receive health services, such as proximity to a medical office or hospital

  • Bodily functions, vital signs, symptoms, or measurements of health information

  • Diagnoses or diagnostic testing, treatment, or medication

  • Reproductive or sexual health information

  • Genetic data and biometric data

  • Information that could identify you seeking health care services

  • Other information that may be used to infer or derive health data

Sources of Consumer Health Data

We collect consumer health data:

  • From other BridgeBio affiliates
  • From you when you access or use our services
  • Automatically via cookies, web beacons, and pixels as you interact with our websites
  • From healthcare professionals, healthcare providers, or healthcare organizations
  • From Contract Research Organizations and clinical trial investigators
  • From government agencies and/or public records
  • From service providers or business partners
  • From industry and patient advocacy associations
  • From publicly available sources

How We Use Consumer Health Data

We collect and use consumer health data as necessary to provide you with our services or for other lawful purposes for which we obtain your consent as required by applicable law.

  • To communicate with you, provide support, and respond to your inquiries
  • To fulfill quality, safety, and reporting obligations in accordance with applicable laws and regulations, including those governing adverse events
  • To operate and improve our business, such as to perform accounting, auditing, record keeping, conduct research, and develop new products and services
  • To market and advertise our services and products
  • To prevent, detect, or respond to security incidents, fraud, or malicious activities
  • To comply with the law, our legal and contractual obligations, and our policies and terms

Categories of Third Parties With Whom We Share Consumer Health Data

We may share consumer health data with the following categories of third parties:

  • BridgeBio affiliates, including Calcilytix Therapeutics, Inc.Eidos Therapeutics, Inc.ML Bio Solutions, Inc.QED Therapeutics, Inc.
  • Third party service providers and vendors who assist us in the provision of services
  • Third parties with whom we have marketing and advertising arrangements
  • Third parties that help administer, manage, and analyze our services
  • Third party platforms, providers and networks
  • Third parties for quality, safety, and adverse reporting
  • Third parties to comply with our legal obligations
  • Third parties for security purposes
  • Third parties that process consumer health data at your direction

How We Share Consumer Health Data

We may share each of the categories of consumer health data described in this Policy with third parties as necessary to provide our services, enable support, operate and improve our business, comply with legal obligations, protect against fraud, and in the context of a business transfer.

Your Privacy Rights

Under applicable consumer health privacy laws, subject to certain exceptions, you may have the right to access, correct, or delete consumer health data about you, or receive a list of third parties and affiliates with whom your consumer health data was shared.You also may have the right to withdraw consent relating to the use and sharing of your consumer health data. We may need to verify your identity before processing your request. We will respond within the timeframe required by applicable law. Refer to the Contact Us section of this Policy to exercise your rights.

Supplemental Information for Nevada and Connecticut Consumers

This supplemental information applies to Nevada and Connecticut consumers for purposes of providing additional disclosures required by these consumer health data privacy laws.

  • Purposes and Manner of Processing. We collect, use, process, and share Consumer Health Data for the purposes and in the manners described above in this Policy.
  • Requesting Changes to Consumer Health Data. Subject to certain legal limitations and exceptions, you may submit a request to review and/or revise your Consumer Health Data by contacting us via any of the methods listed under the Contact Us section of this Policy. If your request to change your consumer health data is denied, you may appeal that decision in accordance with applicable law.
  • Third Party Collection of Consumer Health Data. Third parties collect consumer health data over time and across different websites or online services when you visit our website or use our online services.
  • Changes to This Policy. This Policy may change from time to time. As a result, we may update this Policy at any time and when we do, we will post an updated version and change the “Last Updated” date above.

Contact Us

If you have any questions about our privacy practices or would like to exercise your privacy rights, please contact us at dataprivacy@bridgebio.com or by writing to us at:

BridgeBio Pharma, Inc.

Attn: Legal Department

Suite 250, 3160 Porter Drive

Palo Alto, CA 9430