Inotiv, Inc. and its group of companies (collectively, “Inotiv,” “we,” “us,” and “our,”) respect your privacy and are committed to safeguarding and respecting the privacy of your personal information. This Privacy Policy describes our practices when you use our websites or otherwise interact with us online or offline (together, our “Services”).

PERSONAL INFORMATION WE COLLECT

When you access or use our Services, we may collect the following categories of information:

• Identifiers and Contact Information, such as:
  • First name, last name, title, username or similar identifier, e-mail address, phone number
• Technical Data, such as:
  • Internet protocol address (IP), your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, other technology on the devices you use to access this website
• Usage Data, such as:
  • Information about how you use our websites
• Profile Data, such as:
  • Your areas of research, areas of interest, preferences, feedback and survey responses, role in purchasing
    SOURCES OF PERSONAL INFORMATION

We collect data from and about you from the following sources:

• Directly from you, when you provide information to us or interact with us, such as when you purchase our products or services, subscribe to our services or publications, request access to or be sent marketing content, participate in surveys, register for an event, or provide us feedback.
• Automatically from you when you use or interact with our Services, such as when you interact with our websites. For example, as you interact with our websites, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this information by using cookies, server logs and other similar technologies.
• From other third-party sources that provide consumer data, such as information about your interests, demographic information, and marketing inferences; and
• From online advertising companies who may share information about the marketing and advertisements you have seen or clicked on, and from other sources of publicly available data.

HOW WE COLLECT AND USE YOUR PERSONAL INFORMATION

We collect and use the information we collect from you for the following purposes:

• Provide our Services to you, including managing any purchases or transactions, and provide important notices;
• Respond to your requests, questions and comments and provide customer support;
• Monitor the performance of our Services including metrics such as total number of visitors, traffic, and demographic patterns;
• Interact with you, including to notify you regarding products, services, and promotions that may be of interest to you;
• Tailor the content we display to you in our Services and communications, and offer products and services that we believe may be of interest to you;
• Manage, operate, and improve the Services and grow our business, including understanding our customer base and the effectiveness of our marketing, events, promotional campaigns, and publications, and diagnose or fix technology problems;
• For legal, security and safety reasons, such as to protect our rights and the rights of our customers, protect the security of our systems and networks, enforce our policies, communicate safety notices, or address legal and regulatory compliance obligation

PURPOSES FOR WHICH WE WILL USE YOUR PERSONAL INFORMATION

We have set out below, in a table format, a description of all the ways we use your personal information, and which of the legal bases we rely on to do so.

HOW WE DISCLOSE YOUR PERSONAL INFORMATION

Affiliates. We may disclose your information to companies that we own or control, that are owned or controlled by us, or that are under common ownership or control.

Service Providers. To provide and support the Services, sometimes we use other companies as service providers to transmit, collect, process, or store information for us. We require these service providers to treat the information we share with them as confidential and to use it only for providing their services to us. These include:

• Accounting, auditing, and tax providers
• Banking providers
• Insurance providers
• Professional services providers, such as firms that provide consultative services, provide legal services, or supply project-based resources and assistance
• Marketing and advertising entities that assist us in creating and executing marketing, advertising, and sales programs
• Security providers, such as entities that assist with security incident verification and response, service notifications, fraud prevention, identity verification and management, and authentication
• Information technology providers, such as entities that assist with website design, hosting, maintenance, data and software storage, and network operations
  
  

Corporate Event. If Inotiv, or any portion of our assets, is acquired by, merged with, transferred to, or invested in by another company, we may share your personal information with that company or other third parties involved in the business transition.

Marketing, advertising and analytics providers. We disclose information to other companies that conduct marketing and advertising services to promote our Services. This includes directing digital (online) targeted advertising and other marketing offers, promotions, rewards, contests, upcoming events, and notices to you.

Legal. We share information where necessary to comply with applicable law, to respond to requests from law enforcement agencies or other government authorities or third parties, as permitted by law, and without your consent when it is necessary to protect our customers, employees, or property, in emergency situations, or to enforce rights under our terms or service and policies.

HOW LONG WE KEEP YOUR PERSONAL INFORMATION

We keep your data for only as long it is needed to complete the purpose for which it was collected or as required by law. To determine the appropriate retention period for personal information, we use the following criteria:

• The business purposes for which the information is used, and the length of time for which the information is required to achieve those purposes;
• Whether we are required to retain the information type in order to comply with legal obligations or contractual commitments, to defend against potential legal claims, or is otherwise necessary to investigate theft or other activities potentially in violation of Inotiv's policies and procedures applicable to you or against the law, to ensure a secure online environment, or to protect health and safety;
• The privacy impact on individuals of ongoing retention; and
• The manner in which information is maintained and flows through our systems, and how best to manage the lifecycle of information in light of the volume and complexity of the systems in our infrastructure.
  
  

Individual pieces of personal information such as those listed above may exist in different systems that are used for different business or legal purposes. A different maximum retention period may apply to each use case of the information. Certain individual pieces of information may also be stored in combination with other individual pieces of information, and the maximum retention period may be determined by the purpose for which that information set is used.

COOKIES NOTICE

Our websites use cookies and similar technologies. For more information regarding our use of cookies and how to restrict information collected on our websites, please see our Cookies Statement.

Your browser or device may include "Do Not Track" functionality. Because definitions and rules for a "Do Not Track" standard have not yet been established, including whether such signals must be user-enabled, we do not yet respond to "Do Not Track" signals sent from browsers.

SECURITY MEASURES

Protecting your personal information is important to us. We use a combination of physical, technical, and administrative safeguards to protect the information we collect through the Services. While we use these precautions to safeguard your information, we cannot guarantee the security of the networks, systems, servers, devices, and databases we operate or that are operated on our behalf.

INFORMATION FROM CHILDREN

Our websites are not directed toward children under 16 years of age, and Inotiv does not knowingly collect any information from children under 16 years of age. If we learn that we have inadvertently gathered Personal Information from a child under the age of 16, we will take reasonable measures to promptly remove that information from our records.

YOUR PRIVACY RIGHTS

Depending on where you reside, you may have the following rights with respect to your personal information under applicable data protection laws in your jurisdiction:

• Right of Access: The right to request information about and access to the personal information we are processing about you.
• Right to Correction: The right to correct any inaccuracies in the personal information that we hold about you and, where applicable, to complete any incomplete personal information that we hold.
• Right to Erasure: The right to request that we erase the personal information that we hold about you.
• Right to Restriction of Processing: The right to restrict our processing of your personal information under certain circumstances.
• Right to Data Portability: The right to receive personal information concerning you in a structured, common, and machine-readable format or request transmission of the data to a third party.
• Right to Object: The right to object to the processing of your personal information based on our legitimate interests at any time. We will no longer process the data, unless there are compelling legitimate grounds for our processing that override the interests, rights, and freedoms of the data subject, or the processing serves the purpose of asserting, exercising, or defending legal claims. You may also have the right to object at any time to the use of your data for direct marketing.
• Right to Withdraw Consent: If we are processing your personal information based on your consent, you have the right to withdraw your consent at any time.
  
  

To submit a request to exercise your rights, please contact us through this form Data Rights Request or send us an email at dataprivacymanager@inotivco.com.

Please note that, in order to verify your identity, we may require you to provide us with information prior to accessing any records containing information about you.

We may have a reason under the law why we do not have to comply with your request, or we may comply with it in a more limited way than you anticipated. If we do, we will explain that to you in our response.

CROSS-BORDER TRANSFER OF DATA

If you use our Services outside of the United States, you understand that we may collect, process, and store your personal information in the United States and other countries. The laws in the U.S. regarding personal information may be different from the laws of your state or country. Any such transfers will comply with safeguards as required by relevant law.

LODGING A COMPLAINT

Users that reside in the EEA, Switzerland, or the UK have the right to lodge a complaint about our data collection and processing actions with the supervisory authority concerned. Contact details for data protection authorities are available here.

NOTICE FOR CALIFORNIA RESIDENTS

California Consumer Privacy Act

California residents have the right to receive notice of the categories of personal information we collect, the purposes for which those categories of personal information will be used, and how we determine the length of time for which the personal information is maintained. You are also entitled to receive notice regarding how we disclose personal information and your rights.

Categories of personal information collected. We collect and use the following categories of personal information:

Identifiers; contact information; commercial information; internet or other electronic network activity information; and audio, electronic or visual information. For more information see How We Collect and Use Your Personal Information above.

Categories of sources of personal information collected. We collect the personal information described above from the categories of sources set forth above in Sources of Personal Information.

Purposes of collection. We collect and use your personal information for the purposes set forth above in How We Collect and Use your Personal Information.

Retention. We retain the personal information we receive as set forth above in How Long We Keep Your Personal Information.

Disclosure of Personal Information. We disclose the categories of personal information described above for business and commercial purposes to the categories of parties set forth above in How We Disclose Your Personal Information.

Sale or Sharing of Personal Information. We "sell" or "share" (as defined under California law) the following categories of personal information to the following categories of parties:

• Identifiers: to advertising, marketing, and analytics providers
• Internet or Electronic Network Activity Information: to advertising, marketing, and analytics providers
  
  

Right to Opt Out of “Sale” or "Sharing" of Personal Information. You have a right to opt out from future “sales” or "sharing" of personal information. You can exercise this right by clicking the “Do Not Sell or Share My Information” link.

Right to Know, Correct, and Request Deletion. You have the right to request that we disclose what personal information we collect, use, and sell, as well as the right to request that we delete certain personal information that we have collected from you. If we hold personal information that is not accurate, you have the right to request that we correct this information.

You or your authorized agent may submit a request to exercise your rights by submitting a Data Rights Request form or by calling 833-448-3273.

For your security and to ensure unauthorized parties do not access your personal information, we will require you to verify your identity before we can act on your request. For requests to correct inaccurate information, we may ask you to provide documentation that demonstrates why or how the existing information is inaccurate.

Before accepting a request from an authorized agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us or confirm that you provided the authorized agent permission to submit the request.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information that relates to you.

Right to Restrict Use of Sensitive Personal Information. California residents have the right to request that a business limit its processing of sensitive personal information under certain circumstances. You can exercise your right by submitting a Data Rights Request form, by calling 833-448-3273 or by emailing us at dataprivacymanager@inotivco.com.

Right to Non-Discrimination. You have a right not to receive discriminatory treatment for the exercise of your privacy rights.

Shine the Light law

California residents are entitled to request and obtain certain information about the disclosure of certain categories of their Personal Information to third parties for their direct marketing purposes. Requests may be sent to dataprivacymanager@inotivco.com.

CHANGES TO THE PRIVACY POLICY

We reserve the right to modify, alter, or update this Privacy Policy from time to time without prior notice. We will post those changes on this page in addition to updating the "Last Updated" at the top of this webpage. Modifications shall become effective immediately upon being posted.

HOW TO CONTACT US

In the event you have any questions about this Privacy Policy, please contact us by:

• Emailing us at dataprivacymanager@inotivco.com
• Writing us at:
  
  Attention: Data Privacy Manager
  Inotiv, Inc.
  8520 Allison Pointe Blvd, #400
  Indianapolis, IN 46250