PRIVACY POLICY

Last updated July 23, 2018

Introduction

This Privacy Policy sets forth how BioCryst Pharmaceuticals, Inc. (“BioCryst”) uses your personal information when you interact with us online through the BioCryst website (the “Website”). BioCryst is the controller of personal information collected through the Website.

We urge you to read this Privacy Policy to learn more about the policies and practices BioCryst has developed to safeguard personal information and to comply with applicable data protection laws. You will also find information about how to contact us regarding this Privacy Policy.

Your use of the Website is also governed at all times by the BioCryst Website Terms and Conditions.

Information We Collect

You may provide personal information directly through our website. Other information is collected automatically. Further information on the personal information we collect is below:

Contact Us. When you choose to contact us through the Website form, we require you to provide your name and email address.  You may also choose to provide us with your phone number.  We ask for this information in order to respond to your inquiries.

Automatically Collected Information. The Website uses cookies to allow you to automatically store your preferences and to improve the website’s functionality. You can alter the configuration of your browser to refuse to accept cookies, but it is possible that doing so may cause limited functionality of the Website. The Website does not respond to “Do Not Track” signals at this time.

Google Analytics. The Website uses Google Analytics to obtain aggregated information about traffic and usage. Google Analytics uses cookies to capture information such as the URL of the page you are viewing, your browser information, and your geographic region. Google Analytics is not affiliated with BioCryst and BioCryst does not have control over the information that may be collected, used, and shared by Google Analytics. We encourage you to visit Google Analytics’ website to understand its privacy practices.

Legal Bases for Processing Personal Information

BioCryst processes personal information about you: with your consent; as part of a contractual agreement; or as necessary to provide the Website or related services to you, operate its business, meet its contractual and legal obligations, protect the security of the Website, and fulfill other legitimate interests.

Sharing of Collected Information

We do not share your personal information with any third party without your consent, except in the limited instances described below.

Third-Party Service Providers. We may disclose your voluntarily provided personal information to third parties we engage to provide services on our behalf.

As Required by Law and Other Disclosures. BioCryst may be required to disclose your personal information if it: (a) files for bankruptcy, merges with another company, or otherwise buys, sells, or reorganizes some part or all of its business; (b) believes it is reasonably necessary to comply with legal process (such as a court order, subpoena, search warrant, etc.) or other legal requirements of any governmental authority; (c) would potentially mitigate our liability in an actual or potential lawsuit; (d) is otherwise necessary to protect our rights or property; or (e) is necessary to protect your interest or the interest of other users of our Website.

International Data Transfers

BioCryst’s headquarters are in the United States and personal information collected through the Website will be processed in the United States.

Individuals in the European Union: The United States has not received a finding of “adequacy” from the European Union under Article 45 of the GDPR. We rely on derogations for specific situations set forth in Article 49 of the GDPR in order to transfer your personal information across international borders. In particular, we collect and transfer personal information outside of the EU only: (a) with your consent; (b) to perform a contract with you; or (c) to fulfill other compelling legitimate interests in a manner that does not outweigh your rights and freedoms.

Security

BioCryst provides commercially reasonable physical, electronic, and procedural safeguards to protect information it processes through the Website. Please be aware that no security system is foolproof. As a result, we cannot guarantee the security of any information transmitted to us and cannot be responsible for the theft, destruction, misuse, unauthorized access, alteration, or inadvertent disclosure of your personal information.

BioCryst stores your personal information for as long as needed: (i) to conduct business with you; (ii) as needed for the purposes outlined in this Privacy Policy or at the time of collection; or (iii) as necessary to comply with legal obligations, resolve disputes, and enforce any agreements.

Children

We do not knowingly solicit data from or market to children as defined by applicable law. If you believe that we have inadvertently collected information from a child, please contact us so we can promptly delete the information.

Third-Party Websites

The Website may contain links to third-party websites; however, please be aware that BioCryst is not responsible for, and cannot control, the privacy practices of these other websites. We encourage you to read the privacy policies for these other websites prior to using them, as their privacy practices may differ from ours.

Changes to this Privacy Policy

We will update this Privacy Policy to reflect any changes in our privacy practices. We will notify you of any non-material changes to our Privacy Policy by posting it on the Website and indicating the date it was last updated. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes. Where changes are material, we will notify you by email or through an alert on the Website.

Your Options

To the extent required by applicable law, we provide you with (a) reasonable access to the personal information collected through the website, and (b) the ability to correct, export, suspend processing, or delete your personal information.

If you would like to submit a request or have any questions about our privacy practices, please email us at: privacy@biocryst.com.

Individuals in the European Union: You have the right to lodge a complaint with a supervisory authority if you believe we have processed your personal data in a manner inconsistent with your privacy rights. We kindly request that you contact us first so that we may address your concern.