Intercept Website Privacy Policy

1.0 INTERCEPT WEBSITE

Intercept Pharmaceuticals, Inc. ("Intercept"), understands the importance of privacy and the protection of personal data protection, and we take your privacy seriously. This "Privacy Policy" describes how Intercept collects, uses, discloses and otherwise processes personal data in connection with this Website and any of our other websites, mobile applications, or online services that link to this Privacy Policy (collectively referred to as the "Sites").

2.0 PERSONAL DATA WE COLLECT

We may collect personal data about you on our Sites in the following ways:

Information you choose to provide to us. We may collect personal data from you when you voluntarily provide it to us through our Sites or otherwise share with us. This includes:

• Personal and Business Contact information, such as your first name and last name, postal address, email address, phone number, job title, and employer name;
• Professional credentials, such as educational and work history, institutional affiliations and other information of the type that would be included on a resume or curriculum vitae;
• Profile information, such as your username and password, industry, interests and preferences;
• Feedback and correspondence, such as information you provide when you contact us with questions, report a problem with the Sites, receive customer support, respond to online surveys or otherwise correspond with us;
• Transaction information, such as details about programs, events or other activities you register for through the Sites;
• Usage information, such as information about how you use the Sites and interact with us;
• Marketing information, such as your preferences for receiving marketing communications.

Any communications relating to clinical trials should be made through the communication channels described in the applicable informed consent, patient information sheet or other instructions provided to clinical trial participants.

Information we obtain from social networking Sites. We may maintain pages on social networking sites (each a "SNS"), such as Facebook, LinkedIn, Twitter, Google, and other third-party platforms. When you visit or interact with our pages on those platforms, the platform provider's Privacy Policy applies.

Our Sites may include interfaces that allow you to connect with SNS. If you connect to a SNS through our Sites you authorize us to access, use and store the information that you agreed the SNS could provide to us based on your settings on that SNS. We will access, use and store that information in accordance with this Privacy Policy. You can revoke our future access to the information you provide to us through an SNS at any time by amending the appropriate settings within your account settings on the applicable SNS.

Information we obtain from other third parties. We may receive information about you from third-party sources, such as marketing partners, publicly available sources, and data service providers, and we may add this to information we get from our Sites.

Information we collect automatically. We may automatically collect personal data about you, such as site usage information, information about your computer or mobile device, when you access our Sites. For example, we may log your computer or mobile device operating system name and version, manufacturer and model, browser type, browser language, screen resolution, the website you visited before browsing to our Sites, pages you viewed, how long you spent on a page, and access times and information about your use of, and actions on, our Sites. We collect this information about you using cookies. Please refer to the section below for more details.

3.0 HOW WE USE YOUR PERSONAL DATA

We may use your personal data for the following purposes:

To operate our Sites. We may use your personal data to:

• operate, maintain, administer and improve our Sites;
• process and manage registrations you make through our Sites;
• provide information about our research and development;
• communicate with you regarding our programs, events, or activities for which you may have registered, including by sending you technical notices, updates, security alerts, and support and administrative messages;
• understand your needs and interests, and personalize your experience with our Sites;
• provide support and maintenance for our Sites; and
• respond to your service-related requests, questions and feedback.

To send you marketing and promotional communications. We may send you Intercept-related marketing communications, as permitted by applicable law. You will have the ability to opt-out of our marketing and promotional communications as described in the Opt-Out of Marketing section, below.

To comply with law. We use your personal data as we believe necessary or appropriate to comply with applicable laws, lawful requests and legal processes, such as to respond to requests from government authorities.

With your consent. We may use or share your personal data with your consent, such as when you consent to let us post your testimonials or endorsements on our Sites, you instruct us to take a specific action with respect to your personal data, or you opt into third party marketing communications.

To create anonymous, aggregated or de-identified data. We may create anonymous, aggregated or de-identified data from your personal data and that of other individuals whose personal data we collect. We may use this data and share it with third parties for our lawful business purposes, including to analyze and improve the Sites and promote our business.

For compliance, fraud prevention and safety. We may use your personal data as we believe necessary or appropriate to (a) enforce the terms and conditions that govern use of our Sites; (b) protect our rights, privacy, safety or property; and (c) protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity.

4.0 HOW WE SHARE YOUR PERSONAL DATA

We do not share your personal data with third parties without your consent, except in the following circumstances:

• Affiliates. We may disclose your personal data to our subsidiaries and corporate affiliates for purposes consistent with this Privacy Policy.
• Service Providers. We may share your personal data with third-party companies and individuals that provide services on our behalf (such as hosting, analytics, email delivery, marketing, and database management services). These third parties use personal data only as directed by us and in a manner consistent with this Privacy Policy.
• Professional advisors. We may disclose your personal data to professional advisors, such as lawyers, auditors and insurers, where necessary in the course of the professional services that they render to us.
• Compliance with Laws and Law Enforcement; Protection and Safety. We may disclose information about you to government or law enforcement officials or private parties as required by law, and disclose and use such information as we believe necessary or appropriate to (a) comply with applicable laws and lawful requests, such as to respond to requests from government authorities; (b) enforce the terms and conditions that govern use of the Sites; (c) protect the rights, privacy, safety or property of users of our Sites and (d) protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity.
• Business Transfers. We may sell, transfer or otherwise share some or all of our business or assets, including your personal data, in connection with a business transaction (or potential business transaction) such as a merger, consolidation, acquisition, reorganization or sale of assets or in the event of bankruptcy, in which case we will make reasonable efforts to require the recipient to honor this Privacy Policy.

5.0 YOUR CHOICES

In this section, we describe the rights and choices available to all users.

Opt-Out of Marketing Communications. You may opt out of marketing-related emails by clicking on a link at the bottom of each such email, or by clicking the following link https://interceptpharmapreferencecenter.com. You may continue to receive service-related and other non-marketing emails for which you have not opted out.

Cookies & Browser Web Storage. We may allow service providers and other third parties to use cookies and similar technologies to track your browsing activity over time and across the Sites and third-party websites. Most browsers let you remove or reject cookies. Many browsers accept cookies by default until you change your settings. To update your browser settings, follow the instructions in your browser. Please note that if you set your browser to disable cookies, the Sites may not work properly.

Choosing Not to Share Your Personal Data. You may choose not to share your personal data on our Sites. Where we need your personal data in order to provide you with a service, if you do not provide the information when requested (or you later ask to delete it), we may not be able to provide you with our services.

6.0 OTHER SITES, MOBILE APPLICATIONS AND SERVICES

The Sites may contain links to other websites, mobile applications and services. These links are not an endorsement of, or representation that we are affiliated with any third party. In addition, our content may be included on websites or in mobile applications that are not associated with us. We do not control third-party websites or mobile applications and are not responsible for their actions. Other websites and mobile applications follow different rules regarding the collection, use and sharing of your personal data. We encourage you to read the privacy policies of the other websites and mobile applications you visit.

7.0 SECURING YOUR PERSONAL DATA

Intercept uses reasonable administrative, physical, and technical safeguards to secure the personal data you share with us. However, we cannot guarantee complete security of your personal data. Any email or other communication purporting to be from one of our websites asking you to provide sensitive information (including medical information) via email, should be treated as unauthorized and suspicious and should be reported to us immediately by emailing privacyprotection@interceptpharma.com.

8.0 INTERNATIONAL DATA TRANSFER

Intercept is headquartered in the United States and has service providers in other countries.

Personal data collected in countries other than the United States may be transferred to the United States or other locations outside of your state, province, country or other governmental jurisdiction. Laws in such countries or jurisdictions may not be as protective as those in your country. We will process and transfer your personal data in accordance with applicable law and this Privacy Policy regardless of where your personal data is stored or accessed. Our third-party service providers are contractually bound to treat personal data in a manner that is consistent with this Policy and applicable data protection laws.

If you are a data subject residing in the EEA, Switzerland or the United Kingdom, please note that Intercept Pharmaceuticals, Inc. is certified to the EU-US and Swiss-US Data Privacy Framework ("DPF"), as well as the UK Extension to the EU-US DPF, which the European Commission has determined to provide adequate level protection concerning the transfer of your personal data to the US. You can find further information about our DPF Certification here.

9.0 CHILDREN

We do not knowingly collect personal data from children under the age of 16. If a parent or guardian becomes aware that his or her child has provided us with information without their consent, he or she should contact us. We will immediately delete or erase such information from our databases, systems and applications. We encourage parents with concerns to contact us at privacyprotection@interceptpharma.com.

1.0 RESIDENTS OF THE EUROPEAN ECONOMIC AREA, SWITZERLAND AND THE UNITED KINGDOM

If you reside in the European Economic Area ("EEA"), United Kingdom ("UK"), or Switzerland, we are required to inform you of the legal bases of our processing of your personal data on our Sites, which are described in the table below.

10.0 RETENTION OF DATA

We will only retain your personal data collected as described in this Policy, for as long as necessary to fulfil the purposes for which it was collected (or for any subsequent purpose that is compatible with the original purpose). This does not affect your right to request that we delete your personal data before the end of its retention period. In some circumstances we may anonymize your personal data (so that it can no longer be associated with you) in which case we may use this information indefinitely without further notice to you.

11.0 RIGHTS REGARDING YOUR PERSONAL DATA

If you reside in the EEA, UK, or Switzerland, you may request that we take the following actions in relation to your personal data:

• Access. Provide you with information about our processing of your personal data and give you access to your personal data.
• Correct. Update or correct inaccuracies in your personal data.
• Delete. Delete your personal data, so long as its processing is no longer necessary or obligatory for the compliance with a legal obligation of Intercept or the defense of a lawful interest.
• Transfer. Transfer a machine-readable copy of your personal data to you or a third party of your choice.
• Restrict. Restrict the processing of your personal data.
• Object. Object to our legitimate interests as the basis of our processing of your personal data.

To submit a request, residents of the UK, EEA and Switzerland can click here, or write to us at our postal address provided below.

If you reside in California, you or your authorized agent may request that we take the following actions in relation to your personal data:

• Access. Disclose to you the categories of personal data we have collected, used or disclosed within the last 12 months, including personal data (if any) that we disclosed to third parties for direct marketing purposes.
• Correct: Correct any inaccurate information maintained by us.
• Delete. Delete your personal data.
• Transfer. Transfer to you a paper or electronic machine-readable copy of specific pieces of your personal data we have collected or used within the last 12 months.

You may also make the following requests:

• Limit the use of sensitive personal data. That Intercept limit the use of sensitive personal data that you have shared via these Sites.
• Do not sell/share my personal data. That Intercept not sell or share personal data as detailed in this Privacy Policy.

To submit a request, California residents, or their authorized agents, can click here, write to us at our postal address provided below or call +1 (888) 914-9661 and enter pin number 371927 when prompted. Intercept will not discriminate against you based upon your exercise of any of these rights.

We will request specific information from you to help us confirm your identity and process your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions.

If you reside in the UK, EEA or Switzerland and would like to submit a complaint about our use of your personal data or response to your requests regarding your personal data, you may contact us or submit a complaint to the data protection regulatory authority in your country. All other inquiries regarding your personal data can be directed to privacyprotection@interceptpharma.com.

12.0 COOKIES AND SIMILAR TECHNOLOGIES

How We Use Cookies

We may collect information using "cookies." Cookies are alphanumeric identifiers that are transferred to your computer's hard drive through your web browser to help us identify you when you come to our Sites. Our Sites use cookies to distinguish you from other users of our Sites. This helps us to provide you with a better experience when you use our Sites and allows us to improve our Sites. By virtue of their operation, cookies fall under the following categories:

• Strictly Necessary Cookies: These cookies are required for the operation of our Sites. These cookies cannot be switched off. You can set your browser to block these cookies, but as a result, some parts of our Sites will not work as designed.
• Functionality Cookies: These cookies allow our Sites to remember choices you make when you use our Sites. The purpose of these cookies is to provide you with a more personal experience and to avoid you from having to re-select your preferences every time you visit our Sites.
• Analytics and Performance Cookies: These cookies are used to collect information about traffic to our Sites and how users use our Sites. The information gathered may include the number of visitors to our Sites, the websites that referred them to our Sites, the pages they visited on our Sites, what time of day they visited our Sites, whether they have visited our Sites before, and other similar information. We use this information to help operate our Sites more efficiently, to gather demographic information and to monitor the level of activity on our Sites.

Information on Google Analytics

We may use third parties, such as Google Analytics or other analytics providers, to analyze traffic to a Site. Google Analytics does not create individual profiles for visitors and only collects aggregate data.

To disable Google Analytics, download the browser add-on for the deactivation of Google Analytics provided by Google at https://tools.google.com/dlpage/gaoptout. For more information on the use of personal data by Google Inc. please visit the Google privacy policy.

Disabling Cookies

If you do not accept our cookies, you may experience some inconvenience in your use of our Sites. For example, we may not be able to recognize your computer or mobile device and you may need to log in every time you visit our Sites. Your choices for managing use of cookies include:

• Blocking cookies in your browser. Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. For more information about cookies, including how to see what cookies have been set on your device and how to manage and delete them, visit https://allaboutcookies.org.
• Blocking advertising ID use in your mobile settings. Your mobile device settings may provide functionality to limit use of the advertising ID associated with your mobile device for interest-based advertising purposes.
• Advertising industry opt-out tools. You can also use these opt-out options to limit use of your information for interest-based advertising by participating companies:
  • Digital advertising Alliance: http://optout.aboutads.info
  • Network Advertising Initiative: http://optout.networkadvertising.org/?c=1

A link to a third-party website or digital service does not imply that Intercept endorses it, or the quality or accuracy of information presented on it. If you decide to visit a third-party website or service, you are subject to its privacy practices and not this Privacy Policy. We encourage you to carefully read the privacy policy or statement and other legal notices of each website or service that you visit.

Pixel tags

We may also use pixel tags (which are also known as web beacons and clear GIFs) on our Sites to track the actions of users on our Sites. Unlike cookies, which are stored on the hard drive of your computer or mobile device by a website, pixel tags are embedded invisibly on webpages. Pixel tags measure the success of our marketing campaigns and compile statistics about usage of the Sites, so that we can manage our content more effectively. The information we collect using pixel tags is not linked to our users' personal data.

13.0 CAREERS

If you submit personal data in connection with job opportunities at Intercept via our Sites, we will use and disclose the data to process your application (including to contact you and/or your references and former employers if appropriate), to monitor recruitment statistics, and to comply with government reporting requirements. We also retain statistical information about applicants to help with our recruitment activities. We will process this information based on our legitimate interest in evaluating job candidates or, when you provide us with sensitive information, based on your consent.

14.0 SENSITVE PERSONAL DATA

If you send or disclose any sensitive personal data (e.g., social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) to us when you use the Sites, you must consent to our processing and use of such sensitive personal data in accordance with this Privacy Policy. If you do not consent to our processing and use of such sensitive personal data, you must not submit such sensitive personal data to our Sites.

15.0 CHANGES TO THIS PRIVACY POLICY

We may make changes to this Privacy Policy from time to time. If we make material changes that significantly impact your privacy rights, we will notify you by updating the date of this Privacy Policy and posting it on the Site. We may, if required by law, also provide notification of changes in a manner reasonably likely to reach you, such as via email (if you have provided your contact information) or through the Site.

16.0 CONTACT US

If you have any questions or concerns about our Privacy Policy or would like to request this Privacy Policy in an alternative format due to a disability, please feel free to email us at privacyprotection@interceptpharma.com, or write to us at:

Intercept Pharmaceuticals, Inc.
Legal Affairs Department
305 Madison Avenue
Morristown, NJ 07960

If you reside in the UK, EEA or Switzerland and you seek to exercise any of your statutory rights, you may contact your local privacy Supervisory Authority. You may also contact our Data Protection Officer by sending an email to privacyprotection@interceptpharma.com with the subject line DATA PROTECTION OFFICER.

California residents can also call us at +1 (888) 914-9661 and enter pin number 371927 when prompted.

17.0 REVISION HISTORY

Document #: Policy-0124
Revision #: 1
Effective Date: 11 Jul 2024