Your California Privacy Rights

Introduction

Xencor, Inc. (“Xencor” or “we”) collects information from you that identifies, describes, or is reasonably capable of being associated with you or your household (“Personal Information”). Personal information does not include publicly available information in government records or any data that has been deidentified, aggregated, or otherwise anonymized. This policy supplements the information contained in our Privacy Policy and applies to all visitors, users, clients, consumers, and others who reside in the State of California or those states that have similar privacy protection laws (“you”).

Business-to-Business Personal Information

The majority of information Xencor collects, processes, or discloses is business-to-business Personal Information. This means that we collect Personal Information from employees, owners, directors, officers, and contractors of another company when doing business.

The business-to-business Personal Information we collect includes:

  • Identifiers and Customer Records, such as name, company, business address, phone number and email.
  • Personal information, such as education, employment, employment history, financial information, bank account number, insurance policy number, etc.
  • Commercial Information, such as the services we provide or that you obtain from us.
  • Internet or other similar activity, such as internet or network activity, such as browsing history, search history, IP address, and other information about your interaction with our website.
  • Professional or employment-related information, such as your job history and current employer.

We collect this information directly from individuals when they provide it to us, for example, when individuals interact and provide services for Xencor. We may share this information with third-party vendors and subcontractors (e.g. cloud storage/IT, HR service providers etc.) on a need to know basis, in the execution of contracted services. For a full description of this information, as well as how we use and share it, please visit our Privacy Policy.

Information We Collect on Our Website

The Personal Information we collect other than business-to-business Personal Information includes personal identifiers, such as name and email address, and internet or network activity, such as browsing history, search history, IP address, and other information about your interaction with our website. We collect this information directly from individuals and use it to analyze site traffic, optimize site performance, communicate with you, maintain and improve our services, and for investor relations. We may share this information with third parties and/or service providers who help us give you a better user experience and manage data on our behalf. For a full description of this information, as well as how we use and share it, please visit our Privacy Policy.

Requesting More Information

You may have the right to request information about how we have treated your Personal Information in the past 12 months, including:

  • The categories of Personal Information we collected;
  • The categories of sources from which we collected that information;
  • Our business or commercial purpose for collecting that information;
  • The categories of third parties with whom we shared that information; and
  • The specific pieces of Personal Information we collected about you.

Requesting Access

You may also have the right to receive a copy of the Personal Information collected about you in the past 12 months.

Requesting Deletion

You may have the right to request that we delete the Personal Information we have collected about you. Not all requests to delete can be fulfilled. If we are unable to comply with your request, we will provide a response explaining why your data cannot be deleted.

Requesting Correction

You may have the right to request that we correct any inaccurate Personal Information we may hold about you. We will use commercially reasonable efforts to correct inaccurate Personal Information, taking into account the nature of the Personal Information and the purpose for our processing.

Exercising Your Rights

If you want to exercise any of these rights, you may also contact us at +1 (833) 322-3801 (toll-free) or email us at privacy@xencor.com.

For all requests submitted via email, please clearly state that the request is related to “Your California Privacy Rights” and provide your name, mailing address, and phone number where you may be reached.

Verification

Before we can respond to your request, we may need to first verify your identity using your Personal Information. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for the denial.

Designating an Authorized Agent

You may designate someone to submit requests and act on your behalf (an “Authorized Agent”). To do so, you must provide us with written permission to allow your Authorized Agent to act on your behalf. We may also verify the identity of your designated agent.

Third-Party Marketing and Selling/Sharing

We do not currently sell or intend to sell your Personal Information to third parties without first providing you notice and an opportunity to opt-out. We also do not share or intend to share your Personal Information for cross-context or targeted behavioral advertising.

California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of our website that are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. Please note that we do not provide your information to third parties for their direct marketing purposes.

We Will Not Discriminate Against You

We will not unlawfully discriminate against you for exercising any of your rights.

Retention Periods

We will generally retain information about you for so long as we have a legal or business purpose for it or a legal requirement to maintain it. The criteria used to determine our retention periods include:

  • The length of time we have an ongoing relationship with you and provide services to you (for example, for as long as you are a client with us or keep using our services) and the length of time thereafter during which we may have a legitimate need to reference your personal information to address issues that may arise;
  • Whether there is a legal or ethical obligation to which we are subject (for example, certain laws require us to keep records for a certain period of time before we can delete them); or
  • Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).

Changes to This Notice

We will continue to review and revise our privacy practices and policies as our technology, services, and use of data evolves. We will not retroactively use or disclose Personal Information in a manner that is materially different from this policy without first providing you notice. This Notice is reviewed and updated annually and we will use reasonable means to inform you of any changes.

How to Contact Us

If you have questions or concerns regarding your information or your rights, please contact us at +1 (833) 322-3801 (toll-free) or email us at privacy@xencor.com.

Date last updated: June 02, 2023