CORPORATE PRIVACY POLICY

We are committed to protecting your privacy.

Privacy Policy

Overview

Travere Therapeutics, Inc., and its subsidiaries (“Travere Therapeutics,” “Company,” “we,” “us,” or “our”) is a biopharmaceutical company specializing in identifying, developing, and delivering life changing therapies to people living with rare diseases. We process personal data in different contexts and we do so by fully respecting your privacy and your other rights and freedoms, as part of our unwavering commitment to ethical and responsible practices. We process personal data collected through our websites; we gather personal data for marketing and educational purposes; we process personal data for conducting clinical trials and we process the personal data of our employees. We recognize that innovation and new technology drive continual change in risk, expectations, and laws, so we follow privacy accountability standards and aim to promptly adapt how we apply those standards in response to those changes.

This Privacy Policy generally sets forth Travere Therapeutics’ practices regarding the collection, use and disclosure of personal data and/or information that you may provide Travere Therapeutics. By using Travere Therapeutics sites, and other methods, whenever you submit personal data and/or information to Travere Therapeutics, you acknowledge and agree with the terms of this Privacy Policy.  Please read this entire Privacy Policy before using Travere Therapeutics sites and/or submitting personal data and/or information to Travere Therapeutics.

Travere Therapeutics also has specific policies for how we process personal data from our website (cookies), for clinical trials and personal data for our employees.  If you are a California resident, please see our California Privacy Policy.

In principle: Travere Therapeutics collects, uses and stores the minimum amount of personal data that you voluntarily submit to Travere Therapeutics that is necessary for one or more legitimate business purposes and to comply with legal obligations.  Travere Therapeutics limits who has access to the personal data in our possession to only those who need it for a legitimate business purpose or if required by law.  Travere Therapeutics protects personal data through physical and technical security measures tailored to the sensitivity of the personal data we hold.  Travere Therapeutics communicates with our employees, customers, suppliers, business partners and others about how we intend to use personal data in our day-to-day operations.  Travere Therapeutics takes reasonable steps to ensure the personal data we process is accurate and up to date.  Travere Therapeutics integrates privacy in the design of our projects that involve the use of personal data.

For European Economic Area (“EEA”), United Kingdom and Switzerland data protection law purposes, we process personal data as a controller or joint controller, depending on the context of the processing activity. The controller is the entity that, alone or jointly with others, establishes the purposes and the means of a processing activity. A “processing activity” is an activity that we engage in for a specific, identified purpose, and that involves the collection and use of personal data.

When transferring personal data from the EEA, United Kingdom or Switzerland to the United States, Travere Therapeutics utilizes standard contractual clauses or other lawful grounds for such transfers. Please see the section of this Privacy Policy titled “Transfer of Data Overseas & Data Privacy Framework Principles” for more information.

 

Who We Are

We are Travere Therapeutics, Inc., and you can contact us via mail at 3611 Valley Centre Drive, Suite 300, San Diego, CA 92130,  Attn: Chief Compliance & Privacy Officer, via email at dataprotection@travere.com, or you can call us at +1-888-969-7879.  For data protection purposes, including the EEA, United Kingdom and Switzerland data protection laws, we are the controller of your personal data, and you can contact us with any inquiries you may have regarding the processing of your personal data.

 

Types of Personal Data we Collect and Use

“Personal data,” means any information related to an identified or identifiable individual. Depending on the context in which we process your personal data, we collect and otherwise process the following, by way of example and not limited to:

Information that you provide via a Travere Therapeutics website or by some other method such as email or telephone and that can directly or indirectly identify or locate you: name, address, telephone number, e-mail address, and any other related information you submit to us.  Information that a Travere Therapeutics website may collect automatically: the date and time of the website session, movements across the website, information about your browser, your IP address, and information related to your online activity gathered through our weblogs and cookies.  Personal data, including data related to an individuals’ health or a clinical trial. Employment details and history, biographical information, educational history, benefits, compensation, contact details, performance, and use of Company resources by employees, contractors, and applicants in connection with their role or potential role for Travere Therapeutics.  Contact information for key personnel of customers and potential customers for the purpose of performing sales, services, education, customer support, analytics, research, and marketing.  Social security numbers to the extent necessary for compensation and/or Travere Therapeutics products and services.

Our Policy Towards Children:

Our websites are not directed towards children. We do not knowingly collect personal data from children through our websites. If a parent or guardian becomes aware that his or her child has provided us with personal data without their consent, please contact us. If we become aware that a child is using our websites and has provided us with personal data, we will delete such information from our files.  Some of our clinical trials, patient services and commercial products process personal data of children. The consent of parents or legal representatives is sought in these cases, and in accordance with the laws where the activities are being conducted.

 

What We Do With Your Personal Data

In the case of personal data collected through our websites or mobile applications, we use it for educational and marketing purposes about our own commercial and pipeline products and related disease states. If you contact us directly via telephone or email, we may use your information to respond to your inquiry. In the case of our employees, we collect personal data during the application process, we hire a third party to conduct background checks for successful applicants, we store biographic data, data related to health, identification data, bank accounts numbers, addresses, phone numbers that are all necessary for day-to-day business purposes or for compliance with a legal obligation. For security purposes we also monitor to a certain extent how employees use our IT systems. Our Employee Privacy Policy is available to all our employees and prospective employees. Please contact dataprotection@travere.com, or as noted below, if you have questions.

In the case of clinical trials, we collect, store and analyze your personal data generated via clinical trials we are conducting utilizing clinics, research institutions, clinical research organizations, and healthcare professionals that we contract with.

For the processing of social security numbers, Travere Therapeutics has implemented reasonable technical, physical and administrative safeguards to help protect the social security numbers and other sensitive personal data from unlawful use and unauthorized disclosure. All Travere Therapeutics employees are required to follow these established procedures, both online and offline. In particular, access to social security numbers is limited to those employees and service providers who have a need to access this information to perform tasks for Travere Therapeutics.  We will only disclose social security numbers with those service providers, auditors, advisors, and/or successors in interest who are legally or contractually obligated to protect them, or as required or permitted by law.

 

Purposes for Collecting and Processing Personal Data

The purposes for which we collect and process your personal data are:

  • To ensure the proper operation of our day-to-day business and for complying with legal obligations.
  • To respond to your requests for information, products, and/or services.
  • If you apply for a job via our career center, to consider you for employment.
  • To contact you and provide you with disease state, product, and general services information.
  • If you have a business or professional relationship with Travere Therapeutics, we may use your personal data generally to develop our business relationship with you and/or further the advancement of services.
  • For legal and compliance obligations, such as adverse event reporting and for other everyday business purposes, such as website management, research and development, educational, and commercial purposes.

 

Grounds for Processing

For those processing activities that fall under the EEA, United Kingdom and Switzerland data protection laws, the legal basis for processing personal data that Travere Therapeutics relies on may vary depending on the jurisdiction, the types of personal data being processed, the nature of the processing being undertaken and the manner and context in which you engage with us:

In some cases, we may ask for consent for the collection and use of personal data through our website and for personal data processed for marketing and educational purposes.  In other cases, we may process personal data based on our legitimate business and healthcare initiative interests.  In specific circumstances, we may need to process personal data to comply with a legal obligation to which we are subject, or if necessary to perform or enter into a contract.  We also reserve the right to process personal data in the event we believe doing so is necessary to protect the rights of the individual or another person.  For information about our lawful bases for processing in connection with our administration of clinical trials, please see our Clinical Trials Privacy Policy.

 

Who Has Access to Your Data

Except as provided herein, Travere Therapeutics will not share your personal data with third parties unless you have consented to the disclosure.  We only share your personal data with our agents, contractors or partners in connection with services that these individuals or entities perform for, or with, Travere Therapeutics such as: sending e-mail messages, managing personal data, hosting our databases, providing personal data processing services, providing customer service, and facilitating the job application process.

These agents, contractors or partners are restricted from using one’s personal data in any way other than to provide services for Travere Therapeutics, or services for the collaboration in which they and Travere Therapeutics are engaged (for example, some of our products are developed and marketed through joint agreements with other companies). For the purposes of applicable data protection laws, Travere Therapeutics enters controller-processor arrangements with our agents, contractors or partners that qualify as processor.

Travere Therapeutics will share personal data to respond to duly authorized subpoenas or other lawful information requests of governmental authorities, including to meet national security or law enforcement requirements, or where required by law. In exceptionally rare circumstances where national, state or Company security is at issue, Travere Therapeutics reserves the right to share our entire database of visitors and customers with appropriate governmental authorities.

 

Data Integrity

Travere Therapeutics takes reasonable steps to ensure that data is reliable for its intended use, accurate, complete, and current. Travere Therapeutics also ensures personal data is limited to the information relevant for the purposes of processing as noted in this Privacy Policy.

As a convenience, our websites may sometimes contain links to a number of other (non-Travere Therapeutics) websites that we believe may offer useful information. The Privacy Policy presented here does not apply to those non-Travere Therapeutics websites. You should contact these websites directly for information on their privacy policies, confidentiality procedures, and data collection, distribution and protection procedures.

Please note that linked non-Travere Therapeutics websites may also use cookies. Travere Therapeutics cannot control the use of cookies by these non-Travere Therapeutics websites. In addition, when you link from a Travere Therapeutics website to another website, that website may have the ability to recognize that you have come from a Travere Therapeutics website. If you do not want any other websites to know that you have been on one of Travere Therapeutics’ websites, we recommend that you do not use the links provided in our websites.

 

Transfer of Data Overseas & Data Privacy Framework Principles

If you are located outside the United States (U.S.) and you interact with us via one of our websites, mail, e-mail, phone, or you participate in one of our clinical trials, then your personal data is transferred to the U.S. If you are based in the EEA, United Kingdom, or Switzerland, we utilize your consent, standard contractual clauses, or other lawful grounds for transfers of personal data to the U.S., including adherence to the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), UK Extension to the EU-U.S. Data Privacy Framework (“UK  to the EU-U.S. DPF”) and Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as further described below.

Data Privacy Framework:

Travere Therapeutics complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce.  Travere Therapeutics has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) with regard to the processing of personal data received from the European Union and the United Kingdom (and Gibraltar) in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF.  Travere Therapeutics has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (“Swiss-U.S. DPF Principles”) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.  If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles, and/or the Swiss-U.S. DPF Principles, the DPF Principles shall govern.  To learn more about the Data Privacy Framework (“DPF”) program, and to view our certification, please visit https://www.dataprivacyframework.gov.

Resolution of Complaints:

In compliance with the EU-U.S. DPF, UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Travere Therapeutics commits to resolve complaints about your privacy and our collection and use of your personal data transferred to the U.S. pursuant to the DPF Principles.  EEA, UK and Swiss individuals with DPF inquiries or complaints should first contact Travere Therapeutics at:

Travere Therapeutics, Inc.
Attn: Chief Compliance & Privacy Officer
3611 Valley Centre Drive, Suite 300
San Diego, CA 92130
USA

Or call: +1-888-969-7879
Or e-mail: dataprotection@travere.com

Travere Therapeutics has further committed to refer unresolved privacy complaints under the DPF Principles to an independent dispute resolution mechanism, the International Centre for Dispute Resolution American Arbitration Association. If you do not receive timely acknowledgement of your  DPF Principles-related complaint, or if your complaint is not satisfactorily addressed, please visit http://go.adr.org/dpf_irm.html for more information or to file a complaint. The services of the International Centre for Dispute Resolution American Arbitration Association are provided at no cost to you.

International Centre for Dispute Resolution – American Arbitration Association
Case Filing Services
877.495.4185: Toll free
877.304.8457: Fax
casefiling@adr.org

If your DPF Principles-related complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See https://www.dataprivacyframework.gov/s/article/G-Arbitration-Procedures-dpf?tabset-35584=2.

If you are based in the EEA, United Kingdom or Switzerland, you may also choose to contact your local Data Protection Authority (“DPA”), the UK Information Commissioner’s Office (“ICO”), or the Swiss Federal Data Protection and Information Commissioner (“FDPIC”).  Your DPA, the ICO or the FDPIC may refer your complaint directly to the U.S. Department of Commerce on your behalf. In this case, the Data Privacy Framework Team will then work to resolve your concern. Travere Therapeutics commits to cooperate with the EEA DPAs, United Kingdom ICO and the Swiss FDPIC and to comply with the advice given by such authorities with regard to human resources data transferred from the EEA, United Kingdom and Switzerland in reliance on the Data Privacy Framework in the context of the employment relationship.

The Federal Trade Commission has jurisdiction over Travere Therapeutics’ compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.

Onward Transfers:

In the context of an onward transfer, Travere Therapeutics has responsibility for the processing of personal data it receives under the Data Privacy Framework and subsequently transfers to a third party acting as an agent on its behalf. Travere Therapeutics shall require any third party to which it transfers personal data to adhere to the DPF Principles. Travere Therapeutics remains liable under the DPF Principles if its agent processes such personal data in a manner inconsistent with the DPF Principles unless Travere Therapeutics is not responsible for the event giving rise to the damage.

 

California Consumer Privacy Act

If you are a California resident and would like to learn more about your consumer privacy rights, please review our California Privacy Policy.

 

How Do You Control Your Data

Whether you reside in the U.S., reside in or otherwise find yourself in the EEA, United Kingdom or Switzerland, Travere Therapeutics is committed to facilitate the exercise of your rights granted by applicable European data protection laws and our commitment to privacy, noted above, in a timely manner – the right to access your data, to ask for erasure, correction, portability of your data or to object to the processing of your data. In order to be able to reply to your request and if we are not certain of your identity, we may need to ask you for further identification data to be used only for the purposes of replying to your request. If you would like to exercise any individual privacy rights, please contact us via this form, or you can call us at +1-888-969-7879 and ask for the Chief Compliance & Privacy Officer.

Do Not Track Settings:

Do Not Track is an optional browser setting that allows you to express your preferences regarding tracking by advertisers and other third parties. We do not respond to Do Not Track signals.

Access to Your Own Personal Data:

You have the right to obtain confirmation of your personal data whether we process it or not, as well as the right to obtain information about the personal data we process about you and to obtain a copy of this data.

Erasure, Correction and Other Requests including Receiving Communications:

You have the right to obtain erasure, correction, and portability of your personal data, under certain conditions. You also have the right to object at any time to receiving marketing/educational materials from us by following the opt-out instructions in our e-mails, as well as the right to object to any processing of your personal data based on your specific situation. In the latter case, we will assess your request and provide a reply in a timely manner, according to our legal obligations.

Please be sure to include your e-mail address if you are writing to unsubscribe from any service or materials we provide you. Also, please note that you may continue to receive materials while we are updating our lists.  For all the processing operations that are based on your consent, as described above, you can withdraw consent at any time and we will stop those processing operations. All processing of your personal data based on your consent before withdrawal remains lawful.  As to adverse event reporting and related personal data, Travere Therapeutics reserves the right to not remove or amend such personal data and/or adverse event information as required by law or regulation.  Travere Therapeutics does not engage solely in automated decision making or profiling using your personal data.

 

Data Retention

Travere Therapeutics will retain your personal data for only as long as is necessary to fulfill the purposes for which it was collected, including the purposes of satisfying any legal, regulatory, accounting or reporting requirements. The criteria used to determine Company retention periods for personal data include (i) the length of time we have an ongoing relationship with you; (ii) the amount, nature and sensitivity of the personal data processed; (iii) whether there is a legal or best practice retention obligation to which Travere Therapeutics is subject; and (iv) whether retention is needed in light of litigation or regulatory investigations.

 

Data Security

We are committed to processing your personal data in a secure manner, by creating specific technical and organizational measures to prevent the personal data we hold from being accidentally or deliberately compromised.

We conduct information risk assessments; we ensure that our staff understands the importance of protecting personal data and we are responsibly managing access rights within the Company. We include both physical security and IT security in our overall data security approach. We are diligent in selecting vendors that process personal data on our behalf so that they also ensure appropriate technical and organizational measures to protect the data. Travere Therapeutics makes reasonable efforts to notify individuals and regulatory authorities, as required by law, if we reasonably believe that personal data has been stolen, disclosed, altered or infringed by an unauthorized person. We created and maintain a breach notification and reporting protocol. If there are questions or concerns regarding this Privacy Policy or a potential breach, please contact us at: 3611 Valley Centre Drive, Suite 300, San Diego, CA 92130,  Attn: Chief Compliance & Privacy Officer, send an email to dataprotection@travere.com, or you can call us at +1-888-969-7879.

 

Acceptance of Terms

By using this website or any other Travere Therapeutics website and voluntarily providing your personally identifiable information to us, you consent to the collection and use of such personally identifiable information as set forth in this Privacy Policy.  If you do not agree to the terms of this Privacy Policy, please do not provide us with any information or personal data and do not use our websites.

 

Contact Us

If you have any questions about this Privacy Policy or if you would like to exercise any individual privacy rights, please contact us by accessing our webform at https://travere.com/privacy/individualrights or by calling us at +1-888-969-7879 or by writing to one of the following addresses:

Travere Therapeutics, Inc.
Attn: Chief Compliance & Privacy Officer
3611 Valley Centre Drive, Suite 300
San Diego, CA 92130
USA

Email: dataprotection@travere.com

We will respond to your request consistent with applicable law.

 

Changes to this Notice

We reserve the right, at any time, to modify, alter, or update this Privacy Policy, and any such modifications, alterations, or updates will be effective upon posting.  In the event we modify this Privacy Policy, your continued use of our websites will signify your acceptance of the modified Privacy Policy. The time stamp you see on the Privacy Policy will indicate the last date it was revised. We will duly inform you of any changes via our website and we provide you, as noted herein, the opportunity to express your consent for processing your data for different and new purposes.

This Privacy Policy was last updated on October 4, 2023.