Privacy and Cookies Policy

Allakos Privacy and Cookies Policy

LAST UPDATED: MARCH 23, 2022

Introduction

Allakos Inc. (collectively “we”, “us” and “our”) takes the privacy and security of your personal information seriously. This Privacy and Cookies Policy (“Policy”) applies to our collection and use of personal information through our websites that link to this Policy, including www.allakos.com (collectively, the “Site” or “Sites”) and other Allakos websites that link to it.

This Policy does not apply to personal information that we collect offline, except as described below, or to information we may collect through our clinical trials, which are governed by separate terms and agreements.

Information We May Collect About You

Personal Information

We may collect and process personal information you provide us, such as name, address, email address, telephone number, and professional credentials (if applicable), when you:

  • Register to use our Sites; or
  • Complete an online form (e.g., to obtain email updates or ask us to send you information, or participate in a survey); or
  • Participate in discussion boards or other social media functions that may be connected with our Sites; or
  • Provide information to us offline regarding our business-related interactions with you (e.g., information you provide us at an industry event).

We may supplement or combine information we collect online with personal information about you from other sources, which could include commercially available sources, such as public databases and data aggregators to the extent permitted by applicable data protection laws.

Occasionally we may obtain sensitive personal information about you, for example, if you voluntarily provide information about your health, ethnicity or race as part of an application or request for information. By providing us with your sensitive personal information, you consent to us processing that information for the purposes set out in this Privacy Notice or any collection notice provided to you.

Technical Information

We may collect information about your browser and/or device that you use to access our Sites (like the type of browser and browser settings and the device identification number). Device information may or may not be personally identifiable depending upon whether it is linked to the identity of the user.

We may also automatically log information, such as your IP address, domain name, browser type, date and time of access, and other log file data. This information may be used to analyze trends and help us with administration of our Sites. We may collect statistical or non-personally-identifiable information about you including, for example, which pages you visit, how long you remain on a particular page, the website from which you came to our Site, or similar information.

We also may collect aggregate information such as the total number of unique or return visitors to our Sites, or visiting a section of the Site within a given timeframe. We may also use this information to measure the use of our Sites to improve our content.

Our Sites use Google Analytics and related cookies. Information collected by these cookies will be transferred to and stored by Google on servers in the USA in accordance with its privacy practices. For further information of Google’s privacy practices and how this applies to Google analytics, please visit:

Cookies and Other Similar Automated Technologies

Cookies are small text files which are sent to your device when you visit a website. Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognizes that cookie. Cookies act as a memory for a website, allowing that website to remember your device on your return visits. Cookies can also remember your preferences, improve the user experience as well as tailor the advertisements you see to those most relevant to you.

We may utilize “cookies,” and other similar technologies on our Sites. We may use first and/or third-party “browser” or “HTTP” cookies, which are unique text files that may be used for data analysis, and enable our Site to tailor information for the visitor. We may use browser cookies to personalize the user’s experience on our site, to remember a user when the user registers for products or services, for fraud prevention, or to track visits to our Sites. We also may use “web beacons” (also referred to as pixel tags, clear gifs or other terms) or similar technologies to collect information such as how long a visitor remains on a particular page.

If you do not want us to deploy browser cookies to your device when you visit our Sites, you may set the browser to reject cookies or to notify the user when a website tries to place cookies in the browser program (see below). Rejecting cookies may affect your ability to use some features offered on our Sites.

Our service providers may also collect information about visitors to our Sites over time and/or across different websites when the visitor uses our Sites. This information often is aggregate data or individual information that is tied to a browser or device rather than specific identifiers such as the visitor’s name and address, but some of this information might be considered personally identifiable under some laws.

Some Internet browsers offer what often is referred to as “do not track” mechanisms for browser users to automatically signal privacy preferences to websites that they visit. Our site does not currently respond to do not track signals. However, you may exercise other choices available to you, including limiting the placement of browser cookies on your device using your browser’s cookie control features and other choices described in this Notice.

We may engage in educational or other informational communications through banner advertisements on other websites or through mobile applications. This may involve using cookies, device identifiers, web beacons or similar technologies to show you ads based on your online activity. This is sometimes referred to as remarketing or re-engagement. This may include, for example, use of third-party advertising providers to display banner ads on our behalf on sites across the Internet following visits to our site or other site where we believe information about our research may be of interest.

If you would like to opt out of third-party advertising you may obtain additional information and see options for opting out by visiting the Network Advertising Initiative opt-out page and/or the Digital Advertising Alliance Your AdChoices opt-out page, both of which have tools to allow individuals to request opt-outs from participating advertising companies. For additional information about choices available regarding cross-application advertising opt-out, please consult the Digital Advertising Alliance website. We also may use the Lasso advertising platform, which includes information about its privacy practices and opt-out options in its privacy policy.

How We Use the Personal Information You Provide to Us

Subject to applicable data protection laws, we may use your personal information for the following purposes:

  • To provide you with the services and information offered through our Sites;
  • To process your requests and respond to your inquiries;
  • Register you for any services you have signed up for;
  • For business administration, including statistical analysis and as may be required to perform our obligations under a contractual relationship with you;
  • To personalize your visit to our Sites and to assist you while you use our Sites;
  • To improve our Sites by helping us understand who uses the Site;
  • To contact you about content, programs, products and services which we believe may interest you (if you decide you no longer wish to receive such messages you can either use the opt-out mechanism in the communication or contact us using the contact information below);
  • To provide you with medical and disease information we believe may interest you; and
  • For fraud prevention and detection and to comply with applicable laws, regulations or codes of practice, and in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

California Privacy Rights

California’s “Shine the Light” law permits California residents to annually request and obtain information free of charge about what personal information is disclosed to third-parties for third-party direct marketing purposes in the preceding calendar year. We do not distribute your personal information to third-parties for third-party direct marketing purposes, except as provided for in this Policy.

Disclosures of Personal Information

We may disclose information with your consent or as otherwise necessary or appropriate to process a transaction that you may request and carryout our relationship with you.

We may disclose information that we collect through our website(s) with agents, affiliated businesses, and service providers providing services on our behalf.

In the event that our company or some of our assets are sold or transferred or used as security or to the extent we engage in business negotiations with our business partners, the information collected through on our Sites, including this site, may be transferred or shared with third parties as part of that transaction or negotiation.

We may also disclose personal information to comply with our legal or regulatory obligations, in response to a request for information made by a government agency, or as part of an investigation of unlawful activity.

Data Security

The security of your personal information is important to us. We take reasonable steps, including technical, administrative and physical safeguards, designed to protect the personal information submitted to us from loss, misuse and unauthorized access, disclosure, alteration and destruction. We will ask any agents and service providers to whom we may transfer your information take comparable steps to protect that security. However, no method of security or method of transmission over the Internet is entirely secure. You should always use caution when transmitting personal information over the Internet.

Data Retention

We may retain and process your Personal Data for as long as you continue to access or use any Site and, in general, for the period necessary to achieve the purposes set out above. Where permitted by applicable laws, we will retain your Personal Data to comply with our legal obligations, resolve legal disputes and enforce our agreements.

Access and Correction

With your support, we will keep your personal information accurate and up-to-date. If we process your personal information, then you may have a right under data privacy laws to remove, amend, or correct your personal information at any time, subject to certain exceptions permitted by law. You may also contact us to opt-out from any program or other service for which you may have registered via our Sites. If you would like to access, correct or delete the personal information we hold about you, please contact us as described below.

External links

The Site may, from time to time, contain links to external sites operated by third-parties. We are not responsible for these third-party sites or the content of such third-party sites. Once you have left the Site, we cannot be responsible for the protection and privacy of any information which you provide.

Minors

This Site is not directed towards children under 16 years of age nor do we knowingly collect information from children under 16. If you are under 16, please do not use the Site or submit any personal information to us. If you believe that we have unintentionally collected personal information about your child, you can contact us by mail or email as described below.

International Data Transfers

Your personal information may be transferred to countries located outside your country or region, including to countries that may not provide a similar or adequate level of protection to that provided by your country or region. For example, if you reside in the European Economic Area (“EEA”), the United Kingdom or Switzerland, we may transfer your personal information to the United States or other countries. By using the Site or otherwise providing personal information to us, you hereby expressly consent to the transfer of your personal information outside your country or region.

Additional Information for Individuals in the European Economic Area (EEA), the United Kingdom and Switzerland

In addition to the disclosures made elsewhere in this Policy with respect to our privacy practices, our legal basis for processing personal information we collect in the European Economic Area, the United Kingdom and Switzerland, when applicable, can vary depending on the manner in which you use our Site or otherwise engage with us. Our legal basis for processing information about you that we collect about you through our Site is our legitimate interest as a data controller to administer our Site. In cases where you are asked to provide your consent, you can withdraw your consent at any time, although this will not affect the lawfulness of our processing prior to your withdrawal of consent. In the case of processing involving passive data collection and other processing for the administration of our Sites, such processing is undertaken pursuant to our legitimate interests as a data controller, including the operation of our Sites. We may process personal information where necessary for our compliance with a legal obligation to which we are subject. We also reserve the right to process personal information in the event we believe doing so is necessary to protect the rights of the data subject or another person.

You have rights to data access, rectification, erasure, to restrict or object to processing, and data portability as required by law. You also have the right to file a complaint with your data protection authority if you have concern about the manner in which we are processing your personal information.

If you have any questions about our privacy practices, please contact us using the contact information below or you may contact, as appropriate, our EU or UK Data Protection Representative:

For the EU:
Attn: Guidehouse Germany GmbH, Life Sciences
Address: Albrechtstrasse 10c, D-10117 Berlin, Germany

For the UK:
Attn: Guidehouse Europe Ltd
Address: Levels 7 & 8, 1 Angel Court, London, EC2R 7HJ, United Kingdom

Email: DPR@allakos.com

Policy Changes

We may update this Policy from time to time without prior notice. Any changes to our Policy will become effective upon posting of the updated Policy on our Site. If we change this Policy, we will revise the "last modified" date at bottom thereof. For material changes to this Policy, we will notify you by placing a notice on our Site’s log-in page(s) or in the relevant home pages, or by sending you a notification directly. We encourage you to bookmark our Internet sites and to periodically review them to ensure familiarity with the most current version of our Policy.

Contact Us

If you have any questions, comments or suggestions about this Policy or our privacy practices, please contact us at privacy@allakos.com. Alternatively, letters may be sent to the following address: Allakos Inc., Attn: Privacy and Data Protection Officer, 825 Industrial Road, Suite 500, San Carlos, CA 94070.