This U.S. Supplemental Privacy Notice (“U.S. Supplement”) explains how QuidelOrtho Corporation (“QuidelOrtho”, “we”, “us”, “our”) handles personal information that we collect online, through our websites and applications (apps) and through our offline interactions with you (collectively, the “QuidelOrtho Services”) and explains how to exercise rights under the laws of certain U.S. states. For more information about our data practices, please review our Privacy Notice. 

The terms “you” and “your” refers to you, the user of QuidelOrtho Services. 

INFORMATION WE COLLECT 

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (“personal information”). In particular, we have collected the following categories of personal information from consumers within the last twelve (12) months: 

USE OF PERSONAL INFORMATION 

• We may use and disclose the personal information we collect for one or more of the following purposes: 
• To fulfill or meet the reason for which the information is provided. 
• To provide you with information that you request from us. 
• To provide you with email alerts, event registrations and other notices, events or news, that may be of interest to you. 
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us. 
• To improve the QuidelOrtho Services and present its contents to you. 
• For testing, research, analysis and product development. 
• As necessary or appropriate to protect the rights, property or safety of our technology or others. 
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations. 
• To support external auditing, compliance and corporate governance functions 
• As described to you when collecting your personal information. 
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred. 

We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice. 

DISCLOSURE OF PERSONAL INFORMATION 

In the preceding twelve (12) months, we have disclosed the following categories of personal information for a business purpose: 

• Category A: Identifiers. 
• Category B: California Customer Recrds personal information categories. 
• Category D: Commercial information. 
• Category F: Internet or other similar network activity. 
• Category G: Geolocation data. 

We disclose your personal information for a business purpose to the following categories of third parties: 

• customer service and support providers 
• email, IT services and SMS vendors 
• web hosting and development companies 

For more information on how we disclose your personal information and to which entities, please refer to our Privacy Notice. 

SALE AND SHARING OF PERSONAL INFORMATION

In the preceding twelve (12) months, we have not sold or shared personal information, as defined under the CPRA.

SPECIFIC INFORMATION FOR CALIFORNIA RESIDENTS

The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CPRA”) provides California residents with specific rights regarding their personal information. This section describes those rights.

Access To Specific Information and Data Portability Rights

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past twelve (12) months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of personal information we collected about you.

• The categories of sources for the personal information we collected about you. 

• Our business or commercial purpose for collecting or selling that personal information.

• The categories of third parties to whom we disclose that personal information.

• The specific pieces of personal information we collected about you (also called a data portability request).

You may also request that we disclose to you: 

• The categories of personal information that we have sold or shared about you and the categories of third parties to whom the personal information was sold or shared, by category or categories of personal information for each third party to whom the personal information was sold or shared.

• The categories of personal information that we disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose

Deletion Request Rights

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions.  Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service providers to:

• Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you; 

• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;

• Debug products to identify and repair errors that impair existing intended functionality.

• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law;

• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.); 

• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent;

• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us;

• Comply with a legal obligation; and

• Make other internal and lawful uses of that information that are compatible with the context in which you provided it. 

Right to Opt-Out of Sale or Sharing of Personal Information 

The CPRA provides California residents with the right to opt-out of the sale of personal information and the sharing of personal information for cross-contextual behavioral advertising. We do not “sell” or “share” personal information as those terms are defined by the CPRA. 

Right to Correct Inaccurate Personal Information

You have the right to request a business that maintains inaccurate personal information about you to correct that inaccurate personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.

Right to Limit Use and Disclosure of Sensitive Personal Information

You have the right to direct a business that collects sensitive personal information about you to limit its use of that sensitive personal information to that use which is necessary to perform the services or provide the goods reasonably expected by an average consumer and the following business purposes:

• Helping to ensure security and integrity to the extent the use of the consumer’s personal information is reasonably necessary and proportionate for these purposes.

• Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of a consumer’s current interaction with the business, provided that the consumer’s personal information is not disclosed to another third party and is not used to build a profile about the consumer or otherwise alter the consumer’s experience outside the current interaction with the business. 

• Performing services on behalf of the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of the business.

• Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.

No Discrimination

You have the right not to be discriminated against because you exercised any of your aforementioned rights.

SPECIFIC INFORMATION FOR RESIDENTS OF COLORADO, CONNECTICUT AND VIRGINIA

Colorado, Connecticut and Virginia privacy laws provide the following rights to “consumers” (i.e., state residents who act in an individual or household context and exclude individuals acting in a commercial context):

• Confirm whether or not an entity is processing your personal information and access such personal information; 

• Correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of your personal information;  

• Delete personal information provided by, or obtained about, you; 

• Obtain a copy of your personal information that an entity processes, in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance, where the processing is carried out by automated means; and 

• Opt-out of the processing of personal information for purposes of:

• Targeted advertising; 

• The sale of personal information; or 

• Profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

SPECIFIC INFORMATION FOR NEVADA RESIDENTS

Under Nevada law, we do not sell your personal information. However, if you are a Nevada resident, you may submit a request that we not sell any personal information we have collected about you by contacting us as provided below.

HOW TO EXERCISE YOUR RIGHTS 

If you are a resident of California, Colorado, Connecticut, or Virginia, You may exercise any of the rights described above by submitting  a verifiable consumer request to us in one of the following ways:

• By Mail: Attn: Legal Department – Privacy Team, 9975 Summers Ridge Rd, San Diego, CA 92121

• By Email:  privacy@quidelortho.com

• By Calling Toll Free at: 844-901-1832 

Only you or a person you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative; and

• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We reserve the right to verify your identity in connection with any requests regarding personal information to help ensure that we provide the information we maintain to the individuals to whom it pertains and allow only those individuals or their authorized representatives to exercise rights with respect to that information. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.  If you are an authorized agent making a request on behalf of a consumer, we may require and request additional information to verify that you are authorized to make that request. 

We reserve the right to deny your request if we cannot verify your identify. Where we deny your request in whole or in part, we will inform you of the denial and provide an explanation of our actions and the reasons for the denial.

We will not restrict or deny you access to our QuidelOrtho Services because of choices and requests you make in connection with your personal information. Please note, certain choices may affect our ability to deliver the QuidelOrtho Services. For example, if you sign up to receive marketing communications by email, then ask QuidelOrtho to delete all your information, we will be unable to send you marketing communications. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

RESPONSE TIMING AND FORMAT

We endeavor to respond to a verifiable consumer request within forty-five (45) days of receipt.  If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.  Any disclosures we provide will only cover the twelve (12) month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

CONTACT INFORMATION

If you have any questions or comments about this U.S. Supplemental Privacy Notice, the ways in which we collect and use your information, choices and rights regarding such use, or wish to exercise your rights under applicable U.S. state law, please do not hesitate to contact us at privacy@quidelortho.com.

UPDATES TO NOTICE

QuidelOrtho reserves the right to amend this U.S. Supplemental Privacy Notice at any time. If QuidelOrtho changes its privacy practices that impacts residents of this jurisdiction, a new U.S. Supplemental Privacy Notice will reflect those changes and the effective date of the revised notice will be set forth in this paragraph. This U.S. Supplemental Privacy Notice was last updated on 10/4/23 and effective as of that date.