Eli Lilly and Company, its agents, affiliates, and authorized representatives (collectively, “Lilly”, “we”, “us” or “our”) respects the privacy of visitors to our websites, and as a result, we have developed this Website Privacy Statement (“Privacy Statement”). United BioSource Corporation (“UBC”) has been contracted by Lilly to host and manage the Site (as defined below) and to collect and analyze data on behalf of Lilly for the ZYPREXA RELPREVV patient care program.

Scope

This Privacy Statement applies to Personal Information obtained by Lilly from all visitors (“you” or “your”) through the publicly available pages of the ZYPREXA RELPREVV Patient Care Program Website located at https://www.zyprexarelprevvprogram.com/ (the “Site”), or otherwise, including, but not limited to, the delivery of our products and services (collectively, the “Services”), and Authorized Users of the Patient Care Program Website. “Authorized Users” are eligible Prescribers, Healthcare Facilities and Pharmacy Service Providers. “Prescribers” include physicians, physician’s assistants, nurse practitioners, and pharmacists. “Healthcare Facility” means a healthcare facility administering and/or monitoring injections of ZYPREXA RELPREVV. “Pharmacy Service Provider” means any retail pharmacy, hospital pharmacy, physician, or properly licensed healthcare facility that can order for and deliver ZYPREXA RELPREVV to a healthcare professional in accordance with their agreement to implement all relevant requirements of the ZYPREXA RELPREVV Patient Care Program. The “Patient Care Program Website” is an Authorized User-only portal available through the Site, which enables Authorized Users to prescribe ZYPREXA RELPREVV. Please read this Privacy Statement carefully before you access the Site, use the Services, or otherwise provide Personal Information to us, whether online or offline.

The term “Personal Information” means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household, including any information that is subject to applicable data protection laws. Personal Information may include any information, in any form, related to the past, present, or future health or medical status, condition, or treatment of a person, including, by way of example, but not limitation, names of doctors, health conditions, medicines, and/or prescription information and history. Personal Information may include “protected health information” (“PHI”) as defined under the Health Insurance Portability and Accountability Act of 1996, as amended and implemented (“HIPAA”), and “Personal Information” as defined under the California Consumer Privacy Act, Cal. Civ. Code §§ 1798.100 et. seq., as amended (“CCPA”).

CONSENT TO PROCESSING IN THE UNITED STATES AND ELSEWHERE. This Site is owned and operated by Lilly in the United States, and the use and content of the Site and the Services is intended for U.S. residents only. Please note, however, the information you provide may be accessible to our affiliates, vendors and suppliers in other countries. If you are visiting this Site from a country other than the United States, information collected from you on this Site will be transferred outside of your country. The level of legal protection for Personal Information is not the same in all countries; however, we will take reasonable efforts and security measures as described in this Privacy Statement in an effort to keep your information secure.

These affiliates and/or third parties may be located in countries that do not ensure the same level of data protection but are required to treat Personal Information in a manner consistent with this Privacy Statement. To obtain additional information regarding the basis for transfers that Lilly has in place for cross-border transfers of Personal Information, which may include consent, Standard Contractual Clauses, existing adequacy decisions, or another cross-border data transfer mechanism deemed compliant under applicable data protection laws, please contact us at privacy@lilly.com or visit https://www.lilly.com/privacy.

By using this Site, you consent to the collection, storage and processing of your Personal Information in the United States and in any country to which we may transfer your information in the course of our business operations.

Personal Information We Collect

Information Routinely Collected by Our Website Technology
When you visit the Site, and during your interactions with the Site, web servers may automatically collect certain Internet Data from you. “Internet Data” means a data element or collection of data elements associated with your IP address, the Internet browser or computer operating system you are using, your navigation of the Site including the pages of the Site that you access, the amount of time spent on various portions of the Site, the length and dates of your visits to the Site, and certain Site data captured through your interactions with the Site and other sites. Certain Internet Data may be collected on an aggregated, anonymous basis through web server logs, cookies, ad servers, tracking pixels, web beacons, and similar Internet tracking devices (collectively, “Tracking Mechanisms”). However, based on certain interactions with the Site, third-party sites, mailings, other communications with us, and/or our system configurations, certain Internet Data can be identifiable with you.

Information You Voluntarily Provide
In some cases, you may choose to voluntarily provide certain Personal Information via this Site in order to register for, or request, additional information or Services, including obtaining access to the Patient Care Program Website. In such cases, we will collect information that can identify you, such as your name, address, telephone, number, email address, and other similar information.

Registration. Registration is optional; however, you must register to become an Authorized User and only Authorized Users are provided access to the Patient Care Program Website and to information and online services not provided on the public portions of the Site, as well as the ability to login to the Patient Care Program Website when revisiting the Site. The Personal Information you disclose to us during registration and in connection with the Patient Care Program Website is provided strictly on a voluntary basis. You may register on the Patient Care Program Website by filling out a form and submit it to us online or otherwise. You will need to provide certain Personal Information including first name, last name, and/or email address to register. The type of access and services offered through the Patient Care Program Website may depend on whether you have registered as a Prescriber, a Healthcare Facility, or a Pharmacy Service Provider.

Health Information. When you become an Authorized User, you may be asked to provide us with certain Health Information of one or more patients with their consent, on whose behalf you are assisting in their care by a Healthcare Facility or a Pharmacy Service Provider, or patients that you are treating. After you login to the Patient Care Program Website, you may be able to view certain Health Information of your patients and use other services the Patient Care Program Website may offer. The term “Health Information” means any information, in any form, related to the past, present, or future health or medical status, condition, or treatment of a person, including, by way of example, but not limitation, names of doctors, health conditions, medicines, and/or prescription information and history. If you submit any Personal Information relating to other people to us, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Statement.

How We Use Your Personal Information
We may use your Personal Information to contact you and/or provide you with general health information (like information on certain health conditions) as well as information on our Services. We may enhance or merge your Personal Information with other data we may have about you as well as with data obtained from third parties for the same purposes.

We may use your Personal Information in one or more of the following ways:

    • For Patient Care Program enrollment and certification.
    • For dispensing and monitoring Zyprexa Relprevv to patients.
    • For testing, research, analysis, and product and service development, including to analyze and
       learn how the Site and the Services are used (e.g., via Tracking Mechanisms) to develop and
       improve them.
    • To manage our vendor and partner relationships.
    • To ensure the security and integrity of the Site.
    • To assess and enforce compliance.
    • To protect our and others’ interests, rights, and property (such as to protect our copyrighted
       materials).
    • To comply with applicable legal requirements, such as tax and other government regulations
       and industry standards, contracts, and law enforcement requests.

Information routinely collected may also be stored in databases owned and maintained by Lilly or its agents, contractors, and business partners. Lilly retains their respective rights to these databases and the information contained in them.

Cookies and Other Tracking Mechanisms. We may use Tracking Mechanisms to generate web log information, IP addresses, and other Internet Data routinely collected by our webservers in connection with your visit to this Site, to better understand your needs and general user traffic patterns, and to improve our Sites and Services. We may enhance or merge this Internet Data with other data we may have about you as well as with data obtained from third parties for the same purposes. We also may use your IP address to personalize content provided on the Site. We may retain IP addresses, and we may retain them together with other Personal Information. Our webservers can detect whether you have cookies on your computer. It is possible that a cookie may contain information that could be deemed identifiable. We may use the Internet Data we obtain through the use of cookies to customize your site experience by anticipating the information and services that may be of interest to you. We also analyze such Internet Data collected with cookie technology to help us improve the functioning of our Site by monitoring traffic in popular areas and to modify the Services and information we provide to meet customer demand. We may link the clickstream data available to us through the use of cookies to Personal Information that you may choose to provide elsewhere on our websites. We use the information we collect through the use of cookies for our business purposes, including operation of our Site, as well as research and product analyses to help us better market our Services. You can change your settings for cookies and similar technologies by clicking on the cookie consent box on the Site. In addition, you can refuse or accept cookies from the Site at any time by activating the settings on your browser. Most web browsers automatically accept cookies but allow you to modify your browser setting to block them. If you reject cookies, however, functionality of the Site may be limited, and you may not be able to take advantage of many of the Site’s features. There are different methods for viewing and deleting cookies set on your machine, depending on the browser you are using. We recommend you visit the website of your web browser, where you should be able to find this information, or you can visit a site such as http://www.aboutcookies.org/default.aspx. Some mobile devices store cookies not only in areas connected to the web browsers but also in an app-specific area, so you may have to check your app settings options to determine how to manage or delete cookies stored in these other areas.

Third-Party Cookies and Advertising. We may partner with third party ad networks to manage our advertising on other sites. Our ad network partners use cookies and other Tracking Mechanisms to collect Internet Data about your activities on this and other websites to provide you targeted advertising based upon your interests. If you would like to opt-out of, or manage, cookies used for targeted advertising, you may do so by following the options provided by the Network Advertising Initiative at: http://www.networkadvertising.org/choices and the Digital Advertising Alliance at: http://www.aboutads.info/choices/. Please note that opting out of receiving targeted ads will not prevent you from being served advertisements generally.

Digital Analytics. We may analyze Internet Data in the aggregate to study outcomes, costs, and provider profiles. These studies may generate Aggregate Data (described below) which we may utilize for a variety of purposes, including product and service development and improvement activities and clinical research purposes.

We may perform statistical analyses of the traffic patterns, Site usage, and behaviors associated with the Site. We may use these analyses to generate Aggregate Data from the original Internet Data. We may combine, separate, aggregate, or otherwise parse and process Internet Data. The parsing and processing of such information may generate Aggregate Data. “Aggregate Data” is summary level data, such as the number of web visitors in a specific geographic area. Aggregate Data does not contain information that can be used to identify or contact you, such as your name, address, telephone number or e-mail address, and does not reflect the original form of the Internet Data collected from you.

Analytics. UBC may use certain in-house or third-party functionality to analyze your communications with us and interactions with the Site. The analysis enables us to monitor the services that we provide so that we can improve the services provided to you. These third parties will be required to protect any Personal Information in a manner consistent with this Privacy Statement. Other analytics capabilities are reflected in the description of Internet Data.

Sharing Your Personal Information
We may share the Personal Information we collect through this Site and Services with our employees, agents, contractors or partners in connection with services that these individuals or entities perform for or with us. These agents, contractors or partners are restricted from using this data in any way other than to perform these services. Lilly expects our employees and partners to maintain the trust placed in us by those who provide us with information by using reasonable and appropriate administrative, technical and physical safeguards. Lilly and UBC reserve the right to share Personal Information to respond to duly authorized information requests of governmental authorities or where required by law. Lilly and UBC may share certain Personal Information collected by UBC on the Site with companies that sponsor and/or support the REMS Program and with the U.S. Food and Drug Administration. Please note, for purposes of the HIPAA Privacy Rule, the information you provide on the Site in furtherance of the REMS Program is not subject to HIPAA under the public health exception for government-mandated public health activities and purposes. In some circumstances, such as where national, state or company security is at issue, Lilly and UBC reserve the right to share our entire database of visitors and customers, and the associated Personal Information and other data we may have with appropriate governmental authorities in connection with efforts to investigate, prevent, or take other action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or to otherwise respond to subpoenas, court orders, or legal process, requests for cooperation from law enforcement or other government agencies.

We may also provide Personal Information to a third party in connection with the sale, assignment, or other transfer of the business of this Site to which the information relates, in which case we will require any such buyer to agree to treat information in accordance with this Privacy Statement.

In addition, we may use third parties to: (a) operate and maintain the server(s) on which the Site operates, (b) provide Tracking Mechanism(s) that we embed in or use with the Site, (c) provide information to you about the Site and Services through a third-party website based on a prior visit to the Site, (d) analyze communication with us and interactions with the Site, (e) de-identify data, and (f) collect non-personally identifiable information from you (e.g., on your interactions and/or experience with the Site and/or us). The third party may then share the Personal Information or other data with us.

We may be required or permitted by law to share your Personal Information, without prior notice to you, under certain circumstances including but not limited to, reporting adverse events, product recalls, preventing disease, and for health research purposes. In accordance with applicable laws and/or in a good faith effort, we may disclose your Personal Information, without prior notice to you, to maintain, safeguard, or preserve the rights or property of Lilly and UBC and to help protect the personal safety of other users of the Site, patients, and/or the general public.

Additionally, we reserve the right to disclose to third parties non-personally identifiable information collected for any lawful purpose, including but not limited to, aggregate or de-identified data.

Do Not Track
There are different ways you can prevent tracking of your online activity. One of them is setting a preference in your browser that alerts websites you visit that you do not want them to collect certain information about you. This is referred to as a Do-Not-Track (“DNT”) signal. Please note that currently our Site and web-based resources do not track users over time and across the third party sites to provide targeted advertising, and therefore do not respond to these signals from web browsers. At this time, there is no universally accepted standard for what a company should do when a DNT signal is detected. However, you may control certain Tracking Mechanisms as described above.

Data Security
We are committed to protecting the privacy and security of this Site. We take commercially reasonable steps, including appropriate and reasonable physical, electronic and procedural safeguards, to protect Personal Information we process and maintain from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. We limit access to Personal Information to authorized employees and third parties who need access to perform the business activities described in this Privacy Statement. Although we strive to protect the Personal Information we process and maintain, no security system can prevent all potential security breaches. Therefore, we do not guarantee that your Personal Information will be secure from theft, loss, or unauthorized access or use, and we make no representation as to the reasonableness, efficacy, or appropriateness of the measures we use to safeguard such Personal Information. Please keep this in mind when disclosing Personal Information to us or to any other party via the Internet.

Children
This Site is not intended for, or designed to attract, individuals under the age of 18. We do not knowingly collect Personal Information from any person under the age of 18. If we determine that such information has been inadvertently collected on anyone under the age of 18, we will take the necessary steps to ensure that such information is deleted from our systems. If you are a parent or guardian and become aware that your child has provided us with information, please contact us using one of the methods specified below.

More Information

Data Retention
Except to the extent prohibited by law, and subject to this Privacy Statement, we retain information collected through the Site for as long as it is necessary to provide you with the Services and comply with applicable laws, regulations, and court orders.

Links to Other Websites
As a convenience to our visitors, our Site may contain links to a number of sites owned and operated by third parties that we believe may offer useful information. The policies and procedures we describe here do not apply to those websites. Lilly or UBC is not responsible for the collection or use of information at any third party sites. We suggest contacting those sites directly for information on their privacy, security, data collection, and distribution policies.

Your Rights – General
Depending on your jurisdiction, you may have certain rights regarding our collection, use, and disclosure of your Personal Information. If you have any questions regarding these rights, please contact us.

You may be able to opt-out of certain communications by following customization and/or opt-out options. We will provide an option to unsubscribe or opt out of further communication on any electronic marketing communication sent to you or you may opt out by contacting us as set out in this Privacy Statement.

California Privacy Rights
Your Privacy Rights: California Civil Code Section 1798.83 entitles California residents who have an established business relationship with Lilly to request information regarding Lilly’s disclosure of certain Personal Information to third parties for their direct marketing purposes. To make a request for such information, you may contact us in writing to: ZYPREXA RELPREVV Patient Care Program Coordinating Center at 200 Pinecrest Plaza, Morgantown, WV 26505 or you may call 877-772-9390.

California Consumer Privacy Act (CCPA) entitles California residents to certain rights with regard to their PI. Those rights have been incorporated into this Privacy Statement.

We do not sell Personal Information. We do not share Personal Information with other people or non-affiliated businesses for their direct marketing purposes.

Information Exempt from the CCPA
Note that certain information that is governed by the California Confidentiality of Medical Information Act (CMIA), HIPAA, or is subject to the Federal Policy for the Protection of Human Subjects, also known as the Common Rule, pursuant to good clinical practice guidelines issued by the International Counsel for Harmonisation or pursuant to human subject protection requirements of the FDA, is not considered Personal Information with respect to the rights of California residents noted above. However, additional rights might be available under those laws and standards.

Choices and Questions If you provide us with Personal Information on this Site and later decide to opt-out of this decision, you may contact us as provided below. Upon verification of your identity, and as applicable by law, you also have the right to:
    • request:
        o information from us on how your Personal Information is being processed, and with
           whom it is being shared
        o information about our process to verify your identity
        o to see and get a copy of the Personal Information that we have about you
        o that we correct, restrict the processing of, and/or erase/delete your Personal Information
        o to have your information transmitted to another entity or person in a machine-readable
           format, in limited circumstances
        o change or withdraw your consent at any time

There may be exceptions that apply to your request. To exercise your rights, you or your authorized representative may submit a request to: ZYPREXA RELPREVV Patient Care Program Coordinating at 200 Pinecrest Plaza, Morgantown, WV 26505 or you may call 877-772-9390.

You will not be discriminated against for exercising any of your rights.

If you are receiving commercial emails from us, you may write to the address below or follow the opt-out instructions on those emails. Please note that you may continue to receive materials while we are updating our lists.

How to Contact Us
If you have any questions about this privacy policy, you may contact us at:

ZYPREXA RELPREVV Patient Care Program Coordinating Center
200 Pinecrest Plaza
Morgantown, WV 26505
1-877-772-9390

Changes to Our Privacy Practices
We may update this Privacy Statement from time to time. When we do update it, for your convenience, we will make the updated statement available on this page. We will always handle your Personal Information in accordance with the Privacy Statement in effect at the time it was collected. We will not make any materially different use your Personal Information unless we notify you and give you an opportunity to object.



Updated [26 February 2021]