Privacy Policy

This Privacy Notice was last updated on June 28, 2024

SpringWorks Therapeutics (“SpringWorks”, “our”, “us” or “we”) is a biopharmaceutical company that uses a precision medicine approach to develop and deliver life-changing medicines for people with rare types of cancer. We collect information about you (“Personal Information”) from you when you participate in our compassionate use and other patient support programs or through our other services (the “Services”), when you or your physician reports adverse events to us, and when you interact with us through our website (the “Site”). We value your privacy and are committed to the safety of your Personal Information. In this Privacy Notice, we describe how we collect, use, and disclose your Personal Information when you use the Site or engage with our Services, products, or activities that display or reference this Privacy Notice (the “Services”). Note that, for purposes of this Privacy Notice, Personal Information does not include publicly available or de-identified information.

Your use of our Site or Services, and any dispute over privacy, is subject to this Privacy Notice and our Terms of Use, including applicable limitations on damages and the resolution of disputes. This Privacy Notice is incorporated into the SpringWorks Terms of Use. This Privacy Notice does not apply to individuals who participate in our clinical trials. We provide a separate privacy notice that applies to clinical trials, as necessary.

For individuals located in the U.S., please see our Privacy Rights section to learn more about the rights you have with respect your Personal Information. California residents can also review our Notice at Collection. If you are located in the European Union/European Economic Area, the United Kingdom or Switzerland, please see our Notice to European Residents to learn more about the rights you have with respect to your Personal Information.

What Personal Information We Collect

The Personal Information we collect varies based on where and how you interact with us. Below are the categories of Personal Information we may collect, including certain types of Personal Information that may be considered sensitive Personal Information under applicable laws.

Contact Information: For example, we collect your name, personal or professional mailing address, phone number, and e-mail address when you or your health care provider provide this information to us.

Demographic Information: When you interact with us through certain Services, we collect your age, gender, marital status, disability, and date of birth.

Government Identifiers (sensitive Personal Information): When you interact with us through certain Services, we collect your Social Security number, driver’s license number, or State ID card number if you are a patient or healthcare professional.

Professional Information: For example, if you are a healthcare professional, we collect details about your workplace, position, the medical field in which you are active, your professional qualifications, and scientific activities (such as previous clinical trials and participation in previous or ongoing studies at SpringWorks and others), publication of academic or scientific research and articles and membership of associations and boards.

Health Information (sensitive Personal Information): For example, we may collect health information in limited circumstances, including information about your health condition or status, diagnosis, insurance, symptoms, and treatment information; disease / diagnosis, surgeries/health-related procedures, imaging and other medical procedures; the use/acquisition of medications; allergy information; bodily functions, vital signs, or symptoms; reproductive or sexual health information, treatment and services; lab testing and results; or claims data and other payment information reflecting purchase or use of any health service. Health information may also be called Consumer Health Data in certain circumstances. For our policy related to Consumer Health Data please click here.

Financial Information (sensitive Personal Information): For example, we may collect your account number, credit or debit card number, or other financial details including direct identifiers that would permit access to an individual’s financial account.

Internet and Network Activity Information: We collect information about your use of the Site, such as information about the date and time you access our Site, frequency of use, engagement with particular features, and which sections of the Site are visited most. We may also collect information about the browser you are using, your IP address, and device identifiers.

Online Identifiers. For example, we collect IP address, unique device ID, cookie IDs and other information about your device.

Employment-related Information. When you apply for a job, we collect information you submit as part of your application and resume. This might include your work experience and previous employment, your education, the URL to your personal or professional websites, your workplace skill sets and certifications, and/or salary expectations.

Other Information from Your Interactions with Us. We collect details of the interactions you have with us such as topics discussed, your questions about our business, products and services and your feedback. We may collect other Personal Information that you voluntarily provide to us through correspondence or other interactions. For healthcare professionals, we may also collect information about your views and routines about prescribing, routines related to your patients and diagnosis, and similar data.

Where/How We Collect Personal Information

We collect Personal Information about you from:

Your Prescribing Physician You or Your Representative. We collect Personal Information directly from you (or your representative, such as your caregiver, if applicable) when you provide it through our Site, enroll in a program that SpringWorks offers (including enrollment in our compassionate use or financial assistance programs), apply for a job, or otherwise communicate with us. Your prescribing physician may also provide us with your information when you enroll in our compassionate use or financial assistance programs, or for purposes of submitting patient safety reports.

Service Providers. We work with service providers who collect information on our behalf to provide services to us. We only allow our service providers to use your Personal Information only in connection with the services they provide us, and for purposes permitted under law (such as security and fraud protection).

Third-party Advertising Partners. We may use third parties such as ad networks and other partners to serve our ads on third-party websites or other media (e.g., social networking platforms). This enables us to target advertisements for our products and Services to you. Our third-party advertising partners, including third-party ad network providers, advertisers, sponsors and/or traffic measurement services, may use cookies, JavaScript, web beacons (including clear GIFs), Flash LSOs and other tracking technologies to measure the effectiveness of their ads and to personalize advertising content to you.

Third-party Business Partners and Public Sources. We may collect Personal Information from other third parties, including companies that have organized activities sponsored or supported by SpringWorks; public sources (such as public forums where you may post publicly about our products, Services or clinical trials or about diseases that we are committed to addressing through our clinical trials, products or Services), recruitment agencies, and other third parties.

Cookies and Similar Technologies. Our Site collects information by depositing certain bits of information called “cookies” in a visitor’s computer. The cookies can tell us how and when pages in a web site were visited and by how many people. This information will enable us to improve our Site to serve and inform you better. It also may allow you to shortcut access to points of interest on our web site when you re-enter our system. For more information regarding cookies, please see our Cookie Policy.

How We Use Personal Information

We use the Personal Information we collect about you for the following purposes:

to provide information and the Services you requested;
to contact you, via e-mail or regular mail, to provide you with information we believe may be of interest;
to perform analyses designed to help us understand and serve our customers’ needs;
to perform analyses designed to help us understand the utility, quality and effectiveness of our Services;
to process and respond to questions regarding data privacy and your privacy rights;
to process reports from patients regarding side effects, adverse drug reactions, adverse events or other safety information relation to a SpringWorks drug/product;
to send you communications regarding, research, educations and marketing initiatives about our products when you elect to receive those communications from us;
to facilitate the sharing of patient and caregiver stories, when you or your representative and/or caregiver elect to share such information;
to facilitate programs you elect to participate in, such as our compassionate use program or financial assistance programs;
to manage our business relationship with healthcare professionals;
to comply with applicable laws and regulations;
to process applications for current vacancies and/or accept unsolicited job applications;
in connection with a sale, purchase, merger or other business transaction;
to address compliance and legal obligations; and
for any other legitimate business purposes such as data analysis, audit, public relations and marketing, improving customer experiences and our products and Services, and expanding our business activities.

We may also use your Personal Information for other purposes disclosed to you at the time you provide Personal Information or with your consent.

Service Providers. We share your Personal Information with service providers acting on our behalf to help us with the purposes described in the previous section.

Third Party Partners. We will also disclose your Personal Information to third parties in the following circumstances:

a legitimate business need or purpose exists, including performing Services such as customer service, website management, order fulfillment, facilitating our communications with you, sponsoring or administering our initiatives described in this Privacy Notice, protecting the security of the Services and the integrity of the Personal Information, and other similar services;
where applicable, as a result of a request by you;
where the third party is an advertising partner that helps us deliver, measure, and analyze the effectiveness of our ads; or
where SpringWorks decides to sell, buy, merge or otherwise reorganize its business structure.

Law Enforcement/Regulatory Bodies. We share your Personal Information where we are required to do so under applicable laws or local statutes, or with government or regulatory agencies consistent with our legal obligations.

We may also share Personal Information for other reasons we may describe to you from time to time as permitted by law. We do not use or disclose sensitive Personal Information outside of the purposes for which it was collected.

Your Privacy Choices

Opt-Out of Marketing Emails. You can opt out of receiving our marketing emails. To stop receiving our promotional emails, you can click unsubscribe in any promotional message you get from us. You can also make a request by calling our toll-free number at 855-722-2291 or contacting us by clicking here (https://communication-preferences.springworkstx.com/). Even if you opt out of getting marketing messages, we will still send you transactional messages that concern your existing Services relationship with us. These include responses to your questions or emails related to actions you take on our Site.

Opt-in/Opt-Out of Cookies and Other Technologies. When you first visit our Site, you will be presented with a banner that offers you a choice to accept or reject different types of cookies, with the exception of cookies that are strictly necessary for the operation and your use of the Site. Click here for our Cookie Policy.

You can also find information on how to manage cookie settings on certain browsers via the following links:

Users may also opt out of many third-party ad networks. For example, you may go to the Digital Advertising Alliance (“DAA”) Consumer Choice Page for information about opting out of interest-based advertising and your choices regarding having information used by DAA companies. You may also go to the Network Advertising Initiative (“NAI”) Consumer Opt-Out Page for information about opting out of interest-based advertising and your choices regarding having information used by NAI members. Opting out from one or more companies listed on the DAA Consumer Choice Page or the NAI Consumer Opt-Out Page will opt you out from those companies’ delivery of interest-based content or ads to you, but it does not mean you will no longer receive any advertising through our Site or on other websites.

Disabling a cookie or category of cookie does not delete the cookie from your browser. You will need to do this separately within your browser. If you have disabled one or more analytical cookies, we may still use information collected from cookies prior to your disabled preference being set. Also, if your browsers are configured to reject cookies when you opt out on the DAA or NAI websites, your opt-out may not be effective. Additional information is available on the DAA’s website.

Your Privacy Rights

Subject to some conditions and limitations, you have the right to make the following requests with respect to your Personal Information:

Access. You have the right to request that we disclose the categories of Personal Information collected about you, the categories of sources from which the Personal Information is collected, the categories of Personal Information sold or disclosed, the business or commercial purpose for collecting and selling the Personal Information, the categories of third parties with whom we share the Personal Information, and the specific pieces of Personal Information collected about you. In some jurisdictions you may also have the right to receive a list of the specific third parties with whom we share Personal Information.
Deletion. You can request that we delete your Personal Information that we maintain about you, subject to certain exceptions.
Correction. You can request that we correct Personal Information about you that you believe to be inaccurate. We may ask you to provide documentation to confirm the accuracy of your information.
Right to be free from discrimination. You have the right not to be discriminated against for exercising these rights.
Data Portability. You can request a copy of your Personal Information in a portable, and, to the extent technically feasible, readily usable format, where the processing of your Personal Information is carried out by automated means.
Right to opt out of sale/sharing for targeted or cross-contextual behavioral advertising. Under certain laws, our use of cookies for online advertising may be considered “targeted advertising” or a “sale” or “sharing of your Personal Information for cross-contextual advertising”. You can opt-out by clicking the cookie icon at the bottom of our Site. For California residents, also appears.
Right to restrict and object to processing. You have the right to ask SpringWorks to limit or stop processing your Personal Information under certain circumstances.

When we process your Personal Information based on your consent, you can withdraw consent at any time. Please note that withdrawal of consent applies only to future actions. processing of Personal Information that was carried out before the withdrawal of consent is not affected.

We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. For example, we may retain Personal Information as permitted by law, such as for tax or other record keeping purposes, to maintain an active account, and to process transactions and facilitate customer requests. We will take reasonable steps to verify your identity prior to responding to your requests. The verification steps will vary depending on the sensitivity of the Personal Information and whether you have an account with us.

You may designate an authorized agent to make a request on your behalf. When submitting the request, please ensure the authorized agent identifies as an authorized agent and can show written permission from you to represent you. We may contact you directly to confirm that you have authorized the agent to act on your behalf and confirm your identity. You may exercise the above rights by calling our toll-free number at 855-722-2291 or contacting us using the Data Subject Contact Form.

Do Not Track

We do not currently respond to browser do-not-track signals. Instead, we adhere to the standards set out in this Privacy Notice and offer the cookies choices described above.

Some browsers offer you the ability to opt out the sale or sharing of your information for targeted advertising. We will respond to those signals in the same way that we respond to cookie choices you make on our Site.

Notice Regarding De-identified Information

If we receive or maintain de-identified information that is derived from Personal Information, we take reasonable and appropriate steps to maintain and use the information in de-identified form and not attempt to re-identify the information, consistent with our contractual and legal obligations.

Security

We have implemented commercially reasonable precautions to protect the information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction.

Further, we take steps to limit access to Personal Information to certain SpringWorks personnel only – and on a need-to-know basis. We also take steps to educate our personnel about their obligations to protect your privacy rights as they relate to your Personal Information that may be collected.

You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared computer, choosing a robust password that nobody else knows or can easily guess, and keeping your log-in and password private. We are not responsible for any lost, stolen, or compromised passwords or for any activity on your account via unauthorized password activity.

Retention of Personal Information

We keep Personal Information as long as necessary to address the reason we collected or received it, including to address legal requirements. When we decide how long we will keep your Personal Information, we consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure, why we need it, and any relevant legal requirements (such as legal retention and destruction periods).

The foregoing will, however, not prevent us from retaining any Personal Information if it is necessary to comply with our legal obligations, in order to file a legal claim or defend ourselves against a legal claim, or for evidential purposes.

Links to Other Sites

As a resource to our visitors, SpringWorks may provide links to other websites. We try to choose websites that we believe may be useful to you; however, we are not responsible for, and cannot guarantee the standards of, the websites for which we provide links. We also are not responsible for the privacy policies of these other sites and strongly suggest that you review the privacy policies of those sites before using them.

Location of Personal Information

Information we collect from you may be transferred to, processed in, or stored in or outside the United States. Personnel operating in these locations who work for us or one of our service providers may process Personal Information on our behalf. SpringWorks has implemented technical and organizational safeguards to protect your Personal Information. If you are located in the EEA, be advised that SpringWorks has implemented the UK and European Commission approved Standard Contractual Clauses for transfers of Personal Information between our affiliates, partners and collaborators. A copy can be obtained by requesting it using the Data Subject Contact Form.

Children

This Site is intended for individuals who are 18 years of age or older. In particular, our Services are not for children under 13. SpringWorks does not intentionally collect or retain Personal Information from children who are younger than 18 years of age.

If you are aware that an individual under 18 has submitted Personal Information to us, please contact us using the Data Subject Contact Form so we can address the matter immediately, including ensuring the Personal Information is deleted from our systems.

Changes

Any changes to this Privacy Notice will be communicated promptly on this Site and may be communicated to you by other means, if required. Please check this page periodically to review any changes, which we reserve the right to implement.

Contact Information

If you have any questions, concerns or requests regarding this Privacy Notice, please contact us by calling our toll-free number at 855-722-2291 or emailing us using the Data Subject Contact Form.

Additional Information for Our California Residents

California Notice

Categories of Personal Information	The Personal Information we collect is described in What Personal Information We Collect
Sources of Personal Information	Our sources are described in Where/How We Collect Personal Information
Purpose of Collecting Personal Information	Our purposes are described in How We Use Your Information
Categories of Personal Information Sold or Shared	Your Privacy Rights Cookie Policy
Third Parties Sold to or Shared With	With Whom Do We Share Personal Information

We retain your information as described in the Retention of Personal Information section. You can opt-out of the sale/sharing of your Personal Information by clicking the cookie icon on the bottom of our website and using the “Do Not Sell My Personal Information” option.

We do not share Personal Information with third parties for their direct marketing purposes. If this policy changes in the future, we will notify you and give you the opportunity to opt-in or object.

Additional Information for Individuals in the EEA and UK

SpringWorks is the data controller of your Personal Information. Personal information as used in this Privacy Notice also refers to “Personal Data” under EU data protection laws. We are responsible for determining why and how your Personal Information is collected, maintained, used, and shared and otherwise processed, as described in the “What Personal Information We Collect”, “Where/How We Collect Personal Information”, “How We Use Personal Information”, and “With Whom Do We Share Personal Information” sections of this Privacy Notice. We may engage service providers, acting as our processors, to process Personal Information on our behalf in accordance with this Privacy Notice. If you have any questions about our privacy practices in the EU please Contact Our DPO.

Legal Basis for Processing Personal Information

We rely on the following legal basis to collect and process your Personal Information:

Legitimate interests: We have a legitimate interest in processing your Personal Information for the following purposes:
- performing the essential functions of our Site
- communicating with you in response to any inquiry or request you make of us
- processing and responding to questions regarding data privacy and your privacy rights
- processing applications for current vacancies and/or accepting unsolicited job applications
- for any other legitimate business purposes such as data analysis, audit, public relations and marketing, improving customer experiences and our products and Services, and expanding our business activities.
With your consent, which we may get when we want to:
- contact you, via e-mail or regular mail, to provide you with information we believe may be of interest
- send you communications regarding, research, educations and marketing initiatives about our products
- facilitate the sharing of patient and caregiver stories
- facilitate programs you elect to participate in, such as our compassionate use program or financial assistance programs
- for any other purpose disclosed at the time we request your consent.
To comply with our legal obligations, including to:
- process reports from patients regarding side effects, adverse drug reactions, adverse events or other safety information relation to a SpringWorks drug/product;

Additional EU Privacy Rights

In addition to the rights described above in Your Privacy Rights, subject to some exceptions and limitations under applicable law, also have the right to lodge a complaint with us, with our DPO at springworks@hewardmills.com, or with your local data protection authority in the country where you live, where you work, or where the alleged violation occurred, as applicable. For individuals residing in the EU, the list of Data Protection Authority by EU country can be found here: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en. If you are based in the European Economic Area or the United Kingdom and wish to contact us via our GDPR Representative, DataRep, you may do so at: datarequest@datarep.com.

Contact Our DPO

If you are located in the EU and any questions about our privacy practices or your data rights, please contact us at the address, telephone number, or email address noted below, and please share your question and where you live:

SpringWorks Therapeutics
100 Washington Blvd
Stamford, CT 06902

Data Subject Contact Form

Telephone: +1 203-883-9490

You may also contact our Data Protection Officer with questions. Our Data Protection Officer is:

HewardMills LTD
77 Farringdon Rd
London EC1M 3JU
UK
springworks@hewardmills.com
Telephone: +44 20 4540 5853

If you are based in the EU and wish to contact us via our General Data Protection Regulation (“GDPR”) Representative, DataRep, you may do so at:

Email: datarequest@datarep.com

Web Request: www.datarep.com/datarequest

Mailing addresses:

European Union/European Economic Area

DataRep
The Cube
Monahan Road
Cork, T12 H1XY, Republic of Ireland

United Kingdom

DataRep
107-111 Fleet Street
London, EC4A 2AB, United Kingdom

Switzerland

DataRep
Leutschenbachstrasse 95
ZURICH, 8050, Switzerland