UK Website/App Privacy Notice

INTRODUCTION

This Privacy Notice ("Privacy Notice") describes how Pfizer Limited and its subsidiaries and affiliated entities ("Pfizer", "us" or "we") collect, use, disclose, and retain Personal Data about you in the UK in connection with the website or mobile application from which this Privacy Notice was linked (the "Site"). This Privacy Notice also describes the rights that you may have regarding our processing of your Personal Data under applicable local law.

We encourage you to review this Privacy Notice and click on the available links or select "Learn More" if you want additional details on a particular topic.

Depending on your relationship to us, such as when you interact with us in your capacity as a health care professional (HCP), patient, adverse events reporter, clinical trial participant, clinical trial investigator, job candidate, or Pfizer colleague, this information may be supplemented by specific notices that explain how your Personal Data will be processed in connection with that relationship.

Learn More

Please see our HCP Privacy Notice for information regarding our privacy practices involving Personal Data when you are interacting with us in your capacity as a healthcare professional.
For information regarding our privacy practices in connection with patient support programs, patient testimonial events or other events involving the processing of patient Personal Data, please refer to the relevant privacy notice provided to you at the time of the event.
For information regarding how we process Personal Data when handling medical information inquiries, product complaints, or product safety reports, please see our Medical Information, Product Complaint, and Product Safety Privacy Notice.
For information regarding our privacy practices in relation to clinical trials, please refer to the Informed Consent Document or other documentation provided to you at the time of conducting relevant clinical trials.
Please see our Candidate Privacy Notice for information regarding our privacy practices involving Personal Data when you are interacting with us in a recruitment-related capacity.
For information regarding our privacy practices involving Personal Data when you are interacting with us in an employment-related capacity (e.g., as a Pfizer colleague or contingent worker), please also see our Employee Privacy Notice on Pfizer's internal systems or otherwise provided to you.

Our Site may contain links to third party websites/content/services that are not owned or controlled by Pfizer. Pfizer is not responsible for how these properties operate or treat your personal data so we recommend that you read the privacy policies and terms associated with these third party properties carefully.

PERSONAL DATA WE COLLECT AND DISCLOSE

"Personal Data" is data that identifies you as an individual or can be reasonably linked to you. Depending on the Site you are interacting with, Personal Data that we may collect includes:

Name, Contact Information, and Identifiers

Learn More

This includes your name, telephone number, email address, physical address, online identifier, Internet Protocol address, account logins, or other similar identifiers.
Protected Classifications

Learn More

This includes characteristics of protected classifications under applicable law such as race, colour, sex, gender, age, national origin, disability, and citizenship status.
Purchase History and Tendencies

Learn More

This includes records of products or services you may have considered or obtained
Usage Data

Learn More

This includes internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with the Site.
Geolocation Information

Learn More

This includes information about your location when you access the Site.
Sensitive Information

Learn More

This includes certain characteristics of protected classifications, precise geolocation, account login credentials, information that may reveal details about your physical or mental health, and financial information.
Profiles and Inferences

Learn More

This includes inferences drawn to create a profile reflecting your preferences, characteristics, psychological trends, predispositions, behaviour, attitudes, intelligence, abilities, or aptitudes.
Information You Otherwise Submit to Us

Learn More

During your interaction with us, if you submit any information to us, we will receive this information.

During your relationship with Pfizer, we may collect the categories of Personal Data described above directly from you, automatically through your use of the Site, and from third parties:

Information We Collect Directly from You. We collect Personal Data you choose to provide as part of your interaction with the Site (e.g., through registrations, applications, and surveys).

Learn More

When you are asked to provide Personal Data, you may decline. But if you choose not to provide data that is necessary for us to provide requested services or perform our contractual obligations, we may not be able to provide you those services or perform those contractual obligations.

If you provide or permit us to collect any Personal Data relating to another person, you are telling us that you have the authority to share that data and to permit us to use the data as described in this Privacy Notice.

Information We Collect Automatically. We automatically collect Personal Data when you access the Site, such as the information described above as "Usage Data."

Information We Collect from Other Sources. We may collect Personal Data about you from third parties, such as public databases, social media platforms, and other third parties. For example, if you access the Site through third-party services, we may collect information from these third-party services, such as the domain name of the third-party service that directed you to our Site.

HOW WE USE PERSONAL DATA

We may use Personal Data to:

Interact and engage with you when we have a contractual relationship or a legitimate interest.
Learn More
Interacting and engaging with you includes:
- Providing Site functionality, including any associated personalization.
- Responding to your inquiries and fulfilling your requests and completing your transactions.
- Sending you administrative information, such as changes to our terms, conditions and policies.
- Facilitating social sharing functionality on the Site.
Operate our business to comply with our legal obligations, for statistical purposes or to meet our legitimate interests in maintaining our business.
Learn More
Operating our business includes:
- Validating your ability to access or use certain information, products, or services.
- Operating and expanding our business activities.
Improve our services when we have a contractual relationship or a legitimate interest.
Learn More
Improving our services includes:
- Developing, enhancing, or modifying our products and services.
- Better understanding how our products and services impact you and those for whom you care.
- Conducting data analysis and audits.
- Identifying usage trends in the use of our Sites and analysing the effectiveness of our communications.
Provide marketing and promotional communications when we have a contractual relationship, your consent or a legitimate interest.
Learn More
Providing marketing and promotional communications includes:
- Sending you news and newsletters, event updates, and to communicate with you about relevant offerings (by digital means or otherwise).
- Tailor the content and information that we send or display to you to your and interests, and to otherwise personalize your experience when you interact with our communications.
Where needed under applicable law, we will obtain your consent (or as otherwise required by law) before processing your Personal Data, including for cookies and similar technologies and marketing messaging.
Comply with legal obligations and protect us and others.
Learn More
Complying with legal obligations and protecting us and others includes:
- Complying with our regulatory monitoring and reporting obligations, including those related to recordkeeping and reporting.
- Exercising and protecting our rights, privacy, safety, or property, or those of our affiliates, you, or others.
- Detecting, preventing, or investigating misconduct.
- Complying with anti-corruption and transparency obligations.
- Complying with law enforcement or government authority requests and participating in compliance audits.

On occasion, Pfizer may offer special programs, activities, events, or promotions via the Site ("Special Programs") that have specific terms, privacy notices, and/or consent forms that explain how any personal data you provide will be processed in connection with the Special Program. We strongly suggest you review the terms applicable to the Special Program before participating.

We may aggregate or anonymize data about you and use it for any purpose. To the extent we anonymize any data originally based on Personal Data, we will maintain and use such data only in anonymized form and will not attempt to reidentify the data.

In certain instances, and consistent with applicable law, we may use automated or AI-enabled tools to process your Personal Data for the purposes described above.

Please note that unless otherwise indicated, by 'legitimate interest' we mean the interest in conducting and managing our business to enable us to provide the best products and services, or to provide the information you are requesting from us. When we process personal information to meet our legitimate interests, we ensure that our legitimate interests are not overridden by your interests or fundamental rights and freedoms. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your Personal Data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you by contacting us at the details below.

HOW WE DISCLOSE PERSONAL DATA

We disclose Personal Data as follows:

Affiliates.

Learn More

We may disclose Personal Data we collect about you to other Pfizer companies for the purposes described in this Privacy Notice.
Service Providers.

Learn More

We may disclose Personal Data we collect about you to service providers, contractors, and agents we collaborate with for the purposes set forth above. For example, we engage service providers to help us with customer service and support, email and SMS, data analytics, web hosting and development, fulfilment, and data technology and related infrastructure.
Business Transfers.

Learn More

If (i) we or our affiliates are or may be acquired by, merged with, or invested in by another company, or (ii) if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may transfer Personal Data we have collected about you to the other company to prepare, complete, and implement the business transfer. As part of the business transfer process, we may disclose certain of your information to lenders, auditors, and third-party advisors, including attorneys and consultants. We may also disclose your information to companies that were formerly wholly or partly included in the Pfizer group to whom we provide services during a transition period following separation.
In Response to Legal Process.

Learn More

We may disclose Personal Data we have collected about you where we believe necessary to comply with a regulatory requirement, judicial proceeding, court order, government request, or other legal process served on us.
To Protect Us and Others.

Learn More

We may disclose Personal Data we collect about you where we believe it is appropriate to do so to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety, rights, or property of our customers, the public, Pfizer and our affiliates, violations of this Privacy Notice, or as evidence in litigation in which we are involved.

COOKIES & SIMILAR TECHNOLOGIES

Cookies are a standard feature of websites that allow us to store small amounts of data on your computer about your visit to the Site. Cookies help us learn which areas of the Site are useful and which areas need improvement.

Depending on the Site, you can find information about cookies that we use and change your settings for cookies and similar technologies by clicking on the Cookie Consent Tool in the lower right corner. In addition, you can refuse or accept cookies from our websites at any time by activating the settings on your browser. Information about the procedure to follow to enable or disable cookies can be found on your Internet browser provider's website via your help screen. Please refer to http://www.allaboutcookies.org/manage-cookies/index.html for information on commonly used browsers. Please be aware that if cookies are disabled, your experience on our sites may be diminished, and not all features may operate as intended.

We may also use technologies similar to cookies, such as:

Pixel Tags.

Learn More

Pixel tags (also known as web beacons and clear GIFs) are used to, among other things, track the actions of users of our Sites, measure the success of our marketing campaigns, and compile statistics about usage of the Site and response rates.
Adobe Flash.

Learn More

Flash Local Shared Objects (also known as Flash cookies) ("Flash LSOs") and other technologies are used to, among other things, collect and store information about your use of the Site. For your options with respect to Flash LSOs, please visit this page. Please note that setting the Flash player to restrict or limit acceptance of Flash LSOs may reduce or impede the functionality of some Flash applications.
Google Analytics.
Learn More
Google Analytics is a service provided by Google, Inc. ("Google"). We use Google Analytics to collect anonymized statistics to improve our Sites.
Learn more about Google Analytics and privacy. You can selectively disable Google Analytics by installing the opt-out component provided by Google on your browser. For more information, please refer to the links below:
Email tracking tools.

Learn More

Email tracking tools are used to, among other things, collect information about when you open emails and attachments, so that we can share content with you that you may find interesting or relevant.
Browser or Device Information.

Learn More

Certain information is collected by most browsers or automatically through your device, such as your Media Access Control (MAC) address, computer type (Windows or Mac), screen resolution, operating system name and version, device manufacturer and model, language, Internet browser type and version, and the name and version of the Site you are using. We use this information to ensure that our sites function properly.

To the extent any Personal Data is collected through cookies or similar technologies, the other sections of this Privacy Notice apply.

CROSS BORDER TRANSFERS

The Personal Data we collect about you may be stored and processed in any country where we have facilities or in which we engage service providers, including in the U.S. and where our affiliates operate for the purposes described above.

Learn More

Countries your data may be transferred to may not have laws that provide the same level of protection for your Personal Data as laws within the country in which you initially provided the information. Where this is the case, we will put appropriate safeguards in place to make sure that these transfers comply with applicable law, such as by ensuring that the recipient is bound by legally recognized Standard Contractual Clauses, to protect your Personal Data.

RETENTION PERIOD

We will retain your Personal Data for the time necessary for the purpose(s) for which it was obtained and as outlined in this Privacy Notice. The criteria used to determine our retention periods include:

The length of time we have an ongoing relationship with you;
Whether there is a legal obligation to which we are subject; and
Whether retention is advisable considering our legal position in, for example, the enforcement of applicable contractual agreements or statutes of limitations, litigation, or regulatory investigations.

INDIVIDUAL RIGHTS

Depending on where you live and subject to certain exceptions, you may have the right to exercise certain rights involving Personal Data we hold about you:

You can ask us for a copy of the Personal Data we hold about you.
You can inform us of any changes to your Personal Data, or you can ask us to correct any of the Personal Data we hold about you.
You can make a complaint to us if you have concerns about the way we have handled your Personal Data.
In certain situations, you can ask us to delete Personal Data we hold about you.
In certain situations, you can ask us to restrict the processing of the Personal Data we hold about you or object to particular ways in which we are using your Personal Data.
In certain situations, you can also ask us to send the Personal Data you've given us to a third party.

If you would like to request to access, correct, or delete Personal Data that you have provided to us, restrict/object to our processing of your Personal Data, make a complaint, or if you would like to request to receive an electronic copy of such Personal Data for purposes of transmitting it to another company, you may contact us as indicated in the Contact Us section or visit www.pfizer.com/individualrights. We will respond to your request consistent with applicable data protection law.

We will further verify and respond to your request consistent with applicable law, considering the type and sensitivity of the Personal Data subject to the request. We may need to request additional Personal Data from you, such as your date of birth or government identifier, to protect against fraudulent or spoofed requests. Please note that we may need to retain certain Personal Data for recordkeeping purposes or to complete any transactions that you began prior to requesting a change or deletion.

DATA SECURITY

We use organizational, technical, and administrative measures designed to protect your Personal Data from unauthorized access or use. No such measure is ever 100% effective though, so we do not guarantee that your Personal Data will be secure from theft, loss, or unauthorized access or use, and we make no representation as to the reasonableness, efficacy, or appropriateness of the measures we use to safeguard such data.

DATA OF MINORS

If you are under the age of eighteen (18), we will collect your Personal Data in accordance with permission granted by your parent or legal guardian or as otherwise permitted under applicable law. If you are providing us with Personal Data of individuals under the age of eighteen (18), you represent that you have the appropriate authority to do so, and that you can demonstrate such authority to Pfizer upon request.

UPDATES

From time to time, we will update this Privacy Notice. Any changes will become effective when we post the revised Privacy Notice. This Privacy Notice was last updated as of the "Last Updated" date shown above. We will notify you of substantial changes to this Privacy Notice as appropriate under applicable law.

CONTACT US

The data controller responsible for the processing of your Personal Data under this Privacy Notice is Pfizer Limited, Walton Oaks, Dorking Road, Tadworth, Surrey KT20 7NS.

If you have questions about this Privacy Notice, please contact us at DataProtectionUK@Pfizer.com. If you would like to request to exercise any individual rights, please contact us at the address above or visit www.pfizer.com/individualrights.

LODGING A COMPLAINT WITH A REGULATOR

You may lodge a complaint with the UK data protection authority at Information Commissioner's Office.

BACK TO TOP