Effective Date of this Privacy Notice: April 1, 2017.
Shire recognizes and respects the privacy rights of individuals with regards to their personal data. This Privacy Notice (“Notice”) explains what type of personal data we may collect from you and how we use it.
Your privacy is important to us. If you have any questions concerning Shire’s privacy practices or wish to access or correct personal data that Shire has collected from you, please contact us as described in the “How to Contact Us” section below.
Shire is a group of companies with operations globally. The Shire enterprise (“Shire”, “we”, “us”, “our”) includes the parent company, Shire plc, and its affiliated entities. For contact information related to your local affiliate, please refer to Shire’s website at http://www.shire.com/contact-us.
This Notice applies to Shire websites, social media pages, (mobile) applications, surveys, patient and healthcare professional support activities, as well as other Shire services that display or refer to this Notice (together “Services”). Any person accessing, browsing or otherwise using the Services, either manually or via an automated device or program, shall be considered a “User.”
Shire collects personal data to operate effectively and provide you with the best experiences from our Services. You may provide some of this data directly to Shire through registrations, applications and surveys, and in connection with your inquiries. For example, you may choose to provide your name and contact information, health, insurance and/or financial information in connection with a promotion, a patient assistance or support program or a clinical trial. Healthcare professionals may provide information related to their specialties and professional affiliations.
We also may receive data about you by tracking how you interact with our Services. For example, using technologies such as cookies (see also section on “Web technologies”).
Shire also obtains data from third parties (including other companies). For example, we may use such third-party data to confirm contact or financial information, to verify licensure of healthcare professionals or to better understand your interests by associating demographic information with other information you have provided.
Wherever required or appropriate, Shire will obtain consent for the processing of your personal data for the purposes outlined in this Notice and consistent with the terms and conditions herein.
The type of personal data we collect depends on the interactions you have with Shire and the Shire Services you use. These may include:
In some cases, we may augment the information we hold about you with information we receive from third-parties and with information which is publicly or commercially available and/or which is obtained by any other legal means.
For example, Shire may also collect information provided by you on message boards, chats, profile pages, blog pages, and other services to which you are able to post information and materials (including, without limitation, our Shire social media pages). Please note that any information you post or disclose through these services may become publicly available information to users of the service you provided it to, and to the general public. We urge you to be very careful when deciding to disclose your personal data, or any other information, in these forums, and to carefully review and familiarize yourself with applicable privacy settings and options.
Shire uses the personal data we collect for a number of basic purposes, described in more detail below: (1) for business operations (marketing and sales, research and development, patient support, donations and sponsorships, communications), (2) for business administration (finance and accounting, human resources, prevention and investigatory activities), (3) for business management (internal audit, asset management, system and business controls), and (4) as necessary to protect the health, safety, and security of Shire personnel and to comply with legal requirements and obligations.
We may use personal data:
We share your personal data, with your consent or as necessary, to complete any transaction or provide any service that you have requested or authorized. We also share data with Shire-controlled affiliates and subsidiaries; with vendors working on our behalf; when required by law or to respond to legal process; to protect our customers; to protect lives; to maintain the security of our Services; and to protect the rights or property of Shire.
We may disclose your personal data to affiliates and third parties as follows:
We may also disclose your personal data in the following circumstances:
We may also disclose aggregate or de-identified data that is not personally identifiable to third parties. Aggregate data is created by collecting and processing information about individuals and summarizing the data, eliminating the possibility to identify an individual.
We have implemented a variety of security technologies and organizational procedures to protect your personal data from unauthorized access, use and disclosure. For example, we store your personal data on computer systems that have various types of technical and physical access controls, such as encryption. Although Shire has implemented commercially reasonable data security controls consistent with industry standards, Shire cannot guarantee the security of your information. It is also important for you to remember to protect against unauthorized access to your password(s) and your computer, mobile devices, etc. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please notify us immediately as described in the “How to Contact Us” section below.
As Shire is a multi-national organization with locations in many countries around the world, your personal data may be stored and processed in any country where we have facilities or in which we engage service providers. Shire takes steps to process personal data according to the provisions of this Notice and the requirements of applicable law.
Shire may transfer personal data to countries outside of your country of residence. The laws of the receiving countries may not provide as stringent protections for personal data as your country of residence. In instances where a lesser level of protection is provided by a receiving country, Shire undertakes to enter into contractual agreements (e.g., European Union Standard Contractual Clauses), or relies on other available data transfer mechanisms that aim to provide adequate protections. A copy of the EU Standard Contractual Clauses boilerplate contracts may be found at: http://ec.europa.eu/justice/data-protection/international-transfers/transfer/.
Shire will retain your personal data for the period necessary to fulfill the purposes outlined in this Notice unless a longer retention period is required or permitted by law.
You have choices about the data we collect. When you are asked to share your personal data with Shire, you may decline; however, your choice not to share your personal data with Shire may mean you will not be able to use or (fully) benefit from our Services, features or offerings.
Shire respects your right to know and inquire about what personal data we have collected about you. In addition, you have the right to request correction or deletion of such personal data, as well as to request removal of your personal data held by third-parties with whom we conduct business. In addition, you may contact your jurisdiction’s legal authority overseeing implementation of data protection laws to file a complaint regarding the processing of your personal data.
If you would like to make a request for Shire to correct or delete personal data that you have provided to Shire, please contact us as described in the “How to Contact Us” section below, and we will respond in a reasonable time. We will make a good faith effort to provide you with access to your personal data and to correct any inaccuracies or delete such information at your request, if it is not otherwise required to be retained by law or for Shire’s legitimate business purposes. We may decline to process requests that are unreasonably repetitive or systematic, require disproportionate technical effort, jeopardize the privacy of others, or would be extremely impractical or for which access is not otherwise required. Before fulfilling your requests we may need to verify your identity.
While in some instances we may collect personal data about children with the consent of a parent or guardian for the provision of our Services such as clinical activities or for patient support programs, we do not otherwise knowingly solicit data from, or market to, children. If a parent or guardian becomes aware that his or her child has provided us with personal information, he or she should contact us as described in the “How to Contact Us” section below. We will take reasonable steps to delete such information from our database within a reasonable time.
In the event your personal data is accessed, lost, or stolen by an unauthorized third party, Shire will exercise commercially reasonable efforts to notify you to the extent required by law and disclose to you the personal data that was accessed/disclosed using the contact information provided to us or by other reasonable means.
You have a variety of tools to control cookies and similar technologies, including browser controls to block and delete cookies. Please look at your particular browser for instructions on these functions.
You may also wish to refer to http://www.allaboutcookies.org/manage-cookies/index.html.
Your browser settings and other tools to control cookies and similar technologies may impact your experience with our Services.
We use various types of cookies, as well as similar technologies such as Local Shared Objects (or “Flash Cookies”) and web beacons (also called single-pixel tags) to identify your IP address, browser type, device characteristics, domain name, referring URLs and specific links and web pages through which you click. This data is collected automatically and is used for purposes as mentioned above. This technology also allows us to recognize you when you return to this Site and to provide you with a customized experience that we feel will be of value to you.
In addition, Shire uses web analytics services (e.g. Google Analytics) to collect website analytics. The information generated about website usage (including your shortened IP address) is transmitted to these web analytics services. This information is used to evaluate visitors’ use of the domain, compile statistical reports on website activity, and provide other services related to the site and internet use activity.
Furthermore, we may partner with third-party service providers to serve ads regarding goods or services that may be of interest to you when you access and use our Services and third party-sites. Some of the ads on our Services or on third party sites may be personalized, meaning that they are intended to be relevant to you based on what we, or the online advertising network serving the ad, know about you or your computer’s browsing activity on both the Service and third-party sites. To do so, these companies may place or recognize a unique cookie on your browser (including through the use of pixel tags).
The Network Advertising Initiative (NAI) offers useful information about internet advertising companies, including information about how to opt-out of interest-based advertising by their members. See http://www.networkadvertising.org for general information about the NAI and
http://www.networkadvertising.org/managing/opt_out.asp for the opt-out page. You may also visit http://www.aboutads.info/consumers to learn about interest-based advertising and how to opt-out from ads served by some or all participating companies.
These opt-out mechanisms rely on cookies to remember your choices. If you delete your cookies, use another computer or device, or change browsers, you will need to repeat this process. In addition, opting out of interest-based ads will not opt you out of all ads, but rather only those ads that are personalized to your interests.
Generally, social networks are interactive tools that enable you to collaborate and share information. Shire may collect certain personal data from you to enable you to use online social network features. Shire may also use these tools to post or share personal data with others. When using social networks, you should be very vigilant about what personal data you choose to share with others. Shire provides notices and choices about how personal data is collected, used and disclosed on its website, social networks and other Services. When engaging in social network activities, you should not post information about third parties without their consent.
In the event of an incident or security breach resulting in your personally identifiable information being accessed, lost, or stolen by an unauthorized third party, Shire will exercise commercially reasonable efforts to (i) notify you to the extent required by law; and (ii) identify the personally identifiable information that was accessed/disclosed using the contact information you have provided to us or by any other reasonable means.
Shire welcomes any questions or comments you may have regarding this Notice or its implementation. Any such questions or comments should be submitted using the contact information below. We will use reasonable efforts to resolve or address your concern. Please note that email communications are not always secure, so please do not include credit card information or other sensitive information in your emails to us.
Head of Privacy,
300 Shire Way,
Lexington, MA 02421,
Tel: +1 (781) 482-9500 Shire Privacy Connect Line
Shire may update this Notice from time to time. Please check this Notice periodically for changes. If we make any changes, the updated Notice will be posted with a revised effective date. We encourage you to periodically review this page for the latest information on our privacy practices.
Your continued use of our Services following the posting of changes to the Notice will mean you accept those changes.
*Shire is now part of Takeda