Last updated: February 2025
1. Introduction
Your privacy is important to us at Intellia Therapeutics, Inc. (“Intellia”, “we” or “us”). For this reason, we want you to be familiar with how we collect, use, and disclose your Personal Information. As used in this Privacy Policy, “Personal Information” means any information that is capable of directly or indirectly identifying a natural person or that otherwise relates to an identified or identifiable natural person.
This Privacy Policy describes our practices with respect to the Personal Information collected through the use of our website, intelliatx.com (the “Website”), from and about our Website users (“you”, “your” or “users”), other than Personal Information submitted by users in the course of applying for employment using our online employment application process (including through the use of our “Careers” page chatbot), which is governed by separate Intellia policies. This Privacy Policy does not apply to our collection, use, or disclosure of information (including Personal Information) gathered through other means or in other contexts. We may revise this Privacy Policy periodically, and any such revisions will be reflected by the effective date above. Please revisit this page to stay aware of any changes. Additionally, this Privacy Policy may be supplemented or amended from time to time by other notices posted elsewhere, including on specific pages of our Website. By using the Website, you acknowledge that you have read and understand the terms of this Privacy Policy.
California residents, and residents of the United Kingdom, Switzerland, or the European Economic Area, should review the additional information applicable to them below in Sections 9 and 10, respectively.
2. Collection and Use of Personal Information.
The following types of Personal Information may be collected from or about users of our Website.
- Personal Information You Provide.
Contact Information: If you request information from us or otherwise contact us using a Website webform, you may provide Personal Information in connection with such request or contact, such as your name, phone number, email address, postal address, country of residence, and any messages you send us (“Contact Information”), which we collect so that we can receive, reply to, or otherwise fulfill your request.
- Automatically Collected Information.
Usage Information: Like most websites, our Website uses cookies and similar technologies to collect information related to your use of the Website. We refer to technologies collectively as “cookies”. The cookies used by our Website may include both first-party cookies (cookies set by us on our Website) and third-party cookies (cookies set by other parties on our Website). We use cookies in order to make the Website function, and function more efficiently, as well as to make the Website content more relevant to our users, for advertising purposes, and to provide us with information about the usage of the Website. The information collected by cookies may include technical information such as your IP address, browser or device settings and preferences, unique browser or device identifiers, browsing and search activity, and non-precise geolocation information (“Usage Information”). In many cases, this information is stored on “session” cookies, which are deleted as soon as you close your browser. In other cases, the information is stored on “persistent” cookies, some of which expire automatically after a certain period of time, and all of which you can delete via your browser settings at any time. Please see our Cookie Policy for more information about the cookies that may be used on the Website, the retention periods applicable to this information, and how to manage your cookie preferences.
We may also use Google Analytics, which uses cookies to collect and analyze information about use of our Website and report on activities and trends. This service may also collect information regarding the use of other websites, software applications (or “apps”), and other online resources. You can learn about Google’s practices by visiting this link, and opt-out of Google Analytics cookies by downloading the Google Analytics opt-out browser add-on, available at this link.
- Aggregated or Deidentified Information.
We may aggregate or de-identify your Personal Information (so that it can no longer be reasonably associated with you) for research, statistical, or other purposes, at which time it is no longer considered Personal Information.
3. Sharing of Personal Information with Third Parties.
We may share your Personal Information with our third-party service providers, such as those who provide email and web-hosting services, and those who assist us in operating the Website and our business more generally.
We may also disclose your Personal Information to any institution, government, court, agency or authority (including law enforcement agencies) to whom we are required to disclose it by law, or as necessary to protect our legal rights or the rights of others, or to prevent harm, or to any subsidiaries or other affiliates, or to our business partners, or to a buyer or other successor in the event that we are acquired, merge with another entity or sell portions of our assets.
Finally, we may disclose your Personal Information to other third parties at your direction, with your consent, or otherwise as necessary to fulfill your requests.
4. Minimization and Retention of Personal Information.
To determine the appropriate retention period for Personal Information, we may consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, and applicable legal requirements.
5. Your Choices and Rights.
You can contact us at any time using the contact information listed in Section 8 (Contact Us) to request we do any of the following: (i) erase or delete all or some of your Personal Information; (ii) change, update, or correct your Personal Information; (iii) restrict how we use all or some of your Personal Information; (iv) access your Personal Information and, where applicable and feasible, request to receive that Personal Information in a commonly used electronic format (or ask for this information to be provided in that format to a third party); or (v) disclose what Personal Information we collect, use, or disclose. We will consider and respond to any such requests promptly, and otherwise in accordance with applicable laws. Although we use good faith efforts to respond to your request, we may not be able to provide or correct the requested Personal Information in all situations. For example, we may not be able to provide the Personal Information requested if it imposes an undue burden or expense, requires us to release confidential information, requires the disclosure of Personal Information relating to another person, requires authentication of the request that is not feasible, or is legally impermissible.
You can also adjust your cookie preferences at any time by visiting our Cookie Policy and clicking the “Change your consent” link.
6. Children.
Intellia does not knowingly collect Personal Information from children under the age of 16. If we learn that we have collected Personal Information from children under the age of 16 then, unless we obtain parental consent to use or maintain that information, we will delete it.
7. Links to Other Websites.
This Website may, from time to time, contain links to websites owned and operated by third parties (“Third Party Sites”). We encourage you to review the privacy policies of such Third Party Sites so that you understand how those websites collect, use, and share your information. We are not responsible for the privacy policies or other content on Third Party Sites.
Likewise, this Privacy Policy does not cover the privacy practices of social media platforms on which Intellia has social media pages. Please review the terms, policies, and settings of those social media platforms if you have questions about how they collect and use your data.
8. Contact Us.
If you have any questions about this Privacy Policy, please contact us by phone at +1 857-285-6200, email us at privacy@intelliatx.com, or send a written request to Intellia Therapeutics, Inc., 40 Erie Street, Cambridge, MA 02139, Attn: General Counsel (Website Privacy Policy).
9. Additional Information for California Residents.
If you are a resident of California, this notice applies to you and supplements Intellia’s Website Privacy Policy. This notice is intended to provide certain information to you as required by the California Consumer Privacy Act of 2018 (as amended and together with all implementing regulations, the “CCPA”). Please note: this notice does not apply to Personal Information submitted by you in the course of applying for employment using our online application process, which is governed by our Employee-Applicant CCPA Notice.
Certain terms used in this Section 9 have the meanings given to them in the CCPA, including “consumer”; “personal information”; “sensitive personal information”; “sale,” “sell,” and “sold”; “share”; “business purpose” and “commercial purpose”; and “cross-context behavioral advertising”.
- Categories of personal information Intellia may collect from or about consumer Website users:
- Identifiers (e.g., name, mailing address, email address, phone number, online identifiers)
- Internet or other electronic network activity (e.g., IP address, device information, browsing history, search history, and information regarding a user’s interaction with the Website)
- Inferences drawn from the information identified above (e.g., geolocation information inferred from an IP address)
- Categories of sources from which Intellia collects personal information about consumer Website users:
- From the consumer directly
- From advertising networks
- From data analytics providers
- From operating systems and platforms
- Business or commercial purposes for which Intellia collects, shares (for purposes of cross-context behavioral advertising), or sells personal information about consumer Website users:
- Performing consumer support services, including maintaining or servicing accounts, responding to consumer inquiries, verifying consumer information;
- Advertising and marketing purposes;
- Helping to ensure security and integrity and prevent fraud;
- Undertaking activities to verify or maintain the quality or safety of our online services or devices and to improve, upgrade, or enhance them;
- Debugging to identify and repairCorrection of “misspelled” disease-driving DNA sequence using a CRISPR/Cas9-based gene editing therapy. errors;
- To conduct business analysis, such as analytics, projections, identifying areas for operational improvement;
- To conduct research and development, including undertaking internal research for technological development and demonstration; and
- To fulfill our legal function or obligations
Intellia does not collect or process sensitive personal information in connection with its operation of the Website.
To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.
- Retention of personal information. Please see Section 4 (Minimization and Retention of Personal Information) above.
- Categories of personal information about Website users that Intellia may sell or share (for cross-context behavioral advertising purposes) and categories of third parties to whom such personal information may be sold or shared (for cross-context behavioral advertising):
Intellia does not have actual knowledge that it sells or shares (for cross-context behavioral advertising purposes) the personal information of minors under the age of 16.Category of Personal Information Category of Third Party Internet or other electronic network activity (i.e., Usage Information as described in Section 2 above) - Advertising networks
- Data analytics providers
- Categories of personal information Intellia may disclose for a business purpose and categories of third parties to whom such personal information may be disclosed for a business purpose:
Category of Personal Information Category of Third Party Identifiers (e.g., name, mailing address, email address, phone number) - Internet service providers
- Data analytics providers
- Operating systems and platforms service providers
- Legal, risk, and security service providers
- Advertising and marketing service providers
Internet or other electronic network activity (i.e., Usage Information as described in Section 2 above) - Advertising networks
- Data analytics providers
- Legal, risk, and security service providers
We may disclose your personal information to third parties at your direction or request, or when you otherwise consent to such disclosure.
- Non-discrimination. We will not discriminate against you for exercising your rights. This generally means we will not deny goods or services, charge different prices or rates, provide a different level of service or quality of goods, suggest that a consumer might receive a different price or level of quality for goods, nor will we retaliate against an employee, applicant for employment, or independent contractor.
- Your Rights. Under the CCPA, consumers have the right to request that Intellia:
- provide access to the specific pieces of personal information, or categories of personal information, it collects, uses, discloses, and sells or shares (for cross-context behavioral advertising purpose), and certain details about that personal information;
- correct inaccurate personal information we maintain about you;
- delete personal information we have collected from you; and
- opt you out of the sale of your personal information or sharing of your personal information (for cross-context behavioral advertising purposes).
- How to Exercise Your Rights.
To opt out of the sale and sharing of your personal information, please visit our Cookie Policy, click the link that says “Change Your Consent,” and change your preferences by unchecking the boxes indicating cookies that are not strictly necessary. We also support your use of the Global Privacy Control (GPC). If you notify us of your privacy preferences through GPC, we will honor your request with respect to the browser or device that sends us the GPC signal. To submit a request to Intellia to exercise any of your rights to access, correct, or delete your personal information, please email us at privacy@intelliatx.com with the words “CCPA Privacy Request” in the subject line, or mail a written request to our postal address provided in Section 8 (Contact Us) . To ensure we can verify your identity and to help us respond to your request, please include in your submission your full name, telephone number, and your email and home addresses, and clearly state the request you would like to make. We will evaluate the request and take action where required to do so. Depending on the nature of your request, we may have to verify your identity when you contact us. We do this by attempting to match the identifying information that you provide to the personal information maintained by Intellia, if any. We endeavor to respond to your request as soon as we can. If we are not able to respond to your request within 45 days, we will let you know that we may require additional time (up to 90 total days).
You may also use an authorized agent to exercise your rights on your behalf. If you wish to use an authorized agent, we require that your authorized agent provides written proof to us that they are authorized to act on your behalf, and we may also require your authorized agent to verify their own identity.
Please note that we may not be able to respond to your request if we cannot verify your identity, or your agent’s identity and authority to make the request, and confirm that the personal information relates to you. Furthermore, the CCPA or other applicable laws may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions.
10. Additional Information for European Residents.
If you are resident of the United Kingdom (“UK”), Switzerland, or the European Economic Area (EEA), this notice applies to you and supplements Intellia’s Website Privacy Policy. This notice is intended to provide certain information to you as required by the General Data Protection Regulation (“GDPR”) and the UK’s GDPR (“UK GDPR”).
For purposes of this Section 10, references to “Personal Information” in this Privacy Policy include “personal data” governed by UK, Swiss, and European data protection legislation. For information about Intellia’s collection, use, and disclosure of your Personal Information, please see the “Collection and Use of Personal Information” and “Sharing or Personal Information with Third Parties” sections above.
- Lawful Bases for Processing Personal Information
Intellia is the controller of your Personal Information for purposes of UK, Swiss, and European data protection legislation. We only use your Personal Information as permitted by law. The lawful bases that apply to our use of your Personal Information are as follows:
- Where we need to perform the contract that we are about to enter into or have entered into with you.
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- With your consent.
- Where we need to comply with a legal or regulatory obligation.
- Transferring Personal Information from the EEA to the US
Intellia is located in the United States. Personal Information we collect from you will be processed in the United States, and by using the Website you acknowledge and consent to the processing of your Personal Information in the United States. The United States has not sought nor received a finding of “adequacy” from the European Union under Article 41 of the GDPR. Intellia relies on derogations for specific situations as set forth in Article 44 of the GDPR. In particular, we collect and transfer to the U.S. Personal Information only: with your consent; to perform a contract with you; or to fulfill a compelling legitimate interest of Intellia in a manner that does not outweigh your rights and freedoms.
- Your Rights
As an UK, Swiss, or EEA resident, you have certain rights regarding the protection of your Personal Information. You may ask us to take the following actions in relation to your Personal Information that we hold:
- The right to opt-out. You have the right to request us to stop sending you direct marketing communications. You may continue to receive service-related and other non-marketing emails.
- The right of access. You have the right to request us to provide you access to your Personal Information.
- The right to rectification. You have the right to request that we update or correct inaccuracies in your Personal Information. You also have the right to request us to complete information you believe is incomplete.
- The right to erasure. You have the right to request that we delete your Personal Information, under certain conditions.
- The right to restrict processing. You have the right to request that we restrict the processing of your Personal Information, under certain conditions.
- The right to object to processing. You have the right to object to our processing of your Personal Information, under certain conditions.
- The right to data portability. You have the right to request that we transfer a machine-readable copy of your Personal Information to you or a third party of your choice, under certain conditions.
To submit a request to Intellia to exercise any of your rights, please email us at privacy@intelliatx.com with the words “GDPR Privacy Request” in the subject line, or mail a written request to our postal address provided in Section 8 (Contact Us) above. We may request specific information from you to help us confirm your identity and process your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions. If you would like to submit a complaint about our use of your Personal Information or response to your requests regarding your Personal Information, you may contact us as described below or submit a complaint to the data protection authority in your jurisdiction. You can find your data protection authority:
