Privacy Policy

Last updated September 13, 2024

This privacy policy (“Policy”) explains how Neogen Corporation and our affiliates (collectively, “Neogen”, “we”, “us” or “our”) collects, stores, uses, and discloses personal data about you, how we use it, how and when it may be shared, the rights and choices you have with respect to your personal data, how we communicate with you and how you can make requests or submit inquiries to us about your personal data.

• What Does This Policy Cover
• How Is This Policy Updated
• Information We Collect
• How We Use Your Personal Data
• Disclosure of Personal Data
• How We Protect Your Personal Data
• Cookies and Other Information Collection Tools
• Social Media and Other Third-Party Links and Services
• Retention of Personal Data
• Your Privacy Rights and Choices
• Children's Privacy
• International Data Transfers
• Contact Us
• Region Specific Terms

What Does This Policy Cover

This Policy applies to personal data we collect both online and offline, including personal data we collect through our websites (collectively the “Sites”) in connection with products and services we provide you that reference this Policy (and together with the Sites, the “Services”), and any other interactions you may have with us including at or through conferences, events, electronic newsletters or communications, or job postings and applications. This Policy does not apply to any products, services, websites, or content that are offered by third parties or have their own privacy policy.

In this Policy, “personal data” means any information that identifies, relates to, describes, is reasonably capable of being associated with or reasonably can be used to identify an individual or household and other data that is linked to personal data or is otherwise defined as “personal data,” “personal information,” or “personally identifiable information” by applicable laws.

How Is This Policy Updated

We may modify this Policy from time to time. If we make changes, we will revise the “Last Updated” date at the top of the Policy on our Sites and use reasonable efforts to provide you additional notification by sending you an email notification. We encourage you to review this Policy each time you visit our Sites to stay informed of our privacy practices and the choices available to you.

Information We Collect

The personal data we collect about you depends on how you interact with us or use our Services. We describe below the categories of personal data we collect and the sources of this information.

Information You Provide To Us

We collect personal data from you when you use our Services to participate in any interactive features of the Services, send us an email, fill out a form, subscribe to our newsletter, respond to a survey or job posting, interact with us on social media, or otherwise communicate with us.

Types of personal data we may collect include:

• Contact information such as your name, email address, telephone number, and mailing address;
• Government-issued identification such as social security number, driver’s license, or state-issued identification number;
• Payment Information such as your credit card or bank account number, which we may share with third-party payment processors as described in this Policy;
• Communications with us including through our online chat service, feedback, and survey responses;
• Job Application and Employment Information such as employment history, medical, health and disability information, passport information, and emergency contact information;
• Social and community content such as posts, photos, videos, or audio files that you may provide through our social media pages and our community pages; and
• Any additional Information that you choose to provide.

In some cases, we may also collect information you provide about others, such as when you are the administrator for your company’s account and you provide information about other personnel at your company. We will use this information to fulfill your requests and will not send communications to your contacts unrelated to your requests unless they separately create an account, engage with us or consent to receive communications from us.

Information Collected Automatically When You Interact With Us

We and our service providers may automatically log personal data about you, your computer or mobile device, and your interaction over time with the Services, such as:

• Device information. We may collect information about your device(s) such as Internet Protocol ("IP”) addresses, browser type, domain names, access times, log information, error messages, device type, unique device identifiers, and other technical information such as protocol status and substatus, bytes sent and received and server information.
• Transaction Information. We may collect information when you conduct transactions through our Site or otherwise purchase Services from us.
• Usage information. We may collect information about your use of the Services, such as the pages you viewed, the Services you used or interacted with, referring website addresses and details about any links or communications with which you interacted.
• Information Collected by Cookies and Other Tracking Technologies. Please see our cookie policy in the section “Cookies and Other Information Collection Tools” for more details on the information we and our service providers collect about you.

Information We Collect From Other Sources

We may also collect personal data about you from other sources, including publicly available databases, and combine that with information we collect through the Services. For example, we may use information from LinkedIn to update information about you in our contact database and we may use a third party to recruit talent to fill any of our employment opportunities.

Information We Infer or Derive

We may derive information or draw inferences about you based on the personal data we collect or have otherwise received about you. For example, we may infer your location based on your IP address, or that you are interested in participating in an event based on your browsing behavior on our Site.

How We Use Your Personal Data

Depending on how you interact with us and the Services you or your organization utilize, we use your personal data to:

• Provide and Improve Products and Services. Provide, activate, operate, maintain, develop, enhance, improve, and manage our Services and your accounts on our Services, monitor and analyze trends, usage, and activities, and to perform services requested by you.
• Respond to You. Provide technical, product and other support and respond to your requests, inquiries, comments and concerns.
• Service Communications. Notify you about changes, updates and other announcements related to our Services and send you technical notices, updates, security alerts, support messages, and other transactional or relationship messages.
• Personalize Your Experience. Customize our product offerings and present you with tailored content, and otherwise personalize your experience while using our Services;
• Employment Purposes. Communicate with you about job postings and other opportunities that may interest you, assess job applications, and make hiring decisions;
• Safety and Security. For safety and security, including to detect and protect against fraud or illegal activities, security incidents, and harm to rights, property or safety of Neogen, our users or others;
• Events and Offers. To facilitate events, contests, promotions and sweepstakes, and process and deliver entries, rewards, and prizes;
• Advertising and Marketing. To provide you with advertising, promotional messages and other information about products, events and services of ours, our affiliates and third parties, such as event sponsors;
• Research and Development. To conduct research and development and develop new products and services;
• Corporate Transactions. We process personal data in the in the context of a merger, sale of our assets, financing or acquisition of all or a portion of our business to another company, or other corporate transactions;
• Comply with Legal and Financial Obligations. To comply with our legal and financial obligations, resolve disputes, enforce our agreements, and exercise our legal rights;
• Your Consent. We may process your personal data in accordance with your consent or when you intentionally direct or instruct us to do so; and
• Other Notified Purposes. Carry out any other purpose conveyed to you at the time the information was collected.

Disclosure of Personal Data

We may disclose your personal data as follows or as otherwise described in this Policy:

• Affiliates and Subsidiaries. We disclose your personal data to our affiliates and other organizations under common control for the purposes described in this Policy;
• Third Parties You Intentionally Interact With. We disclose your personal data to third parties when you use our Services to intentionally interact with those third parties or direct us to interact with those third parties;
• Vendors and Service Providers. We disclose your personal data to our vendors and service providers to perform the functions for which we engage them;
• Corporate Transactions. We disclose your personal data as part of, in connection with, or during negotiations of, any merger, sale of our assets, financing or acquisition of all or a portion of our business to another company, or other corporate transactions;
• Analytics Providers. We disclose personal data to our analytics partners, such as Google Analytics (you can read more about our use of Google Analytics in the Cookies and Other Information Collection Tools section above);
• Professional Advisors. We disclose your personal data to our professional advisors like our lawyers, accountants, financial, insurance and other advisors in connection with the management of all or a part of our business or operations;
• Third-Party Partners. We disclose your personal data to unaffiliated third party companies or individuals we partner with to provide certain products, services, or experiences to you;
• Aggregated, Anonymized, or De-Identified. We disclose aggregated, anonymized, or de-identified information, which cannot reasonably be used to identify you;
• Law Enforcement and Individuals Involved in Legal Proceedings. We disclose your personal data when we believe doing so is reasonably necessary to comply with applicable law or legal process or other legal reasons, including:
• When we reasonably believe disclosure is required to comply with a subpoena, court order, or other applicable law, regulation or legal process;
• To enforce, remedy, or apply our agreements and contractual rights;
• To protect our property or protect the rights, property or safety of others;
• To support external auditing, compliance and corporate governance functions; and
• To prevent, detect, and remedy fraud, cybersecurity attacks or illegal activity.
• With your Consent or Direction. We disclose personal data with your consent or at your direction, including if we notify you that your personal data will be shared in a particular manner and you provide such personal data.

We do not share your personal data with third parties for those third parties’ direct marketing purposes.

How We Protect Your Personal Data

We implement commercially reasonable physical, technical and procedural measures to help protect personal data from unauthorized access or use; however, the transmission of information via the internet is not completely secure or private. If you have questions about the security of personal data we collect, please contact us using the information provided below.

Cookies and Other Information Collection Tools

What are cookies? A cookie is a small file containing a string of characters that is sent to your computer when you visit a website or use an online service. When you visit the website or use the online service again, the cookie allows that website or online service to recognize your browser or device. Cookies may store unique identifiers, user preferences and other information.

The type of cookies we may use include:

• Necessary Cookies. These cookies are strictly necessary to make our Services function properly. These cookies ensure basic functionalities and security features of the Sites.
• Function Cookies. Functional cookies help to perform certain functionalities like sharing the content of the Sites on social media platforms, collect feedback, and other third-party features.
• Performance Cookies. Performance cookies are used to understand and analyze the key performance indexes of the Sites which helps in delivering a better user experience for the visitors.
• Analytics Cookies. Analytical cookies are used to understand how visitors interact with the Sites. These cookies help provide information on metrics, the number of visitors, bounce rate, traffic source, etc.
• Advertisement. Advertisement cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies track visitors across websites and collect information to provide customized ads.

For more information on the Cookies we use or your choices related to them, please visit our Cookie Statement.

Duration of Cookies. We may use “session cookies” or “persistent cookies.” Session cookies are temporary and expire once you close your browser or once your session ends. Persistent cookies remain on your device for much longer or until you or your browser erases them. Persistent cookies have varying durations that are dependent on their expiration date.

Why do we use them? We use cookies to collect information about you so we can provide the experiences you request, recognize your visit, track your interactions, improve your experience and detect and prevent fraud.

How do I control cookies? Web browsers allow some control of most cookies through the browser settings. Most mobile devices also offer settings to reject mobile device identifiers. Although users are not required to accept cookies or mobile device identifiers, blocking or rejecting them may prevent access to some features available through the Services or impair the functionality of the Services.

To find out more about cookies, including how to manage and delete cookies, visit www.aboutads.info/choices. You can also opt-out of interest based advertising from participating members by visiting http://www.networkadvertising.org/choices/. For individuals in the EEA, please visit www.youronlinechoices.eu and for individuals in Canada, please visit https://youradchoices.ca.

Where required by applicable law, we obtain your consent prior to placing or using optional cookies that are not (i) strictly necessary to provide the Site or the Services e.g., Necessary Cookies; or (ii) for the purpose of facilitating a communication.

Social Media and Other Third-Party Links and Services

Occasionally, at our discretion, we may include or offer third party products or services on our Sites or links to other websites. The privacy practices of these third parties will be governed by the parties’ own privacy notices. We are not responsible for the security or privacy of any information collected by these third parties. You should review the privacy notices or policies applicable to these third party products and/or services. We have no responsibility or liability for the content and activities of these linked websites or the services they provide.

Some aspects of the Site may allow you to interface with social media services such as Facebook, LinkedIn, and X (formerly known as Twitter®). By using these interfaces, you will allow us to access information about you from those social media services, including information and other content that you submit to those social media services. For a description on how such social media services and other third-party platforms, plug-ins, integrations, and applications handle your information, please refer to their respective privacy policies and terms of use, which may permit you to modify your privacy settings with that service or platform.

Reention of Personal Data

We will retain your personal data for as long as is necessary to fulfil the purpose for which this data was collected and for the business purposes explained in this Policy. Even after we stop providing Services directly to you, and even if you close your account, we may retain your personal data:

• to comply with our legal and regulatory obligations.
• to protect against fraudulent or abusive activity on our Service.
• to exercise, establish or defend legal claims.

In cases where we keep personal data, we do so in accordance with any limitation periods and records retention obligations that are imposed by applicable law.

Your Privacy Rights and Choices

Consistent with applicable law, you may exercise the rights described in this section. Please note that the rights may vary depending on your country or state of residence. Please see the Region Specific Terms section below. To exercise your data protection rights please contact us as listed below.

While it is our policy to respect the rights of individuals, please be aware that your exercise of these rights is subject to certain exemptions and exceptions, and some of these rights might be limited (for example the right to withdraw consent) where we are required or permitted by law to continue processing your personal data to deliver services to you, defend our rights or meet our legal and regulatory obligations.

If you contact us to exercise any of these rights, please note that we may only implement requests with respect to the personal data associated with you as an individual. We may need to verify your identity before implementing your request and will try to comply with your request as soon as reasonably practicable and in accordance with the timelines required under applicable law. If we cannot verify your identity or your ownership rights to the data, we may not be able to service your request until you provide proper documentation.

Opt Out of Direct Marketing

You may opt out of receiving direct marketing communications from us by following the unsubscribe instructions at the bottom of each email.

Please note that there are certain communications we are required to send you that relate to the Services we are providing to you or the organization you represent that you may not be able to opt out of (e.g., support and important legal notices).

If you are receiving communications from us as part of a larger corporate email group within your own organization (e.g., info@abccorp.com), we will not have control over your individual personal data and will not be able to process your request.

Access, Correct or Delete your Personal Data

You may have the right to request access to and receive details about the personal data we maintain about you and how we process it, correct inaccuracies, or request that we delete your personal data by contacting us as indicated below.

Withdraw Consent

Where you have provided your consent for us to use your personal data and subject to applicable law, you have the right to withdraw your consent and we will apply that preference going forward.

Additional Rights

Depending on your location and subject to applicable law, you may have the following additional rights regarding the personal data we control about you:

• The right to request confirmation of whether we process personal data relating to you, and if so, to request a copy of that personal data;
• The right to request that we restrict the use of your personal data in certain circumstances, such as while we consider another request that you have submitted (including a request that we make an update to your personal data);
• The right to request that we export your personal data that we hold to another company or organization, where technically feasible;
• Where we process your personal data based on our legitimate interests, you may also have the right to object to the processing of your personal data. Unless we have compelling legitimate grounds or where it is needed for legal reasons, we will cease processing your personal data when you object;
• The right not to be discriminated against for exercising these rights; and/or
• The right to appeal any decision by us relating to these rights.

Children's Privacy

Our Services are not aimed at children under the age of 18 or the age defined under applicable law. We do not knowingly collect information from children under the age of 18 or the age defined under applicable law.

International Data Transfers

We may process and store your personal data in the United States and other countries which may have less-protective data protection laws than the region in which you are situated. Please note that this processing, including storage, may involve cross-border transfers of your personal data. In certain situations, we may be required to disclose personal data in response to lawful requests from officials (such as law enforcement or security authorities).

Where applicable law requires a data transfer mechanism, we use one or more of the following:

• Transfers to certain countries or recipients that are recognized as having an adequate level of protection for personal data under applicable law;
• EU Standard Contractual Clauses approved by the European Commission and the UK International Data Transfer Addendum issued by the Information Commissioner’s Office;
• or other legal methods available to us under applicable law.

Contact Us

You may contact us using the information below.

Neogen Corporation
620 Lesher Place
Lansing, MI 48912 USA
Attn: Webmaster
e-mail: NeogenPrivacy@Neogen.com

Additional Information for Residents of the EEA, UK and Switzerland

If you are a resident of the European Economic Area (“EEA”), Switzerland or the United Kingdom, you may have certain rights and protections under applicable law regarding the processing of your personal data. In the event of a conflict between the rest of our Policy, this Additional Information for Residents of the EEA, UK and Switzerland notice will prevail as to data subjects and their rights under the applicable privacy law.

Legal Basis of Processing

When we process your personal data as described in this Policy, we are required to have a legal basis to do so. The legal bases we use are as outlined below:

• Processing on the basis of performance of a contract: where your information is necessary to enter into or perform our contract with you or the organization you represent;
• Processing data on the basis of consent: where you have given us consent for us to process your personal data for a specific purpose. When processing is based on consent, you have the right to revoke such consent at any time;
• Processing data on the basis of our legitimate interests: where we use your information to achieve a legitimate interest, including providing, improving and maintaining our Services, communicating with our current and prospective customers, suppliers and partners, managing our relationships with our customers, vendors and partners, sharing your personal data with our affiliates as well as service providers and vendors, and developing new Services; and
• Processing data because we have a legal obligation to do so: We process your personal data when it is necessary for us to defend a claim or resolve a dispute or when we need to use your personal data to comply with our legal obligations, including payment of taxes, responding to law enforcement agencies and other governmental bodies (when required by applicable law), retaining business records required to be retained under applicable law, and copying with court orders and other legal process.

If you have a concern about our processing of personal data that we are not able to resolve, you have the right to lodge a complaint with the data privacy authority where you reside. For contact details of your local Data Protection Authority, please see:

For individuals in the EEA: https://edpb.europa.eu/about-edpb/board/members_en
For individuals in the UK: https://ico.org.uk/global/contact-us/
For individuals in Switzerland: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact.html

Additional Information for Residents of California, Colorado, Connecticut, Utah and Virginia

If you are a “consumer” as defined under privacy laws in California, Colorado, Connecticut, Utah and Virginia, you may have certain rights and protections under applicable law regarding the processing of your personal data. In the event of a conflict between the rest of our Policy, this Additional Information for Residents of California, Colorado, Connecticut, Utah and Virginia notice will prevail as to Consumers and their rights under the applicable state privacy law.

We do not “sell” or “share” your personal data (as these terms are defined under U.S. state privacy laws), except with respect to the potential limited data processing activities on the web and internet sites for online advertising and marketing. Where such sale or sharing occurs, Neogen will post “Do Not Sell or Share My Personal Information” links on homepages and provide appropriate means for users to opt-out of such sale. We also do not knowingly “sell” or “share” personal data about consumers under the age of 16.

We do not use or disclose “sensitive personal information” for the purposes of inferring any characteristics about you.

Some U.S. state privacy laws require a description of data practices using specific categories. The table below uses these categories to organize the information in this Policy. In the last 12 months, we collected and disclosed the following categories of personal data from the categories of sources listed in this Policy for business or commercial purposes.

For more detailed information about the categories of sources, categories of personal data we collect, and the business or commercial purposes for collecting your personal data, please review the Information We Collect, How Do We Use Your Personal Data and Disclosure of Personal Data sections above.

Retention

We store personal data associated with your account for as long as your account remains active or as long as you are using our Services. If you close your account or stop using our Services, we will delete your account data; otherwise, we will delete your account data after a period of inactivity. We store other personal data for as long as necessary to carry out the purposes for which we originally collected it and for other business purposes explained in this Policy.

Personal data that we “Share,” “Sell,” or Use for “Targeted Advertising”

We disclose the following categories of personal data to third parties for the purpose of engaging in targeted advertising and other marketing activities, including to expand the reach and effectiveness of our own marketing campaigns [and for the third parties’ own marketing purposes]. These activities are considered “sales,” “sharing,” or “targeted advertising” under certain state laws and you have the right to opt out of having your personal data used or disclosed for these purposes. See below for details about opting out.

Your Additional Privacy Rights

Under certain circumstances and in accordance with applicable privacy laws, you may have the following additional rights:

• Opting Out of Sales, Sharing, and Targeted Advertising. As described above, you have the right to opt out of having your personal data sold, shared, or used for targeted advertising. You may opt out by following the prompts here. You may opt out of sales, sharing, or targeted advertising associated with your email address, or other information we may disclose to our advertising or other partners so they can show you ads that are more relevant to your interests, by visiting this form and submitting the required information. If you are a resident of California, you can also opt out by visiting our Services with a legally recognized opt-out preference signal enabled, such as the Global Privacy Control.
• Nondiscrimination. We will not discriminate against you for exercising your privacy rights.
• Authorized Agent. If you reside in California, Colorado, or Connecticut, you can designate an authorized agent to submit a privacy rights request on your behalf. We may ask authorized agents to submit proof of their authority to make a request, such as a valid power of attorney or proof that they have signed permission from the consumer who is the subject of the request. In some cases, we may be required to contact the consumer to verify his or her identity or confirm the authorized agent has permission to submit the request. Authorized agents can submit rights requests by following the instructions provided above.
• Access, Correction, and Deletion. You have the right to (1) request to know more about the personal data we maintain about you and request access to your personal data, including in a portable format, (2) request deletion of your personal data, and (3) request correction of inaccurate personal data. To request access, correction, or deletion of your personal data, you may contact us at the information listed above. We will verify your request by asking you to provide certain information to compare that information with our records. Please note that you can also access, correct, or delete certain information stored within your customer portal at any time by logging into your account.

Your Right to Appeal

If we deny your request to exercise any of the rights you may have under applicable state law, you may appeal our decision by contacting us at the information listed above. If you have concerns about the results of an appeal, you may contact the attorney general or other regulatory authority in the state where you reside.