Effective Date: September 30, 2024

California Consumer Privacy Statement

This California Consumer Privacy Statement (“Statement”) supplements the Perceptive Website Privacy Policy and applies solely to the personal information we collect online and offline of California
consumers, such as authorized users of our business customers, website visitors, individuals employed
by or representatives of our business partners and job applicants. This Statement does not apply to
personal information collected about Perceptive personnel. This Statement also does not apply to
personal information collected as part of a clinical trial subject to the Federal Policy for the Protection of Human Subjects, also known as the Common Rule, pursuant to good clinical practice guidelines issued by the International Council for Harmonization or pursuant to human subject protection requirements of the United States Food and Drug Administration.

This Statement uses certain terms that have meanings given to them in the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and its implementing regulations (collectively, the “CCPA”).

Notice of Collection and Use of Personal Information

We may collect (and may have collected during the 12-month period prior to the effective date of this
Statement), the following categories of personal information about you:
– Identifiers, such as a real name, alias, postal address, unique personal identifier (such as a device
identifier; cookies, beacons, pixel tags, mobile ad identifiers, and similar technology; customer
number, unique pseudonym, or user alias; telephone number and other forms of persistent or
probabilistic identifiers), online identifier, IP address, email address, account name, Social
Security number, passport number, and other similar identifiers

– Additional Data Subject to Cal. Civ. Code § 1798.80, such as signature, state identification card
number, bank account number, credit card number, debit card number, or other financial
information, and education information

– Protected Classifications, such as race, national origin, age, sex, gender, marital status, medical
condition, disability, citizenship status, and military and veteran status

– Commercial information, such as commercial information, including products or services
purchased, obtained, or considered, and other purchasing or consuming histories or tendencies

– Online Activity, such as Internet and other electronic network activity information, including, but
not limited to, browsing history, search history, and information regarding your interaction with
websites, applications or advertisements

– Geolocation data

– Sensory Information, such as audio, electronic, visual and similar information

– Employment Information, including professional or employment-related information such as
business contact information, résumé information, occupation details, education details,
certifications and professional associations, historical compensation details, previous
employment details, pre-employment screening and background check information, including
criminal records information

– Education Information, including education information that is not publicly available personally
identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C.
Sec. 1232g; 34 C.F.R. Part 99)

– Inferences, such as inferences drawn from any of the information identified above to create a
profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

We may use (and may have used during the 12-month period prior to the effective date of this
Statement) your personal information for the purposes described in our Privacy Policy and for the
following business purposes as described in CCPA.

– Performing services, including maintaining or servicing accounts, providing customer service,
processing or fulfilling orders and transactions, verifying customer information, processing
payments, providing financing, providing analytics services, providing storage, or providing
similar services;

– Providing advertising and marketing services, except for cross-context behavioral advertising
(which is addressed in the Sale or Sharing of Personal Information Section below);

– Auditing related to counting ad impressions to unique visitors, verifying positioning and quality
of ad impressions, and auditing compliance;

– Short-term, transient use, such as nonpersonalized advertising shown as part of your current
interaction with us;

– Helping to ensure security and integrity to the extent the use of your personal information is
reasonably necessary and proportionate to these purposes;

– Undertaking activities to verify or maintain the quality or safety of our services or devices and to
improve, upgrade, or enhance them;

– Debugging to identify and repair errors;

– Undertaking internal research for technological development and demonstration;

In addition, we may use certain personal information for purposes of managing (1) career opportunities
with us and (2) our professional relationships with business customers and partners.

We do not collect or process sensitive personal information for the purposes of inferring characteristics
about consumers.

To the extent we process de-identified information, we will maintain and use the information in
de-identified form and will not attempt to re-identify the information unless permitted by applicable law.

Retention of Personal Information

We will retain your personal information as described in the “Storage and Retention of Your
Information” section of our Privacy Policy.

Sources of Personal Information

During the 12-month period prior to the effective date of this Statement, we may have obtained
personal information about you from the following categories of sources.

– Directly from you (such as when you contact us)

– Your devices (such as when you visit our Websites)

– Our affiliates and subsidiaries

– Service providers, contractors and other vendors who provide services on our behalf

– Our business customers and partners

– Data analytics providers – Operating systems and platforms

– Social networks

– Recruiting and talent agencies

– Job references (such as your employers and teachers)

– Publicly available sources (such as public databases)

– Data brokers (such as credit bureaus, credit reporting service providers and background check
services)

Disclosures of Personal Information

During the 12-month period prior to the effective date of this Statement, we may have disclosed the
following categories of personal information about you for a business purpose to the following
categories of third parties:

– Identifiers — with our affiliates and subsidiaries, service providers, professional service
organizations (such as auditors or law firms), data analytics providers, our business customers
and partners, online advertising services and advertising networks, social networks, ISPs and
operating systems and platforms, recruiting and talent agencies, and data brokers (such as
credit bureaus, credit reporting service providers and background check services).

– Additional Data Subject to Cal. Civ. Code §1798.80 — with our affiliates and subsidiaries, service
providers, professional service organizations (such as auditors or law firms), data analytics
providers, our business customers and partners, online advertising services and advertising
networks, social networks, ISPs and operating systems and platforms, recruiting and talent
agencies, and data brokers (such as credit bureaus, credit reporting service providers and
background check services).

– Protected Classifications — with our affiliates and subsidiaries, service providers, professional
service organizations (such as auditors or law firms), recruiting and talent agencies, data brokers
(such as credit bureaus, credit reporting service providers and background check services.

– Commercial information — with our affiliates and subsidiaries, service providers, professional
service organizations (such as auditors or law firms), data analytics providers, our business
customers and partners, online advertising services and advertising networks, social networks,
and ISPs and operating systems and platforms.

– Online Activity — with our affiliates and subsidiaries, service providers, professional service
organizations (such as auditors or law firms), data analytic providers, our business customers
and partners, online advertising services and advertising networks, social networks, ISPs and
operating systems and platforms.

– Geolocation data — with our affiliates and subsidiaries, and service providers

– Sensory Information — with our affiliates and subsidiaries, service providers, professional
service organizations (such as auditors or law firms), data analytics providers, our business
customers and partners, ISPs and operating systems and platforms, recruiting and talent
agencies, and data brokers (such as credit bureaus, credit reporting service providers and
background check services).

– Employment Information — with our affiliates and subsidiaries, service providers, professional
service organizations (such as auditors or law firms), data analytics providers, our business
customers and partners, ISPs and operating systems and platforms, recruiting and talent
agencies, and data brokers (such as credit bureaus, credit reporting service providers and
background check services).

– Education Information — with our affiliates and subsidiaries, service providers, professional
service organizations (such as auditors or law firms), data analytics providers, our business
customers and partners, ISPs and operating systems and platforms, recruiting and talent
agencies, and data brokers (such as credit bureaus, credit reporting service providers and
background check services).

– Inferences — with our affiliates and subsidiaries, service providers, data analytics providers, our
business customers and partners, online advertising services and advertising networks, social
networks, ISPs and operating systems and platforms, recruiting and talent agencies, and data
brokers (such as credit bureaus, credit reporting service providers and background check
services).

In addition to the categories of third parties identified above, during the 12-month period prior to the
effective date of this Statement, we may have disclosed personal information about you to government
entities and third parties in connection with corporate transactions, such as mergers, acquisitions, or
divestitures.

Sale or Sharing of Personal Information

We do not sell your personal information in exchange for monetary compensation. We may disclose
your personal information by allowing certain third parties (such as certain online advertising services,
advertising networks and social networks) to collect personal information via automated technologies
on our websites for cross context behavioral advertising purposes. Under California law, these kinds of
disclosures may be considered a “sale” when the personal information is exchanged for non-monetary
consideration or “sharing” when the personal information is disclosed for cross-context behavioral
advertising purposes. You have the right to opt out of these types of disclosures of your information.
We may sell or share for cross-context behavioral advertising purposes (and may have sold or shared
during the 12-month period prior to the effective date of this Statement), the following categories of
personal information to online advertising services, advertising networks and social networks:

– Identifiers

– Commercial Information

– Online Activity

– Inferences

We do not have actual knowledge that we sell or share personal information of consumers under 16
years of age.

California Consumer Privacy Rights and Choices

You have certain choices regarding your personal information, as described below.

– Access Right. You have the right to request, twice in a 12-month period, that we disclose certain
information to you about our collection, use, disclosure, and sale and sharing of your personal
information.

– Correction Right. You have the right to request that we correct the personal information we
maintain about you, if that information is inaccurate.

– Deletion Right. You have the right to request that we delete certain personal information we
have collected from you, subject to certain exceptions.

– Opt-out of Sale or Sharing Right. You have the right to opt-out of the sale of your personal
information or the sharing of your personal information for cross-context behavioral advertising
purposes.

How to Submit a Request. To exercise the access, correction or deletion rights described above, please submit a request to us by either:

– Calling us at 1 877 819 6025; or
– Emailing us at privacy@perceptive.com

To exercise the opt-out of the sale or sharing right described above, submit a request by clicking here or use the Global Privacy Control (GPC) signal. If you use the GPC, we will process it for your browser or device, but it will not apply outside of that specific browser or device. After using the GPC, if you clear your cookies in your browser or use another device, you will need to use the GPC again for us to process your opt out request for that browser or device. You may designate an authorized agent to submit requests on your behalf through a signed written permission that authorizes the agent to act on your behalf. We may mandate additional requirements when submitted through an authorized agent, such as requiring you to verify your identity directly with us or to directly confirm the authorized agent’s permission to act on your behalf. To submit a request as an authorized agent on behalf of a consumer, please email privacy@perceptive.com, with the subject line Authorized Agent Request.

Verifying Requests. To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal information or complying with your deletion or correction request. If you have an online account with us, we may verify your identity by requiring you to sign into your account. If you do not have an online account with us, and you request access to, correction of or deletion of your personal information, we may require you to verify your identify by
asking you to confirm information that we have on file about you or information about your interactions with us, including your contact information (e.g., email, phone number, and address), or other details about your relationship with Perceptive. In addition, if you ask us to provide you with specific pieces of personal information, we may require you to sign a declaration under penalty of perjury that you are the
consumer whose personal information is the subject of the request. If you designate an authorized agent to make a request on your behalf, depending on whether you have an online account with us, we
may require that you verify your identity as set forth above. We also may require you to provide the authorized agent a written confirmation that you have authorized the agent to act on your behalf and the scope of such authorization.

Additional Information.

– Non-Discrimination. If you choose to exercise any of your rights under the CCPA, you have the
rights to not receive discriminatory treatment by us.

– To the extent permitted by applicable law, we may charge a reasonable fee to comply with your
request.

– For questions or concerns about our privacy policies and practices, please contact us as
described in the “Contacting Us” section of our Privacy Policy.