Privacy policy

Privacy Policy

Effective September 19, 2019

Blueprint Medicines Corporation (“Blueprint Medicines”) recognizes the importance of protecting the privacy of information we may receive from visitors to our website, including clinical trial websites owned and controlled by Blueprint Medicines (collectively, this “website”). This Privacy Policy describes the information we collect from visitors to this website, how we may use and with whom we may share that information, the safeguards we use to protect such information and the choices you may make with respect to your personal information.

Blueprint Medicines collects personal information about you when you voluntarily submit it to us or when you explicitly consent to its collection. Our website only collects such technical information as is disclosed in this Privacy Policy. If you contact us and choose to provide personally identifiable information or other personal data, such as your name, address, telephone number or email address, we will utilize it to respond to your inquiry and as may otherwise be described in this Privacy Policy. By voluntarily providing us with your personally identifiable information or other personal data, you are consenting to our use of it in accordance with this Privacy Policy and are acknowledging and agreeing that such information or data may be transferred from your current location to offices and servers of Blueprint Medicines and the authorized third parties referenced to herein.

We do not collect or maintain personally identifiable information for resale purposes or share your information with any other company or organization, except as disclosed in this Privacy Policy or to the extent such other company or organization is acting as our service provider or agent for processing or mailing purposes to assist us in providing information that you have requested. In addition, we will not send unsolicited messages to users of our site who indicate that they do not wish to receive such messages. If you do not wish to receive unsolicited email messages from us at any time, please contact us at Privacy@BlueprintMedicines.com.

Blueprint Medicines may maintain any information or data collected in an electronic database. Blueprint Medicines will store and maintain this data for as long as necessary (i) for the purposes for which it was collected, (ii) to meet its current and future legal obligations, and (iii) as permitted to meet its legitimate interests.

Notification of Changes to This Policy

Blueprint Medicines is continually improving and adding new functionality and features to this website. Because of these ongoing changes, changes in the law and the changing nature of technology, Blueprint Medicines’ data practices will change from time to time. Accordingly, we reserve the right to update or modify this Privacy Policy at any time and from time to time without prior notice. If and when our data practices change, Blueprint Medicines will post the changes on this page of our website to notify you of the changes. Such changes to the Privacy Policy will become effective when posted and as dated. Unless stated otherwise, our current Privacy Policy applies to all personal data that we collect from you. We will not materially change our policies and practices to make them less protective of personal data collected in the past without the consent of effected individuals. Your continued use of this website after any changes or revisions to this Privacy Policy shall indicate your agreement with the terms of such revised Privacy Policy. We encourage you to check this page frequently by clicking on the Privacy Policy link on any page of our website.

Personally Identifiable Data Collected Through this Website and Security

The only personally identifiable data Blueprint Medicines currently collects through this website is the information you send to us when you (1) contact Blueprint Medicines with your questions and comments through the Contact page on this website, (2) send us an email, (3) complete a sign-up form to learn more about a clinical trial or medical condition (4) complete a survey or (5) consent to collection of information pertaining to your visit.

PLEASE DO NOT SEND INFORMATION RELATING TO MEDICAL CONDITIONS OR OTHER SPECIFIC PERSONAL HEALTH INFORMATION VIA EMAIL OR THIS WEBSITE. Further, as a reminder, any email that you send or receive on your employer’s email system may be the property of your employer. Consequently, your employer may have the ability to review your personal information sent via email. Please keep this in mind when disclosing any personally identifiable data to Blueprint Medicines via email or this website.

Data Collected Through Cookies

We collect information about your use of this site through cookies and similar technology. A cookie is a piece of information that the computer that hosts this site gives to your browser when you access this site. With cookies, the information that we collect and share is anonymous and not personally identifiable. It does not contain your name, address, telephone number or email address. We may use the information from cookies for various business purposes, including development and improvement activities.

We may also track the total number of visitors to this website, the number of visitors to each page of this website, and the domain names of our visitors’ Internet service providers. On certain Blueprint Medicines websites, we may also ask users that have opted to receive information to complete a survey.

Your Web browser can be set to allow you to control whether or not you will accept cookies or turn cookies off. If your browser is set to reject cookies, sites like ours that are cookie-enabled will not recognize you when you return to the site and some site functionality may be lost. For more information about cookies, please visit http://aboutcookies.com/.

We use Google Analytics to help us analyze how visitors use the website. The tool uses cookies to collect standard Internet log information and visitor behavior information. The information generated by the cookie about your use of this website, including your IP address, is transmitted to Google. This information is then used to evaluate visitors’ use of the website and to compile statistical reports on website activity for us. We do not use the statistical analytics tool to track or to collect any personally identifiable Information of visitors to our website. We do not seek to link an IP address with the identity of a computer user. If you do not want any information to be collected and used by Google Analytics, you can install an opt-out add-on in your web browser. Google’s ability to use and share information collected by Google Analytics about your visits to this website is restricted by the Google Analytics Terms of Service and the Google Privacy Policy.

Children’s Privacy

We are committed to protecting the privacy of children. This website is intended for users over the age of 18, and we do not knowingly collect personal information from children under the age of 13. You should be aware that this website is not intended for, or designed to attract, children under the age of 13. No information should be submitted to Blueprint Medicines through this website or by email by visitors who are less than 13 years of age. If a child has provided us with personally identifiable information, the parent or guardian of the child may contact us, and we will take steps to remove such information.

Security

Please note that any information you send to Blueprint Medicines via email or other Internet transmission is not completely secure. We take reasonable steps to protect the personally identifiable information provided via this site or email from loss, misuse and unauthorized access or disclosure, however, no Internet or e-mail transmission is ever fully secure from illegal tampering or “hacking” or error free. Due to the nature of the Internet, there is a possibility that unsecured (unencrypted) email could be intercepted and read by third parties. Blueprint Medicines assumes no responsibility for interception of confidential information (including in a resume or CV) that you send in an unsecured (unencrypted) email message or other Internet transmission to and from this website. Therefore, you should take special care in deciding what information you send to us via e-mail or other Internet transmission.

Links to Other Sites

This Privacy Policy applies only to BlueprintMedicines.com and other websites owned and controlled by Blueprint Medicines. This website contains links to other sites that are not owned or controlled by Blueprint Medicines. Please be aware that we are not responsible for the privacy policies of such other sites or how these sites operate or treat your personal information. We encourage you to be aware when you leave BlueprintMedicines.com or our other sites and to read the privacy policies and terms of use of each and every third-party website that collects personally identifiable information or uses cookies. Please note that when you link from this site to another website, that other site may have the ability to recognize that you have come from a Blueprint Medicines site. If you do not want any other sites to know that you have been on this site, we recommend that you do not use the links provided in our site.

Your Privacy Choices

You may always update your personal information and your preferences by contacting us at Privacy@BlueprintMedicines.com.

If you have submitted personally identifiable information through this site and would like to have that information deleted from our records, please notify us at the address below. You may also request access to personal data about you that Blueprint Medicines holds and you may have the opportunity to request a correction or amendment to your personal data. Please note that although we attempt to adhere to requests to remove personal data from our records, it may not be possible to remove all copies depending on the manner in which the information was submitted to us. In addition, we reserve the right not remove or amend information provided to us regarding an adverse drug effect and information is otherwise required to be retained by law.

You can also choose not to receive future emails, information or updates from Blueprint Medicines at any time by either clicking the “unsubscribe” link provided in emails from Blueprint Medicines or by contacting Blueprint Medicines at the following address:

Blueprint Medicines Corporation
45 Sidney Street
Cambridge, MA 02139
E-mail: Privacy@BlueprintMedicines.com
Telephone: (617) 374-7580

Your California Privacy Rights: While Blueprint Medicines does not provide your personally identifiable information to third parties for their use in marketing, under California law, California residents have the right to opt-out of such use of their personally identifiable information if it occurred.

Your Rights in Connection with Your Personally Identifiable Information: Under certain circumstances and/or in certain jurisdictions, and as required by law you may have the right to:

  • Request access to your personally identifiable information. This enables you to receive a copy of the personally identifiable information we hold about you.
  • Request correction of any incomplete or inaccurate personally identifiable information that we hold about you.
  • Request erasure of your personally identifiable information when there is no need for us to continue processing it, or you have exercised your right to object to processing (see below).
  • Object to processing of your personally identifiable information where we are relying on a legitimate interest (or those of a third party), and there is something about your particular situation which makes you want to object to processing on this ground.
  • Request the restriction of processing of your personally identifiable information to suspend the processing, for example if you want us to verify its accuracy or the reason for processing it.
  • Request the transfer of your personally identifiable information to another party.

If you want to exercise any of these rights, please see the Contact Us section of this Privacy Policy. Valid requests will be honored within 30 calendar days of request. This 30-day period may be extended for another 2 months for complex requests, with notification of the reasons for the extension to you.

You will not have to pay a fee to access your personally identifiable information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances. In addition, there may be requests that we are unable to process because of other EU legal requirements. If a request is denied, we will notify you of the reason.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is an appropriate security measure to ensure that personally identifiable information is not disclosed to a person who doesn’t have the right to receive it.

As it pertains to users of our website located in the EU, the controller of your personally identifiable information is Blueprint Medicines.

Legal Requirements

We reserve the right to disclose your personal information (i) as required by law, court order, legal process or government or regulatory requirement or (ii) to protect the safety, rights, or property of the public or Blueprint Medicines.

Other Terms and Conditions

Your access to and use of this website is subject to the Terms of Use described elsewhere on this website.

Questions About Our Privacy Policy

If you have any questions about this Privacy Policy or concerns about the way Blueprint Medicines processes your personal data, please contact us at:

Blueprint Medicines Corporation
45 Sidney Street
Cambridge, MA 02139
E-mail: Privacy@BlueprintMedicines.com
Telephone: 617-374-7580

If you are located in the EU, you have the right to lodge a complaint with an EU Supervisory Authority. However, if you have a complaint regarding the processing of your personally identifiable information, we request that you first contact us, and we will reply on timely basis.

EU-US PRIVACY SHIELD POLICY

Effective Date: October 2, 2019

PURPOSE OF DATA COLLECTION:

Blueprint Medicines Corporation (“Blueprint Medicines”) is a precision therapy company developing medicines for genomically defined cancers, rare diseases and cancer immunotherapy. Blueprint Medicines may collect personal information from or concerning individuals in the European Economic Area (“EEA”), Switzerland, and the United Kingdom. The purposes for collecting data vary but may include carrying out scientific or medical research, adverse event and product complaint reporting, managing and overseeing vendors/consultants, and communicating about Blueprint Medicines’ current for future drug candidates, approved therapies, if any, and services. Blueprint Medicines also processes human resources data for various purposes, including without limitation: recruitment; compensation, benefits administration and payroll; performance appraisals and training; protection against injury, theft, legal liability, fraud and abuse; and other business purposes.

SCOPE

This Privacy Shield Policy sets forth the privacy principles that Blueprint Medicines Corporation together with its U.S. subsidiary Blueprint Medicines Security Corporation (collectively, “Blueprint Medicines”) follows in connection with the transfer of personal information from European Economic Area (“EEA”) member countries, Switzerland, and the United Kingdom to the United States.

Blueprint Medicines complies with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information from European Union member countries, Switzerland, and the United Kingdom transferred to the United States pursuant to Privacy Shield. Blueprint Medicines has certified that it adheres to the Privacy Shield Principles with respect to such personal information. If there is any conflict between the policies in this privacy policy and data subject rights under the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification page, please visit https://www.privacyshield.gov/.

DATA COLLECTED

Blueprint Medicines may collect personal information from or concerning individuals in the EEA, Switzerland, and the United Kingdom which may include full name, address, telephone or mobile number, business and home contact details including e-mail addresses, health information and demographic information, as well as any other personal information that you voluntarily provide to us, such as when you contact us with inquiries. Personal information may further include any information that identifies an individual but does not include information that has been anonymized. This personal information may come from sources such as: (1) clinical research subjects; (2) medical and healthcare professionals, including clinical investigators and staff conducting clinical or medical research; (3) potential or actual clinical trial and post-market patients and their family members/caregivers; (4) adverse event reports; (5) investors and stockholders; (6) consumers; (7) vendors, suppliers, contractors, and business partners; and (8) government officials or agencies.

PURPOSE OF DATA COLLECTION

The purposes for collecting data vary but may include: (1) carrying out scientific or medical research; (2) adverse event and product complaint reporting; (3) managing and overseeing vendors/consultants; and (4) communicating about Blueprint Medicines’ current for future drug candidates, approved therapies, if any, and services. Blueprint Medicines also processes human resources data for various purposes, including without limitation: (1) recruitment; (2) compensation, benefits administration and payroll; (3) performance appraisals and training; (4) protection against injury, theft, legal liability, fraud and abuse; and (5) other business purposes.

For additional information about the types of data Blueprint collects, please refer to the Privacy Policy linked here.

PRIVACY SHIELD PRINCIPLES

1. NOTICE

Pursuant to the Privacy Shield, Blueprint Medicines will not sell or provide the personal information of EEA, Swiss, and/or British individuals to any third party without notice. When Blueprint Medicines directly collects personal information from EEA, Swiss, and/or British individuals, it will notify you of the purposes for which the information is collected and used, your ability to limit the use and disclosure of such information, and how to contact Blueprint Medicines. Blueprint Medicines will provide this notice in clear and conspicuous language, either through this Privacy Shield Policy or other means, such as informed consent forms, statements on Blueprint Medicines’ website and other disclosures.

2. CHOICE

Subject to the exceptions outlined in the “Product Safety and Efficacy Monitoring” section below, and as otherwise permitted by applicable law, Blueprint Medicines does not use or intend to use your personal information for any purpose (other than that for which it was originally collected) without your consent.

Blueprint Medicines does not disclose personal information to third parties for purposes that are incompatible with the purposes for which it was originally collected. Blueprint Medicines may occasionally transfer personal information to third parties who act for or on behalf of Blueprint Medicines, or in connection with the business of Blueprint Medicines, for further processing consistent with purposes for which the data were originally collected. Where disclosure of personal information to a third party is likely or necessary, further notice may be provided, where appropriate, at such collection points as to the intended use of the data.

Blueprint Medicines requires that such third parties protect the information and, where appropriate, Blueprint Medicines will contractually require such parties to process data transferred only for the purposes expressly authorized by Blueprint Medicines.

Blueprint Medicines will provide an individual opt-out choice, or opt-in for sensitive data, before it shares your data with third parties (other than Blueprint Medicines’ agents) or before Blueprint Medicines uses such data for a purpose other than which it was originally collected or subsequently authorized. To request to limit the use and disclosure of your personal information, please submit a written request to Blueprint Medicines per the Contact Information section below.

3. ACCOUNTABILITY FOR ONWARD TRANSFERS

Blueprint Medicines will not transfer personal information from or concerning individuals in the EEA, Switzerland, or the United Kingdom to third parties unless such third parties have entered into a written agreement with Blueprint Medicines requiring that the third party provide at least the same level of privacy protection as is required by the relevant principles of the Privacy Shield. Blueprint Medicines will only transfer data to its agents, resellers or third-party service providers who need the information in order to provide services or to perform activities on behalf of Blueprint Medicines. The third parties that now or in the future may receive personal information provide services to or on behalf of Blueprint Medicines, including without limitation: clinical research, direct marketing assistance, distributors/resellers, data storage, hosting services, and sales support. Blueprint Medicines does not share data with non-agent third parties who are not providing services to or on behalf of Blueprint Medicines.

In certain situations, we may be required to disclose personal information in response to legal or regulatory requests by government authorities or agencies, including to meet national security or law enforcement requirements.

Blueprint’s accountability for personal information that it receives in the United States under the Privacy Shield and subsequently transfers to a third party is described in the Privacy Shield Principles. In particular, Blueprint remains responsible and liable under the Privacy Shield Principles if third-party agents that it engages to process personal information on its behalf do so in a manner inconsistent with the Principles, unless Blueprint proves that it is not responsible for the event giving rise to the damage.

Blueprint may provide personal information from clinical trials conducted in the EEA, Switzerland, or the United Kingdom to regulators in the United States and other countries for regulatory and supervision purposes.

4. SECURITY

To protect personal information from or concerning individuals in the EEA, Switzerland, and the United Kingdom Blueprint Medicines has in place reasonable and appropriate technical and operational security measures to prevent unauthorized access, loss, misuse, unauthorized access, disclosure, alteration and destruction of data in its control.

5. DATA INTEGRITY AND PURPOSE LIMITATION

The personal information Blueprint Medicines uses or processes will be necessary for and related to the purpose for which it was obtained or collected. Blueprint Medicines will not use or process the data in a manner that is incompatible with the reason it was collected or authorized to be used. Blueprint Medicines will take reasonable measures to ensure that the data is accurate, complete, current, and reliable for its intended use.

6. ACCESS

Pursuant to the Privacy Shield, Blueprint Medicines will provide individuals in the EEA, Switzerland, and the United Kingdom with reasonable access to the personal information it maintains about them upon such individual’s written request, and Blueprint Medicines will take reasonable measures to allow for the correction, amendment, or deletion of information that is shown to be inaccurate or processed in a manner that violates the Privacy Shield Principles. You may contact Blueprint Medicines per the Contact Information section below to learn whether or not Blueprint Medicines has your personal information subject to this Privacy Shield Policy, and to request corrections, amendments or deletion of such data. This right applies only to personal information about you and is subject to other limitations as defined by applicable law, rule or regulation, as well as whether the burden or expense of providing access would be disproportionate to the risks related to the privacy of the individual or where the rights of other individuals would be violated.

7. RECOURSE, ENFORCEMENT & DISPUTE RESOLUTION

The FTC has jurisdiction over Blueprint Medicines’ compliance with the Privacy Shield.

In compliance with the Privacy Shield Principles, Blueprint Medicines commits to resolve complaints about your privacy and Blueprint Medicines’ collection or use of your personal information transferred to the United States pursuant to the Privacy Shield. EEA, Swiss, and British individuals with Privacy Shield inquiries or complaints should first contact Blueprint Medicines (see Contact Information section below).

Blueprint Medicines’ has further committed to refer unresolved privacy complaints under the Privacy Shield Principles to an independent dispute resolution mechanism, the BBB EU PRIVACY SHIELD. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit http://www.bbb.org/EU-privacy-shield/for-eu-consumers for more information and to file a complaint. This service is provided free of charge to you.

If your complaint involves human resources data transferred to the United States from the EU, Switzerland, and/or the United Kingdom in the context of the employment relationship, and Blueprint Medicines does not address it satisfactorily, Blueprint Medicines commits to cooperate with the panel established by the EU data protection authorities (the “DPA Panel”) or the Swiss Federal Data Protection and Information Commissioner, or the UK Information Commissioner’s Office (“ICO”) as applicable, and to comply with the advice given by the DPA panel, Commissioner, and/or the ICO as applicable with regard to such human resources data. To pursue an unresolved human resources complaint, you should contact the state or national data protection or labor authority in the appropriate jurisdiction. Contact details for the EU data protection authorities can be found at http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm. Complaints related to human resources data should not be addressed to the Better Business Bureau (https://www.bbb.org/).

If your Privacy Shield complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. Please see Privacy Shield Annex 1 at https://www.privacyshield.gov/article?id=ANNEX-I-introduction.

PRODUCT SAFETY AND EFFICACY MONITORING

The Notice, Choice, Onward Transfer and Access Principles outlined above do not apply to Blueprint Medicines’ product safety and efficacy monitoring activities, including the reporting of adverse events and the tracking of patients or subjects using certain medicines or medical devices to the extent that the adherence to these principles interferes with compliance with regulatory requirements, including disclosures to agencies, such as the U.S. Food and Drug Administration.

CONTACT INFORMATION

When you contact Blueprint Medicines, you will need to provide sufficient identifying information. Any identifying information you share will be subject to this policy and Blueprint Medicines’ Privacy Policy available here.

Blueprint Medicines Corporation
45 Sidney Street
Cambridge, MA 02139 USA
Attention: Chief Compliance Officer
Privacy@blueprintmedicines.com

CHANGES TO THIS PRIVACY SHIELD POLICY

Blueprint Medicines may amend or change this Privacy Shield Policy at any time and from time to time without prior notice consistent with the requirements of the Privacy Shield and applicable data protection and privacy laws and principles. If and when Blueprint Medicines amends or changes this Privacy Shield Policy, Blueprint Medicines will post the changes on this page of its website to notify you of the changes.