Arcutis Biotherapeutics

Privacy Notice

We respect your privacy and are committed to protecting the privacy and security of your personal information. This Privacy Notice explains how Arcutis Biotherapeutics, Inc. (“Arcutis,” “we,” “us,” or “our”) handles Personal Information in connection with its products, services, apps, websites, and other online and offline services (collectively, the “Services”). This Privacy Notice applies to all Personal Information received and processed by Arcutis. “Personal Information” means any information or set of information that relates to an individual, which can be either direct or indirect, and can be collected by or on behalf of Arcutis.

Please read this Privacy Notice before using Arcutis Services or submitting Personal Information to Arcutis. Residents of some U.S. states may have certain rights with respect to the collection, processing, and disclosure of their Personal Information. For more information, please see our California Business Contact Privacy Notice, U.S. State Supplemental Privacy Notice,  and Consumer Health Data Privacy Policy.

What Personal Information is collected?

Arcutis collects two types of Personal Information from consumers: (1) Personal Information provided by consumers when they interact with us; and (2) information passively collected from consumers when they use our Services.

  • Information Provided by Consumers: Arcutis collects Personal Information that you voluntarily provide to us, such as when a consumer enters information into data fields on Arcutis Services, sends Arcutis an email, interacts with Arcutis social media accounts, or otherwise interacts with us. We typically collect the following categories of Personal Information:
    • Contact details, such as name, email address, address, and telephone number
    • Professional information, such as your employer and business contact information
    • Insurance information, such as insurance policy number or health insurance information
    • Commercial information, such as products or services purchased, obtained, or considered
    • Financial information, such as total income
    • Sensitive Personal Information, such as Personal Information concerning your health
    • Audio/electronic recordings, such as recordings of customer service calls
    • Inferences drawn from any of the information listed above to create a profile about you reflecting your preferences, characteristics, behavior, and attitudes
  • Information Passively Collected from Consumers: Arcutis may collect certain information about your use of Arcutis Services without you actively submitting such information. This information may be collected using various technologies, such as cookies, Internet tags, and web beacons. This information may include:
    • Identifiers, such as Internet Protocol (IP) addresses, mobile advertising IDs, and other unique identifiers
    • Geolocation data, such as device location
    • Commercial information, such as products or services purchased, obtained, or considered
    • Internet or other network information, such as browsing history, search history, and information regarding a consumer’s interaction with an internet website application, or advertisement
    • Inferences drawn from any of the information listed above to create a profile about you reflecting your preferences, characteristics, behavior, and attitude
  • Passive information collection technologies, such as cookies and other tracking technologies, have various purposes. Some of them help our Services function properly, while others help Arcutis analyze consumers’ use of our Services, market our products and other offerings, and customize Services based on consumer preferences. This information is also used to analyze trends and otherwise administer and improve the Services.
  • Cookies

    When you visit any website, it may store or retrieve information on your browser, usually in the form of cookies. Cookies are small text files that are transferred to your computer by a website. Depending on your Internet browser, you may be able to change your settings to block and/or erase cookies from your device. You can check your browser instructions to learn more about these functions. Please note that if you block or reject cookies and similar technologies on our Services, functionality of the Services may be limited. Our Services use the following types of Cookies:

    • Required Cookies: These cookies are required for the website to function and cannot be switched off. They are usually only set in response to your request for services, such as setting your privacy preferences, logging in, or filling in forms. You can set your browser to block or alert you about these cookies, but if you do so, some parts of the site will not work.
    • Functional Cookies: These cookies enable the website to provide enhanced functionality and personalization by remembering certain user preferences. They may be set by us or by third-party providers whose services we have added to our pages. If you do not allow these cookies, some or all of these services may not function properly.
    • Targeting Cookies: These cookies may be used to display advertising that may be relevant to you, based on your interests. Third-party advertising partners may use these cookies to collect information about you and show you relevant ads on other sites. If you do not allow these cookies, you will still receive advertising, but it may be less relevant to you.
    • Performance Cookies: These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.

    How is Personal Information used?

    Arcutis will collect, use, process, and disclose the Personal Information we collect about consumers to:

    • Respond to your questions and communicate with consumers
    • Operate, manage, and maintain our business and maintain records
    • Provide, develop, improve, repair, and maintain our products and Services
    • Analyze and better understand consumers’ needs, preferences, and interests and conduct internal business analysis and research
    • Advertise and promote our products and services, including by contacting consumers regarding products, services, and topics that may be of interest to them
    • Engage with current and prospective advertisers, advocacy organizations, service providers, and third parties
    • Undertake quality and safety assurance measures and conduct risk and security controls and monitoring
    • Detect and prevent fraud and perform identity verification
    • Perform accounting, audit, and other internal functions, such as internal investigations
    • Comply with law, legal process, and internal policies
    • Exercise and defend legal claims
    • For any other purpose you may agree to at or before the time the Personal Information is collected

    We may also aggregate and/or anonymize personal information and analyze those data for statistical or any other purposes permitted by law.

    Who will Personal Information be shared with?

    Arcutis may disclose Personal Information we collect in the following situations:

    • To service providers who process Personal Information on our behalf, including service providers who provide data hosting, information technology support, email hosting, marketing, and analytics services, and other services for the operation of our business. We impose contractual limitations on our service providers’ use of personal information they collect in conjunction with providing services to us.
    • To third-party marketing, advertising, and analytics companies, who may process Personal Information for their own purposes.
    • To other third parties with your consent.
    • To other third parties to protect our rights, defend or pursue a legal claim, or investigate or prosecute illegal activities.
    • To government or judicial authorities to comply with a subpoena, court order, governmental inquiry, legal process, legal obligation, or to protect the rights, property, or safety of other users or the public.
    • To a successor entity or purchaser upon a merger, consolidation, or other corporate reorganization in which we participate, or pursuant to a financing arrangement. In this situation, we will seek assurances that the successor entity or purchaser will process personal information in accordance with this notice.

    How is Personal Information protected?

    • Arcutis will maintain adequate technical and organizational security measures to protect Personal Information. These measures are designed to protect your Personal Information from loss, unauthorized access, disclosure, alteration, or destruction.
    • Note that the confidentiality of Personal Information transmitted over the Internet cannot be guaranteed. You are responsible for exercising appropriate caution when transmitting Personal Information over the Internet. Any information you choose to disclose is at your own risk.

    Use of Our Services by Children

    Our Services are not intended for children under age 13. Arcutis does not solicit, knowingly collect, or use any Personal Information from children. If you are a parent or guardian and suspect that your child may have provided us with Personal Information, please contact us at privacy@arcutis.com so that we can remove it.

Third-Party Links on Our Services

Our Services may contain links to websites and apps owned by other entities. If you decide to use these links, you will leave our Services. We are not responsible for the privacy practices or the content of such third parties, and we make no representations or endorsements about them. If you decide to leave our Services to access third party links, it will be at your own risk, and you should be aware that this Privacy Notice will no longer govern. You should review the applicable terms and policies, including privacy and data gathering practices, of any other third party when you navigate away from our Services.

How can I contact Arcutis?

Any questions or concerns regarding handling of Personal Information or this Privacy Notice should be directed by email to privacy@arcutis.com.

Requests to opt-out of future communications from Arcutis should be processed through use of unsubscribe links where available or by e-mail request to privacy@arcutis.com.

Alternatively, letters may be sent to the following address:

Arcutis Biotherapeutics, Inc.

Attn: Privacy Officer

3027 Townsgate Road, Suite 300

Westlake Village, CA 91361

Change in Privacy Practices

Arcutis may amend this Privacy Notice from time to time to reflect technological advancements, legal and regulatory changes and good business practices. If Arcutis changes its privacy practices, a revised Privacy Notice will be posted here.

This Privacy Notice was last updated on September 30, 2024, and is effective as of that date.