Supplemental Privacy Notice for California and other U.S. State Privacy Laws

This Supplemental Privacy Notice (“Supplemental Notice”) addresses how argenx SE, and its Affiliates* (“argenx”, “we”, “our”) handle and protect “Personal Data”** collected via the argenx website (www.argenx.com) or any other websites operated or controlled by argenx (collectively, the “Site”) and offline, providing additional information relevant for U.S. residents and supplementing the content provided on the Site’s general Privacy Policy.

If you are a U.S. resident, you may have separate rights regarding your Personal Data (hereinafter referred to as “Personal Information” in the U.S. legal context), in accordance with U.S. State Privacy Laws, as described below.  This Supplemental Notice applies only to consumers residing in California, Colorado, Virginia, Utah, Connecticut, as well as any other State which has established similar privacy laws and regulations to which argenx is subject. It provides information required under the California Consumer Privacy Act of 2018 and California Privacy Rights Act of 2020 (collectively, the "CCPA"), the Colorado Privacy Act of 2021 (the "CPA"), the Virginia Consumer Data Protection Act of 2021 (the "VCDPA"), the Utah Consumer Privacy Act of 2022 (the "UCPA"), the Connecticut Data Privacy Act of 2022 ("CDPA"), as well as other similar Acts, where applicable (collectively, “U.S. Privacy Acts”). For Nevada consumers only, we have also included a specific sub-section "Privacy Notice for Nevada Residents" at the end of this Supplemental Notice.

This Supplemental Notice describes our practices regarding the collection, use, and disclosure of Personal Information and provides instructions for submitting data subject requests. This Supplemental Notice applies to Personal Information that we collect from you when you interact with us online (through our Site and our other websites, Apps, and Services) and offline.

A. Definitions

"Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal Information includes "personal data" as that term is defined in the applicable U.S. Privacy Acts. Personal Information also includes "Sensitive Personal Information," as defined below, except where otherwise noted, but does not include information that is exempt from the U.S. Privacy Acts, as applicable.

"Sensitive Personal Information" means Personal Information that reveals a consumer's social security, driver's license, state identification card, or passport number; account log-in, financial account number, debit card number, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation; racial or ethnic origin, religious beliefs, or union membership; contents of email or text messages; and genetic data. Sensitive Personal Information also includes processing of biometric information for the purpose of uniquely identifying a consumer and Personal Information collected and analyzed concerning a consumer's health, sex life, or sexual orientation. Sensitive Personal Information also includes "sensitive data" as that term is defined in the Acts mentioned above.

To the extent other terms used in this Supplemental Notice are defined terms under the U.S. Privacy Acts, they shall have the meanings afforded to them in those Acts.

B. Collection & Processing of Personal Information and Disclosure of Personal Information to Vendors & Third Parties

Depending on the nature of our interactions with you in the past 12 months we or our Vendors may have collected, processed the following categories of consumers’ Personal Information. We may disclose such Personal Information to Vendors and Third Parties. “Vendor” means a service provider, contractor, or processor as those terms are defined in the applicable U.S. Privacy Acts. “Third Party” also has the meaning afforded to it in the U.S. Privacy Acts:

• Identifiers, such as name, email address, IP address, government-issued identifier (e.g., Social Security number), and online and device identifiers
• Contact and financial information
• Protected class information, such as age, gender, medical conditions, and marital status
• Commercial information, such as transaction information and purchase history
• Biometric information, such as fingerprints and voiceprints
• Internet or network activity information, such as browsing history and interactions with our online properties
• Geolocation data, such as device location
• Audio, electronic, visual, and similar information, such as call and video recordings
• Employment or professional information, such as personnel file, work history, prior employer, and professional license number
• Inferences drawn from any of the Personal Information listed above to create a profile about, for example, an individual’s preferences and characteristics
• Sensitive Personal Information, including:
  • Government-issued identifier (e.g., Social Security number); precise geolocation information; 
  • Information concerning an individual’s health, including mental or physical health conditions, medical history, and medical treatment or diagnosis by a health care professional; and 
  • Biometric information.  
  • Genetic information.
  • Racial or ethnic origin; religious or philosophical beliefs; citizenship; immigration status; labor union membership
  • Account log-in credentials
  • Financial account, debit card, or credit card number in combination with any required security or access code, password, or account credentials 

For California Consumers: California residents have the right to opt out of the sale or sharing of Personal Information, defined in a way that may include the transfer and sharing of data to Third Parties to predict your preferences or interests to personalize ads.

Through our website (www.argenx.com), we do not “sell” your Personal Information under the CCPA, including for payment or similar consideration, and we have not sold your personal information within the 12 months preceding the date of this Privacy Policy. Moreover, we do not knowingly sell or share the Personal Information of minors under 16 years of age. Moreover, we do not process, sell, or share your Personal Information to Third Parties for purposes of targeted advertising, as these terms are defined in the rest of the U.S. Privacy Acts.

When you visit separate websites owned and managed by argenx, however, we may disclose your Personal Information to Third Parties in exchange for valuable consideration, such as to enhance our product offerings and/or offer display advertisements, depending on the services provided through these websites. When we engage in such activities, we will inform you accordingly by mentioning these activities in detail within the privacy policies of such websites. In this case, you may opt out of the disclosure of your Personal Information to Third Parties for such valuable consideration (e.g., information stored in cookies). Please note that by opting out of these types of disclosures, you may limit our ability to customize your experience with content that may be of interest to you in those websites.

C. Retention of Personal Information.

We retain each of the categories of Personal Information listed in Section B above for as long as reasonably needed and within the purpose(s) for which such information was collected. Our retention periods are based on the following criteria:

• The length of time we have an ongoing relationship with you
• The length of time thereafter during which we may have a legitimate need to retain your Personal Information to address issues that may arise; 
• Whether we are subject to a relevant legal obligation to retain such information
• Whether retention is justified in light of our legal position (for instance, in the course of litigation procedures or for regulatory investigations).

D. Sources from Which We Collect Personal Information

We collect Personal Information directly from U.S. consumers. We may also collect Personal Information from our vendors, healthcare providers, public databases, demographic data providers, publications, professional organizations, social media platforms and mobile applications, as well as other service providers and third parties.

E. Parties with which we share or disclose Personal Information

To conduct our business, we share with, or disclose Personal Information to, third parties, such as:

• Service providers for the purpose of outsourcing specific business activities. Such providers may include companies that provide IT services, clinical trials and studies support, market research services, consultancies etc.
• Business partners such as HCPs, health institutions and other organizations, who assist us with healthcare compliance, clinical and commercial activities;
• Regulatory and health authorities (governmental bodies, data protection authorities or courts in case of disputes);
• Third parties to whom we are legally obligated to provide such Information, such as other parties in litigation, individuals with powers of attorney etc.. 

When engaging with third parties, we enter into relevant data processing agreements with them in order to protect your privacy rights. Even in cases where it is not possible to enter into such agreements, we will still use our best efforts to implement appropriate security measures and controls to protect your Personal Information.

F. Purposes for Processing & Disclosing Personal Information

We, and our Affiliates, collect and process the Personal Information described in this Supplemental Notice to manage our business, effectively provide our products and services, and in general to accomplish our business objectives.

Such objectives may include, for example: 

• providing, developing, improving, advertising and marketing our products and services;
• conducting research and analysis;
• maintaining our facilities and infrastructure, conducting security controls and monitoring (including identity verification);
• detecting and preventing fraud, as well as other security incidents; 
• performing accounting, audit, and internal investigations in general;
• signing and performing agreements with customers and suppliers;
• processing payments; 
• providing customer support, and managing customer and supplier relationships in general; 
• complying with legal obligations and internal policies; exercising and defending legal claims;
• maintaining records; 
• processing information for employment purposes;
• protecting the safety of our customers, business partners, job applicants and others, and 
• fulfilling any other purposes and objectives mentioned in our General Privacy Policy above.

We do not use and disclose Sensitive Personal Information other than to provide you with our services and products as permitted by applicable law, to detect and prevent any security incidents involving Personal Information, to ensure the physical safety of natural persons (including reporting adverse events), as well as to fulfil any other purpose permitted under the applicable U.S. Privacy Acts.

G. Data Subject Rights

U.S. consumers have certain rights with respect to the collection and use of their Personal Information.

We provide detailed information below regarding the data subject rights available to U.S. consumers under the applicable U.S. Privacy Acts, subject to the legal limitations stipulated under those Acts. In specific:

• You may request disclosure of information we collect or share about you.  You can submit a request to us for the following data regarding the Personal Information we have collected about you in the 12 months prior to our receipt of your request (a “request to know”):  
  • The categories of Personal Information we have collected. 
  • The categories of sources from which we collected the Personal Information.
  • The business or commercial purposes for which we collected the Personal Information.
  • The categories of third parties with which we shared the Personal Information. 
  • The categories of Personal Information we disclosed for a business purpose, and for each category identified, the categories of third parties to whom we disclosed that particular category of Personal Information. 
  • The specific pieces of Personal Information we collected.
• You may request to correct inaccuracies in your Personal Information.
• You may request to have your Personal Information deleted (right to erasure). In this case, we may ask you to confirm your request before we delete your Personal Information.
• You may request to receive a copy of your Personal Information, including, where applicable, a copy in a portable, readily usable format. 
• You may request to opt out of targeted advertising or the sharing of your Personal Information for cross-context behavioral advertising.
• You may request to opt out of the processing of your Personal Information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

Upon request, we will delete the Personal Information we have collected about you, except for situations where specific information is necessary for us to provide you with a product or service that you requested; perform a contract we entered into with you; maintain the functionality or security of our systems; or comply with or exercise rights provided by the law.  The law also permits us to retain specific information for our exclusively internal use, but only in ways that are compatible with the context in which you provided the information to us or that are reasonably aligned with your expectations based on your relationship with us.

How can you make a request to exercise your rights? To submit requests to exercise your data subject rights, you may contact us by phone at 1-(833) ARGX 411 or via email at privacy@argenx.com. For requests relating to California consumers, we will first acknowledge receipt of the request within 10 business days of receipt of your request. 

When you make a request to know or delete your Personal Data, we will take steps to verify your identity.  These steps may include asking you for Personal Information, such as your name, address, or other information we maintain about you.  If we are unable to verify your identity with the degree of certainty required, we will not be able to respond to the request.  We will notify you to explain the basis of the denial.

If you are a California consumer, you are also entitled to submit a request for Personal Information that could be associated with a household as defined in the CCPA. To submit a request to know or delete household Personal Information, such requests must be jointly made by each member of the household, and we will individually verify all members of the household using the verification criteria explained above, and separately verify that each household member making the request currently resides in the household.  If we are unable to verify the identity of each household member with the degree of certainty required, we will not be able to respond to the request.  We will notify you to explain the basis of our denial. 

You may also make a request on behalf of a child who is under 13 years old if you are the child’s parent or legal guardian.

Authorized Agents: You may also designate an authorized agent to submit requests on your behalf.  If you do so, you will be required to verify your identity by providing us with certain Personal Information as described above.  Additionally, we will also require that you provide the agent with written and signed permission to act on your behalf, and we will separately confirm with you that you provided the agent with permission to submit the request.  We will deny the request if the agent is unable to meet submit proof to us that you have authorized them to act on your behalf or if any of the above verification criteria are not met.

Shine the Light: California's "Shine the Light" law, Civil Code section 1798.83, requires certain businesses to respond to requests from California residents asking about the business' practices related to disclosing certain types of Personal Information to third parties for the third parties' direct marketing purposes.  We do not disclose Personal Information to such entities, for such purposes. 

Do Not Track: “Do Not Track” signals are options that may be available on your browser to tell operators of websites that you do not wish to have your online activity tracked. We do not engage in the collection of personally identifiable information about your online activities over time and across third-party websites or online services, nor do we allow other parties to do so through our Site.  Accordingly, we do not process or comply with automated browser signals regarding tracking mechanisms, which may include "do not track" instructions.

Third-Party Behavioral Tracking: We also note that we do not allow third-party behavioral tracking.

We will not unlawfully discriminate or retaliate against you for exercising your rights under applicable law. 

Appeal: If we refuse to take action on your request, you may have the right under applicable law to appeal the refusal within a reasonable period after you have received notice of the refusal. You may file an appeal by contacting us by phone at 1-(833) ARGX 411 or via email at privacy@argenx.com, as described above. 

H. Other State-Specific Privacy Disclosures

California Residents Under Age 18: If you are a resident of California under age 18 and a registered user of our Services, you may ask us to remove any content you have publicly provided to such Services by writing to privacy@argenx.com.

Nevada Residents as Covered by Nevada Privacy Law: We do not sell Covered Information as defined under Nevada law. If you would like to make a request regarding the selling of your Covered Information, please contact privacy@argenx.com.

I. Changes to our Supplemental Notice.

We reserve the right to amend this Supplemental Notice at our discretion and at any time. When we make material changes to this Supplemental Notice, we will notify you by posting an updated Supplemental Notice on our website and listing the effective date of such updates.

Contact details

If you have questions, feedback, or concerns regarding this Privacy Policy and data protection laws, or if you wish to exercise your privacy rights please contact our Global Privacy Office via email at privacy@argenx.com. 

Last updated: 23 June 2025