This Privacy Policy for IDEAYA Biosciences (“IDEAYA”, “we”, “us” “our”) describes how we collect, use and disclose information about visitors to our website https://www.ideayabio.com/, including its services, tools, features and functionalities, and who interact otherwise with us, including via email, communications collaborations tools (e.g. Zoom or Teams) and other collaboration software (collectively, the “Services”).
Other activities or interactions with IDEAYA may be governed by different privacy terms. For the purposes of this Privacy Policy, “you” and “your” means you as the user of the Services. If we make changes to this Privacy Policy, we will update the last revised date, post the updated version on our website and take any other steps necessary to comply with applicable law.
PLEASE READ THIS PRIVACY POLICY CAREFULLY. If you do not want information about you used as described in this Privacy Policy, please do not access or use the Services.
-
How We Collect and Use Information About You
Collection and Sources of Information. When you access or use our Services, or otherwise engage with us, we may collect the following information about you. Within the last 12 months, we’ve collected and used the following types of information:
- Contact information: Name, email address, and phone number. We collect this information to provide you with Services, communicate with you about our Services, respond to your queries, and for the intended purposes for which you submitted this information. We collect this information directly from you.
- Professional Information: Contact information, title/role, employer, and other information related to your employment. We collect this information directly from you and publicly available sources.
- Any other information you choose to provide: This includes pictures and videos, responses to surveys, and any other information that you choose to include in communications with us, for example, when sending us an email or completing a webform. We use this information to facilitate your engagement with the Services, operate, maintain, and improve our Website, communicate with you about our Services and company developments, provide and deliver products and services that you request personalize the Services for you, monitor and analyze trends in connection with the Services and conduct internal research and development.
Some features of the Services may require you to enter certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features or some or all of the Services.
Any information that we receive from outside sources will be treated in accordance with this Privacy Policy. We are not responsible or liable for the accuracy of the information provided to us by third parties and are not responsible for their policies or practices. See Section 5 below for more information.
Tracking Technologies In addition, our website, like most websites, uses third party tools, including cookies, pixels and other tracking technologies (“Tracking Technologies”), including Google Analytics, to provide and enhance the performance of our Services, facilitate and enhance user experience, monitor and analyze trends, usage and activities in connection with the Services and conduct internal research and development. For further information about Google Analytics, please click here.
The information we collect through Tracking Technologies (“Usage Data”) includes:
- Details of the devices used to access our website, such as unique device identifier, browser type and settings, device type, and operating system information.
- IP address, and other information associated with your IP address such as your approximate geographic region.
- Date and time stamps, such as the date and time you first accessed the Services.
- Certain demographic information, such age, gender, and language.
- Details about the emails we send, such as when you open or click on them, and unsubscribe.
- Log data.
- Other information regarding your interaction with the Services, such as clickstream data, files viewed, and feature usage.
In addition to the specific uses of information described above, we may use all of the above information to create aggregated statistical information, inferred non-personal information, and anonymized information to provide, improve, and develop the Services, including as we describe in our Terms and Conditions, to comply with any applicable legal obligations, to enforce any applicable terms of service, to protect or defend the Services, our rights, the rights of our users, or others, for the purpose of combating fraud, or to otherwise operate our business.
-
How We Disclose Information About You
We may disclose information about you (as above in Section 1) with third parties in the following circumstances:
- With vendors and service providers providing services to us or on our behalf, including information security vendors, information technology providers, and data analytics vendors. When you request us to disclose certain information with third parties.
- When you provide us with a testimonial, feedback, or review.
- With our affiliates or otherwise within our corporate group.
- To comply with applicable law or any obligations thereunder, including cooperation with law enforcement, judicial orders, and regulatory inquiries.
- In connection with an asset sale, merger, bankruptcy, or other business transaction.
- To enforce any applicable terms of service.
- To ensure the safety and security of IDEAYA and our users.
- With professional advisors, such as auditors, law firms, or accounting firms.
-
Choices; Cookies and Other Tracking Technologies
Do Not Track Signals
Your browser settings may allow you to transmit a “Do Not Track” signal when you visit various websites. Like many websites, our website is not designed to respond to “Do Not Track” signals received from browsers. To learn more about “Do Not Track” signals, you can visit http://www.allaboutdnt.com/.
Cookies and Other Tracking Technologies
You may control the way in which your devices permit the use of Tracking Technologies. If you so choose, you may block or delete our cookies from your browser; however, blocking or deleting cookies may cause some of the Services, including any portal features and general functionality, to work incorrectly.
Most browsers accept cookies automatically. However, you may be able to configure your browser settings to use the Services without some cookie functionality. You can delete cookies manually or set your browser to automatically delete cookies on a pre-determined schedule. In addition, to opt out of tracking by Google Analytics, click here.
Email Communications
You may opt-out of receiving our emails by following the instructions in the relevant email communication.
-
California Privacy
This section applies only to California residents. Any terms used but not defined in this section will have the meaning as defined in the California Consumer Privacy Act (“CCPA”).
Sources of Information. In the preceding 12 months, we received personal information from the sources described above in Section 1 of this Privacy Policy.
We do not have actual knowledge that we sell or share personal information of individuals under 16 years of age. In the preceding 12 months, we have not sold or shared personal information, including sensitive personal information, to third parties in the past 12 months.
In the preceding 12 months, we collected and disclosed for a business purpose the following categories of personal information about residents:
| Category of Personal Information as Outlined in the CCPA | Data Collected | Categories of Recipients |
| Identifiers | Name, e-mail address, IP address | Vendors and service providers, affiliates, collaborators |
| Personal information categories listed in the California Customer Records statute | Name, signature, address, telephone number | Vendors and service providers, affiliates, collaborators |
| Commercial information | Records of products or services purchased | Vendors and service providers, affiliates |
| Internet or other similar network activity | Usage Data (as described above) and information regarding your interaction with the Services | Vendors and service providers, affiliates |
| Geolocation data | IP address | Vendors |
| Audio, electronic, visual, thermal, olfactory, or similar information | Photographs, video recordings and voice recordings of residents | Vendors and service providers, affiliates, collaborators |
| Professional or employment-related information | Title of profession, employer | Vendors and service providers, collaborators] |
Purposes for Collection, Use, and Disclosing. We use and disclose the personal information we collect for our commercial purposes, as further described in this Privacy Policy, including for our business purposes:
- Auditing related to our interactions with you;
- Legal compliance;
- Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and necessary prosecution;
- Debugging;
- Performing services (for us or our service provider);
- Internal research for technological improvement;
- Internal operations;
- Activities to maintain and improve our services; and
- Other one-time or short-term uses.
Your Rights. Where applicable, if you are a California resident you may have the following rights under CCPA in relation to “personal information” we have collected about you as defined in the CCPA; these rights are subject to verification and any applicable exceptions:
- Right to Know/Access: You have the right to request that we disclose certain information to you about our collection and use of certain personal information about you as described below:
- The specific pieces of personal information collected;
- The categories of personal information collected;
- The categories of sources from whom the personal information is collected;
- The purpose for collecting the personal information; and
- The categories of third parties with whom we have shared the personal information.
- Right to Correct: You have a right to request that we correct inaccurate personal information maintained about you.
- Right to Limit Use and Disclosure of Sensitive Personal Information. You have the right to limit our use and/or disclosure of sensitive personal information to only what is necessary to perform the services or provide the goods reasonably expected by an average resident.
- Right to Opt out of Sale or Sharing. You have the right to direct a business that sells or shares personal information about you to third parties to stop doing so.
- Right to Delete: You have the right to request that we delete the personal information.
- Freedom from Discrimination: You have the right to be free from unlawful discrimination for exercising any of the rights above.
To make a request in relation to the above rights, please contact us using the information in Section 8. To fulfill your request, we will need to verify your identity and residency in California, and ask for additional information and documents. We may need to collect information from you to verify your identity, such as your email address, government issued ID or date of birth, before providing a substantive response to the request. You may designate, in writing or through a power of attorney document, an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us.
Only you, or someone legally authorized to act on your behalf, may make a request related to personal information collected about you. To designate an authorized agent, the authorized agent must provide sufficient information that allows us to reasonably verify that they have been authorized by you to act on their behalf.
-
Third-Party Websites and Links
We may provide links to third-party websites or other online platforms operated by third parties, including through your interactions between the Services and third-party services or platforms, such as social media (e.g., Twitter, LinkedIn) (such interactions, “Social Features”). If you interact with Social Features and/or follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of these sites, including the accuracy, completeness, or reliability of their information. Information you provide on public or semi-public venues, including information you share on third-party social media platforms (such as LinkedIn) may also be viewable by other users of the Services and/or users of those third-party online platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators except as disclosed on the Services. We expressly disclaim any and all liability for the actions of third parties, including but without limitation to actions relating to the use and/or disclosure of personal information by third parties. Any information submitted by you directly to these third parties is subject to that third party’s privacy policy.
-
Data Security
Please note that any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure when it is transmitted to us. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us. Please be aware that, despite our best efforts, no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” Any information you transmit to us you do at your own risk.
-
International Transfers
Information that we collect may be stored and processed in the United States or in another country in which we, our agents, or our affiliated businesses maintain operations. By using this site, you understand information may be transferred outside of your country. The laws relating to personal information in the United States may not be as protective of personal information as the laws of the country you reside in.
-
How to Contact Us
Should you have any questions about our privacy practices or this Privacy Policy, please contact us at:
IDEAYA Biosciences
5000 Shoreline Court, Suite 300
South San Francisco, CA 94080
General Inquiries: privacy@ideayabio.com
Telephone: (650) 443-6209
Last Revised on January 1, 2023
