Your privacy is important to us. This Privacy Statement will let you know what Personal Information (PI) Eli Lilly Asia, Inc. (“Lilly” or “we”) may process (e.g., collect, record, organize, structure, store, adapt or alter, retrieve, consult, use, disclose by transmission, disseminate or otherwise make available, align or combine, restrict, erase, or destroy), how we protect it, and your rights and choices with respect to your PI. This Privacy Statement applies to websites, mobile applications, and digital services (“websites”) that link to or post it. It is incorporated into and made a part of our Terms of Use for this website, which include provisions that limit Lilly’s liability.

PI We Collect and How We Use It

Your PI will be processed by Eli Lilly Asia, Inc., and/or entities or persons that work on behalf of, or in partnership with, Lilly but are not Lilly employees (“Third Parties”), for the following purposes:

data analytics;

responding to requests for information;

to meet regulatory and legal requirements that include adverse event and product complaints; and

to meet legal or regulatory obligations, inclusive of company record retention, that are in the legitimate interest of Lilly.

You may choose not to share your PI, but we may not be able to provide you with certain information, products, or services.

Through this website, Lilly may:

Collect online identifiers that correspond to your device(s) in order to improve, manage, and secure our websites, network systems, and other assets; verify your relationship with us; understand your interests and preferences; and take other actions that may be necessary to respond to your request.

Analyze your website usage including the date and time of your website session, geographic location, how you have navigated the website, and other information collected through our web beacons, cookies, third-party and digital advertising, analytic solutions including Google Analytics ® and social media plug-ins. This information is collected for our legitimate business purposes.

Cookies and Other Tracking Technologies

When you use our websites, we and our third party partners, including analytics and advertising partners, use cookies and other tracking technologies to collect information from your browser or device. These may include:

Web beacons: A web beacon (also known as an “action tag” or “clear GIF technology”) is a tiny graphic on a web page or in an email message designed to track pages viewed or messages opened and allows the collection of web log information. Web log information is gathered by the computer that hosts our website (called a "web server") when you visit one of our websites. We may use web beacons to help determine which email messages sent by us were opened and whether a message was acted upon. Web beacons also help Lilly analyze the effectiveness of websites by measuring the number of visitors to a site or how many visitors clicked on key elements of a site.

Cookies: A cookie is a small data file that a website can place on your computer’s hard drive where your internet browser files are kept. A cookie saves you the trouble of reentering certain information in some registration areas because cookies can be used to enable a site to “remember” information a visitor has previously inputted. A cookie also helps deliver content and features likely to be of interest to you, based on your previous activities on our site, and to track how sections of the website are used. For example, cookies may be used to remarket employment opportunities to you in the United States. With most internet browsers or other software, you can change your browser settings to erase cookies from your computer hard drive, block all cookies or receive a warning before a cookie is stored. Please check your browser instructions to learn more about these functions. If you reject cookies, functionality of the site may be limited, and you may not be able to take advantage of many of the site's features.

Third-Party and Digital Advertising: We may partner with third-party advertising networks to manage our advertising on other sites. Our ad partners may place cookies and web beacons and similar digital markers on your browser when you visit our websites to collect information about your activities over time on this and third-party websites, apps, and other online services, to provide you targeted advertising based upon your interests. We may also share PI about you with Third Parties in order to have those Third Parties directly serve advertising to you on their websites.

Social Media Plug-ins: Our websites may use social media plug-ins to enable you to share information with others easily. When you visit our websites, the operator of the social media plug-in that is on our website can place a cookie on your computer that lets that operator recognize individuals on their website who have previously visited our sites. Social media plug-ins may allow social media websites to receive directly identifiable information about you that shows you have visited our website. The social media plug-in may collect this information for visitors, whether or not they specifically interact with the plug-in on our website. Social media plug-ins also allow the social media website to share information about your activities on our website with other users of their social media website. Lilly does not control any of the content from social media plug-ins. For more information about social plug-ins from social media websites, you should refer to those sites’ privacy and data-sharing statements.

You have certain choices available to you to help manage the use of cookies and other technologies:

When you visit our websites, we may provide you a choice about whether to “agree” or “disagree” to the use of cookies and other technologies to personalize content and ads on our websites. You should feel free to select “disagree” to limit the circumstances in which personal information collected through tracking technologies on the website may be used for targeted advertising.

Google Analytics offers an opt-out provision for website visitors who do not want their data to be used by Google Analytics. You can receive more information about this option here.

There also are choices provided by the Network Advertising Initiative and the Digital Advertising Alliance. Ads displayed to you using targeted advertising technologies will usually have an Ad Choices logo in the corner, which you can also click on to begin the industry opt-out process. Additionally, if you receive ads on a social media site, you can check that site’s privacy statement and terms of use to determine how to stop seeing such ads. The European Interactive Digital Advertising Alliance keeps a website where people can opt out of receiving interest-based advertising from some or all of the network advertising companies participating in the program. You can find information about the EIDAA here

Do Not Track: There are different ways you can prevent tracking of your online activity. One of them is setting a preference in your browser that alerts websites you visit that you do not want them to collect certain information about you. This is referred to as a Do-Not-Track (“DNT”) signal. Please note that currently our websites and web-based resources do not respond to these signals from web browsers. At this time, there is no universally accepted standard for what a company should do when a DNT signal is detected.

Children’s Information

This website is not intended for or designed for individuals under the age of 18. We do not knowingly collect PI from any person under the age of 18 unless a parent or guardian provides consent.

Reasons We Share PI

We may share your PI with the recipients listed above for purposes consistent with those identified in this notice. These Third Parties have agreed to protect the information and to process it as directed by us (if acting on our behalf) or as required by law.

We may also be required to disclose your information in response to lawful requests by public authorities, including to comply with national security or law enforcement requests.

Where We Transfer and Process PI

This website is owned and operated by Eli Lilly Asia, Inc. in Hong Kong. By using this website, you agree to the processing of your PI in Hong Kong and in any country to which we may transfer your information in the course of our business operations.

We may transmit your PI to other Lilly affiliates and Third Parties worldwide, which may in turn transmit your PI to other Lilly affiliates and/or Third Parties. These affiliates and/or Third Parties may be located in countries that do not ensure the same level of data protection but are required to treat PI in a manner consistent with this notice. To obtain additional information regarding the basis for transfers that Lilly has in place for cross-border transfers of PI, please contact us at [email protected] or visit https://www.lilly.com/privacy.

We may also provide your PI to a Third Party in connection with the merger, sale, assignment, divestiture, or other means of transfer of the business, in which case PI may be shared with, sold, transferred, rented, licensed or otherwise in connection with the contemplated transaction to the Third Party. We will require any such Third Party to agree to treat PI in accordance with this notice.

How Long We Keep PI

PI will be saved for the period of time needed to fulfill legitimate and lawful business purposes in accordance with Lilly’s records retention policies and applicable laws and regulations.

How We Secure PI

We provide reasonable physical, electronic, and procedural safeguards to protect PI we process and maintain. We limit access to PI to authorized employees and Third Parties who need access to perform the business activities described in this notice. Although we strive to protect the PI we process and maintain, no security system can prevent all potential security breaches.

Your Rights and Choices

Upon verification of your identity, and as applicable by law, you have the right to:

request:

information from us on how your PI is being processed and with whom it is being shared;

to see and get a copy of the PI that we have about you;

that we correct, restrict the processing of, and/or erase/delete your PI;

to have your information transmitted to another entity or person in a machine-readable format, in limited circumstances;

There may be exceptions that apply to your request. To exercise your rights, you or your authorized representative may submit a request to the contact information below.

You will not be discriminated against for exercising any of your rights.

How to Contact Us

If you have any questions about this Privacy Statement, you may contact us at:

Lead, Corporate Affairs

Eli Lilly Asia, Inc.

Unit 3203-06, 32/F, Chubb Tower, Windsor House, 311 Gloucester Road, Causeway Bay, Hong Kong

Phone: 852-2572 0160

How to Submit a Complaint

If you wish to raise a complaint on how we have handled your PI, you can contact the above who will investigate the matter.

If you are not satisfied with our response or believe we are processing your PI out of accordance with the law, you can register a complaint with a relevant regulatory authority (e.g., a Data Protection Authority (DPA) or Attorney General).

Links to Third-Party Websites

As a convenience to our visitors, this website may contain links to other sites owned and operated by Third Parties that we believe may offer useful information. The policies and procedures we describe here do not apply to those sites. We are not responsible for the collection or use of PI at any third-party sites. Therefore, we disclaim any liability for any Third Party's use of PI obtained through using the third-party website. We suggest contacting those sites directly for information on their privacy, security, data collection and distribution policies.

Changes to Our Privacy Practices

We may update this Privacy Statement from time to time. When we do update it, for your convenience, we will make the updated statement available on this page. We will always handle your PI in accordance with the Privacy Statement in effect at the time it was collected unless we provide you with the new notice and/or obtain your consent, as appropriate.

Last updated: January 1, 2023