Privacy Policy

Amylyx Pharmaceuticals, Inc., a Delaware corporation (hereinafter "Amylyx") is committed to protecting your privacy. We have developed this Privacy Policy to help you understand what kind of information about you that we collect, why we collect it, and what we do with it. Throughout this Privacy Policy, the words "we," "us," and "our" refer to Amylyx and its directors, employees and affiliates. This Privacy Policy applies when you access our websites, including www.amylyx.com, www.amylyxmeetings.com and other sites, mobile applications or other online content, functionality or services operated by us or on our behalf that link to this Privacy Policy (collectively, "Sites"). If one of our Sites has different privacy practices and a different privacy policy, that policy will govern if there is a conflict with this Privacy Policy. Similarly, if one of our Sites contains statements about how information is processed, those statements will govern if there is a conflict with this Privacy Policy. By accessing or using our Sites on any computer, mobile phone, tablet, console or other device, you agree that you have read, understand and will be bound by this Privacy Policy. We may modify this Privacy Policy at any time. If you do not agree to this Privacy Policy, please do not use our Sites. For information on the Site's Terms of Use, please see www.amylyx.com/termsofuse.

Links to Third Party Websites

This Privacy Policy applies exclusively to our Sites and not to any third-party websites which may be linked to from our Sites. The materials and websites referenced and/or linked to from our Sites are provided for informational purposes only. The linked sites are not under our control, and we do not assume any responsibility or liability for any communication or materials available at such linked sites. You should review the privacy policies and terms of use associated with those linked sites if you decide to access them. Any reference to a commercial or noncommercial product, process, service or company is not an endorsement or recommendation by Amylyx, nor a guarantee of the reliability of the information or product.

Collection of Your Personal Information

Personal Information You Provide

When you use our Sites, Amylyx collects information about you. This includes information that identifies you or can be used to identify you ("Personal Information"). You may voluntarily provide Personal Information to us in order to use certain features available on the Sites. These features may include: (a) applying for employment through our "Careers" page; (b) sending us a message through our "Contact Us" page or signing up for communications through our "Subscribe" page; and/or (c) registering for an Amylyx meeting or event through our event registration page. Failure to provide certain Personal Information, may result in our inability to provide you with our services, such as responding to your messages or job application.

Amylyx collects, stores and uses the following categories of Personal Information:

Personal or business information, such as your name, job title, home or other physical address, email address, phone number, whether you are a patient, provider, family member or caregiver.
Account data, such as your user name and login credentials.

Demographic information, such as your gender, age, and date of birth.
Contact preferences, when it is voluntarily submitted to us for purposes of considering or ordering a product, receiving services and/or when you register for updates, or contact us.
Professional or employment-related information, such as credentials provided on a curriculum vitae or resumé, professional history, educational information, business contact information, job title, and employer name.

Information We Collect Automatically

We also automatically collect certain information, including Personal Information, about you when you interact with our Sites. For example, we may use website analytics tools on our Sites to retrieve information from your browser, including the website you came from, the search engine and the keywords you used to find our Sites, the pages you view within our Sites, your browser add-ons, and your browser's width and height. We may also use technologies, such as cookies, to collect information about the pages you view, the links you click and other actions you take on our Sites. For more information on our use of cookies, please see the section "Use of Cookies" below. Additionally, we collect certain standard information that your browser sends to every website you visit, such as your IP address, browser type and language, access times and referring website addresses.

Use of Your Personal Information

Amylyx collects and uses your Personal Information for the following purposes:

Providing you with more effective services.

Making the Sites or services easier to use.
Performing research and analysis aimed at improving our products, services, communications and technologies.
Displaying content that is customized to your interests and preferences.
Communicating with you. We may send certain service communications such as information on technical service issues, information about our investigational products, programs, and business and security announcements.
Informing you of other activities of Amylyx and its affiliates.

Processing employment applications.
Advertising our services and products.
Responding to your inquiries and requests, including with respect to investments and strategic collaborations.
Protecting the security and integrity of the website or otherwise protecting Amylyx’s rights or property, your health and safety, or the health and safety of others.
Complying with applicable regulatory and legal requirements, responding to legal, court, or regulatory investigations or requests for information.

We may combine information you give us with other information from our sources, transactions and communications. This includes, but is not limited to, information from direct mail, events, products and applications, or other interactions you have with Amylyx (for example, by telephone or in person). We may also combine that information with data that is publicly available and data from third parties. In addition, we may aggregate and/or pseudonymize the Personal Information we collect and use that information for the above-listed purposes.

Sharing Your Personal Information

Amylyx may disclose information to third parties for the business purposes described above. We make sure that third parties that provide service to us keep your Personal Information confidential and only use your Personal Information as necessary to provide the services to us. Please note that Amylyx does not rent, lease, sell or exchange Personal Information with other organizations. We share your personal information with the following categories of third parties :

Our affiliates, business partners with whom we collaborate regarding our investigational products and programs such as scientific advisors, joint venture partners, and strategic collaboration partners.
Service providers that provide services to help us with our business activities, such as providers to help perform statistical analysis, send you email or postal mail, host our Sites, respond to communications you send to us, or provide customer support.
Analytics and digital advertising providers.
Law enforcement, government agencies, courts, or other third parties to protect ourselves, our employees, or others, to protect our or a third party's property, to investigate fraud, or as required by law, such as to comply with a subpoena or similar legal process.
Third parties in the event Amylyx is involved in an actual or contemplated merger, acquisition, or sale of all or a portion of its assets, or in the unlikely event of bankruptcy. If this occurs, the Personal Information will be subject to the policies of the receiving organization. Amylyx will not rent, lease, sell or exchange Personal Information or Covered Information with other organizations.

Any other third party with your prior consent.

Security of Your Personal Information

Amylyx uses a variety of security technologies and procedures to help protect your Personal Information from unauthorized access, use, or disclosure. However, like other companies, Amylyx cannot guarantee the security or confidentiality of the Personal Information you provide to us. As a result, while we strive to protect your Personal Information, you acknowledge that: (a) there are security and privacy limitations inherent in the Internet which are beyond our control and (b) security, integrity, and privacy of any and all information and data exchanged between you and us through our Sites cannot be guaranteed.

How Long We Keep Your Personal Information

We retain your Personal Information for as long as reasonably necessary to achieve the purposes disclosed at the point of collection or in this Privacy Policy, unless a shorter retention period is required by law. We retain your Personal Information for complying with legal, regulatory, audit and tax requirements. In addition, we retain your Personal Information for the period of time that enables us to handle and respond to your questions, complaints and requests, to investigate, initiate and depend legal claims, and to protect our rights or our legal positionAfter this period the Personal Information relating to your use of our Sites will be deleted;

Cookies are small amounts of data which your web browser stores on your device at the request of certain websites. Cookies are then sent back to the originating web domain on your subsequent visits to that domain. Most pages contain elements from multiple web domains so when you visit the website, your browser may receive cookies from several sources.

To the extent required by applicable laws, we will ask for your consent for placing cookies on your devices. Some web browsers may also offer users of the Sites the ability to disable receiving certain types of cookies, please see your browsing settings for more information on how this can be done. Please note that if cookies are disabled, some features or functionality of the Sites may not work correctly.

Cookies are useful because they allow a website to recognize a user’s device. Cookies allow you to navigate between pages efficiently, remember preferences and generally improve the user experience.

They can also be used to tailor advertising to your interests through tracking your browsing across websites.

There are two primary types of cookies that are used: session cookies and persistent cookies. Session cookies are deleted automatically when you close your browser and persistent cookies remain on your device after the browser is closed (for example to remember your user preferences when you return to the site). Each cookie typically falls into one of several categories:

Strictly Necessary Cookies - We make use of certain essential cookies in order to enable you to move around the Sites and use their features. Without these cookies, services you have asked for (such as navigating between pages) cannot be provided.
Performance Cookies - We make use of analytics cookies to analyze how our visitors use the Sites to monitor the Sites' performance. This allows us to provide a high-quality experience by customizing our offering and quickly identifying and fixing any issues that arise. For example, we might use performance cookies to keep track of which pages are most popular and which method of linking between pages is most effective, and to determine why some pages are receiving error messages. We might also use these cookies to highlight articles or site services that we think will be of interest to you based on your usage of the website.
Website Functionality Cookies - We make use of cookies to provide you with certain functionality. For example, to remember choices you make (such as your language or the region you are in), or to recognize the platform from which you access the Sites, and to provide enhanced and more personal features. These cookies are not used to track your browsing on other sites.

To the extent required under applicable laws, we will ask for your consent to place cookies on your device that are not strictly necessary, if you do not agree or no longer wish to accept such cookies, you may withdraw your consent or you may disable them by following the instructions for your browser. Please note that some of our services may not function properly if cookies are disabled. You may also opt out of third-party cookies where available by using the links provided in this Privacy Policy.

Furthermore, some of our service providers that set cookies via our Sites on our behalf may offer the ability to opt-out of cookies via the Network Advertising Initiative's consumer opt-out tool, the European Interactive Digital Advertising Alliance's consumer opt-out tool, or the Digital Advertising Alliance's consumer choice page.

Please note that Amylyx is not responsible for the cookie practices of third-party websites which may be linked to on our Sites.

Children Under Sixteen

Our Sites are not directed to children under the age of 16. Amylyx does not knowingly collect Personal Information from children under the age of thirteen through our Sites. If we learn that we have collected Personal Information directly from a child under the age of 13 through the Sites, we will delete that information.

Email Communications

From time to time, Amylyx may contact you via email for the purposes of responding to your communications to us. Amylyx may also contact you via email for the purpose of providing announcements, updates, alerts, confirmations, surveys, and/or general communication, only if you have given us your email address for such purposes or if you have previously purchased one of our products and have not opted-out to such communications.

If you would like to stop receiving email from Amylyx, you may opt out of such communications by clicking "Unsubscribe" at the bottom of the email.

Your Privacy Choices and Rights with Respect to Personal Information

You may update the Personal Information you provide to us through the Sites, and your associated communications preferences, at any time by following the instructions on the relevant page of the Sites or by contacting us at info@amylyx.com. If you have provided Personal Information to us through a third-party employment website, you should contact that website to update that Personal Information or your communication preferences related to that website.

For information about the choices and rights you have with respect to cookies, please see the section of this Privacy Policy called "Use of Cookies," above.

Users in the European Economic Area ("EEA") or the United Kingdom ("UK") and in select states of the United States ("U.S.") have additional choices and rights regarding Amylyx's processing of their Personal Information. If you are a user in the EEA or UK, please see the section of this Privacy Policy on "Users in the EEA and UK," below. If you are a user in the U.S., please see the section of this Privacy Policy on "Users in Select U.S. States," below.

Users in the EEA and UK

If you are located in the EEA or UK, your Personal Information may be protected by data protection laws in the EEA or UK, such as the European Union General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. Amylyx will comply with these data protection laws when it uses and shares your Personal Information as described in this Privacy Policy.

When using or sharing your Personal Information as described in this Privacy Policy (including transfers out of the EEA and UK described below), Amylyx relies on the following lawful bases: Providing access to our Sites and services: we process your Personal Information in order to facilitate your access to our Sites and services to perform the agreement we have with you when using our such services and for our legitimate business interests to provide you with content and access to our Sites and/or services.

Improving our Site and services: we process your Personal Information to improve our Sites and services, including providing you with more effective services; making the Sites or services easier to use; performing research and analysis aimed at improving our products, services, communications and technologies; and displaying content that is customized to your interests and preferences. We have legitimate business interests in analyzing and improving our Sites and services and offering you a service that matches your interests as closely as possible.
Communicating with you: we process your Personal Information when sending certain service communications such as information on technical service issues, information about our investigational products, programs, and business and security announcements. Depending on the purpose of communication, we either have a contractual or legal obligation to communicate with you or have legitimate business interest to keep you informed on our services and Sites.
Maintaining website security: we process your Personal Information in order for us to maintain a high level of security on our Sites, including investigating and responding to misuse of our Sites and protect the visitors of our Sites. We have legitimate business interests for keeping our business operations safe and providing a safe and secure digital environment for the users of our Sites.
Promoting our activities: we process your Personal Information in order to inform you of other activities of Amylyx and its affiliates and partners where we have a legitimate business interest or, if required under applicable laws, where we have your consent.
Processing employment applications: we process your Personal Information in order to review and handle your employment application for our legitimate business interests to operate our business.

Responding to your inquiries and requests: we process your Personal Information in order to respond to your inquiries and requests, including investment and strategic collaboration inquiries, as it is our legitimate business interest to operate our business, communicate with you and answer any questions you may have.
Protecting our or another party's rights and property: we process your Personal Information where needed for our legitimate interests to protect our rights and property, or the rights and property of third parties.
Complying with our legal obligations: we process your Personal Information to comply with our legal obligations and to cooperate with regulators, courts, and public authorities where required under applicable laws or when we have legitimate business reasons to cooperate.

Amylyx is headquartered in the U.S., and as a result, your Personal Information will be processed by Amylyx in the U.S. Amylyx may contract with service providers to process your Personal Information on Amylyx's behalf; these service providers may be located outside of the EEA and UK. For more information on the types of service providers used, please see the section “Sharing your Personal Data”. Some of these non-EEA or UK countries provide an adequate level of data protection according to EEA or UK standards. Other countries may not offer you the same protections as the laws of the country in which you are residing when your Personal Information is collected. For transfers from the EEA or UK to such countries, we will take reasonable and adequate measures to ensure your Personal Information is appropriately protected (for instance by using the standard contractual clauses adopted by the European Commission). If you have questions about the international transfer of your personal data or the appropriate safeguards that we have taken to protect your personal data, please contact us at info@amylyx.com. When submitting an employment application to Amylyx through a third-party employment website (if applicable), we recommend reviewing the privacy policies and terms of use associated with those websites for more information on how they use and share your personal data, including their sharing of your Personal Information with Amylyx. Data protection laws in the EEA and UK provide you the following legal rights with respect to your Personal Information used and shared by Amylyx:

To withdraw consent at any time, if we are using and sharing your Personal Information on the basis of consent

To access the Personal Information that Amylyx has about you
To request that Amylyx rectify or erase your Personal Information
To request that Amylyx restrict the way it uses or shares your Personal Information
To object to the way Amylyx uses or shares your Personal Information, when such use is based on our legitimate interests;
To get an electronic copy of your and to ask Amylyx to transfer your Personal Information to someone else; and

To lodge a complaint with a data protection authority in the EEA or UK.

Amylyx's ability or obligation to comply with your requests may be limited by applicable law.

To request to exercise one of these rights, please contact us at info@amylyx.com.

Users in the U.S.

If you reside in the United States, your Personal Information may be protected by certain data protection laws.

i. Your Rights

Depending on where you reside, you may have the following rights with respect to your Personal Information, subject to applicable exceptions:

Right to Access. You may be entitled to request that we disclose to you the specific pieces of your Personal Information that we have collected about you in a portable and, to the extent technically feasible, readily usable format.
Right to Know. You may have the right to confirm that we have collected Personal Information about you and know what Personal Information we have collected about you, including, as applicable, the categories of Personal Information we have collected, the sources from which we collected that Personal Information, the business or commercial purposes for which we collected, sold, and shared that Personal Information, the categories of Personal Information that we sold, shared, or disclosed to third parties for business purposes and the categories of third parties to whom we sold, shared or disclosed Personal Information.
Right to Deletion. You may be entitled to request that we delete the Personal Information that we have collected from you. We will use commercially reasonable efforts to honor your request, in compliance with applicable laws. Please note, however, that we may need or be required to keep such information, such as for our legitimate business purposes or to comply with applicable law. For example, the CCPA includes exemptions that provide that we do not have to delete information that is necessary to comply with legal obligations including those pertaining to the quality, safety or effectiveness of a product or activity regulated by the Food and Drug Administration (FDA), complete a transaction, detect security incidents, or for certain other internal purposes.
Right to limit the processing of sensitive Personal Information. If you are a resident of California, you may be entitled to restrict the processing of your sensitive Personal Information.
Right to Correct. You may request that we correct Personal Information that e hold about you.

Right to Opt-Out of Sales and Sharing of Personal Information. You may be entitled to opt out of sales of your Personal Information to third parties and to opt out of the disclosure of your Personal Information to third parties for certain targeted advertising. We do not sell your Personal Information.
Right to Non-Discrimination. You have the right not to receive discriminatory treatment if you exercise the rights conferred to you by applicable privacy law.

ii. How to Exercise Your Rights

If you would like to exercise one of your rights or exercise rights on behalf of someone else, please contact us at info@amylyx.com or 617-682-0917 and provide us with your first and last name, email address and phone number.

To process your requests to Know, Access, Delete, or Correct Personal Information, we must be able to verify your identity to a reasonable degree of certainty. To verify your identity, we will ask you to provide your contact information and additional identifiers based on your relationship with us. Before we process your request, we will match these data points with data points we currently maintain to verify your identity and your relationship with us.

When you use an authorized agent to submit a request, you must provide the authorized agent with written permission to do so, and, in certain circumstances, we may ask you to verify your own identity directly with us. We may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf. Authorized agents may use the channels listed above to submit requests.

You may also contact us using these methods to appeal any decision we make relating to your request to exercise your rights.

Changes to This Statement

Amylyx reserves the right to change this Privacy Policy from time to time with changes effective as of the date indicated on the updated policy. Where we are required to do so, we will take reasonable steps to inform you of changes that will have a substantial impact on your rights. Your continued use of our Sites after we have made such modifications will constitute your acknowledgment of the modified Privacy Policy.

Contact Information

Amylyx welcomes your questions or comments regarding this Privacy Policy. Please contact Amylyx at:

Amylyx Pharmaceuticals, Inc.
43 Thorndike St.
Cambridge MA 02141
Email Address: info@amylyx.com

Accessibility Policy

Amylyx is committed to making this Privacy Policy accessible to all people. If you encounter any difficulty accessing the information in this Privacy Policy or require access to it in an alternative format, please send us an e-mail or write us at our contact information set forth above in the "Contact Information" section of this Privacy Policy.