Privacy Policy

WuXi AppTec Website Privacy Policy

Effective and Last Updated: September 28, 2026

1. Introduction and Scope

Thank you for visiting WuXi AppTec's website (the “Website”). This Privacy Notice explains what personal information we collect, why, how we share it, how long we keep it, and the choices and rights available to you. Please read it before using the Website.

This Notice applies to the Website and related online services, landing pages, forms, event and webinar registration pages, content-download pages, and marketing communications that link to this Notice. It does not apply to personal data processed in connection with clinical trials, sponsored research, laboratory services, employment, or other activities that are subject to separate privacy notices, consent forms, contractual terms or other privacy disclosures.

This Website is intended for business-to-business use. It is not directed at patients, clinical trial participants, or individuals seeking medical advice — see §3.3.

2. Who We Are

The Website is provided by WuXi AppTec Co., Ltd., with its registered office at Mashan No.5 Bridge, Binhu District, Wuxi, Jiangsu Province, PRC (“WuXi AppTec,” “we,” “us,” or “our”).

Where WuXi AppTec affiliates assist in operating the Website, responding to inquiries, or supporting the customer relationship, the applicable controller or processor may vary by your location and the interaction at issue; see §14.1 for EEA/UK-specific controller and representative details.

3. Information We Collect

3.1 Information You Provide to Us

We collect personal information you choose to give us when you use the Website or interact with us online, including through contact forms, quote-request forms, “speak with an expert” forms, resource-download forms, newsletter sign-ups, webinar or event registrations, surveys, and meeting requests. This may include:

Your name, business email address, telephone number, company, department, job title, business address, country or region, and preferred language.
The content of your communications with us — comments, questions, feedback, service interests, and other information you choose to share.

3.2 Please Do Not Submit Sensitive or Regulated Data Through General Forms

Important

Please do not submit patient information, clinical trial participant information, protected health information, other sensitive personal information, confidential project details, trade secrets, or proprietary scientific or technical data through general Website forms, unless we specifically request that information through an approved secure channel and provide any additional notice or consent required.

3.3 Patient, Clinical Trial, and Health Information

This Website is not intended to collect patient information, clinical trial participant information, or personal medical information, and we do not provide medical advice through it. If you are a patient or clinical trial participant, please contact your healthcare provider, study doctor, or trial sponsor directly. If personal information is collected in connection with a clinical trial, sponsored research, laboratory service, or customer project, a separate privacy notice, consent form, or contract may apply.

3.4 Information Automatically Collected

When you use the Website, we automatically collect information about your device and activity, including:

IP address, device identifiers, browser type, operating system, device type, and language settings.
Approximate location derived from your IP address.
Referring website, pages viewed, links clicked, forms started or submitted, content downloaded, videos viewed, on-site search terms, and time spent on pages.
Date and time of visits and interactions with our content and communications.

3.5 Cookies, Pixels, and Similar Technologies

We and our service providers may use cookies, pixels, tags, scripts, and similar technologies to operate the Website, remember preferences, analyze traffic, personalize content, measure campaign effectiveness, and improve our services. Depending on your location, you will be shown a cookie banner or preference center that lets you accept, reject, or manage categories of cookies (strictly necessary, functional, analytics/performance, and marketing/advertising). You can also manage cookies through your browser settings, though this may limit some Website features.

Where required by applicable law, we obtain your consent before non-essential cookies or similar technologies are set; this replaces the prior “we do not respond to do-not-track signals” language. Where required by applicable law, we honor recognized opt-out preference signals, such as Global Privacy Control (GPC), GDPR, CCPA, etc., as a valid request to opt out of the sale or sharing of personal information in the browsers and jurisdictions where this applies.

Email tracking technologies (including France and Italy)

Where permitted by law, our marketing, event, webinar, newsletter, and other business emails may use pixels, tags, tracked links, and similar technologies to tell us whether a message was delivered, opened, or clicked; measure engagement; manage deliverability; and improve our communications. These technologies can collect your email address or contact identifier, message and delivery data, open/click information, and related device or IP information.

Compliance status — time-sensitive

France (CNIL, recommendation of 14 April 2026) and Italy (Garante, provvedimento n. 284 of 17 April 2026) now treat individualized email tracking pixels like cookies: prior, specific, informed consent is required for most marketing uses, subject to narrow exemptions. CNIL's 3-month transition window for informing existing contact databases and offering an easy opt-out expired July 14, 2026 — that deadline has already passed as of this draft. Italy's compliance window runs 6 months from Gazzetta Ufficiale publication (29 April 2026), i.e. to approximately late October 2026. Legal/marketing operations should confirm current implementation status against both deadlines before this section is finalized.

Where consent is required for email tracking technologies, including in France, Italy, and other jurisdictions applying ePrivacy-style rules to email pixels, we will seek consent or rely on an applicable exemption, and we will provide a way to withdraw consent or object, separate from unsubscribing to all marketing communications where required by law.

3.6 Information from Third Parties

We may receive information about you from WuXi AppTec affiliates, service providers, event organizers, webinar platforms, conference sponsors, marketing platforms, and publicly available or professional sources (company websites, professional profiles, business directories). We may combine this with information collected through the Website. We use Google Analytics and Google Analytics Demographics and Interest Reporting to understand Website behavior; this analytics data is not tied to your identity. See www.google.com/policies/privacy/partners/ and http://tools.google.com/dlpage/gaoptout to opt out.

4. How We Use Your Information

In accordance with our legitimate interests to provide the Website, we may use your information for the following purposes:

Review and respond to your inquiries, quote requests, and feedback, and provide the services or information you request.
Operate, maintain, secure, and improve the Website and measure content and campaign performance.
Route inquiries to the appropriate business development or scientific contact and manage our relationship with you.
Send communications you have agreed to receive or that we are otherwise permitted to send, and measure their effectiveness.
Detect, prevent, and address security, fraud, or technical issues.
Enforce our terms and policies and protect our legal rights and interests.
Meet our legal, regulatory, and contractual obligations.
For any other purpose we specifically disclose to you and for which we have your consent.

We may use your information for purposes of meeting our legal obligations and responsibilities. We may also process your information for other purposes as disclosed to you, where we have your consent to do so, or permitted to do so by law.

EEA/UK visitors: see the lawful-basis table in §14.1 for the specific legal basis behind each of these uses.

5. How We Share Your Information

5.1 Service Providers

We may share information with providers who support the Website and our business, such as hosting, cloud infrastructure, cybersecurity, analytics, consent management, CRM and marketing automation, email delivery, webinar/event management, and customer support providers. We require service providers to process personal information only as necessary to provide their services to us and to protect it appropriately.

5.2 Our Affiliates

We may share your information with any members, subsidiaries or affiliates of our corporate group to provide the Website, for purposes including preventing illegal use and supporting users.

5.3 Law Enforcement and Legal Requirements

We may share your information with competent authorities, courts, third parties, and bodies in response to a court order, summons or subpoena, lawful discovery requests, regulatory requests, or as permitted or required by law, including when we reasonably believe it is necessary or appropriate to investigate, prevent or take action against illegal activities, suspected fraud, or situations involving potential threats to the physical safety of any person.

5.4 Sale or Merger

We may disclose your information to any third party:

that acquires, or is interested in acquiring, all or part of our assets or shares;
that we acquire in whole or in part; with which we merge; or that succeeds us in carrying on all or part of our business; in each case, who has a legal obligation to refrain from disclosure and use unauthorized by us.

6. International Data Transfers

WuXi AppTec operates globally. Personal information collected through the Website may be processed, stored, accessed, or transferred in China, the United States, the European Economic Area, the United Kingdom, Switzerland, and other countries or regions where WuXi AppTec, our affiliates, or our service providers operate. These transfers may involve website hosting, analytics, CRM and marketing automation platforms, customer support, and WuXi AppTec affiliates.

Where personal information from the EEA, UK, or Switzerland is transferred to a country not covered by an adequacy decision, we use appropriate safeguards required by law, which may include the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum, transfer risk/impact assessments, and supplementary safeguards.

Where personal information is transferred to, from, or accessed by parties in Mainland China, we comply with applicable PRC cross-border transfer requirements under the Personal Information Protection Law (PIPL), which may include separate notice, separate consent, a personal information protection impact assessment, standard contracts, certification, or security assessment, as applicable.

7. How We Protect Your Information

We maintain physical, electronic, and managerial safeguards designed to protect the personal information we process. No transmission over the Internet or storage system is completely secure, and we cannot guarantee absolute security; any transmission of information to us is at your own risk.

If a breach affecting your personal information occurs, we will notify affected individuals and the competent supervisory authorities where required by applicable law and within the timelines that law requires.

8. How Long We Keep Your Information

We keep personal information for as long as needed to provide the Website and our services, operate our business, and fulfill the purpose for which it was collected. Criteria we use to set retention periods include: the nature of the information and purpose it was collected for; the length of our relationship with you or your organization; whether we still need it to respond to your inquiry or provide a requested service; and legal, regulatory, contractual, tax, accounting, audit, or litigation requirements. When information is no longer needed, we delete, anonymize, or otherwise handle it in line with our retention practices and applicable law.

Data category	Indicative retention
General inquiry / contact form submissions	24 months after last interaction
CRM contact and lead records (HubSpot/Salesforce)	36 months after last meaningful engagement
Webinar / event registration records	24 months
Cookie consent logs	Duration of consent plus limitation period
Email engagement / suppression list data	Retained as long as necessary to ensure that marketing opt-out requests are respected and documented

9. Your Rights

Depending on where you live and the laws that apply, you may have some or all of the following rights regarding your personal information:

Right of access: confirm whether we process your information and get a copy of it.
Right to rectification: correct or update inaccurate or incomplete information.
Right to erasure: request deletion in certain circumstances (for example, if processing was unlawful, unnecessary for the purpose collected, or you have withdrawn consent).
Right to withdraw consent: at any time, where processing is based on consent, without affecting processing carried out before withdrawal. Some features may become unavailable if consent is withdrawn.
Right to restrict or object to processing: including objecting to processing based on our legitimate interests, and to direct marketing at any time.
Right to portability: receive information you provided to us in a structured, machine-readable format and have it transmitted to another party.
Right regarding automated decision-making: not to be subject to a decision based solely on automated processing that produces a legal or similarly significant effect (see §11).
Right to lodge a complaint with your local data protection or supervisory authority.

You may also manage marketing preferences or unsubscribe using the links in our communications. Where required by law, withdrawing consent to email tracking technologies is available separately from unsubscribing to all marketing — see §3.5.

To exercise any of these rights, contact us as described in §13. We will respond without undue delay and, in any event, within 15 working days unless a shorter or longer period is required or permitted by law, and may ask you to verify your identity first.

10. Children's Privacy

The Website is not directed at children. We do not knowingly collect personal information from individuals who have not reached the minimum age required under applicable laws to provide consent to the processing of their personal information. If we become aware that we have collected such information, we will take reasonable steps to delete it without undue delay.

11. Automated Decision-Making and Profiling

We may use your Website activity, form submissions, content downloads, event participation, and email engagement to understand your professional interests, route inquiries to the right team, prioritize follow-up, personalize communications, measure campaign effectiveness, and improve the customer journey. We do not use automated processing to make decisions that produce legal or similarly significant effects about Website visitors. If that changes, we will provide additional notice and, where required by law, obtain consent.

12. Changes to This Notice

We reserve the right to change this Privacy Policy from time to time at our sole discretion. Without your explicit consent, we will not diminish the rights you are entitled to according to this policy. We will notify you of any material changes through a notification on the Website, and such change will only apply to information collected after the revised Privacy Policy takes effect. Any changes to this Privacy Policy will become effective immediately after being posted. We encourage you to periodically review this Privacy Policy to stay informed of changes and on how we are protecting your personal information.

13. Third Party Links

This Privacy Policy does not apply to any other websites or platforms unless the context otherwise specifies. Please note that the Website may include links to other websites, platforms or products which are subject to privacy policies and practices that differ from ours. Such links are provided for your convenience and information only, and do not represent our affiliation, sponsorship, or endorsement of the information on third party sites. We are not responsible for the collection and processing of your information if you provide your information to any of those third parties or interact with such third-party websites.

14. Contact Us

If you have questions about this Notice, our privacy practices, or want to exercise your privacy rights, please contact us:

Email: [email protected]
Mailing address: WuXi AppTec Sales LLC, 2520 Pilot Knob Road, Suite 140, St. Paul, MN 55120

If you are contacting us from the EEA, UK, Switzerland, China, California, or another U.S. state, please note your country/region of residence so we can route your request appropriately.

15. Jurisdiction-Specific Terms

If you are located in one of the jurisdictions below, these additional terms apply in addition to the rest of this Notice. Where there is a conflict, the jurisdiction-specific terms control.

15.1 European Economic Area (EEA) and United Kingdom (UK)

We, WuXi AppTec Co., Ltd., registered at Mashan No.5 Bridge, Binhu District, Wuxi, Jiangsu Province, PRC, is the controller of your personal information for the purposes of the Website, unless a different WuXi AppTec entity is identified in a separate notice.

Our representative in the European Union is Crelux GmbH (Am Haag 16, 82166 Gräfelfing, Germany, [email protected], +49 (0) 89700760200).

Our representative in the United Kingdom is WuXi AppTec UK LTD (5 New Street Square, London, EC4A 3TW, [email protected]).

How We Use Your Information

The table below summarizes how we use your personal information, as well as the lawful basis applicable to our processing of such personal information under applicable data protection laws.

How we use your personal information	Lawful basis (EEA/UK)
To review your comments or questions, and provide you with appropriate services	It is necessary for our legitimate interests to review and respond to you and provide you with an appropriate service.
To enforce our terms and policies.	It is necessary for our legitimate interests to enforce our terms and policies to protect our Website and effectively manage and protect our business.
To process and respond to your requests, queries, applications, complaints and feedback.	It is necessary for our legitimate interests to review and respond to your requests, queries, applications, complaints and feedback when you contact us.
To provide support and respond to your requests, feedback and queries.	It is necessary for our legitimate interests to provide you with support and to respond to you when you contact us.
To monitor, operate, maintain and manage the Website.	It is necessary for our legitimate interests to effectively operate our Website.
To address and resolve technical issues and bugs.	It is necessary for our legitimate interests to effectively operate our Website and resolve any technical issues.
To ensure the Website operates effectively and efficiently	It is necessary for our legitimate interests to effectively and efficiently operate our Website.
To detect, prevent or otherwise address security, fraud or technical issues.	It is necessary for our legitimate interests to protect the security of our Website and our business.
To improve and enhance the features and performance of the Website and relevant services.	It is necessary for our legitimate interests to improve and develop the Website and relevant services.
To properly manage and administer our relationship with you. As required to do so by law. It is necessary to comply with legal obligations that we are subject to.	It is necessary for our legitimate interests to manage our relationship with you.
To manage our business.	It is necessary for our legitimate interests to effectively manage our business.
To protect, enforce or defend our rights and interests (including, in relation to a violation of our terms and conditions).	It is necessary for our legitimate interests to protect and defend our rights and interests.
To meet our legal obligations and responsibilities.	It is necessary to comply with legal obligations that we are subject to.
For other purposes as disclosed to you, where we have your consent to do so.	Consent.
As required to do so by law.	It is necessary to comply with legal obligations that we are subject to.

Your rights

In addition to the rights set out in §9 (Your Rights), you also have the following rights in connection with your personal information:

Withdrawal of Consent. You also have the right to withdraw your consent at any time where our processing of your personal information is based on your consent. However, certain features of the Website and our services may not be available if your consent has been withdrawn.
Right of Restriction. In certain circumstances, you may have the right to request that we restrict the processing of your personal information.
Right of Portability. You may have the right to receive personal information about you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit that personal information to another entity.
Right of Objection. Where we process your personal information on the basis of our legitimate interests, you have the right to object to this. However, we may continue to process your personal information if you have objected where we have compelling legitimate grounds to continue such processing or for the establishment, exercise or defense of legal claims.
Direct Marketing. You have the right to ask us to stop processing your personal information for direct marketing purposes.
Automated Decision Making. In certain circumstances you have the right to request that you are not subject to automated processing of personal information, which produces a legal effect or similarly significantly affects you.

Right to lodge a complaint

If you are in the EEA, you may lodge a complaint with a supervisory authority in the EU Member State where you live, work, or where the alleged infringement occurred. If you are in the UK, you may contact the Information Commissioner's Office.

You can contact us using the contact details at §14 (Contact Us) of the Privacy Policy, or the contact details set out above in these EEA/UK Jurisdiction Specific Terms, to exercise any of your rights.

International transfers
If you are in the EEA or UK, your information may be transferred to, stored, or processed outside the EEA/UK — for example in China — as described in §6. We will obtain your separate consent for such transfers to the extent required by applicable law.

15.2 United States

If you are a resident of California or another U.S. state with an applicable comprehensive privacy law, you may have rights to access, correct, delete, or obtain a copy of your personal information; opt out of sale, sharing, or targeted advertising; limit use of sensitive personal information; appeal a privacy-request decision; and not be discriminated against for exercising these rights.

The following terms used in this section and not otherwise defined have the meanings given to such terms under the California Consumer Privacy Act of 2018, as amended from time to time (“CCPA”): “personal information,” and “sell / sale.”

California Privacy Rights. Under CCPA, California residents have the right to request access or deletion of the personal information we have collected in the preceding twelve (12) months. You can also request the disclosure of the categories of personal information we collect, the purposes for which we collect, sell or disclose that information, and the categories of third parties with whom we share the information.

No Sale. You have a right to opt out of sale of your personal information. We do not sell, and in the preceding twelve (12) months did not sell, any personal information about you.

Right to Non-Discrimination for the Exercise of CCPA Rights. You may not be discriminated against because you properly exercise any of your rights under the CCPA.

Exercise of Rights. To exercise your privacy rights under CCPA, please contact us and submit a request via the email address as provided in §14 (Contact Us) or by calling (toll free) +1 857-413-2800. In order to protect your privacy, we may require you to provide additional information to demonstrate your identity before we are able to process your request. You may designate an authorized agent to make such request on your behalf in writing or through a power of attorney. We may require the agent to provide proof of your authorization and may need your confirmation directly with us before accepting such a request from an agent.

WuXi AppTec does not sell personal information for money. We may share limited online identifiers with advertising partners to deliver cross-context behavioral advertising, which may be considered a ‘sale’ or ‘sharing’ under certain U.S. state privacy laws. You can exercise your choices using the ‘Your Privacy Choices’ link in our footer.

15.3 People's Republic of China

If you are located in the mainland China, these additional jurisdiction specific terms will apply to the processing of your personal information. We, WuXi AppTec Co., Ltd., with registered office at Mashan No.5 Bridge, Binhu District, Wuxi, Jiangsu Province, PRC, is the personal information processor of your personal information for the purposes of the Website and applicable data protection laws.

Law Enforcement Agencies and Authorities. The following statement shall be added to the end of §5.3 (How We Share Your Information - Law Enforcement Agencies and Authorities) in the main body of this Privacy Policy:

“The disclosure of your information under this section will also be subject to applicable data protection laws.”

Your Rights. In addition to the rights set out in §9 (Your Rights), to the extent permitted by applicable laws, you also have the following rights in connection with your personal information:

Right to Restriction and Rejection of Processing. In certain circumstances, you may have the right to restrict or reject the processing of your personal information.
Portability of Personal Information: You may request us to transfer your personal information that we possessed to another personal information processor that is designated by you. We will review your request, and if such request meets the statutory requirements under relevant provisions formulated by the competent authorities, we will duly provide you with the channel for such transfer.
Right to Request for Explanation: You have the right to request us to explain our rules as to the processing of your personal information.

16. Accessibility Statement

WuXi AppTec is working toward conformance with the Web Content Accessibility Guidelines (WCAG) 2.2, targeting Level AAA where practicable, for the pages that host this Notice. Accessibility of the published text and page depends on implementation choices made by the web team; the notes below are provided for that team and are not part of the legal content of this Notice.

Structure this Notice with a single, correctly nested heading hierarchy (H1 for the title, H2/H3 for sections/subsections) so it is navigable by screen reader and, where feasible, meets AAA Success Criterion 2.4.10 (Section Headings).
Provide a persistent, visible table of contents with working in-page anchor links.
Use plain language and expand acronyms (GDPR, PIPL, CCPA, DPIA) on first use, consistent with AAA Success Criterion 3.1.5 (Reading Level).
Ensure text and interactive elements (cookie banner, preference center, forms) meet the AAA 7:1 contrast ratio (Success Criterion 1.4.6) rather than the AA 4.5:1 minimum.
Use descriptive link text (“View our cookie preference center”, not “click here”).
Ensure the cookie banner and preference center are fully operable by keyboard alone and do not rely on color alone to convey consent status.
Avoid content with a strict time limit; where the cookie banner auto-dismisses, provide a way to reopen preferences at any time (footer link, per §13).
Provide visible, high-contrast focus indicators throughout (Success Criterion 2.4.7 / 2.4.13).