Notice of Collection of Personal Information and Privacy Policy for California Residents

This Notice of Collection of Personal Information and Privacy Policy (“Privacy Notice”) applies to the collection of Personal Information from California residents on and after January 1, 2023. This Privacy Notice provides California residents with information and rights required by the California Privacy Rights Act (“CPRA”). The Privacy Notice applies only to individuals residing in the State of California who are considered “consumers” under the CPRA and from whom we collect “personal information” as described in the CPRA.

Please note that this Privacy Notice does not cover information protected by the Health Information Portability & Accountability Act (“HIPAA”), and the California Confidentiality of Medical Information Act (“CMIA”), both of which Natera complies with to the extent we provide health care and testing services, as documented in our Notice of Privacy Practices.

In other words, the categories of Personal Information covered by the CPRA, and disclosed in, this Notice, are limited to personal information that Natera collects, discloses, shares, and retains in the conduct of activities other than the provision of health care services, such as sales and marketing, and employment/HR-related activities.

This Privacy Notice also does not cover information collected as part of a clinical trial or other biomedical research study subject to or conducted in accordance with: the Federal Policy for the Protection of Human Subjects (the “Common Rule”); pursuant to good clinical practice guidelines issued by the International Council for Harmonisation; or pursuant to human subject protection requirements of the United States Food and Drug Administration.

By accessing our website, or submitting personal information to us, you consent to the processing, collection, use, sharing and disclosure of such information as set forth in this Privacy Notice, as it may be updated from time to time.

Consumer: As used in this Notice, Consumer means a natural person who is a California resident, however identified, including by any unique identifier.

Personal Information: As used in this Notice, “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an identifiable individual or household. Personal Information does not include:

• publicly available information that is lawfully made available from federal, state, or local government records, or information that Natera has a reasonable basis to believe was lawfully made available to the general public by the Consumer or from widely distributed media, or by the Consumer;
• “Protected Health Information” (PHI) covered by HIPAA;
• other information exempt from the CCPA/CPRA, including information protected under other laws such as the Fair Credit Reporting Act; or
• information that is de-identified or aggregate consumer information

Sensitive Personal Information: We do not collect sensitive personal information for purposes of inferring characteristics.

All Other CPRA Definitions: All other terms used in this Notice, to include “Collect,” “Processing,” “Service Provider,” “Third Party,” “Sale,” “Share,” and “Consumer,” shall have the meanings afforded to them in the CPRA, whether or not such terms are capitalized herein, unless contrary to the meaning thereof.

We collect personal identifiers:

• to process job applications, onboard personnel, and to respond to questions you may have.
• to administer and provide benefits, and facilitate employee compensation planning, as well as work-related travel.
• to facilitate access to company facilities, equipment, accounts and systems.
• to administer and maintain the security of our facilities and our information technology resources, and to protect ours or other’s rights, property, or safety.
• to enable us to advertise and market our services and products.
• to support auditing and analytics related to our online site(s), such as counting ad impressions, unique visitors, and performing other website analytics.
• to enhance and improve the overall customer experience on our websites.
• to comply with applicable Legal and Regulatory requirements.

We collect Protected Classification Characteristics Under State or Federal Law:

• when voluntarily provided as part of the hiring process.
• to administer and provide benefits.
• for purposes of servicing our employees, and providing “reasonable accommodations,” when appropriate.
• to comply with applicable Legal and Regulatory requirements.

We collect Commercial Information:

• to enable Natera to advertise and market its services and products to potential patients, providers and health care organizations.

We collect Internet or other network activity information:

• to analyze and improve our products and services.
• to enable Natera to advertise and market its services and products.
• to monitor, investigate and enforce compliance with our terms and conditions, employee agreements, policies, and other legal and regulatory requirements.
• to administer and maintain the security of our information technology resources, and to protect ours or other’s rights, property, or safety.
• to enhance and improve the overall customer experience on, and interaction with, our websites.
• to comply with applicable Legal and Regulatory requirements.

We collect Audio, Electronic, Visual, Thermal, Olfactory, or Similar Information:

• to analyze and improve our products and services.
• to train personnel, as well as to make the material available to personnel for training at a later point in time.
• to monitor, investigate and enforce compliance with our terms and conditions, employee agreements, policies, legal and regulatory requirements.
• to facilitate access to company facilities, equipment, accounts and systems.
• to administer and maintain the security of our facilities and our information technology resources, and to protect ours or other’s rights, property, or safety.
• to comply with applicable Legal and Regulatory requirements.

We Collect Professional or Employment-Related Information:

• to administer the employment relationship, including for purposes of recruiting, hiring, candidate verification/checks, placement and benefits services.
• to provide and administer employee benefits.
• to enable Natera to engage in, an operate, our performance management processes.
• for salary and compensation planning.
• to enable our employee referral and company recognition programs.
• to monitor access to company facilities, equipment, accounts and systems and to maintain the security of our information systems.
• to conduct workforce investigations.
• to ensure compliance with our licensing, certification and quality management requirements, and with applicable law.

• websites and job boards focused on candidates, publicizing job opportunities, and recruiting.
• help us verify, validate and manage information you have provided for purposes of seeking employment.
• provide recruiting, hiring, candidate verification/checks and benefit services for us, and on our behalf.
• provide benefit verification, program enrollment, and product fulfillment in connection with our services.
• assist Natera in providing employees with “reasonable accommodations,” when appropriate.
• provide services in furtherance of work-related travel, events, meetings, and other similar activity.
• provide training services on our behalf.
• provide connectivity, hosting, application and/or security services to, or on our behalf.
• provide marketing, sales, customer engagement, and analytics services for us.
• access to information you make publicly available, such as through social media.
• provide data they have collected from your use of their services, or through the Third Parties they work with.

• We Share Personal Identifiers with Third Party Advertisers and Advertising networks for the purpose of sales and marketing.
• We Share aggregated Consumer Internet/Network activities on our website with Third Party Advertisers and Advertising networks for the purpose of sales and marketing.
• We Share individual Consumer Internet/Network activities with Third Party Advertisers and Advertising networks for the purpose of sales and marketing.
• We Share aggregated Consumer Internet/Network activities with Third Parties to enhance and improve the overall customer experience on our website.

We process your Personal Information for the period necessary to fulfill the purposes outlined in this Policy, and in accordance with the provisions of relevant laws and regulations.

Natera’s criteria for Retention of your Personal Information is determined by the following:

• The purpose for which the Personal Information was collected and the fulfillment of that purpose
• The ground(s) (legal basis) upon which the Personal Information was collected (e.g., where consent is the legal basis, you have a right to revoke such consent in certain circumstances)
• Mandatory retention periods provided for by contractual and/or legal/regulatory requirements
• The length of time required by Natera’s document retention policies or other applicable law

Natera implements appropriate technical and organizational security measures, to protect against and detect accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to Personal Information.

Natera requires its Service Providers and Contractors to whom we provide your Personal Information in order to provide their services, to maintain the privacy and security of your Personal Information. In addition, depending on the information or purpose for Collection, only Natera employees and Service Providers and Contractors who have a “need to know” your information may be permitted to access it

Our Site is not intended for use by children under 16 years of age. We do not knowingly collect or accept personal information from children under 16. If you are under 16, do not access, use or provide any information on the Site or on or through any of its features. We do not have any actual knowledge that we sell or share the personal information of children under the age of 16. Moreover, anyone under 18 years of age should seek their parent’s or guardian’s permission prior to using or disclosing any personal data through our Site.

We do not provide financial incentives to Consumers who allow us to Collect, retain, Sell, or Share their Personal Information. We will describe such programs to you if and when we offer them to you. Please note that we do not provide discounts and incentives to individuals who use our products and services, which could be considered an offer of a “financial incentive” under the CPRA.

California Civil Code §1798.83 provides that California residents may request certain information concerning the disclosure of personal information to third parties for direct marketing purposes. Pursuant to California Business Code §§22575-22579, you may review and request changes to any of your personal information that we have collected. Should you wish to request this information or exercise these rights, please reach us at the contact information provided below.

We recognize Do Not Track Signals (DNT) and Global Privacy Controls (GPC) associated with your browser. If your browser has these signals enabled, we will not use Targeted advertising cookies or Analytics cookies. In case of a conflict between the use of DNT/GPC, and selections made using the Privacy Preferences Center, the DNT/GPC selection will take precedence (i.e., we will not use Targeted advertising or Analytics cookies).

If you permit us to Share your personal information, we are not responsible for third party tracking technologies that may be used on our Site. Such third parties may serve you content based on tracking your activities across different websites. Unless you have opted-out of Sharing for cross-context behavioral advertising, you consent to potentially encountering third party tracking technologies when you use our Site.

Persons with disabilities who need assistance accessing this CPRA Privacy Notice may contact us as provided for above, and depending on your individual needs, the Company will grant reasonable requests to furnish this policy in an alternative format.

The Contact Us page on this web site allows for you to specifically request access and information about the CPRA, the information we may have about you and how you or your agent can access this information. In addition, Natera has a toll-free phone number available for your use: 877-NAT-PRIV (877-628-7748). You may also send your request to our physical and email addresses specified below.

We will: (i) confirm receipt of requests to know, data portability, to correct inaccurate information or to delete within ten [10] business days of the request; and (ii) generally respond to requests to know, data portability, to correct inaccurate information or to delete within forty-five [45] calendar days of the request. If we need additional time to respond to your request beyond the forty-five [45] calendar days, we will provide you with notice explaining the reasons we need more time, and we will then take up to an additional forty-five [45] calendar days to respond to your request.

If you are unable to review or access this Notice due to a disability, you may contact us at “privacyofficer@natera.com,” or by calling the toll-free number listed above, to receive this Notice in an alternative format.

We may ask you to provide information to aid us in verifying your identity before we comply with your request. Likewise, if you authorize an agent to make a request on your behalf, we may require you to verify/confirm that you provided the agent with permission to submit that request. In some instances, we may decline to honor your request if: i) we are unable to verify your identity; ii) unable to verify the authority of the individual representing as your authorized agent; or iii) an exception applies under the CPRA. In all cases, we will respond to your request consistent with all applicable laws.

Our Address and Contact Information is:
Privacy Officer
Natera, Inc.
201 Industrial Road, Suite 410
San Carlos, CA 94070
United States of America
Tel: (650) 249-9090

We reserve the right to amend this Notice at our discretion and at any time. When we make material changes to this Notice, we will notify you by posting an updated Notice on our website and listing the effective date of such update.