Nurix Privacy Notice – Publication Management (iEnvision)

Nurix Privacy Notice – Publication Management (iEnvision)

Last Updated: March 10, 2026

Audience:
Authors, reviewers, approvers, healthcare professionals, investigators, key opinion leaders, and other individuals participating in Nurix Therapeutics, Inc.’s scientific publication activities in their professional capacity.

1. Data Controller

The data controller responsible for the processing of your personal data is:

Nurix Therapeutics, Inc.
1600 Sierra Point Parkway
Brisbane, CA  94005, USA
Contact: privacy@nurixtx.com

2. Purpose of Processing

Your personal data are processed for the following purposes:

  • To initiate, manage, document, and track scientific publications, abstracts, manuscripts, posters, and related dissemination activities;
  • To manage authorship invitations, confirmations, review workflows, and final approvals;
  • To administer and document conflict of interest (COI) disclosures in accordance with journal, congress, and industry requirements;
  • To conduct compliance screening, including debarment checks where required by applicable law or industry standards;
  • To maintain auditable records of publication development and submission activities;
  • To ensure that publication activities are performed in a compliant, transparent, and documented manner consistent with applicable laws, regulatory requirements, and industry codes (including ICMJE and Good Publication Practice standards).

We use a secure third-party publication management platform, iEnvision Datavision, provided by Envision Pharma Inc., to manage and document these activities.

3. Legal Basis for Processing

Where required under applicable data protection laws, the processing of your personal data is based on the following legal grounds:

Legitimate Interest (Article 6(1)(f) GDPR):

Nurix Therapeutics, Inc. has a legitimate interest in managing and documenting scientific publication activities, ensuring transparency of authorship and disclosures, maintaining scientific integrity, and meeting recognized publication standards.

Legal Obligation (Article 6(1)(c) GDPR):

Certain processing activities may be required to comply with applicable laws, regulatory expectations, industry transparency standards, and debarment or compliance screening requirements.

Contractual Necessity (Article 6(1)(b) GDPR), where applicable:

Where you agree to participate as an author or reviewer, processing may be necessary to administer that engagement and fulfill publication-related obligations.

4. Categories of Personal Data Processed

The categories of data processed may include:

Identification Data

  • Name
  • Professional title
  • Professional email address
  • Institutional affiliation
  • City and country

Professional Information

  • Role in the publication (e.g., author, reviewer, approver)
  • Publication contribution and approval history
  • Authorship confirmations and related correspondence

Conflict of Interest (COI) Information

  • Categories of financial relationships with pharmaceutical or healthcare-related companies (e.g., employment, consultancy, equity holdings, research funding, honoraria, board memberships, patents or royalties)
  • Names of companies associated with such relationships

No dollar amounts are collected as part of COI disclosures.

Compliance and Screening Data

  • Debarment screening results
  • Audit and documentation records related to publication workflows

5. Data Sources

Your personal data may be obtained:

  • Directly from you (e.g., authorship confirmation, COI disclosures, email communications);
  • From publicly available professional sources (e.g., institutional websites, professional directories, publications).

6. Data Sharing and Recipients

Your personal data may be shared with:

  • Data processors providing the publication management platform (e.g., Envision Pharma Inc., provider of iEnvision Datavision);
  • Authorized personnel within Nurix Therapeutics, Inc. (e.g., Medical Affairs, Compliance, Legal, IT);
  • Medical communications agencies supporting publication development;
  • Journal publishers, congress organizers, or regulatory authorities where disclosure is required or appropriate.

All data transfers to third countries (if applicable) are performed in compliance with GDPR and other applicable data protection laws, using appropriate safeguards, such as:

  • EU-US Data Protection Framework (where applicable);
  • UK Extension to the EU-US Data Protection Framework;
  • Swiss-US Data Protection Framework;
  • EU Standard Contractual Clauses and UK International Data Transfer Addendum, together with supplementary safeguards such as Transfer Impact Assessments.

7. Data Retention

Personal data are retained for the duration of the publication lifecycle and thereafter in accordance with applicable legal, regulatory, audit, and industry retention requirements.

Retention periods may vary depending on:

  • The type of publication;
  • Regulatory documentation requirements;
  • Transparency and compliance obligations.

Personal data are not retained longer than necessary for the purposes described above.

8. Your Data Protection Rights

You may have one or more of the following rights based on your region of habitual residency and the context in which you are raising your request:

  • Access your personal data;
  • Request rectification of inaccurate data;
  • Request deletion or erasure of your data (subject to legal retention requirements);
  • Request restriction of processing;
  • Object to processing based on legitimate interest;
  • Lodge a complaint with a supervisory authority.

Please note that these rights are not absolute and may be limited where processing is required for legal, regulatory, or audit purposes.

To exercise your rights, raise a request via our Privacy Portal or contact privacy@nurixtx.com.

9. Data Protection Representative

Nurix Therapeutics Inc has appointed Data Protection Representatives in EU, UK and Switzerland as follows:

Name: DataRep

Contact: nurixtx@datarep.com

  • EU Address: DataRep, 72 rue de Lessard, Rauen, 76100, France
  • UK Address: DataRep, 107-111 Fleet Street, London, EC4A 2AB, United Kingdom
  • Swiss Address: DataRep, Leutschenbachstrasse 95, ZURICH, 8050, Switzerland

10. Contact for Data Protection Inquiries

Postal address:

Nurix Therapeutics, Inc.
1600 Sierra Point Parkway
Brisbane, CA  94005, USA

Email: privacy@nurixtx.com
Contact: +1(415) 660-5320
Fax: +1 (415) 525-4200

hide2