Audience:

Key Opinion Leaders, Health Care Professionals, Principal Investigators, Sub-Principal Investigators, Allied Health Providers and any other individual related in similar persona to Nurix Therapeutics, Inc in their professional capacity.

1. Data Controller

The data controller responsible for the processing of your personal data is:

Nurix Therapeutics, Inc.
1600 Sierra Point Parkway
Brisbane, CA  94005, USA
Contact: privacy@nurixtx.com

2. Purpose of Processing

Your personal data are processed for the following purposes:

• To initiate, manage and document scientific and medical exchanges between you and representatives of Nurix Therapeutics, Inc.
• To manage engagement activities, including event participation, scientific discussions, and professional interactions.
• To capture, analyze, and report insights from scientific and medical exchanges to support responsible medical and scientific decision-making;
• To respond to unsolicited medical inquiries and fulfill pharmacovigilance obligations; and
• To ensure these activities are performed in a compliant, transparent, and auditable manner in line with applicable laws and industry codes.

We may use secured data management platforms to maintain inventory of such data and processing.

3. Legal Basis for Processing

Where required under applicable data protection laws, the processing of your personal data is based on the following legal grounds:

• Legitimate Interest (Article 6(1)(f) GDPR): Nurix Therapeutics, Inc. has a legitimate interest in maintaining and managing professional relationships with healthcare professionals, recording scientific interactions, and improving medical and scientific engagement practices.
• Legal Obligation (Article 6(1)(c) GDPR): Certain processing activities may be required to comply with applicable laws, industry regulations, and transparency obligations (e.g., pharmacovigilance, anti-bribery, and disclosure laws).

4. Categories of Personal Data Processed

The categories of data processed may include:

• Identification data (e.g., name, title, professional contact details, institution/affiliation, professional identifiers)
• Professional information (e.g., medical specialty, qualifications, areas of scientific interest, interaction history)
• Records of communications and interactions (e.g., meeting notes, event participation, email correspondence related to scientific exchange)
• Compliance and audit data (e.g., consent records, transfer of value information, reporting data where required by law).

5. Data Sources

Your personal data are obtained directly from you, from your public professional profiles (e.g., institutional websites, professional directories, publications), or through authorized third-party data providers (e.g., contract research organizations or licensed healthcare professional data bases) used by Nurix Therapeutics, Inc. in compliance with applicable law.

6. Data Sharing and Recipients

Your personal data may be shared with:

• Data processors providing the platform used for data storage and interactions management (e.g., Veeva Systems Inc.)
• Authorized personnel within Nurix Therapeutics, Inc. (e.g., Medical Affairs, Compliance, Pharmacovigilance, Legal, or IT departments)
• Service providers and partners acting on behalf of Nurix Therapeutics, Inc. for engagement management
• Regulatory authorities, where legally required.

All data transfers to third countries (if applicable) are performed in compliance with GDPR, using appropriate safeguards viz., EU-US Data Protection Framework, UK Extension to EU-US Data Protection Framework, Swiss-US Data Protection Framework or EU Standard Contractual Clauses along with supplementary measures like Transfer Impact Assessment.

7. Data Retention

Personal data are retained for the duration of the professional relationship and thereafter in accordance with applicable legal, regulatory, and industry retention requirements, including pharmacovigilance, transparency, and audit obligations. Retention periods may vary depending on the nature of the interaction and applicable laws.

8. Your Data Protection Rights

You may have one or more of the following rights based on your region of habitual residency and the context in which you are raising your request:

• Access your personal data
• Request rectification of your data
• Request deletion or erasure of your data
• Request restriction of processing
• Object to processing based on legitimate interest; and

Lodge a complaint with a supervisory authority.

Please note these rights are not absolute. To exercise your rights, raise a request via our Privacy Portal or alternatively contact privacy@nurixtx.com.

9. Data Protection Representative

Nurix Therapeutics Inc has appointed Data Protection Representative in EU, UK and Switzerland as follows:

Name: Data Rep

Contact: nurixtx@datarep.com

EU Address: DataRep, 72 rue de Lessard, Rauen, 76100, France

UK Address: DataRep, 107-111 Fleet Street, London, EC4A 2AB, United Kingdom

Swiss Address: DataRep, Leutschenbachstrasse 95, ZURICH, 8050, Switzerland

10. Contact for Data Protection Inquiries

Postal address:

Nurix Therapeutics, Inc.
1600 Sierra Point Parkway
Brisbane, CA  94005, USA

Email: privacy@nurixtx.com
Contact: +1(415) 660-5320
Fax: +1 (415) 525-4200

Last Updated Date: 19 February 2026