Supplemental State Privacy Notice

Additional Rights Under State Laws

You may have certain rights regarding our processing of your personal information under applicable state law, including, for example if you are a consumer in Colorado, Connecticut, Nevada, Utah or Virginia. This section is intended to comply with these laws by supplementing the information provided elsewhere in the Privacy Policy. 

Collection of personal information. GRAIL may collect the personal information described in the What Information We Collect section of our Privacy Notice. Please note that some of this personal information will be considered sensitive under your state’s legal definition which can vary across different states. Any health information we collect is subject to our HIPAA Notice of Privacy Practices. In the event of a conflict between this Supplemental State Privacy Notice and the HIPAA Notice of Privacy Practices, the Notice of Privacy Practices will control with respect to your health data.

Use of personal information. We may collect, use, or disclose personal information about US state residents for purposes listed in the Purposes for Which We Will Use your Data section of our Privacy Statement. 

Disclosure of personal information. We may disclose your personal information to the categories of service providers and third parties identified in the Sharing your Data section of our Privacy Notice, and in ways that are described in that section. 

Your privacy rights. We provide the privacy rights described in the Your Choices section of our Privacy Notice regardless of your location. Your state may afford you additional privacy rights as noted below. To exercise your right, please email us at privacy@grailbio.com or visit our Your Privacy Choices form. We will respond to your verifiable request within the time limit afforded under applicable law.

  • The right to know whether GRAIL is processing your personal information
  • The right to receive (“access”) a copy of your personal information
  • The right to correct inaccurate personal information
  • The right to request deletion of your personal information
  •  The right to opt out of certain disclosures of your Personal Information (for more information about your right to opt-out, please see below)
  • The right to appeal GRAIL’s refusal to take action regarding a privacy rights request.

Please note that exceptions to these rights may still apply as otherwise described in this Privacy Notice.

Additional opt-out rights 

  • Certain states have the right to opt out of targeted advertising and sales. If you are a resident of one of these states, you can use our cookie preferences tool (click on “Cookie Notice and Choices” in the site footer) to disable ad trackers on our website in order to opt out. 
  • Users in some states may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. While you may still make this request, GRAIL does not currently use profiling in this manner.
  • Certain states provide residents a limited right to opt out of the sale of personal information. GRAIL does not sell or share personal information (including de-identified personal information) to third parties for money. We may engage in delivering online advertising that was tailored to your interest, but we do not disclose data that would identify you by name, address, or phone number, nor do we disclose sensitive information like health data for those purposes. To the extent “sale” is interpreted under applicable law to include advertising technology activities described here and elsewhere in our Privacy Policy as a “sale,” we will comply with applicable law with respect to such activities. You can exercise your rights to opt-out by emailing us at privacy@grailbio.com or visiting our Your Privacy Choices form.

These rights will not apply, however, if GRAIL does not collect any personal information about you or if all of the information we collect is exempt from your applicable state’s privacy laws. For example, these state laws do not apply to personal information that is already protected by certain other privacy laws, such as protected health information subject to HIPAA. For information regarding your rights with respect to your protected health information, please visit our HIPAA Notice of Privacy Practices.  

Last Updated: December 10, 2024