Privacy

Privacy Policy

Updated on: July 25, 2024

What Information Do We Collect?

We collect several categories of personal information from and about users of Illumina websites and of our products and services, including:

• Account Information
• Computer, Device, and Browsing Information
• Product Performance Information
• The Content You Choose to Share
• Genomic or Other Personally Identifying Information

Some of this personal information is collected through voluntary submissions of information, some of it is collected or received in the course of us providing website content, and some through our products and services. Examples of the types of personal information we collect are below:

In addition to the personal information discussed above, we may come into possession of other types of information: personal identifiers and contact information (such as your name, email address, IP address), characteristics of protected classifications under federal or state law (such as gender, race, physical or mental disability and religion), audio/electronic/visual information about you (such as images you provide us or consented recordings of your service calls to us) and inferences drawn from the information used to create a profile about you.

We may also collect and maintain different types of personal information about you to process job candidate applications, as required for employment with us, or in accordance with applicable law. Categories of this personal information include contact information, employment information, educational information, and biometric information (for specified employee timekeeping purposes).

Information about Minors

If you are under 18, do not register on our website or provide any information about yourself to us. We do not provide products or services directly to minors or proactively collect their personal information. If we become aware that we have inadvertently collected personal information from children under the age of 18, we will take the necessary steps to delete it as soon as possible. Despite this prohibition, it is possible that we may sometimes be given information about minors in compliance with applicable laws, e.g., while handling samples from our customers in our clinical labs, or through use of our products and services by our customers and partners.

Aggregated Information

We may aggregate information we collect or receive about customers and users of the website and our products and services for quality, regulatory, and internal business purposes to improve our products, data quality, and laboratory processes. Information that is aggregated is summary-level and cannot reasonably permit someone to identify individuals. Illumina may also use aggregated information to publish findings.

How Do We Use Non-Genomic Personal Information?

Illumina uses non-genomic personal information that we collect or that you provide to us as described in the table below. Please note that this table also explains the legal basis for processing personal information where such concept is recognized (e.g., the European Union (EU) and the United Kingdom (UK)) and the circumstances in which such personal information will be shared with a third party (if at all).

How Do We Use Genomic Information?

To provide our products and services, Illumina may collect, receive and process biological samples to isolate and sequence DNA and RNA. Illumina may then store resulting genomic information, use genomic information to provide our products and services, and share relevant genomic information or biological samples with an authorized research partner or customer when necessary to enable the partner or customer to validate a test finding and in accordance with rights granted to Illumina, such as under the relevant products or services terms.

In some cases, Illumina may provide or facilitate interpretations of genomic information on behalf of its customers, including clinicians, business partners, and research partners. This is typically done pursuant to a written contract or a Test Requisition Form with a patient’s informed consent and is subject to applicable legal and ethical safeguards. When a customer obtains a patient’s informed consent, the customer’s own privacy policy and informed consent practices will govern its collection, use, processing, storage, disclosure, and transfer of genomic information.

Illumina may also facilitate interpretations of genomic information in the course of Illumina’s own research or clinical trial protocols. Illumina implements appropriate safeguards in connection with such scientific research. Among these safeguards, Illumina sponsored clinical research protocols involving the collection and or testing of human samples are subject to review by a qualified Institutional Review Board (IRB), an ethical oversight body that assures appropriate safeguards are in place to protect individual rights and welfare in accordance with ethical standards, government regulations, and applicable law.

Illumina’s specific uses of genomic information that relates to an identifiable individual are described in the table below. Please note that this table also explains the legal basis for processing genomic information where such concept is recognized and the circumstances under which genomic information will be shared with a third party, if at all.

Disclosure of Personal Information

We will not disclose personal information to any outside third parties for their own marketing purposes unless we have consent.

We use third-party service providers to provide elements of services for us. Contracts with our data processors and service providers restrict their access to and use of personal information.

We may also disclose personal information in our possession and under our custody to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Illumina’s assets.

We may also disclose personal information, including genomic information, to comply with applicable law, a valid court order, a judicial proceeding, subpoenas, warrants or in connection with any legal process. We will not disclose genomic information without a valid subpoena or search warrant, or without otherwise being satisfied that we have a sufficient legal basis on which to share the information. Please review our annual transparency report for information about the requests we have received and how we have responded.

What Choices Do You Have About How We Use and Disclose Your Information?

We strive to provide you with choices about the information you provide to us, including the following:

Tracking Technologies and “Do Not Track”

You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies some parts of our website may not be accessible or may not function properly. You can learn more about this by reading our Cookie Policy.

Some mobile and web browsers transmit "do-not-track" signals. Because of differences in how web browsers incorporate and activate this feature, it is not always clear whether users intend for these signals to be transmitted, or whether they even are aware of them. We currently do not take action in response to these signals.

Advertising Networks

We work with advertising service providers that collect non-personally identifying information from you when you visit our website and other sites, in order to show ads for our products and services that we think may be of interest to you after you visit our website. If you do not wish to receive our personalized ads, you can visit the opt-out pages of the Network Advertising Initiative or the Digital Advertising Alliance to learn about how to opt out of receiving personalized ads from their member companies.

Google Analytics

Illumina works with Google Analytics to better understand our audience and users, to improve our marketing campaigns, and to enhance our products and services. The information we receive back from Google Analytics do not identify specific website visitors, but rather the trends related to how the website is used. To opt out of being tracked by Google Analytics across all websites, you can visit http://tools.google.com/dlpage/gaoptout.

Salesforce Audience Studio

Illumina uses Salesforce Audience Studio to improve the targeting of our advertising, such as by showing advertisements on third-party websites to users who have previously visited our website. To opt out of targeting via the Salesforce Audience Studio technology platform, you can do so via the opt-out page of the Network Advertising Initiative.

Promotional Offers from Illumina

Illumina may use your account information (e.g., your email address, your transaction history, and participation in webinar and training courses, message boards and chat features) to promote our products and services or those of our business or research partners. If you do not wish to have your account information used by Illumina for this purpose, you can opt out of receiving marketing communications by setting your preferences at MyIllumina or visiting our Community Preferences Register. Note that you may not be able to opt out of receiving certain service-related emails, such as communications about orders, billing, legally required product communications, account creation, registration and policy updates. If we have sent you a promotional email or other informational email not related to your order or account, the email will have an “unsubscribe” feature that will allow you to opt out of receiving future email distributions.

Privacy Rights

In accordance with applicable law, you may be entitled to object to or request restriction of Illumina’s processing of your personal data, and to request access to, rectification, erasure, and portability of your information or more information about our information practices. You may be entitled to withdraw your consent at any time, where applicable. The withdrawal of consent will not affect the lawfulness of our processing of your personal information based on consent before the withdrawal.

Requests should be submitted by using this webform. Once we receive your request, we may verify it by requesting information sufficient to confirm your identity. You may be entitled, in accordance with applicable law, to submit a request through an authorized agent or to appeal a refusal to take action on your request, as well as to lodge a complaint with the data protection authority.

Please note, this section does not apply to personal information that we process on behalf of other businesses, information that is subject to federal or state medical privacy laws, or that is otherwise not covered under relevant U.S. and global data privacy laws. As noted above, we may not accommodate a request if we believe actioning the request would violate any law or legal requirement. Information that has already been de-identified and/or aggregated, including aggregated genomic information, may not be retrievable or traced back for correction or removal from any database.

Privacy Rights for Residents of California

This section applies to personal information that is processed pursuant to the California Consumer Privacy Act (“CCPA”). It does not apply to personal information that we process on behalf of other businesses, information that is subject to federal or state medical privacy laws, or that is otherwise not covered under the CCPA.

The section, above, entitled “What Information Do We Collect” outlines the categories of personal information we may have collected during the 12-month period prior to the effective date of this section.

Access to Specific Information and Data Portability Rights

California law permits California residents to request information about our collection and use of your personal information in response to a verifiable consumer request. This may include:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting, or sharing that personal information.
• The categories of third parties with whom we disclosed that personal information.
• The specific pieces of personal information we collected about you.
• If we disclosed your personal information for a business purpose, a list of disclosures identifying the personal information categories that each category of recipient obtained.

Illumina does not share your personal information with third parties for their own marketing purposes without your consent.

Your Right to Opt-out of Sale and Sharing

We share personal information with third parties as described in this policy, including, in certain circumstances, for cross-context behavioral advertising purposes. This "sharing" may meet CCPA's definition of "sale of personal data". California residents have the right to opt out of any sharing for cross-context behavioral advertising of their personal information, consistent with applicable law. You may enforce this right by clicking the “Do Not Sell or Share My Personal Information” link in the footer of this page and toggling the opt-out option, or by broadcasting the Global Privacy Control signal. Please see the “What Choices Do You Have About How We Use and Disclose Your Information?” section above for more information. We do not knowingly sell or share the personal information of individuals who are younger than 16.

Your Right to Nondiscrimination

California residents have the right to not receive discriminatory treatment for exercising their privacy rights, consistent with applicable law.

Your Right to Correction

California residents have the right to request correction of inaccuracies contained in the personal information maintained by Illumina related to that specific resident, consistent with applicable law.

Your Right to Deletion

California residents have the right to request deletion of their personal information maintained by Illumina, consistent with applicable law.

Exercising Your Rights

The rights available to you depend on our reasons for processing your personal information.

To request access to, correct, restrict, or delete any personal information that you have provided to us, you may use this webform. Additionally, you may contact privacy@illumina.com. You may also call our Consumer Rights Hotline at +1 (888) 914-9661. Please enter PIN: 320 533 when prompted. California residents may designate authorized agents to make such requests on their behalf.

These rights are not absolute. Among other limitations, before responding to access, correction, or deletion rights, we will first need to verify your identity to ensure that the information we maintain is provided to the correct individual to whom it belongs. As part of this process, we may ask you or your authorized representative to provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information.

We may not accommodate a request if we believe actioning the request would violate any law or legal requirement. Information that has already been de-identified and/or aggregated, including aggregated genomic information, may not be retrievable or traced back for correction or removal from any database.

How Do We Keep Personal Information Secure?

We are committed to protecting the security of the information we collect, and we employ reasonable physical, technical, and administrative safeguards such as data anonymization and encryption to help protect personal information from unauthorized or inappropriate access or use. It is your responsibility to protect the confidentiality of your passwords, account information, and any other access features associated with your access or use of the website or our products and services, as well as to adhere to any applicable Terms of Use or other contract between us and you or, where applicable, the organization with which you are affiliated.

Retention of Collected Information

Illumina retains your personal information only for so long as it is needed to achieve the purpose for which it was originally collected. We may retain collected information to comply with applicable law, to resolve disputes, to enforce any rights in connection with the website and our products and services, as provided in this Privacy Policy, or an applicable contract between us and you or, where applicable, the organization with which you are affiliated. How long we retain specific personal information varies depending on the purpose for its use and we may delete or retain your personal information in accordance with applicable law.

Links, Third-Party Applications, and Software

Where we provide links to websites of other organizations or give you access to applications, software, or products provided by third parties, this Privacy Policy does not cover how that third-party processes personal information. Please understand that those third-party sites and products may have different terms of use and privacy policies. We are not responsible for the privacy practices of any third-party sites and products. We are also not responsible for the terms of use you may be required to agree to in order to use third-party sites and products.

Changes to Our Privacy Policy

We reserve the right to change this Privacy Policy at any time. We will post any changes we make to our Privacy Policy on this page. If we make material changes to how we treat our users’ personal information, we will notify registered users by email to the email address specified in their account. All changes are effective immediately when we post them, and they apply to all access to and use of the website and our products and services from that point onward. Your continued access to or use of the website, products or services represents your acceptance of any such changes made to our Privacy Policy.

International Data Transfers

Illumina is a global company with its headquarters in the United States. To facilitate Illumina’s global operations, Illumina may transfer and access personal data from around the world, including from other countries in which it has operations.  A list of Illumina’s global offices is available at www.illumina.com for reference. This means that personal data may be used, processed, and transferred to Illumina’s locations, affiliates, service providers or other third parties in the United States and other countries or territories, including to jurisdictions which are not deemed to provide “adequate” data protection under applicable data protection and privacy laws (such as those in the EU and the UK). For further details, please refer to the section “International Data Transfers” under the Country-Specific Supplemental Privacy Policies.

However, you acknowledge that, in some other cases, any personal data you provide or that we may collect may also be used, processed, and transferred to countries or territories that may not offer the same level of data protection under applicable laws.

Please contact us for any queries related to the specific transfer mechanisms used by Illumina. 

Questions, Comments, or Complaints

To ask questions or comment on this Privacy Policy and our privacy practices, you may contact privacy@illumina.com. Please do not include any protected health information or other sensitive information when you contact us. Note that inquiries sent through privacy@illumina.com are not encrypted or secure, unless you have an email encryption service. Alternatively, you can write to us at the following address: Illumina, Inc., 5200 Illumina Way, San Diego, CA 92122, attention: Legal Department – Website Privacy Policy. Any person with a disability that prevents or restricts them from accessing this Privacy Policy through the website may request a copy of the Privacy Policy at that email or postal address.

Illumina has designated a Global Data Protection Officer that can be contacted at DPO@illumina.com. 

Country-Specific Supplemental Privacy Policies 

These Country-Specific Supplemental Privacy Policies supplement the main Privacy Policy (above) to the extent that the relevant privacy laws in the following countries apply in relation to the processing of personal information in those countries. If there are any inconsistencies between the Country-Specific Supplemental Privacy Policies below and the main Privacy Policy, the country-specific terms prevail. 

Brazil

This section applies to personal information that is processed pursuant to the Lei Geral de Proteção de Dados Pessoais (“LGPD”).

Data Controller

The entity responsible for processing and handling the personal information collected under this Country-Specific Supplemental Privacy Policy is both Illumina, Inc. and Illumina Brasil Produtos de Biotecnologia Ltda. (“Illumina Brazil”).

Privacy Rights

Under the LGPD, you may also have the rights to (1) anonymize and block the processing of your personal information, if the data is deemed unnecessary, excessive or processed in non-compliance with the provision of the LGPD; (2) confirm the existence of processing of your personal data; (3) request information about which third parties we share your data with; (4) be informed about the possibility of not giving your consent and the consequences in case of refusal; and (5) file a complaint with Brazil’s National Data Protection Authority.

China

This section applies to personal information that is processed pursuant to the China Personal Information Protection Law (“PIPL”).

Personal Information Processor

The entity responsible for processing and handling the personal information collected under this Country-Specific Supplemental Privacy Policy is both Illumina, Inc. and Illumina (China) Scientific Co. Ltd (“Illumina China”).

Legal Basis

Illumina will process your personal information based on the relevant legal basis provided under the PIPL. Where consent is the underlying basis, we will obtain your consent.

Entrusted Processing and Sharing of Personal Information

We may engage other Illumina entities and third parties to process your personal information on our behalf, as necessary for the purposes outlined in the main Privacy Policy. Contracts with our data processors and service providers restrict their access to and use of personal information.

Data Storage and International Data Transfers

Generally, we will store your personal information in China. However, as Illumina is a global company, for the purposes specified in this Privacy Policy, we may transfer your personal information to other countries (see section “How Do We Use Non-Genomic Personal Information”). Transfers of your personal information outside of China are done according to the PIPL and other relevant data protection and privacy laws and with the necessary administrative, technical, and physical safeguards to protect your personal information, including seeking separate consent from you, when required by the PIPL.

Please contact privacy@illumina.com if you want to exercise your data subject rights against the above overseas recipient.

Privacy rights

Under the PIPL, you may also have the (1) right of access, (2) right to rectification, (3) right to deletion, (4) right to restriction of processing, (5) right to data portability and (6) right to withdraw consent of the processing of your personal information. If you want to exercise any of such rights, you submit your request by using this webform.

We will respond to your requests to exercise your data subject rights in accordance with the applicable data protection laws. To the extent as permitted by laws and regulations, we may not be able to respond to your request of exercising your rights in the following circumstances:

• If your request is contrary to our obligations under laws and regulations;
• If the requested data is directly related to national security or national defense security;
• If the requested data is directly related to public safety, public health, or significant public interest;
• If the requested data is directly related to criminal investigations, prosecutions, trials and enforcement of judgments, etc.;
• If we have sufficient evidence of your subjective malice or abuse of rights;
• If it is in the interest of safeguarding your or other individuals' significant legitimate rights and interests, such as life and property, but it is difficult to obtain your authorization or consent;
• If responding to your request to exercise your rights would result in serious harm to your or other individuals' or organizations' legitimate interests;
• If the requested data involves trade secrets.

European Economic Area, the United Kingdom, and Switzerland

This section applies to personal information that is processed pursuant to Regulation (EU) 2016/679 (the “GDPR”), the UK GDPR and Data Protection Act 2018, and the Federal Act on Data Protection (“FADP”).

Data Controller

Illumina Netherlands B.V. is the controller for the European Economic Area (“EEA”) processing and is Illumina’s place of central administration within the EEA

Privacy Rights

If you are in the EEA, the United Kingdom, or Switzerland you may also have the following privacy rights:

• Your Right to Erasure

With regards to your right to ask us to erase your personal information in certain circumstances, please note that we may not always be able to remove your personal information from ongoing or completed research studies. We may also retain some account information related to purchase and service history. This enables us to provide ongoing support regarding prior purchases and services, and is also necessary for accounting, audit and compliance purposes. We may also retain limited backup copies and archival files of your personal information to satisfy our state and federal legal obligations or regulatory requirements, including those set by the Clinical Laboratory Improvement Amendments (CLIA).

• Your Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of alleged infringement. Prior to lodging a complaint, where feasible, please contact us and allow us to attempt to resolve the issue. For more information regarding the contact details of the relevant supervisory authority, please visit the European Data Protection Board website (https://edpb.europa.eu/about-edpb/board/members_en). For more information regarding lodging a complaint to the Data Protection Authority in Switzerland, please visit https://www.edoeb.admin.ch/edoeb/de/home.html. For more information regarding lodging a complaint with the UK’s Information Commissioner’s Office (ICO), please visit https://ico.org.uk/make-a-complaint/.

International Data Transfers

Illumina acknowledges and seeks to comply with the latest legal developments regarding international data transfers. As such, where your personal data is transferred to a country outside of the EU, the UK, and Switzerland, Illumina ensures that appropriate data protection safeguards are in place, including by entering into the Standard Contractual Clauses as previously approved by the European Commission and/or other standard clauses that may be prescribed by the applicable data protection laws. For further details, please visit European Commission – Standard Contractual Clauses and UK – International Data Transfer Agreement.

Where personal data is transferred from the EU, the UK, and Switzerland, as applicable, to the United States, Illumina complies with the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework (collectively, the “Data Privacy Framework”), as set out in the Illumina Data Privacy Framework Notice.

Japan

This section applies to personal information that is processed pursuant to the Act on the Protection of Personal Information (“APPI”).

Data Controller

The entity responsible for processing and handling the personal information collected under this Country-Specific Supplemental Privacy Policy is both Illumina, Inc. (details available at https://www.illumina.com/company/about-us.html) and Illumina K.K. (details available at https://jp.illumina.com/company/about-us/japan.html) (“Illumina Japan”).

Use of Your Pseudonymized Information

Illumina Japan uses pseudonymized personal information of residents of Japan to improve our products, data quality, and laboratory processes. Illumina Japan may also aggregate information we collect or receive about customers and users of the website and our products and services for quality, regulatory, and internal business purposes to improve our products, data quality, and laboratory processes. Information that is aggregated is summary-level and cannot reasonably permit someone to identify individuals. Illumina Japan may also use aggregated information to publish findings.

Joint Use

Illumina Japan may jointly use your personal information described in the main Privacy Policy for the purposes outlined in the main Privacy Policy with Illumina, Inc. and its affiliates (details available at https://www.illumina.com/company/contact-us/locations.html). Illumina Japan is the business operator responsible for managing jointly used personal information.
[Illumina Japan may jointly use pseudonymized personal information processed from personal information described in the main Privacy Policy for the purposes described in “Use of Your Pseudonymized Information” above with Illumina, Inc. and its affiliates https://jp.illumina.com/company/about-us/japan.html). 

International Data Transfers

Transfers of your personal information outside of Japan are done according to relevant data protection and privacy laws and with the necessary administrative, technical, and physical safeguards to protect your personal information. For information about the personal information protection systems in place in the foreign countries where we may transfer your personal information, please see here.

Ad Display Cookies

LY Corporation may acquire and/or use your visit/activity history information from the jp.illumina.com website via cookies, where enabled, to remarket, target, and retarget content to you about Illumina’s products and services. The user's visit/activity history information acquired by LY Corporation is handled in compliance with its privacy policy. You can halt this use of your visit/activity history information for ad display purposes through the opt-out options available at: https://btoptout.yahoo.co.jp/optout/index.html.

Questions, Comments or Complaints

To ask questions or comment on this Country-Specific Supplemental Privacy Policy and our privacy practices including safety control measures implemented by Illumina Japan, you may also write to us at Illumina K.K., Mita Bellju Building 22F, 5-36-7 Shiba, Minato-ku, Tokyo 108-0014, Japan, attention: Legal Department - Website Privacy Policy.

South Korea

This section applies to personal information that is processed pursuant to the Personal Information Protection Act (“PIPA”).

Data Controller

The entity responsible for processing and handling the personal information collected under this Country-Specific Supplemental Privacy Policy is Illumina Korea Ltd. (“Illumina South Korea”). 

Purpose for Processing

Illumina Korea may collect and use the personal information listed in section “What Information Do We Collect?” and the main body of the Privacy Policy with your consent or for a different legal basis. If the items and purpose of use of your personal information changes, we will take the required measures to ensure that the applicable provisions of the PIPA are implemented, such as requesting additional consent from you. 

Disclosure of Personal Data

We delegate the processing of your Personal Data as described below, according to the purpose of the delegation.

International Data Transfers

Any transfers of your personal information outside of the Republic of Korea are done according to relevant data protection and privacy laws and with the necessary administrative, technical, and physical safeguards to protect your personal information. We provide your Personal Data to third parties as described below, either with your consent or under other legal bases as defined by applicable laws.

If you want to object to the transfer of your Personal Data overseas, please contact: privacy@illumina.com.

Procedure and Method for Destruction of Personal Data

Illumina and Illumina Korea will destroy your personal information as outlined in the main Privacy Policy and will take standard commercially reasonable measures to ensure that your personal information is rendered irrecoverable or irreproducible. The specific manner of deletion will depend upon how the personal information is held by Illumina, as well as your relationship with Illumina.