Privacy Policy

Last Updated September 14, 2020

NanoString Technologies, Inc.

This Privacy Statement (“Privacy Statement”) describes the practices and policies of NanoString Technologies, Inc. and its subsidiaries (collectively “NanoString” or “we”, “our”, or “us”) regarding the collection, use, storage and disclosure of personal information collected through nanostring.com and related websites (collectively, the “Site”) as well as the services and features that we make available through the Site and in the course of our business operations (the “Services”), and your choices and obligations regarding that information. NanoString values the trust placed in us by our employees, customers, and business partners, and others (“you”). NanoString is committed to upholding best practices in our use, collection, storage, and disclosure of personal information. This document refers to personal data (here referred to as “data”) which is defined as information concerning a living person here referred to as “you” or “your” or otherwise a “data subject”.

To the extent that visitors to this website are EU residents and to the extent that NanoString provides goods and/or services to EU residents and/or collects data from such individuals, NanoString is subject to the provisions of the EU General Data Protection Regulation 2016/679 (here referred to as “GDPR”), which is EU-wide and which seeks to protect and enhance the rights of data subjects.

By continuing to use the Site and/or the Services or by providing your personal information to us, you agree to the practices and policies described in this Privacy Statement.

How we collect and use information

We do not require you to register with us to visit our Site. We do collect de-identified information from you during the course of your visit to the Site, as further described below. We may also collect personal information (such as name, email address, postal code, mailing address or other information) when you voluntarily give it to us by registering for updates, providing us your contact information, or contacting us (e.g. a NanoString webinar registration, NanoString Contact a Rep Request or a NanoString Support Request).

Information collected automatically/aggregate data collection​

We trace visits to our Site and its webpages and use visitor logs to compile aggregate statistics, (e.g., information such as your web requests, browser type, browser language, domain names, referring and exit pages and URLs, platform type, pages viewed and the paths you took on our Site). We use this information to analyze trends, administer our Site, improve our Site design and otherwise enhance our Site and Services.

Legal basis for and legitimate interest in processing any personal data

To meet NanoString’s contractual and other obligations to customers, to improve this Site, to communicate with you, including to provide you with information about NanoString’s products and services that may be of interest to you, to compile and analyze trends, to carry out the transactions you request when you visit the Site, and as otherwise described herein.

Consent

Where you have consented to NanoString processing your personal data for the purposes outlined, you can withdraw consent at any time by emailing legal@nanostring.com or by telephoning 1-206-378-6266 or by writing to us (please see last section for full address contact details).

Use of cookies/web beacons

We may use cookies, both session and persistent cookies, or web beacons on certain webpages and/or html email correspondence to track visitors, save website preferences or allow us to recognize visits from the same computer and browser. The information collected by our web server may include the Internet Protocol (IP) address of your Internet Service Provider, the content you access, the platform operating system and web browser you use, and the date and time of your visit. You have the option to disable cookies in your browser and still use our Site, although it may limit your access to the Site. For additional information, see our Cookies Policy.

Information you voluntarily provide

We may use your personal information to contact you regarding an inquiry or to provide you with more information about NanoString or other marketing information we believe you may be interested in. We will send you email alerts or notification messages unless you unsubscribe.

When you send us an email

If you contact us about our Site, Services, or products, we may retain the content of your email, your email address and our response to you. We may retain your information for a period of time to resolve disputes, troubleshoot problems, or for other valid business or legal reasons.

How to unsubscribe

Emails from us will include instructions on how to unsubscribe from our communications. You may also unsubscribe at any time by contacting us at webmaster@nanostring.com.

How we share information

We do not sell or rent your personal information to any other third party. We do share your information with third party providers who perform services on our behalf, such as web analytics, and help us provide the Site and Services to you.

NanoString is a global company with customers and partners worldwide.  Accordingly, the information we collect may be used, stored and processed in the United States or in any other country in which NanoString does business.  By providing the information via the website, you are consenting to the transfer of the information outside of your country to any country (including countries which may not have adequate levels of protection).  However, if you are a client or customer within the EU, please note that your personal data will not be transferred to a country or territory outside the EU unless either that country ensures an adequate level of protection is in place or that the appropriate safeguards are in place to protect your personal data and to meet the “adequacy” requirement under the GDPR and EU data protection laws.

We may provide access or disclose your personal information as required by law, and/or if disclosure is necessary in accordance to a judicial or legal process (including to law enforcement authorities if required), or when disclosure is necessary to prevent physical harm. We reserve the right to transfer your information in the event of a corporate restructuring, merger, acquisition, or consolidation with, or sale of substantially all of our assets to a third party (including bankruptcy).

Can you update and/or amend the personal information you have provided?

You are entitled to know whether we hold information about you and, if we do (subject to certain limitations), to have access to that information and have it corrected if it is inaccurate or out of date.

If you are an EU resident and we are in possession of or processing your data or in relation to offering you goods and/or a service or services you have the following rights under the GDPR:

• Right of access – you have the right to request a copy of the information that we hold about you.

• Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.

• Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.

• Right to restriction of processing – where certain conditions apply you have a right to restrict the processing.

• Right of portability – you have the right to have the data we hold about you transferred to another organization.

• Right to object – you have the right to object to certain types of processing, such as direct marketing.

• Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.

In the event that NanoString refuses your request under rights of access, we will provide you with a reason as to why, which you will have the right to legally challenge.

NanoString at your request can confirm what information it holds about you and how it is processed.

To access what personal data is held about you, identification will be required

NanoString will accept the following forms of ID when information on your personal data is requested:
A copy of your driving license, passport, birth certificate and a utility bill not older than three months.  A minimum of one piece of photographic ID listed above and a supporting document is required. If NanoString is dissatisfied with the quality of the ID presented, further information may be sought before any personal data is released.
All requests should be made to legal@nanostring.com or by telephoning 1-206-378-6266, or by writing to us at NanoString Technologies, 530 Fairview Avenue North, Seattle, Washington 98109, USA, Attn: General Counsel

Business relationships
This website contains links to other websites. NanoString is not responsible for the privacy practices or the content of such other websites.

How we secure information
We secure information by using industry standard administrative, physical and technical safeguards. We encrypt information transmitted to us using Secure Sockets Layer (SSL) technology. All information is stored on controlled servers with restricted access. It is important for you to know that, despite using these current technical and industry-recommended practices, it is never possible to fully guarantee against breaches in security.

How you may access information
You may contact us to notify us of any changes to your name, email address or marketing preferences. If you have provided us with your personal information and would like access to or be able to review the information, you may submit a request to us by sending an email to legal@nanostring.com.

Special Notice to California Residents
This section only applies to individuals who are residents of California under the California Consumer Privacy Act of 2018 (“CCPA”), where the resident is acting in their own capacity and not acting on behalf of a company or organization in the context of business activities.

Notice of Information Processed: The below chart provides an overview of our personal information collection practices for California residents, and includes terms defined under the CCPA, including but not limited to the categories of information listed.

PERSONAL INFORMATION WE COLLECTINFORMATION AUTOMATICALLY COLLECTED
Categories of InformationElectronic data, such as geolocation, IP address, and analytics data;
Inferred data, including information derived from personal information or a profile or segment attribution.
Purposes for Collection of Personal InformationWe collect this information for the operation of our services, auditing, security, internal research and development, analytics, and quality and safety business purposes.
Sources of Personal InformationWe collect this information directly from the individual, through cookies and other tracking technologies, and from service providers acting on our behalf.
Types of Third Parties with Whom We Share Personal InformationWe share this information with our service providers.
Personal Information We CollectInformation that you manually provide
Categories of InformationIdentifiers such as name, email address, and postal address.
Electronic data, such as geolocation, IP address, and analytics data.
Commercial information, such as products considered or purchasing tendencies.
Employment and education information, such as from health providers.
Inferred data, including information derived from personal information or a profile or segment attribution.
Purposes for Collection of Personal InformationWe collect this information for the operation of our services, auditing, security, internal research and development, analytics, and quality and safety business purposes.
Sources of Personal InformationWe collect this information directly from the individual, through cookies and other tracking technologies, and from service providers acting on our behalf.
Types of Third Parties with Whom We Share Personal InformationWe share this information with our service providers and other third parties at the direction of the individual.

California Residents Rights: Under California laws including the CCPA, California residents have the following rights (“Rights”) listed below. Your Right to Access and Right to Deletion are not absolute and are subject to certain exceptions. For instance, we cannot disclose specific pieces of personal information if the disclosure would create a substantial, articulable, and unreasonable risk to the security of the personal information, your account with us, or the security of the business’s systems of networks.

Disclosure & Access Rights: California residents have the right to request in writing from a business, (i) a list of the categories of personal information, such as name, address, email address, and the type of services provided to the customer, that a business has disclosed to third parties (including independent affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes, and (ii) the names and addresses of all such third parties. In addition, California residents have the right to request that we disclose to them (i) the categories of personal information we have collected about them, (ii) the categories of sources from which personal information is collected, (iii) the business or commercial purpose for the information collection, (iv) the categories of third parties with whom we have shared personal information, and (v) the specific pieces of personal information we hold about an individual.

Deletion Rights: California residents have the right to have their personal information deleted, unless the personal information is necessary for the business or service provider to:

  • complete a transaction for which the personal information was collected, provide a good or service requested by the resident or otherwise perform a contract between the business and the resident;
  • detect security incidents;
  • protect against malicious, deceptive, fraudulent or illegal activity (or prosecute those responsible);
  • debug to identify and repair functionality errors;
  • exercise or ensure the right of another to exercise free speech or another legal right;
  • comply with the California Electronic Communications Privacy Act, which compels the production of or access to electronic communication information or electronic device information with a search warrant;
  • engage in research in the public interest (if the resident has provided informed consent);
  • to enable solely internal uses aligned with the resident’s expectations given their relationship with the business;
  • comply with a legal obligation;
  • otherwise use the information internally in a lawful manner compatible with the context in which the resident provided it.

Do Not Sell: Californian residents have the right to opt-out of having their personal information sold. Californian residents acting on behalf of a company or organization in the context of business activities will also have the right to opt-out.

Californians can exercise their privacy rights by contacting us at NanoString Technologies, 530 Fairview Avenue North, Seattle, Washington 98109, USA, Attn: General Counsel.

Response Time: We will handle requests under applicable law in California. When a request is made, we may verify your identity to protect your privacy and security. We will respond to written rights requests within 45 days following receipt at the email or mailing address listed. If we receive your request at a different email or mailing address, we will respond within a reasonable period of time. Please note that we are only required to respond to each customer twice per calendar year.

Children
Our Site is directed toward adults and NanoString does not knowingly collect information from children under the age of 13, or under the age of 18 in relation to EU residents.

Links to other sites
This Privacy Statement does not apply to third-party websites. NanoString may provide links to other websites and the terms and conditions of such other websites apply.

Updates
Please make sure you review our most current Privacy Statements, as we may revise this Privacy Statement from time to time. Updated versions will be posted on the Site. 

How to Contact Us
If you have any questions about this Privacy Statement, please contact us at legal@nanostring.com.