Privacy Policy

Last modified: May 5, 2026ImmunityBio, Inc. (“Company”, “we”, “us”, or “our”) respects your privacy. Please read this Privacy Policy to learn about our information practices with respect to personal data that we collect about you. Unless otherwise noted, this Privacy Policy applies to all online and offline Company operations with respect to the Company’s products and services, as well as our websites, including ImmunityBio.com, mobile applications, and any other digital services where this Privacy Policy is posted (collectively, the “Website”).

Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Website. By accessing or using this Website, you agree to this Privacy Policy. This Privacy Policy may change from time to time, as described below. Your continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check this Privacy Policy periodically for updates.

Children under the Age of 18
Our Website is not intended for children under the age of 18. No one under age 18 may provide any information to or on the Website. We do not knowingly collect personal data from children under 18. If we learn we have collected or received personal data from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us at info@ImmunityBio.com.

Notification of Changes to This Policy
The Company is continually improving and adding new functionality and features to our Website and improving and adding to our existing product line, services, and programs. Because of these ongoing changes, changes in the law and the changing nature of technology, the Company data practices will change from time to time. If and when our data practices change, we will post the changes on our Website and notify you in accordance with law, which may include an email or other notice posted on the Website. These changes to the Privacy Policy will become effective when posted. Your use of the Website following any such update constitutes your acceptance of the updated Privacy Policy.

Collection of Personal Data

We collect the below categories of personal data from you when you access the Website:

Contact and Background Information: Name, email address, postal address, and phone number. We may also collect demographic information such as your age, date of birth, and gender.
Website Activity: We collect information related to your access to and use of our Website, including the type of browser you use, access times, pages viewed, your IP address, and the page you viewed before and after visiting our Website. We may also collect this type of information in visual form when you visit our Website, including video snippets of your Website activity.
Device Information: We collect information about the computer or mobile device you use to access our Website, including the hardware model, operating system and version, unique device identifiers, and mobile network information.
Health Related Information: We collect information that may relate to your health in the context of our regulatory responsibilities under the Federal Food, Drug, & Cosmetic Act (such as adverse event and product complaint reporting), when you inquire about any patient assistance or support programs that we may offer, and health-related data that you disclose to us offline and online, such as through our consumer-facing websites, communications channels, or otherwise through the Website.
Geolocation Information: We collect the approximate location (e.g., city, town) of your device based on your IP address.
Employment and Professional Information: Place of employment, credentials, and occupation or professional membership.
Commercial Information: Information about your product and service preferences and interests, including our products and services.
Social Media Information: Account names, handles, biographies, and other details that you make available on social media networks.
Other information that you may provide to us or that we may infer based on the above.

Sources of Personal Data

We collect personal data directly from you in the below contexts. We also collect personal data from you using sources like advertising or marketing networks, data analytics providers, social networks, data brokers, and other service providers or third parties.

If you create an account with us or access the Website
In connection with your interactions, inquiries, or other requests
If you share any digital content with or through our Website, or share content linking to any of our social media accounts
If you participate in a contest, promotion, or survey
If you contact us via e-mail or through our customer service, including through the use of any online chat tools that we may make available
We and our third-party vendors may use tracking tools like browser cookies, flash cookies, pixels, and web beacons to collect information from you. Please see “How do we use cookies and other tracking technologies?” for more information.

Use of Personal Data

We may use your personal data in the following ways:

To provide, operate, maintain, and protect our Website;
To analyze and improve our Website, including developing new products or services;
To communicate with you, respond to your inquiries, and to send you information by email, postal mail, telephone, text message, notifications, or other means about our products and services;
To promote and conduct educational or promotional events, including those that may be in person and to support our marketing and advertising activities, including delivering personalized advertising;
To evaluate, promote, and facilitate our research activities (including our clinical trial activities) and any patient assistance or support programs that we offer;
To enhance and help us better understand your browsing experience, needs, and preferences and provide consistent, personalized services and experiences across our Website;
To protect the security or integrity of the Website, including to perform security analyses to verify that the Website is working properly and has not been compromised based on our legitimate interests;
To protect us, our users, and the public, and comply with applicable law, regulation, or legal process, including to validate user information for fraud and risk detection purposes, resolve disputes and protect the rights of users and third parties, respond to claims and legal process (such as subpoenas and court orders), fulfill our reporting obligations, monitor and enforce compliance with our contracts, including any agreements between you and us, and otherwise detect, prevent, or stop any activity that may be illegal, unethical, or legally actionable; and
To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by us about our customers is among the assets transferred.

Disclosure of Personal Data

We disclose your personal data to the following categories of parties:

Service providers: We engage vendors and consultants to assist with and perform certain functions on our behalf such as: auditing and accounting firms, professional services consultants, providers of data hosting, storage, and analytics services, and IT and security vendors.
Social media platforms: Where you choose to interact with us through social media, your interaction with these platforms typically allows the social media company to collect some information about you through cookies and other digital tracking mechanisms that they place on your device. In some cases, the social media company may recognize you through these technologies even when you do not interact with their platform. Please visit the social media companies’ respective privacy policies to better understand their data collection practices and the controls they make available to you.
Companies involved in advertising: We work with companies that assist us in advertising our Website to you and others who may be interested in the Website. These companies may use tracking technologies on our Website to collect or receive information over time and across different websites or platforms, including this Website, and elsewhere on the internet, and use that information to provide measurement services and provide you with targeted ads.
Corporate affiliates: We share personal data with our subsidiary companies.
Business partners: We may work with other companies to provide you with certain product or service offerings.
Law enforcement, government agencies, or parties in a legal proceeding: We may share personal data with these entities to comply with the law or assist law enforcement. We may also provide your personal data to third parties in the context of a subpoena or similar legal process.
Third parties in the context of a merger or similar business transaction.

Cookies

We and our third-party vendors use cookies, pixel tags, and other tracking technologies on the Website in a variety of ways to enhance or personalize your online browsing experience. These tracking technologies help us better understand your needs and preferences and tell us which parts of our Website you have visited, facilitate and measure the effectiveness of our advertisements, and provide consistent and personalized services and experiences. These tracking technologies gather information over time and across different websites about you, some of which may be considered personal data. For example, these technologies track items such as the URL that you came from and go to next, your navigation through the Website (for example, the advertisements that you click on), the browser and operating system that you use, and your IP address.

You can set your browser to notify you when you receive a cookie. This enables you to decide if you want to accept it or not. The Help portion of the toolbar on most browsers will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether. Additionally, you can disable or delete similar data used by browser add-ons, such as Flash cookies, by changing the add-on’s settings or visiting the website of its manufacturer. Please note that our Website does not recognize “Do Not Track” signals. However, our Website may recognize certain opt-out preference signals, such as the Global Privacy Control, and will process such signals in accordance with applicable law, potentially including “do not sell”, “do not share”, “limit the use or disclosure of sensitive personal information,” and opt out of targeted advertising requests. You may set such a signal through your browser or browser extension.

Deidentified Data

We may create aggregated, deidentified, or anonymized data from the personal data that we collect and use and disclose this data for any lawful purpose, including new product development and research. To the extent that we receive any deidentified data, we will maintain and use the data in deidentified form and will not attempt to reidentify the data unless permitted under applicable law. Deidentified data that is reidentified and otherwise qualifies as personal data is subject to this Privacy Policy.

Link to Other Sites

This Privacy Policy applies only to Company. This Website contains hyperlinks to websites that are not operated by Company or one of our affiliates. These hyperlinks are provided for your reference and convenience only and do not imply any endorsement of the activities of these third-party Websites or any association with their operators. Company does not control these Websites and is not responsible for their data practices. We urge you to review the privacy policy posted on any Website you visit before using the site or providing any personal data about yourself.

Security

The Company takes certain precautions to protect our users’ information and to limit the risk that it will be accessed without authorization, including use of certain commercially reasonable technologies and practices. We cannot, however, ensure or warrant the security of any information you transmit to Company, and you do so at your own risk. If Company learns of a security systems breach, then we may attempt to notify you electronically so that you can take appropriate protective steps. Company may post a notice on the Website if a security breach occurs.

Unsecured Email Warning

Please note that any information you send to Company via email or through the Website is sent via an unsecured link. Due to the nature of the internet, there is a possibility that unsecured (unencrypted) email or message could be intercepted and read by third parties. Company assumes no responsibility for interception of confidential information (including in a resume or CV) that you send in an unsecured (unencrypted) email or message.

Data Retention

We retain personal data for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. The criteria used to determine our retention periods include:

The length of time we have an ongoing relationship with you and provide the Website to you (for example, for as long as you have an account with us);
Whether there is a legal obligation to which we are subject (for example, we are required to keep records of your transactions for a certain period of time); or
Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).

Data Subject Rights

You may have the rights listed below (“Data Subject Rights”) with respect to the personal data that we collect or process about you, however, these rights differ depending on your place of residency, including the California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. Please note that we reserve the right to honor your Data Subject Rights to the extent required by applicable law.

Right to Confirm Processing, Access, and/or Obtain a Copy (referred to in some places as a Data Subject Access Request): If you ask us, we will confirm whether we are processing your personal data. Additionally, upon request, we will provide you with a copy of all personal data you are lawfully entitled to receive, potentially including specific pieces of information, along with certain other details.
Right to Amend: If you believe your personal data is inaccurate or incomplete, you may request that we correct it.
Right to Delete: You may request that we delete personal data that we maintain about you.
Right of Portability: You may request that we move, copy, or transfer the electronic personal data that we hold about you to another organization.
Right to Revoke Consent and/or Opt Out of Certain Processing Activities: You may ask us to restrict or stop the processing of your personal data. This includes general requests and requests in specific contexts, such as if we process personal data that is considered “sensitive” under applicable U.S. state laws or engage in certain automated decision-making activities.
Right to Limit Use and Disclosure of Sensitive Personal Data: You may ask us to limit the use and disclosure of sensitive personal data.
Right to Opt Out of Targeted Advertising or “Sharing”: Targeted advertising is the practice of serving you tailored advertisements based your personal data gathered over time and across other businesses, websites, applications, or services. Some jurisdictions may refer to this activity as “sharing.” You have the right to opt out of this practice.
Right to Opt Out of Sales: NOTICE: We may sell your sensitive personal data. Some jurisdictions may consider targeted advertising a “sale” of personal data. You may request that we not “sell” your personal data. Because we collect usage and interaction data with certain health-related webpages in our Website, and use this to support targeted advertising, some jurisdictions may consider this a “sale” of “sensitive” personal data.
Right to Non-Discrimination: We will not discriminate against you for exercising Data Subject Rights, but we may charge a reasonable fee as permitted by law in fulfilling these rights, such as if you request multiple copies of your personal data.
Right to Appeal: If we deny your request to exercise a Data Subject Right, you may have the right to appeal the decision with us. If you would like to appeal a prior decision, please be sure to include information about your prior request so that we may locate our earlier determination.
Right to Lodge a Complaint: You may submit a complaint to the competent supervisory authority in the country or state in which you live if you have any concerns about our processing of your personal data or if we deny your appeal to review a prior decision about your Data Subject Rights.

If you or your authorized agent would like to exercise a Data Subject Right, you may do so by submitting a request using this form or following the instructions in “Contact Information” below. Please note that you may also login to your account to access and correct your account information at any time.

In order to process your request to exercise a Data Subject Right, we will ask you to verify your identity by confirming your name, e-mail address, phone number, or other identifiable information that we have in our records, such as most recent interaction with us, if applicable.

Your California Privacy Rights

California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of the Website that are California residents to request certain information regarding our disclosure of personal information to third parties for their marketing purposes. To make such a request, please send an email to info@ImmunityBio.com.

If you reside in California, please read this section for additional disclosures about how we collect, use, and disclose information about you under the California Consumer Privacy Act (or “CCPA”) (California Civil Code Section 1798.100 et seq.).

Categories of Personal Information Collected: In the previous 12 months, we have collected the personal information listed in the section “Collection of Personal Data” above. This information falls into the following categories under the CCPA: identifiers; categories of personal information described in Cal. Civ. Code 1798.80(e); commercial information; geolocation information; audio, electronic, or visual information; internet or electronic network activity information; inferences drawn from the above categories. Additionally, we collect the following “sensitive” personal information: personal information collected and analyzed concerning a consumer’s health.
Sensitive Personal Information Uses or Disclosures: The data that we capture about your interactions with some of our health-related content on the Website may be considered “sensitive” personal information. We use this interaction data to support cross-context behavioral advertising. You may request that we limit this use of “sensitive” personal information by following the instructions at the end of this Privacy Policy.
Business or Commercial Purpose for Collecting and Selling Information: We collect personal information for the business and commercial purposes described in “Collection of Personal Data” and “Use of Personal Data” above.
Categories of Sources of Personal Information: We collect personal information from and about you as described in “Sources of Personal Data” above.
Categories of Third Parties with Whom We Disclose Information: We may disclose your personal information with third parties as described in “Disclosure of Personal Data” above.
Categories of Personal Information Disclosed: In the preceding 12 months, we have disclosed the categories of personal information listed in “Collection of Personal Data” for the reasons described in “Use of Personal Data” and “Disclosure of Personal Data” above.
Sale or Share of Personal Information: Because we engage in the practice of cross context behavioral advertising, also known as online targeted advertising, we may “sell” and/or “share” your personal information as those terms are defined by the CCPA. In the preceding 12 months, we may have “sold” or “shared” identifiers, commercial information, employment or professional information, health information (usage and interaction data with certain health-related webpages in our Website), and internet or electronic network activity information with data analytics, advertising networks, and/or social media networks. We do not have any actual knowledge that we sell or share the personal information of users under the age of 16.

Questions About Our Privacy Policy

If you have any questions about this Privacy Policy or concerns about the way Company processes your personal data, please contact us at info@ImmunityBio.com

Contact Information

If you have any questions or comments about this notice, the ways in which the Company collects and uses your information described and in the Privacy Policy, your choices and rights regarding such use, or wish to exercise your data subject rights, contact us at:

Phone: 1-310-883-1300

Email: info@ImmunityBio.com

Additional Information for Job Applicants

This section supplements the information provided above and describes the additional personal information we collect when you apply for a job with us. We may collect the personal information in the below list in the following ways: directly from you; from publicly available sources, such as government entities, public records systems, and social media networks; data analytics providers and data brokers; or as you may otherwise authorize, such as a former employers or references.

Please note if you use our Website in the application process, additional information is collected, as described above. We may collect the personal information categories listed in Cal. Civ. Code § 1798.80(e) (the California Customer Records Statute) in addition to the categories of personal information listed below. Items with an asterisk (*) may be considered “sensitive” personal information according to the CCPA.

Identifiers*: Government-issued identification numbers, including your Social Security, driver’s license, passport, state identification card, or military identification card numbers.
Public records and background check information (pursuant to your consent in accordance with applicable law): Current and past addresses, court records, credit and criminal history, and drug test results.
Demographics and Protected Classifications*: Citizenship, gender, date of birth, age, and other traditionally protected classifications that you choose to disclose, such as race and ethnicity, marital status, sexual orientation, veteran or military status, disability, and medical status.
Professional or Employment Related Information: Professional associations and employment history, including name of employer, position, employer contact information, and associated employment records.
Educational Information: Educational institutions attended, degrees and certifications attained, and other educational or student records, which may include details about attendance, grades, and academic and disciplinary history.

We generally collect this personal information in order to evaluate your application for employment. For more details about how we use and disclose the personal information listed here, please refer to “Use of Personal Data” and “Disclosure of Personal Data” above.