Vertex Privacy Notice (English) (US residents only)

Privacy Notice

Last Updated: December 19, 2019

This Privacy Notice describes the privacy practices of Vertex Pharmaceuticals Incorporated and its subsidiaries and affiliates, including but not limited to the entities listed here (collectively, “Vertex”). This Privacy Notice describes how we collect, use, disclose and otherwise process personal information, and explains the rights and choices available to individuals with respect to their information.

Vertex may provide additional privacy notices to individuals at the time we collect their data For example, we provide a specific privacy notice to clinical trial participants that describe our privacy practices in connection with conducting clinical trials. This type of an “in-time” notice will govern how we may process the information you provide at that time. 

Please note this Privacy Notice does not apply to Vertex’s processing of employee or contractor data.


Click on the links below to jump to sections of the Privacy Notice:

Personal Information We Collect

Whose Personal Information We Collect

We collect personal information about the following types of individuals: clinical trial participants, patients, patient family members, caregivers or advocates, physicians and other health care professionals, clinical trial investigators, researchers, pharmacists, contractors, consultants, job applicants, volunteers, visitors to our offices, and other individuals who interact directly with Vertex or its service providers or business partners, including users of websites and mobile applications.

How We Collect Personal Information

We collect personal information:

  • Directly from individuals
  • Through our websites and mobile apps
  • From healthcare professionals
  • From contract research organizations and clinical trial investigators
  • From government agencies or public records
  • From third party service providers, data brokers or business partners
  • From industry and patient groups and associations
  • From social media or other public forums (including adverse event information or product quality complaints)
  • From recruiters

Types of Personal Information We Collect

The types of personal information we collect and share depend on the nature of the relationship you have with Vertex and the requirements of applicable laws. The types of personal information we collect include:

  • Health and medical information (such as medical insurance details, information about physical and mental health conditions and diagnoses, treatments for medical conditions, genetic information, family medical history, and medications an individual may take, including the dosage, timing, and frequency) we collect in connection with managing clinical trials, conducting research, providing patient support programs, distributing and marketing our products, managing compassionate use and expanded access programs, and tracking adverse event reports
  • Personal and business contact information and preferences (such as name, job title and employer name, email address, mailing address, phone number, and emergency contact information)
  • Biographical and demographic information (such as date of birth, age, gender, marital status, and information regarding any parents or legal guardians)
  • Professional credentials, educational and professional history, institutional and government affiliations, background checks, performance reviews, aptitude and personality assessments, and information of the type included on a resume or curriculum vitae education and work history (such as work experience, education, salary, and languages spoken)
  • If you are a third party with whom we have or are contemplating a contractual relationship, such as a health care professional, we collect publicly-available information related to your practice, such as license information, disciplinary history, prior litigation and regulatory proceedings, and other due diligence related information  
  • Payment-related information we need to pay for professional services, such as consulting, individuals may provide to us (such as tax identification number and financial account information)
  • If you are a health care professional, we collect information about the programs and activities in which you have participated, our interactions with you, your prescribing of our products and the agreements you have executed with us
  • Username and password that you may select in connection with establishing an account on our website or mobile application
  • Your photograph, social media handle or digital or electronic signature
  • Publicly available information (such as comments describing support for and experience with Vertex products)
  • If you are a visitor to a Vertex office location, we collect information through closed circuit television (CCTV)
  • Other information you provide to us (such as in emails, on phone calls, through our websites or mobile applications, or in other correspondence, such as market research surveys, with Vertex or its service providers or business partners)

Our Use of Personal Information


We may use personal information for the following purposes, provided that such use is permitted by local law:

  • Communicating with you about the products and services we offer, and responding to requests, inquiries, comments, and suggestions
  • Analyzing and enhancing our communications and strategies (including by identifying when emails sent to you have been received and read, as well as your interactions with us including on our websites and mobile applications)
  • Operating, evaluating, securing, and improving our business (including our physical office locations), our websites and mobile applications, and other products and services we offer (including to research and develop new products and services)
  • Tailoring the content we display and send you in our communications and on our websites and in mobile apps
  • Developing, personalizing, and executing sales, marketing, and customer relationship management activities, including the delivery of programs and materials
  • Administering and analyzing surveys and other market research
  • Staffing, facilitating, conducting and managing clinical trials
  • Tracking and responding to safety and product quality concerns (including product recalls)
  • Complying with regulatory monitoring and reporting obligations (including those related to adverse events, product complaints, spend transparency, and patient safety)
  • Analyzing use of our products
  • Supporting, facilitating, and arranging travel and other logistics for public health initiatives, symposia, conferences, and scientific, educational, community, and volunteer events, including those at Vertex offices
  • Facilitating medication adherence programs
  • Managing access to our products, including where access is limited by law to licensed physicians
  • Facilitating academic and other research and studies
  • If you are a third party with whom we have or are contemplating a contractual relationship, such as a health care professional, we collect publicly-available information related to your practice, such as license information, disciplinary history, prior litigation and regulatory proceedings, and other due diligence related information  
  • Defining and managing appropriate patient engagement activities, and patient support programs (including to provide co-pay and other financial assistance where available)
  • Identifying, interacting, and engaging with health care professionals, including thought leaders and external experts
  • Awarding scholarships and grants
  • Attributing authorship to academic and promotional materials
  • Complying with legal or regulatory requirements, judicial process, and our company policies (including due diligence and contracting activities)
  • Protecting against, identifying, investigating, and responding to fraud, illegal activity (such as incidents of hacking or misuse of our websites and mobile applications), and claims and other liabilities, including by enforcing the terms and conditions that govern the services we provide
  • Facilitating and improving our recruitment activities (such as processing employment applications, evaluating a job candidate for an employment activity, analyzing trends, and monitoring recruitment statistics)

We may aggregate and/or de-identify any information that we collect, such that the information no longer identifies any specific individual. We may use, disclose and otherwise process such information for our own legitimate business purposes – including historical and statistical analysis and business planning – without restriction.

In some situations, we may have a separate agreement or relationship with you with respect to a specific type of processing of your data, such as if you participate in a special program, activity, event, or clinical trial.  These situations will be governed by specific terms, privacy notices, or consent forms that provide additional information about how we will use your information.  We will honor these additional terms with respect to your information and thus, strongly recommend you review the additional terms prior to participating in any programs.

Personal Information We Share

Vertex shares personal information for the purposes described in this Privacy Notice or through a specific “in-time” privacy notice provided at the time we collect the information.

The types of individuals or entities we share personal information with include:

  • Vertex affiliates and subsidiaries
  • Service providers that perform services on our behalf, including:
    • Contract research organizations that conduct clinical trials on our behalf
    • Data storage and analytics providers
    • Customer service (including our medical information line) and patient support providers (including for product quality and adverse event reporting, patient co-pay assistance, medicine intake adherence programs, etc.)
    • Product recall service providers
    • Technology providers (including technology support, email and web hosting providers, marketing and advertising technology providers, email and text communications providers, mobile app developers)
    • Event planning and travel organizations that help facilitate Vertex programs
    • Payment, shipping and fulfillment service providers
  • Regulators worldwide, as required by law, including in connection with monitoring, review and approval of our studies, products and services, and adverse event reporting
  • Partners with whom we jointly develop products or services
  • Health care professionals, researchers, academics, and public health organizations
  • Publishers

Unless prohibited by applicable law, we may disclose personal information as part of a corporate business transaction, such as a merger, acquisition, reorganization, joint venture or financing or sale of our assets, and could be sold or transferred to a third party as party of such a transaction. We may also disclose personal information to a successor entity in the event of insolvency, bankruptcy or receivership. After such a sale or transfer, you may contact the recipient with any inquiries concerning the processing of your personal information.

In addition, we may share your information to comply with legal and regulatory requirements, and protect against fraud, illegal activity (such as identifying and responding to incidents of hacking or misuse of our websites and mobile applications), and claims and other liabilities.

Cookies and Other Information Collected by Automated Means

We, our service providers, and our business partners, may also collect certain information about the use of our websites and mobile applications by automated means, such as cookies, web beacons and other technologies (“Automated Information”). Please see our Cookies Policy at the end of this page for more information on cookies. We and our service providers and business partners may collect Automated Information about your online activities over time and across our own and third-party websites when you use our websites and mobile applications, including to deliver advertising-related content. In jurisdictions where Automated Information is considered personal information, or if we associate Automated Information with personal information, we will treat Automated Information as personal information in accordance with this Privacy Notice.

The information that we collect by automated means includes:

  • Details about the devices that are used to access our websites or mobile applications (such as the IP address, and type of operating system and web browser)
  • Dates and times of visits to, and use of, our websites and mobile applications
  • Details about your interactions with emails that we may send you, including the links on which you click and your interactions with our linked sites, where permitted by law
  • Information about how our websites and mobile applications are used (such as the content that is viewed on our websites and how users navigate between our webpages, or the features of our mobile applications that are used and how users navigate between screens on our mobile applications)
  • URLs that refer visitors to our websites
  • Search terms used to reach our websites or locate our mobile applications

Web browsers may offer users of our websites the ability to disable receiving certain types of cookies; however, if cookies are disabled, some features or functionality of our websites may not function correctly. The “help” menu on most internet browsers contains information on how to disable cookies, or you can visit


Region-Specific Information

Information for Individuals in the European Economic Area and the United Kingdom

This Privacy Notice is intended for U.S. residents. To view our other privacy notices, please click here.

Information for California Residents

California Consumer Rights

As a California resident, you may be able to exercise the following rights in relation to the personal information about you that we have collected under the California Consumer Privacy Act of 2018 (CCPA) (subject to certain exemptions and limitations at law). The provisions below only apply to the extent your personal data is covered by the CCPA. Please note that if the exercise of these rights limits our ability to process personal information, we may not be able to provide our products or services to individuals who exercise these rights, or to otherwise engage with such individuals going forward. In addition, your rights and choices may be limited in certain cases: for example, if you ask to delete information which we are required or allowed by law to keep.

The Right to Know

You may have the right to request any or all of the following information relating to your personal information we have collected and disclosed in the last 12 months, upon verification of your identity: 

  • The specific pieces of personal information we have collected about you; 
  • The categories of personal information we have collected about you; 
  • The categories of sources of the personal information; 
  • The categories of personal information that we have disclosed to third parties for a business purpose, and the categories of recipients to whom this information was disclosed; 
  • The categories of personal information we have sold about you (if any) and the categories of third parties to whom the information was sold; and 
  • The business or commercial purposes for collecting or, if applicable, selling personal information about you.
The Right to Request Deletion You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions.
The Right to Opt-Out of Personal Information “Sales”

You may have the right to direct us not to “sell” personal information we have collected about you to third parties now or in the future.

Note about “Sales”: Vertex does not “sell” personal information as most people would typically understand that term.  For more information, please see the “Use and Disclosure of Personal Information” section below. 

The Right to Non-Discrimination You may have the right not to receive discriminatory treatment for exercising these rights. 


Collection of Personal Information

In the last 12 months, we have collected the following categories of personal information: Identifiers, California Customer Records Categories, Protected Classification Characteristics, Commercial Information, Internet/Network Information, Sensory Information, Professional/Employment Information, Other Personal Information, and Inferences. For further details, see the “Types of Personal Information We Collect” section above. We collect this information from the categories of sources as described in the “How We Collect Personal Information” section above. We collect this information for the purposes as described in the “Our Use of Personal Information” and the “Cookies and Other Information Collected by Automated Means” section above.

Use and Disclosure of Personal Information

As described in the “Personal Information We Share” section above, we share the categories of personal information above within Vertex and with a variety of third parties for businesses purposes. Please review the “Personal Information We Share” section for more information.  

Note about “Sales”: Vertex does not “sell” personal information as most people would typically understand that term.  However, we do allow certain third-party advertising partners to collect information about consumers through our services for purposes of serving ads that are more relevant, for ad campaign measurement and analytics, and for ad fraud detection and reporting. To the extent this practice is interpreted to constitute a “sale” under the CCPA, please see the “To Exercise Your Right to Opt-Out of Personal Information ‘Sales’” section below.

To Exercise Your Right to Know or Right to Deletion 

To exercise your Right to Know and/or your Right to Deletion, please submit a request by: 

  • Emailing with the subject line “California Rights Request,” or
  • Calling our toll-free number: 1-877- 586- 9244.

When submitting a request, please describe your relationship with us and your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We will need to verify your identity before processing your request, which may require us to request additional personal information from you or require you to log into your account (if applicable). We will only use personal information provided in connection with a Consumer Rights Request to review and comply with the request. 

In certain circumstances, we may decline a request to exercise the rights described above, particularly where we are unable to verify your identity. If we are unable to comply with all or a portion of your request, we will explain the reasons for declining to comply with the request.

Requests for Minor Children 

If you wish to submit a verifiable consumer request on behalf of your minor child, you must:

  • Provide sufficient information to allow us to reasonably verify your child is the person about whom we collected personal information and you are authorized to submit the request on your child’s behalf (i.e., that you are the child’s legal guardian or authorized representative).
  • Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

To Exercise Your Right to Opt-Out of Personal Information “Sales”

As noted above, we do not “sell” personal information as most people think of that term. To the extent our third-party advertising partners collection of information from our website visitors constitute a “sale” under the CCPA, please visit the “Cookies and Other Information Collected by Automated Means” section above and “Online Privacy Choices” section below for more information about the choices and opt-out options you may have in relation to those practices. 

Minors Under Age 16

We do not “sell” the personal information of consumers we know to be less than 16 years of age. However, if an activity or practice we engage in is found to constitute a “sale,” we will obtain affirmative authorization in accordance with applicable law.    

California’s “Shine the Light” Law

At the time of this writing, we do not provide your personal information to third parties for their direct marketing purposes, as described in California’s "Shine the Light" law (Civil Code Section §1798.83).  To opt-out of having your personal information disclosed to third parties for their direct marketing purposes in the future, please email us at with the subject line “California Shine the Light Request” to be added to our suppression list.

Information for Nevada Residents

Under Nevada law, Nevada residents may opt-out of the “sale” of their personal information, where the information is exchanged for monetary consideration.  We do not engage in such activity; however, if you are a Nevada resident, you may submit a request to opt-out of potential future sales under Nevada law by emailing us a  Please note we will take reasonable steps to verify your identity and the authenticity of the request.  Once verified, we will maintain your request in the event our practices change.

Online Privacy Choices

Advertising networks

We support the self-regulatory principles of the Digital Advertising Alliance (“DAA”). We work with advertisers, advertising networks, advertising servers, and analytics companies (“Ad Partners”) that use different technologies to collect Automated Information in order to understand how our websites and mobile apps are being used, analyze where users go after they leave our websites and mobile apps in order to deliver relevant advertising. These advertisements may appear on other websites or services.

These Ad Partners may recognize a particular individual across third party websites over time and link various devices used by the same individual. For more information about how Ad Partners use the information collected by these technologies and about your options not to accept cookies placed by some of these companies on our websites and mobile apps, please visit the DAA’s opt-out page. If you are accessing the websites or mobile apps from the European Union, please visit the EDAA’s opt-out page and if you are accessing the Sites from Canada, please visit the DAAC’s opt-out page.

The opt-outs described above are device- and browser-specific and may not work on all devices. If you choose to opt out through any of these opt-out tools, this does not mean you will cease to see advertising. Rather, the ads you see will be based on the website you are visiting and not your interests.

Marketing emails

Where legally permissible, we may send you information about Vertex products and services via email. You may unsubscribe from receiving marketing or other commercial emails from Vertex by following the instructions included in the email. However, even if you opt out of receiving such communications, we retain the right to send you non-marketing communications (such as important product safety information, or changes in website on mobile application terms).

Privacy preferences and rights

If you would like to request to review, correct, or update personal data that you have provided to us, you may contact us as indicated in the Contact Us section. We will respond to your request consistent with applicable law. Please note that we may need to retain certain personal data for recordkeeping purposes and/or to complete any transactions that you began prior to requesting a change or deletion.

Please note that if the exercise of these rights limits our ability to process personal information, we may not be able to provide our products or services to individuals who exercise these rights, or to otherwise engage with such individuals going forward. For information about the rights and choices users have with respect to cookies and online tracking, please see the “Cookies and Other Information Collected by Automated Means” section of this Privacy Notice.

Health Care Professionals

Access to the health care professionals’ section of some of our websites is password-protected using a third party user authentication technology provider (“authentication service”). If you are a health care professional and you wish to access the healthcare professionals’ section of such websites, you must register with the authentication service first. You will then be able to use your authenticated username and password to access the health care professionals’ section of the website.

This registration procedure takes place on the third party authentication service’s website and, if you are a resident of the European Union, that party is the “data controller” of that data. When you register or use the authentication service to access one of our websites, the authentication service will automatically pass your encrypted registration data to Vertex or Vertex service providers’ or business partners’ servers. However, Vertex or Vertex service providers or business partners will not receive your personal information as part of providing access to the health care professionals’ section.


We do not knowingly collect personal information from children under age 13 in the United States through our websites or mobile applications. If we learn that we have collected personal information directly from a child under the age of 13 through our websites or mobile applications, we will delete that information.

How we Protect Personal Information

Vertex maintains reasonable administrative, technical and physical safeguards designed to protect the personal information we maintain against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. However, we cannot guarantee that the measures we maintain will ensure the security of the personal information.

Links to Websites and Third-Party Content

For your convenience and information, we may provide links to websites and other third-party content that is not owned or operated by Vertex. The websites and third-party content to which we link may have separate privacy notices or policies. Vertex is not responsible for the privacy practices of any entity that it does not own or control.

Updates to our Privacy Notice

Vertex reserves the right to change this Privacy Notice at any time. When we update this Privacy Notice, we will notify you of changes that are deemed material under applicable legal requirements by updating the date of this Privacy Notice and providing other notification as required by applicable law. We may also notify you of changes to the Privacy Notice in other ways, such as via email or other contact information you have provided.

How to Contact us

You may contact us with questions, comments, or complaints about this Privacy Notice or our privacy practices, or to request access to or correction of your information. When raising a request or complaint, please provide sufficient details (including your relationship with us) and any relevant documentation. The contact information for our global Privacy Office and global data protection officer is:

Vertex Pharmaceuticals Incorporated
Attn: Legal Department – Privacy Office
50 Northern Avenue
Boston, MA 02210


Last Updated: December 7, 2018.


By using the Vertex website and any other website (including mobile-optimized websites) owned or controlled by Vertex and which links to this Cookies Policy (collectively, the “Website”), you consent to the use of cookies in accordance with this Cookies Policy.

What are cookies?

Cookies are small amounts of data which your web browser stores on your device at the request of certain websites. Cookies are then sent back to the originating web domain on your subsequent visits to that domain. Most web pages contain elements from multiple web domains so when you visit the website, your browser may receive cookies from several sources.

Cookies are useful because they allow a website to recognize a user’s device. Cookies allow you to navigate between pages efficiently, remember preferences and generally improve the user experience. They can also be used to tailor advertising to your interests through tracking your browsing across websites.

There are two primary types of cookies that are used, session cookies and persistent cookies. Session cookies are deleted automatically when you close your browser and persistent cookies remain on your device after the browser is closed (for example to remember your user preferences when you return to the site). Each cookie typically falls into one of several categories.

What types of cookies does Vertex use?

We describe the categories of cookies Vertex and its contractors use below.

Strictly Necessary Cookies

These cookies are essential in order to enable you to move around the Website and use its features. Without these cookies, services you have asked for (such as navigating between pages) cannot be provided.

Performance Cookies

We make use of analytics cookies to analyze how our visitors use our Website and to monitor Website performance, including those by Google Analytics. This allows us to provide a high quality experience by customizing our offering and quickly identifying and fixing any issues that arise. For example, we might use performance cookies to keep track of which pages are most popular, which method of linking between pages is most effective, and to determine why some pages are receiving error messages. We might also use these cookies to highlight articles or site services that we think will be of interest to you based on your usage of the website. You can opt out of Google Analytics here.

Website Functionality Cookies

We make use of cookies to provide you with certain functionality. For example, to remember choices you make (such as your user name, language or the region you are in), or to recognize the platform from which you access the site, and to provide enhanced and more personal features. These cookies are not used to track your browsing on other sites.

Disabling cookies

If you do not agree to the use of cookies that are not strictly necessary, you may disable them by following the instructions for your browser as explained at Please note that some of our services may not function properly if cookies are disabled. You may also opt out of third-party cookies where available by using the links provided in this Cookies Policy.

Furthermore, some of our service providers that set cookies via our site on our behalf may offer the ability to opt-out of cookies via the Network Advertising Initiative’s consumer opt-out  tool, the European Interactive Digital Advertising Alliance’s consumer opt-out tool, or the Digital Advertising Alliance’s Consumer Choice Page.

Cookies policy does not cover third party websites

Please note that this cookies policy does not apply to, and we are not responsible for, the cookie practices of third party websites which may be linked to this Website.

Changes to the Cookies Policy

We may update this cookies policy and we would encourage you to review the policy from time to time to stay informed of how we are using cookies.

  1. United States: Vertex Pharmaceuticals Incorporated, located at 50 Northern Avenue, Boston, Massachusetts, United States of America 02210

  2. Canada: Vertex Pharmaceuticals (Canada) Incorporated, located at 20 Bay Street, Suite No. 1520, Toronto, Ontario, Canada M5J 2N8

  3. Australia: Vertex Pharmaceuticals (Australia) Pty. Ltd., located at 601 Pacific Highway, Level 3 Suite 3, Sydney, NSW 2065, Australia

  4. Brazil: Vertex Farmacêutica do Brasil Ltda., located at Rua Trindade, No. 125, Bloco 2, Jardim Margarida, 06730-000, Vargem Grande Paulista, São Paulo

  5. Switzerland: Vertex Pharmaceuticals (CH) GmbH, located at Baarerstrasse 88, 6300 Zug, Switzerland

  6. Czech Republic: Vertex Pharmaceuticals (Czech Republic) s.r.o., located at Štětkova 1638/18, Nusle, 140 00 Prague 4, Czech Republic

  7. Italy: Vertex Pharmaceuticals (Italy) S.r.L, located at 6 ° piano, Via Leonida Bissolati 76, 00187 Roma, Italy

  8. France: Vertex Pharmaceuticals (France) SAS, located at 32 Rue des Mathurins, Floors 4&5, 75008, Paris, France

  9. Germany: Vertex Pharmaceuticals (Germany) GmbH, located at Sonnenstrasse 19, 80331, Munich, Germany

  10. Spain: Vertex Pharmaceuticals (Spain), S.L., located at Torre Serrano, calle Serrano n º 47-13º, 28001 Madrid, Spain

  11. Netherlands: Vertex Pharmaceuticals (Netherlands) B.V., located at Leidsevaart 20 2013 HA Haarlem, the Netherlands

  12. Austria: Vertex Pharmaceuticals GmbH, located at Euro Plaza, Building H Lehrbachgasse 13 1120 Wien Austria

  13. Portugal: Vertex Pharmaceuticals (Portugal) Unipessoal Lda., located at Torre de Monsanto Rua Afonso Praça nº 30, 7º 1495-061 Miraflores Portugal

  14. Sweden: Vertex Pharmaceuticals (Sweden) AB, located at Torsgatan 13, 8 tr 111 23 Stockholm Sweden

  15. Ireland: Vertex Pharmaceuticals (Ireland) Limited, located at 26-32 Upper Pembroke St., Dublin 2 Ireland

  16. United Kingdom: Vertex Pharmaceuticals (Europe) Limited, located at 2 Kingdom Street, 9th Floor, London W2 6BD United Kingdom

  17. Denmark: Vertex Pharmaceuticals Denmark filial af Vertex Pharmaceuticals (Europe) Limited, a Danish branch of Vertex Pharmaceuticals (Europe) Limited, located at Bredgade 6,1 Floor, 1260 Copenhagen

  18. Norway: Vertex Pharmaceuticals (Europe) Limited NUF, a Norwegian branch of Vertex Pharmaceuticals (Europe) Limited, located at P.O. Box 2734 Solli, 0204 Oslo, Norway

  19. Greece: Vertex Pharmaceuticals Single Member Societe Anonyme (Greek limited liability company), with offices at 62 Kifissias Avenue, 15124 Maroussi, Greece

  20. Poland: Vertex Pharmaceuticals (Poland) sp. z.o.o., located at Warsaw Financial Centre, Emilii Plater, nr 53, 00-113, Warsaw, Poland