Enterprise Privacy Notice

This Privacy Notice describes our processing of PI concerning consumers, customers, and other business contacts. Please note that this Privacy Notice does not apply to individuals with whom we interact in an employment or job applicant-related context. This Privacy Notice may be complemented or supplanted by other privacy notices.

Our agreements with certain customers may contain provisions about the collection, use, storage, and disposal of information collected through our Services. If a provision of a customer agreement conflicts or otherwise is inconsistent with a provision of this Privacy Notice, then the provision of the customer agreement will prevail but solely to the extent of the conflict or inconsistency.

Endo collects information when you use our Services in the following ways:

When You Submit Information to Endo:
We collect and maintain PI about you to understand and meet your needs, provide our Services, manage our business, and for other purposes disclosed to you at the point of collection. We collect and store information you enter, provide to us in written form, or communicate to us verbally. This may include:

• Personal identifiers such as your name, address, email address, account name, professional license number.
• Business contact information (e.g., information printed on a business card)
• Criminal record
• Personal or physical characteristics protected under federal or state law, such as gender, race, ethnicity, age, disability, AIDS/HIV status
• Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies
• Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement
• Geolocation data
• Professional or employment-related information, including job title, employment history
• Financial information, including bank account information
• Health-related data, including information provided in connection with reported adverse reactions to our pharmaceuticals
• Audio, electronic, visual, or similar information, including voice recordings.
• Inferences drawn from any of the information to create a profiles about individuals reflecting preferences, characteristics, psychological trends, preferences, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes

Through Automated Means When You Use the Services: We collect information about how you use the Services:

• Through Server Logs: A server log is a list of the activities that a server performs. Endo’s servers automatically collect and store in server logs your search queries, Internet Protocol (IP) address, hardware settings, browser type, browser language, the date and time of your request and referral URL, and certain cookies that identify your browser or Endo account.
• From Your Computer or Mobile Device: We collect device-specific information, such as your computer or mobile phone model, operating system version, device identifiers, and mobile network information.

From Third Parties: Endo collects information from non-affiliated parties who you direct or authorize to share information with us, such as affiliated organizations, our research partners, collaborators, and service providers. We also sometimes collect information from publicly accessible sources such as government records, websites, social media, and other digital platforms.

We use data collection technology to collect information about you and your use of our Services. Data collection technology deployed through the Services may include cookies and web beacons:

• A cookie is a small text file that is sent to or accessed from your web browser or your computer’s hard drive. A cookie typically contains the name of the domain (internet location) from which the cookie originated, the “lifetime” of the cookie (i.e., when it expires) and a randomly generated unique number or similar identifier. A cookie also may contain information about your computer, such as user settings, browsing history and activities conducted while using the Service. 
• A web beacon (also called a pixel tag or clear GIF) is a piece of computer code that enables us to monitor user activity and website traffic.

(To learn more about cookies and web beacons, visit www.allaboutcookies.org.)

Data collection technology helps improve functionality and determine which features users prefer by collecting information about your browser type, domain name of your Internet service provider, websites visited before and after visiting the Service, and web pages viewed. We may compile statistics about use of the Service to help us analyze technical and navigational information about the Service and to detect and prevent fraud.

Your Control of Cookies: You can review, modify, or revoke your consent to cookies by clicking on the “Cookie Settings” link that appears in the footer of each Endo web page. Please note that your cookie settings are device, browser, and web site specific. 

Do Not Track and Similar Signals: Several different technical specifications exist for transmitting user preferences concerning tracking across websites. The extent of adoption of these technical specifications varies across browsers. Our websites recognize Do Not Track (DNT) and Global Privacy Control (GPC) signals if sent by user Web browsers. Please note that these signals are device, browser, and web site specific. We do not recognize other do not track signals.

We may use the information we collect from or about you to:

• Provide the Services, including to personalize the Services and process any transactions you request 
• Improve the Services, including research and analytics regarding use of the Services
• Communicate with you to fulfill your requests and respond to your comments and inquiries
• Authenticate your identity
• Deliver advertising, including interest-based advertising on our websites and on other websites and applications
• Communicate with shareholders on matters relating to regulatory filings, governance guidelines, sustainability, and similar topics
• Support our clinical trials and research activities
• Investigate and report adverse events to regulators 
• Manage our vendors, including due diligence, contract signing, compliance to regulations, screening, auditing, on-going monitoring etc.
• Detect, investigate, and prevent activities that may violate our policies or be fraudulent or illegal
• Comply with our legal, regulatory, operational, and fiscal obligations 

We may combine information that you provide to us or information that we collect automatically through our Services with other information we obtain from our business records, including your use of Endo products, services, websites and applications and, where applicable, your preferences and other personal characteristics. We also may use or combine information that we collect with information we obtain from non-affiliated parties, including demographic information and other attributes, such as census data, demonstrated interests, and organizational affiliations. Additionally, information collected from a particular browser or device may be used with another computer or device that is linked to the browser or device on which such information was collected.

We may use information we collect from or about you to create aggregated or de-identified data that does not identify you. Once the data is aggregated or de-identified, we may use it for any purpose permitted by law and we may disclose it to non-affiliated parties for their own uses. To the extent we deidentify any data originally based on PI, we will maintain and use such data in deidentified form and will not attempt to reidentify the data.

If you are accessing the Services from outside the United States, you should be aware that the PI that we collect from you may be transferred to, and stored in, the United States for the purposes described above. Once transferred to the United States, your PI will be subject to US privacy laws, which may not offer the same level of protection as the privacy laws where you reside.

We may disclose your information:

• To companies who work on our behalf to help us provide and support our products and the Services. We require these service providers to treat all information we provide as confidential and to use it only for providing the services for which they have been engaged.
• Within the Endo family of affiliated companies to provide you products and services as described in this Privacy Notice.
• Where disclosure is necessary in connection with other business purposes including, without limitation, patient care, service quality, business management and operation, risk assessment, security, fraud and crime prevention/detection, monitoring, research and analysis, marketing, customer purchasing preferences, and trends and dispute resolution.
• Endo may disclose and transfer PI if Endo is involved in a merger, sale, acquisition, divestiture, restructuring, reorganization, dissolution, bankruptcy, or other change of ownership or control by Endo or its parent or affiliated companies (in each case, whether in whole or in part). The acquiring party or the merged entity may have different privacy practices and provide you with a new Privacy Notice.

Other Lawful Disclosures: Endo may also disclose information: (i) as required or permitted by law, including any requirements from government agencies and taxing authorities; (ii) if we determine that disclosure of specific information is necessary to comply with the request of a law enforcement or regulatory agency or other legal process; (iii) to protect the rights, privacy, property, interests, or safety of Endo or our affiliated companies, customers, employees, or the general public; (iv) to pursue available remedies or limit damages; (v) to enforce Endo’s agreements with you; and (vi) to respond to an emergency.

Examples of these non-affiliated parties include:

• Media and marketing service providers
• Data management & analytics service providers
• Contract research organizations
• Bio-pharma technology and solution providers
• Pharmaceutical support service providers
• Life sciences and healthcare service providers
• Forensics partners
• Medical affairs and clinical development consultants
• Security, business management and compliance consultants
• Legal and regulatory authorities (e.g., government regulators including the U.S. Food and Drug Administration (FDA), law enforcement agencies)
• Auditors
• Tax and financial advisors
• Outside legal counsel
• Insurance providers
• Medical laboratories
• Business partners

Endo does not rent, sell, or disclose outside of a service provider relationship text messaging opt-in lists or lists of mobile phone numbers.  

We store and retain information to fulfill the purposes for which you provided the information, to comply with legal obligations, to resolve disputes, to enforce our agreements with you, and for similar essential purposes.

Endo deploys administrative, physical, and technical safeguards intended to help protect information that we collect, process, and store. Unfortunately, however, no safeguards are foolproof. Your use of our Services is at your own risk. You are responsible for maintaining the security of your account credentials and other authentication involved in obtaining access to password-protected or secure areas of our Services. Endo will treat access to our Services through your account credentials as authorized by you. Unauthorized access to password-protected or secure areas is prohibited and may lead to criminal prosecution. We may suspend your use of all or part of our Services without notice if we suspect or detect any breach of security.

You may instruct Endo to stop sending you promotional emails by following the ‘unsubscribe’ instructions provided in promotional emails. However, Endo may continue to communicate with you about an ongoing business transaction.

California Code Section 1798.83 permits individual California residents to opt out of Endo’s disclosure of PI to non-affiliated parties for their direct marketing purposes. California law also permits residents of California to request and obtain from us once per year, free of charge, a list of the non-affiliated parties (if any) to whom we have disclosed PI for their direct marketing purposes in the prior calendar year, as well as the type of PI disclosed to those non-affiliated parties. Endo does not disclose your PI to non-affiliated parties for their direct marketing purposes. If Endo changes this practice, we will update this section.

You may have certain rights regarding our processing of your PI under applicable local law. If our processing of your PI is governed by such laws, this section provides you with additional information regarding your rights and our processing. 

a. Definitions Specific to This Section

• “Sell,” “Sale,” or “Sold” means renting, releasing, or transferring an individual’s PI to a Third Party for money or other valuable consideration.
• “Share,” “Shared,” or “Sharing” means transferring an individual’s PI to a Third Party for cross-context behavioral advertising or targeted advertising purposes, whether or not for money or other valuable consideration
• “Third Party” means a person or organization which is not a Consumer, Vendor, or an entity owned or controlled by us.
• “Vendor” means a service provider, contractor, or processor which collects, stores, or otherwise handles data for us and is bound by certain contractual obligations consistent with applicable laws to use your PI only as directed by us. We have described the categories of Vendors relevant to this Privacy Notice in section 5 above.  

b. Additional Details about How We Collect, Disclose, Sell, and Share PI

We have disclosed the categories of PI described in section 2 above to Vendors and Regulatory Authorities. The purposes for such disclosures are described in section 5 above. We have shared the categories of PI described in section 2 above (with the exception of criminal records and financial information) for targeted advertising purposes in the last 12 months. These disclosures for targeted advertising purposes may also qualify as “sales” of PI in some jurisdictions.

c. Additional Details about the Purposes for Processing Sensitive PI

We, and our Vendors, collect and process the following categories of sensitive PI: PI that reveals your racial or ethnic origin, union membership; health-related data; or your sexual orientation. We process the sensitive PI only for the following business purposes:

• Performing the services or providing the goods reasonably expected by an average Consumer who requests those goods or services;
• Preventing, detecting, and investigating security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted PI; 
• Resisting malicious, deceptive, fraudulent, or illegal actions directed at us and prosecuting those responsible for those actions; 
• Ensuring the physical safety of natural persons; 
• Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of your current interaction with us, provided that we will not disclose your PI to a Third Party and will not build a profile about you or otherwise alter your experience outside of your current interaction with us; 
• Performing services on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on our behalf;
• Verifying or maintaining the quality or safety of a product, service, or device that is owned, controlled, manufactured by or manufactured for us, and improving, upgrading, or enhancing the service or device that is owned, manufactured by, manufactured for, or controlled by us; 
• Collecting or processing Sensitive PI where such collection or Processing is not for the purpose of inferring characteristics about a Consumer; and 
• Targeted advertising. 

d. Retention of Data

We intend to retain each category of PI described above to fulfill the purpose for which it was collected, or a related and compatible purpose consistent with the average consumer’s expectation, and to comply with applicable laws and regulations. We consider the following criteria when determining how long to retain PI: why we collected the PI; the nature of the PI; the sensitivity of the PI; our legal obligations related to the PI, and risks associated with retaining the PI.

e. Your Privacy Rights

Data Subject Rights Disclosure. Laws in California, Colorado, Connecticut, Nevada, Oregon, Tennessee, Texas, Utah, Virginia, and Washington give residents of those states certain privacy rights. Depending on the jurisdiction in which you live, you may have the following rights under applicable local law regarding our collection and use of PI, subject to certain exceptions.

• Right to Know: You may have the right to know the following details about our privacy practice at or before the point of collection. We have provided such information in this Notice. You may also request that we provide you with information about the following aspects of how we have handled your PI specifically in the 12 months preceding your request:
  • The categories of PI we have collected about you;
  • The categories of sources from which we collected such PI;
  • The business or commercial purpose for collecting, Selling, or Sharing PI about you;
  • The categories of PI about you that we disclosed and the categories of Third Parties to whom we disclosed such PI; 
  • The categories of PI about you that we Sold or Shared, and the categories of Third Parties with whom we Sold or Shared such PI; 
  • If we collect Sensitive PI, the categories of Sensitive PI we have collected, the purposes for which it is collected or used, and whether that information is Sold or Shared; and
  • The length of time we intend to retain each category of PI, or if that is not possible, the criteria used to determine that period.
• Right to Deletion: You may request that we delete any PI about you.
• Right to Correction: You may request that we correct any inaccurate PI we maintain about you. 
• Right to Access Specific Pieces of PI and Data Portability: You may ask to obtain the specific pieces of PIwe have collected about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the PI to another entity without hindrance. You may not exercise this right more than two times in a calendar year. 
• Right to Opt-Out of the Sale of Your PI: You may have the right to opt out of the Sale of your PI. You may exercise this right through the “Your Privacy Choices” link below or at the footer of every page on our website. 
• Right to Opt-Out of the Sharing of Your PI: You may have the right to opt out of the Sharing of your PI or our use of your PI for targeted advertising purposes. You may exercise this right through the “Your Privacy Choices” link below or at the footer of every page on our website. 
• Right to Revoke Consent for or Limit the Use of Your Sensitive PI: You may have the right to revoke your consent for certain processing of your Sensitive PI or instruct us to limit the use and disclosure of your Sensitive PI to only that which is necessary to perform the services or provide the goods reasonably expected by an average consumer or for specific business purposes defined by law. We use Sensitive PI for the purposes listed in Section 10.c. above. You may have the right to further limit the use of your Sensitive PI. You may exercise this right through the “Your Privacy Choices” link below or at the footer of every page on our website.

Exercising the Right to Know, Deletion, Correction, Access Specific Pieces of PI, and Data Portability. You can make such a request by submitting a request via email at privacy@endo.com, or by calling us from within the United States at (800) 462-ENDO (3636). Please include your full name, mailing address, email address, phone number, date of birth (month, day), relationship to Endo (e.g., health care provider, patient prescribed an Endo product), and type of request. We will provide a response with the required information, free of charge, within 45 days of receiving a verifiable request (with an additional extension of 45 days if reasonably necessary). You may request this information free of charge up to two (2) times in a 12-month period.

We may request additional information from you in order to verify your identity and confirm that the request is valid. The information we require may vary depending on your relationship to us. If we are unable to verify your identity using this process, we will provide you with an explanation and describe additional steps you may take to assist us in successfully verifying your request.

If you request deletion of your PI, we will assess the request to confirm whether there are any reasons for which we are required to retain the information about you, including for specific business purposes, to fulfill a legal obligation, or other reasons permitted under the law. If we are not able to service your deletion request, we provide you with an explanation.

You may authorize an agent to submit a request on your behalf. Authorized agents must provide a copy of the Consumer’s signed permission authorizing the agent to submit requests on the individual’s behalf.

Exercising the Right to Opt-Out of the Sale and Sharing of Your PI and Right to Limit the Use of Your Sensitive PI. 

Opt-Out Preference Signal. We recognize opt-out preference signals that we are required to recognize for compliance with applicable law. Where required by U.S. Privacy Laws, we treat such opt-out preference signals as a valid request to opt-out of sale, sharing, and processing for purposes of targeted advertising, as applicable, for the browser or device through which the signal is sent and any consumer profile we have associated with that browser or device, including pseudonymous profiles. Further, if we know the identity of the consumer from the opt-out preference signal, we will also treat the opt-out preference signal as a valid request to opt out of sale and sharing for such consumer. Consumers may use opt-out preference signals by downloading or otherwise activating them for use on supported browsers and setting them to send opt-out preference signals to websites they visit.

Appeals 
You may have a right to appeal a decision we make relating to requests to exercise your rights under applicable local law. To appeal a decision, please contact us at privacy@endo.com. 

Non-Discrimination. You have the right not to receive discriminatory treatment for the exercise of these rights. Endo will not discriminate against you for exercising your rights under this Notice.

You must be at least the age of majority in your place of residence to use the Services. The Services are not directed to or intended for use by minors. Consistent with the requirements of the U.S. Children’s Online Privacy Protection Act, if we learn that we have received any information directly from a child under age 13 without verified parental consent, we will use that information only to inform the child (or the child’s parent or legal guardian) that the child cannot use the Services.

If you are a parent or guardian of a minor who has provided information without your knowledge or consent, you may submit a request to remove the minor’s information by emailing us at privacy@endo.com.

The Services may include links to third-party websites and services that are not operated by us, such as for recordings of earning reports. When you click these links, you are navigating away from our Services. A link to a third-party website or service does not mean that we endorse it or the quality or accuracy of information presented on it. If you decide to visit a third-party website or service, you are subject to its privacy practices and policies, not ours. This Privacy Notice does not apply to any PI that you provide to these other websites and services.

If you are located in the European Union or United Kingdom, please refer to Endo’s European Data Protection Notice  for additional information concerning our processing of your PI. 

If you choose to use our Services, any dispute about your privacy rights is subject to our Terms of Use, including the application of the laws of the State of New York unless law applicable to you and us requires otherwise.

The Effective Date of this Privacy Notice is set forth at the top of this webpage. We reserve the right to change our Privacy Notice as business needs or applicable laws require. If Endo makes material changes to the way we use PI, Endo will (unless otherwise required by law) attempt to notify you through a notice posted at  https://www.endo.com/privacy-legal/privacy  before the changes take effect. Your continued use of our Services after the Effective Date of the revised Privacy Notice constitutes your acceptance of the revised Privacy Notice. The revised Privacy Notice replaces and supersedes all previous versions.

To help us meet our commitment to you, we have appointed a Privacy Officer. If you have questions about how Endo uses your PI, or if you want to exercise your rights, please contact our Privacy Officer at privacy@endo.com

or by regular mail at:

Endo, Inc. 
Attn: Privacy Officer, Legal Department
9 Great Valley Parkway
Malvern, PA 19355
 
For a French translation of this page, click here. 

By clicking on the link(s) on this page you may leave the Endo.com website and move to an external website(s) independently operated and not managed by Endo. Because Endo does not control the content of the website(s) you are about to visit, and due to its constantly changing nature, we cannot be responsible for its content, accuracy, practices, or standards.

Effective Date: April 23, 2024

This Consumer Health Data Privacy Policy applies to “Consumer Health Data,” as that term has been defined under applicable law. Any term appearing in this Consumer Health Data Privacy Policy that has been defined under applicable Consumer Health Data laws shall have the meaning afforded to it therein.

A. Our Collection of Consumer Health Data

We may collect the following categories of Consumer Health Data from Consumers:

• Individual health conditions, treatment, diseases, or diagnosis; 
• Social, psychological, behavioral, and medical interventions; 
• Health-related surgeries or procedures; 
• Use or purchase of prescribed medication; 
• Bodily functions, vital signs, symptoms, or measurements related to health; 
• Diagnoses or diagnostic testing, treatment, or medication; 
• Reproductive or sexual health information; 
• Precise location information that could reasonably indicate a Consumer's attempt to acquire or receive health services or supplies; 
• Data that identifies a Consumer seeking health care services; and
• Health-related data that have been derived or inferred from the above. 

We may collect and use the above-mentioned categories of Consumer Health Data for the following purposes:

• To perform the services or provide the goods reasonably expected by an average Consumer who requests those goods or services;
• To prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted Personal Data;
• To resist malicious, deceptive, fraudulent, or illegal actions directed at Endo and to prosecute those responsible for such actions;
• To ensure the physical safety of natural persons;
• For short-term, transient use, including, but not limited to, nonpersonalized advertising shown as part of a Consumer’s current interaction with Endo, provided that the personal information is not disclosed to another third party and is not used to build a profile about the Consumer or otherwise alter the Consumer’s experience outside the current interaction with us;
• To perform services on behalf of our business, such as maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of our business;
• To verify or maintain the quality or safety of a product, service, or device that is owned, manufactured, controlled by, or manufactured for Endo, and to improve, upgrade, or enhance the service or device that is owned, manufactured by, manufactured for, or controlled by us; 
• To collect or process Sensitive Personal Data where the collection or processing is not for the purpose of inferring characteristics about a consumer; and
• Targeted advertising.

B. The Categories of Sources from Which We Collect Consumer Health Data

We Collect Consumer Health Data directly from Consumers and from the following sources: 

• Vendors and third parties when they disclose Consumer Health Data to Endo; and
• Through Automated means when you utilize the services.

C. The Categories of Consumer Health Data that We Share

We may Share all of the categories of Consumer Health Data that we collect.

D. Third Parties and Affiliates with Whom We Share Consumer Health Data

We may Share Consumer Health Data with the following Third Parties: 

• Third party marketing partners who conduct online targeted advertising;
• Other third parties:
  • With your consent or at your direction;
  • In connection with a sale, reorganization, joint venture, or other similar business transaction; and
  • Government and regulatory bodies and courts to comply with our legal and regulatory obligations, ensure compliance with the requirements of our policies and procedures, or prevent fraud or physical harm.

We may Share Consumer Health Data with the following Affiliates: 

• Endo Operations Limited;
• Endo USA, Inc.; and
• Paladin Pharma Inc.

E. How to Exercise Your Consumer Health Data Rights

To exercise your rights with respect to your Consumer Health Data, which vary depending on your state of residence, you may contact us at any time through any of the following methods: 

Email. Email us at privacy@endo.com. 

Supplement to Consumer Health Data Privacy Policy for Nevada Consumers

This Supplement applies to Nevada Consumers for purposes of providing additional disclosures required by Nevada’s Consumer Health Data privacy law. Terms used herein that are defined terms under Nevada’s Consumer Health Data privacy law shall have the meanings afforded to them therein.

A. Purposes & Manner of Processing. We Collect, Use, Process, and Share Consumer Health Data for the purposes and in the manners described in our Privacy Notice for Consumers, Customers, and Other Business Contacts which also provides additional disclosures relevant to Nevada Consumers.

B. Review & Revision of Consumer Health Data. If you would like to review and/or revise your Consumer Health Data, you may submit a request to Endo via the methods listed in our Consumer Health Data Privacy Policy. We will respond to your requests to exercise your rights in accordance with applicable law, but in any case, no later than 45 days after receiving your request. We may extend this period up to 45 days only where doing so is permitted under applicable law.

C. Changes to this Supplement. We will notify you before making any changes to our privacy practices with respect to your Consumer Health Data by posting an updated notice on this page, with an updated effective date.

D. Third Party Collection of Consumer Health Data. Please note that some Third Parties may collect Consumer Health Data about you over time and across different websites or online services you may visit. 

Effective Notice Date: April 23, 2024

Endo, Inc. and its affiliates and subsidiaries (“we,” “us,” “our,” “Endo”) respect the privacy of its job applicants (“you”) and understands that you care about how we collect, use, and share information when you apply for a job. This Job Applicant Privacy Notice (“Privacy Notice”) explains how Endo collects, uses, stores, shares, and protects personal information (“PI”) obtained in connection with applying for a job at Endo.  

Please read this Privacy Notice carefully and in its entirety to ensure you fully understand our use of your personal information. If you have any questions or concerns, please contact us by using the contact details in the “How to Contact Us” section of this Privacy Notice.

If you are a resident of the European Union or United Kingdom, please refer to Endo’s European Data Protection Notice for additional information.

If you are a California resident, please refer to our “Supplement for California Residents,” at the end of this Privacy Notice, for additional information.

This Privacy Notice applies to you because you are applying to work with Endo (whether as an employee, agency worker, consultant, independent contractor, or director). It applies to all personal information collected, stored, shared, retained, or otherwise used (i.e., processed) by us.

This Privacy Notice does not form part of any offer of employment or contract of employment and does not confer any contractual right on you or place any contractual obligation on us.

This Privacy Notice is a general guide on how Endo processes your personal information. Endo complies with applicable data protection and privacy laws in jurisdictions where it operates.

“Personal Information” (also referred to as “personal data”) is a broad term that covers any information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, to an identified or identifiable individual.

Endo collects PI from you in connection with the job application that you submit to us when applying for a job via the Endo Careers Website (“Site”), powered by Workday (including from application forms, CV, or résumé), third parties in connection with our relationship with you (for example, references or background checks), or through interviews and/or our recruitment process. We may also collect information about you from publicly available social media profiles, such as content from external job bulletin boards.

This information may include:

• Personal identifiers, such as your name, address, email address, telephone number, social security number, driver’s license number, passport number, other contact information, etc.;
• Username and password;
• CV or résumé that you upload;
• Previous work experience, education information, knowledge, skills, professional certificates, professional licenses, etc.;
• Referral names and contact information;
• Voluntary disclosure information you provide on your application form; and
• Work authorization status, desired salary, relocation information, employment preferences, and any other information you provide to us.

We may use the PI we collect from or about you to:

• Carry out our job application and recruitment process, including background checks (where applicable), drug screenings (where applicable), verifying your information, and/or conducting research about your educational and professional background;
• Assess your job application, including your qualifications, knowledge, and/or skills against the job you are applying for;
• Process job applications submitted by, or on your behalf, and to assist in our determination as to whether to enter into an employment relationship (or engagement) with you;
• Communicate with you about your job application and/or the recruitment process;
• Recommend potential career opportunities;
• Create and/or submit reports as required under applicable laws or regulations;
• Make improvements to our recruitment process;
• Provide you with building and IT network and system access and authentication;
• Pay any applicable expenses associated with the recruitment process (i.e., travel expenses) associated with payroll and finance;
• Monitor and promote equal employment opportunities, including the review of gender breakdown and recruitment;
• Process your personal information for our legitimate business interest in managing our business, including legal, personnel, administrative and management purposes and for the prevention and detection of crime, provided our interest is not overridden by your interest;
• Comply with any legal or regulatory obligations;
• Manage health and safety at work and incident reporting; and
• Exercise our right to defend, respond to, or conduct legal proceedings.    

We only process such information for the purposes of carrying out the obligations, and exercising specific rights, of Endo or of a prospective employee under employment law or for the assessment of your working capacity. If you are offered and accept employment with or placement at Endo, the PI collected during the recruitment process may become part of your employment record.

We will only process data relating to your criminal convictions or involvement in criminal proceedings when permitted by law, or where provided voluntarily by you.

We may process personal data provided by you in accordance with the following legal bases under applicable privacy laws.

• Where processing personal data is necessary prior to entering into an employment contract with you or for the performance of an employment contract with you.
• Where processing personal data is necessary in order for Endo to comply with any legal or regulatory obligations, such as employment, social security, and occupational health and safety laws and regulations.
• Where processing personal data is necessary for our legitimate business interest in considering you as a candidate for current and future employment opportunities. Please note that you have a right to object to processing of your personal data where that processing is carried on for our legitimate interest.
• Where personal data is necessary in order to protect your vital interests or the vital interests of a third party.
• After obtaining your consent to use your personal data for a specific purpose. Where processing is carried out based on your consent, you will have the right to withdraw your consent to such processing at any time. 

If you do not provide Endo with your personal information, we may not be able to process your job application or assess your suitability for a particular role, comply with our legal obligations, or manage our business. We will tell you when we ask for information that is a statutory or contractual requirement or needed to comply with our legal obligations. 

We may share your personal information with:

• Our affiliates or subsidiaries;
• Our contractors, service providers, and other third parties to assist in the administration, processing, and management of certain activities pertaining to prospective employees (i.e., background check service provider) in connection with the application and recruitment process;
• Individuals or companies employed by Endo to carry out specific services, functions, or consultancy work, including external reference agencies and other financial institutions;
• Relatives or legal representatives of prospective employees;
• Regulatory bodies to whom we are obliged or required to disclose information, including Workplace Relations Commission, Courts and Court-appointed persons
• Legal and medical practitioners;
• Potential purchasers or bidders in connection with any proposed merger, acquisition, or any form of sale or transfer of our assets;
• Relevant Government departments and agencies; and
• Other support service providers necessary to assist Endo with the above.

We will inform you in advance if we intend to further process or disclose your personal information for a purpose other than the purposes set out above. We take all reasonable steps, as required by law, to ensure the safety, privacy, and integrity of such data and information and, where appropriate, enter into contracts with such third parties to protect the privacy and integrity of such data and any information supplied.

Other Lawful Disclosures: Endo may also share information: (i) as required or permitted by law, including any requirements from government agencies and taxing authorities; (ii) if we determine that disclosure of specific information is necessary to comply with the request of a law enforcement or regulatory agency or other legal process; (iii) to protect the rights, privacy, property, interests, or safety of Endo or our affiliated companies, customers, employees, or the general public; (iv) to pursue available remedies or limit damages; (v) to enforce Endo’s agreements with you; or (vi) to respond to an emergency.

Endo deploys administrative, physical, and technical safeguards intended to help protect the confidentiality of your personal information, including security to protect against unlawful or unauthorized processing of personal information, and against the accidental loss of, or damage to, your personal information. Unfortunately, however, no safeguards are foolproof.

You are responsible for maintaining the security of your account credentials and other authentication involved in the application and recruitment process. Endo will treat access to our career sites through your account credentials as authorized by you. Unauthorized access to password-protected or secure areas is prohibited and may lead to criminal prosecution. We may suspend your use of all or part of our Sites without notice if we suspect or detect any breach of security. If you believe that your account credentials may have been compromised, please notify us immediately using the contact information provided below.

We securely store your personal information in a centralized database, with controlled access to such database. Access to personal information is restricted to individuals who have a legitimate and justifiable reason to view such information. We store and retain information for as long as necessary to fulfill the purposes for which you provided the information, to comply with legal obligations, to resolve disputes, to enforce our agreements with you, and for similar essential purposes.

Personal Information will be stored for as long as required to satisfy the purposes outlined in this Privacy Notice or for as long as we have a legitimate interest for which it was collected, unless a longer period is necessary for our legal obligations or for the exercise or defense of legal claims.

Our retention practices are reviewed and updated from time to time in line with legal requirements and best practices. Further information can be obtained from the Legal Department.

The personal information that we collect from you may be transferred to, and stored at, a destination outside of where you reside or are otherwise located for the purposes described above. Due to the global nature of our business, your personal information may be disclosed and shared with our affiliates and subsidiaries globally. It may also be processed by personnel globally who work for us or for one of our contractors, service providers, or third parties who act on our behalf. We use standard contractual clauses, as well as other technical and administrative safeguards, to ensure that personal information transferred from one jurisdiction to another continues to be adequately protected.

Depending on the jurisdiction where you reside, you may have certain privacy rights regarding your personal information under applicable data protection or privacy laws. A summary of these rights, where applicable, may include: 

• The right of access enables you to receive a copy of your personal information;
• The right to rectification enables you to ask us to correct or amend your personal information in certain circumstances;
• The right to erasure enables you to ask us to delete your personal information in certain circumstances;
• The right to restrict processing enables you to ask us to halt the processing of your personal information in certain circumstances;
• The right to object enables you to object to the processing your personal information on the basis of our legitimate interests (or those of a third party); and
• The right to data portability enables you to request us to transmit personal information that you have provided to us, to a third party, or to give you a copy of it so that you can transmit it to a third party, where technically feasible. 

To exercise your rights, you can make such a request by sending an email to privacy@endo.com or by calling us at (800) 462-ENDO (3636). Please include your full name, mailing address, email address, phone number, date of birth (month, day), relationship to Endo (i.e., prospective employee, etc.), and type of request (i.e., Request to Know/Access, Request to Delete). We will respond to your request in accordance with the requirements of applicable data protection and privacy laws.

We may request additional information from you in order to verify your identity and confirm that the request is valid. The information we require may vary depending on your relationship to us. If we are unable to verify your identity using this process, we will provide you with an explanation and describe additional steps you may take to assist us in attempting to verify your request.

If you request deletion of your personal information, we will assess the request to confirm whether there are any reasons for which we are required to retain the information about you, including for specific business purposes, to fulfill a legal obligation, or other reasons permitted under the law. If we are not able to service your deletion request, we will provide you with an explanation.
Please note, these rights may be limited. We have the right to refuse your request where there is a basis to do so in law; or if your request is manifestly unfounded or excessive; or to the extent necessary for important objectives of public interest; or if fulfilling your request would reveal personal information about another individual.

You may instruct Endo to stop sending you emails by submitting a request following the “unsubscribe” link in the email footer. Endo may, however, continue to communicate with you about an ongoing or active application or recruitment transaction.

We use data collection technology to collect information about you and your use of our Sites. Data collection technology deployed through the Site may include cookies and web beacons.

A cookie is a small text file that is sent to or accessed from your web browser or your computer’s hard drive. A cookie typically contains the name of the domain (internet location) from which the cookie originated, the “lifetime” of the cookie (i.e., when it expires) and a randomly generated unique number or similar identifier. A cookie also may contain information about your computer, such as user settings, browsing history, and activities conducted while using the Site. A web beacon (also called a pixel tag or clear GIF) is a piece of computer code that enables us to monitor user activity and website traffic. (To learn more about cookies and web beacons, visit www.allaboutcookies.org). Data collection technology helps improve functionality and determine which features users prefer by collecting information about your browser type, domain name of your Internet service provider, websites visited before and after visiting the Site, and web pages viewed. We may compile statistics about use of the Site to help us analyze technical and navigational information about the Site and to detect and prevent fraud.

Your Control of Cookies: Some web browsers (including some mobile web browsers) provide settings that allow you to control or reject cookies or to alert you when a cookie is placed on your device. To learn more, visit www.allaboutcookies.org/how-to-manage-cookies. Although you are not required to accept cookies or mobile device identifiers, if you block or reject them, you may not have access to all features available through the Site. For more information about how to opt out of cookies, visit www.allaboutcookies.org.

Do Not Track: Some web browsers (including Safari, Internet Explorer, Firefox, and Chrome) incorporate a “Do Not Track” (“DNT”) or similar feature that signals to websites that a user does not want their online activity and behavior tracked. If a website that responds to a particular DNT signal receives the DNT signal, the browser can block that website from collecting certain information about the browser’s user.

The Site may include links to third-party websites and services that are not operated by Endo, such as for recordings of earning reports. When you click these links, you are navigating away from the Site. A link to a third-party website or service does not mean that we endorse it, or the quality or accuracy of information presented on it. If you decide to visit a third-party website or service, you are subject to its privacy practices and policies, not ours. This Privacy Notice does not apply to any personal information that you provide to these other websites and services.

You must be at least the age of majority in your place of residence to use our Site. The Site is not directed to or intended for use by minors. Consistent with the requirements of the U.S. Children’s Online Privacy Protection Act, if we learn that we received any information directly from a child under age 13 without their parent’s verified consent, we will use that information only to inform the child (their parent or legal guardian) that the child cannot use the Site.

If you are a parent or guardian of a minor who has provided information without your knowledge or consent, you may submit a request to remove the minor’s information by emailing us at privacy@endo.com.

The Effective Date of this Privacy Notice is set forth at the top of this webpage. We reserve the right to change our Privacy Notice as business needs or applicable laws require. If Endo makes material changes to the way we use personal information, Endo will (unless otherwise required by law) attempt to notify you through a notice posted at www.endo.com/privacy-legal before the changes take effect. Your continued use of our Site after the Effective Date of the revised Privacy Notice constitutes your acceptance of the revised Privacy Notice. The revised Privacy Notice replaces and supersedes all previous versions.

If you have questions about how Endo uses your personal information, please contact us at privacy@endo.com or by regular mail at:

Endo, Inc.
Attn: Privacy, Legal Department
9 Great Valley Parkway
Malvern, PA 19355
United States 

Effective: April 23, 2024

The California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), gives California residents certain rights. As job applicant who resides in California, you have the right to know what categories of Personal Information Endo collects about you and the purposes for which such information is collected.

• Personal Information: As used in this Supplement, “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual. Personal Information includes Sensitive Personal Information, but does not include protected health information covered by the Health Insurance Portability and Accountability Act (“HIPAA”), nonpublic personal information under the Gramm-Leach-Bliley Act (“GLBA”), or any other information which is exempt from the CCPA.
• Sensitive Personal Information: As used in this Supplement, “Sensitive Personal Information” includes Personal Information that reveals, among other things, social security number, driver’s license number, state identification card number, passport number, racial or ethnic origin, union membership, or the contents of an individual’s non-work mail, email and text messages, unless Endo is the intended recipient of the communication. Sensitive Personal Information also includes information concerning the job applicant’s health, sex life, or sexual orientation.
• Sale & Sharing of Personal Information: We do not Sell or Share Personal Information of job applicants, as the terms “sell” and “share” are defined in the CCPA (i.e., we do not communicate your Personal Information to a Third Party for monetary or other valuable consideration or for cross-context behavioral advertising).
• Other CCPA Definitions: As used in this Supplement, the terms “Collect,” “Processing,” “Service Provider,” “Third Party,” “Sell,” “Share,” and other terms defined in the CCPA (and their conjugates) have the meanings afforded to them in the CCPA, whether or not such terms are capitalized, unless specifically defined in this Privacy Policy. 
• Collection & Processing of Personal Information
  We, and our Service Providers, may have Collected and Processed the following categories of Personal Information from Applicants in the preceding 12 months:
  1. Identifiers, such as name, alias, online identifiers, account name
  2. Contact information, including phone number, address, email address;
  3. Characteristics of protected classifications under state or federal law, such as age, gender, and race;
  4. Internet or other electronic network activity information, such as browsing history and interactions with our websites or advertisements;
  5. Audio, electronic, visual, and similar information, such as call and video recordings;
  6. Professional or employment-related information, such as work history and prior employer;
  7. Education information, as defined in the federal Family Educational Rights and Privacy Act, such as student records and directory information;
  8. Inferences drawn from any of the Personal Information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics; and
  9. Sensitive Personal Information, including:
     1. Personal Information that reveals:
        1. Social security, driver’s license, state identification card, or passport number;
        2. Racial or ethnic origin
• Categories of Job Applicant Personal Information We Disclose to Service Providers 
  
  In the past twelve months, we have disclosed all of the above categories of Personal Information to Service Providers for the business purposes described below.
• Purposes for Processing & Disclosing Applicant Personal Information
  
  We, and our Service Providers, Collect and Process Job Applicant Personal Information (excluding Sensitive Personal Information) described in this Policy to:
  
  
  • Evaluate a potential Employee relationship with you;
  • Perform background checks and verify past employment, educational history, professional standing, and other qualifications;
  • Evaluate, determine, and arrange compensation, payroll, and benefits;
  • Assess your fitness and physical capacity for work; and
  • Contact you regarding your application and potential Employee relationship with us.
• In addition to the purposes identified above, Endo may use and disclose any and all Job Applicant Personal Information that we Collect as necessary or appropriate to:
  • Comply with laws and regulations, including, without limitation, applicable tax, health and safety, anti-discrimination, immigration, labor and employment, and social welfare laws;
  • Monitor, investigate, and enforce compliance with and potential breaches of Endo policies and procedures and legal and regulatory requirements;
  • Comply with civil, criminal, judicial, or regulatory inquiries, investigations, subpoenas, or summons; and
  • Exercise or defend the legal rights of Endo and its employees, affiliates, customers, contractors, and agents.
• Rights Regarding Personal Information: Under California law you may have the below rights over your Personal Information, provided an exemption does not apply under the law.  Note other exemptions beyond those listed below may apply depending on the specific request and why the data was collected and is being used.

• Submitting a Data Subject Request: You may exercise the rights described above via one of the methods listed in the “Contact Us” section below. We will respond to your requests within the time period prescribed by applicable laws. Under certain circumstances, Endo may ask you for specific information to confirm your identity. This is a security measure to safeguard Personal Information. We will notify you when your request is completed, or if we deny your request (because, for example, an exception applies), or in the event there is a fee associated with processing your request. You may designate an authorized agent to exercise your rights on your behalf. In such case, we will also need to verify your agent’s identity and obtain proof of your authorization. We may need to deny a request from an agent whose identity or authorization we cannot verify.
• Retention of Personal Information: We retain each of the below categories of Personal Information for the duration of your relationship with us, as applicable, and as otherwise reasonably necessary for our legitimate business purposes and for compliance with applicable law.
• Contact Us: If you have any questions regarding this Supplement or Endo’s collection and use of your Personal Information, or if would like to exercise your privacy rights, please call (800) 462-ENDO (3636) or email the Endo Privacy Office at privacy@endo.com.  California residents who are unable to review or access this notice due to a disability may contact us at privacy@endo.comto access this notice in an alternative format.
• Changes to this Supplement. We reserve the right to amend this Supplement at our discretion and at any time. When we make material changes to this Supplement, we will notify you by posting an updated notice and listing the effective date of such updates.

This European Data Protection Notice applies to any information about you collected, maintained, transmitted, stored, retained, or otherwise used (collectively, “processed”) by Endo through its Sites and Services (e.g. when you use our online feedback/queries portal in the “Contact Us” section of the website). It also applies to any personal data that you provide to us in email or telephone communications, including when you contact our customer call centers with questions or concerns regarding our products.

This European Data Protection Notice sets out the basis on which we gather, use, store, and disclose any personal data that we collect from you. Where applicable, we will use your personal data only for the purposes and in the manner set forth below, which describes the steps we take to ensure our processing of your personal data is in compliance with, as applicable, the EU General Data Protection Regulation (EU GDPR) and UK General Data Protection Regulation (UK GDPR) and any implementing legislation.

We reserve the right to change this European Data Protection Notice from time to time at our sole discretion. If we make any changes, we will post those changes here and update the “Last Updated” date at the top of this European Data Protection Notice. Your continued use of the Sites and Services (including our call center services) after we make changes is deemed to be an acknowledgment of those changes, so please check this European Data Protection Notice periodically for updates.

“Personal data” means any information relating to a living individual who can be identified directly from that data or indirectly in conjunction with other information. In addition to the types of personal data we collect as defined in Endo’s Privacy Notice, we also may hold some or all of the following types of personal data in relation to you:

• Information about your medical history
• Information in relation to questions or complaints you have submitted in relation to any of our products
• Records of your email communications with us and recordings of your telephone calls to us or our call center providers

We may process personal data provided by you in accordance with the following legal bases under the EU GDPR and UK GDPR, as described further in the table below:

• Where processing personal data is necessary for our legitimate business interest in managing our business including legal, personnel, administrative, customer service, and management purposes and for complying with our reporting obligations to regulators including in relation to complaints or adverse events experienced in relation to our products, provided our business interests are not overridden by your interest. Please note that you have a right to object to processing of your personal data where that processing is carried on for our legitimate interest.
• Where processing personal data is necessary in order for us to comply with any legal or regulatory obligations.
• Where processing personal data is necessary for the performance of a contract with you.
• Where personal data is necessary in order to protect your vital interests or the vital interests of a third party.
• After obtaining your consent to use your personal data for a specific purpose. Where processing is carried out based on your consent, you will have the right to withdraw your consent to such processing at any time. 

Certain categories of your personal data are regarded as 'sensitive'. Sensitive personal data includes information relating to an individual's:

• Physical or mental health
• Religious, philosophical, or political beliefs
• Trade union membership
• Ethnic or racial origin
• Biometric data used for the purpose of uniquely identifying a person
• Genetic data
• Sex life and/or sexual orientation

We only process such sensitive personal data where (in addition to having a legal basis as set out under Section 4 above) it is necessary for the establishment, exercise, or defense of legal claims, where it is necessary for reasons of public interest in the area of public health (such as ensuring high standards of quality and safety of medicinal products), or where we have obtained your explicit consent to process such data or where we are required or allowed to do so under EU member state or UK data protection law, as applicable. As mentioned, where processing is based on your consent, you have the right to withdraw that consent at any time.

We will process criminal convictions and offences personal data to comply with global sanctions screening and anti-money laundering laws applicable to our business or to our affiliates.  We only process such data where (in addition to having a legal basis as set out under Section 4 above) such processing satisfies a condition under article 10 GDPR coupled with any conditions set out in relevant EU member state or UK data protection law, as applicable.

We may disclose your personal data to members of our corporate group including, without limitation, for the following reasons: in order to run global processes or global litigation, carry out group wide reporting, make decisions about the business and/or our products, or for processing customer complaints and issuing refunds where applicable.

We will inform you in advance if we intend to further process or disclose your personal data for a purpose other than the purposes set out in Endo’s Privacy Notice. We take all reasonable steps, as required by law, to ensure the safety, privacy, and integrity of such data and information and, where appropriate, enter into contracts with such third parties to protect the privacy and integrity of such data and any information supplied.

Due to the global nature of our business, the personal data that we collect from you may be transferred to, and stored at, a destination outside the jurisdiction where you are located for the purposes described above. It may also be processed by personnel operating outside the EEA/UK who work for us or for one of our suppliers who act on our behalf. Those countries may not provide an adequate level of protection in relation to processing your personal data. We will ensure appropriate safeguards are in place to protect the privacy and integrity of personal data transferred outside of the EEA/UK (e.g., by making use of standard contractual clauses). You can obtain information concerning such safeguards by emailing us at privacy@endo.com, where applicable.

The security and confidentiality of your personal data is important to us. As no data transmission over the Internet can be guaranteed as 100% secure, we cannot ensure or warrant the security of any information that you transmit to Endo and you transfer the personal data at your own risk. We endeavor to use and keep under review appropriate administrative, physical, technical, and organizational measures (including staff training and awareness) in order to protect against unauthorized or unlawful processing of your personal data, including unauthorized destruction, alteration, disclosure, or access.

We will store your personal data for the purposes of providing access to our website and related services to you and for the exercise or defense of any legal claims. This information may be deleted upon request, subject to exceptions provided under law. Please see Section 11 (Your Individual Rights) for more information on how to make this type of request.

Our website may contain links to and from third-party websites. If you follow a link to any third-party websites, please note that those websites may have their own privacy policies and we do not accept any responsibility or liability for those policies. Please check those policies before you submit any personal data to those websites.

The EU GDPR and UK GDPR provide specific rights to individuals in the EU and UK regarding their personal data. To the extent that we are a controller of your personal data, you may request access to, rectification, erasure, restriction of processing, objection to processing, or right to data portability. In each case, these rights are subject to restrictions under the law. The following is a summary of your rights:

• The right of access enables you to receive a copy of your personal data held by ELO.
• The right to rectification enables you to ask us to correct or amend your personal data in certain circumstances.
• The right to erasure enables you to ask us to delete your personal data in certain circumstances.
• The right to restrict processing enables you to ask us to halt the processing of your personal data in certain circumstances.
• The right to object enables you to object to Endo processing your personal data on the basis of our legitimate interests (or those of a third party).
• The right to data portability enables you to request us to transmit personal data that you have provided to us to a third party or to give you a copy of it so that you can transmit it to a third party, where technically feasible. 

You can make such a request by sending an email to privacy@endo.com or by calling us at (800) 462-ENDO (3636). Please include your full name, mailing address, email address, phone number, date of birth (month, day), relationship to Endo (e.g., former employee, health care provider, patient in a clinical trial), and type of request (e.g., Request to Know/Access, Request to Delete). We will respond to your request within 30 days. That period may be extended by two further months, where necessary, taking into account the complexity and number of requests. We will inform you of any such extension within one month of receipt of your request.

We may request additional information from you—such as employee ID number, as well information we may have on file about you, such as your date of hire—in order to verify your identity and confirm that the request is valid. The information we require may vary depending on your relationship to us. If we are unable to verify your identity using this process, we will provide you with an explanation and describe additional steps you may take to assist us in successfully verifying your request.

If you request deletion of your personal data, we will assess the request to confirm whether there are any reasons for which we are required to retain the information about you, including for specific business purposes, to fulfil a legal obligation, or other reasons permitted under the law. If we are not able to service your deletion request, we will provide you with an explanation. We have the right to refuse your request where there is a basis to do so in law, or if your request is manifestly unfounded or excessive, or to the extent necessary for important objectives of public interest.

You have the right to lodge a complaint with the Office of the Irish Data Protection Commissioner if you are not satisfied with how your personal data is being handled.

If you require any further clarification regarding this European Data Protection Notice, please contact us via email at privacy@endo.com.