Privacy Policy

Omeros Corporation Privacy Policy

Last updated: December 2025

Thank you for taking the time to read our privacy policy. At Omeros Corporation (“Omeros”, “we”, “us”, or “our”), your privacy is of the utmost importance. We want you to be fully informed about the information we collect, how it is used, shared, and protected, and the choices you have with it and explain the privacy and personal data practices at Omeros.

This Privacy Policy applies to information we collect on our website(s) (including www.omeros.com and other sites operated by Omeros (“Websites”) and from other sources, including information collected through offline interactions, and sets out how we collect, use, process, store, share and disclose your personal information.

Table Of Contents

1. When We Collect Information
2. Types of Personal Information We Collect
3. How We Use Your Information
4. How We Disclose Your Personal Information & Integrations
5. Use of Cookies & Tracking Technologies
6. Health Information
7. Your Privacy Choices
8. Security
9. Retention
10. U.S. State-Specific Notice
11. UK/EEA Residents’ Notice
12. Children’s Privacy
13. Changes To This Privacy Policy
14. Contact Us.

1. When We Collect Information

We may collect personal information that you provide when you:

• Visit our Websites;
• Act as an investigator or vendor overseeing and carrying out a clinical study or trial we sponsor (“Investigator”);
• Participate in a clinical study or trial we sponsor (“Clinical Trial Participant”);
• Apply for and/or participate in our expanded access program;
• Attend or participate in an Omeros advisory board or speaker program, act as a consultant or advisor to Omeros (“Health Care Professional”);
• Apply for and/or participate in our Patient Assistance Programs;
• Contact us or request we contact you.

2. Types of Personal Information We Collect

Investigator Information:

When Investigators participate in our clinical trials, they may provide Omeros with various types of personal information. Below, we provide a list of the commonly processed personal information. Please note, the below list is not exhaustive of all personal information and is intended to serve as a sample set.

• Investigator contact details such as name, email addresses, office address, phone number, organization, title/role, and other identifying information;
• Investigator professional information such as CV, professional and educational background, and medical license numbers;
• Information provided during correspondence, such as email exchange;
• Billing and administrative financial information;
• Information about how Investigators participate in our clinical trials; and
• Clinical Trial Participant information (below).

Clinical Trial Participant Information:

When Investigators participate in our clinical trials, they may provide Omeros with various types of personal information about Clinical Trial Participants subject to the terms of Clinical Trial Participants signed informed consent and authorization. Below, we provide a list of the commonly processed personal information associated with Clinical Trial Participants. Please note, the below list is not exhaustive of all personal information and is intended to serve as an illustrative sample.

• Clinical Trial Participant’s self-reported data such as country of residence, age or date of birth, sex at birth, race, demographic data, pregnancy status of Clinical Trial Participant or Clinical Trial Participant’s partner;
• Pseudonymous identifier; and
• The Clinical Trial Participant’s health prior, during, and after the clinical trial, including but not limited to the Clinical Trial Participant reaction(s) to certain therapeutics.

Other:

We may also collect the following information:

• When you access or apply to access our expanded access program we may collect your name, office address, email address, and medical license number;
• When you participate in or apply to our patient assistance programs (including to provide co-pay and other financial assistance where available (“Patient Assistance Programs”), we may collect your name, mailing address, email address, and information about the patient’s medical history, and other health information; and
• When you act as a consultant to Omeros or participate in an Omeros advisory board or speaker program as a consultant to Omeros we may collect your name, physical address, email address, CV, medical license number, and financial information for billing/payment.

Online Interactions:

• Information you provide when you reach out to us or request that we contact you, such as name, email address, office address, city/state/zip, phone number, the organization you are with if any, your specialty/role/job title, and the contents of your communication to us;
• Metadata and analytics, including IP address, device information, date/time of visits, new or returning visits, products viewed, page response times, URL clickstreams, how long you stay on our pages, what you do on those pages; and
• We may use cookies, beacons, pixel tags, and other similar technologies to collect additional information automatically and to personalize your experience with our Websites. Learn more about our cookie use below.
• When you interact with our accounts on a social media platform, we may collect certain information that you or the platform make available to us such as your social media account ID, your social media ‘likes’, click-throughs to our Websites, or custom interactions.

3. How We Use Your Information

We may use personal information for the following purposes:

• To operate and improve our Websites. If you use our Websites, we use the personal information to:
  • operate, maintain, administer and improve the Websites,
  • better understand your needs and interests, and personalize your experience with the Websites,
  • provide support and maintenance for the Websites, and
  • respond to your requests, questions, and feedback.

• To operate and improve our clinical trials, research, studies, and product-improvement activities. We may use your personal information when necessary to facilitate our clinical trials, research, studies, and related activities that support product improvement, including to:
  • recruit Investigators,
  • track and respond to safety and product quality concerns (including product recalls),
  • develop our therapeutics, and
  • facilitate medication adherence programs;

• To operate and improve our expanded access program and Patient Assistance Programs:
  • define and manage appropriate patient engagement activities, and Patient Assistance Programs, and
  • facilitate medication adherence programs;

• To process information of Health Care Professionals including to identify and engage thought leaders and external experts;
• To process payments securely;
• For support;
• To communicate with you, including via newsletter;
• For marketing and advertising to Health Care Professionals. Please note that Omeros does not use personal information to market and advertise to Clinical Trial Participants or expanded access program patients;
• For other business and legal purposes, such as to detect and prevent fraud, to collect amounts owing to us, and to maintain business records;
• For any legal purpose necessary, including intellectual property protection, or if Omeros is required to process information as a result of a court order or other legal or regulatory requirement or proceeding; and
• With your consent.

4. How We Disclose Your Personal Information & Integrations

We may disclose your personal information with your consent. We may also disclose your personal information with our corporate affiliates, vendors, or service providers as follows:

• Service Providers. We may disclose your personal information with service providers that perform certain functions on our behalf such as Websites hosting, database management, patient assistance and similar customer and Patient Assistance Programs, customer support, and communications vendors such as email service providers. Such service providers may use your personal information only as directed by Omeros and only in a manner consistent with this Privacy Policy. Such service providers are generally prohibited contractually from using or disclosing your personal information for any other purpose.
• FDA and Prescribing Healthcare Providers. If you contact Omeros regarding your experience with one of our products, we include the information you provide in reports we submit to regulatory agencies, such as the U.S. Food and Drug Administration (“FDA”), and other agencies as otherwise required by law. We also may use the information to contact the prescribing healthcare provider to follow up regarding an event involving the use of our products.

We may disclose information to business partners, professional advisors, law enforcement agencies and others in a manner consistent with this Privacy Policy in order to:

• Protect the legal rights of Omeros, our employees, our agents, and our affiliates;
• Protect individuals’ safety and security;
• Detect and protect against fraud;
• Comply with law, regulations, or legal process; and
• Complete a transaction involving the sale or transfer of our business or any assets.

In addition, Omeros may disclose aggregate or anonymous personal information for any purpose. This means that the personal information we disclose does not identify specific individuals or is combined with other data to protect your privacy.

5. Use of Cookies & Tracking Technologies

Like many companies, we use cookies and similar technologies (such as clear gifs, web beacons, tags, and similar technologies) to collect information about your browsing activities and interactions with our Websites, to serve tailored ads, and for the purposes described in this Privacy Policy. There are a number of ways to opt out of having your online activity and device data collected through these services, which we summarize below.

• Opting out of cookie use in our Cookie Preferences. You can opt out of cookies by visiting the homepage of each of our Websites and clicking on the cookie settings icon in the lower left of the webpage.
• Blocking Cookies In Your Browser. Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. For more information about cookies, including how to see what cookies have been set on your device and how to manage and delete them, visit www.allaboutcookies.org.
• With Each of Our Vendors Individually. The following advertising or marketing services partners offer opt-out features that let you opt-out of use of your information for interest-based advertising or profiling:

Analytics or Performance Cookies
Google Analytics	Google Analytics Opt Out
Invoca	Invoca Privacy Policy
Third-Party Advertising Services
Google	Google Advertising Opt Out
PulsePoint (formerly Contextweb)	PulsePoint Privacy Policy
Invoca	Invoca Privacy Policy

Please note that because these opt-out mechanisms are specific to the device or browser on which they are exercised, you will need to opt out on every browser and device that you use.

6. Health Information

Health information provided to Omeros is not subject to the Health Insurance Portability and Accountability Act (“HIPAA”) as we don’t request or accept identifiable patient data or diagnosis, or other Personal Health Information (“PHI”) as defined under HIPAA. All PHI reported through our Websites is considered self-reported by you and may include self-reported questions about health conditions, medical diagnoses, and overall wellness information. Any PHI reported through a clinical trial is pseudonymized by the Investigator before it is provided to Omeros so that Omeros cannot directly identify the Clinical Trial Participant as stated in the consent and authorization signed by each Clinical Trial Participant. Any PHI provided under an expanded access program is pseudonymized by the patient’s physician prior to it being provided to Omeros such that Omeros cannot directly identify the patient as stated in the consent and authorization signed by the patient. Any PHI provided to Omeros under our Patient Assistance Programs are pseudonymized prior to it being provided to Omeros such that Omeros cannot directly identify the patient as stated in the consent and authorization signed by the patient.

7. Your Privacy Choices

Subject to exceptions, you may have the right to exercise the following choices with our use of your personal information:

• Access the personal information we maintain about you;
• Delete the personal information we maintain about you;
• Correct inaccurate personal information we maintain about you;
• Opt out of certain uses of your personal information, notably, you can opt out of third-party advertising cookies (see ‘Use of Cookies & Tracking Technologies’ above).

You can exercise these rights by contacting us at [email protected], [email protected] or via mail using the address set forth in Section 14 below.

If you are a current or former employee of a company that Omeros does business with and you would like to fulfill your rights to the personal information we maintain about you on behalf of that company, please contact a representative of your current or former employer. We cannot provide personal information about a specific individual on behalf of a company without their express written instructions.

Please note that a request for deletion of your personal information may lead to the cancellation of your registration with our Website(s), restriction of your access to certain features of the Website(s), as well as cessation of certain services with Omeros.

8. Security

We have adopted security procedures to help protect against loss, misuse, and unauthorized access to the information you provide to us. Please note that no data transmission or storage can be guaranteed to be 100% secure. As a result, while we strive to protect your information and privacy, we cannot guarantee or warrant the security of any information you disclose or transmit to the Websites and cannot be responsible for the theft, destruction, or inadvertent disclosure of your information.

9. Retention

We will retain your information for as long as necessary to complete our therapeutic research, and for a reasonable time thereafter in accordance with legal retention requirements and as otherwise necessary to comply with our legal obligations, to resolve disputes, and to enforce our agreements. The criteria we use to determine how long we keep personal information considers: (1) the length of the ongoing relationship with you; (2) the kinds of services we provide to you; (3) whether we are subject to a legal obligation (e.g., certain laws require us to keep records of your transactions for a certain period of time before we can delete them); (4) the sensitivity of the information; and (5) if we need to retain information in case of a dispute or investigation, including to bring, defend, or manage any litigation. Even if we delete some or all of your personal information, we may continue to retain and use aggregate or anonymous data previously collected and/or anonymize or aggregate your personal information. Please note that we will not be liable for disclosures of your data due to errors or unauthorized acts of third parties.

10. U.S. State-Specific Notice

Some U.S. states have enacted comprehensive privacy laws. The California Consumer Privacy Act, as amended by the California Privacy Rights Act or “CPRA” (collectively, the “CCPA”), the Virginia Consumer Data Protection Act (“VCDPA”), the Colorado Privacy Act (“CPA”), the Connecticut Data Privacy Act (“CTDPA”), Utah Consumer Privacy Act (“UCPA”), Oregon Consumer Privacy Act (“OCPA”), Texas Data Privacy and Security Act (“TXDPSA”), the Montana Consumer Data Privacy Act (“MTCDPA”), Iowa Consumer Data Protection Act (“IACDPA”), Delaware Personal Data Privacy Act (“DEPDPA”), Nebraska Data Privacy Act (“NEDPA”), New Hampshire Privacy Act (“NHPA”), New Jersey Data Privacy Act (“NJDPA”), Tennessee Information Protection Act (“TNIPA”), Minnesota Consumer Data Privacy Act (“MNCDPA”), Maryland Online Data Privacy Act (“MDODPA”), Indiana Consumer Data Protection Act (“INCDPA”), Kentucky Consumer Data Protection Act (“KYCDPA”), the Rhode Island Data Transparency and Privacy Protection Act (“RIDTPPA”) as each may be amended, create additional privacy obligations for businesses and provide their residents with additional privacy rights.

Additional Privacy Rights:

In addition to the rights granted above, if you are a resident of the above states, you may have the right to:

• Opt out of the ‘sale’ or ‘share’ of your personal information for targeted advertising. We do not ‘sell’ or ‘share’ personal information as defined by these laws.
• Sensitive personal information. Certain U.S. states have the right to limit the use of their sensitive personal information, including health-related information. When Clinical Trial Participants agree to participate in a clinical study, they are consenting to the collection, processing, and disclosing of their personal information. You can withdraw your consent at any time and withdraw from the clinical trial by contacting the Investigator at your study site. When patients participate in expanded access programs they agree to the collection, processing disclosing of their personal information. You can withdraw your consent at any time and withdraw from participating in an expanded access program by contacting your healthcare provider.

You can exercise these rights by contacting us at [email protected], [email protected] or via mail using the address set forth in Section 14.

Appeal:

If we deny your privacy request, you may appeal that decision by emailing us at [email protected]. If, after we have processed your appeal, you are still unsatisfied with our response, you may have the right to file a complaint with your state attorney general.

Controller/Business Designation:

Omeros operates as a ‘Controller’ (and ‘Business’ under CCPA).

11. UK/EEA Residents’ Notice

Residents of the United Kingdom (“UK”) and European Economic Area (“EEA”) are provided certain privacy rights including but not limited to those under the UK and EU General Data Protection Regulations (collectively, the “GDPR”).

Legal Basis:

Under the GDPR, we process personal data (as defined under GDPR) under the following legal bases.

Processing Activity	Legal Basis under GDPR
Placement of cookies on our Websites	Consent
Carrying out and improving clinical trials, studies and research	Performance of Contract, Consent, or Legitimate Interest as required in each country
Providing and improving our expanded access program	Performance of Contract, Consent, or Legitimate Interest as required in each country
Providing and improving our Patient Assistance Programs	Performance of Contract, Consent, or Legitimate Interest as required in each country
Processing personal data of Health Care Professionals	Consent or Legitimate Interest as required in each country
Product, transactional, or marketing-related communications	Performance of Contract, Consent, or Legitimate Interest as required in each country

Controller Designation:

Under the GDPR, we are designated as a ‘Controller.’

Cross-Border Data Transfers of Personal Data:

We may transfer to and store the Personal Data we collect about you, in countries other than the country in which the Personal Data was originally collected, including the United States, Canada, or other destinations outside the EEA and the UK. Those countries may not have equivalent Personal Data protection laws as the country in which you provided the Personal Data. When we transfer your Personal Data to other countries, we will protect your Personal Data as described in this Privacy Policy and applicable supplemental product privacy policy and comply with applicable legal requirements providing adequate protection for the transfer of Personal Data to countries outside the EEA or UK.

If you are located in the EEA or UK, we will only transfer your Personal Data if:

• The country to which the Personal Data will be transferred has been granted a European Commission adequacy decision; or
• We have put in place appropriate safeguards in respect of the transfer, for example we have entered into the Standard Contractual Clauses adopted by the European Commission and required additional safeguards with the recipient.

Additional Rights for UK or EEA Residents:

In addition to the rights granted above, if you are a UK or EEA resident, the GDPR grants you the right to lodge a complaint against us with your local data protection authority. You can find your data protection authority at https://edpb.europa.eu/about-edpb/about-edpb/members_en.

12. Children’s Privacy

Our Websites do not intentionally collect any personal information from children under the age of 16. If you are under the age of 16, please ask a parent or guardian for help in using our Websites.

In participating in clinical trials, applying for and/or participating in our expanded access program or Patient Assistance Programs, we may collect personal information regarding children under the age of 13 (or 16 in California). However, in order to permit children to participate in clinical trials, the expanded access program, or Patient Assistance Programs, we, or our Investigators, obtain verifiable parental/legal guardian consent.

If you believe we have obtained personal information associated with children under the age of 13 (or 16 in California) without proper consent, please contact us at [email protected] or [email protected] and we will delete it. If your child was a Clinical Trial Participant or participated in an expanded access program, please contact the Investigator or healthcare provider that your child was treated by who will in turn contact us.

13. Changes To This Privacy Policy

We may update this Privacy Policy from time to time as we update or expand our Websites and/or clinical trials, studies, research, and other programs and services. If we make material changes, we will post the updated Privacy Policy on this page with a “Last Updated” effective date of the revisions. Your continued use of our Websites constitutes an acceptance of our then-current Privacy Policy. We encourage you to look for updates and changes to this Privacy Policy by checking this page regularly.

14. Contact Us

If you have any questions about our privacy or security practices, or would like to submit a privacy request, you can contact us by email at [email protected], [email protected] or at:

Omeros Corporation
201 Elliot Avenue West
Seattle, WA 98119 USA
Attn: Data Privacy-Legal