Privacy Policy

Last updated: July 2026

1. Introduction

Your privacy is important to us at Intellia Therapeutics, Inc. (“Intellia”, “we” or “us”). This Privacy Policy explains how we collect, use, and disclose your Personal Information. For purposes of this Privacy Policy, “Personal Information” means any information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, to an identified or identifiable natural person.

This Privacy Policy describes our practices with respect to Personal Information collected:

• through our Websites that link to this Privacy Policy and are owned and operated by us, including intelliatx.com (the “Websites”), from and about users of the Websites (“you”, “your” or “users”), including Personal Information collected directly from you, automatically through your use of the Websites,
• from third parties and other sources as described in this Privacy Policy, and
• offline interactions, including through patient services, products, and communications programs.

Additional details regarding the categories of Personal Information we collect, the sources from which it is collected, how we use it, and how we share it are provided in Section 2 below.   This Privacy Policy does not apply to Personal Information submitted through our online employment application process. Please see our Applicant Privacy Notice for more information about how we process Personal Information submitted in connection with the employment applications.

We may update this Privacy Policy from time to time. Any updates will be reflected in the “Last Updated” date above. We encourage you to review this page periodically to stay informed. This Privacy Policy may also be supplemented by additional notices provided in specific contexts or on particular areas of the Websites.

By using the Websites, you acknowledge that you have read and understand this Privacy Policy. If you do not agree with this Privacy Policy or our privacy practices, you should not use the Website or provide us with your Personal Information.

This Privacy Policy applies to activities in the United States and may be supplemented or replaced by country-specific privacy policies that apply in certain jurisdictions, such as in connection with clinical research studies or state-specific requirements.

We control and operate our Websites from within the United States of America.  Our online privacy practices are governed by applicable laws of the United States and the Commonwealth of Massachusetts, which may differ from privacy laws in your state or home country.  Residents of certain U.S. states, as well as residents of the United Kingdom, Switzerland, or the European Economic Area, should review the additional information applicable to them below in Sections 9 and 10, respectively.

2. Collection and Use of Personal Information.

We collect Personal Information from the following categories of sources: directly from you, automatically through your use of the Websites, and, in some cases, from third parties such as service providers, analytics providers, and advertising partners.

The following types of Personal Information may be collected from or about individuals whose Personal Information is processed pursuant to this Privacy Policy.

1. Personal Information You Provide.

   Contact Information: If you request information from us or otherwise contact us using a webform, you may provide Personal Information in connection with such request or contact, such as your name, phone number, email address, postal address, country of residence, and any messages you send us (“Contact Information”), which we collect so that we can receive, reply to, or otherwise fulfill your request. We may also use Contact Information to communicate with you about our products, services, events, and other information that may be of interest to you, where permitted by applicable law.

2. Automatically Collected Information.

   Usage Information: Like most websites, our Websites use cookies and similar technologies to collect information related to your use of the Websites. We refer to technologies collectively as “cookies”. The cookies used by our Websites may include both first-party cookies (cookies set by us on our Websites) and third-party cookies (cookies set by other parties on our Websites). We use cookies in order to make the Websites function, and function more efficiently, as well as to make the Websites’ content more relevant to our users, for advertising purposes, and to provide us with information about the usage of the Websites. The information collected by cookies may include technical information such as your IP address, browser or device settings and preferences, unique browser or device identifiers, browsing and search activity, and non-precise geolocation information (“Usage Information”). In many cases, this information is stored on “session” cookies, which are deleted as soon as you close your browser. In other cases, the information is stored on “persistent” cookies, some of which expire automatically after a certain period of time, and all of which you can delete via your browser settings at any time. Please see our Cookie Policy for more information about the cookies that may be used on the Websites, the retention periods applicable to this information, and how to manage your cookie preferences.

   We may also use Google Analytics, which uses cookies to collect and analyze information about use of our Websites and report on activities and trends. This service may also collect information regarding the use of other websites, software applications (or “apps”), and other online resources. You can learn about Google’s practices by visiting this link, and opt-out of Google Analytics cookies by downloading the Google Analytics opt-out browser add-on, available at this link.

3. Aggregated or Deidentified Information.

   We may aggregate or de-identify your Personal Information (so that it can no longer be reasonably associated with you) for research, statistical, or other purposes, at which time it is no longer considered Personal Information.

Additional information regarding categories of Personal Information, categories of sources, purposes of use, and categories of third parties applicable to residents of certain U.S. states, as well as residents of the United Kingdom, Switzerland, or the European Economic Area, should review the additional information applicable to them below in Sections 9 and 10, respectively.

3. Sharing of Personal Information With Third Parties.

We may share your Personal Information with our third-party service providers, such as those who provide email and web-hosting services, and those who assist us in operating the Websites and our business more generally.

We may also disclose your Personal Information to any institution, government, court, agency or authority (including law enforcement agencies) to whom we are required to disclose it by law, or as necessary to protect our legal rights or the rights of others, or to prevent harm, or to any subsidiaries or other affiliates, or to our business partners, or to a buyer or other successor in the event that we are acquired, merge with another entity or sell portions of our assets.

Finally, we may disclose your Personal Information to other third parties at your direction, with your consent, or otherwise as necessary to fulfill your requests.

4. Minimization and Retention of Personal Information.

To determine the appropriate retention period for Personal Information, we may consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, and applicable legal requirements.

5. Your Choices and Rights.

You can contact us at any time using the contact information listed in Section 8 (Contact Us) to request that we: (i) provide access to your Personal Information; (ii) delete, update, or correct your Personal Information; (iii) restrict or object to certain processing of your Personal Information; (iv) where applicable, provide a copy of your Personal Information in a commonly used electronic format (or transmit such information to a third party at your direction); (v) disclose information regarding the Personal Information we collect, use, and disclose; and (vi) where applicable, withdraw consent or opt out of certain communications. We will consider and respond to such requests in accordance with applicable law. In certain circumstances, we may be unable to fulfill a request where permitted by applicable law, including where doing so would require us to disclose confidential information, adversely affect the rights and freedoms of another individual, where we are unable to verify your identity, or where an applicable legal exemption or exception applies.

You can also adjust your cookie preferences at any time by visiting our Cookie Policy and clicking the “Change your consent” link.

6. Children.

Intellia does not knowingly collect Personal Information from children under the age of 16. If we learn that we have collected Personal Information from a child under the age of 16, we will take appropriate steps to delete such information as required by applicable law, unless we have obtained any required parental or legal guardian consent.

7. Links to Other Websites.

Our Websites may, from time to time, contain links to websites owned and operated by third parties (“Third Party Sites”). We encourage you to review the privacy policies of such Third Party Sites so that you understand how those websites collect, use, and share your information. We are not responsible for the privacy policies or other content on Third Party Sites.

Likewise, this Privacy Policy does not cover the privacy practices of social media platforms on which Intellia has social media pages. Please review the terms, policies, and settings of those social media platforms if you have questions about how they collect and use your data.

8. Contact Us.

If you have any questions about this Privacy Policy, please contact us by email at [email protected] or send a written request to Intellia Therapeutics, Inc., 40 Erie Street, Cambridge, MA 02139, Attn: General Counsel (Websites Privacy Policy).

European residents can also contact our Data Protection Officer at the following address:

Privintelligent Solutions
[A] Via Emilio Bossi 6, 6900 Lugano, Switzerland
[T] +41 91 20 83 172
[W] https://privintelligent.com

9. Additional Information for Residents of certain U.S. states.

If you are a resident of certain U.S. states, this notice applies to you and supplements Intellia’s Privacy Policy. These rights are subject to certain exceptions depending on local law.

California Disclosures

If you are a resident of California, this notice applies to you and supplements Intellia’s Privacy Policy. This section may also apply to residents of other U.S. states, where required by applicable law.

Certain terms used in this Section 9 have the meanings given to them in the , including “consumer”; “personal information”; “sensitive personal information”; “sale,” “sell,” and “sold”; “share”; “business purpose” and “commercial purpose”; and “cross-context behavioral advertising”.

Categories of Personal Information Intellia may collect from or about California residents whose Personal Information is processed pursuant to this Privacy Policy.

• Identifiers (e.g., name, mailing address, email address, phone number, online identifiers)
• Internet or other electronic network activity (e.g., IP address, device information, browsing history, search history, and information regarding a user’s interaction with the Websites)
• Inferences drawn from the information identified above (e.g., preferences, interests, or usage patterns inferred from browsing activity.)

Categories of sources of Personal Information that Intellia collects about California residents whose Personal Information is processed pursuant to this Privacy Policy.

• From the consumer directly
• From service providers acting on our behalf
• From advertising networks
• From data analytics providers
• From operating systems and platforms

Business or commercial purposes for which Intellia collects or shares Personal Information about California residents whose Personal Information is processed pursuant to this Privacy Policy.

• Performing consumer support services, including maintaining or servicing accounts, responding to consumer inquiries, verifying consumer information;
• Advertising and marketing purposes;
• Helping to ensure security and integrity and prevent fraud;
• Undertaking activities to verify or maintain the quality or safety of our online services or devices and to improve, upgrade, or enhance them;
• Debugging to identify and repairCorrection of “misspelled” disease-driving DNA sequence using a CRISPR/Cas9-based gene editing therapy. errors;
• To conduct business analysis, such as analytics, projections, identifying areas for operational improvement;
• To conduct research and development, including undertaking internal research for technological development and demonstration; and
• To fulfill our legal function or obligations

The categories above reflect sources from which Intellia has collected Personal Information during the preceding twelve (12) months. To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Retention of Personal Information of California residents whose Personal Information is processed pursuant to this Privacy Policy.  Please see Section 4 (Minimization and Retention of Personal Information) above.

Categories of Personal Information that Intellia may share and categories of third parties to whom such Personal Information may be sold or shared (for cross-context behavioral advertising) for California residents whose Personal Information is processed pursuant to this Privacy Policy:

Intellia does not have actual knowledge that it sells or shares (for cross-context behavioral advertising purposes) the Personal Information of minors under the age of 16.

Categories of Personal Information Intellia may disclose for business purposes and categories of third parties to whom such Personal Information may be disclosed for business purposes about California residents whose Personal Information is processed pursuant to this Privacy Policy:

We may disclose your personal information to third parties at your request, or when you otherwise consent to such disclosure.

Additional U.S. Resident Disclosures

Your Rights. If you are a resident of certain U.S. states, the law in your state may provide you with certain rights with respect to your Personal Information. These rights are subject to certain exceptions depending on local law. They may include the rights to:

• know whether we process your Personal Information;
• access to the specific pieces of Personal Information, or categories of personal information, Intellia collects, uses, discloses, and sells or shares (for cross-context behavioral advertising purpose), and certain details about that personal information;
• correct inaccurate Personal Information we maintain about you;
• obtain a copy of personal information we have obtained about you in a portable and, to the extent technically feasible, readily usable format;
• delete personal information we have collected from you;
• opt out of the sale of your Personal Information; and
• opt out of the use of your Personal Information for targeted advertising or sharing for cross-context behavioral advertising, where applicable.

Non-discrimination. We will not discriminate against you for exercising your rights. This generally means we will not deny goods or services, charge different prices or rates, provide a different level of service or quality of goods, suggest that a consumer might receive a different price or level of quality for goods, nor will we retaliate against an employee, applicant for employment, or independent contractor.

How to Exercise Your Rights.
To exercise your right to opt-out as it relates to the use of cookies and related technologies that involve the sale of Personal Information or the use of Personal Information for targeted advertising purposes, please visit our Cookie Policy, click the link that says, “Change Your Consent,” and change your preferences by unchecking the boxes indicating cookies that are not strictly necessary. We also support your use of Global Privacy Control (GPC). If you notify us of your privacy preferences through GPC, we will honor your request with respect to the browser or device that sends us the GPC signal.

To submit a request to Intellia to exercise any of your rights, please email us at [email protected] with the words “Privacy Request” in the subject line, or mail a written request to our postal address provided in Section 8 (Contact Us). To ensure we can verify your identity and to help us respond to your request, please include in your submission your full name, telephone number, and your email and home addresses, and clearly state the request you would like to make. We will evaluate the request and act where required to do so. Depending on the nature of your request, we may have to verify your identity when you contact us. We do this by attempting to match the identifying information that you provide to the Personal Information maintained by Intellia, if any. We endeavor to respond to your request as soon as we can. If we are not able to respond to your request within 45 days, we will let you know that we may require additional time (up to 90 days total).

In certain circumstances, you may also designate an authorized agent to exercise your rights on your behalf. If you wish to use an authorized agent, we require that your authorized agent provides written proof to us that they are authorized to act on your behalf, and we may also require your authorized agent to verify their own identity.

Please note that we may not be able to respond to your request if we cannot verify your identity, or your agent’s identity and authority to make the request, and confirm that the Personal Information relates to you. Furthermore, the CCPA or other applicable laws may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions.

Depending on your state of residency, you may be able to appeal a decision we have made in connection with your privacy rights request. All appeal requests should be submitted by replying to the communication resolving your original request.

10. Additional Information for UK, Swiss, And EEA Residents.

If you are a resident of the United Kingdom (“UK”), Switzerland, or the European Economic Area (“EEA”), this notice applies to you and supplements Intellia’s Privacy Policy. This notice is intended to provide certain information to you as required by the EU General Data Protection Regulation (“GDPR”) and the UK’s GDPR (“UK GDPR”).

For purposes of this Section 10, references to “Personal Information” in this Privacy Policy include “personal data” governed by UK, Swiss, and European data protection legislation. For information about Intellia’s collection, use, and disclosure of your Personal Information, please see the “Collection and Use of Personal Information” and “Sharing of Personal Information with Third Parties” sections above.

Lawful Bases for Processing Personal Information
Intellia is the controller of your Personal Information for purposes of UK, Swiss, and European data protection legislation, including the GDPR and the UK GDPR. We only use your Personal Information as permitted by law. The lawful bases that apply to our use of your Personal Information for the purposes set out in Section 2 (“Collection and Use of Personal Information”) are as follows:

• Where we need to fulfil the contract that we are about to enter into or have entered into with you.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. Specifically:
  • Legitimate interests in operating a well-functioning business and secure websites;
  • Legitimate interest in preparing for and addressing investigations and disputes;
  • Legitimate interest in protecting our business and employees and preventing fraud;
• With your consent. Specifically:
  • for cookies which are optional
• Where we need to comply with a legal or regulatory obligation.

Transferring Personal Information from the EEA, Switzerland, and UK to the US
Intellia is headquartered in the United States. Personal Information that we collect may be transferred to, stored, and processed in the United States and other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your country of residence.  Where required by applicable law, Intellia implements appropriate safeguards to protect Personal Information transferred internationally, including by entering into the European Commission’s Standard Contractual Clauses and relying on other lawful transfer mechanisms recognized under applicable data protection laws.  In certain limited circumstances where an appropriate safeguard is not available, Intellia may rely on a derogation recognized under Article 49 of the GDPR and equivalent provisions of applicable law, including where: (i) you have provided your explicit consent to the transfer; (ii) the transfer is necessary for the performance of a contract between you and Intellia or for the implementation of pre-contractual measures taken at your request; (iii) the transfer is necessary for the establishment, exercise, or defense of legal claims; or (iv) another applicable derogation is available under applicable law.  You may contact us using the information provided in Section 8 (Contact Us) to request additional information regarding the safeguards we use for international transfers of Personal Information.

Your Rights
As an UK, Swiss, or EEA resident, you have certain rights regarding the protection of your Personal Information. You may ask us to take the following actions in relation to your Personal Information that we hold (provided that your rights may be limited in certain circumstances):

• The right to opt-out. You have the right to request us to stop sending you direct marketing communications. You may continue to receive service-related and other non-marketing emails.
• The right of access. You have the right to request us to provide you with access to your Personal Information.
• The right to rectification. You have the right to request that we update or correct inaccuracies in your Personal Information. You also have the right to request us to complete information you believe is incomplete.
• The right to erasure. You have the right to request that we delete your Personal Information, under certain conditions.
• The right to restrict processing. You have the right to request that we restrict the processing of your Personal Information, under certain conditions.
• The right to object to processing. You have the right to object to our processing of your Personal Information, under certain conditions.
• The right to data portability. You have the right to request that we transfer a machine-readable copy of your Personal Information to you or a third party of your choice, under certain conditions.
• The right to withdraw consent. Where the processing is based on point (a) of Article 6(1) or point (a) of Article 9(2), you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• The right to complain. You have the right to lodge a complaint with a supervisory authority.

Please note that if exercising these rights limits our ability to process personal information, we may not be able to provide our products or services or to otherwise engage with you going forward. These rights may also be limited, such as if you ask to delete information which we are required by law or have compelling legitimate interests to keep.

Intellia may verify your identity in connection with any requests to ensure that we provide the correct information and allow only those individuals or their authorized representatives to exercise rights with respect to that information.

Please see our Cookie Policy for more information about the cookies that may be used on the Websites, the retention periods applicable to this information, and how to manage your cookie preferences.

Where Intellia intends to further process the personal data for a secondary purpose, meaning a purpose other than that for which the personal data were originally collected, we will provide you with information on that secondary purpose prior to that further processing.

To submit a request to Intellia to exercise any of your rights, please email us at [email protected] with the words “GDPR Privacy Request” in the subject line, or mail a written request to our postal address provided in Section 8 (Contact Us) above. We may request specific information from you to help us confirm your identity and process your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions. If you would like to submit a complaint about our use of your Personal Information or response to your requests regarding your Personal Information, you may contact us as described below or submit a complaint to the data protection authority in your jurisdiction. You can find your data protection authority:

• For residents of the EEA, here.
• For residents of Switzerland, here.
• For residents of the UK, here.