Promega Assistant Privacy Notice

Last Updated: June 4, 2026

1. What this Privacy Notice is about

Promega Corporation ("Promega," "we," "us") is committed to protecting the personal data it processes. This Privacy Notice describes how we handle data when you use the AI assistant chatbot ("Promega Assistant") available on promega.com and its connected regional domains (the "Website"). Promega Assistant helps you obtain product, technical, application, and protocol information, compare products, find resources, and navigate the Website. It is an informational and research-support tool for professional and business users and is not designed to process personal data.

This Privacy Notice supplements the Promega Privacy Policy and forms part of the disclosures for Promega Assistant alongside the Promega Assistant Terms of Use. For the processing of personal data beyond Promega Assistant, see the Promega Privacy Policy at https://www.promega.com/legal/privacy-policy/. For cookies and similar technologies, see the Promega Cookie Policy at https://www.promega.com/legal/cookie-policy/. Your use of Promega Assistant is also governed by the Promega Assistant Terms of Use and the Promega Website Terms of Use. Promega Assistant does not provide product safety information; for safety-related questions it directs you to the applicable Safety Data Sheet (SDS), which is the authoritative source.

Promega Assistant is intended for professional and business users and is not directed to children. Consistent with the Privacy Policy, we do not knowingly collect personal data from individuals under 18; if you believe a child has provided personal data through Promega Assistant, please contact us (Section 2) and we will take steps to delete it. If you disclose data about other individuals, you are responsible for ensuring you are authorized to do so.

This Notice is aligned with the EU GDPR, the UK GDPR, the Swiss Federal Act on Data Protection (nFADP), applicable Canadian privacy laws, and US state privacy laws (such as the CCPA/CPRA). Where local laws impose stricter or additional requirements, those local laws prevail.

2. Who is responsible and how to contact us

Promega Corporation, 2800 Woods Hollow Road, Madison, WI 53711, USA, is responsible for the processing of data through Promega Assistant. Your primary global contact for data-protection matters and to exercise your rights (Section 10) is:

• privacyteam@promega.com

For regional matters, please contact:

Regional

• EU: privacyteamEU@promega.com
• United Kingdom: privacyteamUK@promega.com
• Italy: privacyteam_italia@promega.com

3. What data we process

• Queries. The text you submit is processed by AI to generate responses. Promega Assistant is not designed to process personal data, and we strongly discourage you from entering personal data — especially sensitive data such as health, biometric, or genetic data — in your queries. If you include personal data, it will be processed in accordance with this Notice. Queries are logged in de-identified form together with usage data.
• Conversation identifier. To maintain continuity within your session, Promega Assistant assigns each conversation a randomly generated conversation ID, which is used to provide your query history to the AI model during the session. This ID is not linked to your IP address, account, or any other identifier. Separately, when you use the Website, Promega collects technical data such as IP address, device, operating system, and browser type as described in the Privacy Policy; that collection is governed by the Privacy Policy, not by Promega Assistant.
• Usage data. We collect data about interactions with Promega Assistant, such as queries entered, features used, and timestamps, to understand usage, improve functionality, and enhance the experience. We use this data on a de-identified or aggregated basis wherever practicable.
• Feedback data. If you provide feedback, we collect what you submit to improve the service; feedback is not linked to your identity unless you voluntarily provide contact details.

Retention: de-identified query and usage logs are retained for no longer than necessary for the purposes described in this Notice. Other categories are retained as described in the Privacy Policy and, for cookies, the Cookie Policy.

4. How and why we process your data

We process your data to provide, maintain, secure, and improve Promega Assistant and its features; to respond to inquiries and provide support; to conduct aggregated analysis and service development; and to comply with legal obligations and protect our rights. Promega Assistant does not use your data for targeted advertising.

Legal bases (where the GDPR, UK GDPR, or nFADP applies): we rely on our legitimate interests in providing, securing, and improving Promega Assistant, and you may object to this processing on grounds relating to your particular situation (Section 10). We rely on consent for non-essential cookies in jurisdictions that require it (Section 11). We also process data to comply with legal obligations. Where consent is the sole lawful basis under applicable law (such as in Canada), we rely on consent.

5. How Promega Assistant works

Promega Assistant is an artificial-intelligence tool operated by Promega Corporation on the Website, a business-to-business site serving professional and institutional users. It is built on large language model (LLM) technology and uses retrieval-augmented generation: it draws its responses from designated Promega-owned and Promega-approved content rather than from the model's broader training data. When you submit a query, the text of your query and relevant in-session context are transmitted to Promega's third-party AI service provider(s) solely to generate a response. Content generated by Promega Assistant is AI-generated and is identified as such.

• You are interacting with AI, not a person. Promega Assistant is an automated tool. You are notified that you are interacting with an AI system when you begin a session and that its responses are AI-generated.
• No profiling; no automated decisions with legal effect. Promega Assistant does not profile users for recommendations or advertising and does not make decisions producing legal or similarly significant effects on you solely on the basis of automated processing within the meaning of Article 22(1) GDPR.
• No training of general models. Promega's AI service provider(s) are contractually restricted from using your queries or interactions to train their general-purpose AI models.
• Human oversight. Promega Assistant supports, and does not replace, human interaction. You may contact a Promega representative to obtain clarification, express your view, contest an output, or request human review.
• Limitations. AI-generated responses may contain errors, omissions, or outdated information and do not constitute professional scientific, medical, clinical, diagnostic, regulatory, or legal advice. Verify critical information against authoritative sources. Promega Assistant does not provide product safety information; consult the applicable SDS. Promega Assistant does not execute purchases or process payments within the chat; orders are completed through the Website's standard checkout.

6. With whom we share your data

In connection with Promega Assistant, we may share your data with:

• Promega group entities, under Promega's Intracompany Data Processing Agreement;
• Service providers, including our third-party AI service provider(s), who process data on our behalf under appropriate contractual safeguards; and
• Authorities and legal advisors, where legally required or to establish, exercise, or defend legal claims.

7. International transfers

Promega is headquartered in the United States, and your data may be processed in the United States and other countries. Where required, we use appropriate safeguards, which may include the European Commission's Standard Contractual Clauses (Decision (EU) 2021/914) and the UK International Data Transfer Agreement or UK Addendum; adequacy decisions; the EU–US, UK, and Swiss Data Privacy Framework where applicable and certified; and Promega's Intracompany Data Processing Agreement. Some jurisdictions restrict cross-border transfer of certain data; do not submit such data through Promega Assistant unless the applicable requirements are met.

8. How long we keep your data

We process your data for as long as necessary for the purposes described, to meet legal retention obligations, or as required for security and evidence. Retention periods by category are described in Section 3 and in the Privacy Policy; cookie durations are described in the Cookie Policy. We delete or anonymize data when the retention period expires.

9. How we protect your data

We apply appropriate technical and organizational measures — such as encryption and pseudonymization, access restrictions on a need-to-know basis, logging, confidentiality obligations, and monitoring — to protect the confidentiality, integrity, and availability of your data. Transmission over the internet is not completely secure and is at your own risk.

10. Your rights

You have data-protection rights under applicable law — including, depending on your jurisdiction, rights to access, correct, delete, restrict or object to processing, port your data, and withdraw consent, and the rights provided to residents of California and other US states. These rights and how to exercise them are described in full in the Promega Privacy Policy. Because Promega Assistant assigns only a randomly generated conversation ID that is not linked to your identity, Promega generally cannot identify an individual's conversation data; to act on a request relating to Promega Assistant, we may need additional information from you to locate the relevant data, and in some cases may be unable to do so (consistent with Article 11 GDPR and equivalent provisions). Promega does not sell personal information for monetary consideration, and Promega Assistant does not engage in cross-context behavioral advertising; where required, we honor Global Privacy Control (GPC) signals. To exercise your rights or raise a concern, contact us using the details in Section 2.

11. Cookies and online tracking

Promega Assistant uses a dedicated session cookie that is strictly necessary for the tool to function: it records your acceptance of the Promega Assistant notice and maintains the continuity and context of your conversation within the session. Because this cookie is session-bound, your conversation history is available only during your session and is no longer available once you leave the Website. This cookie cannot be disabled and is deleted automatically when your session ends. Any other cookies or similar technologies are governed by the Promega Cookie Policy.

In the EEA, the United Kingdom, Switzerland, and other jurisdictions that require consent (which may include Brazil and Quebec), non-essential cookies load only after you provide consent through the "Manage Cookie Consent" mechanism. In the United States and other jurisdictions that do not require prior consent, you may exercise choices through the "Your Privacy Choices" link, and we honor GPC signals.

12. Changes to this Privacy Notice

We may update this Privacy Notice. The version published with Promega Assistant is the current version; where required by law, we will notify you of changes or seek renewed consent.