Privacy Policy

By using or accessing one of the websites ("Sites") owned by Corcept Therapeutics Incorporated ("Corcept"), you agree to the terms of this Privacy Policy. The term "personal information" as used throughout this Privacy Policy, applies to any information that is used by or on behalf of Corcept to identify an individual.

We have provided this Privacy Policy to describe how we collect, use, share and protect the personal information you provide to us at this Site. This Privacy Policy only applies to personal information we collect at our Sites and via the electronic communications technologies that we use. It does not apply to personal information collected through other means, including personal information you provide in e-mail messages you send to us or personal information we may collect from you offline. This Privacy Policy is intended for all visitors to the Corcept Sites including consumers, healthcare professionals and Corcept business partners.

At some of our Sites, we may use personal information in a manner not described in this Privacy Policy. In those instances, the different uses of personal information will be disclosed to you at the web page where your personal information is collected, prior to such collection.

Capitalized terms not defined in this Privacy Policy have the meanings set forth in the Terms of Use. We may change this Privacy Policy at any time. If we do this, we will post a notice that we have made changes to this Privacy Policy on the Sites for at least 7 days after the changes are posted and will indicate at the bottom of the Privacy Policy the date these terms were last revised. Any revisions to this Privacy Policy will become effective the earlier of (i) the end of such 7-day period or (ii) the first time you access or use the Sites after any such changes. If you do not agree to abide by this Privacy Policy, do not use or access (or continue to use or access) the Sites.

The Information We Collect

When you visit the Sites you may provide us with two types of information: (i) information regarding your use of the Sites collected by us as you interact with the Sites and (ii) information you submit voluntarily via the Sites.

(i) When you enter the Sites, we may also collect your browser type, IP address, your operating system (e.g., Windows 2000), the domain name of your internet service provider (e.g., Comcast), the date and time of your visit, the pages viewed, the time spent at our Site, and the websites visited just before and just after our Site. In addition, we store certain information from your browser using "cookies." A cookie is a piece of data stored on the user's computer tied to information about the user. We may use session ID cookies to confirm that users are logged in. Any and all of this information may be associated with your personal information. If you do not want information collected through the use of cookies, there is a simple procedure in most browsers that allows you to deny or accept the cookie feature; however, you should note that cookies may be necessary to provide you certain features available on the Sites.

(ii) Through the use of certain functionality of the Sites, you may provide us with your name, company affiliation, email address, telephone number, physical address, and other information that may be required for you to use such functionality. You may always choose not to provide us with your personal information, and we will disclose to you at the time we collect your personal information whether it is required for you to receive the information or services you have requested. To better understand and address your interests, and to keep the personal information we have about you accurate, we may correct or add to the personal information you provide to us at our Sites with personal information we receive from you offline or from other sources.

You have several choices regarding your use of our Sites. You could decide not to submit any personal information at all. Although certain Sites may ask for permission to use your personal information for certain purposes, you can agree or decline to provide your personal information. If you subscribe for particular communications or services such as e-mail updates, you will be able to unsubscribe at any time by: (i) following any opt-out instructions contained in communications you receive from Corcept, (ii) un-subscribing at specific areas of the Sites where you registered, if available, or (iii) sending a written request to the Corcept contact address, which appears at the end of this Privacy Policy.

As described above, if you wish to prevent cookies from tracking you as you navigate our Sites, you can reset your browser to refuse all cookies or to indicate when a cookie is being sent.

Minors

Corcept does not knowingly collect or solicit information from anyone under the age of 18 and no one under age 18 is permitted to provide any information to Corcept. If you are under 18, please do not attempt to send any information about you to us, including your name, address, telephone number, or email address.

Use of Information Obtained by Corcept

We may use your contact information to send you information regarding new products or services offered by Corcept that we think you may find valuable. This includes information and services you have requested, or as otherwise disclosed to you in this Privacy Policy or on the web page where you submitted your personal information to us. Corcept may also send you service-related announcements from time to time through the general operation of the Sites. Generally, you may opt out of such communications, although Corcept reserves the right to send you service-related notices even if you opt out of all voluntary notifications.

Corcept may use aggregate data (based partly on IP addresses but not containing personal information) collected through the Sites to analyze Site usage and system performance. This data may be used by Corcept and shared with third parties in any manner.

Policy on Use of Social Security Numbers

Corcept has a policy which provides for the proper use and protection of Social Security numbers obtained in the course of doing business by Corcept. Such policy protects the confidentiality of Social Security numbers, prohibits unlawful disclosure of Social Security numbers, and limits access to Social Security numbers. This policy applies to all methods of collection of Social Security numbers, including Social Security numbers obtained by oral, written and electronic means.

Note to Healthcare Professionals and Business Partners

If you have a business or professional relationship with Corcept, we may use your personal information, including personal information we may collect about you from other sources, to develop our business relationship with you and your organization.

Sharing Your Information with Third Parties

You may choose to provide information about you and your company or organization to other users and to the public by providing such information on public areas of the Sites ("Public Information"). Public information does not include information you submit to us but do not post on areas of the Sites accessible by other users or the public ("Non-Public Information").

We share your Non-Public Information with third parties only in limited circumstances where we believe such sharing is reasonably necessary to operate the Sites, legally required or, permitted by you. For example:

• We may provide Non-Public Information to service providers who help us bring you the services we offer, such as hosting the service at a co-location facility, sending email updates about Corcept, removing repetitive information from our user lists, or to provide search results or links. In connection with these offerings and business operations, our service providers may have access to your Non-Public Information for use for a limited time in connection with these business activities. Where we utilize third parties for the processing of any of your Non-Public Information, we implement reasonable contractual protections limiting the use of that Non-Public Information to the provision of services to Corcept.
• We may be required to disclose Non-Public Information pursuant to lawful requests, such as subpoenas or court orders, or in compliance with applicable laws. Additionally, we may share account or other Non-Public Information when we believe it is necessary to comply with law, to protect our interests or property, to protect the rights, property or safety of our employees or others, to prevent fraud or other illegal activity perpetrated through the Sites or using the Corcept name, or to prevent imminent harm. This may include sharing Non-Public Information with other companies, lawyers, agents or government agencies or where needed, for corporate audits or to investigate or respond to a complaint or security threat.
• We may offer to provide services jointly with other companies on the Sites, and we may share Non-Public Information with that company in connection with such offer or your use of that service.
• We may share your Non-Public Information if you request such a disclosure, to enforce an agreement we have with you, or to comply with the terms of an agreement with a product-related co-promotion partner.
• If the ownership of all or substantially all of the Corcept business, or individual business units or assets owned by Corcept that are related to the Sites, were to change, your Non-Public Information may be transferred to the new owner. In any such transfer of information, your Non-Public Information would remain subject to this Privacy Policy.

Corcept may share your personal information with parties described in this section who are (1) located in other countries, and (2) subject to other applicable laws, rules and regulations relating to your personal information, that do not offer the same protections as the country in which your personal information was collected. In particular, your personal information may be processed in the United States and subject to applicable US laws, rules and regulations. For more information about how Corcept is committed to protecting your personal information, see the "Security" section of this Privacy Policy.

Note: We do not share any of your personal information with third parties for their own direct marketing purposes unless you explicitly give us permission to do so.

Links

Corcept Sites may contain links to other websites. We are not responsible for the privacy practices of other web sites. We encourage users to be aware when they leave the Sites to read the privacy statements of other websites that collect personally identifiable information. This Privacy Policy applies solely to information collected by Corcept via the Corcept Sites.

Security

Corcept takes commercially reasonable precautions to protect Users' Non-Public Information against unauthorized access, disclosure, alteration or destruction. Because email and instant messaging are not secure communications, we cannot guarantee the security of any private information sent to us by email or instant messaging services.

Changing Your Preferences; Opt-Out of Receiving Communications

When you provide us with your personal information, you will be given some choices about how we use that personal information. You may change these preferences later. For example, if you sign up for an e-mail newsletter, you may opt out of receiving future e-mail newsletters at any time. Corcept will always provide you with one or more of the following ways to opt out: (i) by following any opt-out instructions contained in communications you receive from Corcept, (ii) by un-subscribing at specific areas of the Site(s) where you registered, if available, or (iii) by sending a written request to the Corcept contact address immediately below.

Contacting Corcept

If you have any questions about this Privacy Policy or Corcept's privacy practices in general, or if you need help accessing your personal information or changing your preferences, please contact us at:

Corcept Compliance Officer
Phone: 650-327-3270
Fax: 650-327-3218
Email: compliance@corcept.com

Make sure to provide the name of the Site(s) applicable to your request, and your name and contact information. If you do not provide us with this information, we may not be able to respond.

Last revised on November 10, 2011