California Privacy Notice

Last Updated:  February 2026

This California Privacy Notice (“California Privacy Notice”) describes how Ligand Pharmaceuticals Incorporated (“Ligand,” “us,” “we” or “our”) collects, uses and maintains Personal Information (defined below) about California residents obtained throughout our website located at www.ligand.com (the “Site”). This California Privacy Notice supplements our Ligand Pharmaceuticals Incorporated Privacy Notice as required under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”). This California Privacy Notice expands upon the key information about how we collect and use Personal Information that we provided in our California Privacy Notice at Collection. Terms used in this California Privacy Notice have the meaning ascribed to them in the CCPA.

If you are not a resident of California, please see our Ligand Pharmaceuticals Incorporated Privacy Notice for information applicable to you.

Personal Information We Collect, Use, Disclose, Share, or Sell

Categories of Personal Information We Collect, Categories of Sources of Personal Information, Business or Commercial Purposes for Which Personal Information Will Be Used, and Third Parties with Whom Personal Information is Disclosed

Depending on how you interact with us, we may collect or use information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household (“Personal Information”). The below chart describes the Personal Information we collect, our business or commercial purposes for collecting using and disclosing it.  In the last twelve (12) months, we may have collected the following categories of Personal Information from the sources identified below for the business and commercial purposes indicated, and disclosed, sold or shared such categories of Personal Information with the specified categories of third parties:

In addition, in the preceding 12 months, we may have disclosed all of the categories of Personal Information identified above, to the following categories of third parties: (i) judicial courts, regulators, or other government agents purporting to have jurisdiction over the group or opposing counsel and parties to litigation; (ii) any relevant third party acquirer(s), in the event that we sell or transfer all or any relevant portion of our business or assets; and (iii) other third parties as may otherwise be permitted by law. We may disclose Personal Information to all of the third parties listed above to comply with our legal obligations or for our business or commercial purposes.

Retention of Personal Information

We will only retain the categories of Personal Information described above for as long as is needed to fulfil the purposes for which it was collected. For example, we may require it for our business purposes, to perform our contractual obligations, or where law or regulation obliges us to do so. We will generally retain your Personal Information throughout the lifecycle of your relationship with us. Some Personal Information will be retained after your relationship with us ends.  We expect to delete your Personal Information (at the latest) once there is no longer any local, state, federal, and other legal requirement or legitimate business purpose for retaining your Personal Information.

Sale and Sharing of Personal Information

We do not sell your Personal Information for monetary consideration or as that term is traditionally defined. However, certain of our marketing or advertising activities or analytics tools used could be considered a “sale” or “sharing” of Personal Information under the CCPA. You have the right to opt-out of these types of disclosures of your Personal Information. An explanation of how to exercise your opt-out rights is provided below in Your CCPA Privacy Rights. We do not knowingly sell or share the Personal Information of California residents under 18 years old.

In the preceding twelve (12) months, we have sold or shared the following categories of Personal Information (as described in more detail above) to the following categories of third parties:

Use and Disclosure of Sensitive Personal Information

The CCPA requires that we provide you with a right to limit our use or disclosure of such Sensitive Personal Information in certain circumstances. Currently, we are not collecting information that would be considered “Sensitive Personal Information” under the CCPA.

Your CCPA Privacy Rights

Under the CCPA, you have certain rights with respect to your Personal Information, including the:

1. Right to Notice. You have the right to be notified which categories of Personal Information are being collected and the purposes for which the Personal Information is being used, as outlined in our California Privacy Notice at Collection and this California Privacy Notice.
2. Right to Know and Access Personal Information. You have the right to request that we disclose certain information about our collection and use of your Personal Information over the past twelve (12) months. We may ask that you provide certain information to identify yourself so that we may compare it with out records in order to verify your request. You may request the following:
   • • The categories of Personal Information we have collected about you.
     • The categories of sources for the Personal Information we have collected about you.
     • The specific pieces of Personal Information we have collected about you.
     • Our business or commercial purpose for collecting and/or selling your Personal Information.
     • The categories of third parties to whom we have sold or shared your Personal Information, if any, and the categories of Personal Information that we have shared with each third-party recipient.
3. Right to Opt-Out of the Sale or Sharing of Personal Information. You have the right to opt-out of the sale of your Personal Information and/or the sharing of your Personal Information with third parties for the purposes of cross-context behavioral advertising or profiling by submitting a request to us. Please note, we do not sell Personal Information, including the Personal Information of any individuals under the age of 16.
4. Right to Limit Use of Sensitive Personal Information. You have the right to request that we limit our use of any Sensitive Personal Information, as defined under the CCPA, to those uses which are necessary to provide our services and/or products or for other business purposes as identified in the CCPA. Please note that we do not currently collect Sensitive Personal Information.
5. Right to Delete. You have the right to request that we delete any Personal Information that we collect and retain from and/or about you, subject to certain exceptions. Once we receive and confirm your verifiable request, we will delete (and direct our service providers to delete) the relevant Personal Information from our records, unless an exception under the law applies.
6. Right to Correct. You have the right to request that we correct any inaccurate Personal Information we maintain about you, taking into account the nature of the Personal Information and the purposes for which we are processing such Personal Information. We will use commercially reasonable efforts to correct such inaccurate Personal Information.
7. Right to No Discrimination. You will not receive any discriminatory treatment by us for the exercise of your privacy rights conferred by the CCPA.

Exercising Your CCPA Rights

In order to exercise any of your rights under the CCPA, please contact us:

By email: [email protected]

If you are sending us an email, please include a subject line specifying your email is a consumer request. We will disclose and deliver the required information free of charge within 45 days of receiving your verifiable request. The time period to provide the required information may be extended once by an additional 45 days when reasonably necessary and with prior notice.

Any disclosures we provide will only cover the 12-month period preceding the verifiable request’s receipt. For data portability requests, we will select a format to provide Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

Verifying Your Request:  Only you, or a person that you authorize to act on your behalf, may make a request related to your Personal Information. In the case of access and deletion, your request must be verifiable before we can fulfill such request. Verifying your request will require you to provide sufficient information for us to reasonably verify that you are the person about whom we collected Personal Information, or a person authorized to act on your behalf. We will only use the Personal Information you have provided in a verifiable request in order to verify your request. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority. Please note that we may charge a reasonable fee or refuse to act on a request if such request is excessive, repetitive or manifestly unfounded.

Opt-Out of Sale or Sharing

You have the right to opt-out of certain advertising and marketing activities including online tracking and email marketing that could be considered a sale or sharing of your Personal Information. You can exercise your right to opt-out of the sale or sharing of Personal Information clicking the “Your Privacy Choices” link on the footer of our Sites or through an opt-out preference signal, such as a “Global Privacy Control”. If you choose to exercise this right through an opt-out preference signal and we detect such a signal, it will be honored. If you submit a request to opt-out, including through an opt-out preference signal, after you have agreed to our sale or sharing of Personal Information, we will opt you out of any further sale or sharing of Personal Information.

Other California Privacy Rights

Shine the Light Law (Cal. Civ. Code § 1798.83): We only share Personal Information (as defined) with third parties for direct marketing purposes if you either specifically opt-in, or are offered the opportunity to opt-out and elect not to opt-out of such sharing at the time you provide Personal Information or when you choose to participate in a feature on the Site If you do not opt-in or if you opt-out at that time, we will not share your Personal Information with that identified third party for direct marketing purposes.

“Do Not Track” Browser Settings (Cal. Bus. & Prof. Code § 22575(b)): You are entitled to know how we respond to “Do Not Track” browser settings. Like many other websites, we do not currently alter our practices when we receive Do Not Track signals as there is no consensus among industry participants as to what “Do Not Track” means in this context. However, you have the option to opt-out of interest-based advertising. To find out more about “Do Not Track,” you may wish to visit www.allaboutdnt.com/.

California Privacy Rights for Minor Users (California Business and Professions Code Section 22581):  California Business and Professions Code § 22581 allow California residents under the age of 18 who are registered users of online sites, services, or applications to request and obtain removal of content or information they have publicly posted. To request removal of such data, and if you are a California resident, you can contact us and include the email address associated with your Account. Be aware that your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.

Changes to this California Privacy Notice

From time to time, we may update or revise this California Privacy Notice in connection with new products, new services, new technologies, changes in law, and your needs. If we make any material changes to this California Privacy Notice, we will post the updated version on the Site. Notice of such changes may include notice by email through a message sent to the email address you use to access the Site.

For Additional Information

For additional information, including details regarding your privacy rights, please see our Ligand Pharmaceuticals Incorporated Privacy Notice.  If you have any questions about this California Privacy Notice, please contact us:

By email: [email protected]