Cookie Policy

Effective November 17, 2025

I. Global Terms & Conditions (“Global Section”)

Intellias Global Limited, including its affiliates and subsidiaries, (“Intellias”, “we”, “us”, and “our”) is committed to protecting your privacy and ensuring compliance with global data protection laws. This Cookie Policy explains how we use cookies and similar technologies on our websites (https://intellias.com & https://career.intellias.com/) and how we comply with relevant laws including the EU GDPR (General Data Protection Regulation), UK Data Protection Act 2018 (UK GDPR), Ukraine’s Law on Personal Data Protection, Colombia’s Statutory Law 1581 of 2012 and SIC guidelines, and various laws in the United States (such as the California CCPA/CPRA, Delaware Online Privacy Protection Act, Washington My Health My Data Act, New York SHIELD Act), as well as Japan’s APPI (Act on the Protection of Personal Information), India’s Digital Personal Data Protection Act 2023, Egypt’s Data Protection Law No. 151 of 2020, Saudi Arabia’s Personal Data Protection Law (PDPL), and the United Arab Emirates’ Federal Decree-Law No. 45 of 2021 on Personal Data Protection. We provide this policy to inform you about what cookies are, which cookies we use, why we use them, and how you can manage your preferences. We also include jurisdiction-specific information and rights relating to cookies, to ensure full compliance with each law.

By using our websites, you will be presented with cookies consent banner. Initially, some cookies may have been set immediately when you visited our site in the past, but we are in the process of changing our practices to require your prior opt-in consent for all cookies except those that are strictly necessary for the site to function.

This means that non-essential cookies (such as functional, analytics, and advertising cookies) will not be deployed on your device unless and until you give your explicit permission. Our goal is to be transparent and to give you control over your data – in line with the principle of informed consent mandated by laws worldwide.

If you have any questions about this Cookie Policy or how Intellias uses your personal data, please refer to our Privacy Policy or contact us at [email protected].

Purpose of Cookies Processing

1. Ensuring Proper Websites Functionality
   Cookies are used to make the websites operate correctly and securely. This includes enabling page navigation, ensuring access to secure areas (e.g. candidate dashboards), maintaining session continuity during job application or contact form completion, and protecting against malicious activity.
2. Supporting Recruitment and Employment Opportunities
   Cookies help facilitate the recruitment process by:
   • Storing form data for submitted job applications or saved vacancies.
   • Remembering candidate preferences (e.g. selected job categories, locations, or language).
   • Measuring how visitors interact with job postings and career pages to improve the candidate experience.
   • Analysing how potential candidates reach the site (e.g. through job boards, LinkedIn, or advertising campaigns) to enhance future recruitment outreach.
     
3. Enhancing Client Acquisition and Lead Generation
   Cookies assist in identifying and engaging with potential business clients by:
   • Tracking visits to pages describing services, case studies, and solutions to understand user interest areas.
   • Evaluating which marketing channels (e.g. ads, emails, social media) drive qualified leads.
   • Measuring the effectiveness of campaigns and optimizing content to attract new clients.
   • Personalising websites content based on visitors’ company type, industry, or region (where available through analytics tools).
4. Analytics and Performance Optimization
   Cookies are used to collect statistical information about visitor behavior — such as page views, time spent, navigation paths, and geographic distribution — to:
   • Improve user experience for both potential clients and job seekers.
   • Optimize ss structure, content, and loading speed.
   • Evaluate which sections are most valuable for business development and recruiting purposes.
5. Marketing and Remarketing Activities
   Cookies enable Intellias to display relevant advertising and career opportunities to visitors who have previously interacted with the sites by:
   • Retargeting potential candidates or clients on external platforms (e.g. Google Ads, LinkedIn).
   • Customizing promotional content to match user interests.
   • Measuring engagement with marketing materials and communications.
6. Social Media and Third-Party Integrations
   Cookies from third parties (e.g. LinkedIn, YouTube, Google Maps) allow visitors to:
   • Share content or job postings on social networks.
   • View embedded videos or media.
   • Log in or interact with Intellias via social media platforms used in recruitment and marketing.

What Are Cookies?

Cookies are small text files that websites place on your device (computer, smartphone, etc.) when you visit. Cookies are widely used to make websites work efficiently, to remember your preferences, and to provide information to the site owners. On subsequent visits, the cookie data is sent back to the originating websites or another site that recognizes that cookie, allowing websites to recognize your browser and remember things like user preferences or login status. In addition to cookies, we may use similar tracking technologies such as web beacons (tracking pixels), local storage, or SDKs in our mobile app (if applicable). For simplicity, we refer to all these technologies as “cookies” in this policy.

Cookies can be first party (set by Intellias’s domain) or third-party (set by other domains/partners when you visit our site, such as analytics or advertising providers). Cookies can also be session cookies, which are temporary and deleted when you close your browser, or persistent cookies, which remain on your device for a set period or until you delete them. Below, we explain the categories of cookies we use and why we use them.

Why We Use Cookies

We use cookies to make our websites functional, secure, and user-friendly, and to improve our services. Depending on their purpose, cookies allow us to:

• Ensure essential websites functions – for example, to remember items in a form or keep you logged in (strictly necessary cookies).
• Remember your preferences – such as language, region, or other settings, so you have a personalized experience (functional cookies).
• Understand websites performance and analytics – by collecting information on how visitors navigate our site, which pages are popular, and whether users encounter errors, so we can improve our content and user experience (analytics cookies).
• Provide relevant marketing or advertising – by tracking your visit and interactions, cookies help us, and our advertising partners show you content that is more relevant to your interests, and measure the effectiveness of ad campaigns (targeting/advertising cookies).

We do not use cookies to collect sensitive personal data (such as health, financial, or special category data) without your consent. We also do not use cookies to determine your identity by themselves; however, information obtained from cookies may be combined with other personal data you provide us (e.g. via a contact form) to personalize content or fulfil requests. Any personal data collected via cookies is handled in accordance with our Privacy Policy and applicable data protection laws.

Types of Cookies We Use

We categorize the cookies on our site into the following categories, in accordance with legal and regulatory guidance:

• Strictly Necessary Cookies: These cookies are indispensable for the operation of our websites and to use its core features. Without these cookies, services you have asked for (such as navigating pages or logging in to secure areas) cannot be provided. Because they are essential for the websites to function, these cookies are set by default and do not require your consent under most laws. We only use strictly necessary cookies for purposes like security, network management, and to provide you with content you explicitly request.
• Functional (Preference) Cookies: These cookies allow our site to remember choices you make and provide enhanced, more personal features. For instance, functional cookies may remember your language selection, region, or other preferences so that you don’t have to reset them each time. They may also be used to provide services you have asked for, such as playing a video or live chat support. Functional cookies may be first-party or third-party. We will only set these preference cookies on your device if you opt-in, as they are not strictly necessary for basic functioning. Declining them may affect some features, but the site will generally still work.
• Analytics (Performance) Cookies: These cookies collect information about how visitors use our websites. The data is aggregated and anonymized; we do not use analytics cookies to identify you. Analytics cookies help us understand websites traffic and user interactions so we can improve our services. We will not set analytics cookies without your prior consent, in line with EU GDPR/UK GDPR and similar laws that require user consent before tracking for analytics or statistics. If you choose to disable these cookies, we will not know when you have visited our site and will be less able to optimize our performance.
• Advertising (Marketing) Cookies: These cookies are used to deliver content that is more relevant to you and your interests. They may be set by us or by our advertising partners to build a profile of your interests and show you relevant adverts on other sites (known as interest-based advertising). Targeting cookies remember that you have visited our site and may track your browsing habits and activity across websites. These cookies also help limit the number of times you see the same advertisement and measure the effectiveness of ad campaigns. Targeting/advertising cookies will only be used with your explicit consent. If you do not consent to these cookies, you will still see advertisements, but they will be less tailored to you.

Each cookie category above (except strictly necessary cookies) will be disabled by default until you choose to enable them. A detailed list of specific cookies (names, provider, purpose, and lifespan) used on our site is available at the end of this policy in chapter III. We regularly scan and update our cookie list to keep it accurate.

Your Consent and Cookie Choices

• Consent for Non-Essential Cookies: We uphold a granular, opt-in consent approach for all cookies that are not strictly necessary. This means when you first visit our site (and periodically thereafter, as required), you will see a cookie banner or pop-up requesting your consent. You can choose to Accept all, Reject all, or Customize. Non-essential categories (functional, analytics, advertising) are off by default and load only after you opt in by category. We will not deploy any functional, analytics, or targeting cookies on your browser unless you have actively opted in to those categories – mere continued browsing or scrolling is not considered consent, in accordance with regulatory guidance. This approach complies with the EU ePrivacy (no pre-ticked boxes or implied consent).
• Withdrawing Consent: If you have previously consented to certain cookies, you have the right to withdraw that consent at any time. You can change or withdraw your choices at any time via a persistent Cookie settings link in the site footer (this re-opens the consent manager). Withdrawing consent will stop future data collection by the cookies, though it will not usually remove data already collected – however, we will cease processing any data from those cookies for which consent is withdrawn, except for retaining what’s necessary for legal compliance or legitimate purposes. There will be no negative effects or change in core service if you choose not to consent or to withdraw consent for non-essential cookies; the only consequence is that certain enhanced or personalized features may not be available.
• Browser Settings: In addition to our on-site controls, most web browsers allow you to manage cookies through the browser settings. You can typically set your browser to block all cookies, to notify you when a cookie is being set, or to delete cookies periodically. You can also delete cookies that have already been set. Please note that using browser settings to reject cookies (especially all cookies including necessary ones) might impair the functionality of our site. For more information on how to manage browser cookies, you can check support pages for browsers (e.g., Chrome, Firefox, Safari, Edge). We provide some helpful links in our Privacy Policy and this Cookies Policy (or you may refer to resources like AllAboutCookies.org for general guidance).
• Do Not Track Signals: We do not respond to browser ‘Do Not Track’ signals because no industry standard defines how to do so. However, we do detect and honor Global Privacy Control (GPC) signals as an opt-out of sale/sharing or targeted advertising where required by law.

Third-Party Cookies and Data Sharing

• When you consent to non-essential cookies, third-party cookies may also be placed by our approved partners. Targeting cookies on our site might be set by advertising networks we work with, which could include Google, Facebook, LinkedIn, or others, as described in our cookie list. These third parties may collect information about your online activities over time and across different websites when you use our site.
• We do not sell your personal information to third parties for money. We are legally obligated to also specifically advise you that we do not sell or share the personal information or sensitive personal information of any California resident who is 16 years or younger.
• All third-party cookie providers are required to process data collected from our site in accordance with applicable privacy laws and for the purposes we specify. We have agreements (including data protection addenda where required) in place with these providers to ensure any personal data obtained through cookies is used only for the intended purpose and with appropriate confidentiality and security.
• Cross-Border Data Transfers: Given the international nature of our company and the internet, data collected via cookies may be transferred to or accessed by our third-party partners or Intellias group companies in other countries. We are mindful that many jurisdictions have regulations regarding transferring personal data abroad. Where we transfer personal data from cookies across national borders, we comply with all applicable transfer requirements:

1. European Union/United Kingdom: If cookie data classified as personal data is transferred out of the European Economic Area (EEA) or UK, we ensure that an appropriate transfer mechanism is in place, such as the European Commission’s Standard Contractual Clauses (SCCs) or that the recipient is in a country deemed “adequate” by the EU/UK. Where we transfer personal data, we rely on adequacy decisions or SCCs (plus supplementary measures as needed). We only rely on consent where that is the appropriate transfer mechanism. We follow guidance from the European Data Protection Board (EDPB) and national regulators in this regard. If required, we’ll implement additional safeguards like encryption or data anonymization for cross-border data.
2. Japan: In accordance with Japan’s APPI, we will not transfer personal data obtained through cookies about Japanese residents to a third party in a foreign country unless (a) the destination country has been designated by Japan’s PPC (Personal Information Protection Commission) as having equivalent data protection standards, or (b) we ensure the recipient has undertaken sufficient safeguards to meet APPI standards, or (c) we obtain your informed consent for the specific transfer. We will provide individuals in Japan with information about any cross-border data transfer, such as the destination country and how the data will be protected, as required by APPI guidelines.
3. Other Countries: We similarly ensure compliance with transfer rules in other jurisdictions. For instance, Colombia prohibits international transfers of personal data to countries that do not meet adequate data protection standards unless the individual has given express consent or another exception applies. Therefore, if cookie data from Colombia is to be transferred abroad, we will obtain the user’s consent for that transfer or ensure the recipient country is on Colombia’s list of permitted destinations (Colombia’s SIC has deemed certain countries adequate, including many in Europe, and others like the UK, Japan, the U.S., etc. under certain conditions). For Saudi Arabia, the PDPL and its implementing regulations impose specific conditions for transferring personal data outside the Kingdom – such as that the transfer is necessary for fulfilling a contract, does not jeopardize national security or the data subject’s vital interests, and that the receiving country or entity provides adequate protection or safeguards. We will only transfer cookie data out of Saudi Arabia in compliance with those rules, which might include obtaining SDAIA approval or using contracts that ensure PDPL-level protection abroad. For the UAE, Federal Law No. 45 of 2021 similarly sets requirements for cross-border transfers and generally requires either an adequacy decision by the UAE Data Office or appropriate safeguards and consent for international transfers (we await further executive regulations for precise mechanisms). Until such guidance is clarified, we err on the side of caution: we will not transfer UAE personal data abroad unless it’s legally permissible (e.g., with your consent or via standard contracts). In India, the DPDP Act 2023 allows the central government to designate certain countries to which personal data can be transferred; we will ensure that any transfer of Indian users’ cookie data complies with such whitelisting and will obtain consent if required once rules are notified. In Egypt, cross-border transfer of personal data requires a permit from the data protection authority unless certain exceptions apply (we will refrain from transferring Egyptian personal data out of Egypt without fulfilling the conditions of Law 151/2020 and its expected executive regulations).

Wherever your data is processed, we take steps to ensure it remains protected. We maintain contracts and Data Processing Agreements with our service providers to enforce data protection commitments. If you’d like more information about our data transfer safeguards (such as copies of SCCs or details of other measures), you can contact us as provided in our Privacy Policy.

Data Retention

Information collected by our cookies is kept only for as long as necessary to fulfil the purposes described. Each cookie has an expiration term. Our detailed cookie list provides the retention period for each cookie. We will not retain personal data from cookies beyond what is allowed by law or necessary for the stated purposes. Where you withdraw consent or opt-out, we will stop processing the related cookie data and, where feasible, delete or anonymize the data. Some aggregated or anonymized data (which no longer identifies you) might be kept for analytical purposes, but not in a way that could be linked back to you.

Children’s Privacy and Cookies

Our site and services are not directed to children under the age of 16, and we do not knowingly use cookies to collect personal data from such individuals for profiling or advertising. In fact, many jurisdictions provide special protections for minors, and we design our cookie practices to meet the most protective standards:

• Age Restrictions: If you are under the age of 16, or if a higher minimum age applies in your region, please do not accept non-essential cookies without permission from your parent or guardian.
• No Targeted Ads to Minors: We do not use advertising cookies to create profiles on or target personalized ads to anyone we know is a child or below the local age of digital consent. We prohibit tracking and behavioural advertising aimed at children, and we abide by this by disabling marketing cookies for users identified as minors.
• Parental / Guardian Consent: If a young user (child) needs to use our site (for instance, an under-aged person looking at career information in a jurisdiction where they are not yet of age to consent), we will require the consent of their legal guardian for any optional cookies. We make reasonable efforts to verify that consent is given by the child’s parent or guardian in such cases. If we learn that personal data from cookies has been collected from a child without appropriate consent, we will delete that data as soon as possible.
• Child-Friendly Explanations: Recognizing that under-aged persons might use our site, we present information about cookies in clear, plain language that younger users can understand. Our aim is to be transparent to all our users about what data we collect and why.

If you are a parent or guardian and have concerns about cookies on our site with respect to your child, please contact us. We support your role in supervising your child’s online activities and will work with you to address any issue (including deleting any inadvertent cookie data relating to your child).

Your Choices and Additional Controls

In addition to using our cookie banner and settings, you can manage cookies through browser settings. Most web browsers allow you to refuse or delete cookies. You can typically find these controls under the “Preferences” or “Settings” menu of your browser. You can delete all cookies stored on your device and set most browsers to block cookies from being placed. However, please note that if you disable all cookies (including strictly necessary ones) via your browser, some parts of our site might not function properly. For the best experience, we recommend using our on-site controls to manage non-essential cookies, so necessary cookies can continue to operate.

You may opt out of certain third-party advertising cookies by using industry opt-out tools (such as the NAI or DAA opt-out pages in the United States) or using browser extensions that block trackers. Keep in mind, opting out through those tools might be browser-specific or device-specific.

For interest-based advertising, you can learn more and opt out of many ad cookies via the YourOnlineChoices (EU), YourAdChoices (US), or DAAC (Canada) websites. These do not remove cookies per se but rather inform participating advertisers to stop targeted ads to your browser. You can learn more about cookies and third-party websites on these websites – All About Cookies and Network Advertising Initiative.

If you’d like to delete cookies or instruct your web browser to delete or refuse cookies, please visit the help pages of your web browser.

Please note, however, that if you delete cookies or refuse to accept them, you might not be able to use all the features we offer, you may not be able to store your preferences, and some of our pages might not display properly.

Please see the instruction regarding the web browsers:

• For the Chrome web browser, please visit this page from Google;
• For the Microsoft Edge web browser, please visit this page from Microsoft;
• For the Firefox web browser, please visit this page from Mozilla;
• For the Safari web browser, please visit this page from Apple;
• For any other web browser, please visit your web browser official web pages.

Updates to This Policy

We may update this Cookie Policy from time to time to reflect changes in the cookies we use or changes in legal requirements. If we make material changes, we will notify you by updating the “Last Updated” date at the top of this policy and, if required by law, through the websites (for example, via a banner or pop-up notifying of the change). We encourage you to review this policy periodically. Continuing to use our websites after a new version of the Cookie Policy has been posted (and after being notified or prompted about it, if applicable) will be deemed acceptance of the changes. However, where your consent is required for any new cookie practices, we will obtain it.

II. Your Privacy Rights and Jurisdiction-Specific Disclosures

Because Intellias operates globally, different privacy laws may grant you specific rights or require certain disclosures regarding cookies and personal data. We have structured this section to address key jurisdictions mentioned in this policy. If you are a resident of one of these regions, the following additional terms apply to you in addition to the rest of this Cookie Policy:

European Union & United Kingdom:

We process cookie data of users in the EU/EEA and UK in accordance with the EU GDPR and UK GDPR (Data Protection Act 2018) and the ePrivacy laws. In the EU/UK, consent is the primary legal basis for setting non-essential cookies on your device. We will not rely on “legitimate interests” or any other basis to drop cookies that track personal data – instead, we obtain your prior consent (as described above) in compliance with Article 5(3) of the EU ePrivacy Directive and relevant guidance (such as the European Data Protection Board’s guidelines on cookie consent). You have the right to withdraw consent at any time, as well as other GDPR rights with respect to any personal data collected via cookies (the right to access such data, to rectification, erasure, restriction, data portability, and to object to certain processing). If you believe our use of cookies violates your privacy rights under GDPR/UK law, you also have the right to lodge a complaint with your national Data Protection Authority (e.g., the ICO in the UK, or any EU supervisory authority in your country). However, we encourage you to contact us first so we can address your concerns directly. Note that strictly necessary cookies may be set without consent under EU/UK law, but they will only be used for their essential purpose and not for marketing or analytics. Our implementation of a cookie consent banner ensures that we comply with the “clear and comprehensive information” duty and provide you an “appropriate means of consenting” to non-essential cookies, as required by the UK ICO and EU regulators.

Ukraine:

Ukrainian law does not have a separate cookies statute, but cookies are regarded as personal data if they can identify an individual (such as via unique identifiers or when combined with other information). Therefore, our use of cookies falls under the Law of Ukraine “On Personal Data Protection” (No. 2297-VI). This law requires a valid consent from the data subject for processing personal data in many cases, unless another legal ground applies. In practice, we treat cookies (beyond essential ones) as requiring your consent. Notably, the Ukrainian regulator (the Parliament Commissioner for Human Rights) has indicated that implied consent (such as simply continuing to browse) may not be sufficient proof of consent for data processing. Thus, we use an explicit opt-in model for cookies in Ukraine. Additionally, the law requires that consent be informed: we must inform you of the specific purpose of processing, the scope of data collected, how it will be used, and whether it will be transferred to third parties. We believe this Cookie Policy provides that information. If we change the purpose of processing cookie data, we will seek new consent. Ukrainian users also have the right to withdraw consent and the right to be informed about the processing (which we satisfy through this policy and our privacy notice). We will also comply with any request from a Ukrainian user to access, rectify, or delete personal data obtained via cookies, in line with local law.

Note: The current Ukrainian law requires a written or equivalent form of consent in many cases – our electronic consent mechanism via the banner is designed to meet the definition of “voluntary expression of will… in a form which makes it possible to conclude that consent has been given”. By clicking “Accept” on the cookie banner, you indicate such consent.)

Colombia:

We abide by Colombia’s Statutory Law 1581 of 2012 (Ley 1581 de 2012) and guidelines issued by the Superintendence of Industry and Commerce (SIC) regarding personal data and cookies. Colombian data protection law emphasizes the principles of freedom and consent for data processing. In fact, under Colombian regulation, the collection and use of data through cookies or similar tracking technologies is prohibited unless the data subject has provided consent. Therefore, for visitors from Colombia, we will present our cookie consent banner and only set non-essential cookies if you consent. Such consent can be obtained through a pop-up or banner that informs you of the purposes of the cookies and provides a way to manage or disable them. We also comply with the SIC’s guidance on privacy notices by including in our Privacy Policy the relevant disclosures about cookie data processing. Colombian residents have rights under Law 1581, including the right to access, update, rectify, and delete personal data collected, as well as the right to revoke consent. You may exercise these rights by contacting us (see our Privacy Policy for contact details), and we will address your request in accordance with the procedures and timeframes set by SIC regulations. Additionally, Colombia mandates particular care with children’s data and sensitive data – however, our websites is not intended for children, and we do not knowingly use cookies to collect sensitive personal data. If that ever changes, we will seek explicit authorization from the parent/legal guardian or adhere to local law requirements. We adhere to cross-border transfer restrictions as noted in the previous section (Colombian data will only be transferred outside Colombia in compliance with adequacy or consent requirements).

United States – California, Delaware, Washington, New York (and other state laws):

Intellias strives to comply with the patchwork of U.S. state privacy laws, especially where our websites is accessible to those state residents. This section addresses specific requirements:

1. California (CCPA/CPRA):
   Under the California Consumer Privacy Act (as amended by the California Privacy Rights Act, effective 2023), personal information includes unique identifiers and internet or other electronic network activity (which can cover online identifiers, IP addresses, and browsing information collected via cookies). If our use of advertising cookies or similar technologies involves sharing or selling personal information (for example, sharing a cookie ID with a third-party ad network for targeted advertising),California residents have the right to opt-out of that sale or sharing. In accordance with §§1798.120 and 1798.135 of the California Civil Code, we have a “Do Not Sell or Share My Personal Information” option that allows California consumers to opt out of the sale/sharing of cookie data. When you use our cookie preference tool to opt out of targeting cookies, it is also treated as a valid opt-out of sale/sharing under CCPA. We honour Global Privacy Control (GPC) signals from browsers as an opt-out of sale (if configured in our system, we will treat it as equivalent to you toggling off advertising cookies, in line with CPRA regulations). California residents are also entitled to certain disclosures: this Cookie Policy provides the categories of personal info collected via cookies, the purposes, and the categories of third parties involved – satisfying the notice at collection requirement for cookie-derived data. For a full description of our data practices, please see our Privacy Policy.Additionally, California consumers have rights to request that we delete personal information collected from them or know the specific pieces of information and categories of information collected, the sources, purposes, and third parties to whom it was disclosed. Most cookie data we hold is pseudonymous (we may not be able to identify you by name just from cookie data), but if it’s linked to you, you can make a Data Subject Access Request or deletion request for it. We will not discriminate against you for exercising any CCPA rights (e.g., we will not deny services or provide a different quality of websites if you opt out of cookies, aside from the natural consequence that certain personalized features won’t work without those cookies).
2. Delaware:
   The Delaware Online Privacy and Protection Act (DOPPA) requires operators of commercial websites to post a conspicuous privacy policy that, among other things, discloses how the site responds to “Do Not Track” signals and whether third parties may collect personal information about users’ online activities on the site. In compliance with this, we reiterate that we currently do not respond to DNT signals (as noted above). We also confirm that third parties (like analytics and ad providers) may collect personal information about your online activities over time and across different websites when you use our site, but only if you have given consent for their cookies. These third parties are described in our cookie list. Our Privacy Policy contains a section detailing the categories of personal information we collect (which includes online identifiers and internet activity via cookies) and the categories of third-party recipients, fulfilling DOPPA’s requirements. If any changes materially affect our handling of cookie data, we will update our policies and notify users per Delaware law (as we would for all users). Delaware does not yet have a comprehensive personal data law (though it has passed a new Personal Data Privacy Act, effective 2025, which we will also monitor for compliance), but we are prepared to extend similar rights to Delaware users as we do for California users.
3. Washington State (My Health My Data Act):
   Washington’s My Health My Data Act (MHMDA), effective March 2024, imposes duties on companies that collect “consumer health data” from Washington residents, including via websites and apps. We do not deliberately collect health-related personal information through our cookies. Our site is focused on software engineering services and does not target health services or gather health metrics. Therefore, we do not expect the MHMDA to be directly implicated by our cookie use. However, out of an abundance of caution, if any of our web analytics or tracking activities were to involve consumer health data as defined by MHMDA, we would obtain separate, explicit consent from Washington consumers before collecting or sharing such data. The Act requires consent for the collection of consumer health data and a separate consent for sharing it with third parties, with a detailed notice of purpose and the right to withdraw consent. We affirm that we will comply with those provisions if they ever become relevant. Additionally, Washington’s law provides consumers the right to withdraw consent and request deletion of consumer health data; we would honour such rights. Beyond the health data law, we also comply with general consumer protection principles in Washington – we do not engage in unfair or deceptive practices with cookies (e.g., our cookie consent banner is designed to be clear and not misleading). If any new Washington state consumer privacy laws or regulations (often proposed in the legislature) come into effect and apply to our operations, we will update our policies accordingly.
4. New York (SHIELD Act):
   New York’s Stop Hacks and Improve Electronic Data Security Act (SHIELD Act) is primarily a data security law. It requires businesses that hold private information of New York residents to implement reasonable administrative, physical, and technical safeguards to protect that data. Intellias maintains a comprehensive information security program that covers data collected via our websites, including cookie data that may constitute “private information” (for instance, if combined with a person’s name or if it includes login credentials). We have measures to detect and prevent unauthorized access to data obtained from cookies. By adhering to these practices, we align with the SHIELD Act’s mandate to protect the confidentiality and integrity of personal information. In the event of a data breach involving New York residents’ private information (which could include certain cookie-derived identifiers if they qualify), we will provide timely breach notifications as required by that law.Note: Cookie data in isolation usually isn’t considered “private information” under SHIELD Act unless it includes credentials or certain identifiers plus security code, etc., but we treat all personal data with care regardless.New York does not currently grant individual privacy rights like access or deletion for cookie data (outside of the scope of SHIELD Act’s security focus), but if you are a New York resident with questions about your data, you can still contact us and we will assist in line with our general privacy commitments.
5. Other U.S. States:
   Several other states (Colorado, Connecticut, Utah, Virginia, etc.) have passed comprehensive privacy laws effective 2023 or 2024. While not explicitly listed in the user’s query, Intellias will also endeavour to comply with those laws to the extent they apply. For instance, if you are a Virginia resident, you have the right to opt out of targeted advertising – our cookie consent tools serve as that opt-out mechanism (analogous to CCPA’s do-not-sell for CA or similar rights in CO/CT). We won’t use dark patterns to obtain consent, and we will recognize Universal Opt-Out signals as required by laws like Colorado’s. If you’re in any state that grants rights to access or delete personal data, you can submit such requests to us (see our Privacy Policy contact info), and we will treat cookie data as part of the data set we search. We are continuously monitoring new state privacy regulations and will update our practices as needed.

Japan:

Under Japan’s Act on the Protection of Personal Information (APPI), any data that can identify an individual (directly or indirectly) is “personal data” and subject to the law. Some cookie data might be classified as “personal data” or as “person-related information” under recent amendments (data that by itself does not identify a person but could be linked to personal data by a receiving third party). Intellias complies with APPI by obtaining consent for uses of cookies that constitute a use of personal information beyond what is necessary for providing our service; and by disclosing the purposes of use. If we were to provide cookie data (that is not yet personal data) to a third party in a way that the third party will identify individuals, we would either obtain your prior consent or ensure the transaction meets APPI’s requirements for “opt-out” exceptions (including that the third party commits not to identify individuals unless consent was obtained). Furthermore, as noted in the cross-border section, we will handle any overseas transfer of Japanese personal data in accordance with APPI Article 28: Japan has whitelisted certain countries (like EEA and UK) as having equivalent protection. For other countries (like the U.S.), we will secure contractual commitments from the data importer to safeguard the data to Japanese standards and inform you of those safeguards or obtain your consent.

We also respect Japanese users’ rights under APPI: you can request notification of the purpose of use of your personal data, or request disclosure, correction, or cessation of use of personal data that we have obtained via cookies. Note that for security and fraud-prevention cookies (if any), APPI allows certain exemptions, but we will still be transparent about them. Our policies are aligned with the guidance issued by Japan’s Personal Information Protection Commission (PPC), and we remain attentive to PPC’s guidance on cookies and online tracking. If you are in Japan and have a concern about our cookie practices, you may contact us or lodge a concern with the PPC. We aim to ensure that before placing any non-essential cookies on your device, we have your consent in a manner consistent with Japan’s emphasis on user choice for data usage.

India:

Intellias adheres to the Digital Personal Data Protection Act, 2023 (DPDP Act) with respect to any personal data collected via cookies from users in India. The DPDP Act requires that personal data be processed only for lawful purposes with consent or another permitted ground, and that data principals (users) be provided with a notice of such processing. While the Act does not explicitly mention cookies, its provisions apply broadly to any digital personal data. We therefore treat cookies that collect personal data as falling under the consent requirement. We will present Indian users with a clear choice to consent to cookies and will not deploy non-essential cookies without explicit consent, following the Act’s opt-in model. By accepting our cookie banner, you provide consent for the specified purposes. We also ensure our cookie consent mechanism meets the expected standards of being free, specific, informed, and unambiguous (the DPDP Act emphasizes that consent must be given after being provided itemized details of personal data processing).

Our Privacy Policy and this Cookie Policy together serve as a notice under Section 6 of the Act, disclosing the categories of personal data, purpose of processing, and details of third-party involvement. Under the DPDP Act, you have rights such as the right to access the personal data we have about you, the right to correct inaccuracies, the right to erase personal data (subject to certain exceptions), and the right to grievance redressal. If you wish to exercise any of these rights with respect to cookie data, you may contact our designated Data Protection Officer or email [email protected]. We will acknowledge and act on your requests as required by the law and forthcoming regulations. Additionally, India may establish Consent Managers (Data Fiduciaries) for managing consent; once those frameworks are in place, we will integrate with any industry-standard consent managers to honour your preferences across services. We do not process any “personal data of children” or “sensitive personal data” via cookies, to our knowledge. If that changes, we will seek verifiable parental consent for under-18 users and implement age-gating as needed, in line with the Act’s requirements. We also will ensure that any transfer of personal data from India to outside India aligns with the whitelisted countries or conditions that the Indian government will notify (until rules are specified, we will be conservative about transferring Indian personal data abroad, like our approach with other jurisdictions).

Egypt:

Our cookie practices in Egypt comply with Egypt’s Personal Data Protection Law No. 151 of 2020 (PDPL). The law requires that we obtain the explicit consent of the individual before processing their personal data, except in certain limited circumstances (such as if the data is publicly available by law, necessary for a contract with the individual, etc.). Since cookies on our site are not strictly necessary for any contract and often involve personal data (like device identifiers, usage data), we treat them as requiring consent. In line with PDPL and anticipated regulations, we will not deploy cookies that collect personal data from Egyptian users without first obtaining clear consent. Our cookie banner thus serves as a request for your consent in Egypt. The PDPL also emphasizes transparency – we must inform you of the specific purposes of data collection, the extent of data collected, and your rights. This Cookie Policy and our Privacy Policy together fulfil that notice obligation by detailing what data cookies collect and how we use it. If you consent, we will use the cookies as described; if you decline, we will not (apart from essential cookies as allowed by law). Egyptian law classifies data about children and sensitive data as special categories – we do not use cookies to target or collect such data, and if we ever do, we will follow the law’s stricter rules (like obtaining guardian consent for children, or a license from the Egyptian Data Protection Center for processing sensitive data). Egypt’s PDPL also gives individuals rights including the right to withdraw consent, the right to request access to your personal data, and to request deletion or correction. We have processes in place to honour such requests. We have also appointed a representative in Egypt if required and will register our data processing with the regulator once that regime is implemented. Non-compliance with the PDPL can carry heavy fines and even criminal penalties, and Intellias is fully committed to respecting the law (we have taken steps like conducting assessments of our cookie usage considering PDPL). In summary, Egyptian users can rest assured that no non-essential cookies will track them without consent, and that they can exercise their PDPL rights by contacting us.

Saudi Arabia:

We handle personal data from cookies of Saudi Arabia residents in accordance with the Saudi Personal Data Protection Law (PDPL), as amended in 2023, and its implementing regulations. The PDPL’s core principle is that personal data cannot be processed without the consent of the data subject, unless an exception applies. Therefore, for cookies that collect personal data (which may include online identifiers, device information, etc.), we rely on obtaining your consent via the cookie banner before setting those cookies on your device. We will not treat your continued use of the site as implied consent; only an affirmative opt-in will count (to ensure alignment with the PDPL’s standards, which mirror GDPR-like consent requirements).

You have the right under PDPL to withdraw your consent at any time; withdrawing consent will not affect the lawfulness of processing before withdrawal. The PDPL also grants rights such as the right to request deletion of your personal data, which we will accommodate for cookie data (bearing in mind we might need to ask our third-party processors to delete data on their end as well). We provide this Cookie Policy as part of our obligation to have a clear privacy policy available to data subjects before collecting their data, covering the necessary information (purpose of collection, how data will be used, etc.). As for cross-border transfers, the Saudi PDPL currently requires that personal data not be transferred outside KSA unless certain conditions are met, which likely will include that the destination country has adequate privacy laws or that the Saudi authorities (SDAIA/NDMO) approve the transfer or an exemption (such as the individual’s consent or necessity for a contract) applies.

In the context of cookies, if any personal data) were to be transferred out of Saudi, we will ensure an exemption applies – the most straightforward in this context would be obtaining your explicit consent for the transfer. By consenting to, say, an analytics cookie, you would also be informed that data will leave KSA and consent to that transfer. We will also limit such transfers to the minimum data necessary and ensure the foreign recipients treat it confidentially. The Saudi PDPL also has data minimization and security requirements – we operate under those principles (only collecting what is necessary through cookies and securing all personal data). Saudi users can contact us or our representative in KSA (when appointed) to exercise their rights or with any complaints. We are within the PDPL’s first year of enforcement (as of 2024) and will adjust any practices as new regulations (like the detailed Transfer Regulations) get implemented.

United Arab Emirates:

Intellias complies with the UAE’s Federal Decree-Law No. 45 of 2021 regarding Personal Data Protection (the UAE PDPL) in the context of cookies. Similar to other laws, the UAE PDPL generally prohibits processing personal data without the consent of the data subject, except in limited circumstances (such as when necessary to execute a contract requested by the data subject, to comply with a legal obligation, to protect vital interests, for public interest, etc.). Our use of non-essential cookies does not squarely fall under those exceptions, so we treat consent as required. We will therefore ask for and obtain consent from UAE users before dropping any cookies that process personal data for analytics, personalization, or advertising. (Strictly necessary cookies might be considered essential for providing a service “explicitly requested” by the user, such as logging in or remembering cart items, which could be allowed without consent; however, we still mention their use in this policy and ensure they are limited to what is necessary.)

The UAE PDPL also outlines that a privacy notice should be provided, informing individuals about the data collected, purposes, and their rights – this Cookie Policy serves that purpose for cookie-specific processing. UAE users have rights to request access, correction, erasure, and to object to processing of their personal data. We honour those rights.

One aspect of UAE law is Data Transfer: the PDPL (Articles 22-24) sets conditions for transferring personal data outside the UAE, which will be further elaborated by the UAE Data Office. Until implementing regulations are fully in force, the law generally requires either transferring to countries with an adequate level of protection or ensuring appropriate safeguards (or falling under specific exemptions such as the data subject’s explicit consent to the transfer). As a precaution, for cookie data, we treat your acceptance of certain third-party cookies as consent to transfer your data to the countries where those third parties operate.

We also sign contractual clauses with recipients to protect the data. If the Data Office publishes a list of “permitted countries” or standard clauses, we will adopt those accordingly. We also note that the UAE PDPL is influenced by GDPR principles, and we mirror our compliance measures accordingly (data minimization, purpose limitation, etc., for cookie data).

If you are a UAE resident and have any issue or query regarding your personal data in cookies, you can reach out to us. We have a data protection officer who can be contacted via [email protected], and we will also abide by any guidance from the UAE Data Office regarding cookies (for instance, if certain analytics cookies might be allowed as “necessary” for a service, etc., we will follow whatever the law stipulates).

• Egypt, Saudi Arabia, UAE – Note on Consent Language:
  In these jurisdictions, “explicit consent” often implies a clear affirmative act (similar to GDPR). By clicking “Accept All”, “Customise” on our cookie banner, you are providing that explicit consent for the specific cookies you enable. If our site is ever made available in Arabic or other local languages, we will ensure the consent request is appropriately translated and clear.
• Summary of Your Rights:
  No matter where you are located, you can always refuse non-essential cookies and still use our site. The above jurisdictional terms are meant to reassure you that we follow the law in your region. If you have questions about how we handle cookies considering your local laws, please contact us. If you wish to exercise any privacy right (access, deletion, etc.) regarding data obtained from cookies, you can also contact us, and we will facilitate your request in line with applicable law. We will not retaliate or deny you service for exercising your rights – at most, if you refuse certain cookies, some functionality may be limited (e.g., no personalized content) as a direct consequence of your choice, but we will not otherwise penalize you.

III.1. Websites Cookies for https://intellias.com

III.2. Websites Cookies for https://career.intellias.com/

IV. Contact Us

If you have questions about this Cookie Policy or how we use cookies in your jurisdiction, you can reach out to our privacy team at [email protected] or as in accordance with our Privacy Policy. We will be glad to assist you.

Remember, you can manage your cookie preferences anytime via the methods described above.