Canada Privacy Statement (Privacy Policy)

Last Updated: June 2025

Johnson & Johnson and its affiliated companies (hereinafter “J&J” or “we”) is strongly committed to protecting your privacy. With the major advances in digital technology and the importance of using data to drive innovation; stay connected with customers, healthcare professionals, patients and consumers; and maintain compliance with global regulatory and safety standards, it has become increasingly important for individuals to have a clear understanding of how and when their Personal Information is being used. We believe our companies have a responsibility to protect every person’s right to privacy, and to establish reasonable measures, including those prescribed by law, to ensure appropriate handling and protection of your privacy by our employees, via our products, innovation and our communities.

We encourage you to read the full Privacy Statement carefully to better understand the various ways in which your Personal Information can be used and/or processed.

Specific privacy notices provided at the time of collecting your Personal Information may describe additional privacy details and practices that apply to that information.

If you have any questions about this Privacy Statement, please do not hesitate to reach out to us by using the Contact Us information below.

What will you find in this Privacy Statement?

This Privacy Statement describes how we collect, share and further process your Personal Information when we interact with you, either directly or by means of third parties or automatic tools, by offering you a service, because we are engaged in a contract and to fulfil our contractual obligations, as well as when you contact us for different reasons, including to report an adverse event related to any of our products.

Updates to this Privacy Statement

We may change this Privacy Statement from time to time. Any changes will become effective when we post the revised Privacy Statement on this page. We recommend that you regularly review this Privacy Statement. This Statement was last updated on the effective date indicated at the top of this page.

How do we collect your Personal Information?

We and our service providers collect Personal Information that you provide to us directly; that we collect automatically; or that we receive indirectly from third parties we have a relationship with or is collected from registries or other publicly available sources.

Information you provide to us directly

• When you provide Personal Information to us through your use of our digital services, such as when you sign up for a newsletter; make a purchase; register an account; attend a meeting, conference, training or other event; post on our social media pages or product review pages; or contact customer service or any of our contact centres;
  
• When you get in touch with us to provide feedback, or to make a request or ask a question, including those related to medical information;
  
• When you provide us with information about our products related to undesirable side effects and interactions, lack of effectiveness, quality complaints and/or other aspects related to the safety or quality of our products;
  
• When you take part in research studies, including clinical trials and market research studies, interviews or surveys;
  
• When we are engaged with you in a contractual relationship for the provision of services and you provide us information for us to perform our obligations under that contract;
  
• When you provide us with information during day-to-day interactions with our sales representatives; and
  
• When you share information via “testimonials” (your experience of living with a disease or condition).

Information we collect automatically

We might collect information as listed below either directly from you or via third parties. This type of information may not always reveal your specific identity or may not directly relate to you and may therefore, as such, not always be considered to be Personal Information. However, where this is the case, we may use and disclose such information according to the purposes as described in this Privacy Statement, except where we are required to do otherwise under applicable law. If we combine such information with Personal Information, we will treat the information as Personal Information as long as it is combined.

When you use and navigate our digital services, we might automatically collect information from you, such as the links you have clicked, the pages you have visited, the website you came from or the searches you have performed. In this context we might use “Cookies” (see below) or similar technologies to collect Personal Information, as permitted by applicable laws.

We and our service providers may use the information for the following purposes:

• For security reasons;
  
• To facilitate navigation;
  
• To display information more effectively;
  
• To personalize your experience and to select which of our advertisements or offers are most likely to appeal to you and display them while you are using our services, as permitted by applicable laws;
  
• To track your responses to our advertisements, as permitted by applicable laws;
  
• To recognize your computer or device, in order to make your navigation experience easier, such as to remember what is in your shopping cart;
  
• To gather statistical information about your usage of our digital services in order to continually improve their design and functionality, to understand how individuals use them, and to assist us with resolving questions regarding them;
  
• To calculate usage levels, diagnosing server problems and administering the website or app;
  
• To derive your approximate location from your IP address, or through your browser information such as your Media Access Control (MAC) address, computer type (Windows or Mac), screen resolution, operating system name and version, and Internet browser type and version. In this case, we may collect similar information if you access our digital services through a mobile device. We and our service providers may use the information to ensure that our digital services function properly;
• To use pixel tags, web beacons, clear GIFs or other similar technologies, which may be used in connection with some pages and HTML-formatted email messages related to our websites or apps
• We and our service providers may use the information for the following purposes:
  
  • To track the actions of users and email recipients;
    
  • To measure the success of our marketing campaigns and compile statistics about the usage of our digital services.
• To use other technologies, like reCAPTCHA, which is a test to tell humans and bots or automated accesses apart when you use our digital services.

Cookie Preferences

When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. You can manage your cookie settings through the Cookie Consent Manager utility on the website. Click on the different category headings to find out more and change your default settings. However, blocking some types of cookies may impact your experience using the site and the services we are able to offer. The types of cookies are:

• Strictly Necessary Cookies (Always Active)
  These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you, which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will then not work.
  
• Functional Cookies (Active by choice)
  These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies, then some or all of these services may not function properly.
  
• Performance Cookies (Active by choice)
  These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. If you do not allow these cookies, we will not know when you have visited our site, and we will not be able to monitor its performance. You can set your browser to block or alert you about these cookies.
  

• Media Cookies (Active by choice)
  These cookies are set by a range of media services that we have added to the site to enable the display of media content, such as embedded videos. Some of these cookies are necessary for the proper display of the media content. Some media services also place cookies that are capable of tracking your usage of the media service and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies, you may not be able to use or see such media services, such as videos.

  Please note that Google may automatically deploy YouTube cookies outside of our control. To find out how to manage Google and YouTube preferences and cookies, please visit https://policies.google.com/technologies/cookies#how-google-uses-cookies.
  

• Targeting Cookies (Active by choice)
  These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not directly store Personal Information but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

We may use third party advertising companies to serve advertisements regarding goods and services that may be of interest to you when you access and use our digital or online services, based on information relating to your access to and use of such services on any of your devices. If you have permitted this in your Cookie Consent choices, these companies may place or recognize a unique cookie on your browser (and possibly including through the use of other technical means). They may also use these technologies, along with information they collect about your online use, to recognize and serve advertisements to you across the devices you use, such as a mobile phone and a laptop.

Information we receive from third parties or collect from publicly available sources

• We receive information from other Johnson & Johnson companies (affiliates) for the purposes described here. Note that only the affiliates required to fulfill the individual purposes will receive the information.
  
• From healthcare professionals, patient advocacy groups, educational institutions and other business partners, which may be in the context of clinical research, market research, disease awareness campaigns, mentoring programs, training events, adverse events or managing complaints, etc. where you have consented to this sharing.
  
• From caregivers that might provide us with information about you in the context of a service or the submission of a product safety or quality complaint.
  
• From other third parties that would have the relevant authority to provide Personal Information related to you.
  
• From other third party information providers, including industry-dedicated services, such as, among others, MedScape, IQVIA, Veeva, Sermo, G-med and Google advertising network.
  
• Third parties with whom we jointly market a product.
  
• From publicly available sources, like social media networks. For example, when you post on your social media profiles, or in any other digital service in which you might be registered, about our company, our products and about different drugs and diseases in general, we may engage in social media listening.
  
• From your social media profiles, such as on LinkedIn, X, Instagram, Facebook and Medscape. For example, if you connect your social media account to your services account, you will share certain Personal Information from your social media account with us, such as your name, e-mail address, photo, and contacts or friends.

Unless we have collected your consent or we have another legal basis to collect it, we will receive only unidentified or aggregate information.

If you submit any Personal Information relating to another individual to us, for example if you are a caregiver or a healthcare professional and are providing us with information about a patient, you represent that you have the authority to do so as permitted by and complying with applicable law, and to permit us to use the information in accordance with this Privacy Statement.

What Personal Information do we collect about you and for which purposes do we process it?

It is important to us that you understand the types of Personal Information we collect, how we use that Personal Information and the legal basis for such collection, processing and use. Because these details vary across our different businesses and the individuals with whom we interact, we provide the charts below, which are tailored to your relationship with us.

In any event, unless we specifically request it, we ask that you not send us or disclose any special categories of Personal Information (sensitive Personal Information such as social security or government ID, racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background, or trade union membership) on or through our digital services or otherwise to us.

Healthcare Professionals

We collect and use Personal Information from healthcare professionals, researchers and other medical professionals who interact with us for such purposes as fostering innovation and partnerships, order fulfillment, clinical research, educational events and promoting our medical products.

In this context, we collect Personal Information such as your name, your contact information, services you engaged in, your preferences, your transaction history, your specialty, your practice/institution name, among others for the following purposes:

a) Customer relationship management, communication and marketing
To manage our relationship with you and communicate with you. Additionally, we want to understand how to improve our interactions and how to offer you relevant information both for educational and for promotional purposes.

b) Accomplishing our business purposes
To pursue our business purposes and goals, which imply the development of products and services and the continuous improvement of those products and services we already market. In this context, we need to understand how effective those products and services are in each of the markets in which we operate.

c) Comply with our contractual obligations
To honour and comply with the contractual agreements to which we are bound.

d) Comply with our legal obligations
To comply and better manage our legal obligations in the context of regulatory obligations and scientific research, monitoring the safety of our products, and complying with legal processes and applicable laws.

Patients, Prospective Patients and Caregivers

a) Provide our products, services and related support
We collect and use your Personal Information to offer and provide to you the products and services that you, your caregiver or your doctor have requested, or to provide the website features or other digital services that you use. Additionally, we will use your Personal Information to respond to your queries and requests.

b) Develop and improve our products, services and processes
We collect and use your Personal Information to develop and improve our products, services and processes, by means of, among others, market research studies, analysis to understand your preferences and interests or to recruit suitable patients to our clinical trials and studies.

c) Run our business effectively
We collect and use your Personal Information to ensure that our business is running effectively by means of, among others, assessing the effectiveness of our activities and operations or conducting audits to verify our internal processes.

d) Work with you
We collect and use your Personal Information to engage with patients, caregivers and related patient advocacy groups to get input into the development of our products and services.

e) Comply with our contractual obligations
To honour and comply with the contractual agreements to which we are bound.

f) Comply with our legal obligations
To comply and better manage our legal obligations in the context of regulatory obligations and scientific research, monitoring the safety of our products and complying with legal processes and applicable laws.

Suppliers, Service Providers and Visitors

We collect and use Personal Information from those individuals with whom we interact in other contexts, such as, individuals representing or acting in their own capacity as suppliers, service providers, wholesalers and distributors; shareholders; and visitors to our physical premises.

a) Comply with our contractual obligations
To honour and comply with the contractual agreements to which we are bound.

b) Comply with our legal obligations
To comply and better manage our legal obligations in the context of regulatory obligations and scientific research, monitoring the safety of our products and complying with legal processes and applicable laws.

c) Run our business effectively
We collect and use your Personal Information to ensure that our business is running effectively by means of, among others, assessing the effectiveness of our activities and operations, including security, or conducting audits to verify our internal processes.

d) Work with you
We collect and use your Personal Information to engage with suppliers, service providers and visitors to get input into the development of our products and services.

Reporters of Adverse Events or Product Quality Complaints

We collect and use Personal Information from those individuals that report a safety or product quality complaint to us or that are affected by such complaint in any way, in order to fulfil our obligation to monitor and guarantee the safety of our products.

a) Comply with our legal obligations
To comply and better manage our legal obligations in the context of regulatory obligations and scientific research, monitoring the safety of our products and complying with legal processes and applicable laws.

b) For reasons of public interest in the area of public health
To protect public health against serious threats to health or in order to ensure high standards of quality and safety of health care and of medicinal products or medical devices.

c) Develop and improve our products, services and processes
To prevent our products from being incorrectly used or applied and to improve them appropriately to enhance safety.

With whom do we share your Personal Information?

We may share your Personal Information with our affiliates and third parties. Disclosure of your data to our affiliates and third parties as described below may involve cross-border transfer of your data, including to the United States, where our company is headquartered.

The types of third parties we may share your Personal Information with include:

• Johnson & Johnson affiliates
  We may share your Personal Information with our affiliates to fulfill the purposes described in this Privacy Statement. Note that your information will only be shared with the affiliates needed for the specific applicable purpose.
  
• Third-party co-branding and co-marketing partners
  We may share your Personal Information with our third-party partners with whom we offer a co branded or co marketed promotion.
  
• Third-party service providers
  We may share your Personal Information with our third-party service providers, who provide services such as website hosting and moderating, mobile application hosting, data analysis, payment processing, order fulfillment, infrastructure provision, IT services, customer service, email and direct mail delivery services, auditing and other services.
• Vendors
  We may share your Personal Information with vendors we engage with directly or indirectly in the organization of local and international training and events, such as venues or transportation companies, as applicable.
• Third-party advertising partners (if you have provided consent)
  Where applicable, to improve the effectiveness of our communication with you and our marketing campaigns, we may share your data with our third-party advertising partners, including social media, medical journals and publishers, such as, but not limited to, Facebook, LinkedIn, X and Medscape.
• Research and collaboration, licensing and technology partners
  To enable clinical and medical research and collaboration, or healthcare technology innovation and development, your information may be shared with our research and collaboration partners, our licensing partners and our technology partners.
• Healthcare providers and healthcare professionals
  We may share your Personal Information with your healthcare providers and healthcare professionals.
• Posting and social sharing
  By using our digital services, you may elect to disclose Personal Information:
  
  • On profile pages, blogs, product reviews and other services to which you are able to post information and content (including our social media pages). Please note that any information you post or disclose through these services will become public and may be available to other users and the general public.
  • Through your social sharing activity. When you connect your services account to your social media account, you will share Personal Information with your friends associated with your social media account, with other users and with your social media account provider.
• Other situations
  
  • In the event of a reorganization, merger, divestiture, acquisition, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock, we may need to share your data with the third parties involved.
  • We may also use and disclose to third parties your information to enforce our terms and conditions; comply with legal process or applicable laws, which may include laws outside your country of residence; and in response to requests from public or government authorities, including authorities outside your country of residence.
  • For other legal reasons:
    
    • To ensure compliance with and enforce our terms and conditions and policies;
    • To protect our rights, privacy, safety or property, and/or that of our affiliates, you or others;
    • For audits, to verify that our internal processes function as intended and to address legal, regulatory or contractual requirements;
    • For fraud prevention and security monitoring purposes, for example, to detect and prevent cyberattacks or attempts to commit identity theft;
    • To comply with obligations relating to scientific research, such as when performing interventional clinical trials or obligations associated with manufacturing pharmaceutical products.
  • In connection with a divestiture or business transaction:
    
    • We may need to disclose or transfer your Personal Information to a third party in connection with any reorganization, merger (when a brand or one of our businesses with which you’ve shared personal data is sold to another company, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock [including in connection with any bankruptcy or similar proceedings]). In such events, we will ensure that the party receiving your Personal Information will abide by the terms of this Privacy Statement.
  • To aggregate and/or anonymize Personal Information so that it will no longer be considered Personal Information. We do so to generate other data for our use, which we may use and disclose for any purpose, as it no longer identifies you or any other individual; and
    
  • For data analysis, for example, to improve the efficiency of our services.

Where applicable laws require, we will obtain your consent for sharing your Personal Information with third parties.

Do we collect Personal Information from minors?

Johnson & Johnson collects Personal Information from minors in limited cases, subject to obtaining verified parental/guardian consent, as applicable. In processing the Personal Information of minors, we consider the age of majority as defined by the applicable country, as well as the type of communications we provide. If Personal Information about minors has been provided to us by mistake and you would like to request that such Personal Information be removed, please follow the instructions described in the Contact Us section.

What are your choices and your rights?

Your choices regarding our use and disclosure of your Personal Information

When processing is based on your consent, for example, for us to deliver marketing communications or newsletters or for us to share your Personal Information with our affiliates or with third-party partners, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal by contacting us as described in the Contact Us section.

We will seek to comply with your request(s) as soon as reasonably practicable. Please note that in these cases, we may not be able to directly remove your Personal Information from the databases of our affiliates or third party partners with which we have already shared your information, and in such cases, we will notify our affiliates or third party partners of your request. Please also note that if you withdraw your consent for processing for receiving marketing communications from us, we may still send you communications that are necessary for managing our relationship with you, such as transactional communications, account authentication, scheduling a meeting and responding to your inquiries. Processing your Personal Information for these purposes is necessary for us to fulfill our contractual obligations and provide our services to you.

Your rights to access, correct, restrict, delete, object or request more information about your Personal Information, and data portability

You have the right to:

• Access, rectify, restrict, delete or object to processing (including profiling) on grounds relating to your particular situation in certain cases; object to the processing for direct marketing purposes, which includes profiling to the extent that it is related to such direct marketing; opt-out of processing your personal data for targeted advertising, sale or profiling; or opt-out of automated individual decision-making.
  
• Obtain more information about the Personal Information we collected, used, shared or sold (as defined by applicable law) or otherwise disclosed.

How to make a request

Please follow the instructions described in the Contact Us section. If you are using our online services, you may also log on to your account to update your profile.

We will respond to your request as soon as reasonably practicable and consistent with applicable law. If circumstances cause any delay in our response, you will be promptly notified and provided with a date for our response.

What do we do in case we share your Personal Information internationally?

Your Personal Information may be stored and processed in any country where we have facilities or service providers. By the use of our services or by providing consent to us (where required by law), your information may be transferred to countries outside of your country of residence which may provide for different data protection rules. Nonetheless, appropriate contractual and other measures are in place, in accordance with local requirements or applicable law, to protect Personal Information when it is transferred to our affiliates or third parties in other countries outside your country of residence.

How do we protect your Personal Information?

We take utmost care of your Personal Information, and we are responsible for taking reasonable steps to protect your Personal Information from unauthorized access, amendment or disclosure and from improper use, loss or intrusion. We use reasonable organizational, technical and administrative measures designed to protect Personal Information under our control. Where appropriate, these can include technical solutions like firewalls, intrusion detection or encryption and organizational and physical controls such as training staff on identification of data incidents, locked filing cabinets where data may be stored, if at all, and risks or access restrictions.

To determine the level of protection required in each case, we appropriately assess the nature of your Personal Information together with the risk of a security incident occurring.

If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you have with us has been compromised), please immediately notify us following the instructions in the Contact Us section.

For how long do we retain your Personal Information?

We will retain your Personal Information for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law, or as stated in a privacy and consent notice at the time of your consent, and prior to collection of the information.

The criteria used to determine our retention periods include:

(i) the length of time we have an ongoing relationship with you and provide a service to you;

(ii) whether there is a legal/regulatory obligation to which we are subject; and

(iii) whether retention is advisable in light of our legal position (such as in regard to certification requirements, applicable statutes of limitations, litigation or regulatory investigations).

What to consider when making use of the third-party sites or services we work with

Our services may contain links of third parties, including to those with whom you might have created your own account to allow you to make a payment to us in the context of a service previously requested.

This Privacy Statement does not address, and we are not responsible for, the privacy, information or other practices of any third parties, including any third party operating any site, app or other online service that is available through our digital services or to which our digital services contain a link.

Supplemental notice for Canada, and Contact Details

Additional data

In Canada, some of our programs include clinical studies and drug trials, and other cases where we may provide Patient Support Programs that could involve reimbursement of costs and travel arrangements associated with them. In this case, we will collect logistical data for the arrangements, and financial information from you (banking information we need to pay you).

First Nations data

We are committed to the governance of data in respect of First Nations peoples. We apply the principles of Ownership, Control, Access Possession (OCAP) as espoused by the First Nations Information Governance Council (see fnigc.ca). If you are an authorised representative of a First Nation and have queries or specific questions regarding the Nation’s data, please use the Contact Us details below so we can address them.

Contact Us

If you have privacy questions or a privacy complaint, please contact our Data Privacy Officer. If we are unable to resolve your complaint to your satisfaction you may lodge a complaint with the office of the Canadian Privacy Commissioner. However, please contact us prior to doing that so we can readily address your concern. Our Canadian Data Privacy Officer is Paul Lewis, and he may be contacted by email at RA-CanadaPrivacy@its.jnj.com.