Privacy Policy

Effective as of February 16, 2026.

This “Privacy Policy” describes the privacy practices of Bionano Genomics, Inc. and our subsidiaries and affiliates (collectively, “Bionano”, “we”, “us”, or “our”) in connection with the www.bionano.com website, any other website that we own or control and which posts or links to this Privacy Policy (collectively, the “Service”), and our social media, direct marketing activities, live events, and other activities described in this Privacy Policy.

This Privacy Policy does not apply to personal information or other information that we handle on behalf of our business customers. Our use of that information is restricted by our agreements with those customers. If you have questions about personal information that our customers share with us, we encourage you to contact the relevant customer.

The Service is designed and intended for businesses and their representatives. We do not offer products or services for use by individuals for their personal, familial or household purposes. Accordingly, we treat all personal information we collect as pertaining to individuals in their capacities as representatives of the relevant businesses and not their individual capacities

NOTICE AT COLLECTION:  For residents of California, more information about the data we collect is available in our Notice at Collection and Your California Privacy Rights, which is found here.

NOTICE TO EUROPEAN USERS: Please see the Notice to European Users section for additional information for individuals located in the European Economic Area or United Kingdom (which we refer to as “Europe”, and “European” should be understood accordingly) below.

Table of Contents

Personal Information We Collect

How We Use Your Personal Information

How We Share Your Personal Information

Your Choices

Other Sites, Mobile Applications and Services

Security Practices

International Data Transfers

Children

Changes to this Privacy Policy

How to Contact Us

Your California Privacy Rights

Notice to European Users

Cookie Policy

PERSONAL INFORMATION WE COLLECT

Information you provide to us. Personal information you provide to us through the Service or other activities may include:

• Business and personal contact information, such as your first and last name, email and mailing addresses, phone number, professional title and company name.
• Content you choose to upload to the Service, such as text, images, audio, and video, along with the metadata associated with the files you upload.
• Profile information, such as your username and password that you may set to establish an online account with us.
• Transactional data, such as information relating to or needed to complete your orders on or through the Service, including order numbers and transaction history.
• Registration information, such as information that may be related to a service, an account or an event for which you register.
• Communications data based on our exchanges with you, including when you contact us through the Service, social media, or otherwise.
• Feedback or correspondence, such as information you provide when you contact us with questions, feedback, or otherwise correspond with us.
• Demographic information, such as your city, state, country of residence, and postal code.
• Usage information, such as information about how you use the Service and interact with us, including information associated with any content you upload to the websites or otherwise submit to us, and information you provide when you use any interactive features of the Service.
• Marketing information, such as information including your preferences for receiving communications about our activities, events, and publications, and details about how you engage with our communications.
• Job application data, such as information you submit in connection with an application for a job (including information in a CV, resume or otherwise collected through the job application process).
• Other information that we may collect that is not specifically listed here but which we will use in accordance with this Privacy Policy or as otherwise disclosed at the time of collection.

Information we obtain from social media platforms. We may maintain pages for Bionano on social media platforms, such as LinkedIn, X (formerly Twitter), Instagram, and other third-party platforms. When you visit or interact with our pages on those platforms, the platform provider’s privacy policy will apply to your interactions and their collection, use and processing of your personal information. You or the platforms may provide us with information through the platforms, and we will treat such information in accordance with this Privacy Policy.

Third-party sources. We may combine personal information we receive from you with personal information we obtain from other sources, such as:

• Public sources, such as government agencies, public records, social media platforms, and other publicly available sources.
• Private sources, such as data providers, social media platforms and data licensors.
• Our affiliate partners, such as our affiliate network provider and publishers, influencers, and promoters who participate in our paid affiliate programs.
• Marketing partners, such as joint marketing partners and event co-sponsors.

Automatic data collection.  We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with the Service, our communications and other online services, such as:

• Device data,such as your computer or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., Wi-Fi, LTE, 3G), and general location information such as city, state or geographic area.
• Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths between pages or screens, information about your activity on a page or screen, access times and duration of access, and whether you have opened our emails or clicked links within them.
• Communication interaction data suchas your interactions with our email communications (e.g., whether you open and/or forward those emails) – we may do this through use of pixel tags (which are also known as clear GIFs), which may be embedded invisibly in our emails.

Cookies and similar technologies. Some of our automatic data collection is facilitated by cookies and similar technologies. For more information, see our Cookie Notice. We will also store a record of your preferences in respect of the use of these technologies in connection with the Service.  Some of the automatic collection described above is facilitated by the following technologies:

• Cookies, which are small text files that websites store on user devices and that allow web servers to record users’ web browsing activities and remember their submissions, preferences, and login status as they navigate a site. Cookies used on our sites include both “session cookies” that are deleted when a session ends, “persistent cookies” that remain longer, “first party” cookies that we place and “third party” cookies that our third-party business partners and service providers place.
• Local storage technologies, like HTML5, that provide cookie-equivalent functionality but can store larger amounts of data on your device outside of your browser in connection with specific applications.
• Web beacons, also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.

Referrals

Users of the Service may have the opportunity to refer colleagues or other contacts to us. If you share someone else’s contact details with us, you may only submit a referral if you have permission to provide it to us so that we may contact that person.

HOW WE USE YOUR PERSONAL INFORMATION

We use your personal information for the following purposes and as otherwise described in this Privacy Policy or at the time of collection:

To operate the Service. We use your personal information to:

• provide, operate and improve the Service;
• provide information about our products and services;
• establish and maintain your user profile on the Service;
• communicate with you about the Service, including by sending you announcements, updates, security alerts, and support and administrative messages;
• communicate with you about events or contests in which you participate;
• understand your needs and interests, and personalize your experience with the Service and our communications;
• provide support and maintenance for the Service; or
• respond to your requests, questions, and feedback.

For research, development, and to improve the Service. We analyze use of the Service to improve the Service and to develop new products and services, including by studying user demographics and use of the Service.
To send you marketing and promotional communications.  We, our service providers and our third-party advertising partners may collect and use your personal information for marketing and advertising purposes:

• Direct marketing. We may send you direct marketing communications.  You may opt-out of our marketing communications as described in the Opt-out of marketing section below. 
• Interest-based advertising.  Our third-party advertising partners may use cookies and similar technologies to collect information about your interaction (including the data described in the automatic data collection section above) with the Service, our communications and other online services over time, and use that information to serve online ads that they think will interest you.  This is called interest-based advertising. We may also share information about our users with these companies to facilitate interest-based advertising to those or similar users on other online platforms. You can learn more about your choices for limiting interest-based advertising in the Your choices section of our Cookie Notice.

Compliance and protection.  We may use your personal information to:

• comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities;
• protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims);
• audit our internal processes for compliance with legal and contractual requirements or our internal policies;
• enforce the terms and conditions that govern the Service; and
• prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.

To manage our recruiting and process job applications. We may use personal information, such as information submitted to us in a job application, to facilitate our recruitment activities and process job applications, such as by evaluating a candidate for a job, and monitoring recruitment statistics.

With your consent. In some cases we may specifically ask for your consent to collect, use or share your personal information, such as when required by law.

To create anonymous, aggregated or de-identified data. We may create anonymous, aggregated or de-identified data from your personal information and other individuals whose personal information we collect. We make personal information into anonymous, aggregated or de-identified data by removing or not utilizing information that makes the data personally identifiable to you. We may use this anonymous, aggregated or de-identified data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and to promote our business.

Cookies and similar technologies. In addition to the other uses included in this section, we may use the Cookies and similar technologies described above for the following purposes:

• Technical operation. To allow the technical operation of the Service, such as by remembering your selections and preferences as you navigate the site, and whether you are logged in when you visit password protected areas of the Service.
• Functionality. To enhance the performance and functionality of our services.
• Advertising. To help our third-party advertising partners collect information about how you use the Service and other online services over time, which they use to show you ads on other online services they believe will interest you and measure how the ads perform.  For example, we may use tracking technologies from CasaleMedia and TapAd to tailor advertising to you.
• Analytics. To help us understand user activity on the Service, including which pages are most and least visited and how visitors move around the Service, as well as user interactions with our emails. For example, we use Google Analytics for this purpose. You can learn more about Google Analytics and how to prevent the use of Google Analytics relating to your use of our sites here: https://tools.google.com/dlpage/gaoptout?hl=en.

Retention. We generally retain personal information to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for fraud prevention purposes.  To determine the appropriate retention period for personal information, we may consider factors such as the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
When we no longer require the personal information we have collected about you, we may either delete it, anonymize it, or isolate it from further processing.

HOW WE SHARE YOUR PERSONAL INFORMATION

We do not share your personal information with third parties without your consent, except in the following circumstances or as described in this Privacy Policy:

Affiliates. We may share your personal information with our corporate parent, subsidiaries, and affiliates, for purposes consistent with this Privacy Policy.

Service providers. We may share your personal information with third party companies and individuals to provide the Service or help us operate our business (such as customer support, hosting, analytics, email delivery, marketing, and database management services).

Professional advisors. We may disclose your personal information to professional advisors, such as lawyers, bankers, auditors, and insurers, where necessary in the course of the professional services that they render to us.

Advertising partners.  Third-party advertising companies for the interest-based advertising purposes described above.

Authorities and others. Law enforcement, government authorities, and private parties

Business and marketing partners. Third partieswith whom we co-sponsor events or promotions, with whom we jointly offer products or services, or whose products or services may be of interest to you.

Business transfers.   We may disclose personal information in the context of actual or prospective business transactions (e.g. investments in Bionano, financing of Bionano, or the sale, transfer or merger of all or part of our business, assets or shares), for example, we may need to share certain personal information with prospective counterparties and their advisers. We may also disclose your personal information to an acquirer, successor, or assignee of Bionano as part of any merger, acquisition, sale of assets, or similar transaction, and/or in the event of an insolvency, bankruptcy, or receivership in which personal information is transferred to one or more third parties as one of our business assets.

YOUR CHOICES

In this section, we describe the rights and choices available to all users. Users who are located within California (or other U.S. states if an as applicable) or Europe can find additional information about their rights below.

Access or update your information. If you have registered for an account with us, you may review and update certain personal information in your account profile by logging into the account.

Opt out of marketing communications. You may opt out of marketing-related emails by following the opt-out or unsubscribe instructions at the bottom of the email, or by contacting us at privacy@bionano.com. You may continue to receive service-related and other non-marketing emails.

Cookies and browser web storage. For information on how to disable cookies and similar technologies used in the Service, see our Cookie Policy. 

Do not track. Some mobile and web browsers transmit "do-not-track" signals. Because of differences in how web browsers incorporate and activate this feature, it is not always clear whether users intend for these signals to be transmitted, or whether they even are aware of them. We currently do not take action in response to these signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

Global Privacy Control. You may exercise your opt-out right by broadcasting an opt-out preference signal, called the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). You can learn more about the Global Privacy Control here.  Please note that your request to opt-out of sale/sharing will be linked to your browser identifier only. If you use a different computer or Internet browser to access our sites, you will need to renew your opt-out request.

Choosing not to share your personal information. Where we are required by law to collect your personal information, or where we need your personal information in order to provide the Service to you, if you do not provide this information when requested (or you later ask to delete it), we may not be able to provide you with our Service. We will tell you what information you must provide to receive the Service by designating it as required at the time of collection or through other appropriate means.

OTHER SITES, MOBILE APPLICATIONS AND SERVICES

The Service may contain links to other websites, mobile applications, and other online services operated by third parties. These links are not an endorsement of, or representation that we are affiliated with, any third party. In addition, our content may be included on web pages, in mobile applications or on online services that are not associated with us. We do not control third party websites, mobile applications or online services, and we are not responsible for their actions. Other websites, mobile applications and services follow different rules regarding the collection, use and sharing of your personal information. We encourage you to read the privacy policies of the other websites, mobile applications and online services that you use.

SECURITY PRACTICES

We employ a number of organizational, technical and physical safeguards designed to protect the personal information we collect. However, security risk is inherent in all internet and information technologies and we cannot guarantee the security of your personal information.

INTERNATIONAL DATA TRANSFERS

Our headquarters is in the United States and we have service providers in other countries. Your personal information may be transferred to the United States or other locations outside of your state, province, or country where privacy laws may not be as protective as those in your state, province, or country.

Users in Europe should read the important information provided below about the transfer of personal information outside of the European Union.

CHILDREN

The Service is not directed to, and we do not knowingly collect personal information from, anyone under the age of 16. If a parent or guardian becomes aware that his or her child has provided us with information without their consent, he or she should contact us.  If we learn that we have collected personal information through the Service from a child without the consent of the child’s parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.

CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service. We may (and if required by law will) also provide notification of changes in another way that we believe is reasonably likely to reach you, such as via e-mail (if you have an account where we have your contact information) or another manner through the Service.

Any modifications to this Privacy Policy will be effective upon our posting the new terms and/or upon implementation of the new changes on the Service (or as otherwise indicated at the time of posting). In all cases, your continued use of the Service after the posting of any modified Privacy Policy indicates your acceptance of the modified Privacy Policy

HOW TO CONTACT US

Please direct any questions or comments about this Privacy Policy or privacy practices to  privacy@bionano.com. You may also write to us via postal mail at:

Bionano Genomics, Inc.
Attn: Legal – Privacy
9540 Towne Centre Drive, Suite 100
San Diego, CA 92121

NOTICE AT COLLECTION AND YOUR CALIFORNIA PRIVACY RIGHTS
This section describes how we collect, use, and share Personal Information of California residents in our capacity as a “business” under the California Consumer Privacy Act (“CCPA”) and their rights with respect to that Personal Information.  For purposes of this section, the term “Personal Information” has the meaning given in the CCPA but does not include information exempted from the scope of the CCPA.  In some cases, we may provide a different privacy notice to certain categories of California residents, such as job applicants, in which case that notice will apply instead of this section.

Your California privacy rights. California residents have the rights listed below under the CCPA. However, these rights are not absolute, and in certain cases we may dcline your request as permitted by law. ay decline your request as permitted by law.

• Information.  You can request the following information about how we have collected and used your Personal Information during the past 12 months:
  • The categories of Personal Information that we have collected.
  • The categories of sources from which we collected Personal Information.
  • The business or commercial purpose for collecting and/or selling Personal Information.
  • The categories of third parties with which we share Personal Information.
  • The categories of Personal Information that we sold or disclosed for a business purpose.
  • The categories of third parties to whom the Personal Information was sold or disclosed for a business purpose.
• Access.  You can request a copy of the Personal Information that we have collected about you during the past 12 months.
• Deletion.  You can ask us to delete the Personal Information that we have collected from you.
• Opt-out of sales.  You can opt-out of any sale of your Personal Information.
• Nondiscrimination.  You are entitled to exercise the rights described above free from discrimination as prohibited by the CCPA. 

Exercising your right to information, access and deletion. You may submit requests to exercise your right to information, access or deletion by calling us at 1-858-888-7600, or via email to  privacy@bionano.com. 

Notice of right to opt-out of the “sale” of your Personal Information.  Like many companies, we use services that help deliver interest-based ads to you.  Our use of some of these services may be classified under California law as a “sale” of your Personal Information to the advertising partners that provide the services because they collect information from our users (e.g., device data and online activity data) to help them serve ads more likely to interest you.  You can request to opt-out out of this “sale” of your personal information here: Do Not Sell My Personal Information, where you will find instructions on opting-out of the use of your information for interest-based advertising.

We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it.
We will need to verify your identity to process your information, access and deletion requests and reserve the right to confirm your California residency.  To verify your identity, we may require government identification, a declaration under penalty of perjury or other information. 
Your authorized agent may make a request on your behalf upon our verification of the agent’s identity and our receipt of a copy of a valid power of attorney given to your authorized agent pursuant to California Probate Code Sections 4000-4465.  If you have not provided your agent with such a power of attorney, you must provide your agent with written and signed permission to exercise your CCPA rights on your behalf, provide the information we request to verify your identity, and provide us with confirmation that you have given the authorized agent permission to submit the request.

Personal information that we collect, use and disclose. The chart below summarizes the Personal Information we collect by reference to the categories of Personal Information specified in the CCPA (Cal. Civ. Code §1798.140) and describes our practices currently and during the 12 months preceding the effective date of this Privacy Policy. The terms in the chart refer to the categories of information, sources, purposes and third parties described above in this Privacy Policy in more detail. Information you voluntarily provide to us, such as in free-form webforms, may contain other categories of personal information not described below.

Statutory category / Personal Information ("PI") we collect in this category	Source of PI	Business/ commercial purpose for PI collection	Categories of third parties to whom we "disclose" PI for a business purpose	Categories of third parties to whom we "sell" PI
Identifiers (online) - Contact data - Profile data - Data about others	- You - Third-party sources	-Service delivery - Research & - development - Marketing & advertising - Compliance & protection	- Affiliates - Service providers - Advertising partners - Professional advisors - Authorities and others - Business transferees - Business and marketing partners	- Advertising partners (to facilitate online advertising) - Business and marketing partners
Identifiers (other) - Profile data - Device data	- You - Third-party sources - Automatic collection	- Service delivery - Research & development - Marketing & advertising - Compliance & protection	- Affiliates Service providers - Advertising partners - Professional advisors - Authorities and others - Business transferees - Business and marketing partners	- Advertising partners (to facilitate online advertising) - Business and marketing partners
California Customer Records (as defined in California Civil Code §1798.80) - Contact data - Transactional data - Financial data - User-generated content data - Data about others	- You - Third-party sources	- Service delivery - Research & development - Marketing & advertising - Compliance & protection	- Affiliates - Service providers - Advertising partners - Professional advisors - Authorities and others - Business transferees - Business and marketing partners - Other users and the public	- Advertising partners (to facilitate online advertising) - Business and marketing partners
Commercial Information - Transactional data - Financial data - Marketing data - Online activity data	- You - Third-party sources - Automatic collection	- Service delivery - Research & development - Marketing & advertising - Compliance & protection	- Affiliates - Service providers - Advertising partners - Professional advisors - Authorities and others - Business transferees - Business and marketing partners	- Advertising partners (to facilitate online advertising) - Business and marketing partners
Financial Information - Transactional data - Financial data	You - Third-party sources	- Service delivery - Research & development - Marketing & advertising - Compliance & protection	- Affiliates - Professional advisors - Authorities and others - Business transferees	None
Internet or Network Information - Marketing data - Device data - Online activity data	- Automatic collection	- Service delivery - Research & development - Marketing & advertising - Compliance & protection	- Affiliates - Service providers - Advertising partners - Professional advisors - Authorities and others - Business transferees - Business and marketing partners	- Advertising partners (to facilitate online advertising) - Business and marketing partners
Inferences May be derived from: - Contact data - Profile data - Transactional data - Financial data - Marketing data - User-generated content data - Device data - Online activity data	N/A	- Service delivery - Research & development - Marketing & advertising - Compliance & protection	- Affiliates - Service providers - Advertising partners - Authorities and others - Business transferees - Business and marketing partners	- Advertising partners (to facilitate online advertising) - Business and marketing partners
Protected Classification Characteristics We do not intentionally collect this information but it may be revealed in identity data or other information we collect	N/A	N/A	N/A	N/A
Sensory Information - User-generated content (images, video or audio)	You	- Service delivery - Research & development - Marketing & advertising - Compliance & protection	- Affiliates - Service providers - Advertising partners - Third parties designated by you - Authorities and others - Business transferees - Business and marketing partners - Other users and the public	No

Your California privacy rights.  California residents may send us requests to privacy@bionano.com. for identification of third parties to whom we have disclosed your personal information during the preceding calendar year for such third parties’ direct-marketing purposes. In your request, you must include the statement “Shine the Light Request," and provide your first and last name and mailing address and certify that you are a California resident. We reserve the right to require additional information to confirm your identity and California residency.  Please note that we will not accept requests via telephone, mail, or facsimile, and we are not responsible for notices that are not labeled or sent properly, or that do not have complete information.

NOTICE TO EUROPEAN USERS

The information provided in this section applies only to individuals in the European Economic Area and United Kingdom (i.e., “Europe” as defined at the top of this Privacy Policy).

Personal information. References to “personal information” in this Privacy Policy are equivalent to “personal data” as defined in the GDPR – i.e., information about individuals from they are either directly identified or can be identified.

Controller and Representative. Bionano Genomics, Inc. is the controller in respect of the processing of your personal information covered by this Privacy Policy for purposes of European data protection legislation (i.e., the EU GDPR and the so-called ‘UK GDPR’ (as and where applicable, the “GDPR”)).  

If you are located in the EEA and have questions about your personal data or would like to request to access, update or delete it, you may contact our representative at:

Bird & Bird GDPR Representative Services SRL Zweigniederlassung Düsseldorf (Germany)

c/o Bird & Bird LLP

Carl-Theodor-Straße 6

40213 Düsseldorf

eurepresentative.bionano@twobirds.com

If you are located in the United Kingdom and have questions about your personal data or would like to request to access, update or delete it, you may contact our representative at:

Bird & Bird GDPR Representative Services UK

12 New Fetter Lane

London

EC4A 1JP

United Kingdom

UKrepresentative.bionano@twobirds.com

Legal bases for processing. 
In respect of each of the purposes for which we use your personal information, the GDPR requires us to ensure that we have a “legal basis” for that use.
Our legal bases for processing your personal information described in this Privacy Policy are listed below.

• Where we need to perform a contract, we are about to enter into or have entered into with you (“Contractual Necessity”).
• Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests (“Legitimate Interests”). More detail about the specific legitimate interests pursued in respect of each Purpose we use your personal information for is set out in the table below.
• Where we need to comply with a legal or regulatory obligation (“Compliance with Law”).
• Where we have your specific consent to carry out the processing for the Purpose in question (“Consent”).

We have set out below, in a table format, the legal bases we rely on in respect of the relevant Purposes for which we use your personal information – for more information on these Purposes and the data types involved, see ‘How we use your personal information’

Purpose	Categories of personal information involved	Legal basis
Service delivery	- Contact data - Demographic data - Profile Data - Communications data - Transactional Data - Relationship data - Content You Choose to Upload to the Service - Device data	- Contractual Necessity
Security	- Contact data - Device data - Online activity data	- Compliance with Law - Legitimate Interests. We have a legitimate interest in ensuring the ongoing security and proper operation of our Service and associated IT services, systems and networks.
Service personalization	- Contact data - Demographic data - Profile data - Device data - Online activity data - Communications data	- Legitimate Interests. We have a legitimate interest in providing you with a good service, which is personalised to you and that remembers your selections and preferences. - Consent, in respect of any optional cookies used for this purpose.
Direct marketing	- Contact data - Demographic data, - Profile data  - Communications data   - Transactional data - Marketing data	- Legitimate Interests. We have a legitimate interest in promoting our operations and goals as an organisation and sending marketing communications for that purpose. - Consent, in circumstances or in jurisdictions where consent is required under applicable data protection laws to the sending of any given marketing communications.
Interest-based advertising	- Demographic data - Device data - Online activity data	- Consent
Events, promotions and contests	- Promotion data - Contact data - Demographic data - Profile Data - Communications data	- Contractual Necessity to administer the promotions and contests in accordance with the terms or rules thereof (including communicating with you as and where necessary) - In respect of promoting these promotions and contests: Legitimate Interests – we have a -- legitimate interest in promoting these promotions and contests, including associated publicising of our business and operations. -- Consent – in circumstances or in jurisdictions where consent is required under applicable data protection laws to the sending of any given promotional communications.
Newsletter and communications	- Contact data - Demographic data - Profile data  - Communications data   - Transactional data - Marketing data	- Legitimate Interests. We have a legitimate interest in promoting our operations and goals as an organisation, including sending through our newsletter and other communications. - Consent, in circumstances or in jurisdictions where consent is required under applicable data protection laws to the sending of any given communications, including our newsletter.
Research and development	- Demographic data - Device data - Online activity data - Profile data  - Communications data   - Transactional data - Marketing data	Legitimate interests. We have a legitimate interest in improving and developing our Service and its features and functionalities, as well as our business more generally.
Service analytics	- Demographic data - Device data - Online activity data	-Consent
Compliance with law and co-operation with authorities	- Job application data - Contact data - Demographic data	- Compliance with Law. - Legitimate interest. Where Compliance with Law is not applicable, we and any relevant third parties have a legitimate interest in participating in, supporting and following legal process and requests, including through co-operation with authorities.
Protection and enforcement of rights etc.	- Any and all data types relevant in the circumstances	- Compliance with Law. - Legitimate interest. We and any relevant third parties have a legitimate interest of ensuring the protection, maintenance and enforcement of our and their rights, property, and/or safety.
Data sharing in the context of corporate events	- Any and all data types relevant in the circumstances	- Legitimate interest. We have legitimate interest, and believe it is also in your interests, that we are able to take steps to ensure that our Services and how we use Personal Information is as un-privacy intrusive as possible.
To create aggregated, de-identified and/or anonymized data	- Any and all data types relevant in the circumstances	- Legitimate interest. We have legitimate interest, and believe it is also in your interests, that we are able to take steps to ensure that our Services and how we use Personal Information is as un-privacy intrusive as possible.
Further uses	- Any and all data types relevant in the circumstances	- The original legal basis relied upon, if the relevant further use is compatible with the initial purpose for which the Personal Information was collected. - Consent, if the relevant further use is not compatible with the initial purpose for which the personal information was collected.

Sensitive personal information. We ask that you not provide us with any sensitive personal information (e.g., information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) on or through the Service, or otherwise to us. If you provide us with any sensitive personal information to us when you use the Service, you must consent to our processing and use of such sensitive personal information in accordance with this Privacy Policy. If you do not consent to our processing and use of such sensitive personal information, you must not submit such sensitive personal information through our Service.

Retention 

We retain personal information for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for Compliance and protection purposes. 

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

When we no longer require the personal information we have collected about you, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible. If we anonymize your personal information (so that it can no longer be associated with you), we may use this information indefinitely without further notice to you.

No Automated Decision-Making and Profiling. As part of the Service, we do not engage in automated decision-making and/or profiling, which produces legal or similarly significant effects.

Your rights

European data protection laws give you certain rights regarding your personal information. If you are located within Europe, you may ask us to take the following actions in relation to your personal information that we hold:

• Access. Provide you with information about our processing of your personal information and give you access to your personal information.
• Correct. Update or correct inaccuracies in your personal information.
• Delete. Delete your personal information.
• Transfer. Transfer a machine-readable copy of your personal information to you or a third party of your choice.
• Restrict. Restrict the processing of your personal information.
• Object. Object to our reliance on our legitimate interests as the basis of our processing of your personal information that impacts your rights.

You may submit these requests by email to privacy@bionano.com. or our postal address provided above. We may request specific information from you to help us confirm your identity and process your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions.

Your Right to Lodge a Complaint with your Supervisory Authority. In addition to your rights outlined above, if you are not satisfied with our response to a request you make, or how we process your personal information, you can make a complaint to the data protection regulator in your habitual place of residence.

• For users in the European Economic Area – the contact information for the data protection regulator in your place of residence can be found here: https://edpb.europa.eu/about-edpb/board/members_en
• For users in the UK – the contact information for the UK data protection regulator is below:

The Information Commissioner’s Office

Water Lane, Wycliffe House

Wilmslow - Cheshire SK9 5AF

Tel. +44 303 123 1113

Website: https://ico.org.uk/make-a-complaint/

Data Processing outside EuropeWe are a U.S.-based company and many of our service providers, advisers, partners or other recipients of data are also based in the U.S. This means that, if you use the Service, your personal information will necessarily be accessed and processed in the U.S. It may also be provided to recipients in other countries outside Europe. 
It is important to note that that the US is not the subject of an ‘adequacy decision’ under the GDPR – basically, this means that the U.S. legal regime is not considered by relevant European bodies to provide an adequate level of protection for personal information, which is equivalent to that provided by relevant European laws.
Where we share your personal information with third parties who are based outside Europe, we try to ensure a similar degree of protection is afforded to it by making sure one of the following mechanisms is implemented:
Transfers to territories with an adequacy decision. We may transfer your personal information to countries or territories whose laws have been deemed to provide an adequate level of protection for personal information by the European Commission or UK Government (as and where applicable) (from time to time).
Transfers to territories without an adequacy decision.
We may transfer your personal information to countries or territories whose laws have notbeen deemed to provide such an adequate level of protection (e.g. the U.S., see above). 
However, in these cases:
we may use specific appropriate safeguards, which are designed to give personal information effectively the same protection it has in Europe – for example, standard-form contracts approved by relevant authorise for this purpose; or
in limited circumstances, we may rely on an exception, or ‘derogation’, which permits us to transfer your personal information to such country despite the absence of an ‘adequacy decision’ or ‘appropriate safeguards’ – for example, reliance on your explicit consent to that transfer. 
You may contact us if you want further information on the specific mechanism used by us when transferring your personal information out of Europe.

COOKIE POLICY
This Cookie Policy explains how Bionano Genomics, Inc. (“Bionano”, “we”, “us” or “our”) uses cookies and similar technologies in connection with the www.bionano.com website and any other website that we own or control and which posts or links to this Cookie Policy (collectively, the “Sites”).
What are cookies?
Cookies are small data files that are placed on your computer or mobile device when you visit a website. Cookies serve different purposes, like helping us understand how a site is being used, letting you navigate between pages efficiently, remembering your preferences and generally improving your browsing experience.
Our Sites may use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your computer or mobile device until you delete them).
We use two broad categories of cookies: (1) first party cookies, served directly by us to your computer or mobile device, which we use to recognize your computer or mobile device when it revisits our Sites; and (2) third party cookies, which are served by service providers or business partners on our Sites, and can be used by these parties to recognize your computer or mobile device when it visits other websites. Third party cookies can be used for a variety of purposes, including site analytics, advertising, and social media features.

What types of cookies and similar tracking technologies does Bionano use on the Sites?

On the Sites, we use cookies and other tracking technologies in the following categories described in the table below.

Type	Description	Who serves the cookies	How to control them
Advertising	These cookies are used by advertising companies to collect information about how you use our Sites and other websites over time. These companies use this information to show you ads they believe will be relevant to you within our Service and elsewhere, and to measure how the ads perform.	Google Doubleclick Google AdRoll (NextRoll)   Tapad   Casale Media   X (formerly Twitter) Pubmatic   LinkedIn	You can opt-out of Google Doubleclick cookies here. You can opt out of Google AdRoll cookies here. You can opt out of Tapad cookies here. You can opt out of Casale Media cookies here. You can opt out of X cookies here. You can opt out of Pubmatic cookies here. You can opt out of LinkedIn cookies here. See ‘your choices’ below.
Analytics	These cookies help us understand how our Service is performing and being used. These cookies may work with web beacons included in emails we send to track which emails are opened and which links are clicked by recipients.	Google Analytics	See ‘your choices’ below.   Google Analytics uses its own cookies. You can find out more information about Google Analytics cookies and how Google protects your data here. You can prevent the use of Google Analytics relating to your use of our Sites by downloading and installing a browser plugin available here.
Essential	These cookies are necessary to allow the technical operation of our Service (e.g., they enable you to move around on a website and to use its features).	Cloudflare Osano Wordpress	See ‘your choices’ below.

Other technologies
In addition to cookies, our Sites may use other technologies, such as Flash technology or pixel tags to collect information automatically.
Browser Web Storage
We may use browser web storage (including via HTML5), also known as locally stored objects (“LSOs”), for similar purposes as cookies. Browser web storage enables the storage of a larger amount of data than cookies. Your web browser may provide functionality to clear your browser web storage.

Flash Technology

We may use Flash cookies (which are also known as Flash Local Shared Object (“Flash LSOs”)) on our Sites to collect and store information about your use of our Sites. Unlike other cookies, Flash cookies cannot be removed or rejected via your browser settings. If you do not want Flash LSOs stored on your computer or mobile device, you can adjust the settings of your Flash player to block Flash LSO storage using the tools contained in the Website Storage Settings Panel. You can also control Flash LSOs by going to the Global Storage Settings Panel and following the instructions. Please note that setting the Flash Player to restrict or limit acceptance of Flash LSOs may reduce or impede the functionality of some Flash applications, including, potentially, Flash applications used in connection with our Sites.

Your choices

Your options for controlling what information cookies and similar technologies collect about you include:

• Blocking cookies in your browser.  Most browsers let you remove or reject cookies.  To do this, follow the instructions in your browser settings.  Many browsers accept cookies by default until you change your settings.  Please note that if you set your browser to disable cookies, the Sites may not work properly.  For more information about cookies, including how to see what cookies have been set on your device and how to manage and delete them, visit www.allaboutcookies.org.  If you do not accept our cookies, you may experience some inconvenience in your use of our Sites. For example, we may not be able to recognize your computer or mobile device and you may need to log in every time you visit our Sites.
• Third-party opt-out option.  You can opt-out of interest-based advertising through some of the third parties listed in the chart above by using the corresponding third-party opt-out tool provided in the chart.
• Industry association opt-outs.  You may opt out of receiving interest-based advertising on websites through members of the Network Advertising Initiative by clicking here or the Digital Advertising Alliance by clicking here. You may opt out of receiving targeted advertising in mobile apps through participating members of the Digital Advertising Alliance by installing the AppChoices mobile app, available here, and selecting the user’s choices. Please note that we also may work with companies that offer their own opt-out mechanisms and may not participate in the opt-out mechanisms linked above.
• Blocking advertising ID use in your mobile settings.  Your mobile device settings may provide functionality to limit use of the advertising ID associated with your mobile device for interest-based advertising purposes.

For more information about cookies, including how to see what cookies have been set on your computer or mobile device and how to manage and delete them, visit www.allaboutcookies.org. If you do not accept our cookies, you may experience some inconvenience in your use of our Sites. For example, we may not be able to recognize your computer or mobile device and you may need to log in every time you visit our Sites.

If you choose to opt-out of targeted advertisements, you will still see advertisements online but they may not be relevant to you. Even if you do choose to opt out, not all companies that serve online behavioral advertising are included in this list, and so you may still receive some cookies and tailored advertisements from companies that are not listed.

For more information about how we collect, use, and share your information, see our Privacy Policy.

Changes

Information about the cookies we use may be updated from time to time, so please check back on a regular basis for any changes.

Questions

If you have any questions about this Cookie Policy, please contact us by email at privacy@bionano.com..

Last modified February 16, 2026.