BAUSCH CALIFORNIA PRIVACY POLICY ADDENDUM

1. PERSONAL INFORMATION WE COLLECT

We collect personal information about you from a variety of sources. We collect information from you directly [(e.g., when you contact us or create an account with us)], automatically, [(e.g., data collected from cookies),] and from other sources, including commercially available sources, such as public databases (where permitted by law).

Information we collect from you

The categories of information that we collect or may have collected directly from you in the preceding 12 months include the following:

• Identifiers, such as your name, postal address, email address, telephone number, and user name;
• Financial, medical, or health information, such as your payment history and any prescriptions or current medical conditions;
• Protected characteristics, such as your gender or date of birth;
• Commercial information, such as products or services purchased you have purchased, credit card or bank account information, billing/payment terms, credit limit, or credit status;
• Internet or other electronic network activity information, such as browsing or search history;
• Geolocation data, such as precise location;
• Sensory Information, such as photographs or voice recordings;
• Professional information, such as employer, job title or professional affiliations;
• Education information; and
• Inferences regarding preferences or other characteristics such as consumer preferences for websites.

We may also collect information you provide in your communications to us, such as when you participate in message boards or forums, respond to polls or surveys, write a review, or contact us with a question, comment, or request.

Information we automatically collect about you

We also may collect certain information automatically when you visit and use our websites and services. We collect this information for our legitimate business purposes and to facilitate your use of our websites and services.

You may be able to limit our ability to automatically collect certain types of information by adjusting the cookie settings on your web browsers. These categories of information include:

• Identifiers, such as unique device identifiers, online identifiers, IP addresses, or other persistent identifiers;
• Commercial information, such as products or services purchased, or other purchasing or consumption histories or tendencies;
• Internet or other electronic network activity information, the time, date, and duration of your visit to our websites, your browser type and operating system, your Internet Protocol (IP) address, or other device identifiers;
• Geolocation data, such as precise location; and
• Audio, electronic, visual, thermal, olfactory, or similar information, such as photographs or voice recordings.

We may use cookies, pixel tags, and similar technologies to automatically collect this type of information. Cookies are small bits of information that are stored by your computer’s web browser. Aggregate cookie and tracking information may be shared with third parties. You may be able to decide if and how your computer will accept a cookie by configuring your preferences or options in your Internet browser settings. However, if you choose to disable cookies, you may not be able to use certain services or features on our websites or in connection with our services. Pixel tags are very small images or small pieces of data embedded in images, also known as "web beacons" or "clear GIFs," that can recognize cookies, the time and date a page is viewed, a description of the page where the pixel tag is placed, and similar information from your computer or device. By accessing our websites or using any services, you affirmatively consent to our use of cookies, pixel tags, and similar tracking technologies.

We may allow third parties to place and read their own cookies, web beacons, and similar technologies to collect information through our websites and services. We do not control how those third parties use that information. These third parties include service providers who may use these technologies to collect information that helps us with traffic measurement, research, and analytics. For example, our websites may use Google Analytics, a web analytics service provided by Google, Inc. ("Google") to help analyze how users use our websites. Google Analytics uses cookies and other tracking technology to collect aggregate data ("Aggregate Data") from your visits to our websites. To learn more about the privacy policy of Google Analytics, refer to Google’s Policies. You may be able to use the Google Analytics Opt-out Browser Add-on to prevent data from being sent to Google Analytics. We store any Aggregate Data collected from you in aggregate form. We may use Aggregate Data for any purpose.

Different methods exist for you to prevent tracking of your online activity, including setting "do not track" preferences in your browser to alert websites you visit that you do not want them to collect certain information about you. Please note that, at this time, our websites do not recognize such "do not track" instructions. We will update this Privacy Policy if we recognize "do not track" instructions in the future.

Information we collect from other sources

We collect the following categories of personal information from other sources:

• Identifiers, such as email addresses from marketing vendors.
• Financial, medical, or health information, such as from your healthcare providers;
• Protected characteristics, such as your gender, age, race, or other protected classifications provided by data supplementation services or healthcare providers;
• Commercial information, such as sanction lists or risk assessment efforts.
• Internet or other electronic network activity information. We collect information on your browsing history, search history, and other online activity from the advertising networks in which we participate.
• Professional information, such as employer, or job title from references, recruiters, or employment-related services;
• Education information from background check providers (with your consent where required); and

Additionally, we may draw inferences from any of your personal information that we collect to create a profile about you, which may reflect your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

These sources may include:

• Market Research
• Other Bausch entities
• Affiliates
• Business partners
• Individuals or businesses you direct to share with us

2. HOW AND WHY WE USE YOUR PERSONAL INFORMATION

The personal information we may have used about you in the preceding 12 months for the following purposes includes:

• Identification and authentication: We use your identifiers to verify your identity when you access your account and to ensure the security of your personal information;
• Operating our websites and services: We process your personal information to provide products, services, and information you request including through our affiliates;
• Improving our websites and services: We analyze information about how you use our services to provide an improved experience for all users;
• Communicating with you: We may use your personal information to communicate updates, promotions, or news about us, including our products, services, or events, through email, direct mail, or otherwise;
• Marketing: We may use your personal information engage in market research or to build a profile about you and place you into particular marketing segments in order to understand your preferences better and to appropriately personalize the marketing messages we send to you. We may also use your identifiers to send you marketing communications about our websites and services and other products or services that may be of interest to you;
• Exercising our rights: We may use your personal information to exercise our legal rights where it is necessary to do so, for example to detect, prevent and respond to fraud claims, intellectual property infringement claims or violations of law or our terms and conditions;
• Complying with our obligations: We may process your personal information to comply with legal or regulatory requirements, where this is explicitly required by law, such as in response to court orders, clinical research, drug safety obligations or to comply with privacy or financial regulations;
• Customizing your experience: When you use our services, we may use your personal information to improve your experience, such as by providing interactive or personalized elements and providing you with content based on your interests; and
• Protecting against harm: We may use personal information as necessary to protect the rights and safety of us, you, or others.

We may aggregate or de-identify any information, including patient information collected about you through your use of our services or otherwise. Our de-identification process involves the removal of various data identifiers so that no residual information remains to identify the individual. We may use that aggregated or de-identified information, for any purpose.

3. PERSONAL INFORMATION WE SHARE WITH OTHER PARTIES

We may share or have shared in the preceding 12 months certain categories of your personal information by disclosing it to our service providers, business partners, or affiliates, or by selling it to third parties. The “selling” of personal information is defined as “for monetary or other valuable consideration” whereas the definition of “sharing” refers to purposes “…for cross-context behavioural advertising for the benefit of a business where no money is exchanged.” The sharing and/or selling of personal information is subject to certain exceptions under applicable law.

Categories of parties with whom personal information is shared

• Marketing providers: such as e-mail vendors, advertising agencies.
• Government and regulatory agencies: necessary for our legal and regulatory obligations.
• Logistics providers: such as travel agencies to arrange contracted services with the Company.

Information we disclose

To achieve our own business purposes, we may disclose your personal information to the following parties:

• Tell-A-Friend Features: We may disclose your name and email address to your friend if you use a tell-a-friend feature to send that friend information about Bausch Health products or services.
• Service providers and business partners: We engage service providers and business partners to assist us with operating and providing you access to our services. These service providers or business partners may perform marketing services, process secure payments, fulfill orders, optimize services, serve online behavioral advertising, send newsletters and marketing messages, support email and messaging services, and analyze information. Some of our service providers or business partners may engage their own service providers or business partners to further assist us. Unless otherwise specified, these companies will only use your personal information in the ways described in this Policy.
• Bausch Health group companies: Bausch Health has affiliates around the world. Our affiliates work closely with each other to provide you access to our websites and services and other Bausch products and services from country to country. We may share your personal information among Bausch group companies for marketing purposes, security, optimization of products and services, and internal reporting. Unless otherwise specified, the Bausch group companies will only use your information in the ways described in this Policy.
• Where required by law or regulation: We may share your personal information with law enforcement agencies, courts, other government authorities or other third parties where we believe necessary to comply with a legal or regulatory obligation, or otherwise to protect our rights or the rights of any third party.
• In the context of a transaction: We may share your personal information with potential transaction partners, service providers, advisors, and other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell or transfer all or a portion of our assets or business.

The following categories of your personal information may be shared with these parties:

• Identifiers;
• Financial, medical, or health information;
• Protected characteristics;
• Commercial information;
• Internet or other electronic network activity information;
• Geolocation data;
• Audio, electronic, visual, thermal, olfactory, or similar information;
• Professional information;
• Education information; and
• Inferences drawn from any of the above information categories.

Information we sell

We may sell your personal information to the following categories of recipients:

• Our marketing partners

The following categories of your personal information may be sold to these parties:

• Identifiers;
• Protected characteristics;
• Commercial information;
• Geolocation data;
• Internet or other electronic network activity information;
• Inferences drawn from any of the above information categories.

4. YOUR RIGHTS OVER YOUR PERSONAL INFORMATION

You may have rights in relation to your personal information under local law. Below is a general description of the rights some consumers may hold. In the event you reside in such a jurisdiction and would like to exercise one of your rights, please contact us at Privacy@bauschhealth.com or at 1-800-553-5340. Please note that we may require additional information from you to honor your request, and we may decline your request as permitted under applicable law.

• Right to access personal information: Users exercising this right may request access to the categories and specific pieces of their personal information we hold;
• Right to data portability: Users exercising this right may receive their personal information, and request that specific personal information be transferred to another entity, to the extent technically feasible, when provided electronically, in a readily useable format;
• Right to correct: Users exercising this right can ask us to correct inaccurate personal information we hold;
• Right to deletion: Users exercising this right can ask us to delete their personal information we have collected, and send the request to third parties that have bought or received their personal information, subject to some exceptions;
• Right to disclosure: Users exercising this right can receive additional information regarding the sources from which we collect information, the purposes for which we collect and share personal information, the information of theirs we hold, and the categories of parties with whom we share their information;
• Right to limit use and disclosure of sensitive personal information: Users exercising this right can ask us only to use sensitive personal information for limited purposes, such as providing you with services you may have requested;
• Right to opt-out of sale or sharing: As permitted by applicable law, we may sell and/or share your personal information. Users exercising this right may direct us to stop selling or sharing their personal information. You can exercise your right to opt-out here: Do Not Sell My Personal Information;
• Right to learn about certain disclosures: California law requires certain California businesses to disclose, upon a customer’s written request, (a) a list of the kinds of personal information that the business has disclosed to third parties for direct marketing purposes during the preceding calendar year, and (b) the names and addresses of all third parties that received personal information from the business for direct marketing purposes during the preceding calendar year. Businesses must respond to such requests within thirty (30) days, but they are only obligated to respond to one request from a customer in a calendar year.

If you are a current customer in California, you may request this disclosure by sending an e-mail request to Privacy@bauschhealth.com listing your name, address, and e-mail address. You must also specifically indicate the nature of your request by including the following language or language substantially similar to it: "I request that you send me your third-party information sharing disclosures as required by California Civil Code Section 1798.83." Alternatively, you may mail your request to Bausch Health Companies Inc., 400 Somerset Corporate Boulevard, Bridgewater, New Jersey 08807.

• Right to be free from discrimination: Users may freely exercise these rights without fear of being denied goods or services. We may, however, provide a different level of service or charge a different rate reasonably relating to the value of your data; and

5. INFORMATION SECURITY

We maintain reasonable technical, physical, administrative, and procedural security precautions to help protect against loss, misuse, unauthorized access, disclosure, alteration, interception, or destruction of the information you provide to us. Please note, however, that no such precautions are 100% effective. As a result, we cannot guarantee or warrant the security of any information you disclose or transmit to us, and we are not responsible for the theft, destruction, interception, or inadvertent disclosure of your Personal Information. Therefore, any transmission of Personal Information is at your own risk.

We do not and will not send you emails asking you to provide or confirm personal information except in instances where you are requesting access to or erasure. A technique known as "phishing" attempts to steal personal identity data and financial account credentials from consumers. "Phishers" use "spoofed" emails to lead consumers to sham websites which trick recipients into divulging personal information including credit card numbers, account usernames, passwords, and social security numbers. If you receive email communication purporting to be from our websites or in connection with any of our services, please forward it immediately to Privacy@bauschhealth.com and then delete it from your computer.

We reserve the right to deny to any user access and/or use privileges, including without limitation use of any services, features, or functions of one of our sites, if there is a question regarding the identity of the person accessing or attempting to access any services, features, or functions.

6. CONTACT US

If you have questions about this Policy or our use of your personal information in relation to our services, please contact us at:

• U.S. Privacy Officer
• Bausch Health Companies Inc.
• 400 Somerset Corporate Boulevard
• Bridgewater New Jersey 08807
• Phone: 1-800-553-5340
• Email: Privacy@bauschhealth.com

7. CHANGES TO THE POLICY

We may modify or update this Policy from time to time. We encourage you to visit this Policy at least once per year to learn about any changes to the way we collect, use, or disclose your personal information. If we make a material change to this Policy, we will take reasonable steps to notify you, for example by posting a banner on our website. We encourage you to visit this Policy at least once per year to learn about any changes to the way we collect, use, or disclose your personal information.

Effective Date: [January 1, 2024]