01

Privacy Policy

Last Updated: August 12, 2026

Varex Imaging Corporation (“Varex”) is committed to ensuring the protection and security of your personal data. When we collect and process your data, we do it in accordance with best industry practice and the highest legal and regulatory standards. This Privacy Policy (“Policy”) provides a comprehensive guide to our personal data processing practices.

As Data Controller, Varex is responsible for the collection and processing of your personal data on this website (www.vareximaging.com).  Personal data shall mean any data about an individual who is identifiable by or in relation to such data. Depending on where you are located, additional terms may apply. Please refer to the Appendix for details relevant to your jurisdiction. For any questions or complaints, you may reach us via the contact details provided below.

This Website is intended for business customers and is directed to individuals acting in a business or professional capacity. It is not directed to children, and we do not knowingly collect or process the personal data of children. If you believe that a child has provided personal data to us, please contact us using the details below and we will take reasonable steps to delete it.

  1. GENERAL INFORMATION
  1. Information We Collect

We may receive the following categories of personal data:

  1. Information You Provide Directly, such as your name, email address, phone number, company name, job title, location, information you submit through Website forms, and any other information you choose to provide, including information included in free-text fields. Where you voluntarily provide additional information that is not required (for example, in free-text message fields), we process that information on the basis of your consent, which you may withdraw at any time.
  • Information Collected Automatically, such as IP address, browser type, operating system, device identifiers, referring website, pages visited, time on pages, interactions with the Website, approximate location derived from IP address, and cookie or similar technology identifiers.
  • Information from Social Media and Third Parties, such as publicly available information or information you choose to share via social media platforms such as LinkedIn, YouTube, or similar platforms.

You are responsible for ensuring that the personal data you provide to us is accurate and up to date.

  • Purpose and Use of Personal Data

We use personal data for the following purposes:

  1. To provide and improve our services,
  • To respond to inquiries and provide information about our services,
  • To operate, maintain, and improve our website, and enhance user experience,
  • To communicate with you, send administrative communications,
  • To establish, maintain, and manage our relationship with you or your organization, including customer or client records, support, training, and related business communications,
  • For recruitment purposes,
  • For business operations,
  • For legal and compliance purposes,
  1. To comply with applicable laws, regulations, and legal processes,
  • To enforce our agreements and protect our legal rights.
Category of Personal DataPurposes of Processing
Information You Provide Directly (Name, contact details, company name,   Job title, location, and any other information you choose to share)To respond to your enquiries and provide information about our products and servicesTo schedule meetings, demonstrations, and consultationsTo send newsletters, product updates, and marketing communications, subject to your consentTo establish and manage business relationshipsTo comply with applicable legal and regulatory obligations
Information Collected Automatically (IP address, browser type, operating system, device identifiers, pages visited, time on pages)To operate, maintain, and secure the WebsiteTo monitor usage, performance, and trendsTo improve Website content, usability, and user experienceTo detect, prevent, and investigate fraud or security incidentsTo generate aggregated analytics for internal reporting
Information from Social Media and Third Parties (Publicly available information or information you choose to share via LinkedIn, YouTube, or similar platforms)To supplement information provided by youTo engage with you on social media platformsTo respond to enquiries or expressions of interestTo support marketing, outreach, and relationship management
  • Disclosures of Personal Data

We may disclose Personal Data in the following circumstances:

  1. Service Providers: We may disclose Personal Data to third-party vendors and service providers who perform services on our behalf, such as hosting, analytics, marketing support, recruitment services, customer relationship management, and IT support. Where required by applicable law, these service providers process Personal Data under contractual obligations that require them to follow our instructions, protect Personal Data, and use Personal Data only for the services they provide to us and in accordance with applicable law.
  • Affiliates: We may disclose Personal Data to our subsidiaries and affiliated entities for purposes consistent with this Privacy Policy.
  • Business Transfers: If we are involved in a merger, acquisition, financing, due diligence, reorganization, bankruptcy, or sale of company assets, Personal Data may be disclosed or transferred as part of that transaction. Any successor entity will continue to use Personal Data in a manner consistent with this Privacy Policy or as otherwise permitted by law.
  • Legal and Regulatory Compliance: We may disclose Personal Data to courts, regulators, law enforcement authorities, government authorities, professional advisors, auditors, or other third parties where reasonably necessary to comply with applicable law, legal process, or governmental request, operate our business, or protect our rights, property, or safety, or that of others.

We do not sell Personal Data and do not share Personal Data for cross-context behavioral advertising purposes.

  • Cookies and Tracking Technologies

We use cookies, analytics tools such as Google Analytics or similar services, and similar technologies to operate and improve our website, analyze website usage, maintain system security, understand interactions with Website content, and measure Website performance.

Where we use Google Analytics, Google Ireland Limited and Google LLC (USA) support us as service providers. Google Analytics creates usage profiles based on pseudonyms, and permanent cookies may be stored on your device for this purpose. Data processing may therefore take place outside the EU or EEA, including in the United States. Google LLC is a certified participant in the EU-U.S. Data Privacy Framework, which has been recognized by the European Commission as providing an adequate level of data protection for such transfers. You may withdraw your consent to the use of Google Analytics at any time by adjusting your cookie preferences through the preference center on our Website.

For users located in the EU/EEA, additional information about the international transfer of Personal Data in connection with Google Analytics and other embedded services is set out in the EU/EEA Residents Appendix below.

These technologies help us:

  1. Understand how visitors use our website,
  • Improve functionality and performance, and
  • Maintain system integrity.

We do not use cookies or tracking technologies for cross-context behavioral advertising.

You may manage your cookie preferences at any time through the “Manage Settings” link or preference center available on our Website. You may also control cookies through your browser settings. Please note that disabling certain cookies may affect Website functionality.

For more information, please visit our Cookie Policy, which includes additional details about the cookies and similar technologies we use, including their providers, purposes, descriptions, retention periods, embedded media, advertising cookies, analytics tools, and how to manage or withdraw your preferences.

  • Embedded Videos and Third-Party Media

If videos or other third-party media from providers such as YouTube or Vimeo are embedded on our Website, those providers may receive information that you accessed our Website and may process usage data needed to provide the content when you interact with the media. When you interact with embedded videos or other third-party media, the provider may receive information about your interaction and may process that information in accordance with its own privacy practices. We have no control over the providers’ further processing. Please review the relevant provider privacy notices and our Cookie Policy for more information, including how to manage your preferences.

  • Data Retention

We retain Personal Data only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including to comply with legal, regulatory, contractual, or operational requirements. For inquiries submitted through contact forms or similar channels, we retain the information for as long as necessary to respond to and manage the request, unless a longer retention period is required or permitted by applicable law.

Retention periods are determined based on the nature of the data, the purposes for which it is processed, and applicable legal obligations. When Personal Data is no longer required, it is securely deleted, anonymized, or otherwise disposed of in accordance with our internal data retention policies.

  • Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your Personal Data, including the right to:

  1. Request access to Personal Data we hold about you;
  • Request correction of inaccurate Personal Data;
  • Request deletion of Personal Data, subject to legal exceptions;
  • Object to or restrict certain processing activities and, where applicable, request portability of your Personal Data;
  • Withdraw consent, where processing is based on consent; and
  • Request information about categories of Personal Data disclosed for business purposes.

These rights may be subject to limitations and exceptions under applicable law. For information about rights under specific jurisdictions, please refer to the relevant Appendix below. To exercise applicable rights, please contact us at dataprivacy@vareximaging.com. We will respond in accordance with applicable legal requirements.

  • Security Measures

We adopt technical and organizational measures to protect your data as comprehensively as possible. In addition to the commitment of our employees to secrecy and a careful selection and monitoring of our service providers, we also secure our operating environment adequately. Where appropriate, we use encryption in transit and other technical safeguards designed to protect Personal Data transmitted through the Website. We review and update our safeguards periodically based on the nature of the Personal Data, the risks presented by the processing, and applicable legal requirements. While we take commercially reasonable measures to protect Personal Data, no method of transmission over the Internet or method of electronic storage is completely secure.

  • Third-Party Websites

Our website may contain links to third-party websites or platforms, including social media buttons displayed in the form of links. These buttons do not integrate social media plugins; your personal data will be transferred to the relevant platform only if you click on the button. We have no control over the extent, nature, or purpose of data processing performed by social media providers or other third parties. We are not responsible for the privacy practices or content of such third-party sites. We encourage you to review the privacy policies of any third-party websites you visit.

  1. Communication Preferences

Where required by applicable law, we will obtain your consent before sending you marketing or promotional communications.

You may withdraw your consent or unsubscribe from marketing communications at any time by following the instructions included in such communications or by contacting us at dataprivacy@vareximaging.com.

  1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date at the top of this Privacy Policy. We encourage you to review this Privacy Policy periodically.

  1. Contact Information

Questions or comments regarding this Privacy Statement should be submitted to Varex by mail or e-mail at the address: 

Varex Imaging Corporation

1678 S. Pioneer Road, Salt Lake City, UT 84104

1 (801) 972-5000

dataprivacy@vareximaging.com. 

Or contact the regional DPO appointed for your jurisdiction, which you can find in the relevant appendix.

  • CALIFORNIA RESIDENTS APPENDIX

The California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), applies to residents of California. This appendix sets out additional information required under the CCPA and supplements the information provided above.

Notice at Collection: The categories of personal information we collect, and the purposes for which we use them, are described in the “Information We Collect” and “Purpose and Use of Personal Data” sections above. These include identifiers, commercial information, internet or other electronic network activity information, professional or employment-related information, and inferences drawn from the foregoing.

Sale or Sharing of Personal Information: We do not sell your personal information and do not share it for cross-context behavioural advertising, as those terms are defined under the CCPA.

Your California Rights: Subject to certain exceptions, you have the right to know the categories and specific pieces of personal information we have collected; the right to request deletion of your personal information; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information; the right to limit the use and disclosure of sensitive personal information; and the right not to receive discriminatory treatment for exercising your rights.

Exercising Your Rights: To exercise these rights, please contact us at dataprivacy@vareximaging.com. We will verify your request and respond in accordance with the CCPA. You may also use an authorized agent to submit a request on your behalf.

  • EU/EEA RESIDENTS APPENDIX

European Union’s General Data Protection Regulations (“GDPR”)(EU regulation 2016/679) shall be applicable to residents and users of the website based in EU/EEA. This appendix sets out the additional information required as per the GDPR and other applicable data protection legislation.

For the purposes of this Appendix, Varex Imaging Corporation is the Data Controller in relation to personal data collected through this website.

  1. EU/EEA Processing Details

Where the GDPR applies and we collect personal data from you through the Website, the following additional information about our processing activities may apply. In particular, we process your personal data collected through the Website to:

  • process and respond to your requests when you reach us via our contact forms ((pre)contractual or legitimate interest, respectively Art. 6(1)(b) and 6(1)(f) GDPR);
  • improve website performance and browsing experience (legitimate interest, Art. 6(1)(f) GDPR);
  • display content on our website including videos (consent or legitimate interest, respectively Art. 6(1)(a) and 6(1)(f) GDPR);
  • maintain the security of our website (legitimate interest, Art. 6(1)(f) GDPR);
  • analyse site usage and enhance site navigation (consent or legitimate interest, respectively Art. 6(1)(a) and 6(1)(f) GDPR);
  • marketing purposes (consent or legitimate interest, respectively Art. 6(1)(a) and 6(1)(f) GDPR);
  • share information with advertising partners, where you have provided consent (Art. 6(1)(a) GDPR); any such sharing is based on your consent and does not constitute a sale of Personal Data or cross-context behavioural advertising;
  • consider you for potential job openings within our organization (consent or (pre)contractual, respectively Art. 6(1)(a) and Art. 6(1)(b) GDPR).
  • International Transfers

The personal data that we collect may be processed by Varex affiliated companies and trusted third parties in countries outside the European Union or European Economic Area. Some of those countries may not provide the same level of data protection as the laws of the European Union. Where Varex transfers personal data outside the EU/EEA, Varex relies on appropriate transfer mechanisms, including the EU-U.S. Data Privacy Framework for transfers to certified recipients in the United States, EU Standard Contractual Clauses, and, where applicable, Varex’s intragroup data transfer agreement. You may contact us using the details in this Privacy Policy to request information about the safeguards applicable to such transfers.

Certain third-party service providers embedded on our Website, such as Google and Vimeo, may transfer your data to countries outside the EU/EEA, including the United States. Where a recipient is certified under the EU-U.S. Data Privacy Framework, the European Commission has recognized that it provides an adequate level of protection for such transfers. Where transfers rely on other mechanisms, such as EU Standard Contractual Clauses, the data protection laws of the recipient country may not offer a level of protection equivalent to the laws of the European Union, and authorities in those countries may have access to the data without equivalent legal recourse being available to you. Please take this into account when interacting with embedded content on our Website.

  • Data Subjects Rights

Under the GDPR, you have the following rights in relation to your personal data processed by Varex through this website:

  • Right to access your data, as well as receive a copy of your personal data;
  • Right to rectification;
  • Right to erasure;
  • Right to restriction of processing;
  • Right to data portability;
  • Right to object, if the data is processed pursuant to the legitimate interests of Varex Imaging. In such case, we will no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defense of legal claims;
  • Right to not be subject to automated decision making and profiling;
  • file a data protection complaint;
  • Right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes applicable data protection regulations.
  • Data protection requests

Questions, complaints or comments regarding your rights as a data subject should be submitted to Varex by e-mail at the address: dataprivacy@vareximaging.com. 

Data Protection Officer

Our data protection officer for the EU/EEA, Switzerland and the UK is:

FIRST PRIVACY GmbH

Konsul-Smidt-Straße 88

28217 Bremen, Germany

Email:office@first-privacy.com

  • PHILIPPINE RESIDENTS APPENDIX

The Data Privacy Act (“DPA”), its implementing rules (“IRR”), and issuances by the National Privacy Commission shall be applicable to Philippine users of the website. Below you will find the additional information required as per applicable data protection legislation.

  1. Rights of Data Subject

In addition to the rights mentioned above, you have the following rights under the DPA and its IRR:

  1. Right to Access

You may have the right to reasonable access to, upon demand, the following:

  • Contents of your personal data that were processed;
  • Sources form which personal data were obtained;
  • Names and addresses of recipients of the personal data;
  • Manner by which such data were processed;
  • Reasons for the disclosure of the personal data to recipients, if any;
  • Information on automated processes where the data will, or is likely to, be made as the sole basis for any decision that significantly affects or will affect the data subject;
  • Date when personal data concerning you were last accessed and modified; and
  • The designation, name or identity, and address of the data controller.
  • Right to Damages

You may have the right to be indemnified for any damages sustained due to such inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of personal data, taking into account any violation of your rights and freedoms as data subject.

  • Right to Lodge a Complaint

You may also have the right to lodge a complaint before the National Privacy Commission for any violation of your data privacy rights.

  • Data Protection Officer

Data Protection Officer (PH Quality Manager)

Varex PH Imaging Philippines Inc.

Harvard Avenue, EZP Business Park, CPIP

4027 Calamba, Laguna, Philippines

dpo_vcph@vareximaging.com

  • INDIA RESIDENT APPENDIX

India’s Digital Personal Data Protection Act, 2023, including the Digital Personal Data Protection Rules, 2025, as amended from time to time (collectively the “DPDPA”) shall be applicable to residents and users of this website located in India. This appendix sets out the additional information required as per the DPDPA and supplements the information provided above.

For the purposes of this Appendix, Varex Imaging Corporation (acting through its Indian operations) is the Data Fiduciary in relation to personal data collected through this website.

  1. Your Rights as a Data Principal

Under the DPDPA, you have the following rights in relation to your personal data processed by Varex through this website:

  1. Right to access: You may request a summary of the personal data we hold about you, the purposes for which it is being processed, and the identities of other parties with whom it has been shared.
  • Right to correction, completion, updating, and erasure: You may request that we correct inaccurate or incomplete personal data, update information that is no longer current, or erase personal data that is no longer required for the purpose for which it was collected.
  • Right to grievance redressal: You have the right to raise a grievance with us in relation to the processing of your personal data. We will respond within a reasonable period not exceeding 90 days of receipt. If your grievance is not resolved to your satisfaction after exhausting our internal redressal process, you may approach the Data Protection Board of India.
  • Right to nominate: You may nominate another individual to exercise your data protection rights on your behalf in the event of your death or incapacity. Please contact us at dataprivacy@vareximaging.com to register a nomination.
  • Right to withdraw consent: Where we process your personal data on the basis of consent, you have the right to withdraw that consent at any time.

To exercise your rights, please write to our Data Protection Officer on the details below. Prior to actioning your request, we may request you for some information to verify your identity.

International Transfers: The personal data we collect may be transferred to and processed by Varex affiliated companies and service providers located outside India, including in the United States and the EU/EEA. Where we transfer your personal data outside India, we do so in accordance with the DPDPA and any restrictions or conditions specified by the Central Government, and we apply appropriate contractual and technical safeguards to protect your personal data.

  • Data Protection Officer and Contact Details

For any questions or complaints, please contact our designated Data Protection Officer:

Global Data Protection Officer

Email: dataprivacy@vareximaging.com

If your grievance remains unaddressed despite raising it through our internal redressal mechanism, you may approach the Data Protection Board of India.