This Privacy Notice for California Residents supplements the information contained in Vanda Pharmaceuticals Inc. (“Vanda”)'s Privacy Notice and applies solely to all visitors, users, and others who reside in the State of California ("consumers" or "you").

Information We Collect.

We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device ("personal information").

In particular, we have collected the following categories of personal information from its consumers within the last twelve (12) months:

Category	Collected
A. Identifiers.	YES
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))	YES
C. Protected classification characteristics under California or federal law.	YES
D. Commercial information.	YES
E. Biometric information.	NO
F. Internet or other similar network activity.	YES
G. Geolocation data.	NO
H. Sensory data.	YES
I. Professional or employment-related information.	YES
J. Non-public education information (per the Family Educational Rights and Privacy Act)	YES
K. Inferences drawn from other personal information.	YES

Use of Personal Information.

We may use or disclose the personal information we collect for one or more of the following purposes:

• To fulfill or meet the reason you provided the information.
• To provide, support, personalize, and develop our website, products, and services.
• To process your requests, purchases, transactions, and payments and prevent transactional fraud.
• To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.
• To personalize your website experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our website, third-party sites, and via email or text message (with your consent, where required by law).
• To help maintain the safety, security, and integrity of our website, products and services, databases and other technology assets, and business.
• For testing, research, analysis, and product development, including to develop and improve our website, products, and services.
• As described to you when collecting your personal information or as otherwise set forth in the CCPA.

Sharing Personal Information.

We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.

We may share your personal information with the following categories of third parties:

• Service providers.
• Data aggregators.

Disclosures of Personal Information for a Business Purpose

In the preceding twelve (12) months, Vanda has not disclosed Personal Information for a business purpose.

Sales of Personal Information

In the preceding twelve (12) months, Vanda had not sold personal information.

Your Rights and Choices.

Access to Specific Information and Data Portability Rights

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting that personal information.
• The categories of third parties with whom we share that personal information.
• The specific pieces of personal information we collected about you (also called a data portability request).

Deletion Request Rights

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

Exercising Access, Data Portability, and Deletion Rights

To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request using the contact information below.

• Emailing us at privacy@vandapharma.com
• Visiting www.vandaprivacy.com