This Xian Janssen Pharmaceutical Co., Ltd. Pharmacovigilance and Product Quality Complaints Privacy Policy ("this Privacy Policy") applies: 

  • Individuals who report adverse events, provide information about the safety of our products and submit product quality complaints; 

  • Individuals who are parties to adverse events and product quality complaints. 


Xian Janssen Pharmaceutical Co., Ltd. (hereinafter "We") respects the privacy of our reporters, patients and subjects (hereinafter "You") and wants you to be familiar with how we collect, use and disclose information. This Privacy Policy describes our practices in connection with collecting information. We encourage you to read the full Privacy Policy before providing any personal information. If you are not the patient or the subject, you should ensure that you have informed the patient or the subject of the contents of this Privacy Policy and obtained the patient's or the subject's necessary and appropriate consent before providing us with the patient's or the subject's personal information. 


Please read carefully this Privacy Policy before providing personal information to us. 



This website is not directed to individuals under the age of 14, and we request that these individuals not provide personal information through this website. If your child has submitted personal information and you would like to request that such personal information be removed, please contact us as explained below under "Contacting Us". 

We may collect personal information from minors under the age of 14 with parental or guardian authorization for the purpose of reporting adverse reactions to medications administered to minors. If you are a parent or a guardian of a minor under the age of 14 and you provide us with personal information about the minor, before you provide personal information for us, please carefully read and understand the contents of this Privacy Policy or other information of which we inform you. 

How we collect and use your personal information 

In order to deal with adverse event reports and product quality complaints, to monitor the safety of medicines, including the detection, assessment, follow-up and prevention of adverse events, to respond to your product quality complaints such as any quality defects and/or shortcomings in efficacy, stability, reliability, safety, performance or use of the medicines, to carry out the assessment, categorization and evaluation of product quality complaints, as well as to report adverse events to the regulatory authorities, we will process the personal information you provide. 

When dealing with adverse event reports and/or product quality complaints, we will record and use the personal information you provide, including: the patient's or subject's gender, age, date of birth, name, subject code, address, postcode, ethnicity, race, level of the adverse event, records related to the individual's medical treatment for the adverse event, etc., medical records, height, age at the time of the adverse event, weight at the time of the adverse event, birth information, gestational age, weight at birth, medication records, and the reporter's identity, name, designation, address, postcode, and occupation. 


The health and physiological information that is bolded and underlined above is sensitive personal information. We need to collect sensitive personal information in order to deal with adverse event reports and product quality complaints and to meet the regulatory requirements of the relevant medicine regulation. We will take appropriate measures to protect your sensitive personal information and anticipate that the processing of your sensitive personal information will not have a material adverse effect on your personal rights and interests. 

How we outsource, sharing, public or transfer your personal information 

  1. Outsource 

For the purpose of providing services, we may engage third-party service providers for website hosting and moderation, mobile application hosting, data analytics, payment processing, order fulfillment, infrastructure provision, IT services, customer service, email and direct mail services, auditing, etc.. During this process, we may allow the third-party service providers to process personal information necessary to perform their functions, but they may only process such personal information on our behalf for the purpose of providing the services to you. 

  1. Sharing 

  • We also disclose information to our affiliates for the purposes described in this Privacy Policy. A list of our affiliates is available at click on the link for Form 10K, Exhibit 21, under “SEC Filings”). 

  • Other pharmaceutical companies (if adverse events, product quality complaints are related to one of the company's products); 

  • Regulatory authorities, including the National Medical Products Administration of China, the European Medicines Agency (EMA), which controls the EU EudraVigilance database (, and the U.S. Food and Drug Administration (FDA); 

  • In addition, we may use and disclose your information as we believe to be necessary or appropriate: (a) to comply with legal process or applicable law; (b) as permitted by applicable law to respond to requests from public and government authorities; (c) to enforce our terms and conditions; and (d) to protect our rights, privacy, safety, or property, and/or the rights, privacy, safety, or property of our Affiliates', your or others' rights. We may also use and disclose your information in other ways, after obtaining your consent to do so. 

Prior to specific sharing, we will notify you of the third party's name, contact information, the purposes and manners of processing, the categories of personal information processed and obtain your separate consent (if applicable) where required by applicable data protection laws. 

  1. Transfer 

As permitted by applicable law, your personal information may be disclosed to a third party in the event of a reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings). 

  1. Public 

We will not publish information that has not been published by yourself, except in compliance with applicable laws and regulations or with your consent. 

How you can access, change, restrict or delete your personal information 

If you would like to review, correct, update, restrict, or delete your personal information (subject to other relevant laws and regulations), or if you would like to request an electronic copy of your personal information for purposes of transmitting it to another company, please contact us by sending an email to We will respond to your request as soon as reasonably practicable and no later than one month after receiving your request. If circumstances cause any delay in our response, you will be promptly notified and provided a date for our response.  



Name and Contact Information of The Overseas Recipient 


Johnson & Johnson Services, Inc.  

Address: 1 Johnson and Johnson Plaza, New Brunswick, NJ 08933, United States. 


Purposes of Processing Personal Information by the Overseas Recipient 


In order to fulfill the legal obligations related to pharmacovigilance, the overseas recipient is required to continuously monitor and collect pharmacovigilance information within China and globally, as well as other relevant information that may be related to patient safety, and after processing and analyzing the information, report to the relevant competent authorities in China and other countries on the adverse reaction events and other relevant information found. 


Methods of Processing Personal Information by the Overseas Recipient 


Through real-time aggregation and analysis of data, the information generated from clinical trials and post-marketing adverse events worldwide is aggregated and analyzed to form an assessment of the adverse events and confirm the level of the adverse events; at the same time, the information involved in the adverse events and the results of the analyses are submitted to local departments of Johnson & Johnson and its affiliates responsible for submitting pharmacovigilance related reports, in order to report the adverse events to the drug regulatory authorities in accordance with the local requirements. 


Categories of Personal Information Provided to the Overseas Recipient 


If you are the patients and subjects, we may provide the following personal information about you to the Overseas Recipient 

Basic personal profiles: gender, age, date of birth, name, subject code, address, postcode, ethnicity, race; 

Personal health and physiological information: level of the adverse event, records related to the individual's medical treatment for the adverse event, etc., medical records, height, age at the time of the adverse event, weight at the time of the adverse event, birth information, gestational age, weight at birth, medication records. 


If you are the reporter of the adverse event or the product complaint, we may provide the following personal information about you to the Overseas Recipient: 

Basic personal profiles: identity, name, designation, address, postcode; 

Personal information on education and work: occupation. 


Methods of the Exercise of Rights by Individuals against the Overseas Recipient 


You may exercise your rights related to your personal information by using the overseas recipient's contact information as disclosed or as explained below under "Contact Us", and either the overseas recipient or we will respond to your request within the time required by law or regulation. 


Retention Place and Period 


Your data will be stored in a secure manner primarily in our suppliers' data centers in the United States and we will store your personal information for the shortest period necessary to achieve the purpose of the processing. 


We seek to use reasonable organizational, technical, and administrative measures designed to protect personal information under our control. However, no data transmission over the Internet or data storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the "Contacting Us" section below. 


We will retain your personal information for the shortest period as needed or permitted in light of the purpose(s) for which it was obtained. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you and provide the service to you; (ii) whether there is a legal obligation to which we are subject; and (iii) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations). 

After the necessary storage time unless otherwise permitted by laws, administrative regulations or agreed by you, we will delete your personal information. 


Xian Janssen Pharmaceutical Co., Ltd. located at No.19, Cao Tang 4th Road, Cao Tang Science and Technology Industry Base, Hi-Tech Zone, Xian, Shaanxi, is the company responsible for collection, use, and disclosure of personal information under this Privacy Policy. 

If you have any questions about this Privacy Policy, please contact us by sending an email to, or please write to the following address: 14/F, China Central Place, No. 77 Jianguo Road, Chaoyang District, Beijing. 


We may change this Privacy Policy. Any changes to this Privacy Policy will become effective when we post the revised Privacy Policy on the website. Your provision of personal information following these changes means that you accept the revised Privacy Policy, but we will re-obtain your consent if required by the applicable law. We recommend that you regularly review the Privacy Policy when you provide personal information. [This policy was last updated in December 2023].