RXSENSE PRIVACY POLICY
Last Reviewed on: August 20, 2024
RxSense, LLC ('we', or 'us' or 'company') provides this Privacy Policy to explain how we collect, use, share and protect the information you provide and that we collect on the Kinney Drugs Marketplace Website (“Website”). BY USING THE WEBSITE OR OTHERWISE GIVING US YOUR INFORMATION, YOU AGREE TO THE TERMS OF THIS PRIVACY POLICY. Please review this Policy carefully to ensure your understanding of our privacy practices.
1. INFORMATION WE COLLECT
We collect several types of information from and about users of our Website, including information:
By which you may be personally identified, such as name, e-mail address, telephone number, or any other identifier by which you may be contacted online or offline ("Personally Identifiable Information")
That is about you but individually does not identify you; and/or
About your internet connection, the equipment you use to access our Website, and usage details. ("Non-Personally Identifiable Information")
The categories of personal information we collect include:
Identifiers: such as name, email address, and IP numbers
Commercial information: such as prescriptions and pharmacies searched
Internet network activity: such as search history, pages visited, and coupons generated
Geolocation data: such as ZIP codes entered to see pharmacies nearby, as well as actual location when visitors grant access
1.1 INFORMATION YOU PROVIDE
(a) Personally Identifiable Information. To use the Website you may be asked to provide certain Personally Identifiable Information as described below. We may collect some or all of this information through various forms and in various places through the Website, including coupon request forms, contact us forms, or when you otherwise interact with us. The information we collect on or through our Website may include: Information that you provide by filling in forms on our Website. This includes information provided at the time of creating an Account or requesting further services
Records and copies of your correspondence including email addresses, if you contact us
Your search queries on the Website
1.2 INFORMATION WE COLLECT THROUGH AUTOMATIC DATA COLLECTION TECHNOLOGIES
(a) Generally. In addition to any Personally Identifiable Information or other information that you choose to submit to us, we and our third party service providers may use a variety of technologies that automatically (or passively) collect certain information whenever you visit the Website ('Non-Personally Identifiable Information'). Non-Personally Identifiable Information may include information about your computer, internet connection, IP address, details of your visit to our Website, the browser that you are using, or the URL that referred you to the Website. We also may use these technologies to collect information about your online activities over time and across third party websites or other online services (behavioral tracking). See Section 4 Online Behavioral Advertising and Options for information on how you can opt out of behavioral tracking on this Website.
(b) Geo-Location Information. We may collect information as you navigate our Website which may include geographic location.
(c) Cookies. A cookie is a data file placed on a computer or other device when it is used to access our Website. A Flash cookie is a data file placed on a device via the Adobe Flash plug-in that may be built-in to or downloaded by you to your device. Cookies and Flash cookies may be used for many purposes, including, without limitation, remembering you and your preferences and tracking your visits to our web pages. Cookies work by assigning a number to the user that has no meaning outside of the assigning website. If you do not want information to be collected through the use of cookies, See Section 4 Online Behavioral Advertising and Options for information on how you can update your preferences. If you choose to disable cookies or Flash cookies on your device, some features of our Website may not function properly or may not be able to customize the delivery of information to you. You should be aware that we cannot control the use of cookies (or the resulting information) by third parties, and use of third party cookies is not covered by our Privacy Policy.
(d) Embedded Scripts. An embedded script is programming code that is designed to collect information about your interactions with the Website, such as the links you click on. The code is temporarily downloaded onto your device from our web server or a third party provider. It is active only while you are connected to the Website, and is deactivated or deleted thereafter.
(e) Web Beacons. Small graphic images or other web programming code called web beacons (also known as '1x1 GIFs' or 'clear GIFs') may be included in our Website pages and messages. The web beacons are tiny graphics with a unique identifier, similar in function to cookies, and are used to track the online movements of Web users. In contrast to cookies, which are stored in a user's computer hard drive, web beacons are embedded invisibly on Web pages and are about the size of the period at the end of this sentence.
1.3 THIRD PARTY USE OF COOKIES AND OTHER TRACKING TECHNOLOGIES
Some content or applications, including advertisements, on the Website are served by third parties, including advertisers, ad networks and servers, content providers, and application providers. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our Website. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.
We do not control these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. For information about how you can opt out of receiving targeted advertising from many providers, see Section 4, Online Behavioral Advertising and Options.
2. HOW WE USE THE INFORMATION DESCRIBED IN THIS POLICY
2.1 TO COMMUNICATE WITH YOU
We use the Personally Identifiable Information you provide us to communicate with you in response to your inquiries. We will communicate with you by email, telephone, or SMS or text message (with your consent), in accordance with your requests.
2.2 IP ADDRESS
We use your Internet Protocol (IP) address to help diagnose problems with our computer server, and to administer our Website. Your IP address is used to help identify you, but contains no Personally Identifiable Information about you.
2.3 MISCELLANEOUS
In addition, we may use User Information: (1) to provide users with requested information or provide special offers or promotional materials on behalf of us or third parties; (2) to improve the Website, to customize user experience with the Website, or to serve specific content that is most relevant to a user; (3) to contact users with regard to use of the Website (4) for internal business purposes; (5) for inclusion in our data analytics; and (6) for purposes disclosed at the time users provide us with their information, or as otherwise set forth in this Privacy Policy.
We may use the information we have collected from you to enable us to display advertisements to our advertisers' target audiences. Even though we do not disclose your personal information for these purposes without your consent, if you click on or otherwise interact with an advertisement, the advertiser may assume that you meet its target criteria.
3. HOW AND WHEN WE DISCLOSE USER INFORMATION TO THIRD PARTIES
3.1 GENERALLY
We share the following categories of personal information with third parties for a business purpose:
Identifiers: such as name, email address, and IP numbers
Commercial information: such as prescriptions and pharmacies searched
Internet network activity: such as search history, pages visited, and coupons generated
Geolocation data: such as ZIP codes entered to see pharmacies nearby, as well as actual location when visitors grant access
We share your personal information for a business purpose with the following categories of third parties:
Service providers
Partners
Data analytics providers
Advertising networks
Social media companies
We do not sell, share, rent or trade the information we have collected about you, including Personally Identifiable Information, other than as disclosed within this Privacy Policy or at the time you provide your information. We do not use your Personally Identifiable Information for direct marketing purposes or share your Personally Identifiable Information with third parties for those third parties' direct marketing purposes unless you consent to such use or sharing. We may share Non-Personally Identifiable Information, such as aggregated user statistics and log data, with third parties for industry analysis, demographic profiling, to deliver targeted advertising about other products, or for other business purposes if you have consented to/not opted out of these disclosures.
3.2 WHEN YOU AGREE TO RECEIVE INFORMATION FROM THIRD PARTIES
You may be presented with an opportunity provide your Personally Identifiable Information in order to receive information and/or marketing offers directly from parties unrelated to us. If you do agree to have your Personally Identifiable Information shared, your Personally Identifiable Information will be disclosed to such third parties and all information you disclose will be subject to those third parties' privacy policies. We are not responsible for the privacy policies and practices of such third parties and, therefore, you should review the privacy policies and practices of such third parties prior to agreeing to receive such information from them. If you later decide that you no longer want to receive communication from a third party, you will need to contact that third party directly.
3.3 THIRD PARTIES PROVIDING SERVICES ON OUR BEHALF
We use third party companies and individuals to facilitate our Website, engage in anti-fraud and security measures, provide customer support, provide geo-location information to our drivers, perform technical maintenance, database management, or web analytics. We may provide these vendors with access to User Information, including Personally Identifiable Information. This information sharing is limited to only the information needed by the vendor to carry out the services they are performing for you or for us. Each of these vendors are obligated not to disclose or use Personally Identifiable Information for any other purpose.
3.4 ADMINISTRATIVE AND LEGAL REASONS
If we receive requests for information from government and law enforcement officials and private parties in regard to enforcing and complying with the law and in connection with private lawsuits, we will disclose User Information to these parties as we reasonably determine is necessary to comply with applicable law. For example, we may disclose User Information: (i) to satisfy any applicable law, regulation, subpoenas, governmental requests or legal process; (ii) to protect and/or defend our Terms and other policies; (iii) to protect the safety, rights, property or security of the Company, our Website or any third party; (iv) to protect the safety of the public for any reason; (v) to detect, prevent or otherwise address fraud, security or technical issues; and/or (vi) to prevent or stop activity we may consider to be, or to pose a risk of being, an illegal, unethical, or legally actionable activity.
3.5 BUSINESS TRANSFER
We may, to the extent permitted by law, share all User Information with our parent, subsidiaries and affiliates for internal, business related (non-marketing) purposes. We also reserve the right to disclose and transfer all User Information: (i) to a subsequent owner, co-owner or operator of the Website; or (ii) in connection with a corporate merger, consolidation, restructuring, the sale of substantially all of our interests and/or assets or other corporate change, including, during the course of any due diligence process.
4. ONLINE BEHAVIORAL ADVERTISING AND OPTIONS
4.1 GENERALLY
Behavioral Advertising uses information collected about an individual's web or mobile browsing behavior such as the pages they have visited or the searches they have made. This information is then used to determine which advertisements should be displayed to a particular individual.
In order for behavioral advertising opt-outs to work on your device, your browser must be set to accept cookies. If you delete cookies, buy a new device, access our Website from a different device, or change web browsers, you will need to opt-out again. If your browser has scripting disabled, you do not need to opt out, as online behavioral advertising technology does not work when scripting is disabled. Please check your browser's security settings to validate whether scripting is active or disabled.
4.2 OPT-OUT
Opting Out of Sale/Sharing, Targeted Advertising, and Profiling You have the right to opt-out of having your personal data collected or processed for the purposes of sale, targeted advertising, and profiling. You can do so by submitting an opt-out request through this link here.
We do not control third parties' collection or use of your information to serve interest-based advertising. However these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative ("NAI") on the NAI's website.
5. A NOTE ABOUT CHILDREN
Our Website is not directed to nor intended for use by children. As such, we do not knowingly collect Personally Identifiable Information from anyone under the age of 16. If we discover that we have collected Personally Identifiable Information from a person under 16, we will delete that information immediately. If you become aware that your child or any child under your care has provided us with information without your consent, please contact us.
6. HOW WE PROTECT YOUR INFORMATION
User Identifiable Information is stored within our databases using standard, industry-wide, commercially reasonable security practices and procedures such as encryption, firewalls and SSL (Secure Socket Layers). We also implement security measures required by law. However, as effective as such technology and efforts may be, no security system is infallible and impervious from attack or hacking. Therefore, we cannot guarantee the security of our databases, nor can we guarantee that User Information won't be intercepted while being transmitted to us over the Internet or wireless communication or accessed when stored on our or our service providers' servers and any information you transmit to us, you do at your own risk.
7. CHANGES TO THIS POLICY
From time to time, we may update this Privacy Policy to reflect changes to our information practices. Any changes will be effective immediately upon the posting of the revised Privacy Policy. We encourage you to periodically review this page for the latest information on our privacy practices.
8. NOTICE TO USERS OUTSIDE OF THE UNITED STATES
If you are located outside of the United States, please note that information we collect, including Personally Identifiable Information, will be transferred to, processed and stored in the United States. The data protection laws in the United States may differ from those of the country or jurisdiction in which you are located, and your Personally Identifiable Information may be subject to access requests from governments, courts, or law enforcement in the United States according to laws of the United States. By using the Website or providing us with any information, you expressly and unambiguously consent to the transfer, processing and storage of your information in the United States.
9. YOUR STATE PRIVACY RIGHTS
State consumer privacy laws may provide their residents with additional rights regarding our use of their personal information.
9.1 PRIVACY NOTICE FOR CALIFORNIA RESIDENTS
Last Reviewed on: July 1, 2024 This Privacy Notice for California Residents supplements the information contained in the Privacy Policy and applies solely to all visitors, users, and others who reside in the State of California ('consumers' or 'you'). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (CCPA) and any terms defined in the CCPA have the same meaning when used in this Notice.
Information We Collect Our Website collects information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device ("personal information"). Personal information does not include:
Publicly available information from government records
Deidentified or aggregated consumer information
Information excluded from the CCPA's scope, like health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data
Personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994
In particular, our Website has collected the following categories of personal information from users within the last twelve (12) months:
Identifiers such as name, email address, and IP address
Personal information such as name
Commercial information such as prescriptions and pharmacies searched
Internet activity such as search history, pages visited, and coupons generated
Geolocation data such as ZIP codes entered to see pharmacies nearby, as well as actual location when visitors grant access
Category | Examples | Collected |
A. Identifiers | Identifiers include name, email address, street address, phone number, and IP address. | YES |
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) | Any information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, his or her name. | YES |
C. Protected classification characteristics under California or federal law | Race, religion, sexual orientation, gender identity, gender expression, age. | NO |
D. Commercial information | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies | YES |
E. Biometric information | Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. | NO |
F. Internet or other similar network activity | Browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application, or advertisement. | YES |
G. Geolocation data | Physical location such as ZIP codes entered to see pharmacies nearby, as well as actual location when visitors grant access. | YES |
H. Sensory data | Audio, electronic, visual, thermal, olfactory, or similar information. | NO |
I. Professional or employment-related information | Current or past job history or performance evaluations. | NO |
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)) | Education records directly related to a student maintained by an educational institution or party acting. | NO |
K. Inferences drawn from other personal information | Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | NO |
L. Sensitive Personal Information | Driver's license, Social Security Number, state identification card, account log-in information, precise geolocation, genetic data, and biometric information that uniquely identifies a consumer. | NO |
We obtain the categories of personal information listed above from the following categories of sources:
Directly from you. For example, via forms you complete as part of drug coupon generation
Indirectly from you. For example, from observing your actions on our Website
Use of Personal Information
To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses
To personalize your Website experience and to deliver content and product and service offerings relevant to your interests via email or text message (with your consent, where required by law)
To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations
As described to you when collecting your personal information or as otherwise set forth in the CCPA
To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our Website users is among the assets transferred
We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice. We will not retain your personal or sensitive personal information longer than reasonably necessary for each disclosed collection purpose.
Sharing Personal Information We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract. We share your personal information for a business purpose with the following categories of third parties:
Service providers
Parent or subsidiary organizations
Partners
Internet cookie data recipients like Google Analytics
Disclosures of Personal Information for a Business Purpose In the preceding twelve (12) months, Company has disclosed the following categories of personal information for a business purpose: Category A: Identifiers
Category B: California Customer Records personal information categories
Category D: Commercial information
Category F: Internet or other similar network activity
Category G: Geolocation data
Sales of Personal Information In the preceding twelve (12) months, Company has not sold personal information.
Your Rights and Choices The CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.
Access to Specific Information and Data Portability Rights You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:
The categories of personal information we collected about you
The categories of sources for the personal information we collected about you
Our business or commercial purpose for collecting that personal information
The categories of third parties with whom we share that personal information
If we disclosed your personal information for a business purpose, a list identifying the personal information categories that each category of recipient obtained
Deletion Request Rights You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies. We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:
Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you
Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities
Debug products to identify and repair errors that impair existing intended functionality
Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law
Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq)
Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent
Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us
Comply with a legal obligation
Make other internal and lawful uses of that information that are compatible with the context in which you provided it
Right to Correct You have the right to request that we correct any of your personal information that is inaccurate. Once we receive and confirm your verifiable consumer request, we shall use commercially reasonable efforts to correct the inaccurate personal information as directed by you.
Right to Opt-out of Sale and Sharing You have the right to opt-out of the sale or sharing of your personal information. Once we receive and confirm your verifiable consumer request, your personal information will not be sold or shared unless you subsequently provide consent.
Right to Limit Sensitive Personal Information Use Our use of your Sensitive Personal Information is generally limited to performing services or providing goods you requested. You have the right to request that we limit our use and disclosure of your Sensitive Personal Information for purposes not subject to an exception pursuant to law.
Exercising Your Rights To submit a sale/sharing opt out or request to limit, click here To exercise the remaining rights described above, please submit a verifiable consumer request to us by either:
Call our customer service center at 1-888-512-0290
Email us at rxsavingstrain@rxsense.com. Please include the following fields in your email:
Full name
Email address
Date of birth
Full address
Phone number (optional)
Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. To designate yourself as an authorized agent, please attach a verifiable notarized document granting you permission to submit any such request on the minor’s behalf. You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:
Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, which may include fields listed above
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.
Response Timing and Format We will confirm receipt of your request within ten (10) business days. We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option.
For requests to opt-out of the sale or sharing or to opt-out of automated processing of your personal information or request to limit the use and disclosure of your sensitive personal information, we will comply within 15 business days after receipt of your request.
Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Non-Discrimination We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
Deny you services
Charge you different prices or rates for services, including through granting discounts or other benefits, or imposing penalties
Provide you a different level or quality of services
Suggest that you may receive a different price or rate for services or a different level or quality of services
9.2 PRIVACY NOTICE FOR COLORADO RESIDENTS
Under the Colorado Privacy Act (“CPA”), Colorado residents have the right to receive certain disclosures regarding a business’ processing of “personal data,” as defined under the CPA, as well as certain rights with respect to our processing of such personal data. In addition, certain information about you may be considered “Sensitive Data” under Colorado Law, and, unless the processing falls under a legal exception, we cannot process Sensitive Data without obtaining your consent. To the extent you are a resident of Colorado and we collect, use or disclose personal data subject to the CPA, the following applies. What personal data we collect:
Identifiers: such as name, telephone number, email address, username and password if you are a loyalty program member, IP address
Commercial information: such as prescriptions and pharmacies searched and considered, loyalty program participation information
Internet or other electronic network activity information: such as computer and connection information, statistics on page views, traffic to and from the websites, ad data and other standard weblog information
Geolocation information: such as ZIP codes entered to see pharmacies nearby, as well as actual location when visitors grant access
What sensitive data we collect: We may collect the following categories of sensitive data (as enumerated in the CPA) about you.
Physical health condition or diagnosis, which may include your interactions with our Website when searching for prescriptions or pharmacies
Personal data revealing your sex life, such as your search for sexual health-related prescriptions
What personal data we share and who we share personal data with:
Category of personal data | Category of third parties to whom we disclosed personal data | Category of third parties to whom we disclosed personal data for “targeted advertising” |
Identifiers; such as online identifiers, IP address | Subsidiaries and affiliates Government entities, regulators and law enforcement | Advertising networks |
Commercial information: such as prescriptions and pharmacies searched and considered, loyalty program participation information | Subsidiaries and affiliates Government entities, regulators and law enforcement | Advertising networks |
Internet or other electronic network activity information: such as computer and connection information, statistics on page views, traffic to and from the websites, ad data and other standard weblog information | Subsidiaries and affiliates Regulators, government entities, and law enforcement | Advertising networks |
Geolocation information: such as ZIP codes entered to see pharmacies nearby, as well as actual location when visitors grant access | Subsidiaries and affiliates Government entities, regulators and law enforcement | Advertising networks |
Photographic and video information | N/A | N/A |
Professional or employment-related information | N/A | N/A |
Inferences about you | N/A | N/A |
Sensitive data | Government entities, regulators and law enforcement | Advertising networks |
We do not sell your personal data to third parties in exchange for monetary consideration. We also do not use or disclose personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning a consumer.
Your Privacy Rights If you are a Colorado resident and we collect, use, or disclose personal data subject to CPA, you may have the following rights under the CPA with respect to your personal data.
Right to access. You have the right to confirm whether or not we are processing your personal data and to access such personal data
Right of portability. You may have the right to obtain a copy of the personal data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit your personal data to another controller or business where the processing is carried out by automated means
Right to delete. You have the right to ask us to delete certain personal data we have collected about you
Right to correction. You have the right to ask us to correct inaccuracies in the personal data we have collected
Right to opt out of sale and profiling. Under the CPA, a “sale” includes exchanging personal data with a third party for monetary or other compensation. Colorado residents also have the right to opt out of the processing of your personal data for decisions that produce legal or similarly significant effects concerning you. We do not process personal data for such profiling
Right to opt out of targeted advertising. You have the right to opt out of targeted advertising based on your personal data
How to Submit a Request If you are a Colorado consumer and wish to exercise these rights, you or your authorized agent may submit a request by using one of the following specifically designated methods:
Email us at rxsavingstrain@rxsense.com
Call our customer service center at 1-888-512-0290
To opt out of targeted marketing, please click here
Responding to Requests For requests for access, correction, deletion, or appeal, we will first acknowledge receipt of your request within 10 business days of receipt of your request. We provide a substantive response to your request as soon as we can, generally within 45 days from when we receive your request, although we may be allowed to take longer to process your request under certain circumstances. If we expect your request is going to take us longer than normal to fulfill, we will let you know. For requests to opt out of the use of your CO Personal Data for purposes of targeted advertising, sale, and automated processing (“profiling”), we will comply within 15 business days after receipt of your request. Requests By Authorized Agents You may designate an agent to submit requests on your behalf. The agent must be a natural person or a business entity that is registered with the Colorado Secretary of State. If you would like to designate an agent to act on your behalf, your agent must provide us your CO Personal Data and signed documentation demonstrating that you authorized the agent to submit a request on your behalf. For access and correction requests, the agent must also follow the verification process outlined below. Please note that this subsection does not apply when an agent is authorized to act on your behalf pursuant to a valid power of attorney. Any such requests will be processed in accordance with Colorado law pertaining to powers of attorney.
Verification of Requests Before we fulfill a request, we must verify your identity and ability to exercise these rights. There are also some exclusions and exceptions that may apply. So that we can verify your identity, you will be asked to give us certain personal data, as described below.
For Access, Correction, Deletion & Appeal requests: We may require you to provide any of the following information: Full legal name, date of birth, email address, and/or phone number. If you ask us to provide you with specific pieces of personal data, we may require you to sign a declaration under penalty of perjury that you are the consumer whose personal data is the subject of the request.
For Opt-Out Requests: Requests to opt-out of targeted advertising, sale, or profiling of your CO Personal Data do not require verification or email confirmation.
Process to Appeal a Decision Related to Your Rights If we refused to fulfill your request to exercise your privacy rights above, you may appeal this decision by contacting us at rxsavingstrain@rxsense.com. We will respond to your request within 45 days of receipt of your appeal with an explanation about our decision to fulfill or refuse your request. You may contact the Colorado Attorney General to file a complaint related to the denial of your request by phone at 1-720-508-6000.
9.3 PRIVACY NOTICE FOR CONNECTICUT RESIDENTS
Under the Connecticut Data Privacy Act (“CTDPA”), Connecticut residents have the right to receive certain disclosures regarding a business’ processing of “personal data,” as defined under the CTDPA, as well as certain rights with respect to our processing of such personal data. In addition, certain information about you may be considered “Sensitive Data” under Connecticut Law, and, unless the processing falls under a legal exception, we cannot process Sensitive Data without obtaining your consent. To the extent you are a resident of Connecticut and we collect, use or disclose personal data subject to the CTDPA, the following applies. What personal data we collect:
Identifiers: such as name, telephone number, email address, username and password if you are a loyalty program member, IP address
Commercial information: such as prescriptions and pharmacies searched and considered, loyalty program participation information
Internet or other electronic network activity information: such as computer and connection information, statistics on page views, traffic to and from the websites, ad data and other standard weblog information
Geolocation information: such as ZIP codes entered to see pharmacies nearby, as well as actual location when visitors grant access
Purpose for collecting personal data:
We collect CT Personal Data to respond to your inquiries, fulfill your requests and improve your experience; for marketing, advertising and promotional purposes; for reporting and analytics; to improve the effectiveness of our services, conduct research and analysis, or for other internal operations purposes. What personal data we share and who we share personal data with:
Category of personal data | Category of third parties to whom we disclosed personal data | Category of third parties to whom we disclosed personal data for “targeted advertising” |
Identifiers; such as online identifiers, IP address | Subsidiaries and affiliates Government entities, regulators and law enforcement | Advertising networks |
Commercial information: such as prescriptions and pharmacies searched and considered, loyalty program participation information | Subsidiaries and affiliates Government entities, regulators and law enforcement | Advertising networks |
Internet or other electronic network activity information: such as computer and connection information, statistics on page views, traffic to and from the websites, ad data and other standard weblog information | Subsidiaries and affiliates Regulators, government entities, and law enforcement | Advertising networks, Social Media Companies |
Geolocation information: such as ZIP codes entered to see pharmacies nearby, as well as actual location when visitors grant access | Subsidiaries and affiliates Government entities, regulators and law enforcement | Advertising networks |
Photographic and video information | N/A | N/A |
Professional or employment-related information | N/A | N/A |
Inferences about you | N/A | N/A |
Sensitive data | Government entities, regulators and law enforcement | Advertising networks |
We do not sell your personal data to third parties in exchange for monetary consideration. We also do not use or disclose personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning a consumer.
Your Privacy Rights If you are a Connecticut resident, you have the following rights under the CTDPA with respect to your personal data.
Right to access. You have the right to confirm whether or not we are processing your personal data and to access such personal data
Right of portability. You may have the right to obtain a copy of the personal data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit your personal data to another controller or business where the processing is carried out by automated means
Right to delete. You have the right to ask us to delete certain personal data we have collected about you
Right to correction. You have the right to ask us to correct inaccuracies in the personal data we have collected
Right to opt out of sale and profiling. Under the CPA, a “sale” includes exchanging personal data with a third party for monetary or other compensation. Colorado residents also have the right to opt out of the processing of your personal data for decisions that produce legal or similarly significant effects concerning you. We do not process personal data for such profiling
Right to opt out of targeted advertising. You have the right to opt out of targeted advertising based on your personal data
How to Submit a Request If you are a Connecticut consumer and wish to exercise these rights, you or your authorized agent may submit a request by using one of the following specifically designated methods:
Email us at rxsavingstrain@rxsense.com
Call our customer service center at 1-888-512-0290
To opt out of targeted marketing, please click here
Responding to Requests For requests for access, correction, deletion, or appeal, we will first acknowledge receipt of your request within 10 business days of receipt of your request. We provide a substantive response to your request as soon as we can, generally within 45 days from when we receive your request, although we may be allowed to take longer to process your request under certain circumstances. If we expect your request is going to take us longer than normal to fulfill, we will let you know. For requests to opt out of the use of your CT Personal Data for purposes of targeted advertising, sale, and automated processing (“profiling”), we will comply within 15 business days after receipt of your request.
Requests By Authorized Agents You may designate an agent to submit requests on your behalf. The agent must be a natural person or a business entity that is registered with the Connecticut Secretary of State. If you would like to designate an agent to act on your behalf, your agent must provide us your CT Personal Data and signed documentation demonstrating that you authorized the agent to submit a request on your behalf. For access and correction requests, the agent must also follow the verification process outlined below. Please note that this subsection does not apply when an agent is authorized to act on your behalf pursuant to a valid power of attorney. Any such requests will be processed in accordance with Connecticut law pertaining to powers of attorney.
Process to Appeal a Decision Related to Your Rights If we refused to fulfill your request to exercise your privacy rights above, you may appeal this decision by contacting us at rxsavingstrain@rxsense.com. We will respond to your request within 45 days of receipt of your appeal with an explanation about our decision to fulfill or refuse your request. You may contact the Connecticut Attorney General to file a complaint related to the denial of your request by phone at 1-860-808-5318.
9.4 PRIVACY NOTICE FOR NEVADA RESIDENTS
If you are a Nevada resident, we are required to provide additional information to you about how we collect, use and disclose your information that may be considered "Personal Data" under Nevada Law ("NV Personal Data"), and you may have additional rights with regard to how we use and disclose your NV Personal Data. In addition, certain information about you may be considered “Consumer Health Data” under Nevada Law, and, unless the processing falls under a legal exception, we cannot process Sensitive Data without obtaining your consent. We have included this Nevada-specific information below.
Processing We process certain categories and specific pieces of NV Personal Data about individuals who reside in Nevada. In the 12 months prior to the date of this Privacy Policy, we collected the following types of categories of NV Personal Data, which we will continue to collect:
Identifiers: such as name, telephone number, email address, username and password if you are a loyalty program member, IP address
Commercial information: such as prescriptions and pharmacies searched and considered, loyalty program participation information
Internet or other electronic network activity information: such as computer and connection information, statistics on page views, traffic to and from the websites, ad data and other standard weblog information
Geolocation information: such as ZIP codes entered to see pharmacies nearby, as well as actual location when visitors grant access
Deidentified Information We may also maintain and use information that does not identify an individual and cannot reasonably be used to identify an individual which is derived from NV Personal Data. We will not attempt to reidentify deidentified NV Personal Data unless permitted by law.
Purposes We collect NV Personal Data to respond to your inquiries, fulfill your requests and improve your experience; for marketing, advertising and promotional purposes; for reporting and analytics; to improve the effectiveness of our services, conduct research and analysis, or for other internal operations purposes.
Targeted Advertising We may share the following categories of NV Personal Data with third parties. In the 12 months prior to the date of this Privacy Policy, we shared your NV Personal Data with third parties for purposes of “targeted advertising,” and may continue to share the following categories of NV Personal Data for “targeted advertising”:
Identifiers: such as name, telephone number, email address, username and password if you are a loyalty program member, IP address
Commercial information: such as prescriptions and pharmacies searched and considered, loyalty program participation information
Internet or other electronic network activity information: such as computer and connection information, statistics on page views, traffic to and from the websites, ad data and other standard weblog information
Geolocation information: such as ZIP codes entered to see pharmacies nearby, as well as actual location when visitors grant access
The categories of third parties to which we may share the above-described categories of NV Personal Data include Government Entities, Regulators, Online Advertising Networks, and Social Media Companies.
Opting Out of Sale and Targeted Advertising You may stop our disclosure of your NV Personal Data to these entities for purposes of targeted advertising by opting-out. Please see the section titled “Exercising Nevada Consumer Rights” below.
Nevada Consumer Rights As a Nevada resident, you have the right to ask us for and access, including in a portable, readily usable format, any or all of following types of information regarding the NV Personal Data we have collected about you:
Specific pieces of NV Personal Data we have collected about you
Categories of NV Personal Data we have collected about you
Categories of sources from which such NV Personal Data was collected
Categories of NV Personal Data we sold or disclosed for a business purpose about you; and
The business or commercial purpose for collecting or selling your NV Personal Data
You also have the right to request deletion of your NV Personal Data and to opt out of the use of your NV Personal Data for purposes of targeted advertising and sale. Nevada also provides its residents with a limited right to opt-out of certain personal information sales. However, please know we do not currently sell data triggering that statute's opt-out requirements.
Exercising Nevada Consumer Rights You or your authorized agent may submit a request to exercise your Utah Consumer Rights by using one of the following specifically designated methods:
Email us at rxsavingstrain@rxsense.com
Call our customer service center at 1-888-512-0290
To opt out of targeted marketing, please click here
Responding to Requests. For requests for access or deletion, we will first acknowledge receipt of your request within 10 business days of receipt of your request. We provide a substantive response to your request as soon as we can, generally within 45 days from when we receive your request, although we may be allowed to take longer to process your request under certain circumstances. If we expect your request is going to take us longer than normal to fulfill, we will let you know. For requests to opt out of the use of your NV Personal Data for purposes of targeted advertising and sale, we will comply within 15 business days after receipt of your request.
9.5 PRIVACY NOTICE FOR OREGON RESIDENTS
If you are an Oregon resident, we are required to provide additional information to you about how we collect, use and disclose your information that may be considered "Personal Data" under Oregon Law ("OR Personal Data"), and you may have additional rights with regard to how we use and disclose your OR Personal Data. In addition, certain information about you may be considered “Sensitive Data” under Oregon Law, and, unless the processing falls under a legal exception, we cannot process Sensitive Data without obtaining your consent. We have included this Oregon-specific information below.
Processing We process certain categories and specific pieces of OR Personal Data about individuals who reside in Oregon. In the 12 months prior to the date of this Privacy Policy, we collected the following types of categories of OR Personal Data, which we will continue to collect:
Identifiers: such as name, telephone number, email address, username and password if you are a loyalty program member, IP address
Commercial information: such as prescriptions and pharmacies searched and considered, loyalty program participation information
Internet or other electronic network activity information: such as computer and connection information, statistics on page views, traffic to and from the websites, ad data and other standard weblog information
Geolocation information: such as ZIP codes entered to see pharmacies nearby, as well as actual location when visitors grant access
Deidentified Information We may also maintain and use information that does not identify an individual and cannot reasonably be used to identify an individual which is derived from OR Personal Data. We will not attempt to reidentify deidentified OR Personal Data unless permitted by law.
Purposes We collect OR Personal Data to respond to your inquiries, fulfill your requests and improve your experience; for marketing, advertising and promotional purposes; for reporting and analytics; to improve the effectiveness of our services, conduct research and analysis, or for other internal operations purposes.
Sale and Targeted Advertising We may share the following categories of OR Personal Data with third parties who are considered "third parties" as defined under Oregon law. In the 12 months prior to the date of this Privacy Policy, we shared your OR Personal Data with third parties for purposes of "targeted advertising," which may constitute a "sale" of OR Personal Data under Oregon law, and may continue to share the following categories of OR Personal Data for "targeted advertising":
Identifiers: such as name, telephone number, email address, username and password if you are a loyalty program member, IP address
Commercial information: such as prescriptions and pharmacies searched and considered, loyalty program participation information
Internet or other electronic network activity information: such as computer and connection information, statistics on page views, traffic to and from the websites, ad data and other standard weblog information
Geolocation information: such as ZIP codes entered to see pharmacies nearby, as well as actual location when visitors grant access
The categories of third parties to which we may share the above-described categories of OR Personal Data include Government Entities, Regulators, Online Advertising Networks Partners and Social Media Companies.
Opting Out of Sale and Targeted Advertising You may stop our disclosure of your OR Personal Data to these entities for purposes of targeted advertising by opting-out of the sale of your OR Personal Data. Please see the section titled “Exercising Oregon Consumer Rights” below.
Oregon Consumer Rights As a Oregon resident, you have the right to ask us for and access, including in a portable, readily usable format, any or all of following types of information regarding the OR Personal Data we have collected about you:
Specific pieces of OR Personal Data we have collected about you;
Categories of OR Personal Data we have collected about you; and
A list of specific third parties with whom we disclose OR Personal Data
You also have the right to request correction or deletion of your OR Personal Data and to opt out of the use of your OR Personal Data for purposes of targeted advertising, sale, and automated processing ("profiling"). In addition, you have the right to appeal our refusal to act on your request.
Exercising Oregon Consumer Rights You or your authorized agent may submit a request to exercise your Oregon Consumer Rights by using one of the following specifically designated methods:
Email us at rxsavingstrain@rxsense.com
Call our customer service center at 1-888-512-0290
To opt out of targeted marketing, please click here
Responding to Requests For requests for access, correction, deletion, or appeal, we will first acknowledge receipt of your request within 10 business days of receipt of your request. We provide a substantive response to your request as soon as we can, generally within 45 days from when we receive your request, although we may be allowed to take longer to process your request under certain circumstances. If we expect your request is going to take us longer than normal to fulfill, we will let you know. For requests to opt out of the use of your OR Personal Data for purposes of targeted advertising, sale, and automated processing ("profiling"), we will comply within 15 business days after receipt of your request. Process to Appeal a Decision Related to Your Rights If we refused to fulfill your request to exercise your privacy rights above, you may appeal this decision by contacting us at rxsavingstrain@rxsense.com. We will respond to your request within 45 days of receipt of your appeal with an explanation about our decision to fulfill or refuse your request. You may also contact the Oregon Attorney General to file a complaint related to the denial of your request by phone at 1-503-378-4400.
9.6 PRIVACY NOTICE FOR TEXAS RESIDENTS
If you are a Texas resident, we are required to provide additional information to you about how we collect, use and disclose your information that may be considered "Personal Data" under Texas Law ("TX Personal Data"), and you may have additional rights with regard to how we use and disclose your TX Personal Data. In addition, certain information about you may be considered “Sensitive Data” under Texas Law, and, unless the processing falls under a legal exception, we cannot process Sensitive Data without obtaining your consent. We have included this Texas-specific information below.
Processing We process certain categories and specific pieces of TX Personal Data about individuals who reside in Texas. In the 12 months prior to the date of this Privacy Policy, we collected the following types of categories of TX Personal Data, which we will continue to collect:
Identifiers: such as name, telephone number, email address, username and password if you are a loyalty program member, IP address
Commercial information: such as prescriptions and pharmacies searched and considered, loyalty program participation information
Internet or other electronic network activity information: such as computer and connection information, statistics on page views, traffic to and from the websites, ad data and other standard weblog information
Geolocation information: such as ZIP codes entered to see pharmacies nearby, as well as actual location when visitors grant access
Deidentified Information We may also maintain and use information that does not identify an individual and cannot reasonably be used to identify an individual which is derived from TX Personal Data. We will not attempt to reidentify deidentified TX Personal Data unless permitted by law.
Purposes We collect TX Personal Data to respond to your inquiries, fulfill your requests and improve your experience; for marketing, advertising and promotional purposes; for reporting and analytics; to improve the effectiveness of our services, conduct research and analysis, or for other internal operations purposes; to detect, prevent or investigate potential security breaches, fraudulent transactions and monitor against theft.
Sale and Targeted Advertising We may share the following categories of TX Personal Data with third parties who are considered "third parties" as defined under Texas law. In the 12 months prior to the date of this Privacy Policy, we shared your TX Personal Data with third parties for purposes of "targeted advertising," which may constitute a "sale" of TX Personal Data under Texas law, and may continue to share the following categories of TX Personal Data for "targeted advertising":
Identifiers: such as name, telephone number, email address, username and password if you are a loyalty program member, IP address
Commercial information: such as prescriptions and pharmacies searched and considered, loyalty program participation information
Internet or other electronic network activity information: such as computer and connection information, statistics on page views, traffic to and from the websites, ad data and other standard weblog information
Geolocation information: such as ZIP codes entered to see pharmacies nearby, as well as actual location when visitors grant access
The categories of third parties to which we may share the above-described categories of TX Personal Data include Government Entities, Regulators, Online Advertising Networks Partners and Social Media Companies.
Opting Out of Sale and Targeted Advertising You may stop our disclosure of your TX Personal Data to these entities for purposes of targeted advertising by opting-out of the sale of your TX Personal Data. Please see the section titled “Exercising Texas Consumer Rights” below.
Texas Consumer Rights As a Texas resident, you have the right to ask us for and access, including in a portable, readily usable format, any or all of following types of information regarding the TX Personal Data we have collected about you:
Specific pieces of TX Personal Data we have collected about you;
Categories of TX Personal Data we have collected about you;
Categories of sources from which such TX Personal Data was collected;
Categories of TX Personal Data we sold or disclosed for a business purpose about you; and
The business or commercial purpose for collecting or selling your TX Personal Data
You also have the right to request correction or deletion of your TX Personal Data and to opt out of the use of your TX Personal Data for purposes of targeted advertising, sale, and automated processing ("profiling"). In addition, you have the right to appeal our refusal to act on your request.
Exercising Texas Consumer Rights You or your authorized agent may submit a request to exercise rxsavingstrain@rxsense.com your Texas Consumer Rights by using one of the following specifically designated methods:
Email us rxsavingstrain@rxsense.com
Call our customer service center at 1-888-512-0290
To opt out of targeted marketing, please click here
Responding to Requests For requests for access, correction, deletion, or appeal, we will first acknowledge receipt of your request within 10 business days of receipt of your request. We provide a substantive response to your request as soon as we can, generally within 45 days from when we receive your request, although we may be allowed to take longer to process your request under certain circumstances. If we expect your request is going to take us longer than normal to fulfill, we will let you know. For requests to opt out of the use of your TX Personal Data for purposes of targeted advertising, sale, and automated processing ("profiling"), we will comply within 15 business days after receipt of your request.
Process to Appeal a Decision Related to Your Rights If we refused to fulfill your request to exercise your privacy rights above, you may appeal this decision by contacting us at rxsavingstrain@rxsense.com. We will respond to your request within 60 days of receipt of your appeal with an explanation about our decision to fulfill or refuse your request. You may contact the Texas Attorney General to file a complaint related to the denial of your request by phone at 1-512-463-2100.
9.7 PRIVACY NOTICE FOR UTAH RESIDENTS
If you are a Utah resident, we are required to provide additional information to you about how we collect, use and disclose your information that may be considered "Personal Data" under Utah Law ("UT Personal Data"), and you may have additional rights with regard to how we use and disclose your UT Personal Data. In addition, certain information about you may be considered “Sensitive Data” under Utah Law, and, unless the processing falls under a legal exception, we cannot process Sensitive Data without obtaining your consent. We have included this Utah-specific information below.
Processing We process certain categories and specific pieces of UT Personal Data about individuals who reside in Utah. In the 12 months prior to the date of this Privacy Policy, we collected the following types of categories of UT Personal Data, which we will continue to collect:
Identifiers: such as name, telephone number, email address, username and password if you are a loyalty program member, IP address
Commercial information: such as prescriptions and pharmacies searched and considered, loyalty program participation information
Internet or other electronic network activity information: such as computer and connection information, statistics on page views, traffic to and from the websites, ad data and other standard weblog information
Geolocation information: such as ZIP codes entered to see pharmacies nearby, as well as actual location when visitors grant access
Deidentified Information We may also maintain and use information that does not identify an individual and cannot reasonably be used to identify an individual which is derived from UT Personal Data. We will not attempt to reidentify deidentified UT Personal Data unless permitted by law.
Purposes We collect UT Personal Data to respond to your inquiries, fulfill your requests and improve your experience; for marketing, advertising and promotional purposes; for reporting and analytics; to improve the effectiveness of our services, conduct research and analysis, or for other internal operations purposes.
Sale and Targeted Advertising We may share the following categories of UT Personal Data with third parties who are considered "third parties" as defined under Utah law. In the 12 months prior to the date of this Privacy Policy, we shared your UT Personal Data with third parties for purposes of “targeted advertising,” which may constitute a "sale" of UT Personal Data under Utah law, and may continue to share the following categories of UT Personal Data for “targeted advertising”:
Identifiers: such as name, telephone number, email address, username and password if you are a loyalty program member, IP address
Commercial information: such as prescriptions and pharmacies searched and considered, loyalty program participation information
Internet or other electronic network activity information: such as computer and connection information, statistics on page views, traffic to and from the websites, ad data and other standard weblog information
Geolocation information: such as ZIP codes entered to see pharmacies nearby, as well as actual location when visitors grant access
The categories of third parties to which we may share the above-described categories of UT Personal Data include Government Entities, Regulators, Online Advertising Networks Partners and Social Media Companies.
Opting Out of Sale and Targeted Advertising You may stop our disclosure of your UT Personal Data to these entities for purposes of targeted advertising by opting-out of the sale of your UT Personal Data. Please see the section titled “Exercising Utah Consumer Rights” below.
Utah Consumer Rights As a Utah resident, you have the right to ask us for and access, including in a portable, readily usable format, any or all of following types of information regarding the UT Personal Data we have collected about you:
Specific pieces of UT Personal Data we have collected about you
Categories of UT Personal Data we have collected about you
Categories of sources from which such UT Personal Data was collected
Categories of UT Personal Data we sold or disclosed for a business purpose about you; and
The business or commercial purpose for collecting or selling your UT Personal Data
You also have the right to request deletion of your UT Personal Data and to opt out of the use of your UT Personal Data for purposes of targeted advertising and sale. In addition, you have the right to opt-out of the processing of your Sensitive Data.
Exercising Utah Consumer Rights You or your authorized agent may submit a request to exercise your Utah Consumer Rights by using one of the following specifically designated methods:
Email us at rxsavingstrain@rxsense.com
Call our customer service center at 1-888-512-0290
To opt out of targeted marketing, please click here
Responding to Requests For requests for access or deletion, we will first acknowledge receipt of your request within 10 business days of receipt of your request. We provide a substantive response to your request as soon as we can, generally within 45 days from when we receive your request, although we may be allowed to take longer to process your request under certain circumstances. If we expect your request is going to take us longer than normal to fulfill, we will let you know. For requests to opt out of the use of your UT Personal Data for purposes of targeted advertising and sale or for requests to opt-out of the processing of your Sensitive Data, we will comply within 15 business days after receipt of your request.
9.8 PRIVACY NOTICE FOR VIRGINIA RESIDENTS
If you are a Virginia resident, we are required to provide additional information to you about how we collect, use and disclose your information that may be considered "Personal Data " under Virginia Law ("VA Personal Data"), and you may have additional rights with regard to how we use and disclose your VA Personal Data. In addition, certain information about you may be considered "Sensitive Data" under Virginia Law, and, unless the processing falls under a legal exception, we cannot process Sensitive Data without obtaining your consent. We have included this Virginia-specific information below. Our Website has collected the following categories of personal information from Virginia users within the last twelve (12) months:
Identifiers such as name, email address, and IP address
Commercial information such as prescriptions and pharmacies searched
Internet activity such as search history, pages visited, and coupons generated
Geolocation data such as ZIP codes entered to see pharmacies nearby, as well as actual location when visitors grant access
Sensitive Personal Information such as precise geolocation
Category | Examples | Collected |
A. Identifiers | Identifiers include name, email address, street address, phone number, and IP address. | YES |
B. Protected classification characteristics under Virginia or federal law | Race, religion, sexual orientation, gender identity, gender expression, age. | NO |
C. Commercial information | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies | YES |
D. Biometric information | Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. | NO |
E. Internet or other similar network activity | Browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application, or advertisement. | YES |
F. Geolocation data | Physical location such as ZIP codes entered to see pharmacies nearby, as well as actual location when visitors grant access. | YES |
G. Sensory data | Audio, electronic, visual, thermal, olfactory, or similar information. | NO |
H. Professional or employment-related information | Current or past job history or performance evaluations. | NO |
I. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)) | Education records directly related to a student maintained by an educational institution or party acting. | NO |
J. Inferences drawn from other personal information. | Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | NO |
K. Sensitive Personal Information | Personal data revealing racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexual orientation, or citizenship or immigration status; the processing of genetic or biometric data for the purpose of uniquely identifying a natural person; the personal data collected from a known child; or precise geolocation data. | NO |
Deidentified Information We may also maintain and use information that does not identify an individual and cannot reasonably be used to identify an individual which is derived from VA Personal Data. We will not attempt to reidentify deidentified VA Personal Data unless permitted by law. We obtain the categories of personal information listed above from the following categories of sources:
Directly from you. For example, via forms you complete as part of drug coupon generation
Indirectly from you. For example, from observing your actions on our Website
Use of Personal Information
To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses
To personalize your Website experience and to deliver content and product and service offerings relevant to your interests via email or text message (with your consent, where required by law)
To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations
As described to you when collecting your personal information or as otherwise set forth in the VCDPA
To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our Website users is among the assets transferred
Sharing Personal Information We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract. We share your personal information for a business purpose with the following categories of third parties:
Service providers
Parent or subsidiary organizations
Partners
Internet cookie data recipients like Google Analytics
Disclosures of Personal Information for a Business Purpose In the preceding twelve (12) months, Company has disclosed the following categories of personal information for a business purpose:
Category A: Identifiers
Category C: Commercial information
Category E: Internet or other similar network activity
Category F: Geolocation data
Category K: Sensitive Personal Information
Sales of Personal Information In the preceding twelve (12) months, Company has not sold personal information.
Opting Out of Sale, Targeted Advertising, and Profiling You have the right to opt-out of having your personal data collected or processed for the purposes of sale, targeted advertising, and profiling.
Virginia Consumer Rights As a Virginia resident, you have the right to ask us to access or for a portable copy of any or all of the following types of information regarding the VA Personal Data we have collected about you:
Specific pieces of VA Personal Data we have collected about you
Categories of VA Personal Data we have collected about you
Categories of sources from which such VA Personal Data was collected
Categories of VA Personal Data we sold or disclosed for a business purpose about you; and
The business or commercial purpose for collecting or selling your VA Personal Data
You also have the right to request correction or deletion of your VA Personal Data and to opt out of the use of your VA Personal Data for purposes of targeted advertising, sale, and automated processing ("profiling"). In addition, you have the right to appeal our refusal to act on your request.
Exercising Virginia Consumer Rights To submit a sale or targeted advertising opt-out, click here. To exercise the remaining rights described above, please submit an authenticated consumer request to us by either:
Call our customer service center at 1-888-512-0290
Email us at rxsavingstrain@rxsense.com. Please include the following fields in your email:
Full name
Email address
Date of birth
Full address
Phone number (optional)
Only you, or someone legally authorized to act on your behalf, may make an authenticated consumer request related to your personal information. You may also make an authenticated consumer request on behalf of your minor child. To designate yourself as an authorized agent, please attach an authenticated notarized document granting you permission to submit any such request on the minor’s behalf.
Responding to Requests For requests for access, correction, deletion, or appeal, we will first acknowledge receipt of your request within 10 business days of receipt of your request. We provide a substantive response to your request as soon as we can, generally within 45 days from when we receive your request, although we may be allowed to take longer to process your request under certain circumstances. If we expect your request is going to take us longer than normal to fulfill, we will let you know.
For requests to opt out of the use of your VA Personal Data for purposes of targeted advertising, sale, and automated processing ("profiling"), we will comply within 15 business days after receipt of your request. In some cases, the law may allow us to refuse to act on certain requests. When this is the case, we will endeavor to provide you with an explanation as to why. We do not charge a fee to process or respond to your authenticated consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Process to Appeal a Decision Related to Your Rights If we refused to fulfill your request to exercise your privacy rights above, you may appeal this decision by contacting us at rxsavingstrain@rxsense.com. We will respond to your request within 60 days of receipt of your appeal with an explanation about our decision to fulfill or refuse your request. You may contact the Virginia Attorney General to file a complaint related to the denial of your request by contacting mailoag@oag.state.va.us.
CONTACT INFORMATION Email: rxsavingstrain@rxsense.com
Phone: 1-888-512-0290