CVS Caremark’s Privacy Commitments

Effective Date: November 30, 2012.

At CVS Caremark, we are committed to ensuring your privacy, and this guides every decision we make about how, where, and when to collect your personally identifiable information.  Our goal is to provide you with clear, easy-to-read information about our privacy policy and information practices in one place.  This Privacy Policy and the other explanatory information we provide on this site apply throughout our businesses and across our websites, mobile apps and social media presences (“Our Sites”).  We welcome your questions and feedback about our Privacy Policy or our privacy commitments, and invite you to call us toll-free at 866 389-2727.

We recognize the trust you place in us to safeguard your privacy.  Our privacy commitments are and will remain a fundamental component of our business, and will apply to everyone who has a relationship with CVS Caremark, including patients, customers, and visitors to Our Sites. 

As part of our privacy commitment to you, we want to share with you the basic components of our Privacy Policy:

  1. Transparency.  We will make our privacy commitments easy to find and easy to read.
  2. Notice.  We will notify you of changes to our Privacy Policy before they take effect.
  3. Choice.  You have choices about what information you provide to CVS and how CVS Caremark will use your information for marketing purposes.
  4. Security.  We will use state of the art security safeguards to protect your privacy and the data entrusted to us.
  5. Control.  We will not sell your personal information to anyone, for any purpose.  And when we share information with our subsidiaries or trusted service providers, they too must comply with our privacy commitments.
  6. Accessibility.  We will listen to your feedback and answer your questions about our Privacy Policy, commitments, and practices.>

 

 

___________________________

 

 

The CVS Caremark Privacy Policy

The Scope of this Privacy Policy

CVS Caremark Sites and Mobile Apps, including those for CVS/pharmacy, Caremark, and MinuteClinic, are owned and operated by CVS Pharmacy, Inc. 

This Privacy Policy describes the choices you can make about the way your information is collected and used. Our Privacy Policy applies to the information collected on Our Sites and to any other information that CVS Caremark collects about you.

For information about the privacy of your personal health information, please review the CVS Caremark Notice of Privacy Practices.

Your Consent to Use Our Sites

By using Our Sites, you signify your consent to our collection, use, and disclosure of your personal information in accordance with this Privacy Policy. If you do not agree with the practices described in this Privacy Policy, please do not use Our Sites.

The Information We Collect About Customers and Users

CVS Caremark may collect different types of personal or other information when you visit Our Sites, when you place orders with us, and in other circumstances described in this Privacy Policy.  Some examples of the information we collect include:

  1. Contact Information, which we use for contacting you regarding your orders or for services which may be of interest to you;
  2. Billing Information necessary for your financial relationship with us, including payment method data you store with us for the completion of orders;
  3. Protected Health Information necessary for filling prescription orders from CVS Caremark.   This information is also protected under our Notice of Privacy Practices.
  4. Technical Information relating to your use of our Sites or mobile apps.

How We Collect Information About Customers and Users

CVS Caremark collects information in four primary ways:

  1. When you provide us with information when you purchase or interact with us about products or services offered by CVS Caremark;
  2. When you register as a user of a CVS Caremark Site;
  3. When we collect technical information automatically when you visit Our Sites; and
  4. When we obtain information about you from your employer or health care plan in connection with your prescription orders.

How We Use Information About Customers and Users

CVS Caremark may use the information we collect in a variety of ways to enhance our customers’ experiences, including to:

  1. Process your orders for products or services;
  2. Improve customer services;
  3. Respond to your questions;
  4. Deliver you customized content, advertising and savings that may be of interest to you;
  5. Communicate with you regarding updates, offers, and promotions;
  6. Monitor and ensure Site integrity and security;
  7. Investigate, prevent, or take action relating to illegal activities, violations of our Terms of Service or Privacy Policy; and
  8. Aggregate non-identifiable information for business analysis.

Online Activity Tracking and Advertising

  1. We collect information about your activity on Our Sites using technologies such as cookies, including third-party cookies, web beacons and server log files. 
  2. We and our third party business partners use this automatically generated information, as well as other information that we or they have, to provide you with an optimal website experience.  This includes measuring the effectiveness of our ads and tailoring offers and advertisements to you for products or services you may find helpful on Our Sites and third-party sites.
  3. If you would prefer not to participate in interest-based advertising, you can always opt-out of this activity by visiting the Network Advertising Initiative (NAI) website by clicking here.
  4. Remember that even if you opt-out through the NAI website, you can still receive tailored offers through your CVS ExtraCare savings and rewards program, which can be accessed through mycvs.com. 

How We Share Personal Information

CVS Caremark will only share your personal information in manners described within this Privacy Policy.

  1. With CVS Caremark Companies: CVS Caremark and its subsidiaries may share your personally identifiable information with one another to ensure that your experiences as a customer or user of CVS Caremark Sites is as seamless and enjoyable as possible.
  2. With Third Party Companies: In limited circumstances, CVS Caremark may share your personally identifiable information with third party companies to provide you with technologies, services, or content that may be of interest to you, or to assist us in fulfilling your orders.  In all instances in which CVS Caremark shares your personally identifiable information, we require that the recipient agrees to protect it in a manner consistent with this privacy policy.
  3. In Other Circumstances: CVS Caremark may share your information in other limited circumstances, including:
    1. Responding to requests from law enforcement officials or judicial authorities or to otherwise cooperate with authorities pursuant to a legal matter;
    2. Responding to matters of personal or public safety;
    3. In litigation where the data is pertinent;
    4. To investigate security incidents;
    5. In the event of the sale or transfer of CVS Caremark or of some of our assets, or in the context of similar business negotiations.
    6. We do not sell your personal information to anyone for marketing purposes.

Anonymous and Aggregate Information

  1. We also collect technical, non-personal information about Site users.
  2. CVS Caremark may also remove personally identifiable information to create anonymous data. 
  3. This data cannot be used to identify any individual.
  4. CVS Caremark uses and shares this data for historical, statistical, or business planning purposes.

Our Online Privacy Policy for Children

  1. CVS Caremark Sites are not intended or designed to attract users under the age of 13.
  2. We do not collect personally identifiable information from any person we know to be under the age of 13.
  3. We instruct users under the age of 13 not to send any information to CVS Caremark through our Sites.

Our Data Protection and Security Policy

  1. We maintain industry standard data security measures, including SSL encryption, to protect sensitive data such as when it is stored by CVS Caremark and when you send it to us.
  2. We ask all third parties acting on our behalf to protect your information in accordance with this Privacy Policy and to implement comparable data protection and security policies.
  3. We maintain personal information for registered Site users in accordance with our Records Retention Policy and Procedure, and you have the right to change your membership information or status at any time.

CVS Caremark Customer Privacy Choice and Control

  1. You have the ability to review, modify, or request the removal of personal information we collect about you.  Certain information may be retained, however, to satisfy legal obligations.  
  2. You may choose to limit the types and frequency of communications you receive from CVS Caremark.
  3. You may choose to end your relationship with CVS Caremark at any point.

Our Privacy Commitments to Employment Applicants

  1. We collect information, including personal contact information, education and work history, as well as Social Security numbers in order to process and consider your application.
  2. Your application information will not be sold to unaffiliated third-parties for marketing purposes.
  3. The information on your application may be shared with background services and our affiliates and used for certain regulatory, compliance and legal purposes. 

Changes to this Privacy Policy

  1. Any changes in our Privacy Policy will be prominently posted on so that you are aware of any changes in the data we collect and how we use it.
  2. If you register and provide us with a valid email address, we will notify you by email of any significant changes to this Privacy Policy. You will be given the opportunity to opt in to any significant new uses of personal information if that information was collected prior to the change in this policy. If you do not opt in to any significant new uses of your personal information, that information will continue to be governed by the policy in effect at the time your information was collected.
  3. If you do not register, we will not have your email address and cannot provide you with any notifications of Privacy Policy changes. 

Your Personal Health Information

In some circumstances, CVS Caremark’s use of your information will also be subject to the requirements of the Health Insurance Portability and Accountability Act (frequently referred to as ‘HIPAA’).  For example, when you are submitting personal health information for prescription refills, we are subject to the requirements of HIPAA.

In these circumstances, the terms of CVS Caremark’s Notice of Privacy Practices will apply.

If you have questions about which policy applies to information you have provided us, please do not hesitate to contact us at Privacy Office MinuteClinic, One CVS Drive, Woonsocket, RI 02895 or call us toll-free at (866) 389-2727. 

Your California Privacy Rights

Under California Civil Code Section 1798.83, California customers are entitled to request information relating to whether a business has disclosed personal information to any third parties for the third parties’ direct marketing purposes.  As explained elsewhere in this Privacy Policy, CVS Caremark will not sell or transfer your personal information with third party companies for their direct marketing purposes without your consent.  California customers who wish to request further information about our compliance with this statute or who have questions more generally about our Privacy Policy and our privacy commitments to our customers and Site users should not hesitate to contact us at Privacy Office MinuteClinic, One CVS Drive, Woonsocket, RI 02895 or call us toll-free at (866) 389-2727.

________________________