Effective Date: Dec 14, 2024
RxSaveCard (“Company,” “we,” “our,” or “us”) respects your privacy and is committed to protecting it through this Privacy Policy. This policy applies to information we collect on our main marketing site (www.rxsavecard.com), as well as our employee and employer portals (collectively, the “Services”).
By accessing or using our Services, you agree to the collection, use, and sharing of your information as described in this Privacy Policy.
1. Information We Collect
We collect various types of information in connection with your use of the Services, including:
a. Personal Information Provided by You
- Employees: Identifiers, name, date of birth, contact information, prescription drug details, pharmacy usage, financial and payment information.
- Employers: Name, contact details, financial information, and program participation information.
b. CATEGORIES OF PERSONAL INFORMATION WE COLLECT:
We may collect the following categories of Personal Information when you use our Services or otherwise communicate with us.
- Commercial Information. We may collect purchase history, product details and transaction records for products or services purchased, obtained, or considered. We may save the content of texts, emails, or other communications you send to us.
- Internet Activity. We may collect internet or other electronic network activity information, including the websites you visit before or after you use our Services, the date and time you used our Services, search history, information regarding your interactions on our Services, including online identifiers like, browser type, your internet service provider, operating system, application, or advertisement.
- Audio and Visual Recordings. We collect recordings of customer service calls.
- Service Information. We may collect information including prescription drug details, pharmacy usage, financial and payment information.
c. Automatically Collected Information
- Device and browser information (e.g., IP address, operating system, and device type).
- Log data, including time of access, pages viewed, and clicks.
- Cookies and similar technologies (see Section 8 for more details).
d. Sensitive Information
We may collect sensitive health and financial information, including details related to prescription drugs and funding amounts from employers. We take special precautions to secure this data.
2. How We Use Your Information
We use the information we collect to:
- Provide and maintain our Services.
- Facilitate program benefits, including funding and transaction processing.
- Authenticate your access to employee and employer portals.
- Share employee information with employers as authorized by program participation.
- Improve and optimize our Services.
- Communicate with you, including responding to inquiries and sending important updates.
- Comply with applicable laws and regulations.
USE AND DISCLOSURE OF DE-IDENTIFIED OR AGGREGATED INFORMATION
- We may aggregate Personal Information to create anonymous, aggregated data regarding people who use our Services, which describes users as a group but does not reveal the identity of individuals. We may use aggregated data to understand users’ needs, to determine demographics and usage patterns, to determine what kinds of products and services we can provide, and to improve and enrich our Services. We will maintain this data in de-identified form and will not attempt to re-identify de-identified data.
3. Sharing Your Information
We share your information as follows:
a. With Employers
- Employees’ information may be shared with their respective employers who sponsor the program, as authorized by the employee.
b. With Service Providers
- Third-party service providers who assist us in delivering our Services (e.g., payment processors, data hosting, and customer support).
c. For Legal and Compliance Reasons
- When required to comply with legal obligations, protect our rights, or ensure the safety of users.
d. In Business Transactions
- In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.
4. Your Rights and Choices
You may have the following rights regarding your information:
- Access and Correction: Request access to or correction of your personal information.
- Data Portability: Obtain a copy of your data in a portable format.
- Opt-Out: Opt out of marketing communications at any time.
- Deletion: Request deletion of your personal data, subject to legal obligations.
To exercise these rights, please contact us at [email protected] with the email subject “PRIVACY DISCLOSURE RIGHTS” and provide details to identify your information.
5. Data Security
We implement reasonable security measures to protect your information, including encryption, secure data storage, and access controls. However, no security measures are foolproof, and we cannot guarantee the absolute security of your information. If you access the Services from outside the United States, please be aware that Personal Information may be transferred to, stored in, and processed in the United States. Certain governmental authorities may not consider the level of protection of Personal Information in the United States to be equivalent to that required by other jurisdictions.
6. Data Retention
We retain personal information as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods may vary depending on the nature of the information and legal requirements.
7. Children’s Privacy
Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children.
8. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience, analyze usage, and deliver relevant advertising. You can manage your cookie preferences through your browser settings or by using tools we provide.
9. Third-Party Links
Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these third parties. Please review their privacy policies before providing your information.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated effective date. Your continued use of the Services after changes are posted constitutes your acceptance of the revised policy.
11. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us at:
RxSaveCard
819 S Vine
Park Ridge, IL 60068
12. State Specific Provisions.
-
YOUR STATE PRIVACY RIGHTS: TERMS APPLICABLE TO CALIFORNIA, COLORADO, CONNECTICUT, IOWA, MONTANA, NEBRASKA, NEW HAMPSHIRE, NEW JERSEY, OREGON, TEXAS, UTAH AND VIRGINIA, RESIDENTS ONLY, INCLUDING YOUR CALIFORNIA PRIVACY RIGHTS
Certain states have passed laws that provide consumers who are residents of those states with certain privacy rights related to their Personal Information. Those states and the rights are summarized below:
California Consumers: California Consumer Privacy Act, as amended by the California Privacy Rights Act, (“CCPA”)
Colorado Consumers: Colorado Privacy Act (“CPA”)
Connecticut Consumers: Connecticut Data Privacy Act (“CTDPA”)
Iowa Consumers: Iowa Data Protection Act (“IDPA”)
Montana Consumers: Montana Consumer Data Privacy Act (“MCDPA”),
Nebraska Consumers: Nebraska Data Privacy Act (“NDPA”)
New Hampshire Consumers: New Hampshire Privacy Act (“NHPA”)
New Jersey Consumers: New Jersey Data Protection Act (“NJDPA”)
Oregon Consumers: Oregon Consumer Privacy Act (“OCPA”)
Texas Consumers: Texas Data Privacy and Security Act (“TDPSA”)
Utah Consumers: Utah Consumer Privacy Act (“UCPA”)
Virginia Consumers: Virginia Consumer Data Privacy Act (“VDCPA”).
(“collectively “State Consumer Privacy Laws”). We have provided a summary of the rights under the State Consumer Privacy Laws below. In the event of a conflict between this Section and the remainder of this Policy, this Section shall take precedence for residents of the applicable state. Certain capitalized terms not defined in this Policy have the meanings set forth in the applicable State Consumer Privacy Laws.
How to Exercise Your State Consumer Privacy Rights.
Subject to certain limitations such as (a) exceptions permitted by applicable law and (b) verification of your identity, you may exercise the following rights with regard to your Personal Information:
Notice of Your Right to Opt Out
California residents have the right to opt out of the Sale or Sharing of their Personal Information for cross-context behavioral advertising at any time. Colorado, Connecticut, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, and Virginia, residents may direct us to cease processing their Personal Data for targeted advertising or selling their Personal Data. We do not sell personal information or use it for targeted advertising, there is no need to request to opt out.
Depending on where you live, you can exercise your right to opt out as follows:
Opt-Out email and Phone Number
You may submit your opt-out request by contacting us as provided in Section 11.
Right to Know or Access Your Personal Information
California residents have a right to access any of the following which occurred in the prior 12-month period:
- The specific pieces of Personal Information that we have collected from you;
- The categories of Personal Information we collected from you;
- The categories of sources from which the Personal Information was collected;
- The categories of third parties to whom we have disclosed your Personal Information;
- The categories of Personal Information that we shared for a Business Purpose and the categories of third parties to whom it was disclosed for a Business Purpose; and
- The Business or Commercial Purpose for collecting, or sharing, your Personal Information.
Colorado, Connecticut, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, and Virginia residents have the right to confirm whether we are processing your Personal Data and to access such Personal Data. Oregon residents may also request a list of third parties to which we disclose personal data.
Right to Deletion
Depending on the state in which you live, you may have a right to request that we delete Personal Information or Personal Data we collected from you or the right to request that we delete all Personal Information or Personal Data we have collected about you. We will comply with such request, and direct our service providers to do the same, subject to certain exceptions permitted by applicable law.
Right to Correct Your Information
Depending on the state in which you live, you may have a right to request that we correct your inaccurate Personal Information or Personal Data. If you request that we correct inaccurate Personal Information or Personal Data about you, we will use commercially reasonable efforts to correct it. If necessary, we may ask that you provide documentation showing that the information we retained is inaccurate.
Right to Data Portability
Depending on the state in which you live, you may request a copy of your Personal Information or Personal Data we collected from you or request a copy of all the Personal Information or Personal Data we have collected about you in a portable and, to the extent technically feasible, readily usable format.
How to Exercise Your Rights of Access, Deletion, Correction, and Portability
To exercise your rights described in this Policy, you may submit your request to us by contacting as described in Section 11.
Who May Exercise Your Rights. You may only make a request to exercise your rights on behalf of yourself. A parent or legal guardian may make a request on behalf of their child. If you are a California, Colorado, Connecticut, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, or Texas resident, a person that you authorize to act on your behalf may make a request related to your Personal Information. See the section titled “Authorized Agents” below for more information.
Verifiable Consumer Request. To verify your request, you must provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or Personal Data, and you must describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. To verify your identity, we may ask you to log into your account (if you have an account with us) or provide additional information. Any information you provide will only be used to verify your request. When seeking additional information from you, we may contact you through your account or the contact phone number or email address you provided in your request. If we cannot verify your identity, we may deny your request.
Authorized Agents. Colorado, Connecticut, Montana, Nebraska, New Hampshire, New Jersey, Oregon, and Texas residents may submit a request to opt out through an authorized agent. California residents also have a right to submit requests to exercise any privacy right through an authorized agent. If you choose to use an authorized agent, you must (a) provide signed permission to that authorized agent to submit requests on your behalf, and (b) verify your identity.
We may deny a request from an authorized agent if we do not have proof that they are authorized by you to act on your behalf.
When We Will Respond. We will try to respond to your request within 45 days. If we require additional time, we will inform you of the reason and extension period. Any disclosures we provide to California residents will only cover the 12-month period preceding our receipt of your request. For data portability requests, we will select a format to provide your Personal Information to you. We may charge a fee to process or respond to your request if it is excessive, repetitive, or manifestly unfounded.
Right to Non-Discrimination
You have a right to not receive discriminatory treatment for exercising any of your rights. If we choose to offer a financial incentives program in the future, additional terms will apply which may be an exception to this Section. We do not use Personal Information to discriminate against any individual.
- ADDITIONAL INFORMATION FOR CALIFORNIA RESIDENTS
Categories of Personal Information Sold or Shared
In the last 12 months we have not sold Personal Information to a third party for monetary compensation. We have not shared Personal Information with third parties for the purposes of serving targeted advertising or to perform data analytics.
In the last 12 months, we have not shared Personal Information.
Categories of Personal Information Disclosed for a Business Purpose
In the last 12 months we have disclosed Personal Information for our or one of our service provider’s operational purposes. See the section above titled “Categories of Personal Information We Collect” for more detail on the type of Personal Information in each category.
- Identifiers
- Customer Records
- Commercial Information
- Internet Activity
- Service Information
Sharing Personal Information. In the last 12 months we have not sold Personal Information to a third party for monetary compensation. We have not shared Personal Information with third parties for the purposes of serving cross-context behavioral advertising.
We Do Not Use or Disclose Sensitive Information. We do not use or disclose sensitive information, as defined in the CCPA except as necessary to provide Services to you and your employer.
Financial Incentive Offerings. We do not currently send out Financial Incentive Offerings. If we do this in the future, we will update this Privacy Policy.
Shine the Light. Pursuant to California Civil Code Section 1798.83, if you are a California resident, you have the right to obtain: (a) a list of all third parties to whom we may have disclosed your Personal Information within the past year for direct marketing purposes and (b) a description of the categories of Personal Information disclosed, by contacting us per the “Contact Us” Section above.
- ADDITIONAL INFORMATION FOR COLORADO, CONNECTICUT, IOWA, MONTANA, NEBRASKA, NEW HAMPSHIRE, NEW JERSEY, OREGON, TEXAS, AND VIRGINIA RESIDENTS: APPEAL PROCESS
If you disagree with our refusal to take action on your request to exercise your privacy rights, you have the right to ask us to reconsider. You must submit your request within 60 days of your receipt of our denial. You may submit your request to us by contacting us as provided in Section 11.
Once we receive your appeal request, we will acknowledge and start processing your request. Within 60 days of receiving your request, we will inform you in writing of any action taken or not taken in response to your request, including a written explanation of the reasons for our decision.
Version 2412 R1
