At CVS Caremark, we are committed to ensuring your privacy. This commitment guides our decisions about how, where, and when to collect and share your personally identifiable information. Our goal is to provide you with clear, easy-to-read explanations about our information practices in one place. This explanatory information applies throughout our businesses and across our websites, mobile apps and social media presences for cvs.com, caremark.com, cvscaremark.com and minuteclinic.com ("Our Sites"). We welcome your questions and feedback about our Privacy Policy or our privacy commitments, and invite you to Contact Us.
As part of our privacy commitment to you, we want to share with you the basic components of our Privacy Policy:
Transparency. We will make our privacy commitments easy to find and easy to read.
Notice. We will notify you of changes to our Privacy Policy before they take effect.
Choice. You have choices about what information you provide to CVS and how CVS Caremark will use your information for marketing purposes.
Security. We will use industry standard security safeguards to protect your privacy and the data entrusted to us.
Control. We will not sell your personal information to anyone, for any purpose. And when we share information with our subsidiaries or trusted service providers, they too must comply with our privacy commitments.
Accessibility. We will listen to your feedback and answer your questions about our Privacy Policy, commitments, and practices.
We recognize the trust you place in us to safeguard your privacy. Our privacy commitments are and will remain a fundamental part of our business, and will apply to everyone who has a relationship with CVS Caremark, including patients, customers, and visitors to Our Sites. These commitments may well grow as our business grows and we develop new ways to interact with you, but rest assured that we will keep you informed about these changes through our updated policies.
THE CVS CAREMARK PRIVACY POLICY
The Scope of this Privacy Policy
CVS Caremark Sites and Mobile Apps are owned and operated by the CVS Caremark Corporation.
This Privacy Policy describes the choices you can make about the way your information is collected and used. Our Privacy Policy applies to the information collected on Our Sites and to any other information that CVS Caremark collects about you.
For information about the privacy of your personal health information, please review the CVS Caremark Notice of Privacy Practices.
Your Consent to Use Our Sites
By using Our Sites, you signify your consent to our collection, use, and disclosure of your personal information in accordance with this Privacy Policy. If you do not agree with the practices described in this Privacy Policy, please do not use Our Sites.
The Information We Collect About Customers and Users
CVS Caremark may collect different types of personal or other information when you visit Our Sites, when you place orders with us, and in other circumstances described in this Privacy Policy. Some examples of the information we collect include:
Contact Information, which we use for contacting you regarding your orders or for services which may be of interest to you;
Billing Information necessary for your financial relationship with us, including payment method data you store with us for the completion of orders;
Personal Health Information necessary for filling prescription orders from CVS Caremark. We may also collect Personal Health Information while providing you services at CVS MinuteClinic. This information is also protected under our Notice of Privacy Practices;
Technical Information relating to your use of our Sites or mobile apps.
How We Collect Information About Customers and Users
CVS Caremark collects information in four primary ways:
When you provide us with information when you purchase or interact with us about products or services offered by CVS Caremark;
When you register as a user of a CVS Caremark Site;
When we collect technical information automatically when you visit Our Sites; and
When we obtain information about you from your employer or health care plan in connection with your prescription orders.
How We Use Information About Customers and Users
CVS Caremark may use the information we collect in a variety of ways to enhance our customers' experiences, including to:
Process your orders for products or services;
Improve customer services;
Respond to your questions;
Deliver you customized content, advertising and savings that may be of interest to you;
Communicate with you regarding updates, offers, and promotions;
Monitor and ensure Site integrity and security;
Investigate, prevent, or take action relating to illegal activities, violations of our Terms of Service or Privacy Policy; and
Aggregate non-identifiable information for business analysis.
Online Activity Tracking and Advertising
We collect information about your activity on Our Sites and through our advertisements using technologies such as cookies, including third-party cookies, web beacons and server log files.
We and our third party business partners use this automatically generated information, as well as other information that we or they have, to provide you with an optimal website experience. This includes measuring the effectiveness of our ads and your interactions them, and tailoring offers and advertisements to you for products or services you may find helpful on Our Sites and third-party sites.
Our Sites may also contain third–party cookies from advertising partners who help serve ads for CVS Caremark and other third parties on Our Sites and elsewhere on the web. To opt-out of these type of cookies, visit the Network Advertising Initiative (NAI) website by clicking http://www.networkadvertising.org/choices/.
Remember that even if you opt-out through the NAI website, you can still receive tailored offers through your CVS ExtraCare savings and rewards program, which can be accessed through mycvs.com.
How We Share Personal Information
CVS Caremark will only share your personal information in manners described within this Privacy Policy.
We do not sell your personal information to anyone for their marketing purposes.
With CVS Caremark Companies: CVS Caremark and its subsidiaries may share your personally identifiable information with one another to ensure that your experiences as a customer or user of CVS Caremark Sites is as seamless and enjoyable as possible.
With Third Party Companies: In limited circumstances, CVS Caremark may share your personally identifiable information with third party companies to provide you with technologies, services, or content that may be of interest to you, or to assist us in fulfilling your orders. In all instances in which CVS Caremark shares your personally identifiable information, we require that the recipient agrees to protect it in a manner consistent with this privacy policy.
In Other Circumstances: CVS Caremark may share your information in other limited circumstances, including:
Responding to requests from law enforcement officials or judicial authorities or to otherwise cooperate with authorities pursuant to a legal matter;
Responding to matters of personal or public safety;
In litigation, investigations, and other legal matters where the data is pertinent;
To investigate security incidents;
In the event of the sale or transfer of CVS Caremark or of some of our assets or lines of business, or in the context of similar business negotiations.
We do not sell your personal information to anyone for marketing purposes.
Anonymous and Aggregate Information
We also collect technical, non-personal information about Site users.
CVS Caremark may also remove personally identifiable information to create anonymous data.
This data cannot be used to identify any individual, and we will not attempt to re-identify later or allow others to do.
CVS Caremark uses and shares this data for historical, statistical, or business planning purposes.
Our Online Privacy Policy for Children
CVS Caremark Sites are not intended or designed to attract users under the age of 13.
We do not collect personally identifiable information from any person we know to be under the age of 13.
We instruct users under the age of 13 not to send any information to CVS Caremark through our Sites.
Our Data Protection and Security Policy
We maintain industry standard security measures, including SSL encryption, to protect sensitive data such as when it is stored by CVS Caremark and when you send it to us.
We ask all third parties acting on our behalf to protect your information in accordance with this Privacy Policy and to implement comparable data protection and security policies.
We maintain personal information for registered Site users in accordance with our Records Retention Policy and Procedure, and you have the right to change your membership information or status at any time.
CVS Caremark Customer Privacy Choice and Control
You have the ability to review, modify, or request the removal of personal information we collect about you. Certain information may be retained, however, to satisfy legal obligations.
You may choose to limit the types and frequency of communications you receive from CVS Caremark.
You may choose to end your relationship with CVS Caremark at any point.
Our Privacy Commitments to Employment Applicants
We collect information, including personal contact information, education and work history, as well as Social Security numbers in order to process and consider your application.
Your application information will not be sold to unaffiliated third-parties for marketing purposes.
The information on your application may be shared with background services and our affiliates and used for certain regulatory, compliance and legal purposes.
Changes to this Privacy Policy
Any changes in our Privacy Policy will be prominently posted on the CVS Caremark Privacy Site so that you are aware of any changes in the data we collect and how we use it.
If you register and provide us with a valid email address, we will notify you by email of any significant changes to this Privacy Policy. You will be given the opportunity to opt in to any significant new uses of personal information if that information was collected prior to the change in this policy. If you do not opt in to any significant new uses of your personal information, that information will continue to be governed by the policy in effect at the time your information was collected.
If you do not register, we will not have your email address and cannot provide you with any notifications of Privacy Policy changes.
Your Personal Health Information
In some circumstances, CVS Caremark's use of your information will also be subject to the requirements of the Health Information Portability and Accountability Act (frequently referred to as ‘HIPAA'). For example, when you are submitting personal health information for prescription refills, or you provide information to during a visit to the MinuteClinic or through the Patient Center My Records at MinuteClinic.com, we are subject to the requirements of HIPAA.
In these circumstances, the terms of CVS Caremark's
HIPAA Notice of Privacy Practices
will apply.
If you have questions about which policy applies to information you have provided us, please do not hesitate to Contact Us, or call us toll-free at (888) 607-4287.
Your California Privacy Rights
Under California Civil Code Section 1798.83, California customers are entitled to request information relating to whether a business has disclosed personal information to any third parties for the third parties' direct marketing purposes. As explained elsewhere in this Privacy Policy, CVS Caremark will not sell or transfer your personal information with third party companies for their direct marketing purposes without your consent. California customers who wish to request further information about our compliance with this statute or who have questions more generally about our Privacy Policy and our privacy commitments to our customers and Site users should not hesitate to Contact Us, or call us toll-free at (888) 607-4287.
FREQUENTLY ASKED QUESTIONS
Definitions of Terms
Can you tell me more about what some of the terms used in the Privacy Policy mean?
CVS Caremark has tried to simplify our Privacy Policy and use easy to understand language wherever possible. But we recognize that aspects of the Policy may contain concepts that are new to you. To help you better understand our commitments, we have compiled a
Glossary of Terms
to explain some of the more technical terms used in our Privacy Policy.
Questions About the Scope of Our Privacy Policy
What is the purpose of this Privacy Policy?
This Privacy Policy describes the choices you can make about the way your information is collected and used.
What companies are subject to this Privacy Policy?
This Privacy Policy applies to the websites, mobile apps and social media presences for cvs.com, caremark.com, cvscaremark.com and minuteclinic.com (“Our Sites”).
In order to provide you with content and services that match your interests, CVS Caremark has relationships with third party companies to provide technology, services, and/or content under CVS Caremark branding. We also provide off-site links that we feel may be of interest to our customers. In addition, we may provide your personal information to certain of our trading partners, service providers and content providers. Recipient organizations may use your personal information to provide you with email or other information about their products and services and other matters. Before any personal information is disclosed to a business partner or service or content provider, the recipient will agree to protect the privacy of your personal information in a manner that is consistent with this Privacy Policy.
What information and activities does this Privacy Policy cover?
Our Privacy Policy applies to the information collected on Our Sites and to any other information that CVS Caremark collects about you.
When is my information not covered by this Privacy Policy?
This Privacy Policy does not cover any information you provide to non-CVS Caremark companies. For instance:
CVS Caremark Sites contain links to other web sites not operated by CVS Caremark. Any information you provide to those third parties is not subject to the terms of this privacy policy, and CVS Caremark is not responsible for the treatment of the information you provide to those third parties. We recommend that you review the privacy policy of that third party, and of any third party to whom you provide personally identifiable information online. CVS Caremark provides any such links as a convenience and the links do not constitute an affiliation with, endorsement or sponsorship of the third parties that operate those websites. CVS Caremark is not responsible for the availability or reliability of the content of these third party websites.
If you send CVS Caremark information using a public forum, such as through messaging boards or on social media sites, any personal information you disclose may be read, collected, used, or distributed by others. If you provide information about yourself on any public site, that information becomes publicly available and CVS Caremark will be unable to prevent other parties from accessing or using that data.
Who is responsible for the data or information I send to CVS Caremark?
CVS Caremark is the sole owner of its customers' personally identifiable information that customers provide to it. We are responsible for safeguarding this information and for treating it in accordance with this Privacy Policy.
Is my information ever subject to more than one privacy policy?
Yes. There are two primary ways in which your information may be subject to more than one privacy policy.
Certain health or medical data about you is protected under HIPAA as personal health information. When you provide us with this information (for example, when you are submitting personal health information for prescription refills or visit the MinuteClinic), we are subject to the requirements of HIPAA. In these circumstances, the terms of CVS Caremark's HIPAA Notice of Privacy Practices will also apply to you information.
If CVS Caremark provides a service in connection with a third party, your information may be subject to this Privacy Policy as well as any privacy policy the third party has in place. We encourage you to review the privacy policies of any other companies with which you do business to determine what information will be collected about you and how it will be used, stored, or disclosed to others.
How do business customers fit in with this Privacy Policy?
When CVS Caremark enters into a written product or service agreement with physician groups, health plans, employers, or other business customers, these agreements may contain provisions relating to the confidentiality, security, or other treatment of information. CVS Caremark will not enter into written agreements with business customers that will conflict with the terms of our Privacy Policy without first obtaining consent from our customers or users who will be subject to the written agreement. When provisions of a written agreement differ from the provisions in this Privacy Policy, the terms of the written agreement will apply.
How does this Privacy Policy relate to CVS Caremark's Terms of Service?
Each CVS Caremark Site provides you with its Terms of Service, which contain important provisions, including provisions disclaiming, limiting, or excluding the CVS Caremark's liability for your use of its Site and provisions determining the applicable law and exclusive jurisdiction for the resolution of any disputes regarding the Site. Each of those provisions applies to any disputes that may arise in relation to this Privacy Policy or our collection, use, and disclosure of your personal information.
Your visit to a CVS Caremark Site and any disputes over privacy are subject to this Privacy Policy and to the Terms of Service in effect on the Site you visited, including any limitations on damages, arbitration of disputes and application of law provisions.
Questions About Your Information: What We Collect and How We Collect and Use It
What information does CVS Caremark collect?
CVS Caremark may collect different types of personal or other information when you visit our Sites, when you place orders with us, and in other circumstances as described in this Privacy Policy. Some examples of the information we collect include:
Contact Information, which we use for contacting you regarding your orders or for services which may be of interest to you. This information permits us to contact you, and includes your name, address, telephone number, and email address. CVS Caremark obtains your contact information when you register with one of our Sites or when you place an order from us.
Billing Information necessary for your financial relationship with us, including payment method data you store with us for the completion of orders. Your billing information may include information related to the services or products you purchase, the telephone numbers or pages within our Sites through which you make your purchases, your credit card information, and any security codes used for your billing information.
Personal Health Information necessary for filling prescription orders from CVS Caremark, or other health information you may share at the MinuteClinic. Personal health information may include, for example, data pertaining to your medical history, test and laboratory results, insurance information, prescription history, and other similar data. This information is also protected under our Notice of Privacy Practices.
Applicant Information necessary to evaluate a candidate for employment, including education and work history, and information necessary to run background checks. For certain positions, this may include results from a drug screening test.
Technical Information relating to your use of our Sites and services. This information may include:
The Internet Protocol (IP) address of your computer,
The IP address of your Internet Service Provider,
The date and time you access the Web Site,
The Internet address of the site from which you linked directly to a CVS Caremark Site,
The operating system you are using,
The sections of the Web Site you visit,
The Web Site pages read and images viewed, and
Any content you post to or download from the Web Site.
How does CVS Caremark collect information?
CVS Caremark collects information:
When you provide us with information when you purchase or interact with us about products or services offered by CVS Caremark. We collect contact and/or billing information from you when you make purchases with us.
When you register as a user of a CVS Caremark Site, you provide us with the information necessary to create an account.
When you apply for a job with any CVS Caremark entity, you will be asked to fill out an employment application and submit to a background screening, and potentially, a drug test.
When we collect technical information automatically when you visit our websites or use our mobile apps. This information is automatically generated, and relates to technical aspects of your visits to our Web Sites.
When we obtain information about you from your employer or health care plan in connection with your prescription orders.
How do we use the information we collect?
We use and store your personally identifiable information in the following situations:
Online Pharmacy Services and Pharmacy Services for Prescriptions Delivered to Your Door: If you order prescriptions for delivery to your door, CVS Caremark will receive certain personally identifiable information from your health care provider, health plan, or prescription insurance provider. This information, along with other information from your health care provider, your prescription insurance information, and your medical profile information will be stored in your account. If you have questions about the information your employer, health plan, or insurer may have shared with us, please contact your employer's human resources department or your health plan or insurer.
When you order prescription medications, we ask a few brief questions about your medical history. State and national boards of pharmacy require that we ask you for this information, which is used by our pharmacists to ensure that your prescriptions are properly dispensed.
Payment (Billing) Information: For all orders, both prescription and nonprescription, we ask you to provide credit card information. For nonprescription orders, we will bill your credit card for nonprescription items and any applicable shipping and handling charges. For prescription orders, we will bill your prescription insurance company for the cost of your medications, and charge your credit card your co-payment and any applicable shipping and handling charges. If you do not use prescription insurance, we will charge your credit card the cash price for the medication and any applicable shipping and handling charges.
Storage: If you choose to create an online account, we will store billing and shipping information as a convenience to you for future purchases, and we will store information about your prescription and nonprescription orders for order tracking and status retrieval purposes. If you choose to shop as a guest, we will only store your billing, shipping and contact information until the order has shipped.
Contact Information for Notifications: CVS Caremark collects personally identifiable information at CVS Caremark Sites from web visitors who are interested in receiving services or communications such as prescription services, email alerts, newsletters, and other notifications. CVS Caremark works with third-party providers to provide specific services offered on CVS Caremark Sites, and may collect personal information as part of the provision of those services.
Non-Identifiable Aggregate Information: Your personally identifiable information is removed before collected information is passed to the database we use to generate reports. Thus, business reports created by CVS Caremark analysts are based on aggregate information and do not identify any particular customer.
Responding to Your Requests: Information you provide is used in order to respond to your request. For example, to fulfill your order or contact you with information about your order, to send you email alerts, or to send you newsletters. From time to time, CVS Caremark requests information from users via surveys on our Web Sites. Participation in these surveys is voluntary, and information collected as part of those surveys is used in compliance with this Privacy Policy.
Evaluate your Employment Application: We will use the information you provide, as well as information from third party sources such as your references and the results of your background screening and drug tests, to evaluate your employment application.
Use by Affiliated Businesses: We may also provide information or provide access to information to any of our affiliated businesses or to our business partners, subsidiaries, affiliates, or fulfillment houses. We notify businesses and partners to which we transfer your personal information that the information was shared with us under this Privacy Policy, and we require that these businesses receiving your information protect it using security mechanisms as strong as those in use on CVS Caremark sites.
Customized Information Used for Offers: We may link information collected from you through various means, including information collected automatically and through the use of cookies and Registered User information, with information we learn in our stores and from Registered Users. Our goal is to help offer you content, advertisements, products, and services that are most likely to appeal to you.
Questions About Activity Tracking and Advertising
Does CVS Caremark collect information about me on its Sites?
Yes, CVS Caremark will collect certain information about your activities on CVS Caremark Sites, as described in this policy. We collect this information to improve our customer service to you and to other customers.
What tools does CVS Caremark Use to collect online information, and how do you use them?
Cookies are small computer files we transfer to your computer's hard drive. These small text files, and similar technologies such as web beacons, help CVS Caremark Sites and third-party advertizing partners personalize content on our pages, provide programs like e-coupons, and measure the effectiveness of our ads. These cookies often interact with pixels – which are invisible elements of ads that send a signal to the cookie when an ad is shown. Web Server Logs are automatically generated files containing data about the usage of CVS Caremark Sites, including how many people are using our Sites and for what purpose.
Reviewing our Web server logs and our customers' use of our site helps us to statistically monitor how many people are using our site and for what purpose. The use of these files allows us to improve site functionality and to try to ensure that the advertisements we show you reflect your interests.
What information do you collect using these tools?
The information we collect includes certain non-identifiable information regarding Web Site users, such as:
The Internet Protocol (IP) address of your computer,
The IP address of your Internet Service Provider,
The date and time you access the Web Site,
The Internet address of the site from which you linked directly to a CVS Caremark Site,
The operating system you are using,
The sections of the Web Site you visit,
The Web Site pages read and images viewed, and
Any content you post to or download from the Web Site.
None of this information will be used to identify you. We use this non-identifiable information only for Web Site and system administration purposes and to improve the Web Site. We may disclose such non-identifiable information to others and archive it for future use.
Do any of the advertisements on CVS Caremark Sites use cookies or similar devices?
Advertisements displayed on CVS Caremark Sites may also contain cookies or other technologies. Those advertisements may be provided by third party advertising companies. Those companies may also cookies or other technologies in the advertisements and may maintain separate policies for the use and disclosure of information collected through such advertisement cookies.
Our Sites may also contain third–party cookies from advertising partners who help serve ads for CVS Caremark and other third parties on Our Sites and elsewhere on the web. To opt-out of these type of cookies, visit the Network Advertising Initiative (NAI) website by clicking http://www.networkadvertising.org/choices/.
Do CVS Caremark partners deploy cookies on their web sites?
Our partners may also use cookies on their web sites. You should read the individual privacy policies of our partners, and make your own informed decision about whether or not to continue to share your information with these partners based upon their privacy practices.
Who has access to cookie or server log data about me?
Only authorized CVS Caremark personnel have access to the Web server logs, CVS Caremark cookie utilization data, and purchase history information collected by us. These employees are held to our internal confidentiality and security policies and procedures.
Our Sites may also contain third–party cookies from advertising partners who help serve ads for CVS Caremark and other third parties on Our Sites and elsewhere on the web. To opt-out of these type of cookies, visit the Network Advertising Initiative (NAI) website by clicking [here]. (Link to http://www.networkadvertising.org/choices/)
Is this information linked to my personal information that CVS Caremark collects?
This information is not linked to any personally identifiable information about a particular individual or customer account, but it is collected from a particular computer or device as the user moves through websites. Our use of cookies also allows us to collect and retain certain information about a website user, such as the type of Web browser used by our customers.
Is there a way for me to manage the cookies on my computer?
In addition to the opt-out described above, your browser software can be set to reject or accept cookies. Instructions for resetting the browser are available in the Help section of most browsers. There are certain features of CVS Caremark Sites which you may not be able to access if your disable cookies.
Remember that the NAI opt-out also works through the use of cookies, so if you clear or delete all existing cookies, you may have to subsequently reset the NAI opt-out.
How can I take control of my online privacy with regard to advertisements?
Cooperative groups of companies committed to building responsible advertising policies across the Internet, such as the Network Advertising Initiative (NAI), have established excellent resources. The NAI is a coalition of online advertising companies committed to complying with self-regulatory standards that establish and reward responsible business and data management practices.
Through the NAI, consumers can obtain information about online advertising companies' information collection practices, and opt out of behavioral advertising delivered by participating companies by following the opt-out instructions at http://www.networkadvertising.org/choices.
Please note that some opt-out functionality requires that third-party cookies be permitted. For example, opt-out cookie functions cannot be utilized by a user with a Safari browser that is set to block third-party cookies (which is the default setting), unless the consumers change the settings temporarily to accept a third-party opt-out cookie, and then restores the setting to block new third party cookies.
Do any of the advertisements on CVS Caremark Sites use cookies or similar devices?
Advertisements displayed on CVS Caremark Sites may also contain cookies or other technologies. Those advertisements are third party advertising companies. We do not have any control over, or any responsibility or liability for, the cookies or other technologies used in the advertisements or for the use and disclosure of information collected through advertisement cookies. We encourage you to look at the privacy policies of these companies and to exercise your privacy choices at the Network Advertising Initiative's Consumer Opt-Out website at http://www.networkadvertising.org/choices.
Questions About Information Sharing
What is CVS Caremark's policy on sharing data with third parties?
In order to provide you with content and services that match your interests, CVS Caremark has relationships with third party companies to provide technology, services, and/or content under CVS Caremark branding. We also provide off-site links that we feel may be of interest to our customers.
We may occasion provide information or provide access to information to any of our affiliated businesses or to our business partners, subsidiaries, affiliates, or fulfillment houses. We do this in order to fulfill orders, to provide services or products, and to optimize customer service and our customers' experiences.
How may third parties use my personal information?
Recipient organizations may use your personal information for fulfilling their agreements with CVS Caremark relating to services or products you order. These organizations also may use your personal information to provide you with email or other information about their products and services and other matters.
For example, CVS Caremark may, at times, use outside companies as our agents to help provide you with promotional information and offers. Beyond your name and addresses, these agents do not receive any personal information about you from CVS Caremark, and these agents are contractually required to keep your information strictly confidential.
Are these CVS Caremark business partners, subsidiaries, affiliates, or fulfillment houses required to follow this Privacy Policy?
Yes. We notify businesses and partners to which we transfer your personal information that the information was shared with us under this Privacy Policy, and we require that these businesses receiving your information protect it using security mechanisms as strong as those in use on CVS Caremark Sites. Before any personal information is disclosed to a business partner or service or content provider, the recipient will agree to protect the privacy of your personal information in a manner that is consistent with this Privacy Policy.
Do you provide my personal information to any non-affiliated third party companies for their own purposes without my permission?
No. We may transfer your personal information to affiliated companies, or companies that perform services on our behalf. But we do not sell, rent, loan or give your personal information to any non-affiliated third party companies for their own purposes.
If you opt-in, we may provide your information to companies that we believe may offer you related services or products that may be of interest to you.
Do I have any choice over how my information is shared with CVS Caremark's partners?
Yes. Some of the services we offer through partnerships require registration or subscription to make them function properly. For example, the Patient Center My Records at the MinuteClinic website permits you to view your MinuteClinic medical records online, as well as link your MinuteClinic records to a personal Microsoft HealthVault account. You are under no obligation to provide your information to these partners of CVS Caremark. You may choose not to share your information with such partners by not using that service or viewing that content. When you register or subscribe to use one of these services, the information you provide may be collected and saved by the partner. And you may always opt out of receiving marketing communications by following the unsubscribe link at the bottom of any marketing email.
Do CVS Caremark partners deploy cookies on their web sites?
Our partners may also use cookies on their web sites. We are unable to control their use of cookies or how they manage the information they gather from these cookies. You should make every effort to read the individual privacy policies of our partners, and make your own informed decision about whether or not to continue to share your information with these partners based upon their privacy practices.
Are there any other instances where CVS Caremark may share my information?
Yes. If we are requested by law enforcement officials or judicial authorities to provide information on individuals, we may, without your consent, provide such information. In matters involving claims of personal or public safety or in litigation where the data is pertinent, we may use or disclose personal information without your consent or court process. We may use information you submit to investigate security breaches or otherwise cooperate with authorities pursuant to a legal matter.
How does CVS Caremark treat information provided through social media sites?
Information you provide to CVS Caremark through social media sites (including, for example, CVS Caremark's pages on Facebook.com and Twitter.com) is governed subject to the privacy policies of those social media sites, and may not be confidential. In many instances, data submitted through social media sites will be publicly viewable or accessible. We encourage you to not send CVS Caremark any personal information, personally identifiable information, personal health information, or any other potentially sensitive information through social media sites. What is CVS Caremark's relationship to the external links provided on its Sites?
CVS Caremark Sites contain links to other web sites not operated by CVS Caremark. These links are provided as a convenience and do not constitute an affiliation with, endorsement or sponsorship of the third parties that operate those websites. CVS Caremark is not responsible for the availability or reliability of the content of these third party websites.
Does the CVS Caremark Privacy Policy apply to information submitted to these external sites?
Any information you provide to those third parties is not subject to the terms of this privacy policy, and CVS Caremark is not responsible for the treatment of the information you provide to those third parties. We recommend that you review the privacy policy of that third party, and of any third party to whom you provide personally identifiable information online.
Questions About Anonymous and Aggregate Information
How does CVS Caremark create and use anonymous and aggregate information?
CVS Caremark uses and shares anonymous, aggregated data for completing historical, statistical, or planning reports for our business. Your personally identifiable information is removed before collected information is passed to the database we use to generate reports. Thus, business reports created by CVS Caremark analysts are based on aggregate information and do not identify any particular customer.
Questions About Who the Sites Are Intended For
Are CVS Caremark Sites designed for use by children?
No. CVS Caremark Sites are not intended or designed to attract users under the age of 13. We do not collect personally identifiable data from any person we know to be under the age of 13 and instruct users under 13 not to send us any information to this Site.
• Are CVS Caremark Sites designed for an international audience?
o No. CVS Caremark Sites are designed only for users from the United States. Users from other countries are advised not to disclose personal information unless they consent to having their information transferred to the United States, or in some circumstances, British Columbia, Canada, and used as set forth in this Privacy Policy rather than under the law of user's home country.
When I use CVS Caremark Sites, where is my information sent?
In general, you transmit data to servers located in the United States subject to United States law. In specific instances, as described in this Privacy Policy, your data may be sent to servers located in British Columbia, Canada, for order fulfillment. You should not share any personal information or otherwise use our Sites unless you agree to be bound by this Privacy Policy and applicable laws.
Questions About CVS Caremark's Data Protection and Security
How does CVS Caremark ensure that my information is protected?
We use industry standard security measures to protect against the loss, misuse, and alteration or destruction of the information under our control. Specifically, we use Secure Socket Layer (SSL) technology for the areas of our site where we ask you to provide personally identifiable information.
SSL technology greatly enhances the safe transmission of personal information you give us because the information is encrypted. Encryption involves systematically scrambling numbers and letters so that if someone managed to intercept a packet of information, they would not be able to make sense of it. Although encryption slows the process of sending information across the Internet, it does provide better protection for your information.
How do I know that I am viewing a secure CVS Caremark Site?
You can tell you have entered a secured area when you look at the Universal Resource Locator (URL) in your browser's address bar and see that it has “https://” before the rest of the Web address. The “s” means that the page is hosted from a secured server. We use secured servers for our Registration/Membership and Sign In pages, Your Account pages, order processing pages, and special promotions.
Unsecured pages have URLs that begin with “http://” (without the “s”). Most of our shopping aisles and health information areas are hosted from servers that do not use SSL. Since we do not collect personal information in these areas, using regular servers ensures a faster browsing experience.
Why have I received a warning message that my content is unsecured?
You may on occasion encounter a standard warning that many browsers display when a visitor moves from a “secured” page to an “unsecured” page. When you encounter such a warning on our Web site, it usually means that you are moving from an “https://” to an “http://” page. If you see other browser warnings or error messages concerning the security of our site, please Contact Us. Include the specific wording you saw and where on a CVS Caremark site you encountered the message. Providing us with these details helps us to know if you have encountered a technical difficulty or a standard warning like the one described above.
Does CVS Caremark guarantee the safety of information sent to it?
Unfortunately, we cannot make any guarantees about the safety of your information. Although CVS Caremark Sites use industry standard security measures to protect your information, please keep in mind that no security system is impenetrable. We cannot guarantee the security of our servers and it is also possible that information you supply to us may be intercepted during transmission In addition, due to the nature of the Internet, Internet technologies, and the existing regulatory environment, we cannot ensure that your personal information will not be disclosed in ways not otherwise described in this Privacy Policy. In the event of an inadvertent disclosure of or unauthorized access to customer data, CVS Caremark will comply with all applicable data protection and security laws.
Does CVS Caremark require its contractors or service providers to secure information?
We will ask that any third parties to whom we may transfer your information to take comparable steps to protect that security.
Do I have any responsibility for securing my information on CVS Caremark sites?
You are responsible for maintaining the confidentiality of any access information and passwords and for restricting access to your computer and you agree to accept responsibility for all activities that occur under your password.
Promptly inform us of any need to deactivate a password or an account by calling Customer Care at (888) 607-4287.
I have seen sites that look similar to CVS Caremark Sites but I could not tell if they were legitimate. Can you tell me more about this?
Please be aware that there may be fraudulent websites that illegally use CVS Caremark logos, and other aspects of the CVS Caremark brand. CVS Caremark is in no way associated with any fraudulent websites. These sites may circulate their presence on the internet via spam email, or through fraudulent phishing practices.
These sites have not been authorized by CVS Caremark to use our name and we work aggressively to identify their source and have them shut down. If you are in receipt of a spam email appearing to be from CVS Caremark, to help protect your privacy you should avoid replying to it or forwarding it to other people. Please let us know about any such fraudulent activity by contacting us.
How can I distinguish these fraudulent sites from legitimate CVS Caremark Sites?
All legitimate Sites can be accessed from one of our official CVS branded Sites: www.cvs.com, www.cvscaremark.com, www.caremark.com, and www.minuteclinic.com. In addition to our official Web Sites, CVS Caremark works with a number of third party partners that host websites and micro-sites that provide information and services to our customers. If you ever have reason to question whether a website or an email is fraudulent, please contact us by phone at 888-607-4287 with your concerns.
What is spyware?
Spyware is a data collection technology that is downloaded to a consumer's personal computer which aids in gathering information about that person or organization without their knowledge. It can enter your computer as a software virus or as a result of installing a new program. It is used to gather information about your personal internet usage, monitor keyboard strokes or capture personal information for use by other parties.
Does CVS Caremark ever use spyware?
No. CVS Caremark does not install any surreptitious tracking software or spyware on your system, or collect personal information about you and your browsing habits. Spyware should not be confused with cookies and other standard Internet advertising technologies.
o The personally identifiable information we gather is with the consent of the user, and all possible uses for the data are outlined at the time you provide the data. We take the security of your personal information seriously, and work hard to maintain a safe and secure Site for your use.
Questions About Customer Choice and Control
What is the purpose of registering for CVS Caremark Sites?
Certain areas of CVS Caremark Sites are accessible only to registered users. Some areas of CVS Caremark Sites may not be accessible unless you receive prescription benefits from a company who has hired Caremark to provide you with online prescription services. Your employer or CVS Caremark will provide you with the information you need in order to complete the registration process.
Am I required to provide CVS Caremark with personal information during registration?
Yes. To register on a CVS Caremark Site, we collect personally identifiable information, which is maintained throughout the time you are an active CVS Caremark member. By registering and establishing an online account with a CVS Caremark Site, you consent to the collection and use of the information as described in this Privacy Policy.
Can I ask that CVS Caremark remove me from its distribution lists?
We hope you'll agree to let us contact you with timely promotional offers. However, if you tell us that you do not wish to have this information used for further contact, we will remove you from our distribution list. You can take yourself off our email list for promotional offers at any time by updating your Email Communications preference in your Account Profile in the My Account section or by following the unsubscribe instructions at the bottom of any marketing communication.
Is there any way for me to request that CVS Caremark removes or modifies my information?
You can request the removal or modification of any of your personally identifiable information by sending an email to the appropriate area under “Contact Us.” You may also request that we not disclose your information. We will respond to accommodate your request in 30 days. It would be helpful to let us know the context in which you provided us your information.
Can I change my membership status as a CVS Caremark registered user?
You are free to change your membership status at any time.
How long will CVS Caremark retain my information after I cease to be a registered user?
CVS Caremark will not retain your information indefinitely, and your information will receive the same security as currently registered users under this Privacy Policy. If your membership status changes, we maintain this information securely in accordance with our Records Retention Policy and Procedure. Our current policy is to retain this information for seven (7) years after your membership status terminates.
Questions About Changes to this Privacy Policy
How will CVS Caremark let users and customers know of changes to this Privacy Policy?
Any changes to this Privacy Policy will appear on the CVS Caremark Privacy page so that you are aware of the change and how it may affect our collection or use of your information.
If you register with a CVS Caremark Site and provide us with a valid email address, we will notify you by email of any significant changes to this Privacy Policy.
Will CVS Caremark provide users or customers with any opportunity to exercise choice over the Privacy Policy changes?
If you have registered with a CVS Caremark Site and provided us with a valid email address, we will give you the opportunity to “opt in” to any significant new uses of personal information if that information was collected prior to the change in the Privacy Policy.
If you do not opt in for this use, your information collected prior to the change in the Privacy Policy will continue to be governed by the version of the Privacy Policy in effect at the time your information was collected.
How to Contact Us
What is the best way to get in touch with CVS Caremark about any questions or concerns about this Privacy Policy?
If you have any questions or concerns about the CVS Caremark Privacy Policy, or about the way your information is collected and used, please Contact Us or call us toll-free at (888) 607-4287.
If I want to send CVS Caremark something in writing, where do I send it?
If you would like to communicate with us in writing regarding this Privacy Policy, please contact the CVS Caremark Privacy Office at the following address:
Aggregate Information: Aggregate information is information pertaining to a number of Site users or customers, where the information has been stripped of any information that may be used to identify an individual (the information may be considered “anonymous information”). CVS Caremark may use aggregate data for historical, statistical, or business planning purposes, and generating business reports.
Cookies: Cookies are small computer files we transfer to your computer's hard drive. These small text files help us personalize content on our pages and provide programs like e-coupons. Only authorized CVS Caremark personnel have access to the cookie utilization data collected by us, and these employees are held to strict confidentiality and security policies and procedures. CVS also uses third-party cookies to help deliver tailored advertising on our Sites and third-party sites.
Customer: Any individual who purchases CVS Caremark products or services. In many instances, our customers are also registered users.
CVS Caremark: CVS Caremark refers to CVS Caremark Corporation and its subsidiaries.
HIPAA / Personal Health Information: The Health Insurance Portability and Accountability Act governs the treatment of certain information relating to the health or medical circumstances of individuals. This information is known as Personal Health Information. CVS Caremark safeguards Personal Health Information under an additional policy, CVS Caremark's HIPAA Notice of Privacy Practices.
Personally Identifiable Information: Personally Identifiable Information includes information like your name, home address, telephone number, email address, birth date, or any other information that would allow someone to identify you or contact you.
Registered Users: Registered Users of CVS Caremark Sites are those users who create an account on any of the CVS Caremark Sites. Information submitted to CVS Caremark by Registered Users is protected under the terms of this Privacy Policy.
Server Logs: Web Server Logs are automatically generated files containing data about the usage of CVS Caremark Sites, including how many people are using our Sites and for what purpose. Only authorized CVS Caremark personnel have access to our Server Logs, and these employees are held to strict confidentiality and security policies and procedures.
Sites and Web Sites: Where the capitalized term “Site” or “Web Site” appears in this Privacy Policy, it refers to any website owned or operated by CVS Caremark.
Spyware: Spyware is a data collection technology that is downloaded to a consumer's personal computer which aids in gathering information about that person or organization without their knowledge. It can enter your computer as a software virus or as a result of installing a new program. It is used to gather information about your personal internet usage, monitor keyboard strokes or capture personal information for use by other parties. CVS Caremark does not and will not use spyware.
Secure Socket Layer: Secure Socket Layer, also known as “SSL,” is an encryption technology that provides for the safe transmission of personal information or other data you give us. The SSL encryption scrambles the numbers and letters within the information sent between you and CVS Caremark so that others may not be able to understand it.
Third Parties: Third parties are companies other than CVS Caremark and its subsidiaries. Third parties may be business affiliates or service providers who provide technology, services, or content to Site users. All third parties having access to any user or customer personal information have contractually agreed with CVS Caremark to protect the privacy of your personal information in a way that is consistent with this Privacy Policy. We have also asked any third parties with access to user or customer information to employ data security practices comparable to those employed by CVS Caremark.
User: A user is any individual who visits any of our Sites.