Product Privacy Notice

Effective Date: July 9, 2025

At Rx Savings Solutions (“RxSS”, “McKesson”, “our”, “us”, or “we”), we value the trust that healthcare customers, patients, health plans, and employees place in us to use and protect personal information. This Privacy Notice informs you how we will use, share and protect your personal information. When you create an account with us and use our Services or provide us with personal information, you accept the privacy practices described in this Privacy Notice.

Please read this Privacy Notice in full to understand our privacy practices before you use our services or submit any personal information. The Services mean those we provide to you as a registered user via an online portal or mobile application. 

Scope 

This Privacy Notice applies to our use of personal information we collect when you use any of our Services (via our online portal or our mobile application) or in the ordinary course of business. These online portals /mobile applications (URLs) may include: 

• https://portal.rxsavingsolutions.com
• https://auth.rxsavingsoltuions.com
• https://account.rxsavingsolutions.com
• RxSS Mobile Application

    This Privacy Notice does not apply to:  

• Individual health providers and practices who have separate privacy notices or Notice of Privacy Practices.
• RxSS’s affiliates and subsidiaries that may have separate websites, subdomains, and applications through other web, mobile, cloud or SaaS platforms which are not subject to this Privacy Notice. 
• RxSS’s business partners, ad networks and other third parties that may have their own websites and services with separate privacy notices. 

We encourage you to read the privacy notices of all websites and applications that you visit so that you understand their privacy practices. 

Personal Information We Collect 

When you use our Services, we may collect personal information about you. The personal information we may collect includes, but is not limited to: 

• Name
• Age
• Date of birth
• Personal home address
• Personal telephone number (home & cell)
• Personal electronic mail address
• Business telephone number (office & cell)
• Business electronic mail address 
• Health insurance identification or account number
• Drug names
• Medical products or equipment used
• Diagnosis code/description (condition information)
• Social security/social insurance number
• User ID and password
• Products/services used by an individual
• Geo-Location/GPS information
• IP address
• User’s browser type
• User’s operating system
• Device/user activity (such as Login-Logout info, sites/pages visited, # of visits, click stream, navigation, beacon signal hits, errors, crash rate, or other user activities)
• Communication preferences, such as text message or email notification and frequency
• Information you provide directly to us: 
• When you use our Services.
• When you use offline features related to our Services, such as communicating with us by phone, e-mail, or in person.
• When you interact with us in the ordinary course of business.

Personal information may be combined with information that does not identify you. If we combine information that does not identify you with your personal information, it will be treated as personal information. We may also gather information about you from our customers, your health plan (or its management entity), pharmacy benefit managers (PBM), data banks, aggregators, other business units, affiliates, along with publicly available data that we may combine with information we already have about you. 

Tracking Technologies We Use 

We use various technologies to collect personal information including: 

Web server logs  

• As is true of most websites and applications, we gather certain information automatically and store it in log files. This information may include IP addresses, browser type, internet service provider, referring/exit pages, operating system, date/time stamp and/or clickstream data.

Cookies 

• We and our subsidiaries, business partners, marketing partners, affiliates, or other vendors may use cookies. Cookies uniquely identify the device or user account. 

Geo-location Services 

• When you allow us to track your location, we may collect information about your location related to our Services. We use various technologies to determine location, such as sensor data from your device that may provide information from nearby Wi-Fi access points and cell towers. 

Other Tracking Technologies 

• We and our subsidiaries, business partners, marketing partners, affiliates, or other service providers may also use technologies such as web beacons, local storage to collect and store your information and preferences (such as HTML5), scripts, and tags. 

These tracking technologies are used to:  

• Analyze trends
• Collect user choices about our use of personal information
• Gather demographic information about our users as a whole
• Perform diagnostic services, such as error reporting 
• Improve the site or Services
• Perform data analysis and audits
• Remember user’s settings
• Track user’s movement through our platforms
• Activate a user’s network services to connect to their product’s services or other data sources
• Run search queries in user or customer’s own information (such as database)

We may receive reports based on the use of tracking technologies on an individual and aggregated basis. If the tracking information we collect is considered individually identifiable information, the data is treated as Protected Health Information (”PHI”) under the Health Insurance Portability and Accountability Act (”HIPAA”). Use and disclosure of such data will comply with HIPAA’s Privacy and Security rule. 

How We Use the Personal Information Collected 

We may use the personal information we collect for purposes such as: 

• Customer and troubleshooting support
• Data migration and/or installation services
• Error detection and debugging
• Auditing, monitoring, or fraud detection
• Marketing initiatives & notices
• Research activities
• Managed services
• Network or hosting services
• Service improvement and development
• Performance testing services
• Reporting or data analytics services
• Artificial intelligence
• Communications via, email, fax, mail, mobile badge notifications, or text message
• Personalized Services and customized site-content based user preferences
• Contests / Surveys, which are completely voluntary. We may use a third-party service provider to conduct these surveys or contests. Survey data may be shared with your Health Plan but will not further share the personal information you provide unless we obtain your authorization.
• We may partner with a third party to manage our advertising.Our third-party partners may use cookies and other technologies to gather information about your activities on this website and other websites to provide you advertising content based upon your browsing activities and interests. If you wish to not have this information used for the purpose of serving you interest-based ads, you may opt out via our cookie consent manager, according to the rights associated to your geo location.
• We may use your name and email address to send you our newsletter and will obtain your prior consent when required by law. You may choose to stop receiving our newsletter or marketing emails by following the unsubscribe instructions included in those emails, or by contacting us using the contact information listed below.

How We Share Personal Information Collected  

We may share personal information with other Mckesson affiliates or our clients, such as health plans, (or its management entity), and pharmacy benefit managers (PBM) when permitted by law and applicable agreements or authorizations have been executed.  We may provide your personal information to third parties that provide services to help us with our business activities. These business activities may include fraud detection, monitoring services, payment processing services, network or hosting services, security services, marketing and advertising initiatives and shipping services. These companies are authorized to use personal information about you only as necessary to provide these services to us.  

Some of our webpages may provide hyperlinks to partner sites or the ability to share information to those partners directly from our site.  If you provide personal information in a partner-affiliated web form, you are providing it to our partners and not directly to us. In those circumstances, the privacy policies of those partners apply. 

We may need to share information with other companies, organizations or individuals if we have a good faith belief that access, use, preservation, or disclosure of that information is reasonably necessary to:  

• Meet applicable laws, regulations, legal processes, or enforceable governmental requests
• Enforce applicable Terms of Service, including investigation of potential violations
• Detect, prevent, or otherwise address fraud, security or technical issues 
• Protect against harm to the rights, property or safety of our users, McKesson, or the public as required or permitted by law
• Engage in a merger, acquisition, reorganization, or sale of all or a portion of McKesson assets.

Your Choices  

You can limit the personal information we have by choosing not to provide certain information. You may choose to stop receiving RxSS communications by following the unsubscribe instructions included in those communications, or by contacting us using the contact information listed below.

Access to Personal Information 

You may view, edit, or delete certain elements of personal information in your account/profile settings. Other personal information provided to us by third parties (such as your health plan) and visible when you access your account with the Services but may not be removed or edited in your account/profile settings. Questions regarding access can be directed to [email protected].

Children’s Privacy  

We do not knowingly collect or solicit any personal information from children, as defined under applicable law, without verified written parental consent, and we have no actual knowledge of selling such Personal Information of minors under 16 years of age. If we learn that we have collected Personal Information from a child, we will promptly take steps to delete that information. If you believe we might have any information from or about a child, please contact us at [email protected].

Retention We will retain your personal information until your health plan terminates service, as necessary to comply with our legal obligations, resolve disputes or enforce our agreements. 

How We Protect Your Information 

We protect the information we collect with proper physical, electronic and administrative safeguards. We only allow our employees, contractors, and agents to access personal information if they need access to perform services on our behalf.  They are also subject to confidentiality obligations. 

Any sensitive personal information is transmitted in an encrypted form using SSL encryption. Even though we have security safeguards, it is impossible to guarantee 100% security. If you have any questions about security or believe that your interactions with us are no longer secure (for example, you feel that your account with us has been compromised), you must notify us immediately by email at [email protected].

International Use and Cross-Border Data Transfers 

If you are visiting our site from outside of the United States, please note that our site is hosted in the United States. Where permitted by applicable law, we may transfer the personal data we collect about you to the United States and other jurisdictions that may not be deemed to provide the same level of data protection as your home country, as necessary for the purposes set out in this notice.  

For individuals in the European Union, European Economic Area, Switzerland, and United Kingdom: We will only transfer Personal Data to third parties located outside of this region when it has ensured appropriate safeguards for such Personal Information through use of the standard contractual clauses or other lawful and approved methods. To request a copy of applicable cross-border data transfer agreements, please reach out to us. 

Changes to this Privacy Notice 

We may update this Privacy Notice from time to time. Updates may describe new features, products or services.  Updates may also describe changes in how we use your personal information or to your controls. We will not apply changes to this Privacy Notice retroactively to personal information we have previously collected. Since we may make changes, we recommend that you read the current version of this Privacy Notice from time to time. If we change this notice, we will update the “Effective Date” at the beginning of this notice.  

Contact Information  

If you have questions or concerns about this Privacy Notice, our information handling practices, or any other aspect of privacy and security of your personal information, please contact us at: [email protected].

You may also write to us at: 

Rx Savings, LLC 
ATTN: Privacy Officer (Privacy Notice, RxSS Services) 

5440 W. 110^th Street, Suite 200  
Overland Park, KS 66211