Last Updated: August 20, 2018
We Collect Personally Identifiable Information and Other Information You Submit
- Protected Health Information (PHI)
- Personally Identifiable Information
- Account and profile information
Account and Profile Information. You will need to submit certain information in order to set up your SpotRx account and profile and will be required to establish a personal access code (PIN). To create an SpotRx account you will need to submit your email address and password. To create a profile within that account, you will need to submit your first and last name, date of birth, mobile number, and health insurance information. Through the online Services and the Applications, you may have the option of submitting an image of your health insurance information. If you request to fill a prescription using the online Services or Applications, you can do so by taking a picture of the label of the prescription.
You are responsible for maintaining the confidentiality of your PIN and any other personal information provided as a result of creating an account. If you choose to share your PIN or any other information you use in connection with the Services with a person who will manage your account on your behalf, you are responsible for all actions taken by such person with respect to the use of your account. SpotRx will assume that any modifications to your account and any requests made to SpotRx such as to fill, refill or transfer prescriptions, are being made by you on your behalf by an authorized individual.
Other Information We Collect
- Data collected by the servers used to operate the Services (e.g., IP addresses)
- Location information
- Data collected by cookies
IP Addresses and Related Data. The Applications and the servers used to operate the Services may collect data pertaining to you and the equipment, software, and communication methods you use to access the Internet and the Services, including Internet protocol (“IP”) addresses assigned to your computer, your Internet service provider (ISP), your device ID, your approximate geographic location, your browser type, the pages you access on the Applications, the web sites you access before and after visiting the Services, the length of time you spend on the Services, date and time stamps, and clickstream data. We may use this information to administer the Services, to generate statistical information, to monitor and analyze Services traffic and usage patterns, to monitor and prevent fraud, to investigate complaints and violations of our policies, and to improve web site and Applications content and the products, services, materials, and other content that we describe or make available through the Services. We may combine this information with personally identifiable information, other Collected Information, and information obtained from third parties for security reasons. The suppliers that we use to provide the services including MedAvail may collect information about your visits and use of the Services.
How We Use and Share Collected Information
- We use Collected Information for the purpose for which it was collected.
- We use Collected Information to send you text messages.
- We use Collected Information to communicate with you.
- We share Collected Information with the suppliers that provide us with services in connection with the Services.
- We use Collected Information to evaluate and improve the Services.
- We aggregate Collected Information to create anonymous data on Services users.
- We use and share Collected Information in connection with legal proceedings and to protect our rights.
- We share Collected Information if SpotRx undergoes a change in control.
Purpose Collected. We will use your personally identifiable information for the purpose for which it was collected, for example, to process your prescription orders, to transfer your prescriptions, to communicate with you in connection with your account, and to provide you with information and communications that you request. If you place an order through the Services, we will use Collected Information to communicate with you regarding your order. If you sign up for an SpotRx account, we will use Collected Information to communicate with you regarding your account. Your location information will be used to find our pharmacy self-serve kiosks near you. If you contact us for support or assistance in using the Services, we may use Collected Information to determine whether or not your system meets the minimum requirements needed to access and use the Services and otherwise to contact you regarding your request.
Text Messages. You may opt in to receive marketing text messages. To stop receiving such messages at any time, reply “STOP” to any marketing text message you receive from SpotRx or contact us at 1-800-715-1354. For questions about text messages, contact SpotRx at 1-800-715-1354 or text “HELP” to any marketing text message you receive from us. Consenting to receiving text messages is not required to buy goods or services, to book an appointment, or to otherwise do business with us.
Sharing Collected Information with Our Suppliers. We may share Collected Information with our Services management and hosting suppliers, data analytics providers, marketing and public relations service providers, text message service suppliers, email service suppliers, and other suppliers as necessary for us to provide the Services and our products and services to you and as may otherwise be permitted by applicable law. Our suppliers are authorized to and may use and disclose Collected Information as necessary for them to provide the applicable services to us.
Evaluation and Improvement of the Services. We may use Collected Information: to analyze, develop, and improve the content, materials, products, and services that we make available through the Services and the Services’ functionality; to inform marketing, and communication plans and strategies; to evaluate user needs and customize Services content, promotional emails, and your browsing experience; and for other legitimate and lawful business purposes.
Aggregate Data. We may aggregate personally identifiable information and other Collected Information to create anonymous aggregate data on Services users, which describes users as a group but does not reveal the identity of individual users. We may use aggregate data to understand users’ needs, to determine user demographics and usage patterns, to determine which kinds of products and services we can provide, and to improve and enrich our products and services and the Services.
Security and Protection of Rights. We may use Collected Information and share it with third parties to the extent permitted by applicable law, including in the event of a subpoena, court order, or law enforcement request. We will use Collected Information and share it with third parties if we believe doing so is necessary to operate the Services or to protect our rights or the rights of others, including disclosing information necessary to identify, contact, or bring legal action in the event of a violation of our contracts, terms, or policies.
Third-Party Web Sites
Access by Children
The Services are not directed at children under 13 years of age. SpotRx does not knowingly collect or use information from children under 13 through the Services. If a parent or legal guardian becomes aware that their child has provided SpotRx with information without his or her consent, the parent or legal guardian should contact us using the contact information below. If we become aware that a child under 13 has provided us with information, we will delete that information from our files.
If a parent or legal guardian has created an SpotRx account for a minor under the age of 18, the parent or legal guardian represents and warrants to SpotRx that he or she is the parent or legal guardian of that minor with a right to provide us with the information of that minor.
Access from Outside the United States
If you are visiting the Services from outside the United States, please be aware that Collected Information may be transferred to, stored in, and processed in the United States (where our and our suppliers’ servers and databases are located and operated). The data protection and related laws and regulations of the United States might not be as comprehensive as those in the country from which you are accessing the Services.
How to Access Your Personally Identifiable Information
To access or update your personally identifiable information as it exists in our records, please contact us using the contact information below.