Online Privacy Policy

Last Updated: November 18, 2022

This Privacy Policy lets you know how we collect, use, share, and protect information about you. By interacting with Discount Drug Mart, Inc., our subsidiaries, or affiliated entities, (“DDM”) through our stores, websites, mobile applications, and any other DDM affiliate property where you may interact with DDM, you consent to the practices described in this Privacy Policy. Any changes in our Privacy Policy will appear on this page so that you are aware of the data we collect and how we use it. We will notify you of material changes to this Privacy Policy by updating the effective date of the Privacy Policy. For California residents, there is an “Information for California Residents” section in this Privacy Policy.

In some circumstances, DDM’s use of your information will be subject to the requirements of the Health Information Portability and Accountability Act (“HIPAA”). For example, if you log in to your pharmacy account and submit information regarding a prescription order, that information is subject to HIPAA’s requirements. In those circumstances, the DDM Notice of Privacy Practices and not this Privacy Policy will apply.

Our Privacy Program

At DDM, we are committed to maintaining our customers’ privacy. We take great care to safeguard the information that we collect to maintain our customers’ privacy. We have provided this Privacy Policy to you to describe information collection and use practices at DDM. This Privacy Policy describes the choices you can make about the way your information is collected and used.

Information We Collect

We want you to understand how information you provide to us is collected and used. When you interact with DDM or use our services, we collect certain information about you and the services you use. We may collect and store information from you in the following situations:

Information you provide to us directly, including, but not limited to, when you:

• Create an account on our websites or mobile application;
• Make an in-store or online purchase, or any transaction with us;
• Correspond directly with us, such as through a phone call, our websites, US mail, social media, or customer service;
• Participate in our loyalty programs;
• Participate in a contest, sweepstake, promotion, or survey; or
• Post a review or comment on our websites, or post other user-generated content on our websites or mobile application.

Information we collect when you use our services, including, but not limited to:

Device Information

• We may collect device-specific information when you visit our websites, use our mobile application, or services. This includes information such as Internet Protocol address, operating system, unique identifiers, network information, model, location data such as zip code, address of referring websites, path you take through our websites, and other information about your session on our websites. We may also associate the information we collect from your devices, which helps us provide consistent services across those devices.

Locus Distinction Information

• When you use our services on your mobile phone or device and enable location services on your mobile phone or device browser, we may collect information about your physical location through satellite, cell phone tower, WiFi signal, beacons, Bluetooth, and near field communication protocols (“Locus Distinction”). If you use our mobile application, your device may share Locus Distinction information when you enable location services for our application. To learn how to opt-out of sharing your Locus Distinction information with DDM, go to the “Options You Have” section of this Privacy Policy. When you use our mobile application, we may also request access to your Bluetooth signal from your device. If you enable our mobile application to use your Bluetooth signal, we may be able to determine your device’s in-store location. To learn how to opt-out of sharing your device’s Bluetooth signal with DDM, go to the “Options You Have” section of this Privacy Policy.

Log Information

• This includes details of how you used our websites or mobile application, including clicks and page information such as the URL of the website or mobile application from which you came before visiting our website or mobile application, which pages you visit on our website or mobile application, which browser you used to view our website or mobile application, and any search terms entered.
• Other information from your interaction with our websites, services, content, and advertising, including computer and connection information, statistics on page views, traffic to and from the websites, ad data, and other standard information.

Cookies, Web Beacons, and Similar Technologies

• Cookies are data files sent from a website’s server and are stored on your device’s hard drive either for the duration of your visit or for a fixed time. Cookies may store user preferences and other types of information. We may use cookies to provide features and services, such as:
  • Remembering your preferences and allowing you to enter your username less frequently;
  • Presenting information that is targeted to your interests, including DDM content presented on other websites;
  • Measuring the effectiveness of our content, services, websites, and advertising; and
  • Providing services and features that are only available through the use of cookies.
  • The options and/or settings section of most browsers tells you how to manage cookies and other technologies that may be transferred to your device, including how to disable these technologies. You can disable our cookies or all cookies through your browser’s settings, but note that disabling cookies may impact some of our website’s features and prevent our website from functioning properly.
  • A web beacon is an electronic image placed on a website, application, or within an email. We may use web beacons to monitor traffic patterns of users from one page to another, to improve our website’s performance, and in emails to measure their effectiveness.

In-Store Cameras

• We may use in-store cameras for security and operational purposes such as measuring traffic patterns and tracking in-stock levels.

Information We Collect From Other Sources

• We may collect information that is publicly available. We also may collect information from other companies, organizations, or third-party partners. By gathering additional information about you, we can correct inaccurate information, give you product recommendations, and special offers more likely to interest you.

How We Use Your Information

• Our primary purpose in collecting information is to help to provide you with a secure, better tailored, easy, and cost-effective, experience. We may use your information in a variety of ways, including but not limited to following purposes:

Product and Service Fulfillment

• We may use your contact information to respond to your inquiries, fulfill requests, and improve your experience.

Marketing Purposes

We may use your information:

• to enable Internet Shadowing and Customized Marketing as further described in this Privacy Policy;
• to administer promotions, surveys, and focus groups;
• to deliver coupons, mobile coupons, newsletters, emails, mobile messages, and social media notifications about our brands, products, events, or other promotional purposes;
• for reporting and analysis purposes by examining metrics such as how you are shopping on our website, in our stores, and on our mobile applications, the performance of our marketing efforts, and your response to those marketing efforts;
• to improve your experiences when interacting with us; and
• to provide location based services for marketing purposes.

Prevention of Fraud and other Harm

• We may use your information to detect, prevent, and investigate security breaches, fraudulent transactions, and monitor against theft.

Internal Operations

• We may use your information to improve the effectiveness of our services, conduct research and analysis, or to perform other business activities as needed.

Legal Compliance and As Necessary or Appropriate Under Applicable Law

• We may use your information as necessary or appropriate under applicable law, to comply with legal process, to respond to such requests from government authorities (including law enforcement), to detect, prevent, or otherwise address fraud, security, or technical issues, to protect our property, privacy, rights, or safety, to enforce our terms and conditions, including investigations of potential violations, and to allow us to pursue available remedies to limit the damages that we may sustain. In matters involving claims of personal or public safety or in litigation where the data is pertinent, we may use personal information without your direction or court process.

How We Share Your Information:

Please note that various state laws adopted a broad definition of a sale and may treat certain disclosures as sales under their definitions. Please see the “Information for California Residents” for additional information.

Internally

• We may share your information with our subsidiaries and affiliates, including but not limited to, Gentry Health Services, Inc. and Professional Medical Equipment and Services at Discount Drug Mart.

When We Work With Third Parties

• We may work with other companies who operate their own websites or mobile applications, to allow them to offer DDM’s customers the ability to connect to DDM services. These services may give you options for ways to use DDM services from websites or applications that are not owned or operated by DDM.
• We may share your information with affiliated and unaffiliated companies that perform tasks on our behalf related to our business. Such tasks include analyzing website usage data, customer service, electronic and postal mail service, and social and other media services.
• We may work with other companies who place cookies, tags, and web beacons on our websites. These companies help operate our websites and provide you with additional products and services.
• We may also use third-party advertising networks to provide advertisements on our behalf. The cookies received with the banner advertisements provided by these networks may be used to collect and build behavioral profiles by these companies to deliver targeted and customized advertisements on our website and unaffiliated websites.
• We contract with partner companies to allow DDM customers to access their loyalty program accounts from those partners’ websites and/or mobile applications. This may include the ability to join a loyalty program, add an existing membership, and/or access your account balance.
• If you participate in a loyalty program component which permits you to connect your loyalty program accounts with websites, application, and devices, including non-DDM partners and their websites, application, and devices. Notwithstanding the uses and disclosures set forth above, DDM may use or disclose personally identifiable information gathered under its loyalty programs for improving health, health research, or with your direction.
• Social Media: Our online services may use social media plugins (for example Facebook’s “Like” button, or the “Share to Twitter” button) to enable you to interact with specific social media websites and share information. When you visit our services, the operators of the available social media plugins may place a cookie on your device enabling such operators to recognize you if you previously visited our services. If you are logged in to these social media websites while visiting our services, the social media plugins allow some social media websites to receive information that you have visited our services or other information. The social media plugins also allow the applicable social media websites to share information about your activities on our services with other users of the social media website. We neither own nor control any content from social media plugins. We may interact with you on social media platforms. If you contact us via our social media platforms, request services, or otherwise communicate directly with us on social media, we may contact you to interact. More information about social media advertising and social media plugins may be found on those social media websites via their privacy and data sharing statements.
• We may work with other companies to deploy in store WiFi, Bluetooth, or other technologies to provide features and services to enhance your shopping experience.

When We Work On Business Transactions

• As we continue to develop our business, we might sell or buy stores or assets, or engage in mergers, acquisitions, or sale of company assets. Personal information may be disclosed in connection with the evaluation of or entry into such transactions or related business arrangements, or in the course of providing transition of services to another entity as permitted by law. In such transactions, customer information generally is one of the transferred business assets. Additionally, in the event that DDM or substantially all of its assets are acquired, customer information will likely be one of the transferred assets as is permissible under law.

When Sharing is Required by Law or Helps Us Protect Our Interests

• We will disclose your information as necessary or appropriate under applicable law, to comply with legal process, to respond to such requests from government authorities (including law enforcement), to detect, prevent, or otherwise address fraud, security, or technical issues, to protect our property, privacy, rights, or safety, to enforce our terms and conditions, including investigations of potential violations, and to allow us to pursue available remedies to limit the damages that we may sustain. In matters involving claims of personal safety, public safety, or in litigation where the data is material, we may use or disclose personal information without your direction or a court ordered process.

Non-identifiable or Aggregate information with Third Parties

• We may share non-identifiable or aggregate information with third parties for lawful purposes.

At your direction

• We may share your information at your direction, request, or when you otherwise consent.

Google Analytics

• We use Google Analytics and its features to help us perform analytics, this includes Google Advertising Features, data collection, granular location, and device data. You can review Google’s available opt-outs here.
• By enabling Google Advertising Features, Google Analytics collects data via Google advertising cookies and identifiers, in addition to data collected through a standard Google Analytics implementation.
• We do not identify users or facilitate the merging of personally identifiable information with additional information collected through any Google advertising product or feature without your expressed consent. Irrespective of users’ consent, we do not attempt to disaggregate data that Google reports in aggregate.
• Learn more about PII in Google’s contracts and policies

Options You Have

• By interacting with DDM as described here, you consent to the practices described in this Privacy Policy. However, we want you to know that you do have certain choices with regard to how your information is collected and used.

Email and Mobile Communications

• You may choose to stop receiving email and mobile marketing communications by changing your preferences online. If you have an online account with DDM, log in to Your Account, access the Main Menu, and click on Mailing List Preferences. If you do not have an online account with DDM, you may click on the Unsubscribe link at the bottom of DDM emails, or reply “STOP” to our text messages to stop receiving emails and SMS text messages. Alternatively, you may unsubscribe via by email by contacting us at custserv@discount-drugmart.com and informing us of your desire to unsubscribe.

Mobile Application

• In-store location
  You can opt out from allowing DDM to access your Bluetooth or WiFi signal in our stores by adjusting the permissions in your mobile device.
• Push notifications
  You can opt out from allowing DDM to send you push notifications by adjusting the permissions in your mobile device or from the DDM mobile application.
• Locus Distinction data
  You can opt out from allowing DDM to access Locus Distinction data by adjusting the permissions in your mobile device.

• Internet Shadowing and Customized Marketing DDM engages third-party advertisers to provide interest-based advertising on our websites, as well as other third-party websites, in order to display advertising that is relevant to you. These third parties may collect information about your use of our services over time. That information may be combined with information collected on different websites and online services. These third-party advertisers may be participants in the Network Advertising Initiative and/or the Self-Regulatory Program for Online Behavioral Advertising, which allow users to opt out of ad targeting from participating companies. To learn more about interest-based advertising, or to opt out of having your web browsing information used by certain third-party advertisers for behavioral advertising purposes, go to:  www.aboutads.info/choices or https://www.networkadvertising.org/choices/.
  
  Note: When opting out of receiving interest-based advertisements, this does not mean you will no longer see advertisements from DDM. It means that the online ads that you may see from the organizations participating in the National Advertising Initiative will not be tailored for you based on your particular interests. We may still collect information about you for any purpose permitted under the Privacy Policy, including for analytics and fraud prevention.

Our Do Not Track Policy

• DDM respects enhanced user privacy controls. We support the implementation of a standard do not track browser feature. However, at this time DDM does not interpret or respond to do not track signals. You may set your browser to not accept new cookies or web beacons, be notified when you receive a new cookie, or disable cookies altogether. Note that by disabling these features, your experience on DDM properties may not be as meaningful as it is with them enabled. As a result, you may not be able to take full advantage of certain features. Please see the help section of your browser for instructions on managing security preferences.

Accessing and Updating Your Personally Identifiable Information

• If you have a DDM account, you may log in and update your information at any time. You may also review and update any of the information you have given us by emailing customer service at custserv@discount-drugmart.com with your request.

Links to Third-Party Websites

• Our services may contain links to, or otherwise make available, social media websites and other third-party services, websites, and mobile applications that are operated and controlled by third parties. We take no responsibility for the content or privacy practices employed by other websites. Unless otherwise stated, any information you provide to any such third-party website may be collected by that entity and not by DDM, and will be subject to that entity’s privacy policy (if any), rather than this Privacy Policy. In such a situation, we have no control over, and are not responsible for, that entity’s use of information you provide them.

Minors

• If you are under 18 years old and a registered user, you, your parent, or your guardian, can request that we remove content or information that you have posted to our website or other online services. Note that fulfilment of the request may not ensure complete or comprehensive removal (e.g., if the content or information has been reposted by another user). To request removal of content or information, please email privacyofficer@discount-drugmart.com.

How We Protect Your Information

Email Security

• Phishing is the act of sending an email that falsely purports to be from a legitimate organization to contact you and request personally identifiable or potentially sensitive information. Be cautious when opening links or attachments from unsolicited third parties. DDM will not send you emails asking for your credit card number, social security number, or other personally identifiable information. If you are ever asked for such information, know that it is not from DDM.

Security Measures

• DDM recognizes the importance of maintaining the security of your information. We use reasonable security measures, including administrative, technical, and physical safeguards to attempt to safeguard data.

Children’s Personal Information

• We recognize the importance of protecting children’s online privacy. Our website and mobile services are intended for a general audience and are not directed to children. We do not knowingly collect personal information online from children under the age of 13.

Information for California Residents

If you are a California resident, we provide additional information to you about how we collect, use, and disclose your information that may be considered “Personal Information” under California Law (“CAPI“), and you may have additional rights with respect to how we use and disclose your CAPI. We have included this California-specific information below.

• Collection. Consistent with the “Information We Collect” section above, we collect certain categories and specific pieces of CAPI about individuals who reside in California. In the twelve months prior to the date of this Privacy Policy, we collected the following types of categories of CAPI, which we will continue to collect:

• Identifiers: such as name, address, telephone number, email address, age, date of birth, username and password for our websites, online identifiers, IP address;
• Characteristics of protected classifications under California or federal law: such as sex, gender, age (40 years of age or older);
• Commercial information: such as products or services purchased, obtained or considered, other purchasing or consuming histories or tendencies, payment information, health and medical information, health insurance information, loyalty program participation information;
• Internet or other electronic network activity information: such as computer and connection information, statistics on page views, traffic to and from the websites, ad data, and other standard weblog information;
• Geolocation information: including location data and Locus Distinction data such as physical location information through the use of our services on your mobile phone or device by, for example using satellite, cell phone tower, WiFi signal, beacons, Bluetooth and near field communication protocols, when you are in or near a DDM store;
• Audio, visual, or similar information: such as photographs you share, in-store security video, customer service audio recordings; and
• Inferences drawn from the above categories of CAPI: such as consumer preferences, characteristics, predispositions, and behavior.

• Sources. We may collect certain categories of CAPI from you and third parties as described in the “Information We Collect” section above. The categories of sources from which we collected CAPI in the twelve months prior to the date of this Privacy Policy include the following:

• In our stores (parent, subsidiary and affiliate brands);
• On our websites and mobile applications (parent, subsidiary, and affiliate brands);
• When you communicate with our customer service team;
• Through participation in loyalty programs;
• Third party websites and mobile applications (such as websites and applications that share information with us or our advertising partners regarding your online activities);
• Data suppliers (such as companies that provide demographics and other information regarding consumers);
• Joint marketing or other commercial business partners;
• Online advertising networks;
• Delivery partners/carriers;
• Social media companies;
• Other service providers; and
• Survey providers

We will continue to collect CAPI from these same sources.

• Purposes. We collect CAPI for the business and commercial purposes described in the “How We Use Your Information” section as described above. Specifically, we collect CAPI to respond to your inquiries, fulfill your requests, and improve your experience; for marketing, advertising, and promotional purposes; for reporting and analytics; to improve the effectiveness of our services, conduct research, and analysis, or for other internal operations purposes; to detect, prevent, or investigate potential security breaches, fraudulent transactions, and monitor against theft.

Sharing CAPI for business purposes: As described above in the “How We Share Your Information” section, we share information for business purposes. In the twelve months prior to the date of this Privacy Policy, we shared and we may continue to share the following categories of CAPI with third parties who are considered “service providers” as defined under California law since we disclose CAPI to them for our business purposes.

• Identifiers: such as name, address, telephone number, email address, age, date of birth, username, and password for our websites, online identifiers, IP address;
• Characteristics of protected classifications under California or Federal Law: such as sex, gender, age (40 years of age or older);
• Commercial information: such as products or services purchased, obtained or considered, other purchasing or consuming histories or tendencies, payment information, health and medical information, health insurance information, and loyalty program participation information;
• Internet or other electronic network activity information: such as computer and connection information, statistics on page views, traffic to and from the websites, ad data, and other standard weblog information;
• Geolocation information: including location data and Locus Distinction data, such as physical location information through the use of our services on your mobile phone or device by, for example using satellite, cell phone tower, WiFi signal, beacons, Bluetooth, and near field communication protocols. If you use our mobile application, your device may share location information when you enable location services. We may be able to recognize the location of a mobile device in stores through use of Bluetooth or WiFi technology;
• Audio, visual, or similar information: such as photographs you share, in-store security video, customer service audio recordings; and
• Inferences drawn from the above categories of CAPI: such as consumer preferences, characteristics, predispositions, and behavior.

As described above, examples of business purposes include product and service fulfillment, internal operations, prevention of fraud and other harm, and legal compliance.

The categories of third party service providers that we may share the above described categories with include, but are not limited to: fraud prevention providers, payment processing companies, marketing companies, technology service providers, professional service providers, and delivery partners.

In addition, we may share the aforementioned categories of CAPI with third parties involved in the evaluation of or entry into the sale or purchase of stores or company assets, mergers, or acquisitions. The categories of third parties to which we may share the above described categories of CAPI include but are not limited to potential business partners or purchasers, professional service providers (e.g., consultants, lawyers, accountants), and data analytics providers. In the event of sale, merger, or acquisition, customer information (including CAPI) generally is one of the transferred business assets, as is permissible under law.

Sale of CAPI: As described above in the “How We Share Your Information” section, we may share the following categories of CAPI with third parties who are considered “third parties” as defined under California law since we disclose CAPI to them which they may use for secondary purposes. Our disclosure of CAPI to the third parties who use the information for secondary purposes may constitute a sale of CAPI as defined under California law.

In the twelve months prior to the date of this Privacy Policy, we shared for secondary purposes (which may constitute a sale of CAPI under California law), and may continue to share, the following categories of CAPI:

• Identifiers: such as online identifiers and IP address;
• Commercial information: such as products or services purchased, obtained or considered; other purchasing; or consuming histories or tendencies;
• Internet or other electronic network activity information: such as computer and connection information, statistics on page views, traffic to and from the websites, ad data, and other standard weblog information;
• Geolocation information: including location data and Locus Distinction data, such as physical location information through the use of our services on your mobile phone or device by, for example using satellite, cell phone tower, WiFi signal, beacons, Bluetooth and near field communication protocols. If you use our mobile application, your device may share location information when you enable location services. We may be able to recognize the location of a mobile device in stores through use of Bluetooth or WiFi technology; and
• Inferences drawn from CAPI: such as consumer preferences, characteristics, predispositions, and behavior.

The categories of third parties to which we may sell (as defined by California law) the above described categories of CAPI include online advertising networks, marketing companies, financial services partners and social media companies.

Opting Out of the Sale of CAPI: You may stop our disclosure of your CAPI to these entities for their use for secondary purposes by opting-out of the sale of your CAPI. You can do so by submitting an opt-out request by emailing privacyofficer@discount-drugmart.com.

• Notice of Financial Incentive: We may provide price discounts, coupons, services, and other perks for members of our loyalty programs such as our Pro Points program. Through these offerings, consumers may provide us with any or all of the categories of CAPI set out above in the “Collection” section depending on how they choose to interact with us when and after they opt-in to our programs. There is no obligation to opt-in and consumers may opt-out at any time. The details of each program are contained in the program offering. We invest heavily in our marketing and brands, in part, so we can provide programs to our customers. Consumer data is more valuable to our business when it is combined with a sufficient amount of other consumer data and after it is enhanced by our efforts described in this Privacy Policy. The value to our business of any individual consumer’s data is dependent on a number of factors, including, for example, whether and to what extent you take advantage of any offerings, whether and to what extent you opt out of any offerings, and whether we are able to enhance the data through our efforts described in this Privacy Policy. We do not calculate the value of consumer data in our accounting statements. We make this good faith estimate for California residents. To the extent we create overall value from our programs to our business that could be directly or reasonably related to the value of customer data, the method for calculating the value would include: costs related to maintaining the program including but not limited to IT infrastructure, delivery of offers, and skilled marketing teams with the appropriate knowledge to enhance customer data; whether the sales generated by the program exceeds the cost to us of offering the program including value of discounts to customer; and value of the insights we are able to create based upon aggregate data.
• Deidentified Patient Information: We may also disclose information that does not identify an individual and cannot reasonably be used to identify an individual which is derived from CAPI, as well as deidentified protected health information that has been modified to remove individually identifiable information in accordance with HIPAA’s expert determination or safe harbor deidentification standards.

California Consumer Rights: As a California resident, you have the right to ask us for any or all of following types of information regarding the CAPI we have collected about you in the twelve months prior to our receipt of your request:

• Specific pieces of CAPI we have collected about you;
• The business or commercial purpose for collecting or selling your CAPI; and
• Categories of CAPI:
  • we have collected about you,
  • sources from which such CAPI was collected, and
  • we sold or disclosed for a business purpose about you.

You also have the right to request deletion of your CAPI and opt out of the sale of your CAPI.

• Exercising California Consumer Rights: You or your authorized agent may submit a request to exercise your California Consumer Rights by emailing privacyofficer@discount-drugmart.com .
• Responding to Requests: For requests for access or deletion, we will first acknowledge receipt of your request within thirty business days of receipt of your request. We provide a substantive response to your request as soon as we can, generally within forty-five days from when we receive your request, although we may be allowed to take longer to process your request under certain circumstances. If we expect your request is going to take us longer than normal to fulfill, we will let you know.
  
  For requests to stop the sale of your CAPI, we will comply within fifteen business days after receipt of your request.
  
  We usually act on requests and provide information free of charge, but we may charge a reasonable fee to cover our administrative costs of providing the information in certain situations. In some cases, the law may allow us to refuse to act on certain requests. When this is the case, we will endeavor to provide you with an explanation as to why.
• Requests by Authorized Agents: You may designate an agent to submit requests on your behalf. The agent must be a natural person or a business entity that is registered with the California Secretary of State.
  
  If you would like to designate an agent to act on your behalf, you and the agent will be required to provide us with proof of the agent’s identity and proof that you gave the agent signed permission to submit a request on your behalf. Additionally, you will be required to verify your identity by providing us with certain CAPI as described above or provide us with written confirmation that you have authorized the agent to act on your behalf.
  
  Please note that this subsection does not apply when an agent is authorized to act on your behalf pursuant to a valid power of attorney. Any such requests will be processed in accordance with California law pertaining to powers of attorney.
• Requests for Household Information: There may be some types of CAPI that can be associated with a household (a group of people living together in a single dwelling). Requests for access or deletion of household CAPI must be made by each member of the household. We will verify the identity of each member of the household using the verification criteria explained above and will also verify that each household member is currently a member of the household.
• Verification of Requests: After you submit a request to exercise a California Consumer Right as described above (other than a request to stop the sale of your CAPI), you will enter into a two-part verification process.
  
  For part one, you must verify your identity by correctly answering demographic questions powered through Veratad’s IDMatch^SM and IDMatch+PLUS^SM identity verification services, and/or confirming control over the phone number and/or email or postal address you provide in the request form.
  
  If you successfully complete the identity verification and/or the phone and/or email or postal address verification, you will proceed to part two of the process in which we will attempt to match the data provided in the request form to the data we maintain. Depending on the type of request submitted, if you are matched to a high degree of certainty your request will be processed as follows:
  
  Access request: Your access report will include the specific pieces of CAPI not otherwise subject to an exception pursuant to law that we match to you.
  
  2. Deletion request: All data matched to you and not otherwise subject to an exception pursuant to law will be deleted.
  
  If you fail identity verification, but successfully complete phone and/or email or postal address verification you proceed to part two of the process in which we will attempt to match the data provided in the request form to the data we maintain. Depending on the type of request submitted, if you are matched to a reasonable degree of certainty you request will be processed as follows:
  
  1. Access request: Your access report will include the categories of CAPI we match to you unless otherwise subject to an exception pursuant to law
  
  2. Deletion request: Certain limited data we associate to you will be deleted.
  
  If you fail identity verification as well as phone and/or email and postal address verification, your request will be cancelled and you will be notified.

Nondiscrimination. Should you wish to request the exercise of your rights as detailed above with regard to your CAPI, we will not discriminate against you. To the extent you provide CAPI in connection with programs such as Pro Points, additional information about the terms applicable to those programs, including our use of CAPI in exchange for the applicable financial incentives, is found in the terms and conditions for those programs and in the Notice of Financial Incentive section above.

No Sale of Minors’ Personal Information. Additionally, California law requires California residents under the age of 16 to opt-in to the sale of CAPI. We have protections in place to prevent the sale of, do not intend to, and have no actual knowledge that we sell CAPI of California residents under the age of 16. As a result, certain programs and services may be unavailable to California residents under the age of 16.

Metrics. California law requires recording of metrics regarding access, deletion, and opt-out requests submitted by California residents. The following details reflect data from January 1, 2021 to December 31, 2021.

• Opt-out Requests
  • Requests Received: 0
  • Completed: 0
  • Expired/Rejected: 0
  • Median Days to Fulfill: 0
• Access Requests
  • Request Received: 0
  • Completed: 0
  • Expired/Rejected: 0
  • Median Days to Fulfill: 0
• Deletion Requests
  • Requests Received: 0
  • Completed: 0
  • Expired/Rejected: 0
  • Median Days to Fulfill: 0

Contacting us:

If you have questions about this Privacy Policy, or to exercise your rights as detailed within, except for California Consumer Rights which you may exercise by using the designated methods identified in the “Information for California Residents” section above, please do so by:

Phone: 800-833-6278
Email: privacyofficer@discount-drugmart.com
Regular mail:

Discount Drug Mart, Inc.
Attn: Privacy Officer
211 Commerce Drive

Medina, OH 44256

Effective Date: 11/18/2022; Last Updated: 11/18/2022