Consumer Health Data Privacy Policy

Consumer Health Data Privacy Policy

Last Updated: April 25, 2025

This Consumer Health Data Privacy Policy (“CHDPP”) supplements the A & A Services, LLC (“Sav-Rx,” “Sav-Rx Prescription Services,” “we,” “us,” or “our”) Privacy Policy and is effective March 31, 2024. The Privacy Policy describes personal information that we collect and the sources from which we collect it. Capitalized terms used but not defined in this CHDPP shall have the meaning in the Privacy Policy.

This CHDPP is required by consumer health data laws enacted in Washington and Nevada and applies only to personal information that is considered “Consumer Health Data” under those laws. For example, personal information that is collected when you obtain or use a discount card that is not associated with a health plan may be subject to this CHDPP. This CHDPP does not address or apply to information or practices that are not subject to these laws. This CHDPP provides additional terms that apply to residents of Washington and Nevada. In the event of a conflict between this CHDPP and our Privacy Policy, this CHDPP shall take precedence for Washington and Nevada residents with regard to Consumer Health Data.

This CHDPP does not address or apply to personal information that constitutes “Protected Health information” under HIPAA. For information about how HIPAA may apply, please review our Privacy Policy and Notice of Privacy Practices.

Collection and Use of Consumer Health Data

The Consumer Health Data we collect depends on the context of your interactions with us and, in most cases, the information that you decide to share with us. Depending on applicable law and how you interact with us, we may collect the following categories of Consumer Health Data:

Use or purchase of prescribed medication, e.g., prescription claim information.

Data that identifies a consumer seeking health care services.

Other information that may be used to infer, derive, or extrapolate data related to the above or other health information.

We may combine information we receive from the various sources described in this CHDPP, including third-party sources, and use or disclose the combined information for the purposes identified below.

As further described in our Privacy Policy and subject to applicable law, we may collect and use Consumer Health Data for the following purposes:

Providing and managing our services, including our Site and Services. (e.g., processing and delivering an order you place, the prescription discount card/coupon requested by you).

Administrative purposes, e.g., providing customer service (including online service and virtual chats), analytic services, auditing, security or troubleshooting, improving our Site and Services, and other related actions to provide and maintain our Site and Services and inform our business strategies.

Research activities, e.g., for technological and product development.

Activities to provide and enhance our Services, e.g., verifying, maintaining, or enhancing quality or safety of our Services.

Communicating with you.

Complying with legal and regulatory obligations.

Commercial purposes, e.g., business transactions.

For other purposes at your direction or with your consent.

We will process Consumer Health Data in accordance with our policies and procedures.

Sources of Consumer Health Data

The Consumer Health Data we collect depends on the context of your interactions with our Products and Services and, in most cases, is information that you directly decide to share with us.

As described further in our Privacy Policy, these sources further include:

You and sources authorized to provide Consumer Health Data on your behalf.

Your interactions with our Site and our Services.

Your health plan.

We also may collect and use additional categories of Consumer Health Data that are not in this CHDPP as consented by you.

How Consumer Health Data May be Shared

As described in our Privacy Policy, and consistent with applicable law, we may share the categories of Consumer Health Data described above as follows:

To our service providers and partners, including companies essential to providing you with the Services and completing transactions initiated by you and providing us with business or operational services, e.g., threat detection, data hosting, payment processing, billing and collections, fulfillment, infrastructure provisioning, IT services, and other administrative services.

To our professional advisors, e.g., accountants and attorneys, for the purpose of seeking professional services or advice.

To parties with whom you have a direct relationship for the purpose of providing Services and completing transactions initiated by you.

For business transactions, including as part of the negotiation of or in connection with a business transaction, e.g., an acquisition.

For legal obligations, including to government or regulatory agencies or third parties in connection with establishing, exercising, or defending a legal action; to comply with laws or respond to lawful process; to protect our rights and the rights of others, to protect the health or safety of us or others; including to enforce agreements and policies; to detect or prevent fraud; or as otherwise required by law.

To the following affiliates for business and operational purposes: A-S Medication Solutions, LLC

In the event we process deidentified data, we agree to maintaining and using deidentified data without attempting to reidentify a consumer except as permitted by law and will contractually obligate any recipients of such data to satisfy these criteria.

How to Exercise Your Rights Regarding Consumer Health Data

You may have certain rights to your Consumer Health Data under applicable state law (e.g., access or delete Consumer Health Data). These rights may vary depending on your state of residence. If you would like to exercise these rights, please contact Privacy@savrx.com.

We may need to verify your identity in order to process your request. To confirm your identity, we may ask you to verify personal information we already have on file for you. If we cannot verify your identity based on the information we have on file, we may request additional information from you (such as government identification) in accordance with applicable law. We will only use such additional information to verify your identity and for security or fraud-prevention purposes.

You may also have the right to appeal the denial of any of these rights by submitting a form that will be provided to you if we deny a data request. Depending on your data choices, certain Services may be limited or unavailable (for example, if we need to collect certain Consumer Health Data in order to provide the Service to you). If you request that any required Consumer Health Data be deleted or withdraw your consent for future collection or sharing of any required Consumer Health Data, we may not be able to provide the Service or certain features of the Service to you.

Updates

As our business changes, we may also update this CHDPP. You should check the Site frequently to see recent changes. If we make changes, we will notify you by updating the date at the top of this CHDPP and posting it on the Site or other appropriate means. To the maximum extent permitted by applicable law, any modifications to this CHDPP will be effective upon our posting the modified version (or as otherwise indicated at the time of posting), and your use of our Site or Services following these changes means you accept the updated CHDPP.

If you have questions about this CHDPP, please contact us by email at Privacy@savrx.com