Privacy Policy

Sav-Rx Privacy Policy 

Effective Date: April 30, 2025  

This Privacy Policy (“Policy”) will inform you about A & A Services, LLC,(“Sav-Rx,” “Sav-Rx Prescription Services,” “we,” “us,” or “our”) practices for collecting, using, maintaining, and disclosing information which identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household (“Personal Information”) when you visit any of our website located at https://savrx.com/ (our “Site”) or otherwise interact with us (collectively, referred to as the “Services”), and certain rights you may have regarding your Personal Information and how to exercise those rights.  

This Policy does not apply to protected health information (“PHI”). PHI is governed by the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and its subsequent amendments and regulations and applicable state law. “PHI” is defined under HIPAA to include individually identifiable health information about your past, present or future physical or mental health or condition, the provision of health care to you or the past, present or future payment for such care. It is important to note, however, that HIPAA does not necessarily apply to an entity or person simply because there is health information involved, and HIPAA may not apply to any or all of your transactions or communications with us. For any PHI that we do collect in our capacity as a HIPAA covered entity (e.g., our pharmacy business), our Notice of Privacy Practices (“NPP”), and not this Privacy Policy, will apply. If you have questions about which policy applies to the information you have submitted, please do not hesitate to contact using the contact information listed below in Section 10.  

PRIVACY LAWS AND GUIDELINES ARE PART OF A CONSTANTLY CHANGING ENVIRONMENT. WE RESERVE THE RIGHT IN OUR DISCRETION TO CHANGE THIS POLICY AT ANY TIME. ALL CHANGES WILL BE EFFECTIVE IMMEDIATELY UPON POSTING TO THE SITE AND APPLICATION. MATERIAL CHANGES WILL BE POSTED ON THE SITE OR OTHERWISE COMMUNICATED TO YOU.  

State Supplemental Privacy Notices:  

Colorado, Connecticut, Delaware, Iowa, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah Residents and Virginia Residents: If you are a resident of one of the states listed here, please see the State Supplemental Privacy Notice below for additional rights and terms that may apply to you.     

California Residents: If you are a California resident, please see the California Privacy Rights Notice below for additional rights and terms that may apply to you.  

1. Categories of Personal Information We Collect 

We may collect Personal Information about you when you use our Services. The information we collect falls into three categories: (a) information you provide to us; (b) information we collect through automated methods when you use our Services; and (c) information we collect from other sources (as further detailed below).  

You can use our Site without submitting Personal Information to us. However, Personal Information is required to use certain features of our Services, for example, to contact us via email or phone (where we may retain your message’s content and our response), receive or request information from us via email, to register for a user account, and to use certain other tools and features of the Services. In such circumstances, we may be unable to provide you with such Services unless you provide your Personal Information.  

1. Information You Provide to Us 

We collect Personal Information that you provide directly to us. If you elect to provide data that personally identifies you such as your first and last name, email address, mailing address, zip code, phone number, or telephone number, we will collect, use, and share such Personal Information pursuant to this Policy and applicable law. Our collection of Personal Information from you may occur in the following ways.  

• Online Accounts. To register for an online account and depending upon your relationship with Sav-Rx (e.g., whether you are a plan beneficiary, pharmacy provider, third-party administrator, plan sponsor, or designee) you may be required to provide your first and last name, telephone number, mobile number, email address, and create a password. If you are a plan beneficiary, you may register either using your prescription (Rx) number or your Sav-Rx card. Depending upon the method of registration, you may also need to provide your date of birth. If you are a pharmacy provider, you may need to provide your NPI/NABP number, Tax ID, first and last name, email, and create a password. This data is used to populate a profile within your account. 

• Enrolling in Sav-Rx Advantage Discount Card Program. In order to enroll in the Sav-Rx Advantage program to receive a prescription discount card, you will need to provide us your national and local union affiliation, first and last name, mailing address, phone number, email, gender, and date of birth. Sav-Rx will use this information to mail you a prescription card and explanatory brochure.  

• Payment Information and Orders. To make purchases through the Services, you will need to provide information related to your method of payment such as your credit or debit card number, expiry date, security code, and billing address. You may store your payment method within your account.  

• Contacting Us; Customer Service. If you contact us via email, phone, or through our “Contact Us” form on the Site to inquire about our services, you will be required to provide your contact information including your first and last name, your employer/health plan, job title, email address, and zip code. If you are an existing member and opt to contact us through our Site and not through the portal, you will be required to provide details about membership, first and last name, email address, phone number, mailing address, your Card ID, and Group ID. We may retain your message’s content and our response, including through audio recordings when you call us. 

• Job Applications. If you submit a job application through the Site, we will collect your resume and all other materials and information that you provide in the course of submitting that application, including your first and last name, middle initial, mailing address, home phone number, citizenship status, employment status, whether you are over the age of 18, and information you opt to provide related to your education and prior employment. If you send us your job application materials, we will only use and share those job application materials to evaluate your qualifications to work with Sav-Rx.  

• Marketing Communications. If we receive your contact information, including when you request to receive information about our services, we may use this information to send you information about other programs that we think may be of interest to you, as well as promotional and marketing communications. To opt-out of marketing communications (e.g., postal marketing ), please contact us as set forth below. Opting out of marketing communications does not opt you out of other non-marketing communications such as communications relating your health plan. 

• Feedback. When you provide comments or feedback about our Site (“Feedback”), we will not treat that Feedback as confidential, and we may use that Feedback for any purpose in our sole discretion so long as it does not personally identify you. Feedback will be used without attribution or compensation to you. 

• Business Contracts with Us. When a business contracts directly with us, we may collect business contact information of those involved with the transaction and additional information such as Personal Information regarding health plan beneficiaries. The processing of any information in such a business context is governed by the contracts between that business and Sav-Rx. 

2. Information We Collect Automatically 

When you use the Site, some or all of the following information may be automatically collected and stored:  

• Cookies and other Technologies. Like many other websites, we may automatically collect information about your use of our Site and Site through scripts, cookies, pixels, web beacons, and other  technologies (collectively, “Technologies”). This information may include: your browser type and operating system, the Sav-Rx web pages you view, links you click, your IP address, your internet service provider, device ID, approximate geographic location,  data related to how and when you use the Site, and pages visited and average time spent on the Site. Some of this may be deemed Personal Information. We may combine this information with other information that we have collected about you.  

Most browsers automatically accept Technologies. You can disable certain functions by changing your browser settings but disabling cookies or other Technologies may impact your use and enjoyment of the Site. Not all features or functions of the Site may work properly if you disable such Technologies. You cannot disable all Technologies, such as cookies that are essential or necessary to the functioning of the Site. 

3. Information From Third-Party Sources.  

We obtain Personal Information about individuals from various third-party sources, such as our vendors and other partners and we may combine that with Personal Information or other data we collect. This enhances our existing data about our users and improves our ability to contact you.  

Social Media. We are active on social media, including LinkedIn (“Social Media”). Anything you post on Social Media will not be treated confidentially. We may post (or re-post) on the Site and our Social Media pages any comments or content that you post or otherwise disclose on Social Media pages. 

2. How and Why We Collect Personal Information 

In addition to the uses described elsewhere in this Policy, we may collect, use and disclose any of the Personal Information described in Section 1 above for the following purposes: 

• As Stated or Agreed to at the Point of Collection. We may use Personal Information for the purposes stated or agreed-to (or as is obvious) at the point of collection. For example, we use Personal Information to respond to your questions, comments, or complaints, to send you information about your programs and services, and to enroll you in the Sav-Rx Advantage Discount Card Program. We may also use Personal Information as requested or consented to by you. 

• Administration. We use Personal Information for administrative purposes, such as providing customer support, facilitating transactions, to inform our business strategies, to understand the Site’s demographics and user preferences, for evaluating applications, and managing profiles. 

• Site Management. We use Personal Information for Site management, such as troubleshooting problems, improving the content and functionality of the Site, statistical and other analyses of the Site, and to customize the Site for you and our other users. 

• Communications and Advertising. We may use Personal Information to send you promotions, notify you of new products or programs, to notify you of new features of our Site, to notify you of changes to our Terms or this Policy, and for other similar communications. 

• Security and Protection of Rights. We may use Personal Information to protect our legal rights or interests, or those of third parties, including to bring a legal action against you or anyone who may be causing harm to us, our Site, or to other users of the Site. We may also use Personal Information to seek business, financial, or legal advice, and to respond to other legal requests. 

• To Receive Feedback and Improve User Experience. We may collect Feedback from you through surveys and other formats. We may use all such information that we collect to improve user experience, our products, and our Services.  

Our use of Technologies helps us to improve our Site and to deliver a better and more personalized service, including by enabling us to: 

• Estimate our audience size and usage patterns. 

• Store information about your preferences, allowing us to customize our Website according to your individual interests. 

• Speed up your searches. 

• Recognize you when you return to our Website. 

•  to enable and support our security features and to help us detect malicious activity. 

We do not currently use any Technologies that gather information about you that could be used for third party marketing or otherwise track you across the Internet. 

3. How We May Disclose Personal Information 

We do not sell, rent or lease Personal Information to any third party, or share your Personal Information with third parties for advertising purposes. In addition to any disclosures described elsewhere in this Policy, we may disclose any of the Personal Information described in Section 1 above to the following categories of third parties: 

• Employees. We may disclose or allow access to Personal Information to our employees  who have a need to know the information for our business purposes. 

• Service Providers and Vendors. We may disclose Personal Information to our vendors, consultants, agents, partners, and representatives that provide Site to us. These vendors may include but are not limited to our marketing and ad agencies, information technology vendors (e.g., cloud computing providers, data storage and warehouse providers, and information security providers), payment processors, and customer service call vendors. 

• Government Officials and Law Enforcement. We may cooperate with law enforcement and other governmental agencies and may disclose Personal Information: (i) if we believe in good faith that we are legally required to disclose that Personal Information, or (ii) if we are advised to disclose Personal Information by our legal counsel. 

• Professional Advisors. We may disclose Personal Information to certain professional advisors, such as our attorneys, accountants, financial advisors, and business advisors, in their capacity as advisors to us. 

• Legal Proceedings and Protection of Rights. We may use Personal Information and disclose it to third parties if we believe doing so is necessary to provide you the contemplated Site or to protect our rights or the rights of others, including disclosing information necessary to identify, contact, or bring legal action in the event of a violation of our contracts, terms, or policies. 

• Change in Ownership. In the event Sav-Rx is the subject of a change of control or in the event the Site changes ownership, in whole or in part, or in the event of a bankruptcy, receivership, or a similar transaction, and with respect to due diligence related to the foregoing, we may provide Personal Information to the subsequent (or prospective) owner(s). 

• Other. We may disclose Personal Information to third parties when explicitly requested by or consented to by you, or for the purposes for which you disclosed the Personal Information to us as indicated at the time and point of the disclosure (or as was obvious at the time and point of disclosure). 

4. Use and Disclosure of De-Identified or Aggregated Information 

De-identified information is information that cannot reasonably be associated with or linked to an individual and therefore is not Personal Information. We may collect, use, disclose, share, create, transfer, and otherwise process de-identified and aggregated information that we receive or create for any purposes in our sole discretion, in compliance with applicable laws. We will not attempt to re-identify any de-identified data that we maintain and use.  

5. Children 

The Site is not directed at children under 18 years of age. If a parent or legal guardian learns that their child provided us with Personal Information without his or her consent, please contact us and we will make commercially reasonable attempts to delete such Personal Information from our records consistent with applicable law. 

6. Data Security 

The privacy and the security of your Personal Information is very important to us. We use commercially reasonable administrative, technical, and organizational measures to help secure Personal Information against loss, misuse, and alteration appropriate to the type of Personal Information processed. Unfortunately, no measures can be guaranteed to provide complete security. Accordingly, we do not guarantee the security of Personal Information, and you are providing your Personal Information at your own risk. If a breach of your Personal Information occurs, we will notify you of the breach when required under applicable law. 

7. Access from Outside the United States 

If you access the Site from outside the United States, please be aware that Personal Information may be transferred to, stored in, and processed in the United States. Certain governmental authorities may not consider the level of protection of Personal Information in the United States to be equivalent to that required in other jurisdictions. Our online privacy practices are governed by the laws of the United States, which may differ from privacy laws in your home country. By using our Site, you understand that Personal Information will be transferred, processed, used, disclosed, and stored in the United States and other jurisdictions as set forth in this Policy. 

8. Data Retention  

We will retain your Personal Information in accordance with our record retention requirements and our internal policies, which reflect our business and legal considerations. Your Personal Information may be retained longer if required or permitted by applicable law.  

9. Third-Party Websites 

The Site may link to, or be linked from, websites not owned or controlled by us. We are not responsible for third parties’ privacy policies or practices. This Policy does not apply to any third-party websites or to any data that you provide to third parties. This Policy does not apply to your health plan’s provision of Personal Information to us. We recommend that you read the privacy policy for each website that you visit. 

10. Contact Us 

If you have any questions, you may contact us as set forth below: 

Sav-Rx Prescription Services 

Attn: Privacy Officer 

224 North Park Avenue 

Fremont, NE 68025 

(402) 753-2800 

Via email at Privacy@Savrx.com 

STATE SUPPLEMENTAL PRIVACY NOTICES  

If you are a resident of Colorado, Connecticut, Delaware, Iowa, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia, this State Supplemental Privacy Notice explains how to exercise consumer privacy rights you may have under the laws of your state (“State Privacy Laws”). This State Supplemental Notice is only intended to supplement the Policy. Please refer above to find detailed information about Categories of Personal Information We Collect, Why We Collect Personal Information, and How We May Disclose Personal Information along with additional information about our privacy practices.  

If you have any questions as to whether the following consumer privacy rights apply to you, you can contact us at Privacy@Savrx.com. 

1. Consumer Privacy Rights Under State Privacy Laws 

Depending on where you live and subject to certain exceptions, you may have some or all of the following rights under State Privacy Laws: 

• Right to Request Access. You have the right to confirm whether or not we are processing your Personal Information and to access such Personal Information. Depending on your state of residence, you may also have the right to receive a list, of specific third parties with whom we disclose Personal Data. 

• Right to Request Data Portability. You have the right to obtain a copy of your Personal Information that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another business without hindrance, where the processing is carried out by automated means. 

• Right to Know. The right to request that we disclose to you the Personal Information we collect, use, or disclose, and information about our data practices. 

• Right to Request Correction. The right to request that we correct inaccurate Personal Information that we maintain about you. 

• Right to Request Deletion. The right to request that we delete your Personal Information that we have collected from or about you. 

• Right to Opt-Out of the Sale of Personal Information, Targeted Advertising, and Profiling. State Privacy Laws provide consumers a right to opt-out of the sale of Personal Information and the use of Personal Information for targeted advertising or profiling. Sav-Rx does not (i) sell Personal Information for money; (ii) engage in targeted advertising; or (iii) engage in profiling in furtherance of our decisions that produce legal or similarly significant effects, such as decisions that result in the provision of any health care to you.  

• Right to Non-Discrimination. The right not to receive discriminatory treatment for exercising your privacy rights. 

2. How to Exercise Your Rights Under State Privacy Laws 

To submit a request to exercise any of the rights above, you may submit your request to us by contacting us at Privacy@Savrx.com. Please indicate that you are submitting a request pursuant to your “[State] Privacy Rights.” 

You must provide sufficient information to allow us to reasonably verify you are the data subject to whom the Personal Information relates, and you must describe your request with sufficient detail to allow us to properly understand, evaluate, and respond to your request. 

When we receive your rights request (i) we will acknowledge receipt of your request; (ii) we will try to match the information you provide in making the request with information we already maintain about you; (iii) in order to verify your identity, we may ask you to provide additional information, which may include Personal Information; and (iv) we will consider various factors when determining how to verify your identity, such as the sensitivity and value of the data, the risk of harm, and the likelihood of fraud. 

We will only use Personal Information we collect during the verification process for the purpose of verifying your identity. If we are unable to verify your identity as required by applicable laws and regulations, we will decline to comply with your request, and let you know why. In addition, we may decline to comply with your request as permitted by the applicable State Privacy Laws. We may charge a fee as permitted by the applicable State Privacy Laws, such as to process or respond to your request if it is excessive, repetitive, manifestly unfounded, or if we believe the request is fraudulent or submitted for purposes other than exercising applicable privacy rights.  

Some State Privacy Laws permit the submission of consumer requests by an authorized agent. If we receive a request from an authorized agent, we will need to verify and authenticate your identity as the data subject, the agent’s identity, and the agent’s authority to act on your behalf. We may deny a request from an authorized agent if we do not have proof that they are authorized by you to act on your behalf or if applicable State Privacy Laws do not permit requests by anyone other than you.  

Furthermore, a parent or legal guardian may make a request on behalf of their dependent or non-adult child. We may deny a request if you are unable to prove that you are the custodial parent or legal guardian. 

If we reject or deny your request, you may appeal our decision within 30 days of receiving our denial by responding directly to the communication denying your request or by submitting your appeal to Privacy@Savrx.com.  

11. CALIFORNIA PRIVACY RIGHTS NOTICE FOR CALIFORNIA RESIDENTS 

THIS SECTION PROVIDES ADDITIONAL PROVISIONS APPLICABLE ONLY TO RESIDENTS OF CALIFORNIA.  

If any information in this section conflicts with the main body of this Policy above, the information in this Section controls for California residents. Capitalized terms used in this state-specific section but that are not defined in this Policy have the meanings set forth in the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 and its implementing regulations (collectively, the “CCPA”). 

1. Collection, Sources, Purpose, Sharing and Retention of Your Personal Information 

• Categories of Personal Information We Collect. In the last twelve (12) months, we have collected the following categories of Personal Information:  

• Identifiers consisting of: real name, alias, postal address, unique personal identifier, online identifier, internet protocol address (“IP Address”), email address, or other similar identifiers. 

• Consumer information under Cal. Civ. Code 1798.80(e) consisting of: bank account number, credit card number, debit card number, signature, physical characteristics or description, telephone number, state identification number, health insurance number, insurance policy number, and any other financial information or medical information. 

• Protected Classifications consisting of: Age, citizenship, medical condition, physical or mental disability, sex (including gender), veteran or military status. 

• Commercial Information consisting of records of products purchased, obtained, or considered. 

• Internet Activity consisting of: browsing history, search history, and information regarding a consumer’s interaction with an internet website application, or advertisement. 

• Geolocation Data: approximate GPS geolocation, IP address, and other data from sensors on or around your device, depending in part on your device and account.  

• Employment Information: Professional or employment-related information. 

• Sensitive Personal Information: consumer’s account log-in, password, or credentials allowing access to an account; or union membership.  

• Categories of sources from which Personal Information is collected. The categories of sources from which Personal Information is collected is described in Section 1 (Categories of Personal Information We Collect). 

• Purposes for collecting Personal Information. The purposes for collecting Personal Information are described in Section 2 (How and Why We Collect Personal Information). 

• Categories of Service Providers and Third Parties to Whom Personal Information is Disclosed for a Business Purpose. In the last 12 months we disclosed all of the categories of Personal Information described above under the “Categories of Personal Information We Collect” in this Section for our business purposes. The categories of third parties and/or service providers with whom we disclosed Personal Information in the last 12 months are described in Section 3 (How We May Disclose Personal Information). 

• Categories of Third Parties Personal Information Sold or Shared. In the last 12 months we have not Sold or Shared Personal Information of any individual for compensation or cross-contextual behavioral advertising and we currently do not Sell or Share Personal Information. 

We do not have any actual knowledge of selling or sharing Personal Information of any individual under the age of 16 for monetary compensation or for cross-context behavioral advertising. 

• Sensitive Personal Information. We have not used or disclosed Sensitive Personal Information for any reason other than the reasons for which it was provided to us. We do not use Sensitive Personal Information to infer characteristics about individuals. 

• Data Retention. We determine how long to retain Personal Information, which applies to all categories of Personal Information, based on our legal obligations, how long we need to retain your Personal Information for the purposes we collected it, and our internal data retention policies. 

2. Your California Consumer Data Rights  

Subject to certain limitations such as (a) exceptions permitted by applicable law and (b) verification of your identity, if you are a California resident, you may exercise the following rights with regard to your Personal Information: 

• Right to Request Access. You have the right to request access to, and receive a copy of, the specific pieces of Personal Information that we have collected in the last 12 months, and to have this delivered, either (a) by mail or (b) electronically in a portable format and, to the extent technically feasible, in a readily useable format. 

• Right to Request to Know. You have a right to request information about the Personal Information we have collected about you, including any of the following that occurred in the last 12 months:  

• the categories of Personal Information we collected from you, 

• the categories of sources from which the Personal Information was collected,  

• the business or commercial purpose for collecting, Selling or Sharing your Personal Information,  

• the categories of third parties with whom we disclosed, Sold or Shared your Personal Information,  

• the specific pieces of Personal Information we collected from you, and  

• a list of categories of Personal Information we Sold, Shared or disclosed for a Business Purpose. 

• Right to Request Deletion. You have the right to request that we delete Personal Information we collected from you. We will comply with such requests, and direct our service providers to do the same, subject to certain exceptions permitted by applicable law. 

• Right to Opt-Out of the Sale or Sharing of Your Personal Information. You have the right to request that we do not Sell or Share any Personal Information. As noted above, we do not “Sell” or “Share” any Personal Information as defined by CCPA.  

• Right to Request Correction of Inaccurate Personal Information. You have the right to request that we correct inaccurate Personal Information that we maintain about you. We will make commercially reasonable efforts to make any such corrections as required by applicable law. 

• Right to Limit Use and Disclosure of Sensitive Personal Information. You have the right to limit our use and disclosure of your Sensitive Personal Information to only uses that are necessary to perform the Site Sav-Rx provides to you. We do not use or disclose Sensitive Personal Information for any purpose other than the purpose for which it was collected. 

• Right to Non-Discrimination. You have a right to not receive discriminatory treatment for exercising any of your rights under the CCPA. Should you wish to exercise any of your rights as detailed above, we will not discriminate against you by offering you different services based solely upon your exercise of the above rights.  

CALIFORNIA’S “DO-NOT-TRACK” REQUIREMENT. WE CURRENTLY DO NOT HONOR “DO NOT TRACK” REQUESTS. 

3. How to Exercise Your California Consumer Rights. 

• Submitting a Request. To exercise your California rights described in this Section, you may submit your request to us by contacting us at any of the following: 

Call us at 402-753-2800 

Email us at Privacy@Savrx.com 

Write to us at:  

224 North Park Avenue Fremont, NE 68025 

• Verifiable Consumer Request. In order to verify your request, you must provide sufficient information to allow us to reasonably verify you are the person about whom we collected Personal Information, and you must describe your request with sufficient detail to allow us to properly understand, evaluate, and respond to your request. This information may vary depending on the Personal Information we already have. We will only use Personal Information we collect during the verification process for the purpose of verifying your identity. If you maintain an account with us, we may use that account to respond to your request and/or verify your identity. If we are unable to verify your identity as required by applicable laws and regulations, we will decline to comply with your request, and let you know why.  

• Authorized Agents. You may only make a request to exercise your rights on behalf of yourself, or a parent or legal guardian may make a request on behalf of their child. You also have a right to submit requests to exercise your rights under the CCPA through an authorized agent. If an authorized agent contacts us to exercise the above rights, we will need to verify their identity as well as your identity. We will also require proof of your written authorization to the agent to be your agent and to make the specific request submitted, unless the agent is subject to a Power of Attorney under California probate laws. If the agent is a Power of Attorney under California probate laws, we may require evidence of that status.  

• When We Will Respond. We will confirm receipt of your request within 10 business days. We will try to respond to your request within 45 days. If we require additional time, we will inform you of the reason and extension period. Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. We may charge a fee to process or respond to your request if it is excessive, repetitive, or manifestly unfounded.  

Denial and Right to Appeal. We may deny your request if permitted by CCPA. If we deny your request, you will have the right to appeal within thirty (30) days of our sending the denial by responding directly to the communication denying your request or by emailing us at Privacy@Savrx.com.