Privacy Notice - Copay Self Service
Effective Date: August 22, 2023

At RxCrossroads by McKesson ("RxCrossroads", "our", "us", or "we"), we value the trust that providers, pharmacies and patients place in us to appropriately use and protect personal information.

Scope
This Privacy Notice applies to our use of personal information we collect in connection with your use of the Copay Self Service Portal ("Portal") or in the ordinary course of business. It also informs how RxCrossroads will use, share and protect personal information about you. By using the Portal or providing personal information to us, you accept the privacy practices in this Privacy Notice. Please read this Privacy Notice in full to understand our privacy practices before using this Portal or providing any personal information.

The Privacy Notice does not apply to:

  • RxCrossroads affiliates and subsidiaries that may have separate websites, subdomains, and applications through other web, mobile, cloud or SaaS platforms which are not subject to this Privacy Notice.
  • RxCrossroads business partners, ad networks and other third parties that may have their own websites and services with separate privacy practices.
We encourage you to read the privacy notices of all websites and applications that you visit and understand their privacy practices.

Personal Information We Collect
In connection with your use of this Portal, we may collect personal information about you. The personal information we may collect includes, but is not limited to:

If you use the portal as a PATIENT, we may collect your:

  • Name
  • Date of birth
  • Personal home address, telephone numbers, and electronic mail address
  • Claims data, Rx/Prescription number, health insurance identification or account number, drugs, therapies, medical products, or equipment used, diagnosis code/description (condition information), procedure code/description (condition information)
  • Signature (electronic or digitized image)
  • Unique identifiers and user behavioral information collected passively, such as your IP address and user's browser type
If you use the portal as a PHARMACIST, we may collect your:
  • NPI number
  • NCPDP number
  • Unique identifiers and user behavioral information collected passively, such as your IP address and user's browser type
If you use the portal as a PROVIDER, we may collect your:
  • Patients' health-related information, such as co-pay card number
  • Patients' first name, last name, phone number, zip code and date of birth
  • Unique identifiers and user behavioral information collected passively, such as your IP address and user's browser type
Information you provide directly to us:
  • When you use the Portal
  • When you use offline features related to the Portal, such as communicating with us by phone, e-mail, or in person
  • When you interact with us in the ordinary course of business
  • Information we already have about you that may be combined with information from client files, customer or client hubs, and LoyaltyScript.
  • Personal information may be aggregated with other information that may not be considered personal information. If we combine your non-personal information with personal information, the combined information will be treated as personal information.

Tracking Technologies We Use
We use various technologies to collect personal information. These technologies include the following:

  • Web server logs
    • As is true of most websites and applications, we gather certain information automatically and store it in log files. This information may include IP addresses, browser type, internet service provider, referring/exit pages, operating system, date/time stamp and/or clickstream data.
  • Cookies
    • We and our subsidiaries, business partners, marketing partners, affiliates, or other vendors may use cookies. Cookies uniquely identify the device or user account you use for this site. You can control the use of cookies by adjusting your browser preferences at any time. If you reject cookies, you may still use our site. However, rejecting cookies may limit your ability to use some parts of our site.
  • Other Tracking Technologies
    • We and our subsidiaries, business partners, marketing partners, affiliates, or other service providers may also use technologies such as scripts and tags.

How We Use the Personal Information Collected
We may use the personal information we collect for purposes such as:

  • Customer and troubleshooting support
  • Error detection and debugging
  • Fraud detection or monitoring services
  • Managed services
  • Reporting or data analytics services
  • Payment services

How We Share Personal Information Collected
RxCrossroads does not sell your personal information to third parties. We may need to share information with companies, organizations or individuals outside of RxCrossroads if we have a good faith belief that access, use, preservation, or disclosure of that information is reasonably necessary to:

  • Meet applicable laws, regulations, legal processes or enforceable governmental requests
  • Enforce applicable Terms of Service, including investigation of potential violations
  • Detect, prevent, or otherwise address fraud, security or technical issues
  • Protect against harm to the rights, property or safety of our users, McKesson, or the public as required or permitted by law
  • Engage in a merger, acquisition, reorganization, or sale of all or a portion of McKesson assets.

Your Choices
You can limit the personal information you disclose to us by choosing not to provide it within the Portal or by failing to provide information through any offline features or in the ordinary course of business.

Access to Personal Information
For assistance / concerns about your personal information, you may contact us at 1-866-566-6446.

Retention
We will retain your personal information as long as you use Copay Self Service Portal, your profile is active, as necessary to comply with our legal obligations, resolve disputes or enforce our agreements.

How We Protect Your Information
We protect the information we collect with appropriate physical, electronic and administrative safeguards. We only allow our employees, contractors, and agents to access personal information if they need access to perform services on RxCrossroads's behalf. They are also subject to confidentiality obligations.

Any sensitive personal information s transmitted in an encrypted form using SSL encryption. Even though we have security safeguards, it is impossible to guarantee 100% security. If you have any questions about security or believe that your interactions with us are no longer secure (for example, you feel that your account with us has been compromised), you must immediately notify us by contacting RxCrossroads at Privacy@McKesson.com.

Changes to this Privacy Notice
We may update this Privacy Notice from time to time. Updates may describe new features, products or services. Updates may also describe changes in how we use your personal information or to your controls. We will not apply changes to this Privacy Notice retroactively to personal information we have previously collected. Since we may make changes, we recommend that you read the current version of this Privacy Notice from time to time. If we make changes to this notice, we will update the "Effective Date" at the beginning of this notice.

Contact Information
If you have questions or concerns about this Privacy Notice, our information handling practices, or any other aspect of privacy and security of your personal information, please contact us at: Privacy@McKesson.com.

You may also write to us at:

RxCrossroads
ATTN: Privacy Officer (Privacy Notice, Copay Self Service Portal)
2 National Data Plaza NE, 3rd Floor
Atlanta, GA 30329


For state specific privacy rights, please CLICK HERE.