Scriptcycle

August 16, 2023



This Privacy Policy applies to information collected by Scriptcycle, LLC (collectively, "Scriptcycle," "we," "our" or "us"), in connection with the products and services that Scriptcycle offers. This includes information collected online through our website and other online communications, and through discount card programs offered by us or entities we work with (collectively, our "Services").


California Consumer Privacy Act (CCPA) Notice at Collection: Please click here to read our CCPA Privacy Notice for additional information, including with respect to your rights, under the CCPA.


What information do we collect about you?


The information we collect about you depends on the context. This could include information that could be used to personally identify you – either on its own or when combined with other information.


The information may include the following categories:

  • Personal Identifier and Other Information: Your name, date of birth, postal and email address, phone number, username, and password.
  • Commercial Information: Your purchase and usage history, goods and service preferences, prescription pricing information, insurance information, demographic information, interest information, payment and account information, and communications with us.
  • Prescription Information: Your prescription, pharmacy, prescription discount plan, insurance, and healthcare provider information.
  • Internet/Electronic Activity, Device Information, Usage Information:Your geolocation information, Internet Protocol (IP) address information that may identify your computer, mobile device, tablet or other device or browser, information about your operating system and browser, including the hardware model and mobile network information web/app browsing and search history related to our Services, and information regarding your interaction(s) with the Services or advertising may be collected by us or other companies we work with. Our URLs, pages, screens, and content may include drug names and information and condition names and information. In addition to other uses described herein, we and other companies may use this information to, among other things, provide the Services, help diagnose problems with our servers, analyze trends, track users' web page, email, and mobile application movements/activities, help identify or gather demographic information, and target and retarget online and mobile advertisements to you across computers or devices you may use.
  • Profile Inferences Inferences that we draw from the above categories of information and web activity to create a personalized profile so we can better identify goods and services that may be of interest to you.
  • Professional Information: For healthcare providers, your National Provider Number ("NPI"), medical specialty or other professional credential information.

There are several ways we may obtain information about you, including from: (i) you, when you provide us information to use our Services; (ii) you, when you interact with certain technologies that power our Services that are automatically or passively collected; (iii) our parent and affiliated companies, and (iv) third parties.

  1. Information You Provide to Us
    When you use the Services, we may ask you to provide certain information to obtain our products or use the Services. For example, we may ask for information when you request a discount card or coupon, use a discount or coupon, access healthcare provider services, purchase products or services, register to create an account, update your information, configure prescription pricing through your account (if using an enterprise account), or otherwise communicate with us.
  2. Information We Collect Automatically
    In addition to any information that you may provide to us, we and the third parties we work with may use a variety of technologies that automatically (or passively) when you use the Services. We may automatically collect certain information from you, including your IP address, device information for the computer, mobile device, tablet or other device, including the hardware model and mobile network information, browser type, operating system, products or services you purchase or access, content, screens or pages viewed and interactions with content, screens or pages, URL and the preceding page views or websites visited, what third party referred you to our Services, and mobile device configurations. Our URLs, pages, screens, and content may include drug names and information and condition names and information. We may also automatically collect information about your use of the Services, including the date and time you visit the Services; use or click through to any of the Services; the information, content, or advertisements you view, hover over, or click on; the amount of time you spend viewing or using the Services; the number of times you return to the Services; other click-stream or site usage data; and emails that you open, forward or click-through to our Services. In addition to other uses described herein, we and other companies may use this information to, among other things, provide the Services, help diagnose problems with our servers, analyze trends, track users' web page, email, and mobile application movements/activities, help identify or gather demographic and interest information, and target and retarget online and mobile advertisements to you across computers or devices you may use.
    • Third-Party Technologies: We may use other companies' analytics, tracking and provided tools that receive information when you use our Services, including technology from Google and others, to help us track, segment, and analyze usage of the Services, and to help us or those companies serve more targeted advertising on the Services and across the Internet. These tools may use technology such as cookies, tags, pixels, SDKs, and similar technologies to track online activity. The companies may also combine information they collect from your interaction with the Services with information they collect from other sources. We may not have access to information these companies collect using cookies or other tracking technologies.
  3. Information We Collect for Affiliates. We also may receive information about medications you are seeking to fill (such as medication names, dosage, price) and the fulfilling pharmacy from our affiliated companies to process prescriptions for our affiliates and to enhance our Services. When you access or engage with a service, application, or website provided through one of our affiliates, you will be subject to the privacy policy of the applicable affiliate. This privacy policy only covers our Services and does not cover any services provided by our affiliates and data shared by us with affiliates in relation to those services. Please review the disclosures set forth in the applicable privacy policy prior to using any services, application or website provided by our affiliates.
  4. Information We Collect from Third Parties
    We also may receive your information from third parties. This information may be collected in the following ways:
    • Pharmacies: When you use a coupon provided by us, we receive information about the transaction from the corresponding pharmacy and entities that provide services to pharmacies. We may also receive information about medications you are seeking to fill (such as medication names and dosage) and your preferred pharmacy from our affiliates.

How Do We Use Information About You?


We may use your information to provide our services and for a variety of related business activities, which may include:

  • General Business Operations. We use personal information for our general business operations, such as providing services to entities that we work with, order fulfillment, customer support, payment processing, and related actions for provision and maintenance of our services. For instance, we may process discounts and prices, check the price that you receive at the pharmacy against the price that we displayed to you on the website to ensure pricing accuracy. We may combine the various information we collect about you, including identifying information, usage information, as well as information collected offline, across other computers or devices that you may use, and from third-party sources. We also may transfer personal information in the context of a merger, acquisition, reorganization, or similar event, such as to a third party that acquires all or substantially all of the assets or stock of Scriptcycle.
  • Optimize Services. We use personal information to our services and products, such as through our use of analytics. To continue the example provided in the paragraph above, if we see that multiple people are not receiving the displayed website price at the pharmacy, we may stop showing that price while we reach out to the pharmacy or our other partners to figure out why the price is incorrect.
  • Communicating With You: We may use your information to communicate with you on websites, mobile applications, and third-party platforms, as well as via text messages, emails, direct mail, and other forms of advertising or marketing.
  • Personalize or Contextualize Our Services: We use your information to help personalize and contextualize our Services and provide relevant content based on how you interact with our Services, which may include marketing, advertising, and other analytics and operations related to advertising and marketing.
  • Advertising and Marketing: We may use your information to advertise and market to you on websites, mobile applications, and third-party platforms. This may include retargeting you on third-party platforms. We may use and share your information to send advertising and marketing of our Services and other services we believe you may find interesting and may share information with advertisers and other third parties. We may also use and share your information to measure the effectiveness of advertising and marketing, to predict effectiveness of advertising and marketing, to find audience for advertising and marketing and other analytics and operations related to advertising and marketing. We may also permit third parties to collect your information over time, your interactions with us or across third-party websites, mobile applications and/or online services, including those that assist us in operating our Services, including to serve ads or provide messaging to you on our own websites and mobile applications or on third-party platforms. We may also use third-party advertising companies to serve and load ads on certain parts of our Services, including an ad server to provide advertising when you use our website. These companies may use internet or electronic information about our Services and other websites and mobile applications in order to provide advertisements about goods and services of interest to you.
  • Auditing Interactions. We use personal information to audit our interactions with you, for instance counting ad impressions (e.g., whether you've seen our ads or not), detecting security incidents, protecting against fraud or other malicious activity; and identifying and repairing errors that may arise.
  • Compliance With Law. We use personal information for compliance with law, court orders, government regulations, and responding to law enforcement requests.

How do we share information with others?


We may share your information to companies that work for or provide Services to us.

  1. Affiliates and Subsidiaries
    We may share information with our subsidiaries and affiliated companies. For example, we may process information on behalf of our affiliates and share information about the transaction with our affiliates, including prescription transaction information related to coupons and pricing we process on behalf of our affiliates. This privacy policy only covers our Services and does not cover any services provided by our affiliates and data shared by us with affiliates in relation to those services. Please review the disclosures set forth in the applicable affiliate privacy policy prior to using any services, application or website provided by our affiliates.
  2. Service Providers and Third Parties
    We may share your information with the following service providers and third parties to perform services on our behalf such as:
    • Data warehouses, servers, and storage providers
    • Data analytic, data connectivity and customer data providers and platforms
    • Customer engagement or relationship management platforms
    • Cloud computing providers
    • Survey and customer feedback providers and platforms
    • Printers
    • Mailing houses and delivery services
    • Data providers
    • Software development tools
    • Referral program platforms
    • Pharmacies, healthcare providers, pharmaceutical manufacturers, copay card providers, insurance plans and other entities in the healthcare ecosystem
    • Data providers, email delivery, and analytics software
    • Text delivery and analytics platform
    • Customer service software
    • Patient advocacy support providers to handle your requests
    • Privacy management platform, such as to manage deletion requests
    • Prepaid card and gift card vendor
    • Credit card and payment processors that process your credit card information (in cases where you provide us with your credit card information) and track payments
    • Information security, fraud detection and prevention providers
    • Identity and professional credential verification providers
    • Auditors, third parties conducting security assessments and services, law firms, staff augmentation firms and other professional services providers
  3. For Corporate Transactions
    We may transfer your information if we are involved, whether in whole or in part, in a merger, sale, acquisition, divestiture, restructuring, reorganization, dissolution, bankruptcy, or other change of ownership or control. If another entity acquires us or any of our assets, information we have collected about you may be transferred to such entity. In addition, if any bankruptcy or reorganization proceeding is brought by or against us, such information may be considered an asset of ours and may be sold or transferred to third parties. Should such a sale or transfer occur, we will use reasonable efforts to try to require that the transferee use information provided through the Services in a manner that is consistent with this Privacy Policy.
  4. For Legal Obligations/Safety
    We may be required by law to comply with a valid legal process, such as a subpoena, court order, or search warrant, or where there is a lawful request, to disclose your information without your consent or notice. We may also be required to disclose your information to a third party or governmental entity in response to a court order. We may disclose your information to protect the security of our Services, servers, network systems, and databases.
  5. To Enforce Legal Rights
    We may also share your information to protect our customers, employees, or property; in emergency situations; to investigate, prevent, or take other action regarding suspected illegal activity, fraud, or other wrongdoing; and to enforce our rights under our terms of service and policies, in court or elsewhere

Your Privacy Rights

In addition to the privacy rights we provide to California residents (see CCPA Privacy Notice linked above), we provide the following privacy rights:

  1. Virginia, Colorado, and Connecticut State Privacy Rights: Under the Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), and Connecticut Personal Data Privacy and Online Monitoring Act (CTDPA), Virginia, Colorado, and Connecticut residents, respectively, can:
    1. Submit a request to confirm processing of ‘personal data’ and to access such personal data at the Scriptcycle Data Access Request Form. Prior to fulfilling your request, we will need to verify your identity, which may require additional pieces of information.
    2. Submit a request to correct inaccuracies in their personal information by emailingdatarequest@scriptcycle.com. Please note that we may be unable to process certain requests to correct, depending on the nature of the information and the purposes of the processing of the personal information. As an alternative, you may delete your inaccurate information by following the instructions under "Deletion" below.
    3. Opt out of processing of "sales" and of the processing of "personal data" for "targeted advertising," to the extent applicable. You can submit an opt-out request by clicking "Your Privacy Choices" in the footer below and following the instructions therein.
      • We make certain categories of personal data available to third parties in order to receive "targeted advertising"-related services, and such disclosures may also be considered a "sale" under these state laws absent certain exceptions (e.g., disclosures to "processors"). The categories of personal data made available are identifiers (such as email addresses, cookie IDs, IP addresses, or proprietary or open-source IDs), analytics information (e.g., actions taken in relation to our services or other analytics or ad measurement data), inferences (e.g., interests or demographics), and commercial information (e.g., services purchased or considered). The categories of third parties are data analytics providers, advertising technology partners, and social networks. See information above regarding use of marketing and data partners for additional information, as well as information regarding our use of advertising and marketing more broadly.
      • You have a right to opt out of profiling in the furtherance of decisions that produce legal or similarly significant effects, however, GoodRx does not conduct such profiling.
    4. Appeal our refusal to act on a relevant request by responding to the email that states such refusal.
  2. You can submit a request for deletion at the Scriptcycle Data Deletion Request Form. Prior to fulfilling your request, we will need to verify your identity, which may require additional pieces of information.

Children's Online Privacy Protection Act ("COPPA")


The Services are only for users of the age of 18 or older. If you are under the age of 18, please do not attempt to register with us or provide any personal information about yourself to us at any time for the Services. We do not knowingly collect personal information from individuals under the age of 13 and we do not direct our services to individuals under the age of 13.


Information Security


Scriptcycle takes information security seriously. We use commercially reasonable efforts to prevent unauthorized third-party access to your information. However, we cannot guarantee that these practices will prevent every unauthorized attempt to access, use, or disclosure of your information. Please note that we cannot ensure or warrant the security of any information you transmit to us over the internet or other electronic means. You use the Services and provide us with your information at your own risk, and we accept no liability for unintentional disclosure.


Contacting Scriptcycle


We would like to receive your comments and questions about this Privacy Policy and any other matter you have regarding our Site. Please address comments or questions to us via phone by calling877-288-3628. We are available Monday to Friday 8am to 5pm EST.


Scriptcycle, LLC.
34 Wall Street 5th Floor
Asheville, NC 28801
USA

Changes to this Privacy Policy


We may modify this Privacy Policy at any time. When we do so, we will post the revised privacy policy on our website. Please check the revision date at the top of this page to determine if the policy has been modified since you last reviewed it.


California Consumer Privacy Act Privacy Notice


Last Updated: January 1, 2023


This California Consumer Privacy Act ("CCPA") notice (this "CCPA Notice") is incorporated into Scriptcycle's ("Scriptcycle," "we," "us," or "our") general privacy policy found here (and other related policies) and applies to the personal information of California residents using our Services (collectively, "Consumers," "you," or "your"). In the event of a conflict between this CCPA Notice and any of our other privacy policies, this CCPA Notice shall control only with respect to Consumers and their personal information.


General Information Regarding Your Personal Information


Categories of Personal Information We Collect


We collect the following categories of Personal Information via our Services (and have done so within the past 12 months when engaging with our Services):

  • Identifiers (such as your name, mailing address, zip code, email address, phone number, member ID, online identifiers);
  • Categories of Personal Information Listed in Section 1798.80(e) of the California Customer Records Act (such as health and medical information, username and password, credit card information);
  • Characteristics of protected classifications under California or federal law (such as gender);
  • Commercial Information (such as prescription prices, health and medical information, pharmacy information);
  • Internet or other electronic network activity information (such as information regarding your interaction with our website or advertisements);
  • Geolocation data (such as zip code, home, work, billing, and/or shipping addresses);
  • Inferences (such as potential interest in our content or services); and
  • Sensitive personal information (such as data concerning a consumer's health, account log-in details).

We process sensitive personal information for the limited purposes permitted by the CCPA that do not require a corresponding opt-out.


The Business or Commercial Purposes for Which We Use Your Personal Information.We use your personal information in order to provide our services (including maintaining or servicing accounts, providing customer service, processing prescription orders and transactions, verifying customer information, processing payments), to provide services to our affiliates, to directly or indirectly enable or effectuate commercial transactions, to run our business (including for internal research for technological development and demonstration, activities to verify or maintain the quality of the services or improving, upgrading or enhancing our services, debugging to identify and repair errors that impair existing intended functionality, internal business operations, analytics, and to provide, develop, change, market or optimize our services and products), to communicate and market to you, to personalize communications and marketing (whether regarding our Services or third-party services we believe you may find interesting) and to measure the effectiveness of communications and marketing (directly or via third parties), to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for that activity, debugging to identify and repair errors that impair existing intended functionality. Please see our Privacy Policy for more information about how we use your personal information.


Sources of Personal Information. As also discussed in our general Privacy Policy, we collect personal information from various sources, including directly from you, our parent and affiliated companies, pharmacies, internet service providers, data analytics and marketing providers, operating systems and platforms, social networks, data brokers, healthcare providers, and pharmacy benefit managers.


Categories of Personal Information We "Sell" or "Share".The CCPA defines "sales" broadly to include not only traditional selling of data, but also many sharing arrangements where the recipient can use the personal information that they receive for the recipient's own commercial purposes. The CCPA defines "shares" broadly to include disclosures of personal information to third parties for cross-context behavioral advertising (or "targeted advertising," as such practice is more commonly referred to).


We make certain categories of personal information available to third parties in order to receive targeted advertising-related services, such as when we make browsing information available (e.g., through third-party tags on our digital properties) to carry out, measure, and improve our ad campaigns and reach users with more relevant ads and content. These disclosures may be considered a "sale" and "share" of personal information under the CCPA.


More specifically, the categories of Personal Information that we may have "sold" and "shared" in the past twelve (12) months are: identifiers; categories of personal information listed in Section 1798.80(e) of the California Customer Records Act; commercial information; internet or other electronic network activity information; geolocation information; electronic or similar information; professional or employment-related information; inferences; and sensitive personal information. The categories of third parties to whom we have "sold" or "shared" such data in the past twelve (12) months: are data analytics providers, advertising networks, and social networks. We do not have actual knowledge of "selling" or "sharing" personal information of individuals under 16 years of age.


Data Retention. We retain the categories of personal information listed above as reasonably necessary to fulfill the purposes outlined in this notice, unless a longer retention period is required or permitted by law. In many situations, we must retain all, or a portion, of your personal information to comply with legal obligations, resolve disputes, enforce our agreements, protect against fraudulent, deceptive, or illegal activity, or for another one of our business purposes.


Your Consumer Rights under CCPA

This section describes your various rights in relation to your personal information under the CCPA. For more information on how to effectuate such rights, please see the Submitting CCPA Requestssection below.


Right to Know. You have the right to request, free of charge, that we disclose information about our collection and use of your personal information over the past twelve (12) months (or longer, unless this proves impossible or involves disproportionate effort), including:

  • The categories of personal information we collect about you;
  • The categories of sources of the personal information we collect about you;
  • The business or commercial purpose for collecting, "selling," or "sharing" the personal information;
  • The categories of third parties to whom the business discloses personal information; and
  • The specific pieces of personal information we've collected about you.

Right to Request Deletion. You have the right to request the deletion of your personal information that we've collected from you, subject to certain exceptions.


Right to Correct. You have the right to correct any inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.


Right to Request Opt-Out of the "Sale" and "Share" of Your Personal Information. The CCPA allows you to opt-out of "sales" and "shares" of personal information, as such terms are further described above.


Right of Non-Discrimination. You have the right to not receive discriminatory adverse treatment for exercising any of your CCPA rights.


Submitting CCPA Requests


Requests to Know or Delete. To exercise your rights to know or delete, you, or an authorized agent, may submit a request at the Scriptcycle Data Access Request Form and/ or the Scriptcycle Data Deletion Request Form.


Requests to Correct. To exercise your right to correct, please email us atdatarequest@scriptcycle.com. Please note that we may be unable to process certain requests to correct, depending on the nature of the information and the purposes of the processing of the personal information.


How to Request to Opt-Out of "Sales" and "Shares" of Your Personal Information and Limiting Our Use/Disclosure of Sensitive Personal Information.To opt-out, please click our "Your Privacy Choices" link (found here and at the bottom of our website homepage) and follow the instructions therein. As set forth in the link above, you may use the Global Privacy Control (GPC) browser extension for opt-outs on the browser level in relation to "cookies." Learn more about global privacy controls at globalprivacycontrol.org.


Verification of Requests


Only you, or an individual legally authorized to act on your behalf, may make a request to know, delete, correct, or opt-out related to your personal information. You may only submit a request to know twice within a 12-month period. Your request to know, delete, or correct must:

  1. Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information, or that the requestor is your authorized representative.
  2. Describe your request with sufficient detail that allows us to properly respond to it.

We may request information from you in order to verify your identity. Additionally, we may require that authorized agents provide proof of their authorization. We cannot respond to your request if we are unable to verify your identity, your authority to make a request on behalf of another person, or if we cannot confirm that the personal information relates to you. In general, we will verify your request and your identity by matching the information you provided with the information we have in our records.


You do not need to create an account with us to submit a request to know, correct, or delete your personal information or opt-out of "sales" or "shares" of your personal information or certain use/disclosure of sensitive personal information.


We will only use personal information provided in the request to verify the requestor's identity or authority to make it.


Changes to this CCPA Notice


This CCPA Notice is current as of the Effective Date set forth above. We may modify this CCPA Notice at any time. Please check the revision date at the top of this page to determine if the policy has been modified since you last reviewed it.


Contact us


For questions about this CCPA Notice, please email info@scriptcycle.com. For a copy of this CCPA Notice for printing purposes, please emailinfo@scriptcycle.com with "CCPA Privacy Notice" in the subject line.