Home Services Career Locations Contact Policies and Privacy Website Privacy Policy Effective Date: May 14, 2021 This Privacy Policy describes how Geneva Woods Pharmacy, Inc., a wholly owned subsidiary of CVS Health (“Geneva Woods,” “we” or “us”) may collect information about you through your interactions with us on www.genevawoods.com and on our other websites and mobile applications (collectively, the “Services”). By using the Services, you agree to the terms of this Privacy Policy. If you have any questions or concerns about this Privacy Policy, or about the way your information is collected and used, please email us at webadministrator@genevawoods.com. To the extent that information collected through the Services is patient information provided to obtain pharmacy services, this information is governed by the Geneva Woods Notice of Privacy Practices and not this Privacy Policy. If you have questions about which policy applies to information you have provided, please do not hesitate to Contact Us, or email us at webadministrator@genevawoods.com. We may change this Privacy Policy. The “Effective Date” legend at the top of this page indicates when this Privacy Policy was last revised. Any changes will become effective when we post the revised Privacy Policy on the Services. Your use of the Services following these changes means that you accept the revised Privacy Policy. Who May Use the Services We do not knowingly collect any personal information online from any person we know to be under the age of 13, and we instruct users under 13 not to send any information to or through the Services. The online Services are designed for users from, and are controlled and operated by us from, the United States. By using the Services, you consent to the transfer of your information to the United States or storage of your information in the United States, which may have different data protection rules than those of your country. The Personal Information We Collect We want you to understand how personal information you provide to us is collected and used. Personal information is any information that we can use to identify, locate, or contact you. We collect and store your personal information when you provide it to us or to our service providers. Some examples of personal information we collect and when we collect it include: Contact Information: We collect personal information from users of the Services who are interested in receiving information about our products or services, such as prescription benefit, disease management, and specialty pharmacy services, e-mail alerts, newsletters, and other notifications. Surveys: From time to time, we request information from you via surveys. Participation in these surveys is voluntary. We request that you not provide personal health information in your survey responses. You may contact us regarding any survey as set forth under “Contact Information,” below. If you choose not to provide your personal information to us, we may not be able to provide you with requested products, services or information. If you submit any personal information relating to other persons in connection with the Services, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy. We may combine the information collected from you through the Services with information received from and about you from other online and offline sources and use the combined information in accordance with this Privacy Policy. Use and Disclosure of Personal Information We use your personal information to respond to your requests, send you emails, alerts, newsletters, and provide you with related customer service. We may also use your information to send communications and administrative information to you, as permitted by law and our client agreements, including through the use of push notifications in our apps. We may use personal information to personalize your user experience on the Services, including by presenting products and content tailored to you, and for our business purposes, such as data analysis, audits, fraud monitoring and prevention, developing new products and services, determining the effectiveness of our promotional campaigns, and operating and expanding our business activities. In the event that Geneva Woods or some or all of our business, assets, or stock are sold or transferred (including in connection with any bankruptcy or similar proceedings) or used as security, or to the extent we engage in business negotiations with third parties, personal information may be transferred to or shared with third parties as part of any such transaction or negotiation. To the extent permitted by applicable law, we may provide personal information to our affiliated businesses or to our business partners, who may use it to send you marketing and other communications. We may disclose personal information to our service providers, who provide services such as website hosting, data analysis, information technology and related infrastructure provision, customer service, email delivery, auditing, and other services. If we are requested by law enforcement officials or judicial authorities to provide personal information, we may do so. In matters involving claims of personal or public safety or in litigation where the information is pertinent (including to allow us to pursue available remedies or limit the damages that we may sustain), we may use or disclose personal information, including without court process. We may also use or disclose personal information to enforce our terms and conditions, to protect our operations or those of any of our affiliates, or to protect our rights, privacy, safety, or property and/or that of our affiliates, you, or others. We may use and disclose personal information to investigate security breaches or to cooperate with authorities. We may use and disclose information that does not personally identify you (including the information described under “Cookies and Other Technologies,” below) for any purpose, except to the extent limited by applicable law. If we are required to treat such information as personal information under applicable law, then we may use it for all the purposes for which we use and disclose personal information. We may combine information that does not personally identify you with personal information. If we do, we will treat the combined information as personal information as long as it is combined. Links The Services may contain links to, or otherwise make available, third-party websites, services, or other resources not owned and operated by us or on our behalf (“Third Party Services”). These links are provided as a convenience only and do not constitute an affiliation with, endorsement, or sponsorship of the Third Party Services. Any information you provide to such third parties is not subject to the terms of this Privacy Policy, and we are not responsible for the privacy or security of the information you provide to them or their handling of your information. We recommend that you review the privacy policy of any third party to whom you provide personal information online. In addition, we are not responsible for the information collection, use, disclosure, or security policies and practices of other organizations, such as Apple, Google, Microsoft, RIM, or any other app developer, app provider, operating system provider, wireless service provider, or device manufacturer. Information from Other Sources We may collect data about you from publicly available sources to personalize your experience. We may also obtain data provided by third parties. For example, we may obtain information from companies to improve the accuracy of the information we have about you (e.g., adding your zip code to your address information). This improves our ability to contact you and increases the relevance of our offerings and communications to you. Security We seek to use reasonable physical, technical, and administrative safeguards to protect personal information within our organization. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of your account with us has been compromised), please immediately contact us in accordance with the “Contact Information” section below. You are responsible for maintaining the confidentiality of your Services access information and password and for restricting access to your device, and you agree to accept responsibility for all activities that occur under your password to our Services. Telephone, Text, and Fax Policy By providing your residential or wireless phone and/or fax number(s) to Geneva Woods, you expressly consent to receive marketing and non-marketing autodialed and/or prerecorded calls, text messages and faxes (including fax advertisements) from or on behalf of Geneva Woods at the number(s) provided. Your consent to receive calls or texts on your wireless device is not a condition of any purchase. Consent may be revoked at any time by sending an opt-out request via email to webadministrator@genevawoods.com with the phone and/or fax number you wish to opt-out. Your wireless carrier’s standard message and data rates may apply. Messaging Terms & Conditions Geneva Woods or one or more of its affiliates offers access to pharmacy and healthcare service messages via recurring SMS (Short Message Service), MMS (Multimedia Message Service) text alerts and email alerts. Enrollment in text alerts requires a member to provide his or her own mobile phone number with an area code within the 50 United States or the District of Columbia. Enrollment in email alerts requires member to provide an email address. By enrolling to receive Geneva Woods text or email alerts, you agree to these terms and conditions, which become effective upon your enrollment. You may be asked to verify your mobile phone number before the service will start. This requires responding to a text alert sent to your mobile phone confirming your enrollment in this Service. You acknowledge that alerts will be sent to the mobile phone number or email address you provide to Geneva Woods. Such alerts may include limited personal information about your prescriptions, and whoever has access to the mobile phone or carrier account or email address will also be able to see this information. Once you enroll, the frequency of text or email alerts we send to you will vary. You will typically receive alerts when we have information for you about your prescriptions or other healthcare information. Geneva Woods does not impose a separate charge for text alerts; however, your mobile carrier’s message and data rates may apply depending on the terms and conditions of your mobile phone contract. You are solely responsible for all message and data charges that you incur. Please contact your mobile service provider about such charges. The following carriers are supported: AT&T, Sprint, Boost, Verizon Wireless, U.S. Cellular®, T-Mobile®, Cincinnati Bell, Alltel, Virgin Mobile USA, Cellular South, Unicel, Centennial and nTelos. You may opt out of Geneva Woods text alerts at any time. To stop receiving text alerts, text STOP to the number upon which you are receiving text alerts. Texting STOP to 53333, 68425 or 86053 (or the number you are receiving Geneva Woods alerts from) will opt you out of any and all future Geneva Woods text messages. After you submit a request to unsubscribe, you will receive one final text alert from Geneva Woods confirming that you will no longer receive text alerts. No additional text alerts will be sent unless you re-activate your enrollment to the text alert program. For questions about text alerts, text the word Help to 53333. Text alerts may come from any one of these short codes and Geneva Woods may change, add or remove short codes as necessary. The Geneva Woods text alert programs are offered on an “as is” basis and: (1) may not be available in all areas at all times; and (2) may not continue to work in the event of product, software, coverage or other service changes made by your wireless carrier. Geneva Woods may change or discontinue any of its text alert programs without notice or liability to you. Geneva Woods and its related companies and each of their respective officers, directors and employees are not responsible and shall not be liable for any losses or injuries of any kind resulting, directly or indirectly, from any Geneva Woods text alert program or from technical failures or delays of any kind. Geneva Woods reserves the right to cease delivery of text alerts to any person at any time in its sole discretion. Cookies and Other Technologies Like many other websites and online services, we may collect information about the Services’ traffic and usage patterns through the use of cookies, Web server logs, web beacons and other, similar technologies. We use this information for various purposes, such as to ensure that the Services function properly, to facilitate navigation, to personalize your experience, to understand use of the Services, to diagnose problems, to measure the success of our marketing campaigns and target advertisements, and to otherwise administer the Services. Cookies are small computer files we transfer to your computer’s hard drive. These small text files help us personalize content on our pages and provide programs. Your browser software can be set to reject or accept cookies. Instructions for resetting the browser are available in the Help section of most browsers. Our use of cookies also allows us to collect and receive certain information about a website user, such as the type of Web browser used by our customer. Reviewing our Web server logs and our customers’ use of our site helps us to, among other purposes, statistically monitor how many people are using our site and for what purpose. Your IP address is a number that is assigned to the computer, or device that you are using to access the internet by the Internet Service Provider. An IP address may be identified and logged automatically in our Web server log files whenever a user accesses the Services, along with the time of the visit and the page(s) visited. Collecting IP addresses is a commercially accepted standard practice and is done automatically by many websites, applications, and other services. We use IP addresses for purposes such as calculating usage levels of the Services, helping diagnose server problems, administering the Services, and future enhancements. Tracking You may manage cookies in your web browser. Your browser software can be set to reject or accept cookies. Instructions for resetting the browser are available in the Help section of most browsers. We do not respond to browser do-not-track signals. Fraudulent Sites, Spam & Phishing Please be aware that there may be fraudulent websites that illegally use Geneva Woods logos and other aspects of the Geneva Woods brand. Geneva Woods is in no way associated with any fraudulent websites. These sites may circulate their presence on the internet via spam email or through fraudulent phishing practices. These sites have not been authorized by Geneva Woods or affiliates to use our name, and we work aggressively to identify their source and have them shut down. If you are in receipt of this type of spam email, to help protect your privacy you should avoid replying to or forwarding it to other people. In addition to our official websites, Geneva Woods works with a number of third parties that host websites and micro-sites that provide information and services to our customers. If you are concerned that a website or an email may be fraudulent, please email us at webadministrator@genevawoods.com. Your Choices and Access You can request the removal or modification of the personal information you have provided to us by sending an email to the appropriate area under “Contact Us”. For your protection, we may only implement requests with respect to the personal information associated with the particular email address that you use to send us your request, and we may need to verify your identity and obtain information on the context in which you provided your personal information before implementing your request. We will try to accommodate your request as soon as reasonably practicable. Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting such change or deletion. There may also be residual information that will remain within our databases and other records, which will not be removed. Your California Privacy Rights If you are our customer and a California resident, you may request that we provide you with certain information about the entities with which we have shared our customers’ personal information for direct marketing purposes during the preceding calendar year. To do so, please write to us at LTCPrivacy.Officer@CVSHealth.com. Deidentified Patient Information In addition to personal information, we may sell or disclose patient and/or member information that has been deidentified as permitted by law. To the extent we sell or share such deidentified patient and/or member information, we do so pursuant to one of the deidentification methodologies described in Section 164.514(b)(1) or (b)(2) of Title 45 of the Code of Federal Regulations, commonly known as the HIPAA expert determination method and the HIPAA safe harbor method, respectively. Contact Information If you have any questions about the content of this Privacy Policy, please contact us at webadministrator@genevawoods.com or the CVS Health Privacy Office at the following address: CVS Health Attn: Privacy Office One CVS Drive Woonsocket, R.I. 02895 1-888-607-4287 ©2021 by www.GenevaWoods.com. a CVS Health Company.