Effective Date: 05/21/2026

View State-Specific Privacy Rights Here

At CoverMyMeds (“CMM”, “our”, “us”, or “we”), we value the trust that healthcare providers, pharmacies, pharmaceutical or drug manufacturers, and individual consumers place in us to use and protect personal information. This Privacy Notice informs you how we will use, share and protect your personal information. When you use the RxLightning Website or provide personal information, you accept the privacy practices described in this Privacy Notice. Please read this Privacy Notice in full to understand our privacy practices before you use the RxLightning Website or submit any personal information. You are also encouraged to access our supplemental privacy notice linked above titled, “View State-Specific Privacy Rights Here” that is applicable in specific situations.

Scope

This Privacy Notice applies to our use of personal information we collect when you use our site (https://rxlightning.com/) or in the ordinary course of business. The Privacy Notice does not apply to:

  • Individual health providers and practices who have separate privacy notices or Notice of Privacy Practices.
  • CMM affiliates and subsidiaries that may have separate websites, subdomains, and applications through other web, mobile, cloud or SaaS platforms which are not subject to this Privacy Notice.
  • CMM business partners, ad networks and other third parties that may have their own websites and services with separate privacy notices.

We encourage you to read the privacy notices of all websites and applications that you visit so that you understand their privacy practices.

Personal Information We Collect

When you use the RxLightning Website, we may collect personal information about you. The personal information we may collect includes, but is not limited to:

  • First name and last name
  • Personal electronic mail address
  • Business address
  • Business telephone number (office, cell, fax, etc.)
  • Business electronic mail address
  • Occupation/title
  • Geo-Location/GPS information
  • IP address, user’s browser type, user’s operating system, device identification number/serial number (such as for mobile phone, tablet, or computer), device/user activity (such as Login-Logout info, sites/pages visited, number of visits, click stream, navigation, beacon signal hits, errors, crash rate, or other user activities)
  • Marketing preferences such as text message or email notification and frequency
  • Information you provide directly to us:
    • When you use the site.
    • When you use offline features related to the site, such as communicating with us by phone, e-mail, or in person.
    • When you interact with us in the ordinary course of business.
  • Information about you from publicly available data, data banks or aggregators, affiliates, and/or other business units that is combined with information we already have about you.

Personal information may be combined with information that does not identify you. If we combine information that does not identify you with your personal information, it will be treated as personal information.

Tracking Technologies We Use

We use various technologies to collect personal information including:

  • Web server logs — As is true of most websites and applications, we gather certain information automatically and store it in log files. This information may include IP addresses, browser type, internet service provider, referring/exit pages, operating system, date/time stamp and/or clickstream data.
  • Cookies — We and our subsidiaries, business partners, marketing partners, affiliates, or other vendors may use cookies. Cookies uniquely identify the device or user account you use for this site. You can control the use of cookies by adjusting your browser preferences at any time. If you reject cookies, you may still use our site; however, rejecting cookies may limit your ability to use some features.
  • Geo-location Services — When you allow us to track your location, we may collect information about your location related to our site. We use various technologies to determine location, such as sensor data from your device that may provide information from nearby Wi-Fi access points and cell towers.
  • Website Analytics and Session Replay — We use analytics and session replay services that use cookies and other technologies that collect your personal information to assist us in analyzing our site traffic and usage to optimize, maintain, and secure our site and inform subsequent business decisions (e.g., advertising). These include, but are not limited to, the following third-party services: Google Analytics, Marketo, Google Ads, and Facebook ads.
  • Website Delivery and Appearance — We may use third-party providers to enable certain customer interaction opportunities, content delivery (like audio or video), or other service capabilities. Examples include, but are not limited to, the following third-party services: Vidyard.
  • Other Tracking Technologies — We and our subsidiaries, business partners, marketing partners, affiliates, or other service providers may also use technologies such as local shared objects (flash cookies), web beacons, scripts, tags, third party software codes (such as SDKS, open source or other embedded API). We also use local storage, such as HTML5, to collect and store your information and preferences and our third-party partners may do the same.

We may allow or enable third parties to collect Personal Information in order to provide their interest-based advertising services, and we use Google Ads and other third parties to serve ads for our Services across various websites. To opt-out of this type of advertising by Google, to customize your ad preferences, or to limit Google’s collection or use of your data, visit Google’s Safety Center and Google’s Ad Settings and follow Google’s personalized ad opt-out instructions. Opting out will not affect your use of our Services.

We use analytics services, including Google Analytics, to assist us with analyzing how people use our Services. These services utilize cookies and other technologies that collect your Personal Information. To learn more about how Google uses data, visit Google’s Privacy Policy and Google’s page on “How Google uses data when you use our partners’ websites or apps.” You may download the Google Analytics Opt-out Browser Add-on for each web browser you use, but this does not prevent the use of other analytics tools. To learn more about Google Analytics cookies, visit Google Cookie Usage on Websites.

How We Use the Personal Information Collected

We may use the personal information we collect for purposes such as:

  • Advertising services
  • Customer and troubleshooting support
  • Error detection and debugging
  • Legal, security, or safety reasons
  • Fraud detection or monitoring services
  • Marketing initiatives via surveys, contests, and research activities
  • Optimization services
  • Reporting or data analytics services
  • Internal research and development
  • Marketing notices, newsletters, or communications via email, fax, mail, mobile badge notifications, or text message
  • To coordinate with you

We may also use the information collected for the following purposes:

  • Surveys or Contests — If you participate in surveys, we will request certain personal information from you. Participation in these surveys or contests is completely voluntary, and you have a choice whether to disclose this information. We may use a third-party service provider to conduct these surveys or contests. We will not share the personal information you provide through a contest or survey with other third parties unless we give you prior notice and choice.
  • Advertising — We may partner with a third party to manage our advertising. Our third-party partners may use cookies and other technologies to gather information about your activities on this website and other websites to provide you with advertising based upon your browsing activities and interests. If you wish to not have this information used for the purpose of serving you interest-based ads, you may opt out via our cookie consent manager, according to the rights associated with your geo location.
  • Newsletters — We may use your name and email address to send you our newsletter and will obtain your prior consent when required by law. You may choose to stop receiving our newsletter or marketing emails by following the unsubscribe instructions included in those emails, or by contacting us using the contact information listed below.

How We Share Personal Information Collected

We may share personal information with other business units owned by McKesson when permitted by law. We may provide your personal information to third parties that provide services to help us with our business activities. These business activities include: Advertising services, reporting or data analytics services, marketing notices, newsletter, or communications via email, fax, mail, mobile badge notifications, or text message. These companies are authorized to use personal information about you only as necessary to provide these services to us.

We may need to share information with other companies, organizations or individuals if we have a good faith belief that access, use, preservation, or disclosure of that information is reasonably necessary to:

  • Meet applicable laws, regulations, legal processes, or enforceable governmental requests
  • Enforce applicable Terms of Service, including investigation of potential violations
  • Detect, prevent, or otherwise address fraud, security or technical issues
  • Protect against harm to the rights, property or safety of our users, McKesson, or the public as required or permitted by law
  • Engage in a merger, acquisition, reorganization, or sale of all or a portion of McKesson assets.

Your Choices

You can limit the personal information we have by choosing not to provide it to RxLightning Website or by failing to provide information through any offline features or in the ordinary course of business. Depending on where you live, you may have certain rights with respect to your personal information under applicable data protection laws. You may assert those rights by clicking on the “View State-Specific Privacy Rights Here” link located at the top of this notice underneath the effective date.

Access to Personal Information

Subject to applicable state privacy laws, individuals may request access to, correction of, or deletion of their personal information by exercising their state-specific privacy rights through the “View State-Specific Privacy Rights Here” link provided at the top of this notice.

Retention

We will retain your personal information in accordance with our Record Retention Policy and, where applicable, the terms of any Customer or Vendor contract.

Children’s Privacy

We do not knowingly collect or solicit any personal information from children, as defined under applicable law, without verified written parental consent, and we have no actual knowledge of selling such personal information of minors under 18 years of age. If we learn that we have collected personal information from a child, we will promptly take steps to delete that information. If you believe we might have any information from or about a child, please refer to the Contact Information section below.

International Use and Cross-Border Data Transfers

If you are visiting our site from outside of the United States, please note that our site is hosted in the United States. Where permitted by applicable law, we may transfer the personal data we collect about you to the United States and other jurisdictions that may not be deemed to provide the same level of data protection as your home country, as necessary for the purposes set out in this notice. For individuals in the European Union, European Economic Area, Switzerland, and United Kingdom: We will only transfer Personal Data to third parties located outside of this region when it has ensured appropriate safeguards for such Personal Information through use of the standard contractual clauses or other lawful and approved methods. To request a copy of applicable cross-border data transfer agreements, please reach out to us.

How We Protect Your Information

We protect the information we collect with proper physical, electronic and administrative safeguards. We only allow our employees, contractors, and agents to access personal information if they need access to perform services on our behalf. They are also subject to confidentiality obligations.

Any sensitive personal information is transmitted in an encrypted form using SSL encryption. Even though we have security safeguards, it is impossible to guarantee 100% security. If you have any questions about security or believe that your interactions with us are no longer secure (for example, you feel that your account with us has been compromised), you must notify us immediately by email at Privacy@McKesson.com.

Cross-Border Transfer of Personal Information

When you use or provide us personal information in connection with the RxLightning Website, your personal information may be transferred to another country where we or our vendors operate. The privacy laws and standards to protect data in those countries may differ from those in your own country of residence. We will transfer and protect your personal information in accordance with the law and with this Privacy Notice. We will have proper legal mechanisms in place (such as contracts, data protection agreements, Standard Contractual Clauses, etc.) before we transfer your personal information to another country.

Changes to this Privacy Notice

We may update this Privacy Notice from time to time. Updates may describe new features, products or services. Updates may also describe changes in how we use your personal information or to your controls. We will not apply changes to this Privacy Notice retroactively to personal information we have previously collected. Since we may make changes, we recommend that you read the current version of this Privacy Notice from time to time. If we change this notice, we will update the “Effective Date” at the beginning of this notice.

Contact Information

If you have questions or concerns about this Privacy Notice, our information handling practices, or any other aspect of privacy and security of your personal information, please contact us at: privacy@covermymeds.com.

You may also write to us at:

CoverMyMeds
ATTN: Privacy Officer (Privacy Notice, RxLightning Website)
910 John St.
Columbus, OH 43222