CVS Privacy Policy

LAST UPDATED: July 1, 2025

This Privacy Policy describes how CVS Pharmacy, Inc. and its subsidiaries and affiliated companies ("CVS," "we," "our," or "us") collects Personal Information from and about you, including through your interactions with us in our CVS Pharmacy stores, on CVS.com (the "Site"), and on our mobile application (the "CVS App"). We refer to these collectively as the "Services." It also describes the types of Personal Information we collect, how we may use and disclose such information, and your choices and legal rights with respect to such information.

If you are looking for information about how a CVS Health company collects and uses information for any healthcare services including CVS Pharmacy and MinuteClinic, please review the privacy policy provided for those services, which you can find at our Privacy Center.

By using our Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree, please do not use our Services.

Contenido:

1. Información personal que recopilamos

There are several ways we may collect Personal Information about you, including through information you provide to us; information we collect through your use of the Services and interactions with us; information we receive from third parties; and by combining information from different sources. This includes data that identifies you personally, whether directly or indirectly. For purposes of this Privacy Policy, "Personal Information" refers to information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to you, and includes "personal data" or similar terms as defined in applicable law.

a) Categorías de información que podemos recopilar

We may collect certain categories of Personal Information, such as:

• Identificadores/información demográfica, como nombre, edad, fecha de nacimiento, sexo, género, dirección postal y de correo electrónico, número de teléfono e identificadores en línea, dirección de Protocolo de Internet ("IP") y otros identificadores similares.
• Commercial information, such as items purchased, obtained, or considered and other purchasing or consuming histories or tendencies.
• Información sobre la actividad en Internet u otra red electrónica.
• Datos de geolocalización (no precisos).
• Biometric information.
• Información auditiva, electrónica, visual o similar.
• Información profesional o relacionada con su empleo.
• Inferences, meaning inferences drawn from the listed categories of Personal Information reflecting consumer preferences or characteristics.
• Sensitive Personal Information as defined by applicable laws, including government identification numbers, biometric information, account log-in and password, credit or debit card number, precise geolocation, racial or ethnic origin, and Personal Information collected and analyzed concerning a consumer’s health, sex life, or sexual orientation.

We may share or sell, or use for targeted advertising, as those terms are defined by applicable law, certain categories of Personal Information, including online and other identifiers, commercial information, internet activity, and non-precise location information.

b) Información personal que usted puede proporcionar

When you use our Services, we may collect Personal Information from you, such as when you create an account, your interactions with our CVS Pharmacy stores, our Site, or CVS App, or your enrollment in programs such as e-receipt or ExtraCare^®.

c) Información que podemos recopilar automáticamente

When you visit and interact with our Services, we or our third-party advertising and analytics partners and service providers may use a variety of technologies, such as cookies, tags, SDKs or scripts, to collect certain information regarding your activity.

The specific types of information that we and our partners and service providers may automatically collect when you visit and interact with our Services include:

• Información del dispositivo y del navegador. This includes your device’s IP address and/or other unique identifiers, browser type, device type, internet service provider, and operating system.
• Información sobre ubicación. When you access our Services from a mobile device, your device's approximate location (derived from your device's IP address or other signals) may be collected. Además, cuando visite una de nuestras tiendas, también podemos recopilar su ubicación.
• Información de uso. When you interact with our Services, certain information may be collected by us or our third party vendors, such as the date and time of your visit, the pages you view immediately before and after you access our Services, the areas or pages of our Services that you visit, the amount of time you spend viewing or using our Services, items placed or left in your shopping cart on the Site or CVS App, keystrokes, mouse movements, form field entries, recordings of chat sessions or your use of and inputs to other AI-supported tools, and other use and overall engagement with our Services.
• Marketing Information. If you receive an email from us, information may be collected about your interactions with the message (e.g., whether you opened, forwarded, or clicked through to our Site).
• Third-Party Analytics Technologies. We may use third-party analytics tools to better understand who is using our Services, how people are using them, and how to improve their effectiveness as well as the effectiveness of any related content.

Cookies y otras tecnologías similares: las "cookies" son archivos de texto que los sitios web que usted visita colocan en su navegador. Cookies are used for various purposes, such as to distinguish you from other users, make your site navigation more efficient, help remember your preferences, enhance your browsing experience, and improve the use and functionality of our Sites and related content. They can also enable the delivery of relevant and personalized advertisements to you across the internet.

Cookies (and other similar tracking technologies) provided by third parties may be placed on certain places within our Sites and the providers of these technologies may combine information collected from your interaction(s) with our Services with information they collect from other sources and use the combined information for analytics and/or advertising purposes.

To learn more about your choices regarding the automatic collection and use of your information as you browse our Services, please see the Sus opciones y derechos de privacidad section below.

d) Información que podemos recibir de terceros

Podemos recibir Información personal de otras fuentes. Nuestras fuentes de terceros pueden incluir:

• Our Business Partners, such as companies that co-sponsor our promotions.
• Our Marketing/advertising and analytics partners, such as online advertising networks and analytics providers.
• Social Media Platforms (note that the information we receive from such platforms is dependent upon their policies and your settings on the platforms).
• Other Companies that provide Personal Information to supplement what we already know about you, including data aggregators.

e) Combinación de información

Podemos combinar la Información personal que recibimos de varias fuentes. Por ejemplo, podemos combinar la Información personal que recibimos de terceros con la Información personal que ya tenemos sobre usted. We use, disclose, and protect combined Personal Information as described in this Privacy Policy.

f) Retención

We will retain your Personal Information for as long as reasonably necessary to provide you with our Services that you request, for marketing purposes unless you opt out as described in our Privacy Policy, or otherwise where permitted or required in accordance with applicable law. Retendremos y utilizaremos su Información personal según sea necesario para cumplir con nuestras obligaciones legales, resolver disputas y hacer cumplir nuestros acuerdos. Lo que esto significa en la práctica variará entre los diferentes tipos de información y, cuando consideramos nuestro enfoque, tenemos en cuenta las necesidades comerciales o legales actuales de la información, por ejemplo, en relación con impuestos, salud y seguridad, y disputas o investigaciones potenciales o reales.

2. Finalidades del procesamiento de su Información personal

Podemos usar la Información personal que recopilamos sobre usted para los fines indicados a continuación:

• To provide you with our Services, including to manage your accounts, orders, billing and improve reorder experiences.
• To administer our loyalty and membership programs, including ExtraCare and ExtraCare Plus™.
• To process your payments and fulfill your orders.
• To create, maintain, customize and secure your account with us.
• To communicate with you, such as through bots (which may be powered by third party vendors and be trained on your inputs through AI-based technology), including to respond to your inquiries/requests and request feedback from you, and to send you important updates and messages about changes to our Services, our Privacy Policy or this Notice and/or other applicable terms and conditions.
• To review the usage and maintain the operation of our Services.
• To conduct analysis and develop and/or improve our Services.
• To monitor, protect and maintain the security and integrity of our Services and our business, such as protecting against and preventing fraud, unauthorized transactions, claims and other liabilities.
• Para cumplir con las leyes y regulaciones aplicables y responder a solicitudes y comunicaciones legales de las autoridades policiales y otros funcionarios gubernamentales.
• Para realizar ventas y transacciones comerciales en las que la información que poseemos se encuentre entre los activos transferidos o sea de otro modo relevante para la evaluación, negociación o finalización de la transacción.
• Para proteger nuestros derechos, privacidad, seguridad, propiedad y/o los de otros.
• Para cumplir con cualquier otro propósito para el cual usted proporcione su Información personal o como se le explicó en el momento de la recopilación de información.
• To provide you or others with customized content or targeted offers.
• To send you information, newsletters and marketing/promotional material from us and, or on behalf of, our marketing partners and affiliates.

3. Cómo podemos divulgar su Información personal

Podemos divulgar la Información personal que recopilamos a las siguientes categorías de destinatarios:

• Nuestros proveedores de servicio. Divulgamos su información personal a nuestros proveedores de servicios que nos brindan servicios de asistencia comercial, profesional o técnica, nos ayudan a operar nuestro negocio y los Servicios, o administran actividades en nuestro nombre. Requerimos que nuestros proveedores de servicios utilicen su información personal únicamente en relación con la prestación de servicios a CVS.
• Third-Party Ad Networks and Providers. We may disclose Personal Information to third-party ad network providers, sponsors and/or traffic measurement services. Estos terceros pueden usar cookies, JavaScript, web beacons (incluyendo GIF transparentes) y otras tecnologías de rastreo para medir la eficacia de sus anuncios y personalizar el contenido de anuncios que se le muestra. These third-party cookies and other technologies are governed by each third party's specific privacy policy, and not this one.
• Our Research Partners. We disclose your Personal Information to our research partners, such as those that administer surveys or conduct research projects in partnership with us or on our behalf.

En determinadas circunstancias, podemos divulgar cada categoría de su Información personal a:

• Autoridades gubernamentales, reguladoras y públicas competentes. Podemos divulgar su Información personal solo cuando lo permitan o lo requieran las autoridades gubernamentales y policiales. Divulgamos Información personal en asuntos relacionados con la seguridad pública o personal o en casos de litigios. Esto puede incluir la divulgación de su Información personal para intentar conseguir resarcimientos o limitar los daños que podamos sufrir. También podemos usar o divulgar su información para hacer cumplir nuestros términos y condiciones, para proteger nuestras operaciones o las de cualquiera de nuestras afiliadas, para evitar el uso indebido de nuestros Servicios o para proteger nuestros derechos, privacidad, seguridad o propiedad y/o los de nuestras afiliadas, los suyos y de los demás.
• Terceros relevantes como parte de una transacción corporativa. En caso de una reorganización, fusión, venta, empresa conjunta, cesión, transferencia u otra disposición de la totalidad o parte de nuestro negocio, activos o acciones (incluso en relación con una quiebra o procedimiento similar), podemos divulgar o transferir su Información personal a ciertos terceros, como la entidad adquirente y sus asesores.
• Otros terceros. Divulgaremos su Información personal a otros terceros según sus instrucciones o con su consentimiento. Además, divulgaremos su Información personal según lo consideremos necesario o apropiado para: (a) cumplir con la ley aplicable; (b) hacer cumplir nuestros términos y condiciones; (c) proteger nuestras operaciones; (d) proteger nuestros derechos, privacidad, seguridad o propiedad, y/o los suyos o de otros; y (e) permitirnos buscar los recursos disponibles o limitar los daños que podamos sufrir.

Podemos divulgar Información personal por otras razones que describiremos en el momento de la recopilación de información o antes de divulgar su información.

We may choose to disclose nonpublic personal information about you, the consumer, to a third party for compensation.

Please note that we may de-identify or aggregate Personal Information so that it will no longer be considered Personal Information and disclose such information to other parties for purposes consistent with those described in this Privacy Policy. A menos que tome medidas para volver a identificar su información anonimizada, no intentaremos volver a identificar esta información para que pueda asociarse con usted.

4. Sus opciones y derechos de privacidad

You have the ability to make certain choices about how we use your Personal Information, as follows:

a) Unsubscribing from our Marketing and Promotional Communications

From time to time, we may send you marketing and promotional communications, including special offers from us or our partners. If you no longer wish to receive promotional and marketing emails from us, you may opt out of such communications at any time by following the opt-out instructions included in any promotional or marketing email you receive from us.

b) Privacy Rights and Requests

Depending on your U.S. state of residence, including California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia and such other states with privacy laws that are enacted, you may have certain rights in relation to your Personal Information, including:

• Right to Know: You may have the right to know what Personal Information we have collected about you, including the categories of sources from which the Personal Information is collected, the business or commercial purpose for collecting, selling, or sharing Personal Information, the categories of third parties to whom we disclose Personal Information, the categories of Personal Information disclosed to third parties, and the specific pieces of Personal Information we have collected about you. Tenga en cuenta que es posible que no estemos obligados a responder a sus solicitudes de "conocer" o acceder a Información personal específica más de dos veces en un período de 12 meses.
• Right to Request Specific List of Third Parties: You may have the right to request a list of the specific third parties with whom we have shared or sold your Personal Information.
• Right to Request a List of Categories of Third Parties: You may have the right to request a list of the categories of third parties to which we have disclosed Personal Information.
• Right to Data Portability: You may have the right to access your information in a portable format.
• Right to Delete: You may have the right to request that we delete Personal Information that we have collected from or about you, subject to certain exceptions.
• Right to Correct: You may have the right to correct inaccurate Personal Information that we may maintain about you, subject to appropriate verification.
• Right to Opt Out of Certain Types of Personal Information Uses and Disclosures: We use and disclose to third parties Personal Information for analytics and advertising purposes. Accordingly, you may have the right to opt out of the "sale" or "sharing" of your Personal Information, or the use and disclosure of your Personal Information for "targeted advertising" (as these terms are defined under applicable law).

Please note that, where permitted under applicable law, we may decline a request (other than for opt outs) if we are unable to verify your identity (or an agent’s authority to make the request) and confirm the Personal Information we maintain relates to you.

If you are interested in exercising one or more of the rights outlined above except for the Right to Opt Out (see Section 4(d) below), please click aquí o llámenos al 1-833-533-0768. We may take steps to verify your identity before responding to your request by asking you a series of questions about you or your previous interactions with us. El envío de una solicitud de derechos de privacidad no requiere que usted cree una cuenta con nosotros.

We will not discriminate against you if you decide to exercise your privacy rights.

c) Solicitudes de agentes

Solo usted, o alguien legalmente autorizado para actuar en su nombre, puede enviar una solicitud relacionada con su Información personal.

Depending on your U.S. state of residence, you may authorize someone to make a privacy rights request on your behalf (an authorized agent). Los agentes autorizados deberán demostrar que usted los ha autorizado a actuar en su nombre. CVS se reserva el derecho de solicitarle directamente a usted confirmación de que el agente está autorizado a realizar dicha solicitud o de solicitar información adicional para confirmar la identidad del agente.

d) Opt-Out Requests

You may request to opt out of the sale or sharing of your Personal Information, or of targeted advertising, at any time by clicking the “Your Privacy Choices” link aquí or at the bottom of our Services’ homepages.

Submitting an opt-out request does not require you to create an account with us.

Alternatively, you can use certain preference signals to opt out automatically with all businesses that you interact with online, including CVS. If you enable a browser-based opt-out preference signal, such as Global Privacy Control (GPC), upon receipt or detection, we will endeavor to recognize and treat the signal as a valid request to opt out. If you use different browsers or browser profiles, you may need to enable the signal on each browser or profile if we're unable to associate your preference signal with you.

If you are not logged in on the Services, you may need to opt out separately on all of your browsers and devices, as each opt out will apply only to the specific browser or device from which you opt out if we do not recognize who you are. If you delete or reset your cookies or mobile identifiers, change browsers, or use a different device, this also may mean that the opt-out cookie or tool may no longer work and you will have to opt out again.

In addition, you may opt out of the collection and use of your Personal Information for ad targeting by Google Ad Manager on the Site and the CVS App. You can opt out of this ad targeting powered by Google Ad Manager aquí.

Further, you may be able to opt out of receiving certain targeted or interest-based advertisements using the browser opt-out tools and consumer choice mechanisms provided by advertising industry self-regulatory groups by following the links below:

• Network Advertising Initiative (NAI): https://optout.networkadvertising.org/?c=1
• Digital Advertising Alliance (DAA): https://youradchoices.com/control

You also can control whether you see interest-based advertisements on your mobile device(s) in the following ways:

• Your device operating system may provide mechanisms that allow you to opt in or opt out of the use of information about your use of mobile apps to deliver interest-based advertising to your mobile device. For more information, consult your device settings.
• The DAA offers a tool for opting out of the collection of cross-app data on mobile devices for interest-based advertising. To exercise your choices with respect to participating companies, please download the AppChoices tool at www.aboutads.info/appchoices.

Even if you choose to opt out of receiving interest-based advertising, you may still receive advertising, but the advertisements may be less relevant.

Some of our partners may provide you with additional choices with respect to interest-based advertising. For example, certain social media platforms allow you to control your advertising preferences directly through their services. Please review the privacy policies of the third-party services you use for more information.

e) Right to Appeal

Depending on your U.S. state of residence, you may have the right to appeal a decision we have made in connection with your privacy rights request. Para apelar una decisión, comuníquese con nosotros a través de ConsumerPrivacy@CVSHealth.com.

f) Notice of Financial Incentive

We offer financial incentives to promote our products and services. Los grupos son los siguientes:

• ExtraCare: As further described below, in exchange for your enrollment in our ExtraCare program, we may offer you special pricing or service differences, including those you become eligible for when you opt in to earn rewards at the pharmacy or enroll in ExtraCare Plus, which may be considered “financial incentive” programs under applicable state laws.
• ExtraCare Plus: If you join our ExtraCare Plus membership, we may offer additional ExtraBucks Rewards^® and members-only rewards by tracking additional data elements. As an ExtraCare Plus member, you may have the opportunity to join a third-party partners’ program at a discount. If you choose to join a third-party partners’ program through your ExtraCare Plus membership, you may receive additional ExtraBucks Rewards and members-only rewards in exchange for access and use of your information you provide to our partners as part of these third-party partners’ programs.

We may ask you to provide Personal Information in connection with these promotions, including the following Personal Information: identifiers, including contact information, date of birth, commercial information, purchase history, and information concerning your health. Because these promotions involve the collection of Personal Information, they may be interpreted as "financial incentive" programs under California law or "bona fide loyalty programs" under Colorado law. We use this information for the purposes described in our Notice at Collection of Personal Information, including for targeted advertising. We may share your Personal Information with third parties as described in our Notice at Collection of Personal Information, including data analytics providers, advertising technology vendors, and social media platforms.

Participation in any financial incentive is optional. To enroll, please click aquí. You may withdraw from the program at any time by signing into your account and submitting your request aquí, or by submitting a request to delete your Personal Information here. To stop receiving our emailed coupons or discounts, you may unsubscribe by clicking the "unsubscribe" button at the bottom of any such email. If you ask us to delete your Personal Information, we will not be able to provide you with access to these programs.

The value of any financial incentive we offer is reasonably related to the value of any Personal Information you provide to us. We estimate the value of your Personal Information by considering, without limitation, the expenses we incur from collecting your Personal Information and/or providing the financial incentive to you, the revenue generated by your use of the financial incentive, and any improvements we can make to our products and services based on aggregating information obtained through the financial incentive program.

We may provide additional terms that apply to a particular financial incentive. If applicable, those terms will be presented to you at sign up.

g) Reporting Metrics

To learn more about the California consumer requests that CVS has processed in the past calendar year, click aquí.

5. Enlaces externos

Our Services may have links to third-party services, which may have privacy policies that differ from our own. No somos responsables de las prácticas de servicios de terceros.

6. Privacidad de los niños

Nuestros Servicios están destinados a un público general. We do not direct our Services to individuals under eighteen (18), nor do we knowingly solicit or collect any Personal Information from individuals under eighteen (18).

7. Seguridad de datos

Hemos implementado medidas de seguridad físicas, administrativas y técnicas para mantener la seguridad, confidencialidad e integridad de su información. Sin embargo, como ninguna transmisión de información a través de Internet es absolutamente segura, no podemos garantizar la seguridad de su información.

8. Revisions To This Privacy Policy

We reserve the right, in our sole discretion, to change, modify, add, remove, or otherwise revise portions of this Privacy Policy at any time. When we do, we will post the change(s) to our Services. Your continued use of our Services following the posting of changes to these terms means you accept these changes. If we change the Privacy Policy in a material way, we will provide appropriate notice to you and seek your consent where required by applicable privacy laws. Notice may be provided via a temporary banner on our Site, an email sent to users for whom we have an email address, or by temporarily noting "UPDATED" next to the Privacy Policy link on the footer of our Site.

9. Cómo contactarnos

If you have any questions or concerns about this Privacy Policy or the practices described herein, you may contact us by email at ConsumerPrivacy@CVSHealth.com, by mail to CVS Pharmacy, Attn: Privacy Office, 1 CVS Drive, Woonsocket, R.I. 02895, or by phone at 1-833-533-0768.