CVS California Notice at Collection of Personal Information

This Notice at Collection ("Notice") describes how and why we collect specific categories of your Personal Information as defined in and required by California law. This Notice supplements our main CVS Privacy Policy, which can be found here.

(a) Category of Personal Information Collected

We collect the categories of Personal Information identified below, and for some of these categories, we “sell” or “share” (as such terms are defined in California law) for marketing and advertising purposes to third-party advertising networks and social media platforms.

Category Collected?	Sell or Share?	Category of Third Party Sold To/Shared With?
Identifiers/demographic information, such as Name, postal and email address, phone number. Online identifiers, Internet Protocol (“IP”) address, and other similar identifiers.	Sí	Third-party advertising networks Social media platforms
Personal information categories listed in the California Customer Records statute, such as your credit or debit card number.	No	N/A
Characteristics of protected classifications under California or Federal law, such as age, gender/sex, language preferences, etc.	No	N/A
Información comercial, such as items purchased, obtained, or considered and other purchasing or consuming histories or tendencies.	Sí	Third-party advertising networks Social media platforms
Internet or other electronic network activity information	Sí	Third-party advertising networks Social media platforms
Geolocation data (non-precise)	Sí	Third-party advertising networks Social media platforms
Biometric information	No	N/A
Audio, electronic, visual, or similar information	No	N/A
Información profesional o relacionada con su empleo	No	N/A
Inferences, meaning inferences drawn from the above-listed categories of Personal Information to create a consumer profile reflecting consumer preferences or characteristics.	No	N/A
Sensitive Personal Information, such as government identification numbers, biometric information, account log-in and password, credit or debit card number, precise geolocation, racial or ethnic origin, and Personal Information collected and analyzed concerning a consumer’s health, sex life, or sexual orientation. We do not use or disclose such information for the purpose of inferring characteristics about you or for any purpose other than the limited permissible purposes set forth in the regulations implementing applicable law. Such purposes include providing our Services and verifying, maintaining the quality of, and improving our Services.	No	N/A

We do not knowingly sell or share Personal Information about persons under the age of 18. Puede click here to opt out of the sale or sharing of your Personal Information. You may also choose to enable online, where available, a universal tool that automatically communicates your opt-out preferences, such as the Global Privacy Control ("GPC"). We will endeavor to recognize and treat the signal as a valid request to opt out. If you use different browsers or browser profiles, you may need to enable the signal on each browser or profile if we're unable to associate your preference signal with you.

(b) The Business and Commercial Purposes for Which We Collect and Use Your Personal Information:

To provide you with our Services, including to manage your accounts, orders, billing, and improve reorder experiences.
To administer our loyalty and membership programs, including ExtraCare^® and ExtraCare Plus™.
To process your payments and fulfill your orders.
To create, maintain, customize, and secure your account with us.
To communicate with you, such as through bots (which may be powered by third party vendors and be trained on your inputs through AI-based technology), including to respond to your inquiries/requests and request feedback from you, and to send you important updates and messages about changes to our Services, our Privacy Policy or this Notice, and/or other applicable terms and conditions.
To review the usage and maintain the operation of our Services.
To conduct analysis and develop and/or improve our Services.
To monitor, protect, and maintain the security and integrity of our Services and our business, such as protecting against and preventing fraud, unauthorized transactions, claims and other liabilities.
To comply with applicable laws and regulations and respond to lawful requests and communications from law enforcement and other government officials.
To carry out sales and business transactions in which information held by us is among the assets transferred or is otherwise relevant to the evaluation, negotiation, or completion of the transaction.
To protect our rights, privacy, safety, property and/or those of others.
To fulfill any other purpose for which you provide your Personal Information or as explained to you at the point of information collection.
To provide you or others with customized content or targeted offers.
To send you information, newsletters, and marketing/promotional material from us and, or on behalf of, our marketing partners and affiliates.

(c) Retention

We will retain your Personal Information for as long as reasonably necessary to provide you with our Services that you request, for marketing purposes unless you opt out as described in our Privacy Policy and this Notice, or otherwise where permitted or required in accordance with applicable law. We will retain and use your Personal Information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. What this means in practice will vary between different types of information, and when we consider our approach we take into account ongoing business or legal needs for the information, for example in relation to tax, health and safety, and potential or actual disputes or investigations.