CVS Health Symphony™ - Privacy Policy

Privacy Policy

Effective Date: Dec 8 2021

This Privacy Policy describes how Symphony by CVS Health (“Symphony”) a personal emergency response system sold by CVS Pharmacy, Inc. (“we” or “us”) may collect information about you through your interactions with us related to Symphony Services, as defined by the CVS Health Symphony Terms of Service (collectively, the “Services”). By using the Services, you agree to the terms of this Privacy Policy. If you have any questions or concerns about this Privacy Policy, or about the way your information is collected and used, please call us toll-free at 844-741-0826 or contact.symphony@getaloecare.com..

To the extent that information collected is patient information provided to obtain treatment or information collected as part of health plan/benefits enrollment, this information is subject to a Notice of Privacy Practices and not this Privacy Policy. If you have questions about which policy applies to information you have provided, please reach out to your provider or health plan. 

We may change this Privacy Policy. The “Effective Date” legend at the top of this page indicates when this Privacy Policy was last revised. Any changes will become effective when we post the revised Privacy Policy. Your use of the Services following these changes means that you accept the revised Privacy Policy.

Who May Use the Services

Symphony is not directed to or intended for use by children under 13  (or other age as required by local law), and we do not knowingly collect personal information online from any person we know to be under the age of 13 (and in certain jurisdictions under the age of 16). However, if we become aware that a child has provided us with personal information in violation of applicable law, we’ll delete any personal information we’ve collected, unless we have a legal obligation to keep it, and terminate the child’s account.

The online Services are designed for users from the United States and Puerto Rico and are controlled and operated by us and our service providers from, the United States. By using the Services, you consent to the transfer of your information to the United States or storage of your information in the United States, which may have different data protection rules than those of another country.

The Personal Information We Collect

We want you to understand how personal information you provide to us is collected and used. Personal information is any information that we can use to identify, locate, or contact you. We may collect and store your personal information when you provide it to us or to our service providers. 

If you submit any personal information relating to other people in connection with the Services or provide another individual with access to other individuals’ personal information, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy.

If you choose not to provide your personal information to us, we may not be able to provide you with requested products, services or information.

We may combine the information collected from you through the Services with information we receive from and about you from other online and offline sources and use the combined information in accordance with this Privacy Policy. Our goal is to offer you content, advertisements, products, and services that are most likely to appeal to you.

The personal information we may collect on Individuals and our privacy practices depend on the nature of the relationship Individuals have with the Services. Individuals are any identified or identifiable natural person.

  • Care Recipients
  •  

A Care Recipient is the Individual who is the patient receiving care from one or more caregivers (such as family members) and primary recipient of the Services.   

Information You Provide Directly to Us

When you use the Services or engage in certain activities, such as registering for an account with Symphony, requesting Services or information, or contact us directly, you may provide or we may ask you to provide some or all of the following types of information:

  • Contact information, such as name, email address, telephone or mobile number, and physical (billing and/or shipping) address;
  • Username and password;
  • Information about your home WiFi, including network password;
  • Location information as provided by your device or browser, such as your device's GPS signal or information about nearby WiFi access points;
  • Demographic information, such as your gender, ZIP code, and details about your personal preferences, interests, and characteristics;
  • Health information, including information about your medical conditions, health history, treatment and medication history, medical records, and health insurance information.
  •  
  • Payment information, such as credit card number, expiration date, and credit card security code, where needed to complete a transaction; and
  • Requests and other correspondence you send to us.

Additionally, in some cases, Symphony is obligated to collect certain personal information to comply with regulatory requirements, including information relating to adverse effects you have experienced when using our products.

You can choose not to provide information to us directly, but some of this information is required to participate in some of the Services, and some Services may not function properly if you choose not to provide the information requested.

Information We Obtain from Other Sources

We may receive information about you from other sources, including through your Caregivers, the Purchaser and other sites to which you give us access, and third-party services and organizations. Purchasers are individuals who make online or offline purchases of one or more Symphony products or services. 

We may collect information about your health condition, diagnosis, and treatment from your healthcare professional (e.g., a doctor), but only where your healthcare professional has obtained your consent to disclose that information to us, as required by law. 

Symphony may also collect information about you, your health condition, diagnosis, and/or treatment from the Purchaser, business partners, our affiliates, and/or your Caregivers. In some cases, the Purchaser, and/or your Caregivers will be responsible for obtaining your consent to disclose that information to us.

If you, the Purchaser, or one of your Caregivers connect your Symphony account with one or more electronic health/medical record (“EMRs”), we will periodically collect information about your health condition, diagnosis, and treatment from such EMRs.

We may receive information about you from other sources, including (i) other fitness, health-monitoring and wearable smart devices and sites to which you give us access to synch accounts and information, (ii) third-party health, advertising and social media services and organizations to register you and/or deliver the Services, (iii) insurance companies, employers and other third-parties relating to eligibility or payment/reimbursement of device, monitoring and/or costs or (iv) other commercial partner from whom the Purchaser or a Care Recipient may purchase Symphony products and services including the Services.

Additionally, if you access third-party services to login to the Services or to share information with Symphony, we may collect information from these third-party services.

  • Caregivers

A Caregiver is an Individual who is either a professional (e.g., health care provider) or non-professional (e.g., a family member or friend) providing care to the Care Recipient. If you are a professional Caregiver, you may be subject to additional requirements pursuant to applicable laws.

Information You Provide Directly To Us

When you use the Services or engage in certain activities, such as registering for an account with Symphony, requesting Services or information, or contacting us directly, we may ask you to provide some or all of the following types of information:

  • Contact information, such as name, email address, telephone or mobile number, and physical (billing and/or shipping) address;
  • Username and password;
  • Location information as provided by your device or browser, such as your device's GPS signal or information about nearby WiFi access points;
  • Demographic information, such as your gender, ZIP code, and details about your personal preferences, interests, and characteristics;
  •  
  • Your relationship to the Care Recipient and your employer, as may be applicable;
  • Payment information, such as credit card number, expiration date, and credit card security code, where needed to complete a transaction; and
  • Requests and other correspondence you send to us.

Additionally, in some cases, Symphony may be obligated to collect certain personal information to comply with regulatory requirements, including information relating to adverse effects you or the Care Recipient have experienced when using our products.

Information We Obtain from Other Sources about You

We may receive information about you from other sources, including other sites to which you give us access and third-party services and organizations. 

Symphony may also collect information about you from other sources, including (i) other Caregivers in order to carry out the Services and (ii) our business partners and affiliated businesses, from whom the Purchaser may purchase the Symphony device and Services. 

Additionally, if you access third-party services to login to the Services or to share information about your experience with Symphony, we may collect information from these third-party services.

  • Purchasers

Information You Provide Directly To Us 

If you make a purchase from us, such as a subscription, we may ask you to provide some or all of the following types of information:

  • Contact information, such as name, email address, telephone or mobile number, and physical (billing and/or shipping) address;
  • Username and password;
  • Payment information, such as credit card number, expiration date, and credit card security code, where needed to complete a transaction; and
  • Requests and other correspondence you send to us.

If you purchased Symphony at a CVS Pharmacy location or on the CVS Pharmacy website, your purchase is also subject to the CVS Pharmacy Privacy Policy at www.cvs.com/privacy.

Information We Obtain From Other Sources 

We may receive information about you from other sources, including business partners, affiliated businesses, and/or other sites to which you give us access and third party services and organizations. 

Additionally, if you access third-party services to login to the Services or to share information about your experience with Symphony, we may collect information from these third-party services.

  • Other Individuals Who Interact with Symphony
  •  

When you use the websites or engage in certain activities, such as registering for an account with Symphony on behalf of a Care Recipient, requesting information, or contacting us directly, we may ask you to provide some or all of the following types of information:

  • Contact information, such as name, email address, telephone or mobile number, and physical address;
  • Name of your employer, as applicable;
  • Username and password;
  • Location information as provided by your device or browser, such as your device's GPS signal or information about nearby WiFi access points;
  • Demographic information, such as your gender and ZIP code; and
  • Requests and other correspondence you send to us.

Other Information Symphony May Collect Directly 

  • Customer Service and Support:
  • If you call or otherwise interact with our customer service and support, we may collect the information you provide to our representatives. In addition, we may record telephone calls between you and our representatives for training and quality assurance purposes.
  •    
  • Surveys and Feedback:
  •  From time to time, we request information from you via surveys. Participation in these surveys is voluntary. If you decide to participate, you may be asked to provide certain information, which may include personal information.
  •  
  • Information from Your Provider or Health Plan:
  •  Your provider or health plan may provide us with certain personal information about you. If you have questions about the information your provider or health plan may have shared with us, please contact your provider or health plan.
  • Interactive Features:
  •  
  • We may offer interactive features such as commenting functionalities, “likes”, chat services, review forums, tips, and social media pages. Symphony may collect the information you submit or make available through these interactive features. Any information you share on the public sections of these channels will be considered “public” and is not subject to privacy protections referenced herein. Symphony may use any of your public reviews along with your member profile name.

Information We Collect Automatically from Individuals Who Interact with Symphony Devices, Website and Mobile App

Through the use of our Services, we collect certain information about your environment, such as room temperature, air quality, motion around and activities, frequency and duration of such activities within the environment, the presence of pets, and voice(s) and voice commands when communicating through the sensors. In addition, we may collect certain information automatically through our Services, such as your Internet protocol (IP) address, user settings, MAC address, cookie identifiers, mobile carrier, mobile advertising and other identifiers that are automatically assigned to a computer or other devices when you access the Internet, details about your browser, operating system or device, location information, Internet service provider, pages that you visit before and after using the Services, the date and time of your visit, the amount of time you spend on each page, information about the links you click and pages you view within the services, and other actions taken through use of the Services. Information we collect may be associated with accounts and other devices.

In addition, we may automatically collect data regarding your use of our Services, such as the types of content you interact with and the frequency and duration of your activities.  We may combine your information with information that other people provide when they use our Services.

Use and Disclosure of Personal Information

We use your personal information for a variety of business purposes as outlined in this Policy, including: 

Providing products, services, or information requested, such as:

  • To help manage accounts and respond to questions, comments and other requests.
  • Provide access to certain areas, functionalities, and features of Symphony’s Services
  • Undertake activities to verify or maintain the quality or safety of a Service.
  •  
  • Correlate changes in your activity to other information you provide or that may be accessible relating to your health (e.g., changes in your medication) to better monitor your health condition.

For administrative purposes, such as:

  • To measure interest in Symphony’s Services, improve, upgrade, or enhance our products and Services and develop new products and Services
  • Ensure internal quality control; detect security and/or safety incidents.
  •  
  • Comply with regulatory requirements, including collecting and using information relating to adverse effects you have experienced when using our products;
  • Prevent and/or protect against potentially prohibited or illegal activities;
  •  
  • Enforce our Terms of Service and
  • end-user license agreement 
  • (EULA).
  •  

Marketing Products and Services. We may use personal information to provide you with materials about offers, products, and other services that may be of interest, including new content or new Services. We may provide you with these materials by phone, postal mail, facsimile, or email, as permitted by applicable law. You may opt-out of these marketing communications by contacting us as outlined in the section, “Your Choices and Access.”   

We may use your personal information to personalize your experience on the Website and when interacting with us, including by presenting products and offers tailored to you, and for our business purposes, such as data analysis, audits, fraud monitoring and prevention, developing our Services and new products and services, determining the effectiveness of our educational, awareness or promotional campaigns, and operating and expanding our business activities.

In the event that some or all of the Services, assets or stock are sold or transferred (including in connection with any bankruptcy or similar proceedings) or used as security, or to the extent we engage in business negotiations with third parties, personal information may be transferred to or shared with third parties as part of any such transaction or negotiation.

To the extent permitted by applicable law, we may provide personal information to our affiliated businesses or to our business partners, who may use it to send you marketing and other communications.

We may disclose personal information to our service providers, who provide services such as website hosting, data analysis, payment processing, order fulfilment, information technology and related infrastructure provision, customer service, email delivery, auditing, and other services.

If we are requested by law enforcement officials or judicial authorities to provide personal information, we may do so. In matters involving claims of personal or public safety or in litigation where the information is pertinent (including to allow us to pursue available remedies or limit the damages that we may sustain), we may use or disclose personal information, including without court process. We may also use or disclose personal information to enforce our terms and conditions, to protect our operations or those of any of our affiliates, or to protect our rights, privacy, safety or property and/or that of our affiliates, you, or others.

We may use and disclose personal information to investigate security breaches or otherwise cooperate with authorities pursuant to a legal matter.

We may use and disclose information that does not personally identify you (including the information described under "Cookies and Other Technologies," below) for any purpose, except to the extent limited by applicable law. If we are required to treat such information as personal information under applicable law, then we may use it for all the purposes for which we use and disclose personal information.

We may combine information that does not personally identify you with personal information. If we do, we will treat the combined information as personal information as long as it is combined.

Research and Development. We may use personal information to create non-identifiable information that we may use alone or in the aggregate with information obtained from other sources, for public health, research, analytics, or any other legally permissible purpose, as well as to help us to optimally deliver our existing products and services including the Services or to develop new products and services including new Services.

Other Uses. We may use personal information for other purposes disclosed to you at the time you provide personal information or with your consent.

Research/Survey Solicitations 

From time to time, we may perform research (online and offline) via surveys. We may engage third-party service providers to conduct such surveys on our behalf. All survey responses are voluntary, and the information collected will be used for research and reporting purposes to help us better serve Individuals by learning more about their needs and the quality of the products and services, including the Services we provide. The survey responses may be utilized to determine the effectiveness of our Services, various types of communications, advertising campaigns, and/or promotional activities. If an Individual participates in a survey, the information given will be used along with that of other study participants. We may share non-identifiable Individual and aggregate data for research and analysis purposes.

Mobile Devices 

In providing the Services, we will collect certain information that your mobile device sends, like a device identifier, user settings and the operating system of your device. Mobile versions of Symphony’s Services may require that users log in with an account. In such cases, information about use of mobile versions of the Services may be associated with user accounts. In addition, we may enable Individuals to download an application, widget, or other tool that can be used on mobile or other computing devices. Some of these tools may store information on mobile or other devices. These tools may transmit personal information to us to enable Individuals to access user accounts and to enable us to track use of these tools. Some of these tools may enable users to email reports and other information from the tool. We may use information transmitted to us to enhance these tools, to develop new tools, for quality improvement and as otherwise described in this Policy or in other notices we provide.

Anonymous and Aggregated Information

We use personal information and other information about you to create anonymized and aggregated information, such as de-identified demographic information, de-identified location information, information about the computer or device from which you access the Services, or other analyses we create. Anonymized and aggregated information is used for a variety of functions, including the measurement of visitors’ interest in and use of various portions or features of the Services. Anonymized or aggregated information is not personal information, and we may use such information in a number of ways, including research, internal analysis, analytics, and any other legally permissible purposes. We may share this information with business partners, including Dealers and affiliated businesses, insurance companies, employers and other third parties, for our or their purposes in an anonymized or aggregated form that is designed to prevent anyone from identifying you.

Information We Share as Part of the Services  

Caregivers, Care Recipients, Purchasers, and Health Care Providers

As part of delivering the Services, Symphony may share or otherwise make available via a dashboard summary or otherwise personal information about a Care Recipient with their Caregivers, Purchasers, Health Care Providers and any Personal Emergency Response System (PERS) that interacts with Symphony for Care Recipient for set-up, delivery, oversight of the Services for a Care Recipient and other purposes. Symphony may also share personal information about Purchasers, Caregivers, and Health Care Providers with Care Recipients and/or other Caregivers, and Health Care Providers involved with the same Care Recipient.

Emergency Responders and Call Centers

As part of delivering the Services, Symphony may share, provide alerts or otherwise make available personal information, including your location, to Symphony call centers service providers, PERS, emergency response centers, agencies you have identified and/or directly to emergency responders (e.g., police, fire, emergency medical technicians, etc.) once the Symphony Service identifies and reports an event that requires assistance.

Business Partners and Other Third Parties

Symphony may share personal information with our business partners and affiliates (including insurance companies, employers and other third parties) for our, our business partners’, and our affiliates’ internal business purposes. We may also share personal information with our business partners and affiliated businesses so that we and/or our business partners and affiliated businesses can provide you with a product or service, including the Service that you have requested. We may also provide personal information through a dashboard of summary information about Care Recipients or otherwise to business partners,  with whom we may jointly offer products or services, including the Services, or who may offer Symphony or other CVS Health products or services, or whose products or services we believe may be of interest to you. In some cases, our business partner’s name may appear, along with Symphony, CVS Pharmacy or CVS Health. 

We may also share personal information about you with fitness, health-monitoring and wearable smart devices and sites to which you give us access to synch accounts and information.

Service Providers

Symphony uses service providers to help support these Services. One of those service providers is Aloe Care Health, Inc (“Aloe Care”).  Aloe Care has access to personal information to help make Symphony purchases, provide technical support and customer service. All of our service providers are required to only use your personal information as directed by Us.  

Social Media

We may use and disclose your personal information to facilitate social media sharing functionality that you initiate. If you choose to connect your social media account (e.g., Facebook, Twitter, Pinterest) with your Services account or otherwise engage in social sharing on the Services, your personal information may be shared with your friends, contacts or others associated with your social media account, with other Services users, and with your social media account provider. By connecting your Services account and your social media account or contacting us via social media, you authorize us to share information with your social media account provider, and you understand that the use of the information we share will be governed by the social media site's privacy policy.

For example, if you utilize a social media feature such as the Facebook "Like" button, Google Plus, Pinterest or a Twitter widget, these features may collect information about your IP address and which page you're visiting on our site, and they may set a cookie or employ other tracking technologies. Social media features and widgets are either hosted by a third party or hosted directly on our site. Your interactions with those features are governed by the privacy policies of the companies that provide them.

We may display targeted ads to you through social media platforms. These ads are sent to groups of people who share traits, such as where they live or have expressed an interest in our products. We do not share any of your personally identifiable information, with social media platforms. See the policies of each social media platform for additional information about these types of ads, including how to manage your display settings for these ads.

Links

The Services may contain links to, or otherwise make available, third-party websites, services, or other resources not operated by us, Aloe Care or others on our behalf ("Third-Party Services"). These links are provided as a convenience only and do not constitute an affiliation with, endorsement or sponsorship of the Third-Party Services.  Specifically, the tools and resources section available on the site in connection with the Services are links to Third Party Services.

Any information you provide to such third parties is not subject to the terms of this Privacy Policy, and we are not responsible for the privacy or security of the information you provide to them or their handling of your information. We recommend that you review the privacy policy of any third party to whom you provide personal information online.

In addition, we are not responsible for the information collection, use, disclosure, or security policies and practices of other organizations, such as Apple, Google, Microsoft, RIM, or any other app developer, app provider, operating system provider, wireless service provider, or device manufacturer.

Security

We seek to use reasonable physical, technical, and administrative safeguards to protect personal information within our organization. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of your account with us has been compromised), please immediately contact us in accordance with the "Contact Information" section below.

You are responsible for maintaining the confidentiality of your Services access information and password and for restricting access to your devices and your Symphony account, and you agree to accept responsibility for all activities that occur under your password.

Telephone, Text and Fax Policy

By providing your residential or wireless phone and/or fax number(s) to Symphony, you expressly consent to receive marketing and non-marketing autodialed and/or prerecorded calls, text messages and faxes (including fax advertisements) from or on behalf of Symphony at the number(s) provided. Your consent to receive calls or texts on your wireless device is not a condition of any purchase. Consent may be revoked at any time by calling the toll-free number at 844-741-0826. You may also send an opt-out request via email to symphony@getaloecare.com with the phone and/or fax number you wish to opt-out. Your wireless carrier’s standard message and data rates may apply.

Text Messaging Terms and Conditions

Symphony offers notifications and messages via recurring SMS (Short Message Service) and MMS (Multimedia Message Service) text alerts. Enrollment in text alerts requires an individual to provide his or her own mobile phone number with an area code within the 50 United States, the District of Columbia or Puerto Rico. By enrolling to receive text alerts, you agree to these terms and conditions, which become effective upon your enrollment. You may be asked to verify your mobile phone number before the service will start. This requires responding to a text alert sent to your mobile phone confirming your enrollment in this Service.

You acknowledge that text alerts will be sent to the mobile phone number you provide to Symphony. Such alerts may include limited personal information, and whoever has access to the mobile phone or carrier account will also be able to see this information. Once you enroll, the frequency of text alerts we send to you will vary. You will typically receive text alerts when we have information for you about Symphony.  Symphony does not impose a separate charge for text alerts; however, your mobile carrier's message and data rates may apply depending on the terms and conditions of your mobile phone contract. You are solely responsible for all message and data charges that you incur. Please contact your mobile service provider about such charges. The following carriers are supported: AT&T, Sprint, Boost, Verizon Wireless, U.S. Cellular®, T-Mobile®, Cincinnati Bell, Alltel, Virgin Mobile USA, Cellular South, Unicel, Centennial and nTelos. You may opt out of Symphony text alerts at any time. To stop receiving text alerts, text STOP to +1-256-980-3883. Texting STOP to +1-256-980-3883 will opt you out of any and all future Symphony text messages. After you submit a request to unsubscribe, you will receive one final text alert from +1-256-980-3883confirming that you will no longer receive text alerts. No additional text alerts will be sent unless you re-activate your enrollment. For questions about text alerts, text the word Help to +1-256-980-3883 or contact +1-844-741-0826. 

The Symphony text alert programs are offered on an “as is” basis and: (1) may not be available in all areas at all times; and (2) may not continue to work in the event of product, software, coverage or other service changes made by your wireless carrier. Symphony may change or discontinue any of its text alert programs without notice or liability to you. Symphony and its related companies and each of their respective officers, directors and employees are not responsible and shall not be liable for any losses or injuries of any kind resulting, directly or indirectly, from any Symphony text alert program or from technical failures or delays of any kind. Symphony reserves the right to cease delivery of text alerts to any person at any time in its sole discretion.

Cookies and Other Technologies

Like many other websites and online services, we collect information about the Services’ traffic and usage patterns through the use of cookies, Web server logs, web beacons and other, similar technologies. We use this information for various purposes, such as to ensure that the Services function properly, to facilitate navigation, to personalize your experience, to understand use of the Services, to diagnose problems, to measure the success of our communications and to otherwise administer the Services.

Cookies are small computer files we transfer to your computer's hard drive. These small text files help us personalize content on our pages. Your browser software can be set to reject or accept cookies. Instructions for resetting the browser are available in the Help section of most browsers.

Our use of cookies also allows us to collect and retain certain information about a website user, such as the type of Web browser used by our customer. Reviewing our Web server logs and our customers' use of our site helps us to, among other purposes, statistically monitor how many people are using our site and for what purpose.

Your IP address is a number that is automatically assigned to the computer that you are using by your Internet Service Provider. An IP address may be identified and logged automatically in our server log files whenever a user accesses the Services, along with the time of the visit and the page(s) that were visited. Collecting IP addresses is standard practice and is done automatically by many websites, applications and other services. We use IP addresses for purposes such as calculating usage levels of the Services, helping diagnose server problems, and administering the Services.

Tracking/Third-Party Advertisers

We may use third-party advertising companies to display advertisements regarding goods and services that may be of interest to you when you access and use the Services, based on information relating to your access to and use of the Services and other online services. To do so, these companies may place or recognize a unique cookie on your browser (including through the use of pixel tags). If you would like more information about this practice and to learn about your choices in connection with it, please visit http://www.networkadvertising.org/managing/opt_out.asp and http://www.aboutads.info/.

We do not respond to browser do-not-track signals.

We may use analytics providers that use cookies, pixel tags and other, similar technologies to collect information about your use of the Services and your use of other websites or online services.

Physical Location

We and our service providers may collect the physical location of your device by, for example, using satellite, cell phone tower, WiFi signals, beacons, Bluetooth, and near field communication protocols. We may use your device's physical location to provide you with personalized location-based services and content, including for marketing purposes. We may share aggregated statistics derived from the location and other information we collect with advertisers and other third parties. You may be permitted to allow or deny such collection of your device’s location, such as through the settings on your mobile device and/or, to avoid the collection of location by beacons, by disabling Bluetooth. If you choose to deny such collection, we and our service providers may not be able to provide you with certain personalized services and content. 

Fraudulent Sites, Spam & Phishing

Please be aware that there may be fraudulent websites that illegally use Symphony and CVS Health or CVS Pharmacy logos, and other aspects of the CVS Health brand. Symphony, CVS Health, CVS Pharmacy and its affiliated businesses are is in no way associated with any fraudulent websites. These sites may circulate their presence on the internet via spam email, or through fraudulent phishing practices.

These sites have not been authorized by CVS Health to use our name and we work aggressively to identify their source and have them shut down. If you are in receipt of this type of spam email, to help protect your privacy you should avoid replying to it or forwarding it to other people.

In addition to our official websites, CVS Health works with a number of third parties that host websites and micro-sites that provide information and services to our customers. If you are concerned that a website or an email may be fraudulent, please contact us by phone at 844-741-0826 with your concerns.

Your Choices and Access

We will provide you the opportunity to opt out of any marketing or promotional email communications we send. Note that you will continue to receive transaction-related emails regarding products or services, including the Services. We may also send you certain communications regarding the Services and you will not be able to opt out of those communications (e.g., communications regarding updates to our Terms of Service, EULA or this Policy).

We maintain “do-not-call” and “do-not-mail” lists as mandated by law. We process requests to be placed on do-not-mail, do-not-phone and do-not-contact lists within 60 days after receipt, or such shorter time as may be required by law.

You may stop the receipt of push notifications through your mobile device settings.

You can request the removal or modification of the personal information you have provided to us by sending an email to the appropriate area under "Contact Us". For your protection, we may only implement requests with respect to the personal information associated with the particular email address that you use to send us your request, and we may need to verify your identity and obtain information on the context in which you provided your personal information before implementing your request. We will try to accommodate your request as soon as reasonably practicable.

[You can stop all further collection of information by our mobile application by uninstalling the mobile application].  You may use the standard uninstall process available as part of your mobile device or via the mobile application marketplace or network.

Note: If you uninstall the mobile application from your device, the Symphony unique identifier associated with your install and/or device might continue to be stored.  If you re-install the application on the same device, we might be able to re-associate this identifier to your previous transactions and activities. 

Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting such change or deletion. There may also be residual information that will remain within our databases and other records, which will not be removed.

Your California Privacy Rights

California Consumer Privacy Act (CCPA)

This section applies to any California residents about whom we have collected personal information from the Services, or by communicating with us electronically, in paper correspondence, or in person (collectively, "you").

For purposes of this section, "personal information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California consumer/resident or household. Personal information does not include publicly available information or information that has been de-identified.

A. What Information We Collect

We may collect the following categories of personal information about you:

  • Identifiers, which may include real name and alias; postal address; unique personal identifier; online identifiers as detailed below; Internet Protocol ("IP") address; email address; telephone number; account number, name, and password; and/or other similar identifiers;
  • Commercial information, which may include purchasing and transaction history online and in stores, or consumer histories or tendencies;
  • Biometric information, which may include voice recognition information; facial scans; and/or other similar biometric identifiers;
  • Information relating to Internet activity or other electronic network activity, which may include cookie identifiers, clear gifs (a.k.a. web beacons/web bugs), browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, clickstream data, device platform, device version, and/or other device characteristics including your choice of settings such as Wi-Fi, Bluetooth, and Global Positioning System ("GPS");
  • Geolocation data, which may include Global Positioning System ("GPS") data; locational information based upon your IP address; cell network data; and/or other similar locational data; and which may be collected from various devices including your mobile device(s) or vehicle(s);
  • Audio, electronic, or visual information, which may include records of calls to or from our customer service centers; and/or video surveillance information;
  • Professional or employment-related information
  • Inferences about you, such as household income level and demographic information; credit card types you may have; homeowner / renter status; interest in certain types of merchandise;; transaction return history;
  • Information not listed above and related to characteristics protected under California or federal law; which may include gender; race and ethnicity; language; religion; country of origin; marital status; military service / veteran status; and/or date of birth;
  • Other personal information not listed above and described in California Civil Code § 1798.80(e), which may include signature; physical characteristics or description; and/or bank account number credit card number, debit card number, and other financial or health information.

B. What We Do With Your Information

We may collect or use personal information from you for the following purposes:

  • Internal analytics
  • Assessing third party vendors / service providers
  • Audit, compliance, policy, procedures, or regulation
  • Billing, payment, and fulfillment
  • Customer claims and fraud investigation and prevention
  • Customer communications
  • Customer relationship management
  • General business administration
  • Marketing products and services
  • Financial reporting and accounting
  • Website optimization and maintenance
  • Systems operations and data security

C. Sources of Collected Information

We may collect personal information from the following categories of sources:

  • Our customers, and prospective customers, our Websites, mobile applications, telephone, text message, postal mail, social media, forums, message boards, chatbots, or other means;
  • Our parent, subsidiaries and affiliates;
  • Our service providers, which includes affiliates, marketing / customer relationship management providers, social media, technology / website hosting providers, analytics providers, and systems administrators / security and fraud investigations providers;
  • Third parties, which includes companies that collect publicly available information or business partners that collect information and provide to us pursuant to their privacy policies and terms of service and applicable agreements.

D. Who We Share Information With

We do not sell personal information or otherwise provide personal information to third parties, other than service providers receiving information to perform services for us on our behalf.

As with other companies that conduct digital marketing, we do share a limited set of data that is gathered when you visit our Websites, such as cookies and pixels, with third parties in order to allow you to see tailored digital advertisements about our products and services. We may also share certain information to enhance our ability to communicate with you and provide you with promotional information. To the extent this activity is interpreted as included in California law's broad definition of "data sale," we have provided you with opt-out rights as to that activity as further described in Section F below.

We may share your personal information with the following categories of third parties:

  • Affiliates
  • Advertising and marketing companies
  • Social media companies
  • Technology companies

E. Your Privacy Rights

If you are a California resident, subject to applicable law, you have the following rights under California law with respect to your personal information.

  • Right to Know.
  •  You have the right to request what personal information we collect, use, disclose, and/or sell, as applicable.
  • Right to Delete.
  •  You have the right to request the deletion of your personal information that is collected or maintained by us.
  • Right to Opt-Out of Sales.
  •  You have the right to opt-out of the sale of your personal information by us. You may access our Notice of Right to Opt-Out by clicking 
  • here
  • .
  • Right to Non-Discrimination.
  •  We may not discriminate against you because you have exercised any of the privacy rights described above.
  •  

You may also authorize someone to exercise the above rights on your behalf. Documentation will need to be provided that reflects that you have requested an authorized agent to make a request on your behalf. This may include a Power of Attorney document or other signed document. If we have collected information on your minor child, you may exercise the above rights on behalf of your minor child.

We must be able to reasonably verify your identity and authority to exercise these rights before fulfilling a request. There are also various exclusions and exceptions that apply to these rights under applicable laws. So that we can verify your identity when you make a request, you will need to provide certain personal information via webform or over the phone.

If you are a California resident and wish to seek to exercise these rights, please reach us in one of the following ways:

  • Email at
  • contact.symphony@getaloecare.com
  •  
  • Call (844) 741-0826

For more information regarding this Privacy Policy, or if you have any questions or concerns, please Contact Us.

F. Notice of Right to Opt-Out of Sales

If you wish to opt-out of our sharing of the limited data that is gathered when you visit our Websites and other web-based services for purposes of targeted digital advertising, you may do so in one of the following ways:

  • CVS: Filling out 
  • this interactive webform
  • Contacting us at 1-800-SHOP-CVS (1-800-746-7287)

Please note that the effectiveness of your opt-out request may be limited by our ability to associate the cookies and/or pixels that we may collect from your web session with your identity, browser, device, and/or browsing session. As a result, your opt-out request will be more effective for future visits to the Websites if you:

  • Utilize the same device that was used to exercise the opt-out request;
  • Have not cleared cookies from your web browser; and
  • Are not using a private or "do not track" mode in your web browser;
  • Provide the same personal information that you provided previously

We encourage you to re-submit opt-out requests from any other devices that you may be utilizing to visit our Websites. If you sign up and are logged in to your CVS.com account, we will be able to more easily associate you with your Website visits and apply a more persistent opt-out request across devices, browsers, and browsing sessions, subject to the above limitations.

Deidentified Patient Information

In addition to personal information, we may sell or disclose patient and/or member information that has been deidentified as permitted by law. To the extent we sell or share such deidentified patient and/or member information, we do so pursuant to one of the deidentification methodologies described in Section 164.514(b)(1) or (b)(2) of Title 45 of the Code of Federal Regulations, commonly known as the HIPAA expert determination method and the HIPAA safe harbor method, respectively.

California Shine the Light Law

If you are a Symphony customer and a California resident, you may request that we provide you with certain information about the entities with which we have shared our customers' personal information for direct marketing purposes during the preceding calendar year. To do so, please write to us at retailprivacy@cvshealth.com.

Your Responsibility

By establishing a Symphony account, you agree that it is your responsibility to:

  • Authorize, monitor, and control access to and use of your Symphony account, User ID and password.
  • Promptly inform us of any need to deactivate a password or an account by calling Customer Service at
  • 844-741-0826
  • .or
  • emailing: contact.symphony@getaloecare.com

Contact Information

If you have any questions or concerns about this statement, or about the way your information is collected and used, please email us at contact.symphony@getaloecare.com or call toll-free at 844-741-0826.