Updated: September 18, 2026

AffirmedRx PBC (“we” or “us”) provides this Privacy Policy to explain how we collect, use, share, and protect the information you provide and that we collect by administering your pharmacy benefits through our member portal or otherwise through our website or mobile applications (together, the “Site”), and through our member support representatives. 

We may revise this Privacy Policy to reflect changes to our information practices.  Any changes will be effective immediately upon the posting of the revised Privacy Policy to the Site.

Please review this Policy carefully to ensure your understanding of our privacy practices. By using the Site, whether by visiting affirmedrx.com, creating an account on our member portal, downloading or using our mobile applications, and/or voluntarily providing your Personal Information to us in any other manner, you acknowledge that we may collect and use your information as set forth in this Privacy Policy.  

By using the Site or otherwise providing us your information, you agree to the terms of this privacy policy.

APPLICABILITY OF THIS PRIVACY POLICY

This Privacy Policy is subject to our Terms and Conditions and applies only to information submitted and/or collected online through the Site and does not apply to information that we may collect offline or other than through the Site. This Privacy Policy is applicable regardless of the device used to access the Site. The Site is designed for users, and is controlled and operated by us, from the United States.

Certain terms of this Privacy Policy are applicable only to individuals who are members of a health plan with benefits administered by us (“Members”) and/or who create an account on the Site.

This Privacy Policy does not apply to information about you that is collected by any third party or third-party services, applications, websites, or advertisements that are associated with, linked to, or otherwise accessible from the site. All information collected by a  third party is subject to that third party’s own privacy practices and policies. Under no circumstances are we responsible for any third-party’s compliance with its own privacy policies and practices.

INFORMATION WE COLLECT

Information Collected Automatically. We may use a variety of commonly used technologies to automatically collect certain non-personally identifiable information as you browse the Site, including information about the device used to access the Site, the network use to access the Site, and information about your use of the Site.

Member Portal Registration.  To register with the Site, certain personal information must be provided, including but not limited to your full name, member ID, social security number, physical and email addresses, and phone number.

Location Information. We may collect approximate location information derived from your IP address, or if you enable location services on your mobile device.

Cookies. We use cookies to personalize and enhance your experience on the Site. If you do not want information to be collected through the use of cookies, your browser allows you to deny or accept the use of cookies You may customize your cookie preferences for the Site at any time, however disabling certain cookies may restrict your access to certain features or functionalities of the Site. We do not collect or track information about your online activity across third party websites, applications, or online services.  

Mobile App. Use of the Mobile App may permit us to (1) collect the precise or general location information provided by your device (2) access and edit the devices contacts, (3) send the device “push” notifications, (4) access the devices photos, (5) store certain information locally on the device. We are not responsible for any information stored locally on any device. Please review the Mobile App permissions in your devices’ settings.

Information from third parties. We may receive information about you from health plans, employer or other plan sponsors, pharmacies, healthcare providers, claims processors, service providers, and other parties involved in providing, administering, or supporting pharmacy benefits. This information may include eligibility information, enrollment information, claims information, prescription information, formulary and coverage information, prior authorization information, coordination-of-benefits information, and information needed to operate, audit, improve, or secure the Services.

To the extent any information we create, receive, maintain, or transmit in connection with pharmacy-benefit administration may be protected health information (“PHI”) as defined by the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”),  such information is governed by the practices as set forth in our Provider Notice located at Provider Notice of HIPAA Privacy Practices.

If you have questions about whether this Privacy Policy or the HIPPA Privacy Practices applies to specific information, please contact us at the member services number on the back of your member benefit card or at privacyhelp@affirmedrx.com.

HOW YOUR INFORMATION IS USED

For Legitimate Business Purposes. We use collect, retain, and use your information as required or permitted by law; for legitimate business purposes, to respond to your requests, such as to fulfill your order, contact you with information about your order, send you email alerts, send you newsletters, and provide you with related Member services. We may also use your information to send communications and administrative information to you, to personalize your experience on the Site, improve your use of the Services, and for our business purposes such as data analysis, audits, fraud monitoring and prevention, improving our Services and developing new products and services, determining the effectiveness of our promotional campaigns, and operating and expanding our business activities, all to the extent permissible by law.

Text and Email Communications. With your consent, we may send text and/or email messages to the phone number and/or email address you have provided. These messages may contain notifications, information, or reminders regarding your pharmacy benefit, links to surveys and/or information related to your pharmacy benefit, or payment information. Messages sent by text and/or unencrypted email may include PHI. You are not required to provide this consent, and your consent may be revoked at any time. We will not condition your eligibility for benefits, treatment, enrollment, or payment of claims on whether you provide this consent. Message and data rates may apply to text messages. Please see our Terms and Conditions for additional information about email and text communications.

Sharing Information. We share your information as permitted or required by law, with your consent, as necessary to complete transactions or provide you with information, to solicit feedback on your user or member experience, for proper management and administration, or for legitimate business purposes, all as provided in this Privacy Policy. Certain legitimate business purposes involve sharing collected information with third parties, including our service providers, business associates, and subcontractors. We do not sell, lease, or rent your information to third parties for their marketing use.

Social Media. We may use and disclose your information to facilitate social sharing functionality that you initiated.  If you choose to connect your social media account with your Services account or otherwise engage in social sharing on the Site, your information may be shared with your friends, contacts, or others associated with your social media account, with other Services users, and with your social media account provider. By connecting your Services account and your social media account, you authorize us to share information with your social media account provider, and you understand that the use of the information we share will be governed by the social media site’s privacy policy.

Change Of Ownership. In the event that we sell or otherwise transfer some or all of our  business or assets, some of your personal information may be shared with or transferred to third parties as part of any such transaction or negotiation.

RETENTION OF COLLECTED INFORMATION.

We retain information for as long as necessary to comply with our legal and regulatory obligations, resolve disputes, conclude any activities related to cancellation of an account, investigate or prevent fraud and other inappropriate activity, enforce our agreements, and for other legitimate business reasons consistent with applicable law. These retention practices vary depending on the type and context in which information was collected.

CHILDREN.

In compliance with the Children’s Online Privacy Protection Act, 15 U.S.C. §§ 6501-06 and 16 C.F.R. §§ 312.1-312.12, we do not permit children under 13 years of age to become registered users of Our Services, and we do not knowingly collect information from children. By using Our Services, you represent that you are 13 years of age or older.

HOW WE PROTECT YOUR INFORMATION

Your information is stored within our databases using standard, industry-wide, commercially reasonable security practices and procedures such as encryption, firewalls and SSL (Secure Socket Layers), and we implement all security measures required by law. As effective as such technology and efforts may be, no security system is infallible and impervious from attack or hacking; therefore, we cannot guarantee the security of our databases, nor can we guarantee that your information will not be intercepted while being transmitted to us over the Internet or wireless communication, or accessed when stored on our or our service providers’ servers, and any information you transmit to us is at your own risk. To help us protect your information, we strongly encourage you to not share your username or password with anyone and to review your devices’ permissions.

YOUR RIGHTS AND CHOICES.

To the extent that your information is PHI provided to obtain or administer pharmacy services, such information is governed by our HIPAA Privacy Practices as set forth in our Provider Notice located at Provider Notice of HIPAA Privacy Practices. If you have questions about whether this Privacy Policy or the HIPPA Privacy Practices applies to specific information, please contact us at the member services number on the back of your member benefit card or at privacyhelp@affirmedrx.com.

• Right to Know. You may have the right to confirm that we process your personal information and to request information we have collected about you.
• Right to Data Portability. You may have the right to receive copies of your personal information that we have collected in a commonly used and machine-readable format.
• Right to Delete. You may have the right to request that we delete your personal information.
• Right to Correct. You may have the right to request that we correct inaccurate personal information that we maintain about you.
• Right to Opt-Out. You may have the right to opt out of the sale of your personal information, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects on you. Please, note, however, we do not use your personal information for these purposes.
• PHI. As discussed above, we may collect, use, and disclose your PHI consistent with the terms of applicable HIPAA business associate agreements. You have the right to provide and withdraw consent for the collection, use, or disclosure of your PHI. You may amend your consent preferences at any time.

You or your authorized agent may exercise any of the above rights without fear of discrimination or retaliation by discussing with your patient care advocate, or contacting privacyhelp@affirmedrx.com. To process such requests, we may need to obtain personally identifiable information about you or your authorized representative such as, date of birth, member ID, full name, or any other applicable identification methods.

ADDITIONAL STATE PRIVACY RIGHTS

We aim to comply with applicable federal and state privacy laws governing consumer privacy, cookies, and tracking technologies. We monitor evolving legal requirements and update our practices as needed to support compliant, transparent data collection and use.

California’s “Shine the Light” law, California Civil Code § 1798.83, requires that certain businesses respond to requests from their California customers concerning the businesses’ practices related to disclosure of Personally Identifiable Information to third parties for the third parties’ direct marketing purposes.  We do not sell, lease, or rent your information to third parties for their marketing use.

CONTACT

If you have any questions about these policies, or should you become aware of any breach of this Privacy Policy, please promptly contact privacyhelp@affirmedrx.com.