Last updated: June 7th, 2022

This Privacy Policy applies to information collected by GoodRx Helps (collectively, “we,” “us,” or “our”), in connection with the services that we offer. This Privacy Policy explains how information may be collected, used, or disclosed through our services, how we safeguard it, and how you may access and control its use. This Privacy Policy is incorporated into the Terms of Use of our services.

By using our services, you are accepting this Privacy Policy and our Terms of Use, and authorizing the collection, uses, and disclosures set forth. If you do not agree to this Privacy Policy or our Terms of Use, please do not access or use our services. This Privacy Policy and our Terms of Use expressly supersede prior agreements or arrangements with you.

1. What Information Do We Collect About You?

The information we collect about you is the information that you provide to us, which may include the following categories:

• Personal Identifiers: Your name, date of birth, email address, and phone number.
• Household Information: If your household income falls on or below 200% of the federal poverty level.
• Healthcare Clinic Information: The healthcare clinic name that referred you to our services, the name of the clinic staff who helped you complete the form, and the title or role of the clinic staff who helped you complete the form.

2. How Do We Use Information About You?

We may use your information to provide our services and for related business activities, such as:

• Business Operations: To understand your use of our Services in order to consider improving them, including to provide, change, market, or optimize our services and products and to create new services and products. We also may use your information to determine whether applicable policies and terms are being violated.
• Security and Auditing: To audit interactions with you, detect security incidents, protect against fraud or other malicious activity, and identify and repair errors that may arise.
• Complying With Law: To comply with applicable laws, including as required by judicial or administrative proceedings.

3. How Do We Share Information With Others?

We may share your information with companies that work for or provide services to us, only in the ways described below. We do not share your information for marketing purposes.

A. Affiliates and Subsidiaries

We may share your information with our subsidiaries and affiliated companies for business and operational purposes.

B. Service Providers

We may use your information to provide our services, to run our business (including for the purposes of internal business operations and analytics, and to provide, change, market, or optimize our services). We may use service providers to help assist us in the above. We may also share your information with service providers to perform services on our behalf such as:

• To fulfill, deliver, develop, and enhance services and products
• To store data
• To analyze data
• To address or handle patient advocacy support requests
• For information security, fraud detection, and prevention
• For identity and professional credential verification

C. For Corporate Transactions

We may transfer your information if we are involved, whether in whole or in part, in a merger, sale, acquisition, divestiture, restructuring, reorganization, dissolution, bankruptcy, or other change of ownership or control. If another entity acquires us or any of our assets, information we have collected about you may be transferred to such entity. In addition, if any bankruptcy or reorganization proceeding is brought by or against us, such information may be considered an asset of ours and may be sold or transferred to third parties. Should such a sale or transfer occur, we will use reasonable efforts to try to require that the transferee use information provided through our services in a manner that is consistent with this Privacy Policy.

D. For Legal Obligations/Safety

We may be required by law to comply with a valid legal process, such as a subpoena, court order, or search warrant, or where there is a lawful request, to disclose your information without your consent or notice. We may also be required to disclose your information to a third party or governmental entity in response to a court order. We may disclose your information to protect the security of our services, servers, network systems, and databases.

E. To Enforce Legal Rights

We may also share your information to protect our customers, employees, or property; in emergency situations; to investigate, prevent, or take other action regarding suspected illegal activity, fraud, or other wrongdoing; and to enforce our rights under our terms of service and policies, in court or elsewhere.

4. What Choices Do You Have?

A. Cookies and Do Not Track

We do not place cookies or other similar technologies on your browser when you visit or use our services. At this time, we do not respond to browser “Do Not Track” signals.

5. Additional Privacy Disclosures

A. European Union Visitors

Please do not use the Services if you are not a resident of the United States. Use by visitors from the European Economic Area, or EEA, is prohibited.

6. Children’s Privacy

We respect the privacy of parents and children and are committed to complying with the Children’s Online Privacy Protection Act (“COPPA”). For that reason, we do not knowingly collect personal information from individuals under the age of 13 and we do not direct our services to individuals under the age of 13.

Our services are only for users of the age of 18 or older. If you are under the age of 18, please do not attempt to register with us or provide any personal information about yourself to us at any time for our services.

7. How Do We Protect Your Information?

We take information security seriously. We use commercially reasonable efforts to prevent unauthorized third-party access to your information. However, we cannot guarantee that these practices will prevent every unauthorized attempt to access, use, or disclosure of your information. Please note that we cannot ensure or warrant the security of any information you transmit to us over the internet or other electronic means. You use our services and provide us with your information at your own risk, and we accept no liability for unintentional disclosure.

8. What About Changes to This Notice?

We may modify this Privacy Policy at any time. Please check the revision date at the top of this page to determine if the policy has been modified since you last reviewed it.

9. Who Can You Contact With Questions or Concerns?

Please address comments or questions to us about this Privacy Policy via phone by calling 1-855-268-2822. We are available every day (excluding holidays) from 8AM to 7PM (CST).

GoodRx Helps. 2701 Olympic Blvd. West Building Suite 200, Santa Monica, CA 90404

Email: hello@goodrxhelps.org

Last updated: March 14th, 2022 (“Effective Date”)

This California Consumer Privacy Act (“CCPA”) notice (“CCPA Notice”) is incorporated into GoodRx Helps’s (“we,” “us,” or “our”) general Privacy Policy (above). This CCPA Notice provides additional information solely for California residents (“Consumers,” “you,” or “your”) and applies solely to the personal information of California Consumers, as defined in the CCPA, whether collected online or offline. In the event of a conflict between this CCPA Notice and any of our other privacy policies, this CCPA Notice shall control only with respect to Consumers and their personal information.

At Collection Notice

Categories of Personal Information We Collect

We collect the following categories of personal information that are listed in the CCPA law:

• Personal Identifiers: Your name, date of birth, email address, and phone number.
• Household Information: If your household income falls on or below 200% of the federal poverty level.
• Healthcare Clinic Information: The healthcare clinic name that referred you to our services, the name of the clinic staff who helped you complete the form, and the title or role of the clinic staff who helped you complete the form.

The Business or Commercial Purposes for Which We Use Your Personal Information.

We use your personal information in order to provide our services (including providing customer service, processing or fulfilling orders and transactions, verifying customer information), to run our business (including for internal research for technological development and demonstration, activities to verify or maintain the quality of the services or improving, upgrading or enhancing our services, debugging to identify and repair errors that impair existing intended functionality, internal business operations, analytics, and to provide, develop, change, market, or optimize our services and products), to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for that activity, debugging to identify and repair errors that impair existing intended functionality.

Your Right to Opt Out of “Sales” of Personal Information.

The CCPA gives you the right to opt out of “sales” of your personal information, which the CCPA defines broadly to include not only traditional selling of data, but also data sharing arrangements where the recipient can use the personal information that they receive for the recipient’s own business purposes.

We do not sell or share your personal information under these circumstances.

Categories of Personal Information Collected and Disclosed.

In this section we describe generally how we have collected and disclosed personal information about consumers in our role as a business over the previous twelve (12) months.

Categories of Personal Information We Collect.

We collect the following categories of personal information through our services that are listed in the CCPA in the prior twelve (12) months: identifiers; household information, healthcare clinic information.

Sources of Personal Information.

As also discussed in our general Privacy Policy, we only collect personal information that you provide to us.

Categories of Personal Information We “Sell”.

The CCPA defines “sales” broadly to include not only traditional selling of data, but also data many sharing arrangements where the recipient can use the personal information that they receive for the recipient’s own business purposes. We do not sell or share your personal information under these circumstances.

Categories of Personal Information Disclosed for a Business Purpose.

The categories of personal information that we have disclosed for a business purpose in the prior twelve (12) months include: identifiers; household information, healthcare clinic information.

Your Consumer Rights Under the CCPA

Right to Request Disclosure.

You have the right to request, free of charge, that we disclose information about our collection and use of your personal information over the past twelve (12) months, including:

• The categories of personal information we collect about you;
• What personal information we collect, use, or disclose about you;
• The categories of sources of the personal information we collect about you;
• Our business or commercial purpose for collecting the personal information;
• For each category of personal information, the categories of third parties with whom it was disclosed; and
• The specific pieces of personal information we collect about you.

For more information on how to request information about our collection, use, and disclosure of your personal information, please see the Submitting CCPA Requests to Us section below.

Right to Request Deletion.

You have the right to request the deletion of your personal information that we collected. For more information on how to request deletion, please see the Submitting CCPA Requests to Us section below. Once we receive your request and verify your identity, we will review your request to see if an exception allowing us to retain the information applies. We will delete or de-identify personal information not subject to an applicable exception from our records and will direct our service providers to take similar action.

Right to Request Opt-Out of the Sale of Your Personal Information.

You have the right to direct us to not sell your personal information at any time. To reiterate, we do not sell or share your personal information.

Right of Non-Discrimination.

You have the right to be free from discriminatory adverse treatment for exercising these rights. We will not discriminate against you for exercising any of your CCPA rights.

Submitting CCPA Requests to Us

Requests to Know or Delete.

To exercise your rights to know or delete described above, you may submit a request by contacting us by at hello@goodrxhelps.org. You can also have an authorized agent make a request at hello@goodrxhelps.org.

Verification of Requests

Only you, or an individual legally authorized to act on your behalf, may make a request to know or delete your personal information. You may only submit a request to know twice within a 12-month period. Your request to know or delete must:

1. Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information, or that the requestor is your authorized representative.

2. Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We may request information from you in order to verify your identity. Additionally, we may require that authorized agents provide proof of their authorization. We cannot respond to your request or provide you with personal information if we are unable to verify your identity, your authority to make a request on behalf of another person, or if we cannot confirm that the personal information relates to you. In general, we will verify your request and your identity by matching the information you provided with the information we have in our records. We will only use personal information provided in the request to verify the requestor’s identity or authority to make it.

Changes to This CCPA Notice

This CCPA Notice is current as of the Effective Date set forth above. We may modify this Privacy Policy at any time. Please check the revision date at the top of this page to determine if the policy has been modified since you last reviewed it.