This Privacy Policy describes how vigrlab and its subsidiaries and affiliates (“vigrlab,” “we,” or “our”) collect your personal information, including through your interactions with us at our vigrlab stores, on olivedrab-partridge-637598.hostingersite.com (the ‘Website’), and through our mobile applications (the “vigrlab App”). We collectively refer to these as the “Services.” This policy also describes the types of personal information we collect, how we use and disclose such information, and your choices and legal rights regarding it.
If you are seeking information about how vigrlab collects and uses information for any healthcare services (including vigrlab and MinuteClinic), please review the privacy policies provided for those services, which you can find in our Privacy Center.
By using our Services, you consent to our collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree, please do not use our Services.
- Personal Information We Collect
We may collect your personal information in several ways, including: information you provide to us; information we collect through your use of the Services and interactions with us; information we obtain from third parties; and information we combine from different sources. This includes data that can directly or indirectly identify you personally. For the purposes of this Privacy Policy, “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to you, including “personal data” or similar terms as defined by applicable law.
a) Categories of Information We May Collect
We may collect certain categories of Personal Information, such as:
Identifiers/demographic information, such as name, age, date of birth, gender, postal and email addresses, phone numbers, online identifiers, Internet Protocol (“IP”) addresses, and other similar identifiers.
Commercial information, such as items purchased, obtained, or considered, and other purchasing or consumption history or tendencies.
Internet or other electronic network activity information.
Geolocation data (non-precise).
Biometric information.
Audio, electronic, visual, or similar information.
Professional or employment-related information.
Inferences, meaning inferences drawn from the listed categories of personal information that reflect a consumer’s preferences or characteristics.
Sensitive personal information as defined by applicable law, including government identification numbers, biometric information, account usernames and passwords, credit or debit card numbers, precise geolocation, racial or ethnic origin, and personal information collected and analyzed concerning a consumer’s health, sex life, or sexual orientation.
We may share or sell certain categories of personal information, or use it for targeted advertising (as defined by applicable law), including online and other identifiers, commercial information, internet activity, and non-precise location information.
b) Information You May Provide
We may collect your personal information when you use our services, such as when you create an account, interact with our vigrlab pharmacy, our website, or vigrlab application, or enroll in programs like electronic receipts or ExtraCare®.
c) Information We May Collect Automatically
When you visit and interact with our services, we or our third-party advertising and analytics partners and service providers may use various technologies, such as cookies, tags, SDKs, or scripts, to collect certain information about your activities.
Specific types of information we and our partners and service providers may automatically collect when you visit and use our services include:
Device and browser information. This includes your device’s IP address and/or other unique identifiers, browser type, device type, internet service provider, and operating system.
Location information. When you access our services via a mobile device, we may collect your device’s approximate location (derived from your device’s IP address or other signals). Additionally, your location information may be collected when you visit our stores.
Usage Information. When you interact with our services, we or our third-party vendors may collect certain information, such as the date and time of your visit, the pages you viewed immediately before and after accessing our services, the areas or pages of our services you visited, the time spent viewing or using our services, items you placed or left in your shopping cart on the website or vigrlab application, keystrokes, mouse movements, form field inputs, chat session transcripts, or your use and inputs into other AI-assisted tools, as well as other usage and overall interactions with our services.
Marketing Information. If you receive emails from us, we may collect information about your interactions with that email (e.g., whether you opened, forwarded, or clicked through to our website).
Third-Party Analytics Technologies. We may use third-party analytics tools to better understand who uses our services, how people use them, and how to improve their effectiveness and the effectiveness of any related content.
Cookies and Other Similar Technologies: “Cookies” are text files placed in your browser by websites you visit. Cookies serve various purposes, such as distinguishing you from other users, improving your website navigation efficiency, helping remember your preferences, enhancing your browsing experience, and improving the use and functionality of our website and related content. Cookies may also help us deliver relevant, personalized advertisements to you across the internet.
Cookies (and other similar tracking technologies) provided by third parties may be placed in certain locations on our website. Providers of these technologies may combine information collected from your interactions with our services with information they collect from other sources, and use the combined information for analytics and/or advertising purposes.
For more information about your choices regarding the automatic collection and use of your information while browsing our services, please refer to the “Your Privacy Choices and Rights” section below.
d) Information We May Receive from Third Parties
We may obtain personal information from other sources. Our third-party sources may include:
Our business partners, such as companies co-sponsoring our promotions.
Our marketing/advertising and analytics partners, such as online advertising networks and analytics providers.
Social media platforms (note that the information we receive from these platforms depends on their policies and your settings on the platform).
Other companies that provide personal information to supplement what we know about you, including data aggregators.
e) Combining Information
We may combine personal information received from various sources. For example, we may combine personal information received from third parties with personal information we already have about you. We will use, disclose, and protect combined personal information as described in this Privacy Policy.
f) Retention
We will retain your personal information for as long as reasonably necessary to provide you with the services you request, for marketing purposes unless you opt out in accordance with our Privacy Policy, or as otherwise permitted or required by applicable law. We will retain and use your personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. The practical implications of this vary depending on the type of information, and we consider ongoing business or legal needs for the information when determining processing, such as information related to tax, health and safety, and potential or actual disputes or investigations.
- Purposes for Processing Your Personal Information
We may use the personal information we collect about you for the purposes listed below:
To provide you with our services, including managing your account, orders, billing, and improving your reorder experience.
To administer our loyalty and membership programs, including ExtraCare and ExtraCare Plus™.
To process your payments and fulfill your orders.
To create, maintain, customize, and protect your account with us.
To communicate with you, such as through chatbots (which may be supported by third-party vendors and trained using AI-based technology based on your input), including responding to your inquiries/requests and requesting your feedback, as well as sending you important updates and messages about our services, our Privacy Policy, or changes to this Notice and/or other applicable terms and conditions.
To review usage and maintain the operation of our services.
Conduct analytics and develop and/or improve our services.
Monitor, protect, and maintain the security and integrity of our services and business, such as protecting against and preventing fraud, unauthorized transactions, claims, and other liabilities.
Comply with applicable laws and regulations and respond to lawful requests and communications from law enforcement and other government officials.
Conduct sales and business transactions where information we hold is part of the transferred assets or related to the evaluation, negotiation, or completion of the transaction.
Protect our rights, privacy, safety, property, and/or the rights, privacy, safety, and property of others.
For any other purpose for which you provided your personal information or as explained to you at the time of collection.
Provide you or others with customized content or targeted offers.
Send you information, newsletters, and marketing/promotional materials from us or our marketing partners and affiliates.
- How We Disclose Your Personal Information
We may disclose the personal information we collect to the following categories of recipients:
Our Service Providers. We may disclose your personal information to service providers who provide us with business, professional, or technical support services, assist us in operating our business and services, or manage activities on our behalf. We require service providers to use your personal information only to provide services to CVS.
Third-party advertising networks and providers. We may disclose personal information to third-party advertising network providers, sponsors, and/or traffic measurement services. These third parties may use cookies, JavaScript, web beacons (including clear GIFs), and other tracking technologies to measure the effectiveness of their advertisements and provide you with personalized advertising content. These third-party cookies and other technologies are governed by each third party’s respective privacy policies, not this Policy.
Our Research Partners. We may disclose your personal information to our research partners, such as those who collaborate with us or on our behalf to conduct surveys or research projects.
In certain circumstances, we may disclose your personal information to the following parties:
Competent Government, Regulatory, and Public Authorities. We disclose your personal information only when permitted or required by government and law enforcement authorities. We may disclose personal information in matters involving personal or public safety claims or litigation. This may include disclosing your personal information to seek remedies or limit damages we may incur. We may also use or disclose your information to enforce our terms and conditions, protect our operations or those of any of our affiliates, prevent misuse of our services, or protect the rights, privacy, safety, or property of us, our affiliates, you, or others.
Relevant third parties as part of corporate transactions. If all or part of our business, assets, or stock undergoes a reorganization, merger, sale, joint venture, assignment, transfer, or other disposition (including dispositions related to bankruptcy or similar proceedings), we may disclose or transfer your personal information to certain third parties, such as the acquiring entity and its advisors.
Other third parties. We will disclose your personal information to other third parties based on your instructions or with your consent. Additionally, we may disclose your personal information when we believe it is necessary or appropriate to: (a) comply with applicable laws; (b) enforce our terms and conditions; (c) protect our operations; (d) protect our rights, privacy, safety, or property, and/or the rights, privacy, safety, or property of you or others; and (e) enable us to pursue available remedies or limit the damages we may sustain.
We may disclose personal information for other reasons, which we will describe at the time of collection or prior to disclosure.
We may choose to disclose non-public personal information about you (the consumer) to third parties for compensation.
Please note that we may de-identify or aggregate personal information so that it is no longer considered personal information and disclose such information to other parties for purposes consistent with those described in this Privacy Policy. We will not attempt to re-identify such information to associate it with you unless you take steps to re-identify your de-identified information.