OTC Health Solutions

"We may change this Privacy Policy. The "Last Updated" legend at the top of this page indicates when this Privacy Policy was last revised. Any changes will become effective when we post the revised Privacy Policy on the Services. Your use of the Services following these changes means that you accept the revised Privacy Policy."

The company can change the privacy policy at any time without direct notice to users, and continued use of the service is treated as acceptance of the new terms.

"We may disclose personal information to our service providers, who provide services such as website hosting, data analysis, payment processing, order fulfilment, information technology and related infrastructure provision, customer service, email delivery, auditing, and other services. We may disclose personal information to our clients, such as your health plan or employer, to report on utilization of the Services."

Personal information is shared with a broad range of service providers and disclosed to health plans and employers, including utilization reporting that reveals how you use the service.

"Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting such change or deletion. There may also be residual information that will remain within our databases and other records, which will not be removed."

The policy explicitly states that residual data will remain in their databases even after a user requests deletion, with no clear timeline for when or if it will ever be purged.

"We may use analytics providers that use cookies, pixel tags and other, similar technologies to collect information about your use of the Services and your use of other websites or online services."

Third-party analytics providers track user activity not only on OTC Health Solutions but also across other websites and online services, enabling cross-site profiling.

"Note: If you uninstall the OTC Health Solutions mobile application from your device, the Business's unique identifier associated with your install and/or device might continue to be stored. If you re-install the application on the same device, the Business might be able to re-associate this identifier to your previous transactions and activities."

The app stores a persistent device identifier that survives uninstallation, allowing CVS to re-link a user's full history if they reinstall the app on the same device.

"Your IP address is a number that is automatically assigned to the computer that you are using by your Internet Service Provider. An IP address may be identified and logged automatically in our server log files whenever a user accesses the Services, along with the time of the visit and the page(s) that were visited. Collecting IP addresses is standard practice and is done automatically by many websites, applications and other services. We use IP addresses for purposes such as calculating usage levels of the Services, helping diagnose server problems, and administering the Services."

IP addresses are automatically logged on every visit, enabling IP-based geolocation tracking of users across all interactions with the service.