California Consumer Privacy Act

This notice is provided for California residents in compliance with the California Consumer Privacy act of 2018 (CCPA). It explains your rights regarding your personal information and how we handle your personal information. Certain terms in this notice are defined by CCPA and their meanings may differ from the meanings applied elsewhere in our website. The meanings of such CCPA defined terms are specific to the content of this notice.

Personal Information We May Collect

• The categories of personal information we may collect include:
• Identifiers;
• Financial, medical, or health insurance information;
• Demographics;
• Commercial information;
• Biometric information;
• Internet or other electronic network activity information;
• Geolocation data;
• Audio, electronic, visual, thermal, olfactory, or similar information;
• Professional or employment-related information;
• Education information; and
• Inferences regarding preferences or other characteristics.

Potential Sources of Personal Information

We may collect personal information from the following categories of sources:

• Your device or browser
• Directly from you when you provide information
• Our affiliates and business partners
• Data verification services
• Marketing vendors and advertising networks
• Social media
• Healthcare providers

How We May Use Personal Information Collected

We may use personal information we collect:

• Provide you products and services
• Address your inquiries, concerns, and requests
• Analyze use of our products and services and improve our products and services
• Develop new products and services
• Provide and personalize our offers and services
• Maintain the security of our products, services and systems
• Comply with legal obligations
• Offer or provide employee benefits and services
• Protect our rights, property, and safety or the rights, property, and safety of others

We May Share Personal Information

We may share personal information we collect with:

• Our vendors and service providers
• Healthcare providers
• Advertising networks
• Our affiliates and business partners
• Law enforcement, where required by law

We may also share personal information with other companies, organizations or individuals outside of McKesson if we have a good faith belief that access, use, preservation, or disclosure of that information is reasonably necessary to:

• Meet applicable laws, regulations, legal processes or enforceable governmental requests
• Enforce applicable Terms of Service, including investigation of potential violations
• Detect, prevent, or otherwise address fraud, security or technical issues
• Protect against harm to the rights, property or safety of our users, McKesson, or the public as required or permitted by law
• Engage in a merger, acquisition, reorganization, or sale of all or a portion of McKesson assets.

The following categories of your personal information may be shared with these parties for our business purposes:

• Identifiers;
• Financial, medical, or health insurance information;
• Demographics;
• Commercial information;
• Biometric information;
• Internet or other electronic network activity information;
• Geolocation data;
• Audio, electronic, visual, thermal, olfactory, or similar information;
• Professional or employment-related information;
• Education information; and
• Inferences regarding preferences or other characteristics.

The following categories of your personal information may be shared with these parties for monetary or other valuable consideration:

• Identifiers;
• Financial, medical, or health insurance information;
• Demographics;
• Commercial information;
• Biometric information;
• Internet or other electronic network activity information;
• Geolocation data;
• Audio, electronic, visual, thermal, olfactory, or similar information;
• Professional or employment-related information;
• Education information; and
• Inferences regarding preferences or other characteristics.

Your Rights

California residents’ CCPA privacy rights:

• Right to access personal information: Users may request access to the categories and specific pieces of their personal information we collect
• Right to data portability: Users may request to receive their personal information, when provided electronically, in a readily-useable format
• Right to deletion: Users can ask us to delete certain personal information we have collected. You can exercise your right to request deletion of personal information by clicking here
• Right to disclosure: Users may request to receive additional information about the sources of information we collect, why we collect and share personal information, the information of theirs we collect, and the categories of parties with whom we share their information
• Right to opt-out of sales: As permitted by law, we may share your personal information for monetary or other valuable consideration (a “sale”). Users may direct us to stop selling their personal information. You can exercise your right to opt-out here: Do Not Sell My Personal Information
• Right to be free from discrimination: Users may freely exercise these rights without fear of being denied goods or services. We may, however, provide a different level of service or charge a different rate reasonably relating to the value of your data

If you are a California resident and would like to exercise one of your rights, please contact us by clicking here or call 407 891 2120. In compliance with CCPA we will require certain identifying information from you to verify your request. We will honor your request in compliance with CCPA but may be required to continue to retain or share portions of your personal information to comply with regulatory or legal obligations.