Last Updated: February 27th, 2024
Effective Date: March 31, 2024

This Consumer Health Data Privacy Notice is incorporated into GoodRx’s (“GoodRx,” “we,” “us,” or “our”) general privacy policy found here and other related policies that link to this notice, and applies to personal data defined as “consumer health data” (“CHD”) under applicable state privacy laws.

Consumer Health Data We Collect

The CHD we collect depends on how you interact with us, the services you use, and the choices you make. Because CHD is defined very broadly, many of the categories of data we collect are or could be considered CHD.  

Such data may also be categorized as follows:

• Information about your health-related conditions, symptoms, status, diagnoses, testing, or treatments (including surgeries, procedures, medications, or other interventions). For example, we may collect such information through surveys or other communication with you for research studies and improving product accessibility. We may also collect information about your use of a coupon provided by GoodRx (if the corresponding pharmacy benefit manager or applicable pharmacy discloses information about the transaction to us).
• Precise location information that could reasonably indicate your attempt to acquire or receive health services or supplies. For example, we may collect GPS location data when you request us to locate the nearest pharmacy to you.
• Information that could identify your attempt to seek health care services or information, including services that allow you to assess, measure, improve, or learn about your or another person’s health. For example, your interactions with us could involve queries or reveal information about you concerning prescriptions, or other health-related topics. 
• Information about your prescriptions, such as your provider and pharmacy information, to facilitate fulfillment of your prescription, or sign up for a pharmaceutical manufacturer’s copay card program.

• Other information that may be used to infer or derive data related to the above or other health information.  

Sources of Consumer Health Data

CHD is sourced directly from you, from your interactions with our products and services (including inferences we make from your use of GoodRx Services and from your devices), and from third parties and service providers.

Why We Collect and Use Consumer Health Data

We collect and use CHD as reasonably necessary to provide you with the products you have requested or authorized. This may include delivering and operating the products and their features, personalization or contextualization of certain product features, communicating with you, ensuring the secure and reliable operation of the products and the systems that support them, troubleshooting and improving the products, advertising and marketing of our Services and other products or services we believe you may find interesting, as well as advertising and marketing served by third parties on our websites and mobile applications or on third-party platforms, and other essential business operations that support the provision of the products (such as analyzing our performance, meeting our legal obligations, developing our workforce, and conducting research and development). 

We may use CHD for other purposes for which we give you choices and/or obtain your consent as required by law – for example, for advertising or marketing purposes. Please review your choices in the applicable privacy policy and the “How to Exercise Your Rights” section below for more details on the controls and choices you may have.   

Our Sharing of Consumer Health Data

We may share each of the categories of CHD described above for the purposes described in the relevant privacy policy. In particular, we may share CHD with your consent or as reasonably necessary to complete any transaction or provide any product you have requested or authorized, as described in the previous section above.  

For example, if you make a purchase, we will share information about the transaction as necessary to process the payment, including to protect against fraud. And we may disclose data when we believe that doing so is necessary to comply with applicable law or respond to valid legal process.

Third Parties with Which We Share Consumer Health Data

As necessary for the purposes described above, we share CHD with the following categories of third parties: 

• Affiliates and subsidiaries. We may share information with our subsidiaries and affiliated companies for business and operational purposes. GoodRx subsidiaries and affiliates include:
  • GoodRx Care
  • RxNxt
  • RxSaver
  • Scriptcycle

• Service providers and third parties. Vendors or agents (“processors”) working on our behalf may access CHD for the purposes described above. For example, companies we’ve hired to provide customer service support or assist in protecting and securing our systems and services may need access to data to provide those functions.  
• For corporate transactions. We may disclose CHD as part of a corporate transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets.
• For legal obligations/safety. We may be required to share CHD for things like compliance with a valid legal process, such as a subpoena, court order, or search warrant, or where there is a lawful request. We may also disclose your information to protect the security of our Services, servers, network systems, and databases.
• To enforce legal rights. We may also share CHD to protect our customers, employees, or property; in emergency situations; to investigate, prevent, or take other action regarding suspected illegal activity, fraud, or other wrongdoing; and to enforce our rights under our terms of service and policies, in court or elsewhere.

See the sharing section of the relevant privacy policy for detailed explanations of the categories above.

How to Exercise Your Rights and Set Your Data Preferences

Where applicable, U.S. State Consumer Health Data privacy laws provide certain rights to Consumers, including rights to access, delete, or withdraw consent relating to such data, subject to certain exceptions. You can request to exercise such rights as described in the relevant privacy policy.  If you would like to exercise any of your rights, including a request to review and request changes to your CHD, please submit:

• GoodRx: The “Data Access Request” form (for your right to access), fill out and submit the “Data Deletion Request” form (for your right to delete), or withdraw consent from your account settings or as otherwise instructed when providing consent.
• Scriptcycle: The “Data Access Request” form (for your right to access), fill out and submit the “Data Deletion Request” form (for your right to delete), or withdraw consent from your account settings or as otherwise instructed when providing consent.
• RxSaver: The “Data Access Request” form (for your right to access), fill out and submit the “Data Deletion Request” form (for your right to delete), or withdraw consent from your account settings or as otherwise instructed when providing consent.
• RxNxt: Email Data Access Requests to  datarequest@rxnxt.com (for your right to access), email Data Deletion Requests to datarequest@rxnxt.com with the subject link ATTN: Customer Service Department—Data Deletion (for your right to delete), or withdraw consent from your account settings or as otherwise instructed when providing consent.

For questions, please contact us at privacy@goodrx.com. If your request to exercise a right under applicable law is denied, you may appeal that decision by contacting us at datarequest@goodrx.com. If your appeal is unsuccessful, you can raise a concern or lodge a complaint with the Attorney General of your state.

Updates to This Consumer Health Data Privacy Policy

We may update this Consumer Health Data Privacy Policy from time to time. We may modify this Privacy Policy at any time. When we do so, we will post the revised privacy policy on our website. Please check the revision date at the top of this page to determine if the policy has been modified since you last reviewed it.