California Privacy Act


This CALIFORNIA PRIVACY RIGHTS is in addition to, and incorporated into, the Privacy Policy of and/or our owners and/or affiliates (collectively, “Company,” “we,” “us,” or “our”) and applies to personal information that we collect online or offline from California residents (“consumers” or “you” or “your”).

Information We Collect

We have collected the following categories of personal information from consumers within the last twelve (12) months:



A. Identifiers and Contact Information.

Your name, postal address, telephone number or email address.

B. Medical and financial Information.

Your credit card, debit card or health plan.

C. Protected classifications.

Age, gender, race, medical condition, disability.

D. Commercial information.

Records of products or services you have purchased.

E. Internet or other similar network activity.

Browsing history, search history, or your interaction with the Website.

F. Geolocation data.

Your physical location or movements.


We may/may have collect(ed) this personal information from the following categories of sources:

  • Directly from you.

  • Indirectly from you. For example, from your use of our website.

  • Pharmacies, prescribers and other health care providers.

  • Third party websites. For example, if you sign up to receive information from us about our programs or services through those websites.

  • Advertising networks.

  • Social media networks.

  • Consumer data resellers.

  • Our clients, which may include your employer or an association. For example, an employer or association may sponsor a discount card program and provide us with a list of eligible participants.

Use of Personal Information

We use this personal information for one or more of the following business purposes:

  • To provide our products and services, such as to process drug claims.

  • To provide customer service, such as to respond to inquiries and requests and verify your identity.

  • To analyze use of our products and services as well as customize and improve them.

  • For marketing, such as to provide you with email alerts about products or services that may be of interest to you.

  • To maintain the security of our products, services and systems, such as detecting security breaches or fraudulent activity.

  • To keep our website and other functioning properly, such as debugging and fixing errors.

  • To comply with our legal obligations.

  • To protect our rights, property, and safety or the rights, property, and safety of others.

We do not sell your personal information

Sharing of Personal Information

We may share personal information we collect with third parties for a business purpose, such as to marketing partners, advertising networks, clients that sponsor discount cards, and service providers that helps us operate or provide our services, including but not limited to data storage companies and internet service providers. When we share personal information with our service providers, we require that they agree to protect the personal information and use and disclose it only to provide their services to us and for limited business purposes, such as to detect security breaches and comply with their legal obligations.

In the past twelve (12) months, we have shared the following categories of personal information for a business purpose with the following categories of third parties:


Third Parties

A. Identifiers and Contact Information

Service providers
Pharmacies and other health care providers
Operating systems and platforms
Social networks
Marketing partners

B. Financial and Medical Information

Service providers
Pharmacies and other health care providers
Operating systems and platforms
Social networks
Marketing partners


C. Protected Classifications

Service providers
Pharmacies and other health care providers
Operating systems and platforms
Social networks
Marketing partners

D. Internet or similar network activity

Service providers

E. Geolocation Data

Service providers


Your Rights and Choices

This section describes your privacy rights and explains how to exercise them.

Right to Know

You have the right to know, subject to certain exceptions, the following about the personal information we collected about you over the past 12 months:

  • The categories of the personal information;

  • The categories of sources of the personal information;

  • The business or commercial purpose for collecting that personal information;

  • The categories of personal information shared for a business purpose; and

  • The categories of third parties with whom the personal information is shared.

Right to Delete

You have the right to request that we delete the personal information that we collected from you, subject to certain exceptions.

Right to Opt-Out of the Sale of Personal Information

You have the right to opt-out of the sale of your personal information. We do not sell personal information.

The Right to Non-Discrimination. You have the right not to be discriminated against for exercising these rights.

Submitting Requests to Know and Delete Personal Information

You may submit a request to know or delete by submitting a request to us by either:

To process your request, we must be able to verify your identity i.e., confirm that the person making the request is the person about whom we collected the personal information, or is someone authorized to act as the authorized agent on that person’s behalf. We will verify your identity by asking that you provide certain information to us that will allow us to confirm you are who you say you are, such as contact information, account information and/or health information.

You may designate an authorized agent to make a request on your behalf.  When you use an authorized agent to submit a request for access or deletion, you must provide the authorized agent with written permission to do so, and, in certain circumstances, we may ask you to verify your own identity directly with us.  We may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf.

Only a parent or legal guardian may submit a request to know or delete the personal information of a child under the age of 13. We may ask a requestor on behalf of a child under 13 to sign a consent form under penalty of perjury or to speak by telephone to trained personnel to confirm that the requestor is the parent or legal guardian of the child.

You may only make a request to know or delete your personal information twice within a 12-month period.

Response Timing and Format

We will confirm receipt of your request to know or delete within 10 business days and will provide information on how we will process your request, including our verification process and when you can expect a response.

Changes to Our Privacy Notice

We may change this Privacy Notice at any time, but we will not use personal information that we have already collected for a new purpose that is materially different from those stated in our Privacy Notice at the time that personal information was collected without first obtaining your explicit consent to use it for the new purpose.

Contact Information

If you have any questions or concerns about this Privacy Notice, our privacy policies and practices, you may contact us at:

Phone: 844-863-0353
Email: [email protected] 

MedImpact Healthcare Systems, Inc.
c/o Privacy Office.
10181 Scripps Gateway Ct.
San Diego, CA 92131


Last Updated
August 3, 2021