Toggle Nav

Rexall ValueScripts Privacy Notice

LAST UPDATE: September 20, 2022

The ValueScripts program (hereinafter referred to as the "ValueScripts Program") is offered by the Rexall Pharmacy Group ULC and provides un-insured or under-insured Canadians with a cost-effective solution to fulfill their prescription needs.

At Rexall Pharmacy Group ULC ("Rexall", "we" or "us") we value the trust that our customers place in us to appropriately use and protect personal information. This Privacy Notice informs visitors and regular users of the ValueScripts Program offered via the valuescripts.ca website (collectively referred to as the "ValueScripts Website") about the purposes for which Rexall may collect, use, and share personal information, and how it is protected. We want you to be clear how we use personal information and the ways in which we protect this information. By using the ValueScripts Website, you accept the privacy practices presented in this Privacy Notice. We encourage you to read this Privacy Notice in full to understand our privacy practices before using the ValueScripts Website or submitting any personal information.

Scope

This Privacy Notice applies only to the ValueScripts Program offered via the ValueScripts Website. Rexall and its affiliates and subsidiaries may have separate websites, sub-domains, and services through other web, mobile, or cloud platforms that are not subject to this Privacy Notice. Additionally, Rexall business partners, ad networks, and other third parties have their own websites and services with separate privacy practices. We encourage you to read the privacy notices of all websites, portals, and applications that you visit to understand their privacy practices.

Throughout this Privacy Notice, we use the term "personal information", which is any information accessed, collected, or used by Rexall that identifies an individual, or can reasonably be used to identify an individual, directly or indirectly. "Personal information" is equivalent to similar terms used in different regulations, such as "personally identifiable information (PII)" and "personal data."

Personal Information We Collect

When you use the ValueScripts Website, we may collect personal information about you. The personal information we may collect with your prior consent, where required by law, includes but is not limited to:

  • Your Complete Name and Initials
  • Your Email Address
  • Your Password Management Information
  • Your Date of Birth
  • Your Contact Information Including Full Billing Address
  • Your Credit Card Information including card holder name, expiration date and CVV, CVC2 or CID number (code verification value code)
  • Your Unique Identifier Code Provided to You to Identify Your Employer Name
  • Your Marketing preference such as text message or email notification and frequency
  • Information about you that you share or make visible on the Internet. We may combine such information with information we already have about you.

We may collect non-personal information and it may be aggregated with other information. If we combine your non-personal information with personal information, the combined information will be treated as personal information.

You do not have to provide us with this information if you do not want to; however, that may limit your ability to use certain functions or to request certain services or information.

Tracking Technologies We Use

We use various technologies to collect personal information about visitors to our ValueScripts Website. These technologies include the following:

  • Web server logs
    • As is true of most websites, we gather certain information automatically and store it in log files. This information may include IP addresses, browser type, internet service provider, referring/exit pages, operating system, date/time stamp and/or clickstream data.
  • Cookies
    • We and our subsidiaries, business partners, marketing partners, affiliates, or other service providers may utilize cookies. Cookies uniquely identify your device or user account associated with the ValueScripts Website. You can control the use of cookies by adjusting your browser preferences at any time. If you reject cookies, you may still use the ValueScripts Website but your ability to use some features or areas of the ValueScripts Website may be limited.
  • Other Tracking Technologies
    • The ValueScripts Website use Google Analytics, a Google Inc. ("Google") provided web analysis service. To learn more about how Google Analytics collects and processes data, please visit Google’s website "How Google uses data when you use our partners' sites or apps" located at www.google.com/policies/privacy/partners/
    • We also use HTML5 to collect and store content information and preferences. Our third-party partners, who provide certain features on this ValueScripts Website or who display advertising, use HTML5 to collect and store information. Various browsers may offer their own management tools for removing HTML5.

These methodologies are used for the following purposes:

  • To register or sign in to the ValueScripts Program or ValueScripts Website
  • To process your payment once you select a ValueScripts Plan
  • To personalize your user service or provide you with customized site-content based on your preferences
  • To analyze trends
  • To provide you with customer and troubleshooting support
  • To provide you with marketing notices, newsletter, or communications via email, fax, mail, mobile badge notifications, or text message

We may receive reports based on the use of tracking technologies on an individual and aggregated basis.

How We Respond to "Do Not Track" Signals

Some web browsers have a "Do Not Track" feature. This feature allows you to tell websites you visit that you do not want to have your online activity tracked over time and across websites. These features are not yet uniform across browsers. The ValueScripts Website is not currently set up to respond to those signals.

How We Use the Personal Information Collected

We may use the personal information we collect for purposes such as:

  • To register your profile in the ValueScripts Program
  • To process your payment once you purchase a ValueScripts Plan
  • To personalize your user service or provide you with customized site-content based on your preferences
  • To provide you with customer and troubleshooting support
  • To provide you with marketing notices, newsletter, or communications via email, fax, mail, mobile badge notifications, or text message according to your preference
  • To communicate products and services
  • To provide loyalty programs, promotions and other non-pharmacy related activities
  • To manage the ValueScripts Program

We may also use the information collected for the following purposes:

  • Surveys
    • If you participate in surveys, we will request certain personal information from you. Participation in these surveys is completely voluntary and you have a choice whether to disclose this information. We may use a third-party service provider to conduct these surveys. We will not share the personal information you provide through a survey with other third parties unless we give you prior notice and choice.
  • Advertising
    • We may partner with a third party to manage our advertising. Our third-party partner may use cookies and other technologies to gather information about your activities to provide you advertising based upon your browsing activities and interests.

How We Share Personal Information Collected

  • We may share personal information with other Rexall Business Units when permitted by law. Additionally, we may share your personal information with third parties only in the ways described in this Privacy Notice.
  • We may provide your personal information to third parties that provide services to help us with our business activities such as Moneris, Apple Wallet or Google Pay for processing payments or digital wallet services. These companies are authorized to use personal information about you only as necessary to provide these services to us.
  • Some of our pages may utilize framing techniques, which allows us to display content to/from our partners while preserving the look and feel of our ValueScripts Website. If you choose to interact or share personal information via these frames, please be aware you are providing personal information to these third parties and not directly to Rexall, and your personal information is subject to the privacy practices of these third parties.

If you register for the Rexall Newsletter, we may provide the following information to SalesForce.com Inc., located in the United States, for the purpose of deploying emails, personalizing your user experience and providing you with marketing targeted to your preferences:

  • EMAIL: Customer Email ID
  • OPT INS: Customer Opt In Date, Time and Programs subscribed to. E.g Newsletters
  • POSTAL CODE
  • PROVINCE
  • CITY
  • FIRST NAME
  • LAST NAME
  • SOURCE: which website you have opted-in from

To learn more about how SalesForce.com collects and processes data, please visit: https://www.salesforce.com/ca/company/privacy(external link - opens in new window)

external link - opens in new window indicates an action will redirect you to a third party site.

Rexall may also need to share information with companies, organizations, or individuals outside of Rexall if we have a good faith belief that access, use, preservation, or disclosure of that information is reasonably necessary to:

  • Meet applicable laws, regulations, legal processes, or enforceable governmental requests
  • Enforce applicable terms of service or terms of use, including investigation of potential violations
  • Detect, prevent, or otherwise address fraud, security, or technical issues
  • Protect against harm to the rights, property or safety of our users, Rexall, or the public as required or permitted by law
  • Engage in a merger, acquisition, reorganization, or sale of all or a portion of Rexall assets.

Your Choice

Where appropriate or legally required, we will describe how your information we collect through the ValueScripts Website will be used, and will provide choices about whether to allow us to engage in that use. To exercise your choice, you may contact us to correct, update, amend, or request deletion of your personal information through the address listed in the Contact Information section below.

Where permitted in our legitimate interest, or with your prior consent and in accordance with the Canadian Anti-Spam legislation ("CASL"), we will use your name and email address to send our newsletter to you. You may choose to stop receiving our newsletter or marketing emails by updating your preferences directly in your account or by following the unsubscribe instructions included in these emails or contacting us using the contact information listed below in this Privacy Notice.

Your Rights

You can contact us directly any time at the address listed in the Contact Information section below to update your personal information or make another type of request regarding the information you know or believe the Valuescripts Program holds about you. Here are some rights that you may have according to where you are located:

  • Access
    • Subject to applicable law, you have the right to receive information about, and review in person, or obtain copies of, the personal information we maintain about you. We may charge you a reasonable fee as allowed by law to obtain this information.
  • Amendment or Deletion
    • Subject to applicable law, you have the right to request that we amend or delete your personal information.
  • Disclosure Accounting
    • Subject to applicable law, you have the right to request and receive a list of certain disclosures made of your personal information. If you request this list more than once in a 12-month period, we may charge you a reasonable fee as allowed by law to respond to any additional request.
  • Use/Disclosure Restriction or Objection
    • Subject to applicable law, you have the right to request we restrict our use or disclosure of your personal information for certain purposes. You also have the right to object to the processing of your personal information. We may not be required to agree to a requested restriction or objection. We will agree to restrict use, or disclosure of, your personal information provided the law allows it and we determine the restriction does not impact our ability to operate our business, provide diagnostic services, and comply with the law. Subject to applicable law, even when we agree to a restriction request, we may still disclose your personal information in a medical emergency and use or disclose your personal information for public health, safety and other similar public benefit purposes permitted or required by law.
  • Withdraw Consent
    • Subject to applicable law, you may withdraw your consent to our processing of your personal information. Note: withdrawal does not invalidate the consent-based processing that occurred prior to withdrawal.
  • Automated Decision Making
    • Subject to applicable law, if at any time the ValueScripts Website uses automated decision making to process personal information, you have the right to object to the use of your personal information.
  • Data Portability
    • Subject to applicable law, you have the right to receive your personal information in a structured, commonly used, and machine-readable format.

These rights may be limited in some circumstances by local law requirements.

The ValueScripts Program shall provide you with a response to any such request(s) without undue delay and in any event within 30 days of receipt of the request. That period may be extended by 30 days where necessary, taking into account the complexity and number of request(s). Rexall shall inform you of any such extension within 30 days of receipt of the request, together with the reason(s) for the delay. If you make the request by electronic-form means, the information shall be provided by electronic means where possible, unless otherwise requested by you in written documentation.

You can also exercise the rights listed above at any time by going to the contact information at the bottom of this notice.

If your request or concern is not satisfactorily resolved by us, you may approach your local data protection or privacy regulator.

Retention

We will retain your personal information to meet our contractual obligations to you and for as long as your account is active, is reasonably useful for commercial purposes, or as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. We may also retain aggregate information beyond this time for research purposes and to help us develop and improve our services. You cannot be identified from aggregate information retained or used for these purposes.

Children’s Privacy

The ValueScripts Website is not intended for any user under the age of 18 and we do not knowingly collect personal information from children under the age of 18, unless such information is submitted by the child’s legal guardian under the Valuescript Family Plan. We request children under the age of 18 not submit any personal information through the ValueScripts Website.

How We Protect Your Information

The Valuescripts Program has implemented programs to address the privacy and security requirements of protecting health information.

The Valuescripts Program has also established appropriate physical, technical, and administrative safeguards to protect the personal information we collect from or about our users. We restrict access to personal information to Rexall and its affiliates and their respective employees, contractors, and agents who need to know the information to process it for us, and who are subject to confidentiality obligations.

Any sensitive personal information (e.g., credit card number) will be transmitted in an encrypted form using SSL encryption. Notwithstanding our security safeguards, it is impossible to guarantee 100% security in all circumstances. If you have any questions about security or have reason to believe your interaction with us is no longer secure (for example, you feel the security of any account you might have with us has been compromised), you must immediately notify us of the problem by contacting Rexall at 905-501-7898 or by sending an email to privacyofficer@rexall.ca.

Cross-Border Transfer of Personal Information

When you use this ValueScripts Website, your personal information may be transferred to another country where we or our service providers (such as Apple wallet or Google Analytics) operate, including the United States. These countries may have different data protection standards and privacy laws from your country of residence, but we will transfer and protect your personal information lawfully and in accordance to this Privacy Notice. We will have proper contracts or legal mechanisms in place (such as data protection agreements, Standard Contractual Clauses, EU-U.S. Privacy Shield, etc.) prior to transferring personal information to another country.

Changes to this Privacy Notice

We may periodically update this Privacy Notice to describe new features, products, or services we offer and how it may affect our use of personal information about you and your controls. Since we may change this Privacy Notice, we recommend you check the current version available from time to time. If we make changes to this notice, we will update the "Effective Date" at the beginning of this notice. 

Privacy Office Contact Information

If you have questions or concerns about this Privacy Notice, our information handling practices, or any other aspect of privacy and security of your personal information, please contact us at: privacyofficer@rexall.ca

You may also call us at 905-501-7898

Or write to us at:

  • Rexall Pharmacy Group ULC
  • ATTN: Mona Sabharwal, Privacy Office
  • 2300 Meadowvale Blvd
  • Mississauga, ON L5N 5P9

For more information on your privacy rights, you may also contact the Federal Privacy Commissioner at:

  • Office of the Privacy Commissioner of Canada
  • 112 Kent Street
  • Place de Ville
  • Tower B, 3rd Floor
  • Ottawa, Ontario
  • K1A 1H3

Or your provincial office of the Information and Privacy Commissioner for more information.

If you are a Quebec resident and you have questions or comments about our efforts to protect your personal privacy, or if you require additional information about our privacy practices, please contact us at compliance@mckesson.ca

You may also write to our Privacy Officer at:

  • McKesson Canada Corporation
  • Attn: Privacy Officer
  • 2300 Meadowvale Blvd
  • Mississauga, ON
  • L5N 5P9