Privacy Policy

1. Information We Collect

We collect information you provide when you subscribe, enroll, or contact us:

• Contact and identity: First and last name, email address, and phone number. We use this to create and manage your account, process your subscription, send confirmations and important notices, and respond to your inquiries.
• Billing address: Street address, city, state, and ZIP code (and country when applicable). We use this for billing, fraud prevention, and to comply with payment and tax requirements.
• Date of birth (DOB): We collect date of birth for each enrolled member to verify age eligibility (e.g., primary members and dependents must meet plan age rules) and for member identification at the pharmacy. We use DOB only for program administration, eligibility verification, and as described elsewhere in this policy; we do not use it for marketing or unrelated purposes.
• Other member details: For each enrolled member we may collect name, gender, relationship to the primary member, and address (and date of birth as noted above) as needed for the plan. This allows us to issue member IDs, verify eligibility, and support pharmacy use of the discount.
• Payment: Payment card information (e.g., card number, expiration, security code) is entered by you and processed by our secure, PCI-compliant payment processor. We do not store full card numbers on our systems; we receive only tokenized references so we can instruct the processor to run recurring and one-time charges. This reduces the risk of card data being exposed through our systems.

We may also collect technical and usage information when you use our website—such as IP address, browser type, device type, and pages visited—to operate the site, analyze usage, improve performance, and protect against abuse. This information may be linked to your account where necessary for support or security.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Process your subscription and recurring billing: We use your contact, billing, and payment information to set up and charge your subscription each month, send billing-related communications, and handle payment failures or updates.
• Complete enrollment and provide member IDs and related services: We use member details (including name, address, date of birth, and gender where applicable) to complete enrollment, generate member IDs and materials, and support use of the discount at participating pharmacies.
• Verify identity and age: We use date of birth and other information as required by our program rules to confirm that enrolled members meet age and eligibility requirements (e.g., primary member age, dependent age limits). This helps ensure program integrity and pharmacy acceptance.
• Communicate with you: We use your email and phone to send transactional messages such as enrollment confirmations, payment receipts, subscription and account updates, and responses to customer support requests. We may also send important program or policy updates where permitted by law.
• Improve our services, website, and security: We may use aggregated or de-identified data, and in some cases usage or technical data, to improve our website, services, and security measures, and to detect and prevent fraud or abuse.
• Comply with legal obligations and protect our rights: We may use and retain information as required by law (e.g., tax, regulatory, or legal process) and to enforce our agreements, protect our rights and the rights of others, and resolve disputes.

3. Sharing of Information

We may share your information with the following types of parties, as described below:

• Payment processors: We share payment and billing information (e.g., card token, billing address) with our payment processor to process subscription and one-time payments. The processor is contractually required to protect your data and use it only to provide payment services. Their own privacy and security policies apply to their handling of your payment data.
• Service providers: We may use vendors for hosting, email delivery, analytics, customer support, and other operations. We share only the information necessary for them to perform those services, under agreements that require them to protect your data and use it only for providing services to us (not for their own marketing or other purposes).
• Legal and safety: We may disclose your information when required by law (e.g., subpoena, court order, or regulatory request), when we believe in good faith that disclosure is necessary to protect our rights or your safety (or the safety of others), or to detect or prevent fraud or security issues.

We do not sell your personal information to third parties for their marketing. We do not share your personal information with third parties for their own marketing purposes.

4. Data Security

We use reasonable technical and organizational measures to protect your personal information. These include encryption of data in transit (e.g., over HTTPS), access controls so that only authorized personnel can access your data for legitimate purposes, and secure handling of credentials and tokens. Payment card data is processed and stored by our PCI-compliant payment processor; we do not store full card numbers on our own systems.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you have reason to believe your account or data has been compromised, please contact us immediately at customer.care@myfreemeds.com.

5. Data Retention

We retain your information for as long as your account is active and as needed to provide services (e.g., process your subscription, support enrollment, and respond to inquiries). After you cancel your subscription, we may retain certain information for a longer period when necessary to comply with legal obligations (e.g., tax, regulatory, or legal hold), resolve disputes, enforce our agreements, prevent fraud, or support legitimate business operations (e.g., responding to support or billing questions). When we no longer need the information for these purposes, we will delete or anonymize it in accordance with our retention practices.

6. Your Rights and Choices

Depending on where you live, you may have the right to:

• Access or receive a copy of the personal information we hold about you: You can request a copy of the personal data we maintain about you. We will provide it in a commonly used format, subject to verification of your identity and any applicable legal exceptions.
• Correct inaccurate information: If you believe we hold inaccurate or incomplete information about you, you can request that we correct or update it. We will make corrections where appropriate and where we can verify the accuracy of the new information.
• Request deletion of your personal information: You may request that we delete your personal information. We will honor such requests where required by law and where we do not have a legal or legitimate need to retain the information (e.g., for legal compliance, dispute resolution, or enforcement).
• Opt out of certain uses: You can opt out of marketing emails by using the unsubscribe link in our emails or by contacting us. You may not opt out of transactional or legally required communications (e.g., billing, important account or policy notices) while you have an active account.
• Lodge a complaint with a supervisory authority: If you are in a jurisdiction that provides a data protection authority, you have the right to lodge a complaint with that authority if you believe our processing of your personal information violates applicable law.

To exercise any of these rights or ask questions about our practices, contact us at customer.care@myfreemeds.com. We will respond within the timeframes required by applicable law and may need to verify your identity before processing your request.

7. Children

Our subscription and enrollment may include dependent children as permitted by the plan (e.g., family plans). We collect date of birth and other information for enrolled dependents only when the account holder (e.g., parent or guardian) provides it during enrollment. We use this information solely to administer the plan, verify eligibility (e.g., age limits for dependents), and provide member IDs and related services. We do not knowingly collect personal information directly from children under 13 outside of this enrollment context (i.e., when a parent or guardian enrolls a dependent). If you believe we have collected a child's information in error or without appropriate consent, please contact us at customer.care@myfreemeds.com and we will take steps to delete or correct it as appropriate.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated policy on this page and update the "Last updated" date. For material changes that affect how we use or share your personal information, we may notify you by email or through a prominent notice on our website, where required or appropriate. Your continued use of our services after the effective date of the changes constitutes your acceptance of the updated policy. If you do not agree, you may cancel your subscription and discontinue use of our services; our use of your information prior to cancellation will remain governed by the version of the policy in effect at that time.

9. Contact Us

Questions about this Privacy Policy or how we handle your personal information? Contact us at customer.care@myfreemeds.com or call (512) 882-5811. We will respond as promptly as reasonably possible and will work with you to address your request or concern.