SaveOnSP Privacy Policy

Save On SP, LLC Privacy Policy

Save On SP, LLC (“SOSP,” “we,” “us” or “our”) and its affiliates are committed to protecting your privacy. We want you to understand how we use and disclose certain information so you can confidently interact with SOSP and use our portal (“Portal”).  The Portal is a member services manager that assists in the enrollment in manufacturer specialty drug co-pay assistance programs on behalf of eligible individuals. By using our Portal, you consent to the collection, use, disclosure, and display of personal health information and other personal information in accordance with this Privacy Policy (“Policy”).  This Policy is incorporated by reference into our Terms of Use (“Terms of Use”) and subject to the provisions thereof.  

When you use our Portal, we may receive your protected health information and may collect, use, and disclose other personally identifiable information.  Under the Health Insurance Portability and Accountability Act and its implementing regulations (“HIPAA”), certain demographic, health, and/or health-related information that SOSP receives from your health care providers as part of providing services may be considered “protected health information” or “PHI.”  “Personally identifiable information,” as used in this Policy, is information that specifically identifies an individual, such as an individual’s name, address, telephone number, e-mail address, or other similar information that can be used to identify you.  Personally identifiable information also includes information about an individual’s activity within our Portal, including profile information and other identifiable information entered by the individual.  PHI and personally identifiable information are collectively referred to in this Policy as “Your Information.”

Your Information does not include “aggregate” or other non-personally identifiable information.  Aggregate information is information that we collect about a group or category of products, services, or users that is not personally identifiable or from which individual identities are removed.  We may use and disclose aggregate information, and other non-personally identifiable information, for various purposes, including, without limitation, to improve the Portal and promote the services.

HIPAA provides specific privacy and security protections for your PHI and restricts how your PHI is used and disclosed.  SOSP may use and disclose your PHI only in the ways permitted by you in the HIPAA Privacy Authorization provided under the Terms of Use and upon your login to your account within the Portal or as is otherwise permitted under HIPAA.  

Information SOSP Collects

Information You Provide

SOSP collects Your Information when you use our Portal in the following ways:

• User Accounts and Profiles.  You must register for an account or create and update a user profile on our Portal.  Through this account or profile functionality on the Portal, we will collect the following information: name, postal address and zip code, telephone number, e-mail address, prescribed drugs and prescribed drug manufacturer co-pay assistance information.  Some of Your Information is required for you to register for the account or to create the profile, while some may be optional. Failure to provide any required information may affect your ability to use or enjoy all functionalities of the Portal.
• Interactive Features.  Our Portal may contain interactive functionality that allows you to engage with us and/or otherwise interact with the Portal (the “User Materials”), participate in surveys, track certain activities.  If you use any interactive functionality on our Portal, we collect Your Information as provided in the course of using these interactive features.
• Correspondence.  If you contact us by e-mail, using a contact form on the Portal, or by mail, fax, or other means, we collect Your Information as contained within, and associated with, your correspondence.

Information Collected Automatically

When you visit our Portal, some information is collected automatically.  This includes:

• Your browser type and operating system
• Your device type (for example, if you are on a computer or iPhone)
• Your Internet Protocol (IP) address, which can sometimes be used to derive your general geographic location
• Server logs and other communication data
• How you found your way to our Portal (for example, if you clicked on a link from a social network)
• Actions you take on our Portal, and the content, features, and activities that you access and participate in on our Portal
• Information collected through cookies, Web beacons, and other similar Internet technologies

Information Collected from Other Sources

We and our business partners may collect and/or receive information about you, including PHI and personal information from third parties, including our affiliates, any of our service providers or your selected providers, and may combine this information with Your Information that we maintain about you. If we do so, this Policy governs any combined information that we maintain in personally identifiable format.

Use of Your Information

We use Your Information to provide services and information that you request; to enhance, improve, operate, and maintain our Portal, our programs, and other systems; to display personalized health content; to prevent fraudulent use of our Portal and other systems; to prevent or take action against activities that are, or may be, in violation of our Terms of Use or applicable law; to tailor content and other aspects of your experience on and in connection with our Portal; to maintain a record of our interactions with you; for other administrative purposes; for any other purposes that we may disclose to you at the point in which we request Your Information; and pursuant to your authorization.

Sharing Your Information

Except as described in this Policy, we will not disclose Your Information that we collect or display on the Portal to third parties without your authorization.  We may disclose information to third parties if you consent to us doing so, as well as in the following circumstances:

• Trusted Third-Party Service Providers.  To the extent legally permissible, we may disclose and/or exchange Your Information to our third-party service providers that assist us in our business operations.  We limit the information provided to these service providers to that which is reasonably necessary for them to perform their functions and we require them to agree to maintain the confidentiality of such information. 
• Health Care Service Providers.  To the extent legally permissible, we may also disclose Your Information to your health care service providers for purposes of our services, and to deliver content specific to you.
• Business Decisions.  To the extent legally permissible, we may disclose Your Information to third parties if we are involved in a merger, acquisition, or sale of any or all of our business and/or our assets to a third party.
• Legal Compliance.  To the extent legally permissible, we may disclose Your Information if we have a good faith belief that disclosure is necessary to:
• comply with applicable laws, regulations, legal process (such as a subpoena), or enforceable government request;
• enforce applicable Terms of Use, including investigation of potential violations of such Terms, or to detect, prevent, or otherwise address fraud, security or technical issues; and
• protect against harms to the rights, property, or safety of SOSP, our users, or the public as required or permitted by law.

Your Authorization

If you authorize integration of Your Information into the Portal, you may revoke this authorization at any time by contacting SOSP Member Services at customerservice@saveonsp.com or (800) 683-1074.

If you receive e-mail from us, you may unsubscribe at any time by following instructions contained within the e-mail.  Additionally, if we offer user account functionality on the Portal, we may allow you to view and modify settings relating to the nature and frequency of the communications that you receive from us. 

Cookies Data

As note in the “Information Collected Automatically” section above, the Portal uses “cookies” and similar technologies. A cookie is a small file of letters and numbers that we store on your browser of the hard drive of your computer. Cookies contain information that is transferred to your computer’s hard drive.

• Strictly necessary cookies. These cookies are required for the operation of the Portal. They include, for example, cookies that enable you to log into secure areas of the Portal.
• Analytical/performance cookies. These cookies allow us to recognize and count the number of visitors and to see how visitors move around the Portal when they are using it. This helps us to improve the way the Portal works, for example, by ensuring that users are finding what they are looking for easily.
• Targeting cookies. These cookies record your visit to the Portal, the pages you have visited and the links you have followed. We will use this information to make our Website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

You may block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. You may make this election at any time. Your browser can help you manage cookies. You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings on each browser and device that you use. Each browser is a little different, so look at your browser Help menu to learn the correct way to modify your cookies. More information about how to disable cookies can be obtained from your Internet browser provider. Please be aware that if you disable some or all cookies (including essential cookies) you may not be able to access all or parts of the Portal.

Review and Correction of Your Information

You may review and edit the information we collected about you at any time by contacting us at the addresses below.  If Your Information has been shared with a third party, as described elsewhere in this Policy, and you have been contacted separately by one of these third parties, we must contact them directly if you wish to correct or delete Your Information. 

Third Party Websites

Our Portal may contain links to other websites, including those of third parties or business partners.  If you choose to visit or use any third-party sites or products or services available on or through such third-party sites, please be aware that this Policy will not apply to your activities or any information you disclose while using those third-party sites or any products or services available on or through such third-party sites. We are not responsible for the privacy practices of these third-party sites or any products or services on or through them. Additionally, please be aware that the Portal may contain links to Web sites and services that we operate but that are governed by different privacy policies. We encourage you to carefully review the privacy policies applicable to any Web site or service you visit other than the Portal before providing any of your information on them.

Children Under the Age of 13

Our Portal is not intended for children under the age of 18. We may, in limited circumstances, allow children  between the age of 13 and 18 to electronically access their medical records on a case-by-case basis in order to provide such child with services as provided in the Terms of Use.

No one under the age of 13 may provide any personal information to the Portal. We do not knowingly collect or request personal information from anyone under the age of 13. If you are under 13, do not: (i) use or provide any information on this Portal, (ii) use any of the interactive or fillable features of the Portal, or (iii) provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or username you may use.  In compliance with the Children’s Online Privacy Protection Act (COPPA), in the event we discover we have collected or received  information from a child under 13 years of age without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at: (800) 683-1074.

Access Outside the US

Our Portal is hosted and operated in the United States (“US”).  By using our Portal, you are consenting to the transfer of Your Information to the US.  If you are accessing our Portal from outside the US, please be advised that US law may not offer the same privacy protections as the law of your jurisdiction. 

Security

We store the information provided to us through the Portal in a secure manner. We have implemented a variety of commercially standard encryption and security technologies and procedures to protect Your Information stored in our computer systems from unauthorized access. Please be aware, however, that no data security measures can be guaranteed to be completely effective. Consequently, we cannot ensure or warrant the security of any information that you provide to us. You transmit Your Information to us at your own risk.

Updates to this Policy

We may occasionally update this Policy. When we do, we will note the last updated date at the end of this Policy. Your continued use of our Portal after such changes will be subject to the then-current policy. We encourage you to periodically review this Policy to stay informed about how we collect, use, and disclose Your Information.

Contacting Us

If you have any questions or comments about this Policy, please email us at customerservice@saveonsp.com or send us a letter at:

Save On SP, LLC

Attn: Privacy Officer
40 La Riviere, Suite 310

Buffalo, NY 14202

Updated: October 2021