EFFECTIVE DATE: May 12, 2026
KPH Healthcare Services, Inc., doing business as Kinney Drugs ("Kinney Drugs," "we," "us," or "our"), respects your privacy and is committed to being transparent about how we collect, use, and share Personal Information about you.
This Privacy Policy explains our practices when you interact with us through our online services, including when you:
(collectively, the "Services").
Some information we collect in connection with our pharmacy and healthcare services is regulated by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and related state laws and qualifies as Protected Health Information ("PHI"). All PHI is governed exclusively by our Notice of Privacy Practices, not this Privacy Policy. This Privacy Policy applies only to non-PHI information collected through our online Services. For information about how we handle PHI, please refer to our Notice of Privacy Practices.
We may modify or update this Policy from time to time. Changes that in our sole discretion are material will be posted on the Services or otherwise communicated to you. We do not ordinarily provide advance notice of a minor change. All changes will be effective immediately upon posting to the Services.
If you are a California Consumer, please see the Notice to California Consumers section of this Policy.
We collect Personal Information about you when you use our Services. "Personal Information" means information that identifies you or can reasonably be used to identify you, such as your name, email address, or account information. Some features may be used without providing Personal Information, but certain features, such as creating an account, making a purchase, or contacting us, require it.
You may provide information directly to us, including:
When you use our websites or mobile applications, we (and our service providers) may automatically collect:
This information is collected for operational purposes, analytics, security, fraud prevention, and to improve the functionality and performance of our Services.
Cookie and Tracking Technologies: We, our service providers, and other third parties use certain cookie identifiers, pixel tags, SDK identifiers, and similar tracking technologies to provide and secure the Services, remember preferences, understand usage, and support analytics, and measure the effectiveness of communications and marketing activities.
We may also use privacy-enhancing technologies and service providers that help remove, mask, hash, aggregate, or otherwise limit certain identifying information before analytics or advertising-related information is disclosed to third-party vendors. Depending on configuration, information shared with such vendors may be pseudonymized or de-identified and may not directly identify individual users.
You may disable cookies through your browser settings, although doing so may affect certain features or functionality.
We may use pixels or similar technologies to measure the performance and reliability of the Services, understand aggregated usage trends, and support security and fraud prevention. Our Services may use pixels or similar technologies from analytics or advertising partners (such as Google or Meta), including tools that can support audience measurement or advertising. We may configure these technologies to limit the collection or disclosure of certain categories of information and may contractually restrict vendors from using information except to provide services on our behalf.
We also use web beacons in certain HTML emails to determine whether recipients have opened those emails and/or clicked on links.
Google may use this information to provide us with reports that we use to better understand and measure how users interact with our Services.
To learn more about how Google uses data, visit Google’s Privacy Policy and Google’s page on “How Google uses data when you use our partners’ sites or apps.” You may download the Google Analytics Opt-out Browser Add-on for each web browser you use, but this does not prevent the use of other analytics tools. To learn more about Google Analytics cookies, visit the “How Google Uses Cookies” page.
We may disclose Personal Information in the following circumstances or when you otherwise consent:
We disclose Personal Information to service providers who perform services on our behalf (such as hosting, analytics, payment processing, customer support, marketing communications, security, fraud prevention, and applicant tracking). For example, our careers portal is operated by iCIMS, which processes job applicant information on our behalf. We take commercially reasonable steps to ensure our third-party vendors, contractors, or business partners provide at least the same level of protection for Personal Information as we do.
We may disclose Personal Information to our subsidiaries and affiliates for operational, administrative, security, marketing, and recruitment purposes as permitted by applicable law.
We may disclose Personal Information to third parties that use this information to show you tailored ads based on your interests and online activities. These companies may use tracking technologies, such as cookies and similar tools, to collect information about your interactions with our Services and other websites or apps. This helps deliver personalized advertisements and measure their effectiveness, in accordance with applicable laws and your privacy preferences.
We may disclose Personal Information in connection with social media plug-ins integrated into our Services, such as Meta, X (formerly Twitter), Instagram, LinkedIn, or other platforms. When you interact with these plug-ins, certain information may be shared with the respective social media provider, subject to their privacy policies. These interactions may allow social media platforms to collect information about your activities on our Services and may result in the disclosure of your Personal Information, as permitted by applicable law. We encourage you to review the privacy policies of the relevant social media providers to understand their information handling practices.
We may disclose Personal Information as necessary or appropriate to: comply with applicable laws, regulations, legal processes, or enforceable governmental requests (including subpoenas, court orders, and warrants); respond to lawful requests; protect our rights, property, and safety, and the rights, property, and safety of our users and the public; prevent fraud; and enforce our terms and policies.
If we engage in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, Personal Information may be disclosed or transferred as part of that transaction, consistent with applicable law.
We and/or our service providers and other third parties may create aggregated or de-identified information from Personal Information for analytics, reporting, research, operational improvements, and other lawful purposes. Where required by law, we will maintain and use such information in de-identified form and take reasonable steps to prevent re-identification when sharing de-identified information with third parties.
We may disclose Personal Information when you provide your consent or direct us to share Personal Information with third parties. For example, this may occur when you choose to share content on social media platforms, participate in third-party promotions or offers, authorize integrations with third-party services, or otherwise request that we share your Personal Information.
Our Services may contain links to other websites, services, or mobile applications that are not owned or controlled by Kinney Drugs (collectively, "Third Party Sites"), including social media platforms and other third-party services. We may also link to websites or mobile applications controlled by other KPH Healthcare Services, Inc. owned companies that operate independently of the Services and maintain their own privacy policies. Certain features accessible through our Services may be operated by third-party providers subject to their own terms and privacy policies.
This Privacy Policy applies only to Personal Information collected through our Services. We are not responsible for the privacy or data security, collection, use, and disclosure practices of Third-Party Sites. We encourage you to review the privacy policies of any third-party sites you visit. Links to Third Party Sites do not constitute endorsement by Kinney Drugs.
We implement commercially reasonable administrative, technical, and physical security measures designed to protect Personal Information from unauthorized access, use, alteration, and disclosure. However, you should assume that no data transmitted over the Internet or stored or maintained by us or our third-party service providers can be 100% secure. Therefore, although we believe the measures implemented by us reduce the likelihood of security problems to a level appropriate to the type of data involved, we do not promise or guarantee, and you should not expect, that your Personal Information or private communications will always remain private or secure. We do not guarantee that your Personal Information will not be misused by third parties. We are not responsible for the circumvention of any privacy settings or security features.
If you believe that your Personal Information has been accessed or acquired by an unauthorized person, promptly Contact Us so that necessary measures can be taken.
We will retain your Personal Information for as long as needed to provide you Services, or as permitted or required by law. Retention periods may vary depending on the type of Personal Information and the purposes for which it is used. If you wish to cancel your account or request that we no longer use your Personal Information to provide you Services, please contact us at the address and email in the section entitled “How to Contact Us” below. We will retain and use your Personal Information as necessary to comply with our legal obligations, as permitted by law, to resolve disputes, and to enforce our agreements. In accordance with our routine record keeping, we may delete certain records that contain Personal Information you have submitted to us.
We, our affiliates, and our service providers may communicate with you by email, telephone, or text message as permitted by applicable law. Where required by law, we will obtain your consent before sending marketing or promotional communications. You may choose how we communicate with you and update your preferences as described in the “Your Choices” section below.
Please be aware that opting out of interest-based advertisements does not eliminate Kinney Drugs advertisements from your online experience. Instead, it ensures that any ads you receive will not be customized based on your individual interests.
Our online Services are not directed to children under the age of 13, and we do not knowingly collect Personal Information from children under 13 through our websites or mobile applications. If we learn that we have collected Personal Information from a child under 13 through our online Services, we will delete that information.
Individuals with disabilities who are unable to usefully access our Privacy Policy online may contact us to inquire how they can obtain a copy of our policy in another, more easily readable format.
We reserve the right to change, modify, or amend this Privacy Policy at any time to reflect changes in our products and service offerings, accommodate new technologies, regulatory requirements, or other purposes. If we modify our Privacy Policy, we will update the “Effective Date” and such changes will be effective upon posting. It is your obligation to check our current Privacy Policy for any changes. Your continued use of our Services following the posting of changes constitutes your acceptance of such changes.
If you have any questions about this Privacy Policy or the Personal Information we have collected about you, please contact us at the following:
Kinney Drugs
6333 State Route 298, Suite 305
East Syracuse, NY 13057
Attn: Public Relations
Email: publicrelations@kinneydrugs.com
Call (315) 451-2873 x 3150
NOTICE TO CALIFORNIA CONSUMERS
Last Updated Date: May 12, 2026
This Section provides additional terms that apply to California Consumers. In the event of a conflict between this Section and the remainder of this Policy, this Section shall take precedence for California Consumers. In this Section only, any capitalized terms not defined in this Policy have the meanings set forth in the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, and including its implementing regulations (the “CCPA”). If you are a California resident, these CCPA rights apply regardless of whether you interact with us in a personal, job applicant, or business-to-business context.
The Collection, Source, Purpose and Sharing of Your Personal Information.
Categories of Personal Information. For a description of the categories of Personal Information we collect, please see Section I (Information We Collect) above. The categories we collect include Identifiers, Personal Information described in Cal. Civ. Code § 1798.80(e), Commercial Information, Internet or Other Electronic Network Activity Information, Geolocation Data, Professional or Employment-Related Information, and Inferences.
Sensitive Personal Information. The CCPA defines certain categories of Personal Information as “Sensitive Personal Information,” including government-issued identifiers, precise geolocation, and health information. To the extent we collect Sensitive Personal Information through our online Services, we use it only as necessary to provide requested services (such as processing transactions or enabling location-based features) and for purposes permitted under the CCPA without providing an opt-out. We do not use Sensitive Personal Information to infer characteristics about you.
Categories of Sources from Which Personal Information is Collected. The categories of sources from which we collect Personal Information are described in Section I (Information We Collect), which identifies information collected directly from you, information collected automatically through our Services, and information received from third parties.
Purposes for Collecting Personal Information. The purposes for which we collect and use Personal Information are described in Section II (How We Use Your Personal Information). These purposes constitute business purposes as defined under the CCPA, including: providing and operating our Services; communicating with you; personalizing and improving our Services; security and fraud prevention; and legal compliance.
Categories of Our Service Providers or Contractors with Whom Personal Information is Disclosed for a Business Purpose. In the last 12 months we have disclosed all the categories of Personal Information listed above for our business purposes. The categories of Service Providers or Contractors with whom we disclose Personal Information in the last 12 months are described above in Section III (How We Share Your Personal Information).
Categories of Third Parties with Whom Personal Information is Sold or Shared. In the last 12 months we have not “sold” or “shared” your Personal Information as defined by the CCPA.
We do not have any actual knowledge that we have “sold” or “shared” Personal Information of any individual under the age of 16 for monetary compensation or for cross-context behavioral advertising.
Your California Privacy Rights
California Consumers have the right to make the following requests:
How to Exercise Your California Privacy Rights. To exercise your California privacy rights, you may submit your request to us by contacting us:
By Email: publicrelations@kinneydrugs.com
By Phone: (315) 451-2873 x 3150
Form: Contact Us Page
Verifiable Consumer Request. In order to verify your request, we may require additional information to allow us to reasonably verify you are the person about whom we collected Personal Information, and you must describe your request with sufficient detail to allow us to properly understand, evaluate, and respond to your request. This information may vary depending on the Personal Information we already have. If we are unable to verify your identity as required by applicable laws and regulations, we will decline to comply with your request and let you know why. We may reject or deny your request as permitted or as required by law. We may charge a fee as permitted by the CCPA, such as to process or respond to your request if it is excessive, repetitive, manifestly unfounded, or if we believe the request is fraudulent or submitted for purposes other than exercising applicable privacy rights.
Authorized Agents. You may only make a request to exercise your rights on behalf of yourself, or a parent or legal guardian may make a request on behalf of their minor child. You also have a right to submit requests to exercise your rights under the CCPA through an authorized agent. If an authorized agent contacts us to exercise the above rights, we will need to verify their identity as well as your identity. We will also require proof of your written authorization to the agent to be your agent and to make the specific request submitted, unless the agent is subject to a Power of Attorney under California probate laws. If the agent is a Power of Attorney under California probate laws, we may require evidence of that status.
If We Deny Your Request. We will acknowledge your request within 10 business days and respond within 45 days of receipt (or notify you of a single 45‑day extension when reasonably necessary). If we deny your request in whole or in part, we will explain the basis for the denial and, where applicable, provide any information that is not subject to an exception.
