Security Overview

At CVS Caremark, the security of your personal information is of the highest importance to us. The security measures used at the CVS Caremark Web site are continually being reviewed and updated. In addition, our Web site is monitored twenty-four hours a day, seven days a week.

There are some specific security measures we would like to tell you about:

Our mail service pharmacy options, for example, refilling your prescriptions or reviewing the status of your prescription order, does require you to enter your prescription ID number and some other information that is required for us to process these orders. This information is scrambled using an industry-standard level of encryption.

There are two other areas of the Web site which require you to register with PharmaCare.com so that we may properly identify you as a CVS Caremark member. The Pharmacy Locator function will present pharmacies that are in your specific network that requires us to look up your plan information to display the proper pharmacies. The Health Assessment (health and wellness survey) also requires you to register with us so that you can return and modify your health information at a later date. This information is scrambled using an industry-standard level of encryption.

What is encryption? Ensuring the privacy of transactions requires the process of encrypting and decrypting data. Encryption is the process of converting meaningful information into a numeric code that is only understood by the intended recipient of the information.

As part of the registration process, you will be asked to select a User ID of your choice and a password will be mailed to you to the address that we have on file for you. We will never display your password on the screen, nor will we send it to you via e-mail. We will soon be adding features on the Web site which will allow you to view your personal prescription history or order new prescriptions through our mail order facility. The use of a User ID and password will be required for these functions. You will have the option at any time to change your password under the My Profile section of this Web site.

When using CVS Caremark's online Mail Order Pharmacy services, we display your street address and do not display the city, state and zip code. Whenever credit cards are involved, only the last four digits are displayed. Although these transactions are handled under a secured line, we have taken extra measures to ensure that your information is protected.

You will be required to change your password every 180 days. If you have not accessed the Web site for more than 365 days, you will be required to reregister.

What types of browsers are supported?
This Web site was optimized for use with Internet Explorer v5 and higher. Although the Web site functions properly using other browsers or earlier versions of the above mentioned browsers, you may experience some differences in colors or font sizes. If you are experiencing problems, please use the Contact Us section and describe the problems you are experiencing.

What are 'cookies' and are they used at this Web site?
CVS Caremark does not utilize cookies on this Web site. Cookies are, however, small text files that some Web sites store on your computer for different reasons, such as remembering your preferences when you visit their particular Web site. PharmaCare.com will not store any information on your personal computer.

What additional security measures should I use if I am using a 'public' computer?
It is always recommended to close your browser when you are finished using the Web site if you do not close the browser, it is possible for someone after you to use the "back" button and possibly view the information you had previously selected. Also, if you have logged in to the Web site to view some personal information, it is always recommended to log out. This will prevent the person after you from accessing your personal information. Computers located in libraries and schools are examples of a public computer.

Also, if you do not wish to receive e-mails, do not enter your e-mail address on our Web site. If you choose to enter your e-mail address, we would use it for the following reasons:

• CVS Caremark programs (you could opt-in for a refill reminder program)
• Open Enrollment notifications for your health plan
• Newsletter or special announcements regarding your prescription benefits

You would always be notified prior to offering you any of these options and you will have the option of participating.

If you have any questions or comments regarding our security policies, please use the Contact Us section of the Web site.