Notice of Privacy Practices Update: The Notice below goes into effect on July 24, 2025 | PDF Copy

Prior Version: May 1, 2025 | Update History and Previous Versions

Albertsons Companies logo Pharmacist hands a bag to a customer Notice of Privacy Practices

Welcome

Thank you for trusting our pharmacy team to provide you with healthcare services. We are thrilled that you are interested in our healthcare privacy practices and want to learn more about our privacy commitments to you. To make it easier for you to learn how this Notice impacts you and your pharmacy information, we have included graphics to highlight important aspects of our pharmacy privacy practices. THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION (AKA PHARMACY INFORMATION) ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Alberstons company logos

You may find our personalized pharmacy care across our company banners nationwide. We are Albertsons Companies, Inc. (“Company,” “we,” “us,” and “our”). Our banners serve patients across the United States and are “affiliated entities” for purposes of Health Insurance Portability and Accountability Act (HIPAA) compliance and administration. If you’ve been to a doctor, you may be familiar with HIPAA and this type of Notice, but we are going to break things down a little more clearly for you here.

The information we collect and process to fulfill your pharmacy needs is known as “protected health information” (aka PHI) covered under HIPAA, but we’ll use the term “pharmacy information” throughout this Notice.

As shown in the graphic below, pharmacy information, which we collect when you use our pharmacy as a patient, is different from other personal data collected when you shop as a grocery customer or take advantage of non-pharmacy services such as our Sincerely Health nutrition, health, and reward experiences in the mobile app. This distinction is important because we operate as a hybrid entity under HIPAA. As a hybrid entity, only your pharmacy information is subject to HIPAA. This Notice pertains specifically to the patient information collected and used by our pharmacy. Check out our Privacy Policy here for more information on the use of personal data captured when you feed two birds with one scone, and shop for groceries when you drop off or pick up your scripts.

Pharmacy Information

Feel Better

Personal Data

Eat Better, Live Better, Be Rewarded

Our Responsibilities

We understand the importance of safeguarding your pharmacy information and are committed to protecting your privacy. We are required by law to maintain the privacy of your pharmacy information. Even if we weren’t required by law to care about the privacy of your pharmacy information, it would still be important to us. We review every identified potential HIPAA incident and evaluate whether your pharmacy information may have been compromised. After our review, we may notify you with information on the incident and whether your information has been compromised (as required by HIPAA). We must follow the duties and privacy practices described in this Notice and provide you a copy if you ask us for one.

Future Changes to Our Privacy Practices and This Notice

What we do with pharmacy information and how we do it sometimes changes. So, we may need to revise this Notice from time to time. We reserve the right to change the privacy practices outlined in this Notice and make the new practices effective for all pharmacy information that we maintain. When that happens we will post a copy of the current Notice on our website. If you prefer a paper copy (sometimes it’s just easier to review a paper copy), you can also request a copy of the Notice currently in effect from your local pharmacy.

YOUR RIGHTS as a Patient

As a patient, you have certain rights regarding your pharmacy information. To request one of the rights below, we need you to submit a written request addressed to our HIPAA Privacy Office sufficiently in advance to allow us to administer your request as required (and please remember to put your request in during regular business hours).

RIGHTS you have regarding your PHARMACY INFORMATION

1
Access your Pharmacy Information

You can ask to see or get a copy of your pharmacy information. We will provide a copy or a summary of your pharmacy information, usually within 30 days of your request. We may charge a reasonable, cost-based fee.

Ask your local pharmacy for a copy of your pharmacy record (you’ll need to submit a Request and Authorization for Release form) or email us at Rx.Records@albertsons.com.

2
Accounting of Disclosure

You can ask for a list (accounting) of the times we’ve shared your pharmacy information for six years prior to the date you ask, who we shared it with, and why. This right generally applies to non-routine disclosures (i.e., disclosures required by the government), so the list will not include every disclosure made (such as for treatment, payment, and healthcare operations purposes), or disclosures made directly to you or with your consent.

Email your request to us at PrivacyOffice@albertsons.com, or call us at toll-free number (877) 251-6559. We’ll provide one accounting a year for free but may charge a reasonable, cost-based fee if you ask for another one within 12 months.

3
Correct your Pharmacy Information

If you think that the pharmacy information we have about you is incorrect or incomplete, you may ask us to amend the information. We may say “no” to your request, but we’ll tell you why in writing within 60 days.

You can submit a request to amend in writing by emailing us at PrivacyOffice@albertsons.com with an explanation as to why the amendment is needed.

4
Restrict Disclosure for Payment

You can ask us not to use or share certain pharmacy information for treatment, payment, or our operations. We are not required to agree to your request, and we may say “no” if it would affect your care. If we do agree, we will agree to follow your restriction unless we need to use your pharmacy information to provide emergency treatment. In addition, we may elect to terminate the restriction at any time.

If you pay for a service or prescription out-of-pocket in full, you can ask us not to share that information for the purpose of payment or our operations with your health insurer going forward. We will say “yes” unless a law requires us to share that information.

You can submit a request to restrict disclosure for payment in writing by emailing us at PrivacyOffice@albertsons.com.

5
Request Confidential Communication

You can ask us to contact you in a specific way (e.g., email, text, push notification) or to send mail to a different address. We will attempt to accommodate all reasonable requests.

You can manage your communication preferences within your digital pharmacy account (Sincerely Health pharmacy app). Or ask your local pharmacy how to do this.

6
Get a copy of this Privacy Notice

You can ask for a paper copy of this notice at any time.

Request a copy from your pharmacy, email us at PrivacyOffice@albertsons.com, or call us at toll-free number (877) 251-6559.

7
File a Complaint

We are always open to feedback and are available to review your complaints if you feel we have violated your rights by contacting us. You can also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

Albertsons Companies Privacy Office
P.O. Box 20, Boise, Idaho 83726
PrivacyOffice@albertsons.com
(877) 251-6559 (toll free)

HOW WE MAY USE AND DISCLOSE YOUR PHARMACY INFORMATION

A. Typical Uses and Disclosures (without specific patient authorization)

3 Primary ways we may use or disclose your PHARMACY INFORMATION

1 Treatment Purposes
  • Fill your script or administer vaccines
  • Provide you info about health services or offerings (e.g., Health Journey Programs)
  • Share it with other professionals who are treating you (e.g., your prescriber)
2 Payment Purposes
  • Check for eligible insurance coverage
  • Bill health plans and insurance
  • Process payments for scripts and other pharmacy services
3 Healthcare Operation Purposes
  • Send you communications about things like your scripts, appointments, and ways to enhance your health journey
  • General business operations and administrative activities (e.g., to operate our pharmacies)
  • Evaluate performance of our pharmacies and staff (e.g., quality assurance)

The above graphic describes the primary ways we may use and disclose your pharmacy information. Not every use or disclosure will be listed, but hope it gives you an idea of the everyday uses and disclosures “behind the scenes” that are essential to the care you receive from us.

Health Information Exchange. As a pharmacy, we may share pharmacy information with other healthcare providers, as permitted by law, through Health Information Exchanges (HIEs) for treatment and healthcare operation purposes. HIE networks allow us to share pharmacy information with other healthcare providers involved in your treatment, such as your prescribers, so they can have access to the most up-to-date information about your health status and medication history. HIE networks help improve the quality of patient care, timely and accurate medication dispensing, and avoid medication errors. Under HIPAA, we are allowed to disclose your pharmacy information to HIE networks for treatment and healthcare operations purposes without obtaining written authorization from you. We participate in the SureScripts HIE. You can opt-out of the HIE by contacting optout@Surescripts.com. As a participant pharmacy, we are unable to opt-out on your behalf. Even if you opt-out of SureScripts HIE, public health reporting including Controlled Substances information may still be available to providers as part of the State Prescriptions Drug Monitoring Program (PDMP).

B. Other Uses and Disclosures (without specific patient authorization)

In certain situations, we may use or disclose your pharmacy information without your authorization (permission) for other purposes permitted or required by law, including:

  • Health-related offers. To tell you about, or recommend, health-related products, benefits, and services we may provide.
  • Required by Law. As required by state and federal law, including the Secretary of Health and Human Services to investigate or determine our compliance with HIPAA.
  • Public Health. For public health activities, such as disclosures to state Prescription Drug Monitoring Programs (PDMP) and the Food and Drug Administration.
  • Abuse or Neglect. If you have been a victim of abuse, neglect, or domestic violence, we may disclose your pharmacy information to the government agency authorized to receive such information.
  • Health Oversight. To a health oversight agency for activities authorized by law, such as: civil or criminal investigations; inspections; licensure or disciplinary actions; or other activities necessary for appropriate oversight of retail pharmacies, governmental health benefit programs, or compliance with laws.
  • Our Partners. To third parties referred to as “business associates” that provide services on our behalf, such as billing, software maintenance, and sending communications. We may use third party Business Associates to perform the operations described above. In those instances where we disclose your pharmacy information to a third party acting on our behalf, we protect your pharmacy information through an appropriate privacy agreement, referred to as a Business Associate Agreement. In addition to these contractual obligations, as of February 17, 2010, our Business Associates also have independent HIPAA compliance obligations designed to further protect the privacy of pharmacy information.
  • Judicial and Administrative Proceedings. In response to a court or agency order, and in some cases, in response to a subpoena or other lawful process not accompanied by a court order.
  • Law Enforcement. To law enforcement officials as authorized or required by law, such as providing information to the police about the victim of a crime.
  • Coroners and Funeral Directors. To coroners, medical examiners, and funeral directors, as authorized or required by law as necessary for them to carry out their duties.
  • Research. To researchers when the research is being conducted under established protocols to ensure the privacy of your information.
  • Serious Threat to Health or Safety. To prevent or lessen a serious and imminent threat to your health and safety or the health and safety of the public or another person.
  • Specialized Government Functions. To specialized government functions related to military or national security concerns, such as for the purpose of a determination by the Department of Veterans Affairs of your eligibility for benefits.
  • Domestic Armed Forces Personnel. To the military if you are a member of the armed forces and we are authorized or required to do so by law.
  • Inmates. Under certain circumstances, we may disclose the pharmacy information of inmates of a correctional institution.
  • Workers’ Compensation. For workers’ compensation or similar programs providing benefits for work-related injuries or illness as authorized or required to do so by law.

C. Uses and Disclosures with Your Authorization

We will not use or share your pharmacy information other than as described in this Notice unless you provide authorization. And, you may change your mind at any time.

We do not sell your pharmacy information or use it for certain marketing purposes unless you give us permission.

We love to reward our patients, so if you’d like to receive Deals & Discounts, such as pharmacy rewards, coupons, and ways to save on groceries, you’ll need to provide your HIPAA Marketing Authorization.

If you provide us with authorization, you may revoke (withdraw) that authorization at any time. However, uses and disclosures made before your withdrawal are not affected by your action and we cannot take back any disclosures we may have already made with your authorization.

Use of Unsecure Electronic Communications.

If you provide your email address or phone number to the pharmacy, we may send you messages related to your prescriptions, appointments, surveys, or other pharmacy communications.

For your convenience, these messages may be sent unencrypted. Please be aware that there are certain risks, such as interception by others, misaddressed/misdirected messages, shared accounts, or messages forwarded to others. By choosing to receive email, text, or push messages from the pharmacy, you are acknowledging and agreeing to accept the risks.

NOTICE TO MINORS

If you are a minor who has lawfully provided consent for treatment and you wish that we treat you as an adult for purposes of access to, and disclosure of, records related to such treatment, please notify a pharmacist or our Privacy Office.

STATE LAW ADDENDUM

The uses and disclosures of your pharmacy information described above are permitted or required by federal law. Some states have laws that require additional privacy safeguards above and beyond the federal requirements. Thus, if a state law is more restrictive regarding uses and disclosures of your pharmacy information or provides you with greater rights with respect to your pharmacy information, Albertsons Companies will comply with the state law. If your state has enacted a more stringent law, we have attached as an addendum to this Notice our privacy practices regarding your pharmacy information in that state.

This addendum describes state laws that are more restrictive than federal law regarding disclosures of your medical information in states where we operate pharmacies. Please review it carefully. HIPAA State Addendum