Privacy Notice – My.McKesson.com

Effective Date: November 6, 2025

View state-specific privacy rights HERE

At McKesson (“McKesson”, “our”, “us”, or “we”), we value the trust that healthcare customers, pharmacies, and McKesson employees place in us to use and protect personal information. This Privacy Notice informs you how we will use, share and protect your personal information. When you use this website/portal or provide personal information, you accept the privacy practices described in this Privacy Notice. Please read this Privacy Notice in full to understand our privacy practices before you use this website/portal or submit any personal information. Depending on where you live, you may have certain rights with respect to your personal information under applicable data protection laws. You may assert those rights by clicking on the “view state privacy rights HERE” link located at the top of this notice underneath the effective date.

Scope

This Privacy Notice applies to our use of personal information we collect when you use our website/portal (https://my.mckesson.com) or in the ordinary course of business. The Privacy Notice does not apply to:

• Individual health providers and practices who have separate privacy notices or Notice of Privacy Practices.
• McKesson affiliates and subsidiaries that may have separate websites, subdomains, and applications through other web, mobile, cloud or SaaS platforms which are not subject to this Privacy Notice.
• McKesson business partners, ad networks and other third parties that may have their own websites and services with separate privacy notices.

We encourage you to read the privacy notices of all websites and applications that you visit so that you understand their privacy practices.

Personal Information We Collect

When you use our website/portal, we may collect personal information about you including, but is not limited to:

• First and last name
• Age
• Gender
• Photographs/videos (such as through camera device or photo library application)
• Personal telephone number (home, cell, fax, etc.)
• Business address
• Business telephone number (office, cell, fax, etc.)
• Personal and electronic mail address
• Occupation/title
• User ID and password
• Geo-Location/GPS information
• IP address
• User’s browser type
• User’s operating system
• NCPDP
• McKesson Account Number and McKesson ID

Information you provide directly to us:

• When you use the website/portal.
• When you use offline features related to website/portal, such as communicating with us by phone, e-mail, or in person.
• When you interact with us in the ordinary course of business.

We may also obtain information about you from publicly available data sources and other business partners and combine it with information we already have about you. Personal information may be combined with information that does not identify you. If we combine information that does not identify you with your personal information, it will be treated as personal information.

Tracking Technologies We Use

We use various technologies to collect personal information including:

Cookies

We and our subsidiaries, business partners, marketing partners, affiliates, or other vendors may use cookies. Cookies uniquely identify the device or user account you use for this website/portal. You can control the use of cookies by adjusting your browser preferences at any time. If you reject cookies, you may still use our website/portal; however, rejecting cookies may limit your ability to use some features.

Geo-location Services

When you allow us to track your location, we may collect information about your location related to our website/portal. We use various technologies to determine location, such as sensor data from your device that may provide information from nearby Wi-Fi access points and cell towers.

Other Tracking Technologies

We and our subsidiaries, business partners, marketing partners, affiliates, or other service providers may also use web analytic tools such as Google Analytics or video embedding tools like Vidyard. These tracking technologies are used to help us with performance analytics solutions and to improve our website/portal.

We allow or enable third parties to collect Personal Information in order to provide their interest-based advertising services, and we use Google Ads and other third parties to serve ads for our Services across various websites. To opt-out of this type of advertising by Google, to customize your ad preferences, or to limit Google’s collection or use of your data, visit Google’s Safety Center and Google’s Ad Settings and follow Google’s personalized ad opt-out instructions. Opting out will not affect your use of our Services. We use analytics services, including Google Analytics, to assist us with analyzing how people use our Services. These services utilize cookies and other technologies that collect your Personal Information. To learn more about how Google uses data, visit Google’s Privacy Policy and Google’s page on “How Google uses data when you use our partners’ websites or apps.” You may download the Google Analytics Opt-out Browser Add-on for each web browser you use, but this does not prevent the use of other analytics tools. To learn more about Google Analytics cookies, visit Google Analytics Cookie Usage on Websites.

When the tracking information we collect is considered individually identifiable information, the data is treated as Protected Health Information (“PHI”) which is defined in the Health Insurance Portability and Accountability Act (“HIPAA”). We will use and disclosure this information as required by HIPAA’s Privacy and Security Rule.

How We Use the Personal Information Collected

We may use the personal information we collect for purposes such as:

• Customer and troubleshooting support
• Error detection and debugging
• Personalized user service and/or customized site-content based on user preferences
• Reporting or data analytics services
• Provide you with marketing notices
• Send you communications via email, fax, mail, mobile badge notifications / text message
• Part of a Corporate Transaction, such as in connection with the sale of part or all our assets or business, the acquisition of part or all of another business or another corporate transaction, including bankruptcy.

Newsletters

We may use your name and email address to send you our newsletter and will obtain your prior consent when required by law. You may choose to stop receiving our newsletter or marketing emails by following the unsubscribe instructions included in those emails, or by contacting us using the contact information listed below.

Our third-party partners may use cookies and other technologies to gather information about your activities on this website and other websites to provide you advertising based upon your browsing activities and interests. If you wish to not have this information used for the purpose of serving you interest-based ads, you may opt out via our cookie consent manager, according to the rights associated to your geo location.

How We Share Personal Information Collected

We may need to share information with other companies, organizations or individuals if we have a good faith belief that access, use, preservation, or disclosure of that information is reasonably necessary to:

• Meet applicable laws, regulations, legal processes, or enforceable governmental requests
• Enforce applicable Terms of Service, including investigation of potential violations
• Detect, prevent, or otherwise address fraud, security or technical issues
• Protect against harm to the rights, property or safety of our users, McKesson, or the public as required or permitted by law
• Engage in a merger, acquisition, reorganization, or sale of all or a portion of McKesson assets.

Your Choices

You can limit the personal information we have by choosing not to provide it within our website/portal or by failing to provide information through any offline features or in the ordinary course of business. Depending on where you live, you may have certain rights with respect to your personal information under applicable data protection laws.

Access to Personal Information

Our website/portal allows you to directly view, edit, or delete information about you through your profile settings.

Retention

We will retain your personal information as long as you use our website/portal, your account is active, as necessary to comply with our legal obligations, resolve disputes or enforce our agreements.

Children’s Privacy

We do not knowingly collect or solicit any personal information from children, as defined under applicable law, without verified written parental consent, and we have no actual knowledge of selling such personal information of minors under 18 years of age. If we learn that we have collected personal information from a child, we will promptly take steps to delete that information. If you believe we might have any information from or about a child, please refer to the Contact Information section below.

How We Protect Your Information

We protect the information we collect with proper physical, electronic and administrative safeguards. We only allow our employees, contractors, and agents to access personal information if they need access to perform services on our behalf. They are also subject to confidentiality obligations.

Any sensitive personal information (e.g., user ID and password) is transmitted in an encrypted form using SSL encryption. Even though we have security safeguards, it is impossible to guarantee 100% security. If you have any questions about security or believe that your interactions with us are no longer secure (for example, you feel that your account with us has been compromised), you must notify us immediately by email at Privacy@McKesson.com.

International Use and Cross-Border Data Transfers

If you are visiting our site from outside of the United States, please note that our site is hosted in the United States. Where permitted by applicable law, we may transfer the personal data we collect about you to the United States and other jurisdictions that may not be deemed to provide the same level of data protection as your home country, as necessary for the purposes set out in this notice. For individuals in the European Union, European Economic Area, Switzerland, and United Kingdom: We will only transfer Personal Data to third parties located outside of this region when it has ensured appropriate safeguards for such Personal Information through use of the standard contractual clauses or other lawful and approved methods. To request a copy of applicable cross-border data transfer agreements, please reach out to us.

Changes to this Privacy Notice

We may update this Privacy Notice from time to time. Updates may describe new features, products or services. Updates may also describe changes in how we use your personal information or to your controls. We will not apply changes to this Privacy Notice retroactively to personal information we have previously collected. Since we may make changes, we recommend that you read the current version of this Privacy Notice from time to time. If we change this notice, we will update the “Effective Date” at the beginning of this notice.

Contact Information

If you have questions or concerns about this Privacy Notice, our information handling practices, or any other aspect of privacy and security of your personal information, please contact us at: myhealthmartsupport@mckesson.com.

You may also write to us at:

McKesson Corporation

ATTN: Privacy Officer (Privacy Notice, My.McKesson.com)

2 National Data Plaza NE, 3rd Floor

Atlanta, GA 30329