PRIVACY NOTICE-Retina Inventory

Effective Date: April 9, 2025

At McKesson (“McKesson”, “our”, “us”, or “we”), we value the trust that healthcare customers and healthcare providers place in us to use and protect personal information. This Privacy Notice tells you how we will use, share and protect your personal information we collect. When you use RetinaOS Inventory (“RetinaOS”) or provide personal information, you accept the privacy practices described in this Privacy Notice. Please read this Privacy Notice in full to understand our privacy practices before you use RetinaOS or submit any personal information.

Scope

This Privacy Notice applies to our use of personal information we collect when you use RetinaOS (https://retinaos.usretina.com) or in the ordinary course of business.

The Privacy Notice does not apply to:

• Individual health providers and practices who have separate privacy notices or Notice of Privacy Practices.
• McKesson affiliates and subsidiaries that may have separate websites, subdomains, and applications through other web, mobile, cloud or SaaS platforms which are not subject to this Privacy Notice.
• McKesson business partners, ad networks and other third parties that may have their own websites and services with separate privacy notices. We encourage you to read the privacy notices of all websites and applications that you visit so that you understand their privacy practices.

Personal Information We Collect

When you use RetinaOS, we may collect personal information about you. The personal information we may collect includes, but is not limited to:

• User first and last name
• User Email address
• User ID and password
• User Role / Company
• IP address, user’s browser type, user’s operating system
• Device/user activity (such as log-in-log-out info, sites/pages visited, # of visits, click stream, navigation, beacon signal hits, errors, crash rate, or other user activities)
• Information you provide directly to us:
  • When you use RetinaOS.
  • When you use offline features related to RetinaOS, such as communicating with us by phone, e-mail, or in person.
  • When you interact with us in the ordinary course of business.

Personal information may be combined with information that does not identify you. If we combine information that does not identify you with your personal information, it will be treated as personal information.

Tracking Technologies We Use

We use various technologies to collect personal information including:

• Web server logs
  As is true of most websites and applications, we gather certain information automatically and store it in log files. This information may include IP addresses, browser type, internet service provider, referring/exit pages, operating system, date/time stamp and/or clickstream data.
• Cookies
  We and our subsidiaries, business partners, marketing partners, affiliates, or other vendors may use cookies. Cookies uniquely identify the device or user account you use for this Portal.
• Other Tracking Technologies
  We and our subsidiaries, business partners, marketing partners, affiliates, or other service providers may also use technologies such as, scripts, tags, server logs, tags, third party software codes such as SDKS and embedded API, along with HTML5 reporting capabilities, and product analytics tools like Pendo, Fullstory, and Glassbox.
  We also use local storage to collect and store your information and preferences and our third-party partners may do the same.

These tracking technologies are used to identify trends, perform diagnostic services, improve RetinaOS and remember user settings.

How We Use the Personal Information Collected

We may use the personal information we collect for purposes such as:

• Customer and troubleshooting support
• Error detection and debugging
• Personalized user service or customized site-content based user preferences
• Reporting or data analytics services
• Product enhancements
• Email communications regarding RetinaOS

How We Share Personal Information Collected

We may provide your personal information to third parties that provide services to help us with our business activities, such as software development. These third parties are authorized to use personal information about you only as necessary to provide these services to us.

We may need to share information with other companies, organizations or individuals if we have a good faith belief that access, use, preservation, or disclosure of that information is reasonably necessary to:

• Meet applicable laws, regulations, legal processes, or enforceable governmental requests;
• Enforce applicable Terms of Service, including investigation of potential violations;
• Detect, prevent, or otherwise address fraud, security or technical issues;
• Protect against harm to the rights, property or safety of our users, McKesson, or the public as required or permitted by law;
• Engage in a merger, acquisition, reorganization, or sale of all or a portion of McKesson assets.

Your Choices

You can limit the personal information we have by choosing not to provide it within RetinaOS or by failing to provide information through any offline features or in the ordinary course of business.

Access to Personal Information

If you need to view, edit, or delete information about you maintained within RetinaOS contact your employer’s administrative user.

Retention

We will retain your personal information if you use RetinaOS, your account is active, as necessary to comply with our legal obligations, resolve disputes or enforce our agreements.

How We Protect Your Information

We protect the information we collect with proper physical, electronic and administrative safeguards. We only allow our employees, contractors, and agents to access personal information if they need access to perform services on our behalf. They are also subject to confidentiality obligations.

Any sensitive personal information is transmitted in an encrypted form using SSL encryption. Even though we have security safeguards, it is impossible to guarantee 100% security. If you have any questions about security or believe that your interactions with us are no longer secure (for example, you feel that your account with us has been compromised), you must notify us immediately by email at Privacy@McKesson.com.

Changes to this Privacy Notice

We may update this Privacy Notice from time to time. Updates may describe new features, products or services. Updates may also describe changes in how we use your personal information or to your controls. We will not apply changes to this Privacy Notice retroactively to personal information we have previously collected. Since we may make changes, we recommend that you read the current version of this Privacy Notice from time to time. If we change this notice, we will update the “Effective Date” at the beginning of this notice.

Contact Information

If you have questions or concerns about this Privacy Notice, our information handling practices, or any other aspect of privacy and security of your personal information, please contact us at: RetinaOS@mckesson.com

You may also write to us at:
McKesson Corporation
ATTN: Privacy Officer (Privacy Notice, RetinaOS Inventory)
2 National Data Plaza NE, 3rd Floor
Atlanta, GA 30329