Online Privacy Policy

REVISED - DECEMBER 17, 2002

Cystic Fibrosis Services, Inc. ("CFS") is committed to respecting and protecting your privacy. Please carefully read the following Online Privacy Policy.

Any person accessing, browsing, or otherwise using www.cfservicespharmacy.com andwww.cfservicespharmacy.org,www.cfservicespharmacy.net,www.cfservicespharmacy.info and www.cfservicespharmacy.biz(together, the "Site") either manually or via an automated device or program, shall be considered a "User." The purpose of this Online Privacy Policy is to explain the type of information that CFS collects from its Users through the Site, what CFS does with that information, and how CFS Users can update information provided to CFS through the Site. Capitalized terms shall have the meaning designated in this Online Privacy Policy.

USER CONSENT TO THE ONLINE PRIVACY POLICY

By accessing, browsing or using the Site, Users acknowledge that they have read, understand, agree and consent to the terms and conditions of the Online Privacy Policy. Specifically, Users consent to the collection, use, and disclosure of User information, including personally identifiable information (but not including personally identifiable medical information as discussed below) pursuant to the terms of this Online Privacy Policy. Users that do not consent to these terms and conditions should not access, browse or use this Site.

A User that registers online or has registered for CFS' pharmacy services is a "Registered User." All references to "Users" in this Online Privacy Policy include Registered Users.

THE INFORMATION CFS COLLECTS

Anonymous Browsing Information

Users can browse the Site without revealing Information. In this context, CFS may collect non-personally identifiable information such as your Internet Protocol ("IP") address, your computer's operating system, the domain name you used to access the Internet, the website you came from and the website you visit next. However, CFS does not associate any non-personally identifiable information with records containing any personally identifiable information submitted to us, so you remain anonymous when you browse the Site.

Personally Identifiable Information

Users may submit personally identifiable information to CFS through the Site. This Online Privacy Policy describes how CFS may use and disclose a User's personally identifiable non-medical information (hereinafter, "Information"). Such Information may include, but is not limited to names, company names, titles, addresses, telephone numbers, fax numbers, e-mail addresses, payment information (such as credit card numbers), gender, date of birth, social security number and employer information from Users. A User submits Information to CFS, for example, when a User registers online to be added to CFS' HomeLine newsletter mailing list or when a User contacts CFS through the Site with general questions, comments or concerns.

CFS' Notice of Information Practices applies to Users that provide personally identifiable medical information to CFS.CFS' Notice of Information Practicesdescribes how CFS may use and disclose a User's personally identifiable medical information (including, but not limited to, a User's health condition, health care services received or that may be received in the future, prescription information, and health care insurance benefits) that CFS may collect and a User's rights with respect to his or her personally identifiable medical information. To read CFS' Notice of Information Practices,N.I.P.

Cookies

This Site may use cookies. A cookie is a small file that your Web browser places on your computer's hard drive. It functions as an identification card, recording your passwords, purchases and preferences. Most browsers are initially set to accept cookies. You can set your browser to notify you when you receive a cookie, giving you a chance to decide whether or not to accept it. While CFS may use cookies to track your visit to the Site and our servers automatically log the IP address of your computer, this information does not identify you personally and you remain anonymous, even if you have previously submitted personally identifiable information to CFS through the Site or otherwise.

Children's Privacy Protection

The Site is not directed towards children under the age of 13. CFS does not knowingly collect personally identifiable information from any person under the age of 13 through the Site.

HOW CFS USES YOUR INFORMATION

Anonymous browsing information, including your IP address, may be used to gather broad demographic information. This information may be aggregated to measure the number of visits, average time spent, page views and other statistics about Users of the Site. We may also use this data to monitor Site performance and to make the Site easier and more convenient to use.

CFS uses Information collected from Users:

to respond to User inquiries;

to mail Users CFS' HomeLine newsletter and information about new products and services offered by CFS and the Cystic Fibrosis Foundation; and

to comply with standard professional pharmacy administrative practice and procedure.

By submitting Information through the Site, Users authorize CFS to use this Information for the purposes identified above.

CFS’ Notice of Information Practicesapplies to Users that provide personally identifiable medical information to CFS.CFS’ Notice of Information Practicesdescribes how CFS uses your personally identifiable medical information and your rights regarding that information. To read CFS’ Notice of Information Practices,N.I.P.

WHO CFS SHARES YOUR INFORMATION WITH

Unless CFS has your consent or except as provided below, CFS will not share your Information with any person or entity other than those identified below. CFS may share non-personal, non-individual information in aggregate form with third parties.

CFS will not intentionally release your Information other than to:

an authorized representative of a User;

the Cystic Fibrosis Foundation and other CFS affiliates; and

third party vendors that perform administrative services on behalf of CFS, such as mailing CFS statements, the HomeLine newsletter or other materials, scanning documents, and managing the Site.

CFS may disclose Information about our Users to others if we have a good faith belief that we are required or permitted to do so by law or legal process, to respond to claims, or to protect the rights, property or safety of CFS or others.

CFS’ Notice of Information Practices applies to Users that provide personally identifiable medical information to CFS.CFS’ Notice of Information Practicesdescribes with whom CFS shares your personally identifiable medical information and your rights regarding that information. To read CFS’ Notice of Information Practices,N.I.P.

Also, CFS may assign, sell, license, or otherwise transfer to a third party, User Information in connection with an assignment, sale, joint venture, or other transfer or disposition of a portion or all of the assets or stock of CFS or its affiliated entities.

APPLICABLE LAW/INTERNATIONAL ISSUES

Because we are committed to protecting your privacy, individually identifiable information that is submitted to this Site will be collected, processed, stored, disclosed and disposed of in accordance with applicable U.S. law. If you are a non-U.S. user, you acknowledge and agree that we may collect and use your Information and disclose it to other entities, as discussed above in "Who CFS Shares Your Information With," outside your resident jurisdiction. In addition, such Information may be stored on servers located outside your resident jurisdiction. U.S. law may not provide the degree of protection for Information that is available in other countries. By providing us with your Information, you acknowledge that you have read this Online Privacy Policy, understand it, agree to its terms and consent to the transfer of such Information outside your resident jurisdiction. If you do not consent to the terms of this Online Privacy Policy, please do not use this Site, but if you have already provided us with Information, please contact us atpostmaster@cfserv.com, and let us know how you would like us to handle such Information.

HOW TO UPDATE YOUR INFORMATION OR INACTIVATE YOUR ACCOUNT

Users who have provided Information to CFS through the Site may review their Information to update it or correct any errors by submitting a request topostmaster@cfserv.com. Users may also inactivate their account, terminate their access to CFS' pharmacy services and/or cancel e-mail notifications by submitting a request topostmaster@cfserv.com.

Please note that when you provide CFS with your Information, CFS becomes subject to various pharmacy laws that require us to keep your Information in our records for a prescribed period of time. Therefore, even if you inactivate your account, CFS can only delete your Information from its records pursuant to those pharmacy laws.

LINKED INTERNET WEBSITES

The Site provides hyperlinks, which are highlighted words or pictures within a hypertext document that, when clicked, take you to another place within the document, to another document altogether, or to other websites not controlled by CFS. These hyperlinked websites may contain privacy provisions that are different from those provided herein. CFS is not responsible for the collection, use or disclosure of information collected through these websites, and CFS expressly disclaims any and all liability related to such collection, use or disclosure.

OPT OUT POLICY

If you do not want CFS to use or disclose your Information to third parties, you may opt-out by submitting a request to us atpostmaster@cfserv.com. If you opt-out, you may not receive the information you requested from CFS.

SECURITY

This Site has security measures in place to protect against the loss, misuse and alteration of information under our control that is submitted to CFS. However, CFS does not warrant or represent that such security measures will be sufficient, will not be breached, or that your Information may not be disclosed or otherwise accessed in an unauthorized manner. CFS will not be responsible for any actual or consequential damages that result from a lapse in compliance with this Online Privacy Policy as a result of a security breach or malfunction. It is important for Registered Users that have an established account with CFS to protect their password and not share it with others. Certain information may be transmitted to Users by electronic mail. Although it is illegal to intercept or disclose these messages under Federal law, these transmissions are not secure.

AMENDMENTS TO THE ONLINE PRIVACY POLICY

CFS reserves the right to amend this Online Privacy Policy periodically. Use of Information that CFS gathers now is subject to the Online Privacy Policy in effect at the time the Information is used. Any minor amendments made to this Online Privacy Policy will be considered effective immediately after the amendments are posted on the Site. The Online Privacy Policy was last revised on December 17, 2002.

CFS will notify Active Registered Users of material changes to the Online Privacy Policy by sending a notice with monthly statements to the last known postal address of the Active Registered User. An Active Registered User is a Registered User whose account has been active in the last 30 days or who has an outstanding balance (e.g., outstanding insurance claim or cash residual balance). CFS will notify other Users by posting a notice on the Site. Both methods of notice will provide a User the opportunity to opt out of the change if he or she does not want his or her information to be subject to the change.

HOW TO CONTACT CFS

If Users have any questions about the Site or this Online Privacy Policy, please contact us at postmaster@cfserv.com.