SupplyManager℠  Help

Privacy Notice – SupplyManager℠



Effective Date: June 20, 2025

View State Specific Privacy Notice Here

At McKesson Medical-Surgical (“McKesson”, “MMS”, “our”, “us”, or “we”), we value the trust that healthcare customers, payers, providers, pharmacies, patients, governmental entities, manufacturers, vendors, employees, and contractors place in us to use and protect personal information. This Privacy Notice informs you how we will use, share and protect your personal information. When you use SupplyManager or provide personal information, you accept the privacy practices described in this Privacy Notice. Please read this Privacy Notice in full to understand our privacy practices before you use SupplyManager or submit any personal information. You are also encouraged to access our supplemental privacy notice linked above titled, “view state-specific privacy rights here” that is applicable in specific situations.

Scope

This Privacy Notice applies to our use of personal information we collect when your use our site (https://mms.mckesson.com), or in the ordinary course of business. The Privacy Notice does not apply to:

  • Individual health providers and practices who have separate privacy notices or Notice of Privacy Practices.
  • McKesson affiliates and subsidiaries that may have separate websites, subdomains, and applications through other web, mobile, cloud or SaaS platforms which are not subject to this Privacy Notice.
  • McKesson business partners, ad networks and other third parties that may have their own websites and services with separate privacy notices.

We encourage you to read the privacy notices of all websites and applications that you visit so that you understand their privacy practices.

Personal Information We Collect

When you use SupplyManager we may collect personal information about you. The personal information we may collect includes, but is not limited to:

  • Name
  • Date of Birth
  • Licenses and certifications
  • Address
  • Telephone number (office, cell, fax, etc.)
  • Electronic mail address
  • Company Name
  • Website
  • Care Setting
  • Facility Type
  • Health information such as Rx Number, Drug Names, Therapies, Medical Products, and Equipment Used
  • Whether you are a customer
  • Why you choose McKesson
  • Geo-Location/GPS information
  • IP address
  • User’s browser type
  • User’s operating system
  • Professional and employment information such as your title
  • Username and password (to log into SupplyManager)
  • Sensitive personal information, such as your credit card number, social security number, driver’s license number
  • Details of financial transaction (e.g., account balance, payment history, purchase history)
  • Device identification number/serial number (such as for mobile phone, tablet, or computer)
  • Device/user activity (such as Login-Logout info, sites/pages visited, # of visits, click stream, navigation, beacon signal hits, errors, crash rate, or other user activities)
  • Marketing preference such as text message or email notification and frequency
  • Information you provide directly to us:
    • When you use the site,
    • When you use offline features related to site, such as communicating with us by phone, e-mail, or in person.
    • When you interact with us in the ordinary course of business.

We may receive information about you from a data bank or aggregator, business partners, or other businesses and combine it with information we already have about you. Personal information may be combined with information that does not identify you. If we combine information that does not identify you with your personal information, it will be treated as personal information.

Tracking Technologies We Use

We use various technologies to collect personal information including:

  • Web server logs
    • As is true of most websites and applications, we gather certain information automatically and store it in log files. This information may include IP addresses, browser type, internet service provider, referring/exit pages, operating system, date/time stamp and/or clickstream data.
  • Cookies
    • We and our subsidiaries, business partners, marketing partners, affiliates, or other vendors may use cookies. Cookies uniquely identify the device or user account you use for this site. You can control the use of cookies by adjusting your browser preferences at any time. If you reject cookies, you may still use our site; however, rejecting cookies may limit your ability to use some features.
  • Geo-location Services
    • When you allow us to track your location, we may collect information about your location related to our site. We use various technologies to determine location, such as sensor data from your device that may provide information from nearby Wi-Fi access points and cell towers.
  • Other Tracking Technologies
    • We and our subsidiaries, business partners, marketing partners, affiliates, or other service providers may also use local storage (such as HTML5) to collect and store your information and preferences.  

When the tracking information we collect is considered individually identifiable information, the data is treated as Protected Health Information (”PHI”) which is defined in the Health Insurance Portability and Accountability Act (”HIPAA”). We will use and disclosure this information as required by HIPAA’s Privacy and Security Rule.

How We Use the Personal Information Collected

We may use the personal information we collect for purposes such as:

  • Advertising services
  • Customer and troubleshooting support
  • Error detection and debugging
  • Reporting and data analytics services
  • Authenticating you for access to your SupplyManager account
  • Processing your order
  • Customer and troubleshooting support
  • Fraud detection and monitoring services
  • Marketing notices, newsletter, or communications via email.
  • Part of a Corporate Transaction, such as in connection with the sale of part or all our assets or business, the acquisition of part or all of another business or another corporate transaction, including bankruptcy.

We may also use the information collected for the following purposes:

  • Surveys or Contests
    • If you participate in surveys, we will request certain personal information from you. Participation in these surveys or contests is completely voluntary and you have a choice whether to disclose this information. We may use a third-party service provider to conduct these surveys or contests. We will not share the personal information you provide through a contest or survey with other third parties unless we give you prior notice and choice.
  • Advertising
    • We may partner with a third party to manage our advertising. Our third-party partners may use cookies and other technologies to gather information about your activities on this website and other websites to provide you advertising based upon your browsing activities and interests. If you wish to not have this information used for the purpose of serving you interest-based ads, you may opt out via our cookie consent manager, according to the rights associated to your geo location.
  • Newsletters
    • We may use your name and email address to send you our newsletter and will obtain your prior consent when required by law. You may choose to stop receiving our newsletter or marketing emails by following the unsubscribe instructions included in those emails, or by contacting us using the contact information listed below.

How We Share Personal Information Collected

We may provide your personal information to third parties that provide services to help us with our business activities such as reporting or data analytics services. These companies are authorized to use personal information about you only as necessary to provide these services to us.

We may need to share information with other companies, organizations or individuals if we have a good faith belief that access, use, preservation, or disclosure of that information is reasonably necessary to:

  • Meet applicable laws, regulations, legal processes, or enforceable governmental requests
  • Enforce applicable Terms of Service, including investigation of potential violations
  • Detect, prevent, or otherwise address fraud, security or technical issues
  • Protect against harm to the rights, property or safety of our users, McKesson, or the public as required or permitted by law
  • Engage in a merger, acquisition, reorganization, or sale of all or a portion of McKesson assets.

Your Choices

You can limit the personal information we have by choosing not to provide it within SupplyManager or by failing to provide information through any offline features or in the ordinary course of business. Depending on where you live, you may have certain rights with respect to your personal information under applicable data protection laws, which can be viewed HERE.

Access to Personal Information

Should you need to access or amend your information you may email customer support at SupplyManager@McKesson.com or call 1-800-422-0280.

Retention

We will retain your personal information as long as you use SupplyManager and as necessary to comply with our legal obligations, resolve disputes or enforce our agreements.

Health Insurance Portability and Accountability Act (”HIPAA”)

As a key provider of services and technology to the healthcare industry, McKesson has implemented programs to address the privacy and security requirements of HIPAA. To the extent that we are functioning as a HIPAA Covered Entity, a Notice of Privacy Practices will be made available to you. To the extent that we are functioning as a HIPAA Covered Entity, a Notice of Privacy Practices will be made available to you.

Children’s Privacy

We do not knowingly collect of solicit any personal information from children, as defined under applicable law, without verified written parental consent, and we have no actual knowledge of selling such personal information of minors under 18 years of age. If we learn that we have collected personal information from a child, we will promptly take steps to delete that information. If you believe we might have any information from or about a child, please refer to the Contact Information section below.

How We Protect Your Information

We protect the information we collect with proper physical, electronic and administrative safeguards. We only allow our employees, contractors, and agents to access personal information if they need access to perform services on our behalf.  They are also subject to confidentiality obligations.

Any sensitive personal information is transmitted in an encrypted form using SSL encryption. Even though we have security safeguards, it is impossible to guarantee 100% security. If you have any questions about security or believe that your interactions with us are no longer secure (for example, you feel that your account with us has been compromised), you must notify us immediately by email at Privacy@McKesson.com.  

International Use and Cross-Border Data Transfers

If you are visiting our site from outside of the United States, please note that our site is hosted in the United States. Where permitted by applicable law, we may transfer the personal data we collect about you to the United States and other jurisdictions that may not be deemed to provide the same level of data protection as your home country, as necessary for the purposes set out in this notice. 

For individuals in the European Union, European Economic Area, Switzerland, and United Kingdom: We will only transfer personal data to third parties located outside of this region when it has ensured appropriate safeguards for such personal information through use of the standard contractual clauses or other lawful and approved methods. To request a copy of applicable cross-border data transfer agreements, please reach out to us.

Changes to this Privacy Notice

We may update this Privacy Notice from time to time. Updates may describe new features, products or services.  Updates may also describe changes in how we use your personal information or to your controls.  We will not apply changes to this Privacy Notice retroactively to personal information we have previously collected. Since we may make changes, we recommend that you read the current version of this Privacy Notice from time to time. If we change this notice, we will update the “Effective Date” at the beginning of this notice. 

Contact Information

If you have questions or concerns about this Privacy Notice, our information handling practices, or any other aspect of privacy and security of your personal information, please contact customer support at SupplyManager@McKesson.com or 1-800-422-0280.

You may also write to us at:

McKesson Medical-Surgical Inc.
ATTN: Privacy Officer (Privacy Notice, McKesson Medical-Surgical)
9954 Maryland Drive
Richmond, VA 23233