Last updated: July 22, 2026

Chewy, Inc. and its affiliates and subsidiaries (“Chewy” or “we”, “our”, “us”) are the controllers of your personal information and respect your concerns about privacy. This Notice at Collection and Privacy Policy (“Privacy Policy”) explains the type of information we may obtain about individuals who visit our websites (each, a “Site” and collectively, “Sites”) or use our mobile applications (each, an “App” and collectively, “Apps”), which includes features such as chat available through our Sites and Apps. It also explains the type of information we may obtain about individuals who otherwise connect with us offline, such as by phone or by visiting veterinary clinics owned or managed by us (“Chewy Vet Care”) or other in-person operations (“Offline Services”) (collectively with all Sites and Apps, the “Services” or individually, a “Service”). When we use the term “including,” it shall mean “including but not limited to.” In addition, this Privacy Policy sets out how Chewy may use, disclose and protect your personal information and the rights available to you. Please also see our “Accessibility” statement if you have trouble accessing this Privacy Policy because of a disability.

SPECIAL NOTE REGARDING CONTROLLED SUBSTANCE AND DRUG OF CONCERN PRESCRIPTION PILOT (KANSAS AND OHIO RESIDENTS ONLY)

Please note that as part of a limited pilot program, we may collect your date of birth and other personal information when you seek a prescription for certain pet medications classified as controlled substances. To learn more about how we process the personal information collected as part of this program, please also see our Supplemental Privacy Notice for Kansas and Ohio Residents – Controlled Substance and Drug of Concern Prescription Pilot, which can be found here.

TABLE OF CONTENTS

•    INFORMATION WE OBTAIN

•    HOW WE USE THE INFORMATION WE OBTAIN

•    COOKIES AND INTEREST-BASED ADVERTISING

•    INFORMATION WE DISCLOSE

•    YOUR CHOICES

•    DATA RETENTION

•    DATA SECURITY

•    INFORMATION FROM CHILDREN

•    LINKS TO THIRD-PARTY WEBSITES, APPS OR ONLINE SERVICES

•    HOW TO UPDATE YOUR INFORMATION

•    CHANGES TO THIS POLICY

•    CONTACT US

•    CALIFORNIA PRIVACY NOTICE

•    STATE PRIVACY NOTICE FOR RESIDENTS OF COLORADO, CONNECTICUT, DELAWARE, INDIANA, IOWA, KENTUCKY, MARYLAND, MINNESOTA, MONTANA, NEBRASKA, NEW HAMPSHIRE, NEW JERSEY, OREGON, RHODE ISLAND, TENNESSEE, TEXAS, UTAH, VIRGINIA, OKLAHOMA & OTHER STATES THAT MAY HAVE APPLICABLE PRIVACY LAWS

INFORMATION WE OBTAIN

Information you give us. We collect and maintain information that you may provide to us through your use of our Services, including your name, shipping address, billing address, payment card information, telephone number(s), email address(es) and purchase/return/exchange data and pet information. For example, when you:

•    set up your account and/or make online purchases, set up your Chewy Vet Care account registration, or sign-up for a membership program such as Chewy+, you will be asked to provide information necessary to facilitate the transaction, such as contact and payment information;

•    seek assistance from our customer care team or veterinarians, through email, telephone, automated and live chat sessions, SMS or any other channels we may ask you questions about your pet or otherwise collect and record additional information from or about you during those interactions;

•    enter our contests, sweepstakes or other promotions, you may be asked for information necessary to fulfill the promotion;

•    post comments or other content in publicly-available forums on our Services (e.g., product reviews, Q&A forum);

•    visit our affiliated Chewy Vet Care or other in-person operations, any information you provide or post will be available to us as well as potentially to visitors to our Services. This includes any video and audio recordings we conduct at Chewy Vet Care or any in-person operations;

We also may collect information about your pet(s), including name, breed, gender, birthdate, size, weight, prescriptions, veterinary and pet health information (e.g., specific disease or condition information, diagnostic and therapeutic information, and information about recommended prescriptions, treatments, special diets, or exercise regimens), pet insurance information, and photos. Pharmacists subject to the Health Insurance Portability and Accountability Act (“HIPAA”) may also access your information contained in the Prescription Drug Monitoring Program (“PDMP”) electronic database. Please see the Supplemental Privacy Notice for Kansas and Ohio Residents – Controlled Substance and Drug of Concern Prescription Pilot to learn more.

Information we obtain by automated means. We may use technology to automatically obtain other information about you and your devices when you visit our Sites, use our Apps or view our advertisements online. For more information, see the “Cookies and Interest-Based Advertising” section of this Privacy Policy, below. This information helps our Sites and Apps work correctly and supports our marketing and analytics efforts. This information includes, but is not limited to, device type; device settings; Internet browser information; operating system information; Internet Protocol (“IP”) address; mobile device identifiers; software version; phone model; phone operating system; mobile phone carrier information; approximate geolocation data; the date, time and length of your stay on our Sites and Apps; and the referring website, specific pages accessed and other actions you take on our Sites and Apps. Additionally, your chats, phone/video calls and other interactions with our customer care team or veterinarians may be recorded. We may obtain other information from you from time to time by providing appropriate notice.

We also use a third-party session replay service that records users’ interactions with our Sites and Apps, including users’ clicks, mouse movements and scrolls.

Information we obtain from other sources. We may receive information about you from other sources to, for example, help us correct or supplement our records, improve the quality of our Services, prevent or detect fraud, and support our marketing and analytics. Such sources may include information collected from payment processors, data brokers, third-party ad technology companies, veterinarians (such as specific pet health information, diseases or conditions, prescriptions, and treatments), other pet service providers (such as groomers), insurance companies, shelters, and shipping carriers. We may use this information consistent with this Privacy Policy.

Third-Party Web Analytics Services. We use third-party web analytics services on our Sites and Apps, such as Google Analytics. The service providers that administer these services use automated technologies to collect data (such as IP addresses, cookies, and other device identifiers) to evaluate the use of our Services. To learn more about Google Analytics and how to opt out, please visit https: /support.google.com/analytics/answer/181881?hl=en.

Sensitive Personal Information. The following categories of personal information that we process may be considered “sensitive” under US privacy laws: account login information and payment information (e.g., credit card number, debit card number, bank account and other financial information). Where required by law, we will obtain your consent before processing your sensitive personal information. If you have any questions about our handling of sensitive personal information or to withdraw your consent (if we processed your sensitive personal information based on consent under applicable law), please call us at 1-800-672-4399, or email us at service@chewy.com. Please note that our pharmacists may also review HIPAA-covered data that is exempt under applicable privacy laws.

HOW WE USE THE INFORMATION WE OBTAIN

We may use, process and disclose the information we collect about you for our business purposes, including:

•    Fulfilling orders, providing Services, and responding to your questions and requests. We may use your information to provide Services to you or your pet, such as providing veterinary services, making treatment recommendations or treating your pets, and to provide you with transactional assistance, such as fulfilling your order, processing your payments, providing you with customer and technical support including through the automated and live chat features on our Sites and Apps and maintaining transcripts of chat communications, obtaining veterinarian or other pet care services, approvals and assistance, offering new products and services, and ensuring the proper delivery of the products and services you order from us.

•    Creating and maintaining your Chewy account, Chewy Vet Care registration, and communicating with you. We may use your information to create and maintain your Chewy account or maintain your membership in one of our programs such as Chewy+, including, where applicable, by updating your pet profile with information provided by your veterinarian about your pet. In addition, we may use your information to contact you about (1) updates to this Privacy Policy or our Terms of Use; (2) changes to our Services, products and programs; (3) reviews, comments or other feedback you provide about our products or Services; (4) issues with your orders; or (5) product recalls.

•    Improving and personalizing our products and Services. We may use your information to make improvements to our products and Services, as well as personalize our Services to meet your preferences and needs, customize your experience with us and provide you with a consistent experience across the devices you use.

•    Reviewing Site and App trends and customer interests. We may also use your information to analyze the way you use our Sites and Apps and understand your interests, including by combining information we receive from you and your devices with other information about you that we receive from other sources.

•    Sending and improving marketing communications. We may send you communications about promotions or offers via regular mail, email, text messaging or other electronic channels, including ads on social media services. We may use information, including information collected across different online services and from the various devices you may use, for marketing and analytics purposes and to deliver marketing communications based on your behavior and interests.

•    Promoting our products or Services. If you complete a product review, submit feedback or provide an image of your pet(s), we may use your submission for commercial purposes, to promote our products and Services, or to send you personalized content, including pet portraits, thank you notes and holiday cards.

•    Administering promotions, such as sweepstakes and contests. We may use your information to administer sweepstakes, contests, and other promotions if you choose to participate.

•    Detecting and preventing fraud. We may use your information to protect against, identify and prevent fraud and other criminal activity, claims and other liabilities.

•    Approval of prescriptions for controlled substances. If you purchase a pet medication designated as a controlled substance, our pharmacists may use the information you provide to us, as well as any of your information available through relevant PDMPs, to review and authorize such a purchase..

•    Complying with law. We may use your information to comply with and enforce applicable legal requirements (including maintaining pet health records and authorizations), relevant industry standards and our policies, including this Privacy Policy and our Terms of Use.

•    Other uses. We may use your information to operate, evaluate, develop, manage and improve our business (including operating, administering, analyzing, and improving our Services; developing new products and services; managing and evaluating the effectiveness of our communications; conducting market research, aggregating  or anonymizing data, and performing data analytics; facilitating the provision of services to Chewy; and performing accounting, auditing, and other internal functions).

•    We also may use your information in other ways for which we provide specific notice at the time of collection or otherwise with your consent.

COOKIES AND INTEREST-BASED ADVERTISING

Tracking software we use. We and third-party ad technology providers may collect information about you and your devices over time and across different websites and online services through the use of tracking tools, including cookies, web beacons, clear GIFs, pixels, device identifiers and other online information-gathering tools. We may use these automated technologies to collect information about your equipment, browsing actions, and usage patterns. The information we may obtain through these automated technologies is described in the “Information we obtain by automated means” section of this Privacy Policy, above. We may use these automated technologies to:

•    authenticate your account and store your password if you are a registered Chewy account holder and otherwise detect and prevent fraud;

•    monitor the performance of our Services;

•    learn more about the way you interact with our Services and content;

•    personalize your experience on our Sites, Apps and social media services;

•    optimize and tailor our Sites and Apps;

•    make product recommendations, perform analytics, personalization and provide you with relevant advertising content on our Services and third-party websites and online services;

•    measure the effectiveness of the ads we serve you;

•    conduct data analytics and research to help us improve our Services and product offerings; and,

•    better understand our Site visitors and App users and their respective interests.

Interest-based advertising. We and third-party ad technology providers may use cookies to learn about the ads you see and interact with, and other actions you take on our Services. This allows us to provide you with more useful and relevant ads on both Chewy-owned and operated Services and third-party websites, apps and online services. Interest-based ads, also referred to as personalized or targeted ads, are displayed to you based on information collected about your online activities, such as when you browse or purchase a product on our Sites or Apps, or visit third-party websites, apps or online services. In providing interest-based ads, we follow the Self-Regulatory Principles for Online Behavioral Advertising developed by the Digital Advertising Alliance (DAA) (a coalition of marketing and online advertising organizations). See the “Interest-based advertising opt-out” section of this Privacy Policy, below, for information on how you may opt out of such advertising.

Third-party ad technology companies may help us display content tailored to your interests and serve interest-based advertising on our behalf. Additionally, some third-party ad technology companies may provide us with information about you (such as demographic information) from offline and online sources, which we may use to provide you with more relevant and useful advertising.

Advertisers or third-party ad technology companies working on their behalf sometimes use automated technologies to serve the ads that appear on our Sites and Apps. They automatically receive your IP address and other device identifiers when this happens. They may also use cookies to measure the effectiveness of their ads and to personalize ad content.

INFORMATION WE DISCLOSE

We may share information about you with third parties in order to conduct our business, when legally required, or with your consent, including:

•    Affiliates and Subsidiaries. We may share your information with our affiliates and subsidiaries for business, operational, promotional, marketing or other purposes consistent with this Privacy Policy.

•    Service Providers, Contractors and Processors. We may disclose the information we obtain about you to service providers, contractors and processors who perform services on our behalf (e.g., to fulfill orders, deliver packages, send postal mail and/or email, analyze data, provide telehealth services, provide session replay services, provide marketing research and assistance, detect and prevent fraud, and provide customer care including through automated and live chat features). Our service providers, contractors and processors are restricted from using your personal information in any way other than to provide services for us.

•    Business Partners. With your consent and at your direction, we may share your and your pet’s information with our business partners (such as veterinarians, pet insurers, and animal shelters) so they can provide you with the services that you request or that may interest you.

•    Payment Processing Providers and Other Third Parties. We may disclose your information to payment processing providers to facilitate transactions and payment, including as needed to meet regulatory obligations.  We may also disclose your information to other third parties in connection with our marketing efforts to promote our Services, or as otherwise directed by you. Typically, in these situations, the third party agrees to fully comply with applicable privacy laws as an independent controller, and you should review their privacy policy for more information about how they use, disclose and protect your information.  

•    Veterinary Care. If you utilize our related telehealth services, veterinary clinics or Chewy Vet Care clinics or elect to use pharmacy services available through our Services and/or fulfilled by Chewy Pharmacy KY, LLC or Chewy Pharmacy, LLC or other affiliates or subsidiaries, the clinic and/or pharmacy may share your and/or your pet’s information (including information related to pet health condition, diagnosis, and treatment) with veterinary care providers to validate prescriptions or provide other advice. The pharmacy also may share such information with pharmaceutical manufacturers if doing so will help facilitate the treatment of your pet or provide required adverse event information to the manufacturer. We may share your information to applicable PDMPs in order process certain prescriptions. Additionally, if you fulfill prescriptions or purchase products from your veterinarian through the Chewy marketplace Practice Hub or other similar Chewy platforms, information relating to those transactions will be shared with your veterinarian.

•    Business Transfer. We may disclose, transfer, or assign to our affiliates, or to one or more third parties, the information collected about you in the event that we sell or transfer (or contemplate the sale or transfer of) all or a portion of the assets or business of Chewy, including as part of an actual or contemplated merger, acquisition or joint venture. In the unlikely event of our bankruptcy, insolvency, reorganization, receivership, liquidation, divestiture, dissolution or assignment for the benefit of creditors, or the application of laws or equitable principles affecting creditors’ rights generally, we may transfer your personal information to a successor or to a third party that purchases all or a portion of our assets arising from such circumstances. In such transactions, customer information generally is one of the transferred business assets but remains subject to the promises made in any pre- existing Privacy Policy.

•    Protection of Chewy and Others. We may disclose information about you to the government or to other third parties to comply with applicable law and regulations, governmental and quasi-governmental requests, court orders, subpoenas and other legal process. We may also disclose information to third parties if necessary to (i) enforce any of the Terms of Use for our Services or any investigation of potential violations thereof, (ii) detect, prevent, or otherwise address fraud, security or technical issues, (iii) protect against harm to our Services and (iv) protect our rights, property or safety, or the rights, property or safety of our users or others.

YOUR CHOICES

You have certain choices in connection with the personal information we obtain about you, as described further below.

If you are a California consumer, for more information about your privacy rights, please see the section of this Privacy Policy called “California Privacy Notice”, below.

If you are resident of a state that has an effective privacy law, for more information about your privacy rights, please see the section of this Privacy Policy called “State Privacy Notice for Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, Oklahoma and Other States that May Have an Applicable Privacy Law,” below.

Regardless of your state of residency, we provide you with certain other choices to manage how we use your information. To exercise your privacy options such as right to know/access, right to delete, right to correct and other privacy choices, please visit our Privacy Rights Request page. Please note that terms used in the privacy choices may have meanings attributable to them under certain state laws. Certain privacy rights may not be available in certain states. Please see the state specific privacy disclosures for further information.

Cookies: The “Help” feature on most Internet browsers will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether. If you set your browser to limit or remove cookies or otherwise block our use of cookies, some Site features may be unavailable or unable to function properly. Your device may not give you the ability to control cookies. If you wish to block cookies on our App, you may need to delete the App from your mobile device.

Email marketing opt-out: If you wish to opt out of any of our marketing email communications you may contact our customer care representatives at the phone number or email address below, under the “Contact Us” section of this Privacy Policy. You also may follow the “unsubscribe” instructions included in our promotional emails. Please note that removal of user information from our database or “opting out” will not stop marketing or advertising content that is generated for distribution or is otherwise queued for transmission to you prior to the time when we can implement your request. If you unsubscribe from marketing communications, you may continue to receive transactional communications, such as email or text notifications about your order status, recall information and other administrative information. Your information will remain in our database, but will be marked as inactive so you do not receive marketing materials from us.

Pet RX External Messaging Service: Data obtained through the Pet RX SMS messaging program will not be shared with any third parties for their marketing purposes.  All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties for marketing purposes.

Interest-based advertising opt-out: You may opt out of receiving interest-based ads from us by visiting the DAA consumer opt-out page at https: /www.aboutads.info/choices.You also can opt out of receiving interest-based ads from members of the Network Advertising Initiative (NAI) by visiting the NAI consumer opt-out pageat http: /optout.networkadvertising.org/?c=1#!/. Opting out of receiving interest-based ads does not mean that you will no longer receive ads from us, but rather that the ads you receive may not be as relevant to your interests.

Apps opt-out: You may use the DAA’s AppChoices program to opt out of receiving certain in-app interest-based ads (see: https: /youradchoices.com/appchoices). Your mobile device may also provide a device-level advertising preference feature that prevents your device from receiving in-app interest-based ads.

Do-Not-Track and Opt-Out Preference Signals: Some Internet browsers have a “do not track” feature that lets you tell websites that you do not want to have your online activities tracked. Because there is not yet a common understanding of how to interpret the do not track signal, we currently do not respond to the browser do-not-track signals. However, our Sites and Apps do recognize opt-out preference signals, such as the Global Privacy Control (“GPC”), and you can use GPC to signal your opt-out preference. To learn more about the GPC, please visit https: /globalprivacycontrol.org/.

DATA RETENTION

We retain your information for the time period reasonably necessary to achieve the purposes described in this Privacy Policy, or any other notice provided at the time of collection, taking into account applicable statutes of limitation and records retention requirements under applicable law. Where applicable, we retain data pursuant to our internal retention schedule.

DATA SECURITY

We implement reasonable administrative, technical, and physical safeguards designed to protect the information we collect.

INFORMATION FROM CHILDREN

The Sites and Apps are designed for a general audience and are not directed to children under the age of 18. We do not knowingly collect or solicit personal information from children under the age of 18 through our Sites and Apps. If we become aware that we have collected personal information from a child under 18 online without the consent of the child’s parent or guardian, we will use all reasonable efforts to promptly delete such information.

LINKS TO THIRD-PARTY WEBSITES, APPS OR ONLINE SERVICES

As a convenience to our Site visitors and App users, our Services may contain links to third-party websites, apps and online services that we believe offer useful information. This Privacy Policy does not apply to such third-party websites, apps or online services. We suggest reviewing the privacy notices or policies of such third parties or contacting them directly for more information on their privacy practices. Chewy is not responsible for the privacy practices of third-party services, regardless of whether they are linked to or otherwise connected to our Services.

HOW TO UPDATE YOUR INFORMATION

You may correct or update certain information collected about you through our Services by contacting us at the email address noted in the “Contact Us” section of this Privacy Policy, below, or by editing your information and preferences on the “Your Account” and “Profile and Password” pages. Following receipt of a request from you, we will take reasonable steps to update or correct your information.

CHANGES TO THIS POLICY

We may change this Privacy Policy from time to time. If we make any changes, we will change the “Last Updated” date above and post the new Privacy Policy here. We encourage you to review this Privacy Policy regularly for any changes. Where required by law, we will provide notice of material changes. We will notify you by email (sent to the email address specified in your account) or by means of posting a notice on this website prior to the effective date of the change.

CONTACT US

If there are any questions regarding this Privacy Policy or our privacy practices, you may contact us using the information below.

1-800-672-4399

service@chewy.com  

CALIFORNIA PRIVACY NOTICE

This California Privacy Notice (“California Notice”) supplements the Chewy Privacy Policy. It applies solely to California consumers and addresses personal information we collect online and offline. This California Notice does not apply to Chewy personnel or job applicants. We provide separate privacy notices to job applicants and employees.

This California Notice uses certain terms that have the meaning given to them in the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and its implementing regulations (the “CCPA”).

Notice of Collection and Use of Personal Information. We may collect (and may have collected during the 12-month period prior to the last updated date of this California Notice) the following categories of personal information about you:

•    Identifiers: identifiers such as a real name, alias, postal address, unique personal identifier (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number; telephone number and other forms of persistent or probabilistic identifiers), pet name and other identifying information (including pet health and health condition data), online identifier, IP address, email address, account name, and other similar identifiers

•    Additional Data Subject to Cal. Civ. Code § 1798.80: signature, pet insurance policy number, credit card number, debit card number, and other financial information such as bank account numbers, pet medical information, and pet health insurance information

•    Commercial Information: commercial information, including records of personal property, products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies

•    Online Activity: Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications or advertisements

•    Approximate Geolocation Data

•    Sensory Information: audio, electronic, visual, and similar information

•    Inferences: inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, predispositions, behavior, and attitudes.

•    Sensitive personal information: account login information and payment information (e.g., credit card number, debit card number, bank account and other financial information). Please note that our pharmacists may also review HIPAA-covered data that is exempt under the CCPA.

We may use (and may have used during the 12-month period prior to the last updated date of this California Notice) your personal information for the purposes described in our Chewy Privacy Policy and for the following business purposes specified in the CCPA:

•    Performing services, including maintaining or servicing accounts, providing customer care, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytics services, or providing similar services, receiving services or products, making payments or other similar activities

•    Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance

•    Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of your same interaction with us

•    Helping to ensure security and integrity

•    Debugging to identify and repair errors that impair existing intended functionality

•    Undertaking internal research for technological development and demonstration

•    Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us

We do not collect or process sensitive personal information for purposes of inferring characteristics about consumers. We will also limit our processing of such data for permitted purposes under the CCPA (as described in Section 7027(m) of the CCPA regulations).

To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Sources of Personal Information. Currently and during the 12-month period prior to the last updated date of this California Notice, we may have obtained personal information about you from the following categories of sources:

•    Directly from you (or your pet), such as when you make a purchase, bring your pet to receive services from an affiliated veterinarian, Chewy Vet Care or other service provider, sell products or services to us, provide information to us for business and commercial purposes or when you interact with us through our customer care and marketing channels such as telephone conversations, chats, emails, SMS and other interactions

•    Your devices, such as when you visit our Sites or use our Apps

•    Your family or friends, such as when they provide us with your contact information so we can send you gift cards or other information that may interest you

•    Our affiliates and subsidiaries

•    Service providers and contractors who provide services on our behalf

•    Our business partners, such as veterinarians, pharmacies, groomers, insurance companies, and animal shelters

•    Online advertising services and advertising networks

•    Internet service providers

•    Data analytics providers

•    Operating systems and platforms

•    Social networks

•    Data brokers

Sale or Sharing of Personal Information

We may share your personal information with certain third parties (such as online advertising services) or allow them to collect personal information via automated technologies on our Sites and Apps for cross-context behavioral advertising purposes. This kind of sharing may be considered a “sale” or “sharing” under California law. You have the right to opt out of these types of disclosures of your information.

We may sell or share for cross-context behavioral advertising purposes (and may have sold or shared during the 12-month period prior to the last updated date of this California Notice) the following categories of personal information about you to third party online advertising and data analytics services providers and social media networks for advertising, marketing and analytics purposes:

•    Identifiers

•    Commercial Information

•    Online Activity

•    Inferences

You have the right to opt-out of this disclosure of your information, as detailed below. We do not have actual knowledge that we sell or share the personal information of minors under 16 years of age.

Disclosure of Personal Information. During the 12-month period prior to the last updated date of this California Notice, we may have shared your personal information with certain categories of other parties, as described in our Privacy Policy and below, including for the business purposes described above.

Categories of Personal Information Disclosed and Recipients: We describe below the categories of personal information (as defined above) we disclose and the categories of recipients:

•    Our Affiliates and Subsidiaries: Identifiers, Additional Data Subject to Cal. Civ. Code § 1798.80, Commercial Information, Online Activity, Approximate Geolocation Data, Sensory Information, and Inferences;

•    Our Service Providers and Contractors: Identifiers, Additional Data Subject to Cal. Civ. Code § 1798.80, Commercial Information, Online Activity, Approximate Geolocation Data, Sensory Information, and Inferences;

•    Veterinary Care Providers or Pharmaceutical Product Manufacturers: Identifiers, Additional Data Subject to Cal. Civ. Code § 1798.80, Commercial Information, Sensory Information, and Approximate Geolocation Data;

•    Our Business Partners: Identifiers, Additional Data Subject to Cal. Civ. Code § 1798.80, Commercial Information, Online Activity, Approximate Geolocation Data, Sensory Information, and Inferences;

•    Online Advertising Services and Advertising Networks: Identifiers, Commercial Information, Online Activity, Approximate Geolocation Data, and Inferences;

•    Data Analytics Providers: Identifiers, Commercial Information, Online Activity, Approximate Geolocation Data, and Inferences;

•    Government Entities: Identifiers, Additional Data Subject to Cal. Civ. Code § 1798.80, Commercial Information, Online Activity, Approximate Geolocation Data, Sensory Information, and Inferences; and

•    Social Networks: Identifiers, Online Activity, and Approximate Geolocation Data.

California Consumer Privacy Rights. California residents may have certain rights pursuant to the CCPA, as described below.

•    Right to Delete: You have the right to request that we delete certain personal information we collected from you. To exercise your rights, please visit our Privacy Rights Request page or call us at 1-800-672-4399.

•    Right to Know/Access: You have the right to request, twice in a 12-month period, a report that details the categories of personal information collected about you including, where applicable, sensitive personal information, the categories of sources from which the personal information is collected, the business or commercial purposes for collecting, selling, or sharing the personal information, the categories of personal information and service providers, contractors and third parties to whom we disclose personal information, and the specific pieces of personal information collected about you. To exercise your rights, please visit our Privacy Rights Request page or call us at 1-800-672-4399.

•    Limit the Use and Disclosure of Sensitive Personal Information, where applicable: We only process sensitive personal information for permitted and limited purposes under the CCPA. Therefore, there is no need to exercise the right to limit the use and disclosure of sensitive personal information.

•    Right to Correct: You have the right to correct inaccurate personal information we maintain about you. For existing customers, you may log in your account to correct your personal information. For non-customers, please visit our Privacy Rights Request page. You may also call us at 1-800-672-4399.

•    Right to Opt-out of Sale or Sharing of Personal Information: You have the right to opt-out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising purposes. To exercise your rights, please visit our Your Privacy Choices page. Note that you also can use the Global Privacy Control (“GPC”) to signal your opt-out preference. To learn more about the GPC, please visit https: /globalprivacycontrol.org/. You may also call us at 1-800-672-4399.

We will not discriminate against you for exercising any of the rights that are provided to you under CCPA.

Verifying Requests. We have various procedures to verify that you are authorized to exercise your rights under the CCPA. If you have an account with us, we may ask you to verify your identity by requiring you to sign-in to your account or complete a form requesting certain information. If you do not have an account and request access to, correction of or deletion of your personal information, we may require you to provide any of the following information: first and last name, email address, country, street address, city and zip code. You also can designate an authorized agent to make these requests on your behalf, though we will need to verify the authority of such agent pursuant to our procedures. For authorized agents making a request on a consumer’s behalf, download a verification form here to complete and submit the completed form together with the above request. However, authorized agents do not need to complete this form if they provide power of attorney documentation. We may deny the request if the agent’s authority to act on behalf of the consumer is not properly verified. You may submit the form or your power of attorney documentation at service@chewy.com or call us at 1-800-672-4399.

Automated Decision-making Technology (“ADMT”). We do not use ADMT to make decisions that result in the provision or denial of financial or lending services, housing, education enrollment or opportunities, employment or independent contracting opportunities or compensation, or healthcare services.

Shine the Light Request: You also may have the right to request that we provide you with (a) a list of certain categories of personal information we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year and (b) the identity of those third parties. To submit a Shine the Light request, email us at service@chewy.com.

STATE PRIVACY NOTICE FOR RESIDENTS OF COLORADO, CONNECTICUT, DELAWARE, INDIANA, IOWA, KENTUCKY, MARYLAND, MINNESOTA, MONTANA, NEBRASKA, NEW HAMPSHIRE, NEW JERSEY, OREGON, RHODE ISLAND, TENNESSEE, TEXAS, UTAH, VIRGINIA, OKLAHOMA AND OTHER STATES THAT MAY HAVE APPLICABLE PRIVACY LAW

This State Privacy Notice supplements the Chewy Privacy Policy. It applies solely to Colorado, Connecticut, Delaware, Iowa, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia and Oklahoma consumers (and any other states that may have applicable privacy law) and addresses personal information we collect online and offline. This State Privacy Notice does not apply to Chewy personnel or job applicants.

This State Privacy Notice uses certain terms that have the meaning given to them in the applicable laws and implementing regulations in the states listed above.

Categories of Personal Information Collected: We may process the categories of personal information and sensitive personal information listed in the Information We Obtain section of our Privacy Policy.

Purposes for which Personal Information is Collected: We may process the personal information we collect about you for the purposes listed in the How We Use the Information We Obtain section of our Privacy Policy.

Sharing of Personal Information: We may share the following categories of your personal information with the categories of third parties listed in the Information We Disclose section of our Privacy Policy:

•    Contact information and other information about you, your household and your pet (including your name, email address, physical address, shipping address, telephone number) and other demographic information.

•    Internet or other electronic network activity information (including cookies and mobile device IDs, and related browsing information).

•    Commercial information (including products and services purchased, products and services you are considering purchasing that are placed in your virtual shopping cart, information about products that you have returned, product orders you have cancelled, and product reviews).

•    Location information (approximate geolocation).

•    Transactional information such as information you provide to us via customer care calls, emails, SMS and chats. This information is recorded and processed consistent with our Privacy Notice.

•    Your pet information such as information you provided to us while filling a pharmacy prescription, pet conditions, pet health information, insurance information and other such information when you interact with us or our affiliates.

Processing Personal Information for Sale and Targeted Advertising

•    We may share certain of your personal information, i.e., identifiers, commercial information, online activity and inferences, with our social media, data analytics, online advertising services, advertising networks and similar third parties for the purposes of targeted advertising, analytics and marketing. This may be considered a “sale” under certain state laws.

•    We will not discriminate against you for exercising any of the rights that are provided to you under applicable state privacy laws.

•    We do not conduct profiling in furtherance of decisions that produce legal or similarly significant affects for consumers. As such, opt out and other rights related to profiling in furtherance of decisions that produce legal or similarly significant effects are not offered.

•    To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Consumer Privacy Rights. You may have certain rights pursuant to the applicable state privacy laws, as described below:

•    Right to Delete: You have the right to request that we delete your personal information in accordance with applicable state privacy law. To exercise your rights, please see the “Exercise Your Rights” section. Your deletion request will make it impossible for Chewy to provide benefits under our membership programs such as free shipping and other benefits.

•    Right to Confirm, Know/Access and Portability: You have the right to request confirmation of whether we have processed your personal information and to access that information in a portable, and to the extent technically feasible, readily usable electronic format that allows you to transmit the data to another controller. To exercise your rights, please see the “Exercise Your Rights” section. Access responses may include categories of third parties to whom we have disclosed personal information, where required by law. Residents of Connecticut, Oregon and Minnesota may receive a list of specific third parties to whom we may have disclosed or sold personal information, subject to certain conditions.  

•    Right to Correct: You may have the right to correct inaccurate personal information we hold about you. For existing customers, you may log in your account to correct your personal information. For non-customers, please see the “Exercise Your Rights” section.

•    Right to Opt Out of Processing for Purposes of Sale and Targeted Advertising: You have the right to opt-out of sharing information with third parties for the purposes of sale and targeted advertising. To exercise your rights, please see the “Exercise Your Rights” section. Depending on applicable state law, you also can use the Global Privacy Control (“GPC”) to signal your opt-out preference. To learn more about the GPC, please visit https://globalprivacycountrol.org.

Verifying Requests. Where authentication is permitted or required for a rights request, we have various procedures to verify that you are authorized to exercise your rights under applicable state laws. If you have an account with us, we may ask you to verify your identity by requiring you to sign-in to your account or complete a form requesting certain information. If you do not have an account and request access to, correction of or deletion of your personal information, we may require you to provide any of the following information: first and last name, email address, country, street address, city and zip code. Depending on applicable state law, you may also be able to designate an authorized agent (including guardian or conservator) to make these requests on your behalf, though we will need to verify the authority of such agent pursuant to our procedures. For authorized agents making a request on a consumer’s behalf, download a verification form here to complete and submit the completed form together with the above request. We may deny the request if the agent’s authority to act on behalf of the consumer is not properly verified.

Non-Discrimination. You have the right to not receive discriminatory treatment by us.

Exercise Your Rights:

For customers: For customers with a Chewy account, you may exercise your rights by using our online portal or by calling 1-800-672-4399. You may also email us at service@chewy.com.

For non-Chewy customers: For non-customers, you may exercise your applicable rights visiting our Privacy Rights Request page or by calling 1-800-672-4399. You may also email us at service@chewy.com.

California residents only: If you are associated with a business that is providing services and products to us, you may email us at service@chewy.com or call us at 1-800-672- 4399.

For Minnesota, Oregon and Connecticut Residents only: You also have the right to receive a list of specific third parties to whom we have disclosed or sold your personal information, if we maintain that information in a format specific to you. If we do not maintain that information specific to you, we will provide a list of specific third parties to whom we have disclosed or sold any consumers’ personal information. You may email us at service@chewy.com or call us at 1-800-672-4399 to exercise this right.

For Texas Residents only: We do not sell your sensitive or biometric personal information.

You may appeal our decision with respect to a request you have submitted by using the unique link to the Privacy Rights Request Portal that was provided to you when you submitted your initial rights request, by calling us at 1-800-672-4399, or by emailing us at service@chewy.com.