Last updated: October 8, 2024

Chewy, Inc. and its affiliates and subsidiaries (“Chewy” or “we”, “our”, “us”) respect your concerns about privacy. This Privacy Policy (“Privacy Policy”) explains the type of information we may obtain from individuals who visit our websites (each, a “Site” and collectively, “Sites”) or use our mobile applications (each, an “App” and collectively, “Apps”), which includes tools such as chat available through our Sites and Apps. It also explains the type of information we may obtain from individuals who otherwise connect with us offline, such as by phone or by visiting veterinary clinics owned or managed by us (“Chewy Vet Care”) or other in-person operations (“Offline Services”), and collectively with all Sites and Apps, the “Services” or individually, a “Service”). When we use the term “including”, it shall mean “including but not limited to”. In addition, this Privacy Policy sets out how Chewy may use, disclose and protect your personal information.

• INFORMATION WE OBTAIN

• HOW WE USE THE INFORMATION WE OBTAIN

• COOKIES AND INTEREST-BASED ADVERTISING

• INFORMATION WE DISCLOSE

• YOUR CHOICES

• DATA RETENTION

• DATA SECURITY

• INFORMATION FROM CHILDREN

• LINKS TO THIRD-PARTY WEBSITES, APPS OR ONLINE SERVICES

• HOW TO UPDATE YOUR INFORMATION

• CHANGES TO THIS POLICY

• CONTACT US

• CALIFORNIA PRIVACY NOTICE

• STATE PRIVACY NOTICE FOR RESIDENTS OF COLORADO, CONNECTICUT, DELAWARE, IOWA, INDIANA, MONTANA, NEW JERSEY, OREGON, TENNESSEE, TEXAS, UTAH, VIRGINIA & OTHER STATES THAT MAY HAVE APPLICABLE PRIVACY LAWS

INFORMATION WE OBTAIN

Information you give us. We collect and maintain information that you may provide to us through your use of our Services, including your name, shipping address, billing address, payment card information, telephone number(s), email address(es) and purchase/return/exchange data and pet information. For example, when you:

• set up your account and/or make online purchases, set up your Chewy Vet Care account registration, sign-up for a membership program such as Chewy+, you will be asked to provide information necessary to facilitate the transaction, such as contact and payment information);

• seek assistance from our customer service team or veterinarians, through email, telephone, automated and live chat sessions, SMS or any other channels we may ask you questions about your pet or otherwise collect and record additional information from or about you during those interactions;

• enter our contests, sweepstakes or other promotions, you may be asked for information necessary to fulfill the promotion;

• post comments or other content in publicly-available forums on our Services (eg., Product reviews, Q&A forum);

• visit our affiliated Chewy Vet Care or other in-person operations, any information you provide or post will be available to us as well as potentially to visitors to our Services. This includes any video and audio recordings we conduct at Chewy Vet Care or any in-person operations;

We also may collect information about your pet(s), including name, breed, gender, birthdate, size, weight, prescriptions, veterinary and pet health information (including specific disease or condition information, diagnostic and therapeutic information, and information about recommended prescriptions, treatments, special diets, or exercise regimens), pet insurance information, and photos.

Information we obtain by automated means. We may use technology to automatically obtain other information about you and your devices when you visit our Sites, use our Apps or view our advertisements online. For more information, see the “Cookies and Interest-Based Advertising” section of this Privacy Policy, below. This information helps our Sites and Apps work correctly and supports our marketing and analytics efforts. This information includes, but is not limited to, device type; device settings; Internet browser information; operating system information; IP address; mobile device identifiers; software version; phone model; phone operating system; mobile phone carrier information; precise geolocation data; the date, time and length of your stay on our Sites and Apps; and the referring website, specific pages accessed and other actions you take on our Sites and Apps. Additionally, your chats, phone/video calls and other interactions with our customer service team or veterinarians may be recorded. We may obtain other information from you from time to time by providing appropriate notice.

We also use a third-party session replay service that records users’ interactions with our Sites and Apps, including users’ clicks, mouse movements and scrolls.

Information we obtain from other sources. We may receive information about you from other sources to, for example, help us correct or supplement our records, improve the quality of our Services, prevent or detect fraud and support our marketing and analytics. Such sources may include information collected from payment processors, data brokers, third-party ad technology companies, veterinarians (such as specific pet health information, diseases or conditions, prescriptions, treatments), other pet service providers (such as groomers), insurance companies, shelters, and shipping carriers. We may use this information consistent with this Privacy Policy.

Third-Party Web Analytics Services. We use third-party web analytics services on our Sites and Apps, such as Google Analytics. The service providers that administer these services use automated technologies to collect data (such as IP addresses, cookies, and other device identifiers) to evaluate the use of our Services. To learn more about Google Analytics and how to opt out, please visit Google Analytics.

HOW WE USE THE INFORMATION WE OBTAIN

We may use, process and disclose the information we collect about you for our business purposes, including:

Fulfilling orders, providing Services, and responding to your questions and requests. We may use your information to provide Services to you or your pet, such as providing veterinary services, making treatment recommendations or treating your pets, and to provide you with transactional assistance, such as fulfilling your order, processing your payments, providing you with customer and technical support including through the automated and live chat features on our Sites and Apps and maintaining transcripts of chat communications, obtaining veterinarian or other pet care services, approvals and assistance, offering new products and services, and ensuring the proper delivery of the products and services you order from us.

Creating and maintaining your Chewy account, Chewy Vet Care registration, and communicating with you. We may use your information to create and maintain your Chewy account or maintaining your membership in one of our programs such as Chewy+, including, where applicable, by updating your pet profile with information provided by your veterinarian about your pet. In addition, we may use your information to contact you about (1) updates to this Privacy Policy or our Terms of Use; (2) changes to our Services, products and programs; (3) reviews, comments or other feedback you provide about our products or Services; (4) issues with your orders; or (5) product recalls.

Improving and personalizing our products and Services. We may use your information to make improvements to our products and Services, as well as personalize our Services to meet your preferences and needs, customize your experience with us and provide you with a consistent experience across the devices you use.

Reviewing Site and App trends and customer interests. We may also use your information to analyze the way you use our Sites and Apps and understand your interests, including by combining information we receive from you and your devices with other information about you that we receive from other sources.

Sending and improving marketing communications. We may send you communications about promotions or offers via regular mail, email, text messaging or other electronic channels, including ads on Social Media Services. We may use information, including information collected across different online services and from the various devices you may use, for marketing and analytics purposes and to deliver marketing communications based on your behavior and interests.

Promoting our products or Services. If you complete a product review, submit feedback or provide an image of your pet(s), we may use your submission for commercial purposes, to promote our products and Services, or to send you personalized content, including pet portraits, thank you notes and holiday cards.

Administering promotions, such as sweepstakes and contests. We may use your information to administer sweepstakes, contests, and other promotions if you choose to participate.

Detecting and preventing fraud. We may use your information to protect against, identify and prevent fraud and other criminal activity, claims and other liabilities.

Complying with law. We may use your information to comply with and enforce applicable legal requirements (including to maintain pet health records and authorizations), relevant industry standards and our policies, including this Privacy Policy and our Terms of Use.

Other uses. We may use your information to operate, evaluate, develop, manage and improve our business (including operating, administering, analyzing, and improving our Services; developing new products and services; managing and evaluating the effectiveness of our communications; conducting market research, aggregating and anonymizing data, and performing data analytics; facilitating the provision of services to Chewy; and performing accounting, auditing, and other internal functions).

We also may use your information in other ways for which we provide specific notice at the time of collection or otherwise with your consent.

COOKIES AND INTEREST-BASED ADVERTISING

Tracking tools we use. We and third-party ad technology providers may collect information about you and your devices over time and across different websites and online services through the use of tracking tools, including cookies, web beacons, clear GIFs, pixels, device identifiers and other online information-gathering tools. We may use these automated technologies to collect information about your equipment, browsing actions, and usage patterns. The information we may obtain through these automated technologies is described in the “Information we obtain by automated means” section of this Privacy Policy, above. We may use these automated technologies to:

• authenticate your account and store your password if you are a registered Chewy account holder and otherwise detect and prevent fraud;

• monitor the performance of our Services;

• learn more about the way you interact with our Services and content;

• personalize your experience on our Sites, Apps and Social Media Services;

• optimize and tailor our Sites and Apps;

• make product recommendations, perform analytics, personalization and provide you with relevant advertising content on our Services and third-party websites and online services;

• measure the effectiveness of the ads we serve you;

• conduct data analytics and research to help us improve our Services and product offerings; and,

• better understand our Site visitors and App users and their respective interests.

Interest-based advertising. We and third-party ad technology providers may use cookies to learn about the ads you see and interact with, and other actions you take on our Services. This allows us to provide you with more useful and relevant ads on both Chewy-owned and operated Services and third-party websites, apps and online services. Interest-based ads, also referred to as personalized or targeted ads, are displayed to you based on information collected about your online activities, such as when you browse or purchase a product on our Sites or Apps, or visit third-party websites, apps or online services. In providing interest-based ads, we follow the Self-Regulatory Principles for Online Behavioral Advertising developed by the Digital Advertising Alliance (DAA) (a coalition of marketing and online advertising organizations). See the “Interest-based advertising opt-out” section of this Privacy Policy, below, for information on how you may opt out of such advertising.

Third-party ad technology companies may help us display content tailored to your interests and serve interest-based advertising on our behalf. Additionally, some third-party ad technology companies may provide us with information about you (such as demographic information) from offline and online sources, which we may use to provide you with more relevant and useful advertising.

Advertisers or third-party ad technology companies working on their behalf sometimes use automated technologies to serve the ads that appear on our Sites and Apps. They automatically receive your IP address and other device identifiers when this happens. They may also use cookies to measure the effectiveness of their ads and to personalize ad content.

INFORMATION WE DISCLOSE

We may share information about you with third parties in order to conduct our business, when legally required, or with your consent, including:

Affiliates and Subsidiaries. We may share your information with our affiliates and subsidiaries for business, operational, promotional, marketing or other purposes consistent with this Privacy Policy.

Service Providers. We may disclose the information we obtain about you to service providers who perform services on our behalf (e.g., to fulfill orders, deliver packages, send postal mail and/or email, analyze data, provide telehealth services, provide session replay services, provide marketing research and assistance, process credit card payments, detect and prevent fraud, and provide customer service including through automated and live chat features). Our service providers are restricted from using your personal information in any way other than to provide services for us.

Business Partners. With your consent and at your direction, we may share your and your pet’s information with our business partners (such as veterinarians, pet insurers, and animal shelters) so they can provide you with the services that you request or that may interest you.

Other Third Parties. We may disclose your information to other third parties in connection with our marketing efforts to promote our Services, or as otherwise directed by you.

Veterinary Care Providers or Pharmaceutical Product Manufacturers. If you utilize our related veterinary clinics or Chewy Vet Care clinics or elect to use pharmacy services available through our Services and/or fulfilled by Chewy Pharmacy KY, LLC or Chewy Pharmacy, LLC or other affiliates or subsidiaries, the clinic and/or pharmacy may share your and/or your pet’s information (including information related to pet health condition, diagnosis, and treatment) with veterinary care providers to validate prescriptions or provide other advice. The pharmacy also may share such information with pharmaceutical manufacturers if doing so will help facilitate the treatment of your pet or provide required adverse event information to the manufacturer. Additionally, if you fulfill prescriptions or purchase products from your veterinarian through the Chewy marketplace Practice Hub or other similar Chewy platforms, information relating to those transactions will be shared with your veterinarian.

Business Transfer. We may disclose, transfer, or assign to our affiliates, or to one or more third parties, the information collected about you in the event that we sell or transfer (or contemplate the sale or transfer of) all or a portion of the assets or business of Chewy, including as part of an actual or contemplated merger, acquisition or joint venture. In the unlikely event of our bankruptcy, insolvency, reorganization, receivership, liquidation, divestiture, dissolution or assignment for the benefit of creditors, or the application of laws or equitable principles affecting creditors’ rights generally, we may transfer your personal information to a successor or to a third party that purchases our assets arising from such circumstances. In such transactions, customer information generally is one of the transferred business assets but remains subject to the promises made in any pre-existing Privacy Policy.

Protection of Chewy and Others. We may disclose information about you to the government or to other third parties to comply with applicable law and regulations, governmental and quasi-governmental requests, court orders, subpoenas and other legal process. We may also disclose information to third parties if necessary to (i) enforce any of the Terms of Use for our Services or any investigation of potential violations thereof, (ii) detect, prevent, or otherwise address fraud, security or technical issues, (iii) protect against harm to our Services and (iv) protect our rights, property or safety, or the rights, property or safety of our users or others.

YOUR CHOICES

You have certain choices in connection with the personal information we obtain about you, as described further below.

If you are a California consumer, for more information about your privacy rights, please see the section of this Privacy Policy called “California Privacy Notice”, below.

If you are resident of a state that has an effective privacy law, for more information about your privacy rights, please see the section of this Privacy Policy called “State Privacy Notice for Residents Of Colorado, Connecticut, Delaware, Iowa, Indiana, Montana, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia and other states that may have applicable privacy law”, below.

Regardless of your state of residency, we provide you with certain other choices to manage how we use your information. To exercise your privacy options such as right to know/access, right to delete, right to correct and other privacy choices, please click here. Please note that terms used in the privacy choices may have meaning attributable to them under certain state laws. Certain privacy rights may not be available in certain states. Please see the state specific privacy disclosures for further information.

Cookies: The “Help” feature on most Internet browsers will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether. If you set your browser to limit or remove cookies or otherwise block our use of cookies, some Site features may be unavailable or unable to function properly. Your device may not give you the ability to control cookies. If you wish to block cookies on our App, you may need to delete the App from your mobile device.

Email marketing opt-out: If you wish to opt out of any of our marketing email communications you may contact our customer service representatives at the phone number or email address below, under the “Contact Us” section of this Privacy Policy. You also may follow the “unsubscribe” instructions included in our promotional emails. Please note that removal of user information from our database or “opting out” will not stop marketing or advertising content that is generated for distribution or is otherwise queued for transmission to you prior to the time when we can implement your request. If you unsubscribe from marketing communications, you may continue to receive transactional communications, such as email or text notifications about your order status, recall information and other administrative information. Your information will remain in our database, but will be marked as inactive so you do not receive marketing materials from us.

Interest-based advertising opt-out: You may opt out of receiving interest-based ads from us by visiting the DAA consumer opt-out page at https://www.aboutads.info/choices. You also can opt out of receiving interest-based ads from members of the Network Advertising Initiative (NAI) by visiting the NAI consumer opt-out page at http://optout.networkadvertising.org/?c=1#!/. Opting out of receiving interest-based ads does not mean that you will no longer receive ads from us, but rather that the ads you receive may not be as relevant to your interests.

Apps opt-out: You may use the DAA’s AppChoices program to opt out of receiving certain in-app interest-based ads (see: https://youradchoices.com/appchoices). Your mobile device may also provide a device-level advertising preference feature that prevents your device from receiving in-app interest-based ads.

Do-Not-Track: Some Internet browsers have a “do not track” feature that lets you tell websites that you do not want to have your online activities tracked. Our Sites and Apps do not support “do not track” preferences that may be available in your browser and are not capable of satisfying the preference you set.

DATA RETENTION

We retain your information for the time period reasonably necessary to achieve the purposes described in this Privacy Policy, or any other notice provided at the time of collection, taking into account applicable statutes of limitation and records retention requirements under applicable law.

DATA SECURITY

We implement reasonable administrative, technical, and physical safeguards designed to protect the information we collect.

INFORMATION FROM CHILDREN

The Sites and Apps are designed for a general audience and are not directed to children under the age of 13. We do not knowingly collect or solicit personal information from children under the age of 13 through our Sites and Apps. If we become aware that we have collected personal information from a child under 13 online without the consent of the child’s parent or guardian, we will use all reasonable efforts to promptly delete such information.

LINKS TO THIRD-PARTY WEBSITES, APPS OR ONLINE SERVICES

As a convenience to our Site visitors and App users, our Services may contain links to third-party websites, apps and online services that we believe offer useful information. This Privacy Policy does not apply to such third-party websites, apps or online services. We suggest reviewing the privacy notices or policies of such third parties or contacting them directly for more information on their privacy practices. Chewy is not responsible for the privacy practices of third-party services, regardless of whether they are linked to or otherwise connected to our Services.

HOW TO UPDATE YOUR INFORMATION

You may correct or update certain information collected about you through our Services by contacting us at the email address noted in the “Contact Us” section of this Privacy Policy, below, or by editing your information and preferences on the “Your Account” and “Profile and Password” pages. Following receipt of a request from you, we will take reasonable steps to update or correct your information.

CHANGES TO THIS POLICY

We reserve the right, at our discretion, to modify our privacy practices and update and make changes to this Privacy Policy at any time and without prior notice. If we make any changes, we will change the “Last Updated” date above and post the new Privacy Policy here: https://www.chewy.com/app/content/privacy. You should consult this Privacy Policy regularly for any changes. If we make material changes, we will notify you by email (sent to the email address specified in your account) or by means of posting a notice on this website prior to the effective date of the change.

CONTACT US

If there are any questions regarding this Privacy Policy or our privacy practices, you may contact us using the information below.

1-800-672-4399

service@chewy.com

CALIFORNIA PRIVACY NOTICE

Last Updated: October 8, 2024

This California Privacy Notice (“California Notice”) supplements the Chewy Privacy Policy. It applies solely to California consumers and addresses personal information we collect online and offline. This California Notice does not apply to Chewy personnel or job applicants.

This California Notice uses certain terms that have the meaning given to them in the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and its implementing regulations (the “CCPA/CPRA”).

Notice of Collection and Use of Personal Information. We may collect (and may have collected during the 12-month period prior to the last updated date of this California Notice) the following categories of personal information about you:

• Identifiers: identifiers such as a real name, alias, postal address, unique personal identifier (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number; telephone number and other forms of persistent or probabilistic identifiers), pet name and other identifying information (including pet health and health condition data), online identifier, Internet protocol address, email address, account name, and other similar identifiers

• Additional Data Subject to Cal. Civ. Code § 1798.80: signature, pet insurance policy number, credit card number, debit card number, and other financial information such as bank account numbers, pet medical information, and pet health insurance information

• Protected Classifications: characteristics of protected classifications under California or federal law, such as race, color, national origin, religion, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, genetic information, disability, citizenship status, and military and veteran status

• Commercial Information: commercial information, including records of personal property, products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies

• Online Activity: Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications or advertisements

• Geolocation Data

• Sensory Information: audio, electronic, visual, and similar information

• Inferences: inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, predispositions, behavior, and attitudes.

We may use (and may have used during the 12-month period prior to the last updated date of this California Notice) your personal information for the purposes described in our Chewy Privacy Policy and for the following business purposes specified in the CCPA:

• Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytics services, or providing similar services, receiving services or products, making payments or other similar activities

• Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance

• Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of your same interaction with us

• Helping to ensure security and integrity

• Debugging to identify and repair errors that impair existing intended functionality

• Undertaking internal research for technological development and demonstration

• Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us

We do not collect or process sensitive personal information for purposes of inferring characteristics about consumers.

To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Sources of Personal Information. During the 12-month period prior to the last updated date of this California Notice, we may have obtained personal information about you from the following categories of sources:

• Directly from you (or your pet), such as when you make a purchase, bring your pet to receive services from an affiliated veterinarian, Chewy Vet Care or other service provider, sell products or services to us, provide information to us for business and commercial purposes or when you interact with us through our customer service and marketing channels such as telephone conversations, chats, emails, SMS and other interactions

• Your devices, such as when you visit our Sites or use our Apps

• Your family or friends, such as when they provide us with your contact information so we can send you gift cards or other information that may interest you

• Our affiliates and subsidiaries• Vendors who provide services on our behalf

• Our business partners, such as veterinarians, pharmacies, groomers, insurance companies, and animal shelters

• Online advertising services and advertising networks

• Internet service providers

• Data analytics providers

• Operating systems and platforms

• Social networks

• Data brokers

Sale or Sharing of Personal Information

We do not sell your personal information in exchange for monetary compensation. We may share your personal information with certain third parties (such as online advertising services) or allow them to collect personal information via automated technologies on our Sites and Apps for cross-context behavioral advertising purposes. This kind of sharing may be considered a “sale” or “sharing” under California law when the personal information is exchanged for non-monetary consideration. You have the right to opt out of these types of disclosures of your information.

We may sell or share for cross-context behavioral advertising purposes (and may have sold or shared during the 12-month period prior to the last updated date of this California Notice) the following categories of personal information about you to online advertising and data analytics services and social media networks:

• Identifiers

• Commercial Information

• Online Activity

• Inferences

You have the right to opt-out of this disclosure of your information, as detailed below. We do not have actual knowledge that we sell or share the personal information of minors under 16 years of age.

Disclosure of Personal Information. During the 12-month period prior to the last updated date of this California Notice, we may have shared your personal information with certain categories of third parties, including as described in our Privacy Policy and below, including for the business purposes described above.

Category of Third Party Category of Personal InformationOur Affiliates and Subsidiaries · Identifiers· Additional Data Subject to Cal. Civ. Code § 1798.80· Commercial Information· Online Activity· Geolocation Data· Sensory Information· InferencesOur Service Providers · Identifiers· Additional Data Subject to Cal. Civ. Code § 1798.80· Commercial Information· Online Activity· Geolocation Data· Sensory Information· InferencesVeterinary Care Providers or Pharmaceutical Product Manufacturers · Identifiers· Additional Data Subject to Cal. Civ. Code § 1798.80· Commercial Information· Sensory Information· Geolocation DataOur Business Partners · Identifiers· Additional Data Subject to Cal. Civ. Code § 1798.80· Commercial Information· Online Activity· Geolocation Data· Sensory Information· InferencesOnline Advertising Services and Advertising Networks · Identifiers· Commercial Information· Online Activity· Geolocation Data· InferencesData Analytics Providers · Identifiers· Commercial Information· Online Activity· Geolocation Data· InferencesGovernment Entities · Identifiers· Additional Data Subject to Cal. Civ. Code § 1798.80· Commercial Information· Online Activity· Geolocation Data· Sensory Information· InferencesSocial Networks · Identifiers· Online Activity· Geolocation Data

California Consumer Privacy Rights. California residents may have certain rights pursuant to the CCPA, as described below.

• Right to Delete: You have the right to request that we delete certain personal information we collected from you. To exercise your rights, please see the “Exercise Your Rights” section.

• Right to Know: You have the right to request, twice in a 12-month period, a report that details the categories of personal information collected about you, the categories of sources from which the personal information is collected, the purposes for collecting the personal information, the categories of personal information that we disclose for a business purpose, sell or share and the categories of third parties with whom the information is shared, and the specific pieces of personal information collected about you. To exercise your rights, please see the “Exercise Your Rights” section.

• Shine the Light Request: You also may have the right to request that we provide you with (a) a list of certain categories of personal information we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year and (b) the identity of those third parties. To submit a Shine the Light request, email us at service@chewy.com.

• Right to Correct: You have the right to correct inaccurate personal information we hold about you. For existing customers, you may log in your account to correct your personal information. For non-customers, please see the “Exercise Your Rights” section.

• Right to opt-out of Sale or Sharing of Personal Information: You have the right to opt-out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising purposes. To exercise your rights, please see the “Exercise Your Rights” section. Note that you also can use the Global Privacy Control (“GPC”) to signal your opt-out preference. To learn more about the GPC, please visit https://globalprivacycontrol.org/. If you delete cookies or reset your device, you may need to set your preference again to ensure we continue to honor your preferred choice.

We will not discriminate against you for exercising any of the rights that are provided to you under CCPA/CPRA.

Verifying Requests. We have various procedures to verify that you are authorized to exercise your rights under the CCPA/CPRA. If you have an account with us, we may ask you to verify your identity by requiring you to sign-in to your account or complete a form requesting certain information. If you do not have an account and request access to, correction of or deletion of your personal information, we may require you to provide any of the following information: first and last name, email address, country, street address, city and zip code. You also can designate an authorized agent to make these requests on your behalf, though we will need to verify the authority of such agent pursuant to our procedures. For authorized agents making a request on a consumer’s behalf, download a verification form here. to complete and submit the completed form together with the above request. An authorized agent’s request will be denied without this form properly submitted.

Additional Information. We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. For example, we may retain personal information as permitted by law, such as for tax or other record keeping purposes and to process transactions and facilitate customer requests. If you choose to exercise any of your rights under the CCPA/CPRA, you have the right to not receive discriminatory treatment by us, though we may not be able to provide some services to you without such information. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.

STATE PRIVACY NOTICE FOR RESIDENTS OF COLORADO, CONNECTICUT, DELAWARE, IOWA, INDIANA, MONTANA, NEW JERSEY, OREGON, TENNESSEE, TEXAS, UTAH, VIRGINIA, AND OTHER STATES THAT MAY HAVE APPLICABLE PRIVACY LAW

Last updated: [October 8, 2024]

This State Privacy Notice supplements the Chewy Privacy Policy. It applies solely to Colorado, Connecticut, Delaware, Iowa, Indiana, Montana, New Jersey, Oregon, Tennessee, Texas, Utah and Virginia consumers (and any other states that may have applicable privacy law) and addresses personal information we collect online and offline. This State Privacy Notice does not apply to Chewy personnel or job applicants.

This State Privacy Notice uses certain terms that have the meaning given to them in the applicable laws and implementing regulations in the states listed above.

Categories of Personal Information Collected:

We may process the categories of personal information listed in the Information We Obtain section of our Privacy Policy.

Purposes for which Personal Information is collected: We may process the personal information we collect about you for the purposes listed in the How We Use the Information We Obtain section of our Privacy Policy. Sharing of Personal Information:

• We may share the following categories of your personal information with the categories of third parties listed in the Information We Disclose section of our Privacy Policy:

• Contact information and other information about you, your household and your pet (including your name, email address, physical address, shipping address, telephone number) and other demographic information.
• Internet or other electronic network activity information (including cookies and mobile device IDs, and related browsing information).
• Commercial information (including products and services purchased, products and services you are considering purchasing that are placed in your virtual shopping cart, information about products that you have returned, product orders you have cancelled, and product reviews).
• Location information (including precise geolocation).
• Transactional information such as information you provide to us via customer service calls, emails, SMS and chats. This information is recorded and processed consistent with our Privacy Notice.
• Your pet information such as information you provided to us while filling a pharmacy prescription, pet conditions, pet health information, insurance information and other such information when you interact with us or our affiliates.

Processing Personal Information for Sale and Targeted Advertising

• We may share certain of your personal information with our social media, data analytics, online advertising services, advertising networks and similar third parties for the purposes of targeted advertising and marketing.

• We do not sell your personal information in exchange for monetary consideration. We may share your personal information with certain third parties as described above, which may be considered a “sale” under certain state laws when the personal information is exchanged for non-monetary consideration.

• We will not discriminate against you for exercising any of the rights that are provided to you under applicable state privacy laws.• We do not conduct profiling in furtherance of decisions that produce legal or similarly significant affects for consumers.

• To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Consumer Privacy Rights. You may have certain rights pursuant to the applicable state laws, as described below:

• Right to Delete: You have the right to request that we delete your personal information in accordance with applicable state law. To exercise your rights, please see the “Exercise Your Rights” section. Your deletion request will make it impossible for Chewy to provide benefits under our membership programs such as free shipping and other benefits.

• Right to Access: You have the right to request confirmation of whether we have processed your personal information and to access that information in a portable, and to the extent technically feasible, readily usable electronic format. To exercise your rights, please see the “Exercise Your Rights” section. Starting on July 1 2024, residents of Oregon may receive list of third parties where may have disclosed personal data, subject to certain conditions.

• Right to Correct: You may have the right to correct inaccurate personal information we hold about you. For existing customers, you may log in your account to correct your personal information. For non-customers, please see the “Exercise Your Rights” section.

• Right to Opt Out of Processing for Purposes of Sale and Targeted Advertising: You have the right to opt-out of sharing information with third parties for the purposes of sale and targeted advertising. To exercise your rights, please see the “Exercise Your Rights” section. Depending on applicable state law, you also can use the Global Privacy Control (“GPC”) to signal your opt-out preference. To learn more about the GPC, please visit https://globalprivacycontrol.org/. If you delete cookies or reset your device, you may need to set your preference again to ensure we continue to honor your preferred choice.

Verifying Requests. We have various procedures to verify that you are authorized to exercise your rights under applicable state laws. If you have an account with us, we may ask you to verify your identity by requiring you to sign-in to your account or complete a form requesting certain information. If you do not have an account and request access to, correction of or deletion of your personal information, we may require you to provide any of the following information: first and last name, email address, country, street address, city and zip code. Depending on applicable state law, you may also be able to designate an authorized agent to make these requests on your behalf, though we will need to verify the authority of such agent pursuant to our procedures. For authorized agents making a request on a consumer’s behalf, download a verification form here to complete and submit the completed form together with the above request. An authorized agent’s request will be denied without this form properly submitted.

Additional Information. We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. For example, we may retain personal information as permitted by law, such as for tax or other legal, compliance or mandatory record keeping purposes If you choose to exercise any of your rights under applicable state privacy laws, you have the right to not receive discriminatory treatment by us, though we may not be able to provide some services to you without such information. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.

Exercise Your Rights:

For customers: For customers with a Chewy account, you may exercise your rights by using our online portal or by calling 1-800-672-4399. You may also email us at service@chewy.com.

For non-Chewy customers: For non-customers, you may exercise your applicable rights by using our online portal or by calling 1-800-672-4399. You may also email us at service@chewy.com.

California residents only: If you are associated with a business that is providing services and products to us, you may email us at service@chewy.com or call us at 1-800-672-4399.

For Oregon Residents only: Starting on July 1 2024, you may receive list of third parties where may have disclosed personal data, subject to certain conditions. You may email us at service@chewy.com or call us at 1-800-672-4399.

Chewy Vet Care Clinic Customers:  We provide non-clinical services for Chewy Vet Care Clinics, including for independently owned clinics not owned by us. We are the business or data controller for such clinics and this privacy notice is appliable to such clinics as well.

You may appeal our decision with respect to a request you have submitted by calling us at 1-800-672-4399 or by emailing us at service@chewy.com.