California Resident Applicant and Prospective Applicant Privacy Notice

Last revised: June 21, 2023

This Applicant and Prospective Applicant Privacy Notice for California Residents (“California Privacy Notice”) is only applicable to California residents. It is delivered on behalf of Stella & Chewy’s, LLC (“Stella & Chewy’s”, “we”, “our”, or “us”), being the entity to which you are applying to work and governs certain personal information we collect from you.

We have adopted this California Privacy Notice to comply with the California Consumer Privacy Act, Cal. Civ. Code §§ 1798.100 et seq. (“CCPA”). Please take the time to read and understand this California Privacy Notice before submitting your information to us.

Scope

This California Privacy Notice covers personal information we collect from and about California residents in their capacity as current, former or prospective job applicants to Stella & Chewy’s. There is other personal information that this California Privacy Notice does not cover. In some cases, that personal information may not be subject to the CCPA. In other cases, a different privacy notice may apply. Accordingly, this California Privacy Notice and/or the California privacy rights set out herein may not apply to you or to all of your personal information.

By personal information we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual, which includes “personal information” and “sensitive personal information” as those terms are defined in the CCPA. The following is not personal information for purposes of the CCPA: (i) “publicly available information”; (ii) lawfully obtained, truthful information that is a matter of public concern; (iii) “deidentified” consumer information about California residents; and (iv) “aggregate” consumer information about California residents (in each case, as those terms are used in the CCPA). This California Privacy Notice does not apply to such information.

Notice at Collection and Our Prior Collection, Use and Disclosure of Personal Information During the Preceding 12 Months

The CCPA requires us to give you specific information about the categories of personal information we collect about you, the sources from which we have obtained that information, the purposes for which we collect it and the categories of entities to whom we disclose it. The table below sets out our relevant practices currently and over the last twelve months. Our collection, use and disclosure of personal information depends on your relationship with us and your interaction with us. For information on our receipt of personal information as a third party, please see “Third Party Processing” below.

Category of Personal Information	Categories of Sources From Which Collected	Business or Commercial Purpose for Collecting Personal Information	Categories of Third Parties and Other Entities To Whom We May Disclose Personal Information
Identifiers and Categories in Cal. Civ. Code 1798.80(e), such as name, unique personal identifier, online identifier, account name, phone number or signature	• Directly from you • Via business partners and other providers • Via our recruitment management systems	• To assess your job application (including, in some cases, verifying your qualifications, education and references with those third parties you name), for administrative purposes during the recruitment process and to make recruitment decisions • To check your right to work in the relevant jurisdiction • To allow us to monitor for equal opportunities and diversity initiatives • To make reasonable adjustments in the case of disability • For compliance with any legal or regulatory obligation to which we are subject (including compliance with any request from regulatory authorities or other relevant public authorities) • For the prevention and detection of crime or fraud, subject to local law • In the context of the possible sale or restructuring of all or part of our business or as otherwise permitted or required by law	• Service providers and business partners, for example those that help us with recruiting efforts • Legal authorities as required by law or to protect our rights • Affiliated and nonaffiliated third parties as may be permitted by law (such as in connection with the Sale or restructuring of all or part of our business)
Characteristics of Protected Classifications Under California or federal law, such as nationality, veteran status, gender, age, gender identity, race, or ethnic origin, religion or disability	• Directly from you	• To allow us to monitor for equal opportunities and diversity initiatives • To make reasonable adjustments in the case of disability • For compliance with any legal or regulatory obligation to which we are subject (including compliance with any request from regulatory authorities or other relevant public authorities) • In the context of the possible sale or restructuring of all or part of our business or as otherwise permitted or required by law	• Service providers and business partners, for example those that help us with recruiting efforts • Legal authorities as required by law or to protect our rights • Affiliated and nonaffiliated third parties as may be permitted by law (such as in connection with the sale or restructuring of all or part of our business)
Internet or other electronic network activity information, such as browsing history, search history or information regarding interaction with a website, app or advertisement	• Directly from you • Via business partners and other providers • Via our recruitment management systems	• To assess your job application (including, in some cases, verifying your qualifications, education and references with those third parties you name), for administrative purposes during the recruitment process and to make recruitment decisions • For compliance with any legal or regulatory obligation to which we are subject (including compliance with any request from regulatory authorities or other relevant public authorities) • For the prevention and detection of crime or fraud, subject to local law • In the context of the possible sale or restructuring of all or part of our business or as otherwise permitted or required by law	• Service providers and business partners, for example those that help us with recruiting efforts • Legal authorities as required by law or to protect our rights • Affiliated and nonaffiliated third parties as may be permitted by law (such as in connection with the Sale or restructuring of all or part of our business)
Geolocation data, such as the state or country associated with your IP address, or home address	• Directly from you • Via business partners and other providers • Via our recruitment management systems	• To assess your job application (including, in some cases, verifying your qualifications, education and references with those third parties you name), for administrative purposes during the recruitment process and to make recruitment decisions • To check your right to work in the relevant jurisdiction • For compliance with any legal or regulatory obligation to which we are subject (including compliance with any request from regulatory authorities or other relevant public authorities) • For the prevention and detection of crime or fraud, subject to local law • In the context of the possible sale or restructuring of all or part of our business or as otherwise permitted or required by law	• Service providers and business partners, for example those that help us with recruiting efforts • Legal authorities as required by law or to protect our rights • Affiliated and nonaffiliated third parties as may be permitted by law (such as in connection with the Sale or restructuring of all or part of our business)
Audio, electronic, visual, thermal, olfactory or similar information, such as a recording of your voice or photo or video of you	• Directly from you • Via business partners and other providers • Via our recruitment management systems	• To assess your job application (including, in some cases, verifying your qualifications, education and references with those third parties you name), for administrative purposes during the recruitment process and to make recruitment decisions • For compliance with any legal or regulatory obligation to which we are subject (including compliance with any request from regulatory authorities or other relevant public authorities) • For the prevention and detection of crime or fraud, subject to local law • In the context of the possible sale or restructuring of all or part of our business or as otherwise permitted or required by law	• Service providers and business partners, for example those that help us with recruiting efforts • Legal authorities as required by law or to protect our rights • Affiliated and nonaffiliated third parties as may be permitted by law (such as in connection with the Sale or restructuring of all or part of our business)
Professional or employment information, such as your job title or employer, employment history, education and qualification details	• Directly from you • Via business partners and other providers • Via our recruitment management systems	• To assess your job application (including, in some cases, verifying your qualifications, education and references with those third parties you name), for administrative purposes during the recruitment process and to make recruitment decisions • To check your right to work in the relevant jurisdiction • To allow us to monitor for equal opportunities and diversity initiatives • To make reasonable adjustments in the case of disability • For compliance with any legal or regulatory obligation to which we are subject (including compliance with any request from regulatory authorities or other relevant public authorities) • For the prevention and detection of crime or fraud, subject to local law • In the context of the possible sale or restructuring of all or part of our business or as otherwise permitted or required by law	• Service providers and business partners, for example those that help us with recruiting efforts • Legal authorities as required by law or to protect our rights • Affiliated and nonaffiliated third parties as may be permitted by law (such as in connection with the Sale or restructuring of all or part of our business)
Inferences drawn from personal information to create a profile about a California resident reflecting their preferences, characteristics and other attributes	• Directly from you • Via business partners and other providers • Via our recruitment management systems	• To assess your job application (including, in some cases, verifying your qualifications, education and references with those third parties you name), for administrative purposes during the recruitment process and to make recruitment decisions • To check your right to work in the relevant jurisdiction • To allow us to monitor for equal opportunities and diversity initiatives • To make reasonable adjustments in the case of disability • For compliance with any legal or regulatory obligation to which we are subject (including compliance with any request from regulatory authorities or other relevant public authorities) • For the prevention and detection of crime or fraud, subject to local law • In the context of the possible sale or restructuring of all or part of our business or as otherwise permitted or required by law	• Service providers and business partners, for example those that help us with recruiting efforts • Legal authorities as required by law or to protect our rights • Affiliated and nonaffiliated third parties as may be permitted by law (such as in connection with the Sale or restructuring of all or part of our business)
Sensitive personal information, such as Social security number, driver’s license, state identification card or passport number	• Directly from you	• To assess your job application (including, in some cases, verifying your qualifications, education and references with those third parties you name), for administrative purposes during the recruitment process and to make recruitment decisions • To check your right to work in the relevant jurisdiction • For compliance with any legal or regulatory obligation to which we are subject (including compliance with any request from regulatory authorities or other relevant public authorities) • For the prevention and detection of crime or fraud, subject to local law • In the context of the possible sale or restructuring of all or part of our business or as otherwise permitted or required by law	• Service providers and business partners, for example those that help us with recruiting efforts • Legal authorities as required by law or to protect our rights • Affiliated and nonaffiliated third parties as may be permitted by law (such as in connection with the Sale or restructuring of all or part of our business)
Sensitive personal information, such as racial or ethnic origin, religious or philosophical beliefs, or union membership	• Directly from you	Should you choose to provide it to us: • To allow us to monitor for equal opportunities and diversity initiatives • For compliance with any legal or regulatory obligation to which we are subject (including compliance with any request from regulatory authorities or other relevant public authorities) • In the context of the possible sale or restructuring of all or part of our business or as otherwise permitted or required by law	• Service providers and business partners, for example those that help us with recruiting efforts • Legal authorities as required by law or to protect our rights • Affiliated and nonaffiliated third parties as may be permitted by law (such as in connection with the Sale or restructuring of all or part of our business)

Third Party Processing:

We may also receive personal information from you as a third party from other sources such as in the following circumstances:

personal information we collect from professional networks where you have set up a publicly available profile (e.g. LinkedIn) or from recruitment consultants to whom you have provided your resume for application purposes; and
details of your suitability to work with us, your past performance at work, your character, verification of the information that you provide to us as part of your application, and if legally permitted, any history concerning criminal convictions, from third party references that you provide to us, from your previous and/or current employers, opinions expressed by others about you and from third party background checking services or a previous employer or other references.

We may use this information:

To assess your job application (including, in some cases, verifying your qualifications, education and references with those third parties you name), for administrative purposes during the recruitment process and to make recruitment decisions;
To check your right to work in the relevant jurisdiction;
To allow us to monitor for equal opportunities and diversity initiatives;
To make reasonable adjustments in the case of disability;
For compliance with any legal or regulatory obligation to which we are subject (including compliance with any request from regulatory authorities or other relevant public authorities);
For the prevention and detection of crime or fraud, subject to local law; and/or
In the context of the possible sale or restructuring of all or part of our business or as otherwise permitted or required by law.

Data Retention

We will retain your personal information for as long as necessary to fulfil the purposes for which it was collected and processed, including for the purposes of satisfying any legal, regulatory, accounting or reporting requirements. To determine the appropriate retention period for your personal information and sensitive personal information, we will consider the amount, nature and sensitivity of the personal information, the potential risk from unauthorized use or disclosure, the purposes for which we process it and whether we can achieve those purposes through other means, and applicable legal requirements.

How We Disclose Personal Information

In the past twelve months, we have disclosed the following categories of personal information for business purposes as set out above:

Identifiers
Categories of Personal Information described in Cal. Civ. Code Section 1798.80(e)
Characteristics of Protected Classifications Under California or Federal Law
Internet or other electronic network activity information
Geolocation data
Audio, electronic, visual, thermal, olfactory or similar information
Professional or employment information
Inferences drawn from other personal information

We Do Not Sell or “Share” Your Personal Information for Purposes of the CCPA

We do not “sell” your personal information for purposes of the CCPA or “share” it for purposes of cross-context behavioral advertising (as those terms are defined in the CCPA) and have not done so in the past twelve months.

Minors Under the Age of 16

We do not have actual knowledge that we sell or share the personal information of minors under the age of 16.

Your Rights as a California Resident

As a California resident, you may have certain rights in relation to your personal information.

Right to Know

You may have the right to know how we have collected, used and disclosed your personal information. Specifically, you may have the right to know:

The categories of personal information we have collected about you.
The categories of sources from which we have collected your personal information.
The business or commercial purpose for which we collect, sell or share your personal information.
The categories of third parties to whom we have disclosed your personal information.
The categories of personal information that we have sold or shared about you and the categories of third parties to whom it was sold or shared.
The categories of personal information we have disclosed about you for a business purpose and the categories of persons to whom we have disclosed it.

In addition, you may have the right to know the specific pieces of personal information we have collected about you. Subject to certain limitations, you may request that we provide this information dating back to January 1, 2022.

Right to Make a Deletion Request

You may have the right to request that we delete your personal information that we have collected or received. Subject to certain exceptions, we must delete your personal information and direct our service providers and contractors to delete your personal information.

Right to Correct Inaccurate Personal Information

You may have the right to request that we correct inaccurate personal information about you, taking into account the nature of the personal information and the purposes of the processing of the personal information.

Right to Opt-Out of Sales of Personal Information

If we were to sell your personal information for purposes of the CCPA, you may have the right to opt-out of the sale of your personal information.

Right to Opt-Out of Sharing of Personal Information

If we were to share your personal information for cross-context behavioral advertising purposes for purposes of the CCPA, you may have the right to opt-out of that sharing.

Right to Limit Use and Disclosure of Sensitive Personal Information

Subject to certain exceptions, you may have the right to limit our use and disclosure of your sensitive personal information. We do not use or disclose your sensitive personal information in a manner that gives rise to this right.

Right to Non-Discrimination

You have the right not to be discriminated against by us for choosing to exercise your rights under the CCPA.

How to Exercise Your California Privacy Rights

If you wish to exercise your right to know, delete or correct inaccuracies in your personal information, or your right to limit our use and disclosure of your sensitive personal information, please submit a request to us by calling us at 1-888-477-8977, ex. 100 or contacting us at privacy@stellaandchewys.com.

You can authorize a person (“Authorized Agent”) to exercise your California privacy rights on your behalf. To submit a request to Stella & Chewy’s on behalf of another person as an Authorized Agent, please submit a request to us by calling us at 1-888-477-8977, ex. 100 or contacting us at privacy@stellaandchewys.com.

Verifying Your Requests

We only respond to your requests to know how we have collected, used and disclosed your personal information, access the specific pieces of personal information we have about you, delete your personal information or correct inaccurate personal information when we can verify that you are a California resident exercising your rights regarding your personal information.

We may need to ask you for personal information to verify your request so we can match it to the personal information we already have about you. We may also need to obtain additional information about you that we do not already have. If you provide us with new personal information that we do not already have about you, we will use it solely for the purpose of verifying your request. We will let you know via email if we need more information from you to verify your request. Please reply to our requests promptly.

We will communicate with you about your requests via email. We will use the email address you provided when submitting your request.

If we cannot verify your identity, we will let you know.

Verifying Your Requests

We only respond to your requests when we can authenticate that you are a resident of Colorado, Connecticut, or Virginia exercising your rights regarding your personal data.

We may need additional information to authenticate your request. We may need to obtain additional information about you that we do not already have to be able to authenticate your request. If you provide us with new personal data that we do not already have about you, we will use it solely for the purpose of authenticating your request. We will let you know via email if we need more information from you to authenticate your request. Please reply to our requests promptly.

We will communicate with you about your requests via email. We will use the email address you provided when submitting your request.

If we cannot authenticate your identity, we will let you know.

Responding To Your Requests

We aim to promptly verify and respond to your requests within 45 days of receipt but may require a total of up to 90 days to respond to your requests. If we require additional time beyond the initial 45 days after we receive your request, we will let you know within the first 45 days.

We do not ordinarily charge a fee for our response to your requests. However, we may do so to the extent your request(s) are excessive, repetitive, or manifestly unfounded. If we determine that charging a fee is warranted, we will let you know and will provide you with an estimate of the associated costs of responding to your request(s).

If we determine that we cannot or will not take the action that you requested, we will let you know. We will inform you of our reasons for not taking action and any rights you may have to appeal the decision.

Unless you tell us that you would like to receive a response via postal mail, we will respond to you via email regarding your requests to know and to access the specific pieces of personal information we have about you. We will contact you at the email address you provided when submitting your request(s). If you would like to receive responses to a request to know or access personal information via postal mail rather than email, please let us know when submitting your request(s).

Limitations

The CCPA does not apply in full to all personal information we collect from California residents. Therefore, even if you are a California resident and submit a verifiable request, we may not be required to comply with your request.

We are only required to respond to certain requests twice in any twelve-month period. We are not required to provide you access to specific pieces of personal information more than twice in any twelve-month period. Similarly, we are not required to comply with your “requests to know” more than twice in any twelve-month period.

Changes to Our California Privacy Notice

From time to time, Stella & Chewy’s may update or revise this California Privacy Notice. If there are changes to the terms of this California Privacy Notice, documents containing the revised policy on the relevant website(s) will be updated.

Contacting us

If you would like further information on the collection or use of your personal information, please submit questions, comments and requests by contacting us at privacy@stellaandchewys.com.