Last updated on: July 26, 22

Privacy Notice for California Residents

If you are a California resident, please read the following Privacy Notice for California Residents (“Policy”).

This Policy describes how information obtained from California consumers, including visitors to Pet Retail Brands’
(“we” or “us” or “our”) website found at https://petsupermarket.com/ (“Website”) and our company-owned Pet
Supermarket® locations (“Locations”) is collected, used, and disclosed. Our Website and Locations are referred to as
“Sites”. This Policy also explains how you, as a California consumer, can make requests to know about your personal
information and delete your personal information.

Terms included in this Policy, including but not limited to, personal information and service provider, carry the
same meaning in this Policy as they do in the California Consumer Privacy Act of 2018, California Civil Code
sections 1798.100 et seq. (“CCPA”). Additionally, and to protect your privacy, we do not sell your Personal
Information in any way, as outlined in Section 7 below. If our business practices should change in the future, we
will inform you of this change before selling your Personal Information and provide you with instructions on how you
can opt-in.

For ease of reference, you may click on any of the following links to jump to one of the sections addressed below:

• California’s Shine the Light Law
• California Consumer Privacy Act
• California Residents’ Rights Under the CCPA
• Categories of California Consumers’ Personal Information Collected or Disclosed
• Methods for Submitting CCPA Requests to Us
• Verification Process
• Authorized Agents
• Response Timing and Format
• Do Not Sell My Personal Information
• Financial Incentive Offers
• Children Under the Age of 16
• Contact Us for More Information

California’s Shine the Light Law
Subject to certain limits under California Civil Code section 1798.83, California residents may ask us to provide
them with (i) a list of certain categories of personal data that we have disclosed to third parties for their direct
marketing purposes during the immediately preceding calendar year, and (ii) the identity of those third parties.
California residents may make one request per calendar year.
To make this request, you may contact us at the email address listed in the “Contact Us for More Information”
section below. In your request, please state that you are a California resident and provide a current California
address for our response. Please allow up to thirty (30) calendar days for a response. We reserve our right not to
respond to such requests submitted by means other than those specified in the “Contact Us for More Information”
section below.

CALIFORNIA’S CONSUMER PRIVACY ACT

1.  California Residents’ Rights Under the California Consumer Privacy Act
If you are a California resident, you have certain rights regarding information that is treated as Personal
Information under the CCPA.

• The right to know what categories of Personal Information are being collected or disclosed and the
  categories of sources of that Personal Information

You have the right to know what categories of Personal Information we collect, sell, or disclose about you, as well
as the categories of third parties who received your Personal Information and the categories of sources of that
Personal Information.  These categories are described below in the “Categories of California Consumers’
Personal Information Collected or Disclosed” section below.  We are also required to provide to you, before or
at the point of collection, with a general notice about the categories of Personal Information collected by us and
how we intend to use the collected Personal Information.

• The right to access collected Personal Information

You have the right to request that we provide a copy of your Personal Information that we collected or disclosed in
the preceding 12 months. Only you, or someone you legally authorize to act on your behalf, may make a request
related to your Personal Information. You may submit a maximum of two requests in a 12-month period.

You must provide sufficient information to enable us to reasonably verify your identity or that of your authorized
agent. We will only use the Personal Information provided in your request to verify your identity or that of your
authorized agent.  Please note that we cannot provide any Personal Information in response to a request if we
cannot verify your or your authorized agent’s identity, or your authorized agent’s authority to make the request on
your behalf, and/or if we cannot confirm that the collected Personal Information relates to you.

Please submit your request using the online Data Privacy Request form found at https://privacy.petsupermarket.com or by calling
our Data Privacy Request toll-free number at 866-841-3538.  You are not required to create an account with us
before submitting a verifiable request.

After receiving and verifying your request, we will provide the following information (depending on your request):

• The categories of Personal Information collected about you in the preceding 12 months.
• The sources of that Personal Information by category.
• The business or commercial purpose(s) for collecting that Personal Information.
• The categories of third parties with whom we shared that Personal Information.
• The specific pieces of Personal Information collected about you.

If we sold your Personal Information or disclosed it for a business purpose, we will provide:

• the categories of Personal Information sold in the previous 12 months and the categories of third parties to
  whom the Personal Information was sold; and
• the categories of Personal Information disclosed for a business purpose in the previous 12 months and the
  categories of third parties to whom the Personal Information was disclosed.

See the “Methods for Submitting CCPA Requests to Us” section below for information on how you can exercise your right
to access collected Personal Information. For more information, see also the “Response Timing and Format” section
below.

• The right to request deletion of Personal Information

With certain exceptions, you have the right to request that we and our service providers delete Personal Information
we or our service provider collected or maintained. Once we receive and verify your request, we will delete and
instruct any applicable service providers to delete your Personal Information from our records, unless an exception
applies.
We and our service providers may deny a verified deletion request if we must maintain your Personal Information to:

• Complete a transaction or provide a good or service requested by you for which we collected the Personal
  Information, or otherwise perform a contract between us.
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity.
• Debug to identify and repair errors that impair existing intended functionality of our systems.
• Exercise a legal right provided for by law, including exercising or ensuring free speech rights.
• Enable our internal use in a manner that you would reasonably expect based on your relationship with us.
• Comply with our legal obligations.
• Otherwise use your Personal Information internally in a lawful manner that is compatible with the context in
  which you provided the information.

See the “Methods for Submitting CCPA Requests to Us” section below for information on how you can exercise your right
to delete collected Personal Information.

• The right to opt-out of the sale of Personal Information

You have the right to opt-out of the “sale” of your Personal Information to other businesses or third parties. The
CCPA defines “sell,” “selling”, “sale”, and “sold” to include selling, renting, releasing, disclosing,
disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or
other means.

Once we receive an opt-out request, we will act upon the request as soon as commercially reasonable, but no later
than 15 business days from the date we receive the request. We will also notify all third parties to whom we have
sold the Personal Information within the 90 calendar days prior to receiving the request that you have exercised
your opt-out right and instruct them not to resell the Personal Information.

However, if we have a good-faith, reasonable, and documented belief that the request is fraudulent, we will deny the
request and provide you with an explanation of our rationale.

You may elect to opt-in to the sale of Personal Information after opting-out. In the event that a transaction
requires the sale of your Personal Information as a condition of completing the transaction, we will inform you of
this and provide instructions on how you can opt-in.

See the “Do Not Sell My Personal Information” section below for more on how to opt-out of the sale of Personal
Information.

• The right to be free from discrimination

You have the right to equal service, and we will not discriminate against you if you exercise your rights under the
CCPA. However, under certain circumstances, we may offer you special discounts or other incentives for the right to
continue to collect or use your Personal Information. In that event, we will notify you of the relevant program’s
material terms and obtain your voluntary opt-in consent to the program.

2.  Categories of California Consumers’ Personal Information Collected, Disclosed, or
Sold
We collect a variety of categories of Personal Information about California consumers, their household, and/or their
devices, from both online and offline sources. We will not collect additional categories of Personal Information or
use the Personal Information we collect for materially different, unrelated, or incompatible purposes without
providing advance notice. We also collect a variety of categories of Personal Information about job applicants and
our employees.

In particular, we may have collected the following types of Personal Information in the last 12 months:

• Personal Identifiers. Examples of these identifiers include, but are not limited to, a real
  name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, Media
  Access Control address, email address, social media accounts, mobile device identified or other unique device
  identifier of any of your computer(s) or device(s) that are used to access the Sites, account name, or other
  similar identifiers.  Examples of personal identifiers pertaining to job applicants and employees also
  include Social Security number, driver’s license number, and passport number,
• Personal information categories listed in the California Customer Records statute (Cal.
  Civ. Code § 1798.80(e)). Examples of this information typically apply in the employment context and
  include, but are not limited to, a name, signature, Social Security number, physical characteristics or
  description, address, telephone number, passport number, driver’s license or state identification card number,
  insurance policy number, education, employment, employment history, bank account number, credit card number,
  debit card number, or any other financial information, medical information, or health insurance information.
• Protected classification characteristics under California or federal law. Examples of this
  protected information typically apply in the employment context and include, but are not limited to, age (40
  years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical
  condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy
  or childbirth and related medical conditions), sexual orientation, genetic information (including familial
  genetic information).
• Commercial Information. Examples of such commercial information include, but are not limited
  to, your transaction history relating to the use of our loyalty programs, information you provide when you
  participate in a survey or communication to you regarding your use of the Sites, information you provide to
  participate in advertising promotions or sweepstakes, your favorite Pet Supermarket® location, products or
  services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
• Geolocation Data.  Examples of this information include, but are not limited to, your
  physical location or movements during interactions with us.
• Inferred Data. Examples of this information include, but are not limited to, your preferences
  and characteristics
• Website Usage. Examples of this information include, but are not limited to, information about
  your interaction with our website such as your IP address, “cookies” and “web beacons.”
• Employment Information. Examples of this information include, but are not limited to, current
  or past job history or performance evaluations.
• Visual Information. A photograph you provide or we take upon receipt of a signed release from
  you.

We may have obtained some or all of the Personal Information listed above from the following sources in the last 12
months:

• Directly from you. For example, we may collect the Personal Information listed above from your
  enrollment in our loyalty programs online or at the point of sale in stores, forms you complete or products and
  services you purchase. For employees, we may collect Personal Information from job applications and employment
  forms.
• Indirectly from you. For example, we may collect usage information from observing your actions
  on our website.
• Third-party promotion and sweepstake vendors. For example, third-party promotion and
  sweepstakes vendors may provide us Personal Information, such as personal identifiers and/or personal
  information categories listed in the California Customer Records statute, that you have given to the vendor in
  the course of entering and participating in Pet Supermarket sponsored contests or sweepstakes.
• Third-party marketing vendors. For example, third-party marketing vendors may provide us with
  Personal Information, such as personal identifiers and/or website usage, when you open a promotional email or
  click on an online advertisement.

We may have collected, used, shared and/or sold the Personal Information described above for one or more of the
following business or commercial purposes in the last 12 months:

• To process your purchases of or requests for products or services.
• To communicate with you about your use of the Sites, purchase of products or services, to receive a newsletter,
  and/or participation in a loyalty program, contests, promotions, coupons, and/or sweepstakes.
• To respond to your inquiries and for other customer service purposes.
• To advise you of changes or additions to our Sites, and/or any of Pet Supermarkets’®  products or services.
• To better understand how users access and use our Sites, to improve the Sites, to respond to user desires and
  preferences, and for other research and analytical purposes.
• To help maintain the safety, security, and integrity of our Sites, products and services, databases and other
  technology assets, and business, as well as your account, orders, and deliveries.
• To manage the Pet Supermarket® Careers page on our website to assist in employment recruiting efforts.
• To consider your application for employment and to obtain and verify background checks.
• To manage scheduling shifts, communicate with employees, and setup and provide employment benefits at
  company-owned Pet Supermarket® locations.
• To process payroll, including direct deposits.
• To manager workers’ compensation claims.
• To manager employee performance of their job duties, including promotions, discipline, and/or termination.
• To conduct workplace investigations.
• To perform call monitoring and surveillance.
• To tailor the content and information that Pet Supermarket® may send or display to you, to offer location
  customization and personalized help and instructions, and to otherwise personalize your experiences while using
  our Sites.
• To assist in advertising Pet Supermarket’s® products and services, including on third-party websites.
• To maintain appropriate records for internal administrative purposes.
• To comply with federal, state, and local laws, cooperate with and respond to law enforcement requests, and as
  otherwise required by applicable law, court order, or governmental regulations.
• To protect the rights and interests of Pet Supermarket® such as to resolve any disputes, to enforce this Policy
  or any other policy, to protect the rights or property of another, or to prevent harm.
• To evaluate or conduct a merger, sale, or other acquisition of some or all of the Pet Supermarket® organization
  or its assets, in which the information held by Pet Supermarket® about our sites is among the assets
  transferred.
• For testing, research, analysis, and product development, including to develop and improve our Website,
  products, and services.

We may have shared or sold the following Personal Information in the last 12 months:

• Personal identifiers;
• Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e));
• Protected classification characteristics under California or federal law.
• Commercial Information, including records of personal property, products or services purchased, obtained, or
  considered, or other purchasing or consuming histories or tendencies;
• Geolocation Data;
• Inferred Date;
• Website Usage;
• Employment Information; and
• Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer
  reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior,
  attitudes, intelligence, abilities, and aptitudes.

We may have disclosed for a business purpose the following Personal Information in the preceding 12 months:

• Personal identifiers;
• Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e));
• Protected classification characteristics under California or federal law;
• Commercial Information, including records of personal property, products or services purchased, obtained, or
  considered, or other purchasing or consuming histories or tendencies
• Geolocation Data;
• Inferred Data;
• Website Usage;
• Employment Information; and
• Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer
  reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior,
  attitudes, intelligence, abilities, and aptitudes.

We may have shared or sold the Personal Information listed above with the following categories of third parties:

• Data aggregators;
• Business partners;
• Parent or other affiliate companies;
• Service providers;
• Website development and hosting providers;
• Email platform providers;
• Cloud hosting platform providers; and Marketing analytics and advertising companies.

3.  Methods for Submitting CCPA Requests to Us
As a consumer, you have the right to submit a verifiable request to us using the following methods:

• Online Request Form. You may submit a data privacy request by completing the online request form located
  here:  https://privacy.petsupermarket.com
• Toll-Free Telephone Call. You may submit requests by calling our toll-free number at 866-841-3538. A
  member of our team will process your request as applicable.
• In-store Form. A member of our team will assist you to complete and submit a Request Form on a mobile
  kiosk at our retail locations in California.

See the “Do Not Sell My Personal Information” section below for more on how to submit a request to opt-out of the
sale of Personal Information.

4.  Verification Process
Once we receive a request to know or to delete, we must verify your identity before we can respond.  You may be
required to provide the following information for verification purposes and efficiency when applicable:

• Your first and last name
• Your e-mail address
• Your telephone number

If you submit either a request to know specific pieces of Personal Information collected, or a request to delete
sensitive, irreplaceable, or otherwise valuable Personal Information, you (or your authorized agent, if applicable)
will be required to provide a signed declaration affirming your identity (or your authorized agent’s identity, if
applicable).

5.  Authorized Agents
An authorized agent is either a natural person or a business entity registered with the California Secretary of
State that a consumer has authorized to act on his or her behalf.  You may use an authorized agent to submit a
request to know or request to delete. Your agent will need to provide: either (1) a power of attorney; or (2) your
written permission to allow the authorized agent to submit the request on your behalf and verification of your
identity.

6.  Response Timing and Format

• Acknowledgement of receipt of request

We will confirm receipt of a request from you within 10 days. This confirmation will provide information about how we
will process the request, including a description of our verification process and an approximation of when we will
send you a substantive response.

• Substantive Response

We will respond to a verifiable request from you within 45 days.  If we cannot respond in that time, we will
notify you in writing that we need an additional 45 days and explain the reason for the needed additional
time.  If you have an account with us, we will respond to that account. If you do not have an account with us,
we will deliver the written response by mail or e-mail, at your option.

Any disclosures we provide will cover only the 12-month period preceding our receipt of your verifiable request. If
we cannot comply with your request, we will explain why. If you have requested to know specific Personal Information
we collected, we will provide that information to you.

We do not charge a fee to process or respond to a verifiable consumer request unless it is excessive, repetitive, or
manifestly unfounded. If we determine that the request warrants a fee, we will tell you why and provide you with a
cost estimate before completing the request.

7.   Do Not Sell My Personal Information
You have the right to direct us not to sell your Personal Information and you may exercise this right at any time.
Once you opt-out, we will not sell your Personal Information unless you subsequently give us authorization to do so.
We will not ask you to reauthorize such sales until 12 months have passed since complying with your request to
opt-out.

If you are a California consumer and wish to opt-out of the sale of your Personal Information, you may submit an
opt-out request by clicking on the following link: https://privacy.petsupermarket.com.

8.   Financial Incentive Offers
Some of our loyalty programs and/or reward programs offer financial incentives in exchange for your consent to our
use of Personal Information.

9.  Children Under the Age of 16
Our Website is not intended for children under 16 years of age. No one under age 16 may provide any Personal
Information on the Website. We do not knowingly collect personal information from children under 16. If you are
under 16, do not use this Website or provide any information on this Website.  If we learn we have collected or
received Personal Information from a child under 16 without verification of parental consent, we will delete that
information. If you believe we might have any information from or about a child under 16, please contact us at privacysupport@petsupermarket.com.

10.   Contact Us for More Information
California consumers who have questions or concerns about our privacy policies and practices may contact a trained
representative through one of the following methods:

• Toll-free call: 866-841-3538
• Email: privacysupport@petsupermarket.com

When contacting us, please include in the communication or have available the information listed under the
“Verification Process” section above. If using an authorized agent, please include in the communication or have
available proof of authorization.