Notice at Collection and Privacy Policy  

for California Job Applicants 

Last Updated: January 1, 2023

This Privacy Policy applies to the personal information of job Applicants of Chewy; currently applicable to California residents. 


Chewy, Inc. and its subsidiaries and affiliated companies (“Company”) takes your privacy seriously.  We want you to know how we collect, use, and disclose, your personal information. Chewy, Inc. and its affiliates ("Chewy" or "we", "our", "us") respect the privacy of our applicants. This Privacy Policy ("Privacy Policy") explains the type of information we collect from individuals that submit expressions of interest and/or apply for employment with Chewy. By submitting expressions of interest and/or applying for employment with the Company, you agree to the collection, storage, use and disclosure of your information as described in this Privacy Policy. 


EEO Statement. Chewy is committed to equal opportunity. We value and embrace diversity and inclusion of all Team Members. The company firmly believes in equal employment opportunities for all and the importance of each Team Member as an individual. Chewy’s policy prohibits discrimination and harassment of any type and affords equal employment opportunities to Team Members and Applicants without regard to race, religion, ancestry, color, national origin, place of birth, citizenship, marital status, sex (including pregnancy, childbirth, or related medical conditions), age, sexual orientation, gender identity, veteran status, disability, or other categories protected by federal, state, or local law.  


Disabilities and Accommodations. If you have a disability under the Americans with Disabilities Act or similar law, and you need an accommodation during the application process or to perform these job requirements, or if you need a religious accommodation, please contact CAAR@chewy.com


OVERVIEW 

  • The categories of personal information we collect about you 

  • The categories of sources from which we collect your personal information 

  • The purposes for which we use your personal information   

  • How we may disclose your personal information 

  • How long we keep your personal information 

  • Your rights and how to exercise them 

  • Changes to this Privacy Policy  


SCOPE 

“Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Applicant. 


WHAT PERSONAL INFORMATION WE COLLECT 

Identifiers. For example, legal name, preferred name, alias, telephone number, postal address, e-mail address. 

Professional or Employment-Related Information. For example, educational institutions attended, degrees and certifications, licenses, work experience and previous employers, and professional memberships and affiliations. 

Commercial Information. For example, travel expense records for an interview.  

Internet Activity Information. For example, interactions with Company’s Internet web site, job application, job advertisement, Company’s electronic resources, and publicly available social media activity. 

Sensory or Surveillance Data. For example, voicemails, text messages, and footage from video surveillance cameras.  

Other Details. For example, hobbies and leisure activities or membership in voluntary/charitable/public organizations, for example, as stated on the Applicant’s resume. 

§ 1798.80. For example, personal information described under Cal. Civ. Code § 1798.80 to the extent not already included in other categories in this section, such as a photograph.   

Characteristics of Protected Classifications Under California or Federal Law for Applicants. For example, collected on a purely voluntary basis, except where collection is required by law, and used only in compliance with applicable laws and regulations, for diversity and inclusion reporting and related purposes. 

Note on Inferring Characteristics. Chewy does not collect or process sensitive personal information or characteristics of protected classifications for the purpose of inferring characteristics about the Applicant. 


CATEGORIES OF SOURCES FROM WHICH WE COLLECT YOUR PERSONAL INFORMATION 

You. For example, in your job application, forms you fill out for us, assessments you complete, surveys you complete, and any information you provide us with during your application and interview process. 

Vendors and Service Providers. For example, Recruiters. 

Third Parties. For example, job references, affiliated companies, professional employer organizations or staffing agencies. 

Public Internet Sources. For example, social media, job boards, public profiles, and other public online sources 

Public Records. For example, court records, and credentialing and licensing organizations. 

Automated Technologies. Chewy's electronic resources, for example, to track logins and activity on Company’s careers page. 

Government or Administrative Agencies. For example, law enforcement or public health authorities. 
  

Acquired Company. For example, if Chewy acquired your employer, Chewy might collect personal information from that employer. 


HOW WE USE YOUR PERSONAL INFORMATION 

Generally Applicable Purposes. Unless stated otherwise in the section, below, we may use Applicants’ personal information for the following purposes: 

Recruiting: 

  • To evaluate Applicants’ qualifications or suitability for employment with Company 

  • To communicate with Applicants 

  • To conduct a pre-employment or criminal history background check 

  • For identification purposes 

  • To arrange and manage company-sponsored events 

  • To create a talent pool for future job openings 

  • For recordkeeping purposes 

  • To demonstrate Applicants’ agreement to, or acceptance of, documents presented to them, e.g., pre-employment arbitration agreement, acknowledgment of employment application, offer letter 

  • To evaluate and improve the recruiting process 

  • To promote Chewy as a place to work 


Monitoring, Security, and Compliance: 

  • To monitor use of Chewy information systems and other electronic resources or information systems 

  • To conduct internal audits 

  • To conduct internal investigations 

  • To protect the safety and security of Chewy’s facilities  

  • To report suspected criminal conduct to law enforcement and cooperate in investigations 

  • To control access to secure facilities 

  • To monitor compliance with Chewy’s policies 

  • To exercise Chewy’s rights under applicable law and to support any claim, defense, or declaration in a case or before a jurisdictional and/or administrative authority, arbitration, or mediation panel 


Conducting Our Business: 

  • For training purposes or quality assurance with respect to Chewy Team Members conducting the interviews or otherwise assisting with the recruiting and hiring process 

  • For travel and event planning 

  • To engage in crisis management 

  • To manage travel reimbursements 


Miscellaneous Other Purposes: 

  • To manage and operate information technology and communications systems, risk management and insurance functions, budgeting, financial management and reporting, strategic planning 

  • To manage litigation involving Chewy, and other legal disputes and inquiries and to meet legal and regulatory requirements 

  • In connection with a corporate transaction, sale, or assignment of assets, merger, divestiture, or other changes of control or financial status of Chewy or any of its subsidiaries or affiliates 

  • To protect the rights, property, or safety of Chewy, Individuals, customers, or others 


Purposes Specific to Certain Categories of Personal Information. We may use the categories of Applicants’ personal information listed above for the purposes stated below:  


Purposes For Using Applicant Health Information: 

  • To the extent necessary to comply with Chewy’s legal obligations, such as to accommodate disabilities 

  • For occupational health and safety compliance and record-keeping 

  • To respond to an Applicant’s medical emergency 


Note. This Privacy Policy does not cover health information governed by the Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health Act (HITECH Act), or California’s Confidentiality of Medical Information Act (CMIA). 


PURPOSES FOR USING APPLICANTS’ PROTECTED CATEGORIES OF INFORMATION 

Chewy will not collect Personal Information for Applicants except where required by law and uses the information only in compliance with applicable laws and regulations. Chewy may collect personal information specific to a disability and/or medical condition, as necessary, to comply with federal and California law related to accommodation; and (b) with respect to age, incidentally to the use of birth date for identity verification.  


DEIDENTIFIED INFORMATION 

At times, Chewy converts personal information into deidentified information using reasonable measures to ensure that the deidentified information cannot be associated with the individual (“Deidentified Information”). Chewy maintains Deidentified Information in a deidentified form and does not attempt to reidentify it, except that Chewy may attempt to reidentify the information solely for the purpose of determining whether its deidentification processes ensure that the information cannot be associated with the individual. Chewy prohibits vendors, by contract, from attempting to reidentify Chewy’s Deidentified Information.   


HOW WE MAY DISCLOSE YOUR PERSONAL INFORMATION  

Chewy generally maintains information related to Applicants as confidential. However, from time to time, Chewy may have a legitimate business need to disclose Applicants’ personal information for one of the purposes listed above to one or more of the categories of external recipients listed below. In that event, Chewy discloses your personal information and/or sensitive personal information only to the minimum extent necessary to achieve the purpose of the disclosure and only if the disclosure is permitted by the CPRA and other applicable laws. 


Service Providers and Contractors. Chewy discloses your personal information to service providers and contractors for the purposes above to assist us in our recruiting efforts and in meeting our business needs and legal obligations.  

  • Chewy only discloses your personal information to service providers and contractors subject to written contracts as required by applicable law 

  • Service providers and contractors include recruiters, law firms, travel agencies, and any other entity providing services to Chewy 

Government or Administrative Agencies. These may include: 

  • Equal Employment Opportunity Commission as required for reporting 

  • California Department of Fair Employment and Housing as required to respond to employment claims and charges 

  • Law enforcement in the event of criminal investigations 


Required Disclosures. We may be required to disclose personal information in a court proceeding, in response to a court order, subpoena, civil discovery request, other legal process, or as otherwise required by law.  


Legal Compliance and Protections. We may disclose personal information when we believe disclosure is necessary to comply with the law or to protect the rights, property, or safety of Chewy, our users, or others.  


Corporate Transactions. We may disclose your personal information in connection with a corporate merger, consolidation, bankruptcy, the sale of all, or substantially all, of our membership interests and/or assets or other corporate change, including to any prospective purchasers.  


 No Sales and No “Sharing”, i.e., Disclosure for Cross-Context Behavioral Advertising. Chewy does not sell the personal information that is provided during the job application process of any Applicants  nor share their personal information that is provided during the job application process for cross-context behavioral advertising. To read more about how we use Cookies, please review our Chewy Privacy Policy. Chewy Privacy Policy describes our general privacy practices as it relates to our customers and web site visitors and app users. 


HOW LONG WE KEEP YOUR PERSONAL INFORMATION 


If Chewy hires you, the information collected about you during the job application process may become part of your personnel file and may be used to administer the employment relationship and for related reporting and recordkeeping purposes.  Chewy will retain this application information for the entire duration of your employment relationship with the company and for as long thereafter as permitted or required by applicable law.    


YOUR PRIVACY RIGHTS AND HOW TO EXERCISE THEM 


Your California Privacy Rights. Subject to applicable law, Applicants have the following rights: 


Right to Know. You have the right to submit a verifiable request for copies of specific pieces of your personal information collected in the preceding 12 months and for information about Chewy’s collection, use, and disclosure of your personal information during that same 12-month period.  

  • Please note that the CPRA’s right to obtain copies does not grant a right to the whole of any document that contains personal information, but only to copies of “specific pieces” of personal information.   

  • Applicants have a right to know categories of sources of personal information and categories of external recipients to which personal information is disclosed, but not the individual sources or recipients. Chewy does not always track individualized sources or recipients. 


Right to Delete. You have the right to submit a verifiable request for the deletion of personal information that you have provided to Chewy. Actual deletion of the data will be limited data which is not legally required to be maintained by Chewy. 


Right to Correct. You have the right to submit a verifiable request for the correction of inaccurate personal information maintained by Chewy, considering the nature of personal information and the purposes of processing the personal information. 


How to Exercise Your Rights. Chewy will respond to requests to know, delete, and correct in accordance with applicable law if it can verify the identity of the individual submitting the request. You can exercise these rights in the following ways: 

  • Complete the HR Data Subject Request (DSR) Form available here.

  

How we Verify Your Request. The processes that we follow to verify your identity when you make a request to know, correct, or delete are described below. The relevant process depends on how and why the request is submitted. The verification process that we follow will depend on the nature of your request as described below:  

  • Requests To Know Categories or Purposes. If you request to know how we collect and handle your personal information, we will match at least two data points that you provide with your request, or in response to your verification request, against information about you that we already have in our records and that we have determined to be reliable for purposes of verifying your identity. Examples of relevant data points include home address, email address and preferred phone number. 

  • Requests To Know Specific Pieces of Personal Information. We will match at least two data points that you provide with your request to know, or in response to our request for verification information, against information that we already have about you in our records and that we have determined to be reliable for purposes of verifying your identity. In addition, we may require you to sign a declaration under penalty of perjury that you are the individual whose personal information is the subject of the request.  

  • Requests To Correct or Delete Personal Information. Our process for verifying your identity will depend on the sensitivity (as determined by the company) of the personal information that you ask us to correct or delete.  For less sensitive personal information, we will require a match of two data points as described above. For more sensitive personal information, we will require a match of three data points and a signed declaration as described above. 


We have implemented the following additional procedures when verifying the identity of requestors: 

  • If we cannot verify your identity based on the processes described above, we may ask you for additional verification information. If we do so, we will not use that information for any purpose other than verification. 

  • If we cannot verify your identity to a sufficient level of certainty to respond to your request, we will let you know promptly and explain why we cannot verify your identity. 


Authorized Agents. If an authorized agent submits a request to know, correct or delete on your behalf, the authorized agent must submit with the request either (a) a power of attorney that is valid under California law, or (b) a document signed by you that authorizes the authorized agent to submit the request on your behalf. In addition, we may ask you or your authorized agent to follow the applicable process described above for verifying your identity. You can obtain “Authorized Agent Designation” form by contacting us at hrdataprivacy@chewy.com


Company’s Non-Discrimination and Non-Retaliation Policy. Chewy will not unlawfully discriminate or retaliate against you for exercising your privacy rights under the California Privacy Rights Act. 


You may appeal our decision with respect to a request you have submitted by submitting contacting us at hrdataprivacy@chewy.com


CHANGES TO THIS POLICY 

We reserve the right, at our discretion, to modify our privacy practices and update and make changes to this Privacy Policy at any time and without prior notice. If we make any changes, we will change the last updated date above and post the new Privacy Policy. You should consult this Privacy Policy regularly for any changes. 


QUESTIONS 

If there are any questions regarding this Privacy Policy, you may contact us using the information below.  


1-800-672-4399  

hrdataprivacy@chewy.com