Privacy Policy

Effective Date: 29 January 2024

PetLab Co. (“PetlLab”, “we”, “ us ”) owns and operates the www.thepetlabco.com website and related online services, platforms, websites, or applications that post a link to this Privacy Policy (collectively, “Website”). This Privacy Policy does not apply to www.petlabco.co.uk or other sites or services where this Privacy Policy is not linked.

Depending on your location or residence, an applicable state-specific addendum may apply (including California) –see our U.S. State-Specific Privacy Notices below. To the extent we provide you notice on our Website of different or additional privacy policies or practices, including any state-specific privacy notices or policies, those additional policies shall supplement this Privacy Policy to the extent that they are applicable to you or information we collect from or about you. In addition, please review the Website’s Terms of Service, which govern your use of the Website. By accessing or otherwise using our Website, you consent to our Privacy Policy and our collection, use and sharing of your information and data, and other activities, as described below.

How we modify this privacy policy

We reserve the right to modify this Privacy Policy at any time, and without prior notice, by posting an amended Privacy Policy that is always accessible by clicking on the “Privacy Policy” link on this Website’s home page. You should check back periodically for updates and modifications to the Privacy Policy. Your continued use of this Website after the amended Privacy Policy is posted indicates your acceptance of the amended Privacy Policy.

Regarding Personal Information (defined below), if any modifications are materially less restrictive on our use or disclosure of the Personal Information previously disclosed by you, we will obtain your consent before implementing such revisions with respect to such information.

Information we collect

Information that You Provide. We (and our Service Providers (defined below) on our behalf) collect Personal Information (defined below) at the time you provide it to us, including through sign-up forms and as part of your registration for or purchase of an account, product, or service, promotion, purchase, or subscriptions, or contest from this Website. Personal Information that we collect may vary with each sign-up or registration. In addition, we collect Personal Information from all communications with Website visitors including without limitation, text messages, faxes, telephone calls, and regular “snail mail”, as well as from third-party outside sources including database vendors. This applies to Website visitors on all of our domains and subdomains and those who are visiting, viewing, or making a purchase on our Website and also those who have clicked an outside link or advertisement on a third-party site or platform, like Facebook.com or Google.

“Personal Information” includes any information regarding a natural person that may be used to identify the person. Personal Information that we and our Service Providers collect may vary with each separate purpose for which you provide it, and it may include one or more of the following types of information: name, physical address, an email address, phone number, purchase history, and credit card information, including credit card number, expiration date, and billing address.

The definition of “personal information” under certain laws differs from the definition of Personal Information used in this Privacy Policy and where applicable we have supplemented this Privacy Policy with our State-Specific Privacy Notices to address relevant differences.

Information Collected Automatically. We, our Service Providers, and Third-Party Services (defined below) may automatically collect information based on your usage of this Website, which can include: the IP addresses or domain names of the computers utilized by Website users, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server"s answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the user, the various time details per visit (e.g., the time spent on each page within the Website) and the details about the path followed within the Website with special reference to the sequence of pages visited, other parameters about the device operating system and/or the user"s IT environment, and data, conversion rates, marketing and conversion data and statistics, reports, analytics data, reviews and surveys (collectively, “Usage Data”). Usage Data also includes location data, such as the location of your device, if you have enabled certain location-identifying technologies on your device.

We may use various now and later developed methods and technologies to store or collect Usage Data (“Tracking Technologies”). Tracking Technologies may set, change, alter or modify settings or configurations on your device. Tracking Technologies include:

  • Cookies. A cookie is a data file placed on a device when it is used to visit the Website.
  • Web Beacons. Small graphic images or other web programming code called web beacons (also known as “1x1 GIFs” or “clear GIFs”) may be included in our Service’s pages and messages. Web beacons may be invisible to you, but any electronic image or other web programming code inserted into a page or e-mail can act as a web beacon. Web beacons or similar technologies can be used to count visitors to the Service, to monitor how users navigate the Website, to count how many e-mails that were sent were actually opened or to count how many particular articles or links were actually viewed.
  • Embedded Scripts. An embedded script is programming code that is designed to collect information about the links you click on and other of your interactions with the Website. The code is temporarily downloaded onto your Device from our web server or a third party service provider, is active only while you are connected to the Website, and is deactivated or deleted thereafter.
  • Location-Identifying Technologies. Additionally, the Website may use GPS (global positioning systems) software, RFID (radio frequency identification), cellular and Wi-Fi data, and other subsequent location-based technologies and methods later. Your device settings may enable you to disable, change or limit some of these activities.

There may be other Tracking Technologies now and later devised and used by us in connection with the Website.

Tracking Technologies Choices and Consent

We are giving you detailed notice of the Tracking Technologies and your limited choices regarding them so that your consent is meaningfully informed. We may also provide you with a choice as to the level of data you share with us or allow the Tracking Technologies to collect. The Website may be limited and some features may not be available based on what data you elect and/or consent to share with us. For more information on how to exercise preferences, see the “Exercising Choice and Preferences” section below.

Regular cookies may generally be disabled or removed by tools that are available as part of most commercial browsers, and in some but not all instances can be blocked in the future by selecting certain settings. Each browser you use will need to be set separately and different browsers offer different functionality and options in this regard. Also, these tools may not be effective with regard to certain Tracking Technologies. Please be aware that if you disable or remove these technologies some parts of our Website may not work and that when you revisit our Website your ability to limit browser-based Tracking Technologies is subject to your browser settings and limitations.

Information Collected from Third Parties. We may receive information about you from third parties, including your friends and others that use the Website, when they submit content to us or post or interact with the Website. Additionally, we may, from time to time, supplement the information we collect via our Website with outside records from third parties. To the extent we combine information we receive outside of the Website with your Personal Information we collect on the Website, it will be treated as Personal Information and we will apply this Privacy Policy to such combined information, unless we have disclosed otherwise.

How we use your information

We may use information about you, including your Personal Information or Usage Data that is subject to this Privacy Policy for any purposes not inconsistent with statements made under this Privacy Policy, or otherwise made by use in writing at the point of collection, and not prohibited by applicable law, including, without limitation, the following: (1) to provide you with information or services or process or facilitate transactions that you have requested or agreed to receive, to send you electronic newsletters and push notifications (if you have elected to receive such notifications), to communicate with you about your use of the Services, or to provide you with special offers or promotional materials on behalf of us or third parties; (2) to respond to any questions, comments, or requests that you have for us or for other customer service purposes; (3) to process your registration with the Website, verify your information is active and valid, to manage your account, and to administer our customer loyalty program; (4) to better understand how users access and use our Website, both on an aggregated and individualized basis, in order to improve our Website and respond to user desires and preferences, and for other research and analytical purposes; (5) to customize your experience on the Website, or to serve you specific content and offers that are relevant to or customized for you (including, without limitation, pricing and discounts based on your profile, location or history); (6) to assist us in determining relevant advertising and to determine the success of our advertising campaigns and to help us determine where to place our ads, including ads placed on other websites; (7) to administer surveys and questionnaires, such as for market research or customer satisfaction purposes; (8) to contact you with regard to your use of the Website and, in our discretion, changes to the Website and/or Website’s policies; (9) for purposes disclosed at the time you provide your information; (10) for security purposes; (11) to comply with legal obligations, as part of our general business operations, and for other business administration purposes; (12) where we believe we need to in order to investigate, prevent or take action if we think someone might be using information for illegal activities, fraud, or in ways that may threaten someone’s safety or violate of our Terms of Service or this Privacy Policy; and (13) otherwise to the extent not prohibited by applicable law except to the extent set forth in this Privacy Policy.

Information sharing and disclosure

General Disclosure Policy. We may share your Personal Information, and other information we have collected about you, as disclosed at the time you provide your information and as described below or otherwise to the extent not prohibited by applicable law except to the extent set forth in this Privacy Policy. Any of these transfers may be of local or cross-border nature.

For sake of clarity, if we de-identify data about you, or aggregate it such that it is no longer Personal Information or other information for which we have an obligation to you based on this Privacy Policy (or a statement made elsewhere on the Service), we may share it with others freely

We may disclose your Personal Information as described below.

Affiliated Entities. We may share your information, including Personal Information and Usage Data with our affiliated entities (if any), including our subsidiaries. Affiliated entities are entities that we legally control (by voting rights) or that control us.

Service Providers. We may share your information, including Personal Information and Usage Data with our trusted service providers that assist us with the operation and maintenance of the Website (“Service Providers”). For example, we may contract with Service Providers to process payments, host our servers, provide security, and provide production, fulfillment, optimization, marketing, analytics, and reporting services. Our Service Providers will be given access to your information only as is reasonably necessary to provide the services for which they are contracted.

Petlab Co. contracts with third parties to provide you with best in class customer service and an enhanced customer experience. By accepting these Privacy terms you grant Petlab the right to share your personal information with these third parties. If you do not wish Petlab to share your personal data, please email Petlab at privacy@thepetlabco.com .

Successors. If we sell or otherwise transfer part or all of our business or assets to another organization, such as in the course of an acquisition, merger, bankruptcy or liquidation, we may transfer your Personal Information and Usage Data. In such an event, we will require the buyer or transferee to agree to our commitments provided in this Privacy Policy.

Legal Process, Enforcement and Security Notice. We may disclose your Personal Information and Usage Data if we have a good faith belief that access, use, preservation or disclosure of such information is reasonably necessary or appropriate (i) to satisfy any applicable law, regulation, legal process or enforceable governmental request (such as for example, to comply with a subpoena or court order), (ii) as evidence in litigation or other proceedings, (ii) to detect, prevent, and address fraud or other illegal activity, and (iii) to investigate, respond to, or enforce violations of our rights or the security of this Website. To the fullest extent permitted by applicable law, we have complete discretion in electing to make or not make such disclosures, and to contest or not contest requests for such disclosures, all without notice to you.

Marketing Partners. We may participate with another company or individual for purposes of promoting our products, services, promotions or contests or their products, services, promotions, or contests (whether jointly, or by us or the third party). In doing so, we may disclose your Personal Information to them for purposes of (i) compensation, transaction processing, fulfillment, and support, and (ii) for purposes of offering you other products, services, promotions, and contests. These marketing partners may also contact you regarding other products, services, promotions, or contests. If you do not want us to share your Personal Information with any third parties for such third parties’ marketing purposes, please email us at contact@thepetlabco.com . Please note that your Personal Information will need to be shared with certain third parties in order to process and fulfill any orders that you place over the Website, and as otherwise described in this section “Information Sharing and Disclosure.”

As Requested by or Consented to by You, or that You Disclose to Third Parties. Your activities on the Website may, by their nature, result in the sharing of your information with third parties and by engaging in these activities you consent to that and further sharing and disclosure to third parties. Such third-party data receipt and collection is subject to the privacy and business practices of that third party, not us.

Information you post publicly or disclose to others

Submitted Materials. If the Website permits you to Submitted Materials (as defined in the Terms & Conditions) we or others may store, display, reproduce, publish, distribute or otherwise use Submitted Materials online or offline in any media or format (currently existing or hereafter developed) and may or may not attribute it to you. You choose what Submitted Materials you submit. You may be able to submit Submitted Materials including ideas, photographs, user profiles, writings, music, video, audio recordings, computer graphics, pictures, data, questions, comments, suggestions and Personal Information, to private areas of the Service, or to public areas of the Service such as blogs and message boards. Others may have access to this Submitted Materials and may have the ability to share it with third parties. Please think carefully before deciding what information and Personal Information you share, in connection with your Submitted Materials. Please note that we do not control who will have access to the information that you choose to make public, and cannot ensure that parties who have access to such publicly available information will respect your privacy or keep it secure. We are not responsible for the accuracy, use or misuse of any Submitted Materials that you disclose or receive from third parties through the Service.

Notwithstanding anything to the contrary, unless otherwise explicitly set forth herein or otherwise disclosed to you at the time of collection by us, Personal Information included in Submitted Materials is not subject to our usage or sharing limitations, or other obligations under this Privacy Policy or otherwise, and may be used and shared by us and third parties to the fullest extent not prohibited by applicable law. We encourage you to exercise caution when making decisions about what you disclose in such public areas. We are not responsible for Submitted Materials you submit to third party services via our Service. California minors should see Section 8 regarding removal of certain content they have posted on our Service.

Name and Likeness. We may also publish your name, voice, likeness and Personal Information that is part of your Submitted Materials, and we may use the content, or any portion of the content, for advertising, marketing, publicity and promotional activities and as otherwise permitted pursuant to our Terms and Conditions.

Third-party content, links to third-party sites, and/or third-party apps on the website

The Website has functionality that allows certain kinds of interactions between the Website and third-party content, web sites, applications, platform, code ((e.g., plug-ins, application programming interfaces, and software development kits (“SDKs”)), and Tracking Technologies (collectively, “Third-Party Services”).

For example, you may have an option to use your Facebook, Google or other account provided by a Third-Party Service to interact with the Website, including by logging into the service or posting information from the Website on the Third-Party Service (or vice versa) (“Social Features”). If we offer and you choose to use Social Features, the Third-Party Service may send Personal Information about you to us. If so, we will then treat it as Personal Information under this Privacy Policy, since we are collecting it as a result of your accessing of and interaction on our Website. If you use Social Features, and potentially other Third-Party Services, information you post or provide access to may be publicly displayed on the Website (as described in Section “Information You Post Publicly or Disclose to Others” above) or by the Third-Party Service that you use, depending on your privacy settings on each. Similarly, if you post information on a Third-Party Service that references the Website (e.g., by using a hashtag associated with us in a tweet or status update), your post may be used on or in connection with the Website or otherwise by us. Also, both we and the third party may have access to certain information about you and your use of the Website and any Third-Party Service.

Third-Party Services may use their own cookies, web beacons, and other Tracking Technologies to independently, collect information about you, including Third-Party Services to which you are directed from the Website, including where you click a link and leave the Website entirely. There are certain websites and other Third-Party Services to which we may link from the Website, which are third party websites using our name under license but with their own terms and policies, except where we have explicitly linked to this Privacy Policy.

We are not responsible for the data collection and privacy practices employed by, on or through any Third-Party Services, including where may be tracking you with their own Tracking Technologies across multiple sites and may be sharing the results of that tracking with us and/or others. These other sites can choose to associate their Tracking Technologies with you, independently collect your Personal Information and other data about you, and may or may not have their own published privacy policies.

We may engage and work with these Third-Party Services (as well as Service Providers) to serve advertisements on the Service and/or on other online services. Some of these ads may be tailored to your interest based on your browsing of the Website and elsewhere on the Internet, which may include use of precise location and/or Cross-device Data, sometimes referred to as “interest-based advertising” (“ Interest-based Advertising”), which may include sending

you an ad on another online service after you have left the Website (i.e., “retargeting”). We may use Google Analytics, Adobe Analytics or other Service Providers for analytics services. These analytics services may use cookies and other Tracking Technologies to help us analyze Website users and how they use the Website. Information generated by these analytics services (e.g., your IP address and other Usage Information) may be transmitted to and stored by these Service Providers on servers in the U.S. (or elsewhere) and these Service Providers and/or Third-Party Services may use this information for purposes such as evaluating your use of the Website, compiling statistic reports on the Website’s activity, and providing other services relating to Website activity and other Internet usage. See the “Exercising Choice and Preferences” section below for more information on your choices regarding these services.

We are not responsible for, and make no representations regarding, the policies or business practices of Third-Party Services, including how they collect, use, or share your information. These Third-Party Services may have their own terms of service, privacy policies or other policies and ask you to agree to the same. Be sure to review any available policies before submitting any personally identifiable information to or otherwise interacting with any Third-Party Services.

Exercising choice and preferences

Tracking Technologies. Regular cookies may generally be disabled or removed by tools available as part of most commercial browsers, and in some instances blocked in the future by selecting certain settings. Browsers offer different functionalities and options, so you may need to set them separately. Please be aware that if you disable or remove these technologies, some parts of the Website may not work and that when you revisit the Service your ability to limit browser-based Tracking Technologies is subject to your browser settings and limitations.

As discussed above, we may utilize Service Providers and Third-Party Services to carry out a variety of activities on the Website, including to monitor and analyze Web traffic and user activity.

Google Analytics (Google) - Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google utilizes the data collected to track and examine the use of this Website, to prepare reports on its activities, and to share them with other Google services. Information collected: cookie and Usage Data. Visit Privacy Policy athttps://www.google.com/intl/en/policies/?fg=1 . You may opt out of the Google Analytics service with the Google"s Browser Add-on that"s available athttps://tools.google.com/dlpage/gaoptout/ .

Certain companies may participate in the Digital Advertising Alliance (“DAA”) AdChoices Program and may display an Advertising Option Icon for Interest-based Ads that links to an opt-out tool which allows you to exercise certain choices regarding targeting. You can learn more about the DAA AdChoices Program at http://www.youradchoices.com/ and its opt-out program for mobile apps at http://www.aboutads.info/appchoices . To opt out of these types of ads, please visit the Network Advertising Initiative (“NAI”) for information about how to opt-out of interest-based advertising by their members. See http://www.networkadvertising.org for general information about the NAI andhttp://www.networkadvertising.org/managing/opt_out.asp for the opt-out page. Please be aware that, even if you are able to opt out of certain kinds of Interest-based Ads, you will continue to receive non-targeted ads. Further, opting out of one or more NAI or DAA members only means that those selected members should no longer under the DAA / NAI rules deliver certain targeted ads to you. This will affect services provided by the applicable DAA / NAI members, but does not mean you will no longer receive any targeted content and/or ads from non-participating parties. Also, if your browsers are configured to reject cookies when you visit the opt-out page, or you subsequently erase your cookies, use a different device or web browser(s), or use a non-browser-based method of access, your NAI / DAA browser-based opt-out may not, or may no longer, be effective. Mobile device opt-outs will not affect browser-based Interest-based Ads even on the same device, and you must opt-out separately for each device. We are not responsible for the effectiveness of, or compliance with, any third-parties’ opt-out options or programs or the accuracy of their statements regarding their programs.

We may also use Microsoft Advertising Services. To learn about the data Microsoft collects and how your data is used by it and to opt-out of certain Microsoft browser Interest-based Advertising, please visithere .

We may also use Google Ad Services. To learn more about the data Google collects and how your data is used by it and to opt-out of certain Google browser Interest-Based Advertising, please visit here .

Do Not Track. Some Web browsers incorporate a “Do Not Track” feature that signals to websites that you visit that you do not want to have your online activity tracked. Each browser communicates “Do Not Track” signals to websites differently, making it unworkable to honor each and every request correctly. In order to alleviate any communication error between browsers and website, we do not respond to “Do Not Track” signals at this time. As the technology and communication between browser and website improves, we will reevaluate the ability to honor “Do Not Track” signals and may make changes to our policy.

Marketing Communications. By submitting your email address through the Website, you are expressly consenting to receive emails from PetLab, including from PetLab’s affiliates, and from third parties concerning offers and advertisements unrelated to PetLab. To opt-out of receiving email messages from us, from our affiliates or from other third parties, click on the “Unsubscribe” link contained in each email. Please allow up to 10 business days for us to process your request. For text messages, follow the instructions provided in text messages from us to text the word, “STOP” (or as otherwise instructed). Please note if you decide not to receive marketing communications from us, you may still receive transactional communications, such as regarding your order(s) (i.e., order confirmation, shipping information, etc.).

Data security

We will implement reasonable and appropriate security procedures consistent with prevailing industry standards to protect data from unauthorized access by physical and electronic intrusion. Unfortunately, no data transmission over the Internet or method of data storage can be guaranteed 100% secure. Therefore, while we strive to protect your Personal Information by following generally accepted industry standards, we cannot ensure or warrant the absolute security of any information you transmit to us or archive at this Website.

Onward transfer outside your country of residence

Any Personal Information which we may collect on this Website may be stored and processed in our servers located in the United States or in any other country in which we, or our affiliates, subsidiaries, or agents maintain facilities. By using this Website, you consent to any such transfer of Personal Information outside your country of residence to any such location.

Updating personal information

At any time you may contact PetLab via email at contact@thepetlabco.com to update your Personal Information or to exercise any choices discussed in this Privacy Policy that may apply to you (see, for example, our State-Specific Privacy Notices below). If you need to update your credit card information (e.g, if you have received a new card), please promptly contact PetLab at contact@thepetlabco.com to update the Personal Information we have on file for you.

We may request identification prior to approving any requests to update your personal information. This is designed to protect your privacy. We reserve the right to decline any requests that are unreasonably repetitive or systematic, require unreasonable time or effort of our technical or administrative personnel, or undermine the privacy rights of others. We reserve the right to permit you to access your Personal Information in any account you establish with this Website for purposes of making your own changes or updates, and in such case, instructions for making such changes or updates will be provided where necessary.

Children"s online policy

We are committed to preserving online privacy for all Website visitors, including children. This Website is a general audience site. Consistent with the Children"s Online Privacy Protection Act (COPPA), we will not knowingly collect any information from, or sell to, children under the age of 13. If you are a parent or guardian who has discovered that your child under the age of 13 has submitted his or her personally identifiable information without your permission or consent, we will remove the information from our active list, at your request. To request the removal of your child"s information, please contact our site as provided below under “Contact Us”, and be sure to include in your message the same login information that your child submitted.

Contact us

If you have any questions regarding this Privacy Policy, please contact the owner and operator of this website business at:

PetLab LTD

Attn: Privacy Policy Officer

1375 Broadway, 15th Fl. | New York, NY 10018, Email: privacy@thepetlabco.com

U.S. State-Specific Privacy Notices

Effective Date (date last updated): 28 January 2022

I. California

You may also request a copy, including in Braille, or otherwise obtain disability access assistance by calling1-866-4-PETLAB

A. California Consumer Privacy Act

This California Privacy Notice (“ CA Privacy Notice”) applies to “Consumers” as defined under the California Consumer Privacy Act (together with its implementing regulations, the “CCPA”) as a supplement to our other privacy policies or notices, including the remainder of this Privacy Policy. In the event of a conflict between any other Company policy, statement, or notice and this CA Privacy Notice, this CA Privacy Notice will prevail as to California Consumers and their rights under the CCPA.

Section B of this CA Privacy Notice covers our collection, use, disclosure, and sale of California Consumers’ “Personal Information” (also referred to herein as “ PI”) as defined by the CCPA for the twelve months preceding the Effective Date. Our practices after the CA Privacy Notice Effective Date may differ. Consult our general Privacy Policy or notice at collection for more current information. Section B of this CA Privacy Notice describes your rights under the CCPA and explains how to exercise those rights. Notably, this CA Privacy Notice does not apply to data that is not treated as PI under the CCPA or to the extent the data is subject to an exemption from the CCPA. This CA Privacy Notice also does not apply to information collected by Third-Party Services.

B. Collection, Use and Sharing of PI

We give you notice that we collect, use and share your PI as set forth below.

1. Use of PI

In general, we collect, retain, use and share your PI to provide you services and as otherwise related to the operation of our business as outlined below, and as described in more detail above in our Privacy Policy, including in sections entitled “How We Use Your Information.” We may collect, use and share the PI we collect for the CCPA’s defined business purposes, including:

· Performing services, such as fulfilling your orders

· Research and development and improving our products and services

· Quality assurance

· Security and fraud prevention

· Debugging and fixing errors on the Website

· Processing interactions and transactions on the Website (e.g., short-term, transient use of PI)

· Managing interactions and transactions on the Service (e.g., auditing related to a current interaction with the consumer and concurrent transactions)

In addition to the CCPA-defined business purposes, we collect, use and share your PI for the additional business and operational purposes described in our Privacy Policy (together with the CCPA-defined purposes, our “ Business Purposes”). Subject to restrictions and obligations of the CCPA, our Vendors may also use your PI for some or all of the Business Purposes. Our Vendors may themselves engage service providers or subcontractors to enable them to perform services for us, which sub-processing is, for purposes of certainty, an additional Business Purpose for which we are providing you notice.

2. Categories of PI Collected and Shared with Third Parties

The first column of the table below describes the categories of PI we collect about you. The second column of the table describes, as to each category of PI, the third parties with whom we shared your PI for Business Purposes.

As discussed in detail further below, we do not believe that we have “Sold” your PI as that term is defined in the CCPA. As described in the “Tracking Technologies” section of the Privacy Policy above, cookie operator Third-Party Services (“ Cookie Operators”) collect PI that falls under the Identifiers (e.g., cookie ID, IP address, and other online IDs) and Internet Usage Information categories. To the extent we have Sold PI, which we do not believe we have, the categories of PI would be Identifiers and Internet Usage information, and the recipients of each such category of PI would be Cookie Operators. Please see the “Do Not Sell” section below for information on how to exercise choice with respect to PI collected by Cookie Operators.

Category of PI

Categories of Business Purpose Recipients

Identifiers and contact information (such as name, phone number, address, email address, identification number, IP address, cookie ID)

· Software and other business Vendors (“Business Vendors”)

· Marketing Vendors

· Corporate Affiliates

· Government entities (e.g., related to compliance obligations)

Personal Records (such as payment information, identification number)

· Business Vendors

· Marketing Vendors

· Corporate Affiliates

· Government entities

Personal Characteristics or Traits (such as age, gender)

· Business Vendors

· Corporate Affiliates

· Government Entities

Customer Account Details / Commercial Information (such as your purchase history)

· Business Vendors

· Marketing Vendors

· Corporate Affiliates

· Government Entities

Health and Biometric Information (such as relating to benefits if you are employed by us)

· Business Vendors

· Corporate Affiliates

· Government Entities

Internet Usage Information

(such as search or browsing history on the Service)

· Business Vendors

· Marketing Vendors

· Corporate Affiliates

· Government Entities

Location Data (such as where you enable location-based features on your device)

· Business Vendors

· Marketing Vendors

· Corporate Affiliates

· Government Entities

Audiovisual and Similar Information (such as customer service call recordings)

· Business Vendors

· Corporate Affiliates

· Government Entities

     Inferences from PI Collected

· Business Vendors

· Marketing Vendors

· Corporate Affiliates

· Government Entities

3. Sources of PI

As described in our Privacy Policy, we collect PI directly from you or your device, third party services, vendors, our corporate affiliates, and other third parties.

C. California Privacy Rights

4. Making a Request and Scope of Requests

We provide California Consumers the privacy rights under the CCPA as described in this section.

You have the right to exercise these rights via an authorized agent who meets the agency requirements of the CCPA and related regulations. As permitted by the CCPA, any request you submit to us is subject to an identity verification process (“Verifiable Consumer Request”) as described below in the “Verifying Your Request” section below. We will not fulfill your CCPA request unless you have provided sufficient information for us to reasonably verify you are the Consumer about whom we collected PI. To make a request to know or request to delete, please submit your request to us by contacting us using either of the following methods:

Email: privacy@thepetlabco.com

Some PI we maintain about Consumers is not sufficiently associated with enough PI about the Consumer for us to be able to verify that it is a particular Consumer’s PI when a Consumer request that requires verification pursuant to the CCPA’s verification standards is made (e.g., clickstream data tied only to a pseudonymous browser ID). We do not include that data in response to those requests.

We will make commercially reasonable efforts to identify Consumer PI that we collect, process, store, disclose and otherwise use and to respond to your California Consumer privacy rights requests. We will typically not charge a fee to fully respond to your requests; provided, however, that we may charge a reasonable fee, or refuse to act upon a request, if your request is excessive, repetitive, unfounded or overly burdensome. If we determine that the request warrants a fee, or that we may refuse it, we will give you notice explaining why we made that decision. You will be provided a cost estimate and the opportunity to accept such fees before we will charge you for responding to your request.

5. Verifying Your Request

The CCPA requires us to verify Right to Know and Right to Delete Requests. At a minimum, we will confirm that you are the owner of the email address with which you have made the request, and reserve the right to request further information in order to verify your identity. We will endeavor to respond to your verifiable requests within 45 days of receipt. If we require more time (up to 45 additional days), we will inform you of the reason and extension period in writing. Any disclosures we provide will only cover the 12-month period preceding the date of your request.

For a specific pieces request and a request to delete important data, we are required to verify a Consumer’s identity to a reasonably high degree of certainty, which may include matching at least three data points provided by the Consumer with data points maintained by us (and which we have determined to be reliable for the purpose of verifying the consumer), together with a signed declaration under penalty of perjury that the requestor is the consumer whose PI is the subject of the request. If we cannot verify you to that standard, we will treat the request as a categories request or a standard deletion request, for which we require a reasonable degree of certainty based on matched data. If we are unable to verify you to that standard, we will refer you to this CA Privacy Notice and explain what alternatives, if any, are available to you with regard to your request.

6. Authorizing an Agent

You may designate an authorized agent to submit your consumer request on your behalf by submitting a request in the manner described above. If you are an authorized agent who would like to make a request, the CCPA requires that we ensure that a right to know or deletion request made by an agent is a Verifiable Consumer Request and allows us to request further information to ensure that the Consumer has authorized the agent to make the request on their behalf. Generally, we will request that an agent provide proof that the Consumer gave the agent permission to submit the request or is otherwise authorized to make the request on the Consumer’s behalf. For example, we may require an agent to submit an agent authorization form that meets the requirements of the CCPA together with their Consumer Rights Request. To the extent allowed by the CCPA, we may also require the Consumer to authenticate the agent’s request.

7. Your California Consumer Privacy Rights

The CCPA provides California residents with specific rights regarding their PI. This section describes your rights under the CCPA.

a. Right to Know

i. Right to Know Categories

You have the right to request that we share with you certain information to you about our collection, use and disclosure of your PI over the 12 month period prior to the request date. You can request that we disclose to you: (1) the categories of PI we collected about you; (2) the categories of sources for the PI; (3) our business or commercial purpose for collecting or selling that PI (i.e., if we have, in fact, sold PI); (4) the categories of third parties with whom we shared that PI; (5) a list of the categories of PI disclosed for a business purpose in the prior 12 months and, for each, the categories of recipients, or that no disclosure occurred; and (6) a list of the categories of PI sold about you in the prior 12 months and, for each, the categories of recipients, or that no sale occurred

ii. Right to Know Specific Pieces

You have the right to request a transportable copy of the specific pieces of PI we collected about you in the 12-month period preceding your request.

Please note that PI is retained by us for various time periods, so there may be certain information that we have collected about you that we do not even retain for 12 months (and thus, it would not be able to be included in our response to you). Please also note that you are limited to making two “right to know” requests in any 12-month period.

b. Right to Delete

You have the right to request that we delete any of your PI that we have collected directly from you and retained, subject to certain exceptions, which we will explain if they apply. After we confirm that your deletion request is a Verifiable Consumer Request, subject to permitted retention exceptions, we will carry out one or more of the following as required by the CCPA: (i) permanently erase your PI on our existing systems with the exception of archived or back-up systems, (ii) deidentify your PI, or (iii) aggregate your PI with other information. In our response to your request to delete, we will tell you the method for deleting your PI. Where legal exceptions will apply to your request for deletion, we will tell you which one(s) and will limit retention to the permitted purpose(s).

c. Do Not Sell

You have the right to opt-out of the sale of PI under the CCPA.

As stated above, we do not believe that we Sell PI. However, we will treat PI collected by Cookie Operators as subject to an opt-out request and provide the ability for you to exercise choice with respect to cookies and other tracking technologies operated by Cookie Operators, by following the instructions provided below under Tracking Technologies – Your Additional Choices. Please note that, given technical constraints due to the way cookies operate, you must do this separately using each browser or device you use and your opt-out will not be effective if you block or clear cookies.

We may disclose your PI for the following purposes, which are not a Sale: (i) if you direct us to share your PI; (ii) to comply with your requests under the CCPA; (iii) disclosures amongst the entities that constitute Company as defined above, to Company’s service providers, or as part of a merger or asset sale; and (iv) as otherwise required or permitted by applicable law. Though we have stated we do not believe we Sell PI, the CCPA also requires us to state that we do not knowingly Sell the PI of Consumers under 16.

iii. Tracking Technologies – Your Additional Choices

Cookies Preference Center: You can exercise control over cookies and other tracking technologies via our cookie preference center available here:

Cookie Settings

Browser Settings: You can exercise control over browser-based cookies by adjusting the settings on your browser, and mobile devices may offer ad and data limitation choices. Please note that when you use cookie control tools, you will have to change your settings for each browser and device you use, and your limitation on cookies can limit the functionality of online services you use, including our services. Use the help function on your browser or click on the applicable links below to learn more:

Mobile Device Settings: You can use mobile device settings to limit mobile tracking technologies and associated activities. For instance, you can adjust or reset the advertising identifiers on your mobile device in the device settings. iOS users can visit Settings > Privacy > Advertising > Reset Advertising Identifier. Android users can visit Google settings > Ads > Reset advertising ID. These controls work much like deleting cookies in a browser—the device is harder to associate with past activity, but tracking may still occur using the new advertising identifier. In addition, third party tools may enable you to search for and opt-out of some of these trackers, such as the Ghostery browser plug-in available at https://www.ghostery.com/ .

Ad Industry Tools: Some third parties that may collect PI in association with your use of our online services for advertising, analytics and other purposes, and may Sell that PI downstream, provide you the opportunity to opt-out of their Sales. Please visit https://www.privacyrights.info/ to opt-out of the Sale of PI by participating Third Parties. You must opt out on every device and browser you use in order to effectuate your “Do Not Sell” requests from these parties. However, opting out does not mean you will stop seeing ads and you may continue to still see interest-based ads. To learn more about interest-based advertising and additional opt-out choices related to it, please visithttps://optout.aboutads.info/?c=2&lang=EN andhttps://optout.networkadvertising.org/?c=1 .

Please note, clearing cookies or changing settings may affect your choices and you have to opt-out separately via each browser and other device you use. Cookie-enabled opt-out signals may no longer be effective if you delete, block or clear cookies. We are not responsible for the completeness, accuracy or effectiveness of any third-party notices, tools or choices.

d. Right to Non-Discrimination for Exercise of Privacy Rights and Notice of Financial Incentive

We will not discriminate against you in a manner prohibited by the CCPA because you exercise your CCPA rights. However, we may charge a different price or rate, or offer a different level or quality of good or service, to the extent that doing so is reasonably related to the value of the applicable data. In addition, we may offer you financial incentives for the collection, sale, retention and use of your PI as permitted by the CCPA that can, without limitation, result in reasonably different prices, rates, or quality levels.

Please note that participating in incentive programs is entirely optional, you will have to affirmatively opt-in to the program and you can opt-out of each program (i.e., terminate participation and forgo the ongoing incentives) prospectively by following the instructions in the applicable program description and terms. The material aspects of any financial incentive will be explained and described in its program terms. We may add or change incentive programs and/or their terms by posting notice on the program descriptions and terms linked to above so check them regularly.

Mailing List Notice of Financial Incentive: Currently, we provide you the ability to sign up for our mailing list for Pupdates and access to special discounts, which may be considered a “financial incentive” under the CCPA. You may opt-in to our mailing list by signing up in various places on our website or during the checkout process. As part of our mailing list, we collect the following categories of PI: identifiers and contact information (i.e., your email address), customer account details and commercial information (e.g., purchase history), and internet usage information (e.g., whether you opened an email and clicked on a promotion, etc.). You may withdraw from our mailing list by unsubscribing, by following the instructions in each promotional email sent by us to you. For CCPA purposes, we treat the value of your PI collected through our promotional programs like our mailing list as equivalent to our total program expenses (excluding the value of benefits). The value of each program is the value of the program benefits, including free products, discounts, and coupons (if offered), the value of which will depend on individual customer participation.

D. California “Shine the Light” Notice

As described in this Privacy Policy, from time to time we may make your personal information available to third parties for their marketing purposes. California law permits individuals who are California residents to request certain information about our disclosure of personal information to third parties for direct marketing purposes. If you are a California resident and would like to make such a request, please submit your request in an e-mail to privacy@thepetlabco.com , with the phrase “California Privacy Request” in the subject line, the domain name of the website you are inquiring about, along with your name, address and email address. We will respond to you within thirty days of receiving such a request. If you do not want us to share your personal information with third parties, you may opt-out of this information sharing by emailing us at privacy@thepetlabco.com .

E. Other California Notices

We disclose our tracking and “do not track” practices in the “Do Not Track Requests” section of our Privacy Policy. Though the Website is not meant for those under 18, any California residents under the age of 18 who have registered to use the Website, and who have posted content or information on the Website, can request that such information be removed by contacting us at the e-mail address below.

In accordance with California Civil Code Sec. 1789.3, California resident users are entitled to know that they may file grievances and complaints with California Department of Consumer Affairs, 1625 North Market Blvd., Suite N 112, Sacramento, CA 95834; or by phone at 916-445-1254 or 800-952-5210; or by email to dca@dca.ca.gov .

II. Nevada

We do not believe we “sell” “covered information” of Nevada “consumers” as those terms are defined by Nevada Revised Statutes § 603(A) et seq. Nevertheless, in accordance with the requirements of Nevada law, Nevada consumers may submit requests to opt out of the sale of their personal information by contacting us at privacy@thepetlabco.com .

III. Contact us

If you have any questions regarding these State-Specific Privacy Notices, please contact us at:

PetLab Co.

Attn: Privacy Policy Officer

1375 Broadway, 15th Fl. | New York, NY 10018, Email: privacy@thepetlabco.com

Telephone: 1-866-4-PETLAB

Cookie Preferences

Use the following button to manage your cookie preferences