Last Updated: May 12, 2023

 

This Privacy Policy For State Residents (“State Privacy Policy”) supplements the information contained in Paw Brands, LLC (D/B/A Paw.com) and its subsidiaries and affiliates companies/brands (collectively, “Paw.com”, “us”, “our” or “we”) Privacy Policy and applies solely to all visitors, users and others who reside the states listed below (“you”). We adopt this notice to comply with state laws, including but not limited to the California Consumer Privacy Act of 2018 (the “CCPA”), the California Privacy Rights Acts (the “CPRA”), the Colorado Privacy Act (the “CPA”), the Connecticut Act Concerning Personal Data Privacy and Online Monitoring (the “PDPOM”), Nevada Revised Statues § 603.A.300-360 (the “NRS”), the Utah Consumer Privacy Act (the “UCPA”), and the Virginia Consumer Data Protection Act (the “VCDPA”).

 

We encourage you to refer to this State Privacy Policy periodically.

 

PLEASE READ THIS STATE PRIVACY POLICY CAREFULLY. YOUR USE OF THIS WEBSITE SIGNIFIES YOUR AGREEMENT TO THIS STATE PRIVACY POLICY.

 

1. Residents of California; 
2. Residents of Colorado; 
3. Residents of Connecticut; 
4. Residents of Nevada; 
5. Residents of Utah;
6. Residents of Virginia;
7. Do Not Sell or Share My Personal Information; Making Requests or Exercising Your Rights;
8. Verifying Request or Exercise of Rights; 
9. Changes to this State Privacy Policy 

 

 

1. Residents of California

 

Any terms defined in the CCPA have the same meaning when used in this Residents of California section of the State Privacy Policy.

 

Residents of California may have the right to:

 

• Request we disclose certain information to you about our collection, use, disclosure and sale of your personal information over the past twelve (12) months. We collected, disclosed (for business purposes) and/or sold the following categories of personal information from consumers within the last twelve (12) months:

Category	Examples	Collected	Disclosed	Sold
Identifiers	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.	Yes	Yes	No
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.Some personal information included in this category may overlap with other categories.	Yes	Yes	No
Protected classification characteristics under California or federal law	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).	Yes	Yes	No
Commercial information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	Yes	Yes	No
Biometric information	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	Yes	Yes	No
Internet or other similar network activity	Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.	Yes	Yes	No
Geolocation data	Physical location or movements.	Yes	Yes	No
Sensory data	Audio, electronic, visual, thermal, olfactory, or similar information.	Yes	Yes	No
Professional or employment-related information	Current or past job history or performance evaluations.	No	N/A	No
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99))	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	No	N/A	No
Inferences drawn from other person information	Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	Yes	Yes	No

 

• Request we delete any of your personal information that we collected for you and retain, subject to certain exception.
• Direct us not to sell your personal information at any time. We do not sell your personal information.
• Beginning January 1, 2023, California residents may have additional rights under the California Privacy Rights Act, effective on January 1, 2023 (the “CPRA”) to:
  • Direct us not to share your Personal Information at any time.
  • Correct inaccuracies in their Personal Information.
  • Direct us not to use certain sensitive information.

 

We will not discriminate against California residents exercising any of their rights under the CCPA.

 

As of July 1, 2022, we have received, complied, and denied the following number of requests for California residents in the preceding twelve (12) months:

 

Request	Received	Complied	Denied	Average Response Time
Request to Know	0	N/A	N/A	N/A
Request to Delete	0	N/A	N/A	N/A
Request to Opt-Out	0	N/A	N/A	N/A

 

 

Residents of California may also have the right to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes.

 

2. Residents of Colorado

 

 

Any terms defined in the Colorado Privacy Act, effective on July 1, 2023, (the “CPA”) have the same meaning when used in this Section 2 of this State Privacy Policy.

 

Beginning July 1, 2023, residents of Colorado may have the right to:

 

• Confirm whether we process their personal information;
• Access and delete certain personal information;
• Correct inaccuracies in their personal information, taking into account the information’s nature and processing purpose;
• Data portability;
• Opt-out of personal data processing for targeted advertising and sales; and
• Opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.

 

3. Residents of Connecticut

 

Any terms defined in the Connecticut Act Concerning Personal Data Privacy and Online Monitoring, effective on July 1, 2023, (the “PDPOM”) have the same meaning when used in this Section 3 of this State Privacy Policy.

 

Beginning July 1, 2023, residents of Connecticut may have the right to:

 

• Confirm whether we process their personal information;
• Access and delete certain personal information;
• Correct inaccuracies in their personal information, taking into account the information’s nature and processing purpose;
• Data portability;
• Opt-out of personal data processing for targeted advertising and sales; and
• Opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.

 

4. Residents of Nevada

 

Any terms defined in the Nevada Revised Statues § 603.A.300-360 (the “NRS”) have the same meaning when used in this Section 4 of this State Privacy Policy. Residents of Nevada may have the right to a limited right to opt-out of certain sales of Personal Information.

 

Residents of Nevada may have the right to a limited right to opt-out of certain sales of Personal Information:

 

We do not currently sell data triggering Nevada’s opt-out requirements.

 

 

 

5. Residents of Utah

 

Any terms defined in the Utah Consumer Privacy Act, effective on December 31, 2023, (the “UCPA”) have the same meaning when used in this Section 5 of this State Privacy Policy.

 

Beginning December 31, 2023, residents of Utah may have the right to:

 

• Confirm whether we process their personal information;
• Access and delete certain personal information;
• Data portability; and
• Opt-out of personal data processing for targeted advertising and sales.

 

 

6. Residents of Virginia

 

Any terms defined in the Virginia Consumer Data Protection Act, effective January 1, 2023, (the “VCDPA”) have the same meaning when used in this Section 6 of this State Privacy Policy.

 

Beginning January 1, 2023, residents of Virginia may have the right to:

 

• Confirm whether we process their personal information;
• Access and delete certain personal information;
• Data portability;
• Opt-out of personal data processing for targeted advertising and sales;
• Correct inaccuracies in their personal information, taking into account the information’s nature and processing purpose; and
• Opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.

 

7. Do Not Sell or Share My Personal Information; Making Requests or Exercising Your Rights

 

State residents, or their authorized agents if permitted under applicable law, exercising their right to opt-out of the sale or sharing of their personal information, or limit the use of their sensitive personal information, may do so by contact us by:

• emailing us at privacy@paw.com;
• emailing us at donotsell@paw.com, if you are requesting or exercising your right that we do not sell or share your personal information, or that we limit the use of your sensitive personal information (for more information about how to opt-out of receiving targeted advertising from certain third-party advertisers, please see our Cookies and Tracking Notice);
• calling us at 1 (800) 607-1865;
• sending us a written request by mail to:

 

Your request or exercise of your right must provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, which should include:

1. The state of which you are a resident;
2. Description of your request/exercise of your right, with sufficient detail that allows us to properly understand, evaluate, and respond; and
3. Either:
   • Identifying personal information; or
   • Using your password protected customer account, if any.

 

Please note that we cannot delete your personal information except by also deleting your customer account, if any. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

 

 

8. Verifying Request or Exercise of Rights

 

Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your personal information. You may also make a request to know or delete on behalf of your child.

 

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. You do not need to create a customer account with us to submit a request to know or delete. However, we do consider requests made through your password protected customer account sufficiently verified when the request relates to personal information associated with that specific account. We will only use personal information provided in the request to verify the requestor's identity or authority to make it.

 

 

9. Changes to this State Privacy Policy

 

We reserve the right to amend this State Privacy Policy at any time to reflect changes to our practices or the law. We will make the revised State Privacy Policy accessible through the Services. Please check the Site and Services periodically for updates.

 

The date at the top of this State Privacy Policy tells you when it was last updated. If we make material changes to the way we collect or use your information, you will be provided with appropriate notice, including, but not limited to, by posting the updated State Privacy Policy on this website, and providing notice in accordance with legal requirements. Any changes to this State Privacy Policy will become effective when the revised State Privacy Policy is posted. By continuing to use the Services following any changes to this State Privacy Policy, you acknowledge you have read and understand the updated State Privacy Policy, and you understand how make requests or exercise your rights consistent with any state rights you may have.