Chewy, Inc. (NYSE: CHWY) is a Delaware-incorporated online pet retailer whose privacy policy discloses collecting pet health, financial and insurance data through its retail, pharmacy and telehealth services, and obtaining supplemental data from payment processors, data brokers and third-party ad technology companies. Chewy's own privacy policy self-declares a CCPA "sale" or "sharing" of identifiers, commercial and online-activity data with advertising networks and analytics providers for cross-context behavioral advertising, and separately discloses that its pharmacy may share pet prescription information with pharmaceutical manufacturers. Its App Store privacy label confirms Purchases, Contact Info, Search History, Identifiers and Usage Data are used to track users across other companies' apps and websites. Ownership is traceable through mandatory SEC 10-K filings, which disclose that despite its public listing, affiliates of private-equity firm BC Partners retain control of more than 80% of Chewy's voting power. No FTC or state regulator enforcement action or confirmed major breach was found; Chewy's own 10-K states it "occasionally" experiences cybersecurity incidents, including customer account takeovers via credential stuffing, which it says have not had a material impact to date.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
7 ON FILE
COLLECTION
Apple's App Store privacy label for the Chewy app discloses that Purchases, Financial Info, Contact Info, User Content, Search History, Identifiers, Usage Data and Diagnostics are collected and linked to a user's identity.
Chewy's privacy policy discloses that it may supplement its records with information from outside sources including payment processors, data brokers, third-party ad technology companies, and veterinarians, who may provide specific pet health information such as diseases, prescriptions and treatments.
Chewy, Inc.'s SEC Form 10-K discloses it is incorporated in Delaware and, in its risk factors, names affiliates of private-equity firm BC Partners (the 'BCP Stockholder Parties') as its controlling stockholder, exercising control over more than 80% of the voting power of Chewy's outstanding common stock despite its public NYSE listing.
Chewy's California Privacy Notice self-declares that it may sell or share personal information for cross-context behavioral advertising purposes with third-party online advertising services, data analytics providers and social media networks -- a disclosure it frames as a potential CCPA 'sale' or 'sharing.'
Chewy's SEC Form 10-K (Item 1C, Cybersecurity) discloses that Chewy occasionally experiences incidents where bad actors attempt to take over customer accounts using stolen credentials and occasionally experiences misuse or unauthorized disclosure of personal information, stating these incidents have not had a material impact on the company to date; no FTC or state regulator enforcement action was found.
Apple's App Store privacy label for the Chewy app discloses that Purchases, Contact Info, Search History and Identifiers may be used to track users across apps and websites owned by other companies.
Chewy's privacy policy discloses that Chewy and third-party ad technology providers use cookies, web beacons, clear GIFs, pixels, device identifiers and other online information-gathering tools to collect information about users and their devices across different websites and online services.