Effective Date: October 15, 2026 Version: 1.0 Applies to: All individuals whose personal information the Company holds and who hold rights under the privacy law of a U.S. state.
Article 1: Introduction and Scope
1.1 This Addendum supplements the Privacy Policy and states the rights available under state privacy laws in the United States, including the California Consumer Privacy Act as amended by the California Privacy Rights Act, and the comprehensive privacy laws of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and Montana, together with each other state law that grants a right described in this Addendum. The Privacy Policy states the Company's general privacy practices; this Addendum states the state-specific rights and the procedure for exercising each right.
1.2 A right described in this Addendum is available only to a resident of a jurisdiction whose law grants the right. Description of a right in this Addendum does not create the right for a person whose jurisdiction does not grant the right. Where a jurisdiction grants greater rights than this Addendum states, the jurisdiction's rights control. The Company applies the most protective applicable rule to a request.
1.3 If a provision of this Addendum conflicts with the Privacy Policy, this Addendum controls for the state right it governs. If a provision of this Addendum conflicts with the Terms of Use, this Addendum controls for the subject it governs.
Article 2: Definitions
2.1 Account: the account a person or business establishes with the Company to use the Platform.
2.2 Authorized Agent: a person designated by a consumer, in accordance with Article 5, to exercise a right under this Addendum on the consumer's behalf.
2.3 Buyer: a person who purchases Products or Services through the Platform.
2.4 Company: All About Pawz, LLC, a Tennessee limited liability company.
2.5 Consumer: a natural person who is a resident of a state whose privacy law grants a right under this Addendum, acting in an individual or household capacity.
2.6 Order: a Buyer's purchase of Products or Services through the Platform, accepted in accordance with the Order Formation and Acceptance Policy.
2.7 Personal Information: information that identifies, relates to, or is reasonably capable of being associated with a Consumer, as defined by the applicable state law.
2.8 Platform: the websites, applications, and services the Company operates under the name All About Pawz, including aapawz.com.
2.9 Products: goods offered for sale through the Platform.
2.10 Seller: a person or business the Company has accepted to offer Products or Services through the Platform.
2.11 Sensitive Personal Information: Personal Information in a category the applicable state law designates as sensitive, including precise geolocation and health-related information, including triage content submitted through the Platform.
2.12 Services: services offered through the Platform, including grooming, veterinary, pharmacy, and fulfillment services, as applicable.
2.13 User: any person who accesses or uses the Platform, whether or not the person holds an Account.
Article 3: State Privacy Rights
3.1 Right to know and to access. A Consumer may request: the categories of Personal Information collected about the Consumer; the categories of sources of the information; the purposes of collection; the categories of third parties to whom the information was disclosed; and the specific pieces of Personal Information held about the Consumer. The Company provides the response in a portable and usable format.
3.2 Right to deletion. A Consumer may request deletion of Personal Information collected from the Consumer, subject to the exceptions the applicable law recognizes, including retention of a transaction record the law requires, retention for security and fraud prevention, retention for legal compliance, and retention of information needed to complete a transaction the Consumer requested. Where an exception applies to part of the information, the Company deletes the remainder and identifies each exception relied on and the information to which the exception applies. A blanket denial that rests on an exception applicable to only part of the information does not satisfy this Article.
3.3 Right to correction. A Consumer may request correction of inaccurate Personal Information. The Company corrects the information or, where the accuracy of the information is genuinely in dispute: including a fraud assessment the Consumer disputes: records the dispute in the record rather than presenting the disputed information as certain.
3.4 Right to opt out of sale and sharing. A Consumer may opt out of the sale of Personal Information and of the sharing of Personal Information for advertising directed by behavior across different services. The Company does not sell Personal Information for money. The opt-out in this Article governs disclosure for such advertising and is exercised through the privacy controls on the Platform and honored across the Site. The Company honors a Global Privacy Control signal as an opt-out under this Article.
3.5 Right to limit Sensitive Personal Information. A Consumer may direct the Company to limit use and disclosure of Sensitive Personal Information to the use necessary to perform the Services the Consumer requested. The Company's ordinary handling already limits such use; this Article states the Consumer's right to direct the limit as a matter of instruction.
3.6 Right against discrimination. The Company shall not deny goods or services, degrade quality, or charge a different price to a Consumer by reason of the Consumer's exercise of a right under this Addendum, except where a difference is reasonably related to the value of the Consumer's information and the relationship is disclosed, as the Privacy Policy discloses for a financial incentive connected to the Loyalty Program Terms.
3.7 State categories. Without limiting Articles 3.1 through 3.6: (a) a California resident holds each right stated in this Article, including the right to limit Sensitive Personal Information in Article 3.5; (b) a resident of Colorado, Connecticut, Virginia, Oregon, Texas, or Montana holds the rights to know and access, deletion, correction, and opt-out stated in this Article, together with the appeal right in Article 4.5; (c) a Utah resident holds the rights to know and access, deletion of information the Consumer provided, and opt-out stated in this Article; and (d) a resident of another state holds the rights that state's law grants and that this Article describes in substance.
Article 4: How to Exercise a Right
4.1 A Consumer exercises a right under this Addendum by request to support@aapawz.com or through the privacy controls linked in the footer of each page of the Site. The request states the right exercised and the person whose information is at issue. A request from an authenticated Account that states "delete the Personal Information held about the account holder" is a complete request.
4.2 The Company verifies identity in proportion to the sensitivity of the request: authentication of the Account for an Account holder, and a reasonable verification process for a request made without an Account. Verification demands no more than the request warrants. A verification step that demands information disproportionate to the request does not satisfy this Article.
4.3 The Company responds within the period the applicable law sets, generally forty-five (45) days, with one extension where the law permits and the Company communicates the extension and its reason before the initial period expires. The Company tracks the age of each open request; an unanswered request past its deadline is a compliance failure and not a queue position.
4.4 A denial states the specific basis for the denial: the exception relied on and the information to which the exception applies: and states the appeal path in Article 4.5. A response that states only that a request is "denied under policy" is not a denial under this Article.
4.5 Appeal of a denied request. A Consumer may appeal a denial by written notice to legal@aapawz.com, stating the request denied and the grounds of appeal. The appeal is decided by a person who did not make the original decision, and the Company communicates the decision with reasons. The Company's decision on appeal is final within the Company's process. Appeal of a privacy denial follows this Article and not the Platform dispute process in the Dispute Resolution Policy.
Article 5: Authorized Agents
5.1 A Consumer may designate an Authorized Agent to exercise a right under this Addendum on the Consumer's behalf, including a legal representative, a privacy service, and a family member with proper authorization.
5.2 The Company verifies both the agent's authority and the Consumer's identity. Authority is established by signed permission from the Consumer, a power of attorney, or the proof the applicable jurisdiction prescribes. Agent authority without verification of the Consumer's identity does not establish whose information is at issue, and identity verification without proof of authority does not establish a right to act for the Consumer. Each verification is required.
Article 6: Transparency
6.1 The Company publishes request statistics: requests received by type, requests granted and denied in whole or in part, and the median response time. Publication is annual at minimum.
6.2 A material change to a privacy practice that affects a right under this Addendum: including a new disclosure of Personal Information for advertising and a new use of Sensitive Personal Information: is disclosed before the change takes effect and not only in a later revision of a Company document.
Article 7: Liability
7.1 Exclusion of certain damages. To the fullest extent permitted by law, neither party is liable to the other for indirect, incidental, special, punitive, or consequential damages, or for lost profits, lost revenue, or loss of goodwill, arising out of or relating to this Addendum, even if the party has been advised of the possibility of those damages.
7.2 Cap. To the fullest extent permitted by law, the Company's total liability arising out of or relating to this Addendum shall not exceed the greater of (a) the amounts the Consumer paid to the Company under the Company's documents in the twelve months before the event giving rise to the claim, or (b) one hundred dollars ($100).
7.3 Carve-outs. This Article does not limit (a) a party's indemnification obligations under this Addendum; (b) liability for fraud or willful misconduct; (c) amounts owed for Orders, fees, chargebacks, or refunds under the Company's documents; or (d) liability or a right that cannot be limited under applicable law, including a right granted by a state privacy law that prohibits waiver.
7.4 Essential purpose. The parties agree that this Article allocates risk between them, that it is an essential part of the basis of their bargain, and that it applies even if a limited remedy fails of its essential purpose.
Article 8: Indemnification
8.1 Duty. Each party shall indemnify, defend, and hold harmless the Company and its members, managers, employees, and agents from and against every claim, demand, action, loss, liability, judgment, settlement, cost, and expense (including reasonable attorneys' fees) arising out of or relating to: (a) that party's breach of this Addendum; (b) that party's violation of any law or of the rights of any person, including submission of a fraudulent privacy request or a request for another person's information without authority; and (c) taxes for which that party is responsible under the Company's documents. For a Consumer, this duty is limited to claims arising from the Consumer's own misuse of the Platform and fraudulent requests.
8.2 Procedure. The Company shall give prompt written notice of a claim under this Article. The indemnifying party shall control the defense with counsel reasonably acceptable to the Company. The Company may participate in the defense at its own expense. The indemnifying party shall not settle a claim in a manner that imposes any obligation or restriction on the Company, or that does not release the Company fully, without the Company's prior written consent.
8.3 Survival. This Article survives the termination of this Addendum.
Article 9: Enforcement and Appeals
9.1 Investigation. The Company may investigate any suspected violation of this Addendum, including a fraudulent request and an impersonation. The party under investigation shall cooperate with an investigation and shall produce the records relevant to the request under review.
9.2 Notice. If the Company determines that a party has violated this Addendum, the Company shall give written notice stating the provision violated and the facts relied on, except where notice would compromise an investigation of fraud, a safety risk, or a legal obligation.
9.3 Opportunity to cure. Where a violation is capable of cure, the party has ten (10) business days from notice to cure it and to confirm the cure in writing. No cure period applies to fraud, unlawful conduct, or a violation that by its nature cannot be cured.
9.4 Measures. If a violation is established and is not cured within the period allowed, the Company may, proportionate to the violation: (a) issue a written warning; (b) decline a fraudulent or unauthorized request; (c) suspend the Account, in whole or in part; (d) terminate this Addendum as it applies to the party and the Account; and (e) exercise any other right or remedy available under the Company's documents or at law.
9.5 Appeal. Appeal of a denied privacy request is governed by Article 4.5 and is made to legal@aapawz.com. Appeal of a Measure under this Article is made by written notice to legal@aapawz.com within thirty (30) days of the Measure, stating the grounds and attaching the records relied on. Each appeal is decided by a person who did not make the original decision. The Company's decision on appeal is final. A Measure remains in effect during an appeal unless the Company directs otherwise in writing.
9.6 No waiver by delay. The Company's delay in acting on a violation is not a waiver of the violation or of any later violation of the same kind.
Article 10: Term and Termination
10.1 Term. This Addendum takes effect when the Company first holds a Consumer's Personal Information and continues for so long as the Company holds that information, subject to termination under this Article. A statutory right under Article 3 is not extinguished by termination of an Account for so long as the Company holds the Consumer's Personal Information and the applicable law grants the right.
10.2 Termination by the Company. The Company may terminate this Addendum as it applies to a party, and the party's Account, on thirty (30) days' written notice for any reason, and immediately on written notice if the party materially breaches this Addendum or a Company document, engages in fraud, or becomes ineligible to participate.
10.3 Termination by the party. A party may terminate this Addendum as it applies to that party on thirty (30) days' written notice to support@aapawz.com, provided the party has no request or investigation outstanding.
10.4 Effect of termination. On termination: (a) the rights granted under the Company's documents end, subject to Article 10.1; (b) obligations that arose before termination: including payment, refund, chargeback, record-keeping, and indemnification obligations: survive until satisfied; and (c) the Company shall disburse amounts owed, less amounts the Company may set off under the Company's documents, within thirty (30) days, except amounts held in connection with an open investigation or dispute.
10.5 Survival. The Definitions, Liability, Indemnification, Enforcement and Appeals (for measures taken before termination), Dispute Resolution, and General Provisions Articles survive termination.
Article 11: Dispute Resolution
11.1 Any dispute arising out of or relating to this Addendum, or to the relationship it governs, is governed by the Dispute Resolution Policy, which is incorporated into this Addendum by reference. Article 4.5 of this Addendum, and not the Platform dispute process, governs appeal of a denied privacy request in the first instance.
Article 12: General Provisions
12.1 Amendments. The Company may amend this Addendum by posting the amended Addendum in the Document Center and giving notice to the affected party at the email address in the Account. An amendment that materially increases a party's obligations takes effect thirty (30) days after notice; other amendments take effect on posting, except that an amendment that reduces a statutory right takes effect only as the applicable law permits. Continued use of the Platform after the effective date of an amendment is acceptance of it, to the extent acceptance is required. A party that does not accept an amendment may terminate under Article 10 before the amendment takes effect.
12.2 Notices. Legal notices under this Addendum, and appeals under Article 4.5, shall be sent to legal@aapawz.com. Privacy requests under Article 4.1 and all other communications shall be sent to support@aapawz.com. A notice to the Company is effective when the Company acknowledges receipt or, for email, one business day after sending, whichever is earlier. Notices to a party are effective when sent to the email address in the Account or posted to the Account's notice facility in the portal, whichever occurs first. Each party shall keep the email address in the Account current.
12.3 Governing law. This Addendum is governed by the laws of the State of Tennessee, without regard to its conflict-of-laws rules, except that a right granted by the privacy law of a Consumer's state of residence is governed by that law to the extent that law applies. Subject to the Dispute Resolution Policy, any proceeding arising out of this Addendum shall be brought in the state or federal courts located in Shelby County, Tennessee, and the parties consent to personal jurisdiction there.
12.4 Severability. If any provision of this Addendum is held unenforceable, the provision shall be enforced to the fullest extent permitted, and the remaining provisions continue in full effect.
12.5 Entire agreement. This Addendum, together with the Privacy Policy and the documents this Addendum incorporates by reference, is the entire agreement between the Company and each party for the subject it governs and supersedes every prior or contemporaneous statement, communication, or agreement on that subject, whether written or oral.
12.6 Assignment. A party other than the Company shall not assign this Addendum or any right or obligation under it without the Company's prior written consent, and an assignment without consent is void. A statutory privacy right is personal to the Consumer and is not assignable except through an Authorized Agent under Article 5. The Company may assign this Addendum to an affiliate or in connection with a sale of all or part of its business, on notice to the affected party.
12.7 Waiver. A waiver of any provision of this Addendum is effective only in writing and only for the instance stated. No waiver is a waiver of any other provision or instance. No provision of this Addendum waives a statutory right except as the applicable law permits an express waiver.
12.8 Interpretation. Headings are for convenience only. "Including" means "including without limitation." This Addendum shall not be construed against a party as its drafter. The English-language text controls over any translation.
Related articles