PRIVACY NOTICE

Last Updated: June 27, 2025

This Privacy Notice (“Notice”) describes how Shipt, Inc. (“Shipt,” “we,” “our” or “us”) collects, uses, shares discloses, and stores information about you (“personal information”). This Notice applies to your use of Shipt’s services, mobile applications, or when you visit our websites and other services, or where this Privacy Notice is linked or displayed (collectively, the “Services”). This Notice also tells you about the rights and choices you may have with respect to your personal information.

Please read this Notice carefully to understand our policies and practices regarding your personal information and how we will treat it.

This Notice does not apply to employees, job applicants, shoppers, or prospective shoppers. If you are a job applicant, please see Shipt’s Job Applicant Privacy Notice, and if you are a shopper or prospective shopper, please see Shipt’s Shopper and Prospective Shopper Privacy Notice.

COLLECTION AND USE OF PERSONAL INFORMATION

Types of Personal Information We Collect

We collect the following categories of personal information form you:

• Contact information. This includes your name, addresses, phone numbers, and email addresses, including student email (for Shipt Student Memberships), and other contact information you provide to us.

• Demographic information. This includes your date of birth and information about your income and marital status.

• Government-Issued Identifiers. This includes government identification information or other similar identifiers (drivers license), which may be used for legal compliance purposes to verify orders that require identity or age verification (such as alcohol).

• Transaction-related information. This includes your electronic signature, order IDs, products in the cart, past purchases, special requests, the date and time of your orders, and photos of the drop-off location for any delivered goods, and any other information needed to place an order.

• Interaction with a shopper/driver. When you place an order, you can communicate with the shopper fulfilling your order through the Services (including through third party services), via text/sms, chat, phone call or email. We collect any personal information you choose to provide in these communications, including call recordings.

• Account information. When you create an account, we collect your username, email, password, security questions and responses, privacy settings, account number or identifiers and authentication methods, other information we may request or that you may provide relating to your account or as part of the sign up. We also collect information about the features and functionality as part of our Service that you use or interact with, such as search or your other activity within our Services.

• Payment information. We collect payment and billing information through our third-party payment processor if you make a purchase or if you designate to make payments or receive payments via the Services. Shipt does not store any payment card data directly.

• Communication information you provide. We collect the information contained in your communications with us, whether online or in person, chat, SMS/text, email, or via phone, including recordings or other information you provide during customer service calls. We also collect information that you provide as part of your interaction with your Services, such as your experience with a shopper, ratings or reviews or any other information you submit to us.

• Website and device information. When you use our websites, we may automatically record information, including your IP address, browser type, referring URLs (e.g., the website you visited before coming to our websites), domain names associated with your internet service provider, and any other information regarding your interaction with our websites.

• Geolocation information. We collect order and delivery locations including the precise location of your device when location services are permitted and enabled on your device’s system or browser. We may also infer your general location, by using your zip code or your device’s IP. We use this data to refine delivery accuracy, to help you find retailers, to offer certain features and functionality, and for other similar purposes.

• Social media information. We may collect personal information about you from social media. This includes when you follow us, share our content or post comments. Such content may be publicly accessible. The personal information we collect depends on your privacy settings with the social media platform.

• Information from Retailers. We may collect personal information from retailers in connection with their loyalty programs that they offer or you are enrolled in, to confirm your status as a member in such programs, and to facilitate your receipt of the program benefits.

• Sensitive personal information. This includes if you voluntarily provide us with sensitive personal information when reporting an adverse event. For example, if you experience an allergic reaction or infection after using a particular product.

• Other information you provide about others. In some cases, you may provide personal information to us about other people. For example, you may refer a friend to us, send a gift card or gift delivery to someone. In these cases, we may collect the recipient’s name, email, delivery address, or any other personal information you may share with us with the permission of the other individuals.

Uses of Personal Information

Depending on how you interact with us, we may use personal information for the following purposes:

• Order Fulfillment. We use your personal information to fulfill your orders, maintain your account, and determine your eligibility for certain products and/or services.

• Communicating with you. We use your personal information to provide customer service and answer questions and respond to feedback, including questions or updates about your orders. We may also send you technical notices or security alerts.

• Improving our Services and products. We use your personal information to improve our products, websites, Services, and your experience. This may include customizing your experience with us.


• Marketing purposes. We use your personal information to send you messages, notices, newsletters, surveys, promotions, contests, or sweepstakes about our own or third parties’ goods and service that may be of interest to you. We also use your personal information for our marketing analytics. See “What Are Your Privacy Choices” below for more information.

• Develop and train AI models. We may use personal information to develop and train artificial intelligence and machine learning models to improve and deliver better Services to you.

• Protecting our company and constituents. We use personal information to protect our company and customers, comply with legal requirements; enforce our terms, conditions, and policies; detect, prevent, and respond to security incidents; and protect against malicious, deceptive, fraudulent, or illegal activity.

• As part of a corporate transaction. We may use personal information in connection with the sale of part or all of our assets or business, the acquisition of part or all of another business or another business’ assets, or another corporate transaction, including bankruptcy.

• Other permitted purposes. We use all categories of personal information for other purposes as permitted by law or with your consent.

Retention of Personal Information

We retain your personal information for as long as needed: (i) to provide our Services to you; (ii) fulfill the purposes outlined in this Notice; and (iii) to comply with our legal obligations, resolve disputes, and enforce any agreements. Criteria we will use to determine how long to retain your personal information include the nature and length of our relationship with you; our legal rights, obligations, and retention requirements; and if we have an ongoing business purpose for retaining your personal information, such as communicating with you about ongoing or prospective Services.

HOW WE COLLECT PERSONAL INFORMATION

Directly from you. We may collect personal information when you contact us. This includes when you create an account, place an order, participate in a survey, or communicate with us online, offline, or by phone.

From your computer and mobile devices. We may collect personal information passively through tracking tools over time and across different websites and mobile applications. These tools include cookies and pixels. To learn more about cookies visit the FTC’s Online Tracking page. To learn more about your choices for these tracking tools, read the “What Are Your Privacy Choices” below. We may also do this on our Services and in emails that we or our vendors send to you. We may also have third parties collect personal information this way.

From others. We may collect personal information from other parties like our business or retail partners. We may get personal information from third-party websites or marketing partners. We may obtain personal information from other who believe you are interested in becoming a member. We also get personal information from survey providers and other service providers.

SECURITY MEASURES

We have implemented commercially reasonable measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. Unfortunately, the transmission of information via the internet is not completely secure. Despite these efforts to store personal information in a secure environment, we cannot guarantee the security of personal information during its transmission or its storage on our systems.

WHEN WE DISCLOSE PERSONAL INFORMATION

We may disclose all categories of personal information we have collected above with your consent or in the following circumstances:

• We disclose personal information to our affiliates, our parent company (Target Corporation), and subsidiaries. We, including our affiliates and our parent company (Target Corporation), may use the information to offer you products and services that may be of interest to you. We disclose all categories of personal information to manage daily operations and pursue our business interests.

• We share personal information with third parties for cross-contextual behavioral advertising. This includes online ads targeted to your interests. Please read the “Collection and Use of Personal Information” section (above) that outlines which categories of personal information we share for this reason. Please read the “Notice of Right to Opt-out of Sale/Sharing” section below for more information about your choices.

• We disclose personal information to vendors and service providers who perform services on our behalf. We may disclose all categories of personal information with vendors and service providers we engage to perform tasks on our behalf, for example vendors who provide data processing, cloud storage or IT services to us or who otherwise process personal information to perform services for you, to help us deliver our Services, engage in our marketing activities, and help us send email, text and other communications.

• We share personal information with business partners. We may disclose personal information with trusted business partners, for example, to a company whose products or services we think may be of interest to you or who we co-sponsor a promotion or service with.

• We disclose personal information to comply with the law or to protect ourselves. We may disclose personal information to a third party when we have a good faith belief that such disclosure of personal information is reasonably necessary to (a) satisfy or comply with any requirement of law, regulation, legal process, or enforceable governmental request, (b) enforce or investigate a potential violation of any agreement you have with us, (c) detect, prevent, or otherwise respond to fraud, security or technical concerns, (d) support auditing and compliance functions, or (e) protect the rights, property, or safety of Shipt, its employees and customers, or the public against harm.

• We will transfer personal information with successors to all or part of our business. We may disclose personal information to third parties as necessary if we are involved in a merger, acquisition, or any other transaction involving a change of control in our business, including but not limited to, a bankruptcy or similar proceeding. Where legally required, we will give you notice prior to such disclosure.

• We may disclose personal information for other reasons we may describe to you. We may disclose personal information to third parties when explicitly requested by or consented to by you, or for the purposes for which you disclosed the personal information to us as indicated at the time and point of the disclosure (or as was obvious at the time and point of disclosure).

YOUR PRIVACY CHOICES

Shipt provides several ways for you to manage your personal information and exercise your choices:

Marketing Choices and Communications

You may opt out of receiving marketing emails, text messages, and push notifications you receive from us. To stop receiving our promotional emails, you can follow the instructions in the message you receive from us. If you receive promotional text messages from us, you may opt out by replying “STOP.” If you receive push notifications from us, you may opt out by going to account settings, navigating to notifications, and then using the toggle to stop receiving notifications. Even if you opt out of receiving marketing messages, you will still receive our transactional communications from us. These include responses to your questions.

Cookie Preferences and Interest-Based Advertising Choices

We and our service providers may use cookies and similar technologies to collect usage and browser information about how you use our websites. The technologies we use for this automatic data collection may include cookies and web beacons that permit us to verify system and server integrity and generate statistics around the popularity of certain content. We process the information collected through such technologies, which may include or be combined with personal information, to help operate certain features of our websites, to enhance your experience through personalization, and to help us better understand the features of our websites that you and other users are most interested in.

You can control cookies and tracking tools. To manage your preferences with respect to these technologies, you can change your cookie preferences or customize your browser settings to refusal all or some browser cookies. If you block cookies, certain features on our Services may not work, or you may not be able to take full advantage of certain features of our Services. You may find additional information about managing your cookie preferences through your browser settings below:

• Safari:  https://support.apple.com/kb/PH19214?locale=en_US

• For Chrome:  https://support.google.com/chrome/answer/95647?hl=en

• Firefox:  https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

• Opera™: https://help.opera.com/en/latest/security-and-privacy/

• Mobile Devices: To control the collection of your precise location on your mobile device, you can adjust the settings on your mobile device, such as by disabling location services and turning off the Bluetooth and Wi-Fi. To learn more about mobile location analytics and certain options with respect to mobile location analytics, visit https://smart-places.org.  

Our Do Not Track Policy

Some browsers have “do not track” features that allow you to tell a website not to track you. These features are not all uniform. Except for legally recognized universal opt out mechanisms (such as the Global Privacy Control) on browsers or browser extensions that support such signals, we respond to “do not track” signals. For information about “do not track” signals, please visit http://allaboutdnt.com/.

Google Analytics

We use Google Analytics to better understand how our users interact with our websites, and we may use Google Analytics Advertising Features for advertising and marketing purposes. You can learn about Google Analytics’ currently available opt-outs at  https://tools.google.com/dlpage/gaoptout/ and manage the information collected through Google Analytics Advertising Features through the settings on the relevant browser or device being used.

Internet-Based Advertising

We may also allow or enable third parties to collect personal information to provide their interest-based advertising on behalf of our products and services, or their own. Interest-based advertising occurs when advertisements are shown to you based on information collected from your online interactions over time and across multiple websites, devices, or online services that you visit or use. Some companies may engage in cross-context behavioral advertising to predict your preferences and show you advertisements that are most likely to be of interest or relevant to you. To opt out, read our Notice of Right to Opt-out of Sale/Sharing below. You can also manage preferences with tools from the Self-Regulatory Program for Online Behavioral Advertising. To manage online preferences, go here for the Network Advertising Initiative and here for the Digital Advertising Alliance. To manage mobile device choices, go here. 

Notice of Right to Opt-Out of Sale/Sharing

You can opt out of the sharing of your personal information for interest-based advertising by visiting https://www.shipt.com/privacy/intake-form (also appearing in our website footer as “Your Privacy Choices”) and following the instructions there. You can also configure certain browsers to tell websites not to share your personal information for these reasons through the “Global Privacy Control” signal. If you configure this setting on your browser, certain features may not work. To learn how to configure this setting, view here.

Social Media

Your use of social media may enable third-party websites to gather information about your activity on our website. For example, if you use the “Share” or “Like” buttons featured on social media sites such as Facebook, Twitter, TikTok, Instagram or Pinterest, the social media company providing such application may enable that company to track your browsing history on our website if you are currently logged into your social media account when you visit our website. Please note that the collection and use of your personal information by social media companies is subject to the privacy policy of the social media company you interact with. We encourage you to read the privacy policies of the social media products or services you use to understand how your information is collected and used, and how you can exercise your choices, such as by adjusting the settings for your social media account.

PRIVACY RIGHTS

Depending on where you live, you may have the following rights with respect to your personal information under applicable data protection laws:

• Right to Know and Access: to find out (i) the categories of personal information and/or the specific pieces of personal information that we collect about you, as well as the categories of sources from which we collected the personal information; (ii) the categories of personal information we sold or disclosed; (iii) our business or commercial purpose for collecting, selling or sharing the personal information; and (iv) the categories of third parties with whom we disclosed the personal information.

• Right to Portability: to ask us to provide you with a copy of the personal information we have collected about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance

• Right to Correction: ask us to make changes to your personal information

• Right to Deletion: ask us to delete your personal information

• Right to Limit the Use/Disclosure of Sensitive Personal Information: You may request that we limit the use or disclosure of your sensitive personal information, subject to certain exceptions, by visiting https://www.shipt.com/privacy/intake-form (also appearing in our website footer as “Your Privacy Choices”) and following the instructions there.

• Right to Opt-out of Sale, Sharing, or Targeted Advertising: You can opt out of the sale or sharing of your personal information for cross-contextual behavioral advertising by visiting https://www.shipt.com/privacy/intake-form (also appearing in our website footer as “Your Privacy Choices”) and following the instructions there. You can also configure certain browsers to tell websites not to share your personal information for these reasons through the “Global Privacy Control” signal. We will respond to this signal in a frictionless manner. If you configure this setting on your browser, certain features may not work. To learn how to configure this setting, view here. See “What Are Your Privacy Choices” section above for more information about your choices.

• Automated Decision-Making: The right to know when you are subject to automated decision-making, the personal information used to render the decision, the principal factors and parameters involved in the decision, and human review or correction of the decision (or its underlying data, where appropriate). You may also have the right, depending on your location, to consent or opt out of (a) automated decision-making that produces legal or similarly significant effects or (b) any profiling in furtherance of decisions that produce legal or similarly significant effects. We do not profile you or other individuals in a manner that would result in legal or similarly significant effects, so we do not offer an opt out of such activity.

• Lodge a Complaint: The right to lodge a complaint with a regulatory agency if you believe we have violated any of the rights afforded to you under applicable data protection laws. We encourage you to first reach out to us so we have an opportunity to address your concerns directly before you do so.

Exercising Your Privacy Rights

You can exercise your rights by contacting us at 877-557-1484, emailing us at privacy@shipt.com, or submitting your request via this link. You may also exercise your opt out rights by broadcasting an opt-out preference signal, such as the Global Privacy Control (GPC). If you choose to use an opt-out preference signal, you will need to turn it on for each supported browser or browser extension you use.

Only you, or an authorized agent that you authorize to act on your behalf, may make a request related to your personal information. We may need to verify your identity before fulfilling certain requests, and if we cannot verify your identity, we may request additional information from you. If you are an authorized agent making certain requests on behalf of another person, we will also need to verify your identity, which may require proof of your written authorization or evidence of power of attorney. We endeavor to respond to requests within the time period required by applicable law. If we require more time, we will inform you of the reason and extension period in writing.

We do not charge a fee to process or respond to your requests unless they are excessive or repetitive. If we determine that a request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. We may deny certain requests, or only fulfill some in part, as permitted or required by law. If you are not satisfied with the resolution of your request and you are afforded a right to appeal such decision, you will be notified of our appeal process in our response to your request.

CALIFORNIA RESIDENTS

This section provides additional information regarding Shipt’s practices pursuant to the California Consumer Privacy Act of 2018 and its implementing regulations, as amended by the California Privacy Rights Act (“CCPA”), where “Personal Information” has the definition set forth in the CCPA.

Please see the below chart for detailed information about the categories of Personal Information we have collected from California residents during the twelve months preceding the date on which this Notice was last updated and the categories of third parties to whom we Sell or Share Personal Information (as those terms are defined in the CCPA). For each category of Personal Information set forth in the chart below, the categories of third parties to whom we disclose it for a business or commercial purpose are set forth in the When We Disclose Personal Information section above.

Shine the Light

Under California Civil Code Section 1798.83, individual customers who reside in California and who have an existing business relationship with us may request information about our disclosure of certain categories of personal information to third parties for the third parties’ direct marketing purposes, if any. To make such a request, please contact us at privacy@shipt.com. Please be aware that not all information sharing is covered by these California privacy rights requirements and only information on covered sharing will be included in our response. This request may be made no more than once per calendar year.

Notice of Financial Incentive

California requires that we provide you with specific information about the financial incentives we offer. From time to time, we may offer financial incentives in connection with the collection or use of personal information. We will ask you to provide information about yourself in connection with these programs (such as your name, email address and/or telephone number). The financial incentives we offer to consumers are reasonably related to the value of the consumer’s personal information to offer the financial incentives. We calculate this in good faith based on our reasonable but sole determination using factors that include expenses we incur to collect, store and keep personal information. We also considered the expenses related to providing the financial incentive program

The material terms of the financial incentive program will generally be presented to you at the time you sign up. Participation in any financial incentive program is optional and you may withdraw from participating in financial incentives at any time. You can withdraw from receiving financial incentives at any time by following the instructions provided at the time you sign up. Withdrawal may impact your ability to receive additional rewards or promotions.

HEALTH DATA PRIVACY POLICY

Click Shipt's Health Data Privacy Policy

INTERNATIONAL DATA TRANSFERS

Shipt, Inc. is located in the United States. If you submit personal information to us, your personal information may be stored, transferred, or processed in a foreign jurisdiction, where privacy and data protection laws may be less stringent than the laws of your jurisdiction. By submitting your personal information to us you agree to the transfer, storage, and processing of your personal information in a country other than your country of residence.

CHILDREN’S ONLINE PRIVACY

Our Services are meant for adults. Our Services are not intended for or directed to children under the age of 13. We do not knowingly collect personal information from children under the age of 13 without parental consent. If you are a parent or legal guardian and think your child has given us personal information without your permission, you can email or write to us and request that your child’s personal information be deleted.

THIRD-PARTY WEBSITES AND LINKS

Our Services may have links to other third-party websites or applications. If you click on a third-party link, you will be taken to platforms we do not control. This Notice does not apply to the privacy practices of those third-party platforms. Shipt does not guarantee the accuracy or completeness of information displayed on any third-party website or platform. Once you leave our Services, or any other location where this Notice is posted, or are redirected to any third-party website, application, or other online service, you are encouraged to read the applicable third-party’s privacy terms and policies carefully. We cannot be and are not responsible for the privacy policies and practices of these third parties, and any information you submit to a third-party is subject to their privacy policy.

UPDATES

We may update this Notice from time to time, and will indicate the date the last changes were published. If the changes are significant, we will notify you as required by law. Unless otherwise indicated, any changes to this Notice will apply immediately upon posting to our websites. You are responsible for periodically visiting our websites and this Notice to check for any changes.

CONTACT US

For any questions or concerns about this Notice, you can contact us in one of the following ways:

Send an email to:

privacy@shipt.com

Write to:

Shipt

Attn: Legal Department

420 20th St. N, Suite 100

Birmingham, AL 35203

Call us at:

877-557-1484