Shipt Shopper and Shopper Applicant Privacy Notice

This privacy notice was last updated on August 19, 2022

Scope

Shipt, Inc. (“Shipt”) is committed to protecting your Personal Information and processing it responsibly. This Privacy Notice (“Notice”) describes our general practices relating to the collection, use and disclosure of data relating to Shipt shopper applicants, as well as current and former Shipt shoppers (collectively, “Shoppers”). “Personal Information” means any information relating to or capable of identifying a particular individual.

This Notice applies to Shipt’s collection of Personal Information during the Shopper application and hiring process, when communicating or engaging with the Shopper, as well as a Shopper’s use of our shopping platform and delivery services, including the Shipt Shopper mobile application, and other Shipt-related sites, mobile applications, communications, capabilities and services (“Technology Services”).

By submitting an application, using the Technology Services, or otherwise engaging with Shipt online in your capacity as a Shopper, you signify your acceptance of this Notice. If you do not agree to this Notice, do not access or use any Shipt website, mobile application, or the Technology Services.

We may change or add to this Notice, including updating this Notice or creating additional policies in order to accurately reflect changed circumstances or new legal requirements, so we encourage you to review it periodically. Your continued participation in the applicant process or use of the Technology Services after we make changes is deemed to be acceptance of those changes.

This Notice does not apply to third-party sites linked from our Technology Services or to services offered by other companies or individuals, including products or sites that may be displayed to you. This Notice also does not cover the information practices of other companies or individuals who advertise our Technology Services.

The Shipt Privacy Notice describes our general practices relating to the processing of the Personal Information of our customers, Members and website visitors, as well as office visitors and individuals within our vendor and business partner organizations. If you are seeking employment with Shipt, please refer to the Shipt Job Applicant Privacy Notice for details on how prospective employees' Personal Information is collected, used and shared.

For the purposes of this Notice, “Member” or “Members” are respectively an individual or individuals who use Shipt’s services and have subscribed to the Shipt membership service and are enabled to order and receive product delivery through the use of the Shipt platform. “Retail Partners” are those organizations, businesses, and entities that contract with Shipt to allow for individuals to order goods from their retail business, or purchase and have goods delivered through, the Shipt Shopper network.

The Personal Information Shipt Collects

Directly From You

Shipt collects the following categories of Personal Information directly from you when you apply to be a Shipt Shopper, when you use our Technology Services, and when you otherwise interact with Shipt.

  • When you apply to become a Shopper, we collect:

    • Your contact information such as first and last name, email address, mailing address and telephone number.

    • Details of your current and past employment such as name of employer, position held, and dates of employment.

    • Information that may be needed to complete a pre-hire background check such as date of birth, driver’s license number and Social Security Number (SSN).

    • Education and training information.

    • Citizenship information.

    • The contact information of any personal references.

    • Video recording as part of the interview process.

    • Any other information you may choose to provide as part of the interview process.

  • When you create an account with Shipt, we collect authentication credentials such as username and password.

  • When you utilize any of our Technology Services, we automatically collect information about your device and use of the Technology Services such as IP address, device identifiers, device details, pages visited and accessed through cookies and similar technologies.

  • When you become a Shipt Shopper, we collect:

    • Driver’s license, license plate and other vehicle and registration information, and insurance information

    • Passport information, including image and number.

    • Characteristics of protected classifications such as, but not limited to, age, sex, race, ethnicity, physical or mental disabilities.

    • Financial information such as salary, bank account details, corporate card usage and benefits information.

    • Performance information such as appraisals, performance reviews, disciplinary records, training records, and details of skills and experience.

    • Health-related information such as information regarding benefits programs, insurance and sick leave.

    • Both general (e.g., zip code) and precise (e.g., GPS-based functionality on mobile devices used to access the platform or specific features of the platform) geolocation information (Shoppers must enable location tracking to access and use shopping functionalities).

    • Your photograph.

    • Details of any complaints or concerns raised by you.

    • Your voice or image captured during a call or online meeting recording

    • Communications between you, Shipt and/or Shipt Members via online chat, email, phone or text.

    • Customer ratings and other feedback.

From Other Sources

Shipt obtains Personal Information from third parties such as:

  • During the recruiting process:

    • We may collect contact information such as the first and last name, email address, mailing address, and telephone numbers of eligible prospects and details of their employment, education and training experience from a third-party recruiting service.

    • We may collect information about current and past employment, education and training from publicly available sources, as permitted by law.

    • We may work with service providers to collect information in connection with job applicant background checks, such as information related to offenses or criminal proceedings or sentences and credit reports and other similar reference checks.

    • Information collected about your past employment experience from previous employers and/or personal references provided by you.

  • Retail Partners who may provide us with information related to shopping and deliveries, including images, recordings or other information related to your activities in the Retail Partner's store.

  • Contact information through referrals from other Shipt shoppers.

  • Details regarding your interactions with Members in the course of performing your services as a Shopper.

We, and the third parties we engage, may combine information we collect from you over time, and across the Services, with information obtained from other sources. This helps us improve the information’s overall accuracy and completeness, and also helps us better tailor our interactions with you.

Social Media

If you interact with us on any social media platform: (i) depending on your social media privacy settings, the Personal Information that you submit on the social media platform may be read, collected, or used by us as described in this Notice, and (ii) where we respond to any interaction with you on social media, your account name/handle may be viewable by any and all members or users of our social media accounts. Social media platforms operate independently from us and we are not responsible for the Personal Information that you choose to submit or link on any social media platform. We encourage you to review the privacy policies and settings of any social media platform with which you interact to help you understand the platform’s privacy practices.

Cookies and Similar Technologies

We and our partners use various technologies to automatically collect and store information when you interact with our Services, including the use of cookies, web beacons, mobile software developments kits (“SDKs”) or similar technologies:

  • Cookies:

    • When you access our Service, Shipt will issue a cookie to your device. A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting, you may be unable to access certain parts of the Services.

  • Web beacons:

    • Certain webpages maintained by Shipt, as well as emails sent by Shipt, may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags and single-pixel gifs) that collect information about page visits and email viewing. Information collected may include limited personal information, such as name, email address and universal ID.

  • Mobile device identifiers and SDKs:

    • Shipt collects information from its mobile application users through deployment of mobile SDKs. A mobile SDK is the mobile app version of a web beacon. The SDK is a bit of computer code that app developers can include in their apps to enable ads to be shown, data to be collected, and related services or analytics to be performed.

  • Analytics:

    • Our Services may also use third-party analytics tools such as Google Analytics. Analytics are used to create reports and statistics on the performance of our website and present you with content tailored to your interests. Analytics can be used to collect information such as IP address, type of device, operating system, referring URLs, country information, date and time of page visits, and which pages you visit the most.  You can find more information about how data is collected and processed in connection with the Google Analytics service. You can adjust your Google Ad Settings. You can also read Google’s privacy notice.

Personal Information and non-Personal Information may be linked together and once linked, may identify an individual person. If we do combine non-Personal Information with Personal Information, the combined information will be treated as Personal Information for as long as it remains combined.

Aggregate or Anonymized Data

In each case above, we may aggregate or anonymize the foregoing types of information in support of legitimate business purposes such that they are no longer capable of identifying you. In that event, the information is no longer considered “Personal Information” and may be used for any purpose consistent with applicable law.

When using deidentified data, Shipt does not attempt to reidentify the data. We may use and share deidentified or aggregated data with any third party without restriction. We may use and share non-Personal Information for any purpose without restriction.

How Personal Information is Used

Shipt (or service providers acting on our behalf) may use Personal Information to:

  • Manage all parts of the applicant administration process such as interviewing, verifying references, selecting and hiring Shoppers and conducting background check investigations.

  • Manage the Shopper relationship with Shipt from the hiring process through termination.

  • Communicate with Shoppers and Shopper applicants.

  • Provide you with access to our Technology Services.

  • Administer pay.

  • Perform and record certifications.

  • Verify your location to connect you with shopping and delivery opportunities in your area and track the progress and completion of the delivery.

  • Facilitate communication between Members and Shoppers concerning order and delivery details and status updates.

  • Send service, support and administrative messages, reminders, technical notices, updates, security alerts, and information requested by Shoppers, with such messages being conveyed via telephone, SMS, email, and other electronic message channels.

  • Conduct research and analysis, including focus groups and surveys.

  • Maintain, improve and optimize our Technology Services as well as develop new features and functionality for the Technology Services through research, development, analytics and business intelligence.

  • Ensure compliance with Shipt’s requirements, policies and procedures.

  • Process Shopper-related claims.

  • Conduct investigations, including in connection with Shipt’s legal obligations and regulatory requirements.

  • Collect and store information from cookies and similar technologies when you interact with services from our partners, such as advertising and analytics.

    • We may use this technology to deliver or help our partners deliver interest-based advertising (also known as behavioral advertising) through mobile applications and browsers based on how you browse and shop online.

    • If you’d like to opt out of ads tailored to you in this way, please follow the instructions in the “Your Choices” section below.

  • Manage network security, which includes disaster recovery and business continuity.

  • Prevent fraud, theft, violations of this Notice and misuse of our Technology Services.

  • Comply with privacy laws, information security requirements and other legal requirements.

  • Please note further instances of Personal Information use may be set forth in the applicable agreement between each Shopper and Shipt.

How Personal Information is Shared

Parent Companies, Subsidiaries and Affiliates

Shipt may share Personal Information within Shipt, its parent companies, affiliates and subsidiaries.

Within Shipt

Shipt allows access to Personal Information of Shoppers and Shopper applicants to people within Shipt who have a “need to know” that information to manage the shopper relationship and for other legitimate business purposes.

Service Providers

We share Personal Information with companies or individuals that provide us with services. These service providers provide services such as background checks and office security. We may also share your Personal Information with our IT and system administration providers, cloud hosting providers, software providers, and payroll processors. We may share your Personal Information with our professional advisors, such as lawyers, accountants, and other similar advisors. Service providers can only process Personal Information as instructed by Shipt.

Members and Retail Partners

To facilitate shops and deliveries, we may provide information such as your contact information, vehicle information, location information, ratings and other information to Members and Retail Partners.

Shipt may also share your contact information with our Retail Partners, in connection with providing customer service, addressing any concerns raised by you, a Member, or a Retail Partner, or otherwise assisting the Retail Partner in investigating any illegal or unauthorized activity occurring in its stores or in connection with Shipt’s services. Shipt may also share your Personal Information with our Retail Partners as part of our agreement with the Retail Partner. Please review the “Your Choices” section of this Notice to learn more about what rights you may have with respect to the sharing of your Personal Information with our Retail Partners.

Business Transition

In the event that Shipt, or any portion of our assets or business, are acquired, sold, merged, or transferred, whether as a result of or in the event of an acquisition, divestiture, reorganization, restructuring, or dissolution, or as a going concern or as a part of bankruptcy, liquidation, or similar proceeding, or otherwise, Shipt will disclose Personal Information to the company involved to complete the business transition, including at the negotiation stage and including where the Personal Information is among the assets being transferred.

Applications and Tools

We offer tools, widgets and applications on our website such as search engine functionalities, that are powered by third parties. If you use those applications or tools, any Personal Information that you provide will be shared with the third party that provides that functionality. The third party’s use of that Personal Information is subject to their Privacy Notice.

Law Enforcement

We may report to law enforcement agencies any activities that we reasonably believe to be unlawful, or that we reasonably believe will aid a law enforcement investigation into unlawful activity. In addition, we reserve the right to release your Personal Information to law enforcement agencies if we determine, in our sole judgment, that either you have violated our policies, or the release of your Personal Information will protect the rights, property or safety of Shipt, or another person.

Legal Process

We may share your Personal Information with others as required or permitted by law. This includes sharing your Personal Information with governmental entities or third parties in response to subpoenas, court orders, other legal process, or as we believe is necessary to comply with applicable laws, to exercise our legal rights, to defend against legal claims that have been brought against us, or to defend against possible legal claims that we determine in our sole discretion might be brought against us.

With Your Consent

We will share Personal Information when we have your consent or when you have directed us to do so. Please note further instances of Personal Information disclosure may be set forth in the applicable agreement between each Shopper and Shipt.

How Personal Information is Protected

Shipt uses commercially reasonable administrative, organizational, and physical safeguards designed to protect Personal Information from loss, theft, and unauthorized use, disclosure or modification. Please be aware that no data transmission over the internet is 100% secure. While we strive to protect your Personal Information, we cannot ensure or warranty the security of any information you transmit to us, and you do so at your own risk.

Retention of Personal Information

Shipt will retain your Personal Information for as long as is reasonably necessary to fulfill the purpose for which it was disclosed or as required to comply with legal obligations. The precise periods for which we keep your Personal Information vary depending on the nature of the information and why we need it. Factors we consider in determining these periods include the minimum required retention period prescribed by law or to fulfill the purpose(s) for which the Personal Information was collected. At the end of that period, Shipt will securely delete the Personal Information. If there is any data that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further use of such data.

Your Choices

Email Marketing

At any time, you can opt out of marketing emails by clicking on the unsubscribe link in the footer of the marketing email. You may still receive operational emails related to orders or other service-related emails. In some cases, we may provide an unsubscribe link within an operational email (e.g., surveys).

Online Ad Choices

You may find more information about entities involved in online advertising and additional choices you may make, including opting out of having your information used for Internet-based advertising, through the Network Advertising Initiative (NAI) at the NAI Service, and the Digital Advertising Alliance (DAA) at the DAA consumer choice service. Shipt is a participant in the online industry’s self-regulatory program administered by the DAA and has agreed to adhere to the DAA’s principles applicable to interest-based ads. The tools provided at the DAA opt out page and the NAI opt out page are provided by third parties, not Shipt. Shipt does not control or operate these tools, or the choices advertisers and others provide through these tools.

Website Analytics

Analytics services such as Google Analytics provide services that analyze information regarding visits to our websites and mobile apps. They use cookies, web beacons and other tracking mechanisms to collect this information. Learn more about Google's privacy practices, or to opt out of Google Analytics, install the Google Analytics Opt-out Browser Ad-on.

Jurisdiction-specific Choices

Choices relating to the rights afforded consumers under the California Consumer Privacy Act (CCPA) are described in the “Information for California Residents” section below.

Declining to Provide Information

You can choose not to provide us with information we may request from you, including in connection with your Shopper application, Shopper engagement, or use of the Technology Services, but that may result in you being unable to perform your duties as a Shopper and use our Technology Services in full.

Shipt’s platforms, including its website and mobile apps, may contain links to webpages created by parties other than Shipt. We do not control such websites and are not responsible for their contents or the privacy policies or other practices of such websites. Our inclusion of links does not imply any endorsement of the material on such websites or any association with their operators. These websites and services may have their own privacy notices, which the user will be subject to upon linking to the third party’s website. Shipt strongly recommends that users review the third party’s terms and conditions and privacy policies.

Do Not Track Disclosure

Some browsers have a “do not track” feature that lets you tell websites that you do not want to have your online activities tracked. At this time, we do not respond to “do not track” signals.

Information for California Residents

A. California Shine the Light Law

In connection with the California “Shine the Light” law, Shipt has a policy of not disclosing the Personal Information of certain California residents to third parties for their direct marketing purposes if the resident contacts us to opt out of the disclosure of Personal Information to third parties for their direct marketing purposes. You may choose to exercise your right to opt out of the sharing of your Personal Information with third parties for their direct marketing purposes, free of charge, at any time by submitting a request to privacy@shipt.com.

B. California Consumer Privacy Act of 2018 (“CCPA”)

This section supplements the other information in this Notice and applies solely to California residents (i.e., “consumers” as defined by the CCPA). This section explains Shipt’s collection, processing, and disclosure of personal information relating to California consumers or households.

As defined by the CCPA, “personal information” includes any information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device. Personal information does not include information:

  • Publicly available information from government records;

  • Deidentified or aggregated consumer information; and

  • Information excluded from the CCPA’s scope, including personal information covered by certain sector-specific privacy laws such as the Fair Credit Reporting Act.

In the past 12 months, Shipt has collected the following categories of personal information from consumers and disclosed such information to the following categories of third parties for business purposes.

Categories of PI Collected Examples Categories of Third Parties to Whom Disclosed 
Identifiers  Real name, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers.
  • Service providers conducting background checks or assisting with the recruiting process

  • IT and cloud/hosting service providers, such as our email providers, business application providers, managed services providers and IT consultants 

  • Online analytics and marketing/advertising service providers 

  • Financial institutions and payment processors

  • Shopper support contact centers 

  • Professional advisors (accountants, lawyers, and auditors)

  • Retail Partners who use our services

  • Members receiving deliveries

Internet or other similar network activity  Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement. 
  • IT and cloud/hosting service providers 

  • Online analytics and marketing/advertising service providers

  • Retail Partners who use our services

Personal information types listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))  Name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, or employment information.
  • Service providers conducting background checks or assisting with the recruiting process

  • IT and cloud/hosting service providers, such as our email providers, business application providers, hosting providers, managed services providers, and IT consultants 

  • Online analytics and marketing/advertising service providers 

  • Professional advisors (accountants, lawyers, and auditors)

  • Retail Partners who use our services

  • Members receiving deliveries

Sensory data  Audio recordings, voicemail, or similar information. 
  • IT and cloud/hosting service providers, such as our email providers, business application providers, hosting providers, and telephone communication providers

  • Retail Partners who use our services

Legally protected classification characteristics Race, color, national origin, citizenship, marital status, sex, age (40 years or older), gender
  • Service providers conducting background checks or assisting with the recruiting process

  • IT and cloud/hosting service providers, such as our email providers, business application providers, hosting providers, and telephone communication providers

  • Professional advisors (lawyers and auditors)

Geolocation information Information regarding physical location, movement, and movement patterns.
  • IT and cloud/hosting service providers

Professional or employment-related information Prior employment history, performance information, resume or similar information
  • Service providers conducting background checks or assisting with the recruiting process

  • IT and cloud/hosting service providers, such as our email providers, business application providers, managed services providers and IT consultants

Shipt collects these categories of personal information from the following sources:

  • Direct collection: We collect information directly from you when you choose to provide it to us by filling out forms on our website, mobile application, or Technology Services, submitting an application to Shipt, signing up to receive promotional or information communications from us, communicating with us about our Shopper positions, or otherwise directly providing the information to us as described above.

  • Indirect and technology-based collection: We also collect certain information from you indirectly when you visit, use, or navigate our Technology Services. Shipt collects certain identifiers (such as IP addresses) and internet and similar network activity (such as website usage data) from you indirectly using cookie, pixels, and passive tracking technologies, as described above.

We use the Personal Information we collect for the following business or commercial purposes (as well as any other purposes as set forth in our Notice above).

  • Providing and optimizing your experience on our Technology Services, applications, and website and ensuring that our content is presented to you in the most effective manner.

  • Managing our relationship with you, including processing payments to you for services rendered.

  • Communicating with you, including processing your Shopper application, to provide you with communications regarding your role as a Shopper, informing you about new services or features to our Technology Services we are offering, updating you about changes to your role as a Shopper, and investigating any concerns you have about our Technology Services or your deliveries.

  • Developing, updating, and improving our Technology Services, Shopper experience, and potential Shopper marketing efforts, and otherwise improving our knowledge and insights regarding Shoppers and Shopper Applicants.

  • Preventing and detecting fraud, financial crime, hacking activities, security breaches, and other unlawful activities in connection with the Technology Services or our delivery services.

  • Enforcing our agreements with customers and complying with our legal or regulatory obligations.

Performing other functions as otherwise described to you at the time of collection or to which you otherwise consent.

Sale of Personal Information

In the past 12 months, Shipt has not sold any Shopper Personal Information of any category. Likewise, Shipt does not have actual knowledge of any sales of Personal Information regarding minors under 16 years of age.

How to Contact Shipt

If you have questions about this Notice, you can contact us in one of the following ways:

Send an email to: privacy@shipt.com

Write to:

Shipt

Attn: Legal Department

420 20th St. N, Suite 100

Birmingham, AL 35203

Changes to this Privacy Notice

Shipt will update this Notice periodically to reflect changes to our privacy practices. We will provide notice online when we make any material changes to this notice.