What we actually collect.

This Privacy Policy describes how Navan ("Navan," "we," "us," or "our") collects, uses, and shares personal information when you visit navanpet.com (the "Site"), create an account, place an order, or otherwise interact with us. By using the Site, you agree to the practices described here.

1. Information we collect

We collect the following categories of personal information:

• Account information — name, email address, password (hashed), phone number, and your dog's size and protocol preferences when you create an account.
• Order information — shipping address, billing address, items ordered, order history, and payment confirmation details. Full payment card numbers are handled directly by our payment processors and are not stored on our servers.
• Browsing and device information — IP address, browser type, operating system, referring URL, pages viewed, time on page, and similar telemetry collected through cookies and similar technologies.
• Marketing information — email engagement data (opens, clicks), survey responses, and any information you submit through forms, popups, or contests.
• Communications — the contents of emails, chat messages, and support tickets you send us.

2. How we use information

We use personal information to process and fulfill orders, manage subscriptions, provide customer support, send transactional messages (order confirmations, shipping updates, account notices), send marketing communications you have opted into, personalize product recommendations, prevent fraud and abuse, comply with legal obligations, and improve the Site and our products.

3. Third parties we share with

We share personal information with service providers who help us operate the business, under contracts that limit their use to providing services to Navan:

• Shopify — ecommerce platform, order management, checkout, and customer accounts.
• Klaviyo — email marketing, onsite behavioral tracking, and transactional email delivery.
• Stripe and Shop Pay — payment processing via Shopify Checkout. Card data is collected and tokenized directly by these processors.
• Google Fonts — font delivery via CDN; this involves a request from your browser to Google's servers.
• Vercel — Site hosting and content delivery.
• Shipping carriers and fulfillment partners — to deliver your orders.

We may also disclose personal information when required by law, in response to valid legal process, or to protect the rights, property, or safety of Navan, our customers, or others. If Navan is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction.

4. Cookies and similar technologies

We and our service providers use cookies, pixels, local storage, and similar technologies to operate the Site and understand how it's used. This includes Shopify session and cart cookies (necessary for checkout to function), Klaviyo onsite tracking (which associates browsing activity with your email if you've identified yourself, and is used to power product recommendations and marketing), and first-party analytics cookies. You can control cookies through your browser settings. Disabling cookies may prevent core features such as cart, login, and checkout from working.

5. Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act, as amended by the CPRA. In the prior 12 months we have collected the following categories of personal information: identifiers (name, email, address, phone, IP); commercial information (orders and purchase history); internet or other electronic network activity (browsing and engagement data); geolocation data (approximate, derived from IP and shipping address); and inferences drawn from the above (such as product preferences).

California residents may request to know what personal information we have collected, request deletion, request correction, and opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising. To exercise these rights, email hello@navanpet.com with the subject line "California Privacy Request," or use the "Do Not Sell or Share My Personal Information" link in our Site footer. We will not discriminate against you for exercising these rights.

6. EU and UK visitors

Navan currently ships only within the United States and does not target the EU, UK, or EEA. If you are located in the EU, UK, or EEA and have nonetheless interacted with the Site, you may have rights under the GDPR or UK GDPR including access, rectification, erasure, restriction, portability, and objection. To exercise these rights, email hello@navanpet.com and we will respond within 30 days.

7. Children's privacy

The Site is intended for adults. We do not knowingly collect personal information from children under 13, and we do not market or direct our products to children. If we learn that we have collected personal information from a child under 13, we will delete it. If you believe a child has provided us with personal information, please contact hello@navanpet.com.

7a. SMS / text messaging program

By providing your mobile phone number and submitting our welcome popup, checkout form, or any other Navan opt-in form, you expressly consent to receive recurring promotional and transactional SMS and MMS text messages from Navan at the number provided. Consent is not a condition of purchase. Message frequency varies. Message and data rates may apply. You may opt out at any time by replying STOP to any message, and you can reply HELP for help. View our SMS terms in our Terms of Service.

No mobile information, including phone numbers, SMS opt-in data, and consent records, will be shared with third parties or affiliates for marketing or promotional purposes. All other categories of personal information may be shared with our service providers as described in this Policy, but specifically text messaging originator opt-in data and consent information will not be shared with any third parties.

8. Data retention

We retain customer account and order data for as long as your account or subscription is active, and for seven (7) years after your last interaction in order to meet tax, accounting, and other legal obligations. Marketing data is retained until you unsubscribe or request deletion. Backups are purged on a rolling schedule.

9. Security

We use industry-standard administrative, technical, and physical safeguards to protect personal information, including TLS encryption in transit, hashed passwords, scoped access controls, and reliance on PCI-DSS compliant payment processors. No system is perfectly secure; we encourage you to use a strong, unique password and to keep your account credentials confidential.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of the page and, for material changes, provide additional notice (such as an email or onsite banner).

11. Contact us

Questions, requests, or concerns about your privacy? Email hello@navanpet.com.

Last updated: June 22, 2026.