LOG IN SIGN UP BA Sketch. ON THE MENU PRICING WINE GIFTS MARKET Privacy Policy Last Updated: June 7, 2021 Blue Apron, LLC and our subsidiaries and other affiliates (collectively, “Blue Apron,” “we,” “us” or “our”) are committed to protecting your privacy. This Privacy Policy describes how we collect, use, and disclose the Personal Information that you provide during your online and offline interactions with us or that we collect about you. As used in this Privacy Policy, “Personal Information” means any information that can be used to individually identify a person or household, and may include, but is not limited to, name, email address, postal or other physical address, credit or debit card number, title, and other information reasonably linkable to an individual or household with or without other identifying information in our possession. We may update this policy from time to time, and we will provide notice of any changes, for example, by sending an email notification, providing notice through the Sites or updating the “Last Updated” date at the beginning of this Privacy Policy. We encourage you to review this Privacy Policy whenever you use or access the Sites or otherwise interact with us to stay informed about our information practices and the ways you can help protect your privacy. Categories of Personal Information we collect We may collect the following categories of Personal Information from or about you: Information commonly used to identify you, such as your name, user name, physical address, email address, phone numbers, and other similar identifiers. Information about your usage of or other interaction with our websites, apps, blogs, or other digital properties (our “Sites”). This information includes actions taken, date and time, frequency, duration, quantity, and performance information related to logins, clicks, messages, how you reached our Sites, and other website and feature usage information. Information about your Blue Apron subscription, purchases or receipt of meal ingredients or other products we offer, or your use of our Sites (collectively, our “Services”). This information includes: delivery and dietary preferences information related to returns, refunds and cancellations, and information about gift orders and referrals information about your interactions with technical and/or customer support General information about your product and service preferences, including your interest in products or services offered by third parties, and your demographics, behavior, and predispositions. Information about your device, network, and internet connection, such as your IP address(es), MAC address, other device ID (UDID), device type, operating system type and version, and client version. Basic account information related to your Facebook, Apple, or other third party account if you choose to register and log in using such an account. This information includes your username and information from the third party service about whether you entered your password correctly. (These services are designed so that Blue Apron doesn’t see your actual password for these services – just whether you got the password right or wrong.) Limited payment information. (When you pay for a Blue Apron Service, your payment information goes directly to a payment processing company who is responsible for keeping your info safe. We never get your full credit card information. More info below.) Employment-related information from Blue Apron personnel and or an applicant for personnel positions. Other information you upload, provide, or create while using the Sites or our Services. How we collect Personal Information We collect many of the categories of Personal Information listed above when you affirmatively give it to us or transact business with us. You may always choose not to provide that Personal Information to Blue Apron, but note that you may be unable to access certain services or features if they require Personal Information that you have not provided. We also collect information automatically when you interact with our Sites. You can adjust certain settings, such as by turning off cookies in your browser or adjusting privacy settings in our apps, to reduce the amount of Personal Information we passively collect from you when you use our Services. Because we use these features to enhance your user experience (such as using cookies to remember your user name when you visit our Sites or by using push notification in our Apps to let you know the status of your Blue Apron orders), disabling such features may impact our Sites’ functionality. We may also collect some Personal Information from third-party partners, who may actively or passively collect information on our behalf when you use our Sites. We may also receive Personal Information that third parties collect in other contexts, such as when you visit other websites that are unaffiliated with Blue Apron and information collected from you offline. More about active collection Here are some more specific examples of categories of Personal Information we gather through active collection. Account Information: Name, email, password, address, phone number, subscription status, and dietary preferences. Transaction Information: Information about the Services you purchase, shipping and delivery information and information related to returns, refunds and cancellations. We may also collect and store limited payment information from you, such as payment card type and expiration date and the last four digits of your payment card number; however, we do not collect or store full payment card numbers and all transactions are processed by our third party payment processors. At present, Blue Apron uses Stripe and Apple Pay to process payments. Information collected directly by Stripe and Apple Pay, including your full payment card information, is governed by rigorous data protection standards that apply to the payment card industry, which you can read in full here: https://stripe.com/privacy and here: https://support.apple.com/en-us/HT203027. Other Information You Choose to Provide, such as when you communicate with us using social media; participate in a survey, contest, promotion or interactive area of the Sites; or when you request technical or customer support. More about passive collection Blue Apron and our third-party service providers automatically collect some information about you when you use our Sites, using methods such as cookies and tracking technologies (further described below). Information automatically collected includes Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, the files viewed on our site (e.g., HTML pages, graphics, etc.), operating system, date/time stamp, and/or clickstream data to analyze trends in the aggregate and operate the Sites. In addition, when you use some of our Sites, network information is transmitted back to us such as Site usage information. This information is transmitted back to us, so we can determine how users are interacting with our Sites, to assist us with improving our Sites and Services, and to correct any problems that may occur. Blue Apron and the vendors we work with – including web analytics vendors and companies that help us market Blue Apron Services – use various tracking technologies, including cookies and web beacons, to collect information about you when you interact with our Sites, including information about your browsing and purchasing behavior. Cookies are small data files stored on your hard drive or in device memory that help us improve the Sites and your experience, see which areas and features of the Sites are popular, and count visits. Web beacons are electronic images that may be used on the Sites or in emails and help deliver cookies, count visits and understand usage and campaign effectiveness. Vendors we work with may combine the personal information they collect when you use our Sites with information that they collect from other sources. When you visit our Sites from a mobile device, we collect information about the mobile device you use to access or use the Sites, including the hardware model, operating system and version, unique device identifiers, mobile network information and information about your use of our mobile applications. With your consent, we may also collect information about the location of your device and access and collect information from certain native applications on your device (such as your device’s camera, photo album and phonebook applications) to facilitate your use of certain features of the Sites. We may also collect information about you from other Blue Apron users. For example, a Blue Apron user can use our referral program to tell a friend about our Services, providing the friend’s name and email address in the process. A particularly generous Blue Apron user might send a friend a gift or gift certificate, providing the friend’s name, email address, and mailing address. Blue Apron users are responsible for obtaining any necessary consent from you before submitting your Personal Information to us. Why we collect Personal Information We collect and use the categories of Personal Information listed above in order to get you delicious meals and otherwise provide our Services, to communicate with you about your subscription and our Services, to provide customer support and troubleshooting, to improve our business, for security purposes, for other legitimate business purposes, or as required by law. We restrict our use of employment-related information that we collect from Blue Apron personnel and or an applicant for personnel positions solely for hiring, human resources management, and other employment-related purposes or as required by law. Our disclosure of Personal Information First, we may share Personal Information about you with our service providers. These are other companies that help us run our business, and who have promised only to use Personal Information subject to this privacy policy in order to help Blue Apron run its business. We may disclose all of the categories of Personal Information we have about you with such service providers, for the purposes of providing, running, marketing, personalizing, improving, operating, and maintaining our Sites and Services. Second, we also share Personal Information with a limited number of other businesses that aren’t service providers. These businesses offer services to Blue Apron, like serving advertisements on our behalf across the Internet, serving personalized ads on our website, and providing analytics services. Unlike with our service providers, these businesses have not promised to use Personal Information that we provide solely in connection with Blue Apron’s Sites and Services, and they may use your Personal Information for other purposes. Under the California Consumer Protection Act, this sharing of Personal Information may qualify as the “sale” of Personal Information by Blue Apron, even though Blue Apron does not get money in exchange for giving a third party access to your Personal Information. Blue Apron does not knowingly collect or sell information from or about children under 16 without sufficient legal authorization. For more information about opting out of the “sale” of your Personal Information, go to the Consumer Rights section below. Third, we also may disclose your Personal Information when you voluntarily use a Site feature that requires sharing of Personal Information in order to work properly. For example, if you “Like,” “Tweet,” “Pin,” or share content using the social sharing features or other integrated tools on our Sites, you should be aware that the relevant social media company may access Personal Information from you, and any information that you post may be made broadly available, depending on your privacy settings for your social media account. Last, we disclose Personal Information to courts, law enforcement, and other appropriate third parties when the disclosure is required or authorized by law or reasonably necessary for the protection of our property or legal rights. More about our sharing with service providers For example, service providers may get access to Personal Information so they can help with: Managing your account and sending you related information, including confirmations, updates, technical notices, security alerts and support and administrative messages Fulfilling Service requests Protecting against, investigating, and deterring fraudulent, harmful, unauthorized or illegal activity Providing reports to you based on information collected from your use of our Services Processing your orders and delivering the Services that you have ordered Providing support and assistance in connection with your use of our Services Providing the ability to contact you and provide you with shipping and billing information and other Sites, Services, recipes, services, offers, surveys, events and other news and information we think may be of interest to you Facilitating contests, sweepstakes and promotions and processing and delivering entries and rewards Enhancing your experience with our Sites Responding to your comments, questions and requests and providing customer service Complying with our contractual and legal obligations, resolving disputes with users, enforcing our agreements Monitoring and analyzing trends, usage and activities in connection with the Sites Linking or combining Personal Information from our various sources of Personal Information (described above) to help us understand your needs and provide you with a better experience More about “sale” of Personal Information The companies we use for analytics and targeted advertising may use cookies, pixels, web beacons and other technologies to collect information about your use of the Sites and other websites, including your IP address, web browser, pages viewed, time spent on pages, links clicked, and conversion information. This information may be used by us and others to, among other things, analyze and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests on the Sites and other websites, and better understand your online activity. More about social media integrations For more information about the purpose and scope of data collection and processing in connection with social sharing features, please visit the privacy policies of the social media services that you use and that provide these features. In other words, Facebook, Instagram, Pinterest, Twitter, and similar services all have their own privacy policies that you should read. Blue Apron’s privacy policy doesn’t apply to them. Controls over your Personal Information We encourage you to read this section in full. But here are the links you may need if you want to make a request related to your Personal Information, so you have them handy: Opt Out of the “Sale” of Personal Information and Targeted Advertising Now onto the full explanation: We do our best to give you reasonable controls over the Personal Information we collect from or about you as set forth below. If you reside in California, you may have legal rights with respect to your Personal Information, including those set forth under the California Consumer Privacy Act (“CCPA”). In order to protect the privacy of all Blue Apron customers and potential customers from across the United States, we will make our best effort to honor requests made non-California residents. Here are the types of requests you can make: You may request to opt out of the “sale” of personal information. Whether or not you opt out of the “sale” of personal information, Blue Apron doesn’t allow marketing companies, advertisers, or anyone else to access to your Personal Information in exchange for payment. But some of Blue Apron’s information sharing practices may qualify as the “sale” of personal information, as “sale” is defined in the California Consumer Privacy Act. If you opt out of “sale,” we will change these information sharing practices. You may request access to the Personal Information that Blue Apron has collected about you during the previous 12 months, for a copy of Personal Information in a portable format, that Blue Apron delete Personal Information it has about you, and to opt-out of the sale of Personal Information. You may make a request by calling 1-888-278-4349 or emailing privacy@BlueApron.com. Before we disclose or delete Personal Information in response to any of these requests, we will need to verify your identity. If you have an account with Blue Apron, we will verify your identity by having you log-in to your Blue Apron account. If you do not have an account with us, please provide your email address. Depending on the nature of your request, we may contact you for further information if appropriate to verify your identity. Note, however, that Blue Apron will never ask you for sensitive personal or financial information when verifying your identity, and no Blue Apron employee will ask you to tell them your password. Under certain circumstances, we will not be able to fulfill your request, such as if it prevents us from completing a transaction you initiated, interferes with our regulatory obligations, affects legal matters including a Blue Apron user’s rights to data contained in their account, we cannot verify your identity, or compliance with your request is not legally required and would involve disproportionate cost or effort. But in any event we will respond to your request within a reasonable timeframe and provide you with an explanation. Blue Apron will not discriminate against anyone that makes a request to access, delete, or limit our use or sale of Personal Information, but in some cases we will not be able to provide our Services to you without that information. You may make a request by calling 1-888-278-4349 or emailing privacy@BlueApron.com. More about the types of privacy rights requests you can make Access: You can request more information about Blue Apron’s processing of your Personal Information during the previous 12 months. Your request can include: the categories and specific pieces of Personal Information we collected from you, why we collected that information, the categories of third parties from which we received Personal Information about you, the categories of third parties with whom we shared that information, and/or the categories of third parties to whom we may have sold that information during the previous 12 months. Portability: You can request a copy of your Personal Information that we have collected about you in a machine-readable format. You can also request that we transmit the data to another entity where technically feasible. Deletion: You can request that we erase some or all of your Personal Information from our systems. Please be aware that your request to delete Personal Information may not cover all of the Personal Information in Blue Apron’s possession. We will continue to retain Personal Information that we use to provide our Services to you, preserve the security and functionality of our Services, protect our legal rights, and internally for other legitimate business purposes that are consistent with the reason why you provided us with the Personal Information and reasonable expectations. Opt-Out of “Sales”: You can ask us not to sell your Personal Information by clicking on the “Do Not ‘Sell’ My Personal Information” link above. You can also use an authorized agent to submit a request to opt-out on your behalf if you provide the agent written permission to do so. We may require the agent to submit proof that you have authorized them to submit an opt-out request. If you opt out of the “sale” of information, we will alter or suspend our information sharing with businesses that offer services to Blue Apron (like serving advertisements on our behalf across the Internet, serving personalized ads on our website, and providing analytics services) but that have not promised to use all Personal Information that we provide them solely in connection with Blue Apron’s Sites and Services. Communications preferences We may send you communications (including emails, phone calls, text messages, push notifications, and snail mail) to your account and transactions initiated by you (such as order status updates and billing receipts). We need the ability to send you these communications to offer the Services, so we do not allow you turn them off entirely. But you can let us know if you have a preferred method for receiving these communications by changing the Notification Settings in your account, disabling push notifications as described below, or contacting us. We try our best to honor your reasonable preferences about communications. We may also send additional communications about the Services, such as newsletters and additional options that may be of interest to you. We do our best to only send this type of communication to people who want to receive it. If you would like to discontinue receiving these communications, you can update your preferences by using the “Unsubscribe” link found in such emails or by contacting us using the information in the “Contact Us” section of this policy. More about disabling push notifications Note that discontinuing push messages typically requires you to change your settings on your device. Each type of device operates differently, so please check your user manual if you’re having trouble. Data retention How long we retain your Personal Information depends on the type of data and the purpose for which we process the data. We will retain your Personal Information for the period necessary to fulfill the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law. Security of your Personal Information Blue Apron is committed to protecting the Personal Information you share with us. We utilize a combination of industry-standard security technologies, procedures, and organizational measures to help protect your Personal Information from unauthorized access, use, or disclosure. When we transfer credit card information over the Internet, we protect it using Transport Layer Security (TLS) encryption technology. We recommend you take every precaution in protecting your Personal Information when you are on the Internet. For example, change your passwords often, use a combination of upper and lower-case letters, numbers, and symbols when creating passwords, and make sure you use a secure browser. Contact us If you have any questions or comments related to this privacy policy, please send an email to privacy@BlueApron.com. You can also contact us by writing to this address: Blue Apron, LLC Privacy Requests 28 Liberty St., Floor 28 New York, NY 10005 FOLLOW US Like us on Facebook Follow us on Twitter Follow us on Instagram Check us out on Pinterest DISCOVER WHAT'S COOKIN' GO Sign up for offers, recipes, news & more FROM THE BLOG 15 Recipes for Cheesy Dinners On The Menu Pricing Our Vision Wine Market Gifts Blog Cookbook Suppliers Affiliates Supply Chains Act Food Safety Careers Press Our Team Investor Relations Customer Support: Help Center & FAQ contact@blueapron.com (646) 891-4349 © Blue Apron, LLC 2021 Do Not "Sell" My Info Ad Preferences Privacy Terms If you are using a screen reader and are having problems using this website, please call 1-844-462-8299 for assistance.