The Vitamin Shoppe: California Careers Privacy Notice

Effective Date: 12/15/2025

The Vitamin Shoppe respects your concerns about privacy. This California Careers Privacy Notice describes the types of personal information we collect about California residents who apply for jobs with The Vitamin Shoppe (“Job Applicants”). Certain terms used in this Notice have the meaning given to them in the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020 (the “CPRA”)) and its implementing regulations (collectively the “CCPA/CPRA”).

Personal Information We Collect

The Vitamin Shoppe may collect (and may have collected during the 12-month period prior to the effective date of this Notice) the following categories of personal information about Job Applicants:

• Identifiers: identifiers, such as a real name, alias, postal address, unique personal identifier (e.g., a device identifier, unique pseudonym, or user alias/ID), telephone number, online identifier, internet protocol address, email address, account name, Social Security number, driver’s license number, date of birth, and other similar identifiers.

• Additional Data Subject to Cal. Civ. Code § 1798.80: signature, state identification card number, education.

• Protected Classifications: characteristics of protected classifications under California or federal law, such as race, national origin, sex, gender, disability, citizenship status, and military and veteran status.

• Online Activity: Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with The Vitamin Shoppe’s or other third-party websites or applications.

• Employment Information: professional or employment-related information, such as compensation, benefits and payroll information (e.g., salary-related information, tax- related information, benefits elections and details regarding leaves of absence), information relating to your position (e.g., job title and job description), performance- related information (e.g., evaluations and training), talent management information (e.g., resumé information, occupation details, education details, certifications and professional associations, historical compensation details, previous employment details, and pre-employment screening and background check information, including criminal records information), and emergency contact information.

• Education Information: education information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99).

• Inferences: inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

How We Use the Personal Information

We may use (and may have used during the 12-month period prior to the effective date of this Notice) your personal information for the purpose of processing job applications, evaluating candidates for employment, and carrying out and supporting HR functions and activities, including as described below.

• Recruiting; processing job applications; performing background checks; determining suitability for employment; determining physical and/or mental fitness for work; reviewing and evaluating applications; determining salary and other forms of compensation; providing references; reimbursing expenses; making travel arrangements; securing immigration statuses; reviewing hiring decisions; and providing access to facilities.

• Ensuring business continuity; protecting the health and safety of our staff and others; safeguarding, monitoring, and maintaining our IT infrastructure, office equipment, facilities, and other property; and facilitating communication with you and your designated contacts in an emergency.

• Operating and managing our IT, communications systems and facilities, and monitoring the use of these resources; performing data analytics; improving or maintaining the quality of our services; allocating and managing company assets and human resources; strategic planning; project management; compiling audit trails and other reporting tools; and maintaining records relating to business activities, budgeting, and financial management.

• Complying with legal requirements, such as tax, record-keeping and reporting obligations; conducting audits, management and resolution of health and safety matters; complying with requests from government or other public authorities; responding to legal process such as subpoenas and court orders; pursuing legal rights and remedies; defending litigation and managing complaints or claims; conducting investigations; and complying with internal policies and procedures.

• Helping to ensure security and integrity to the extent the use of your personal information is reasonably necessary and proportionate for these purposes.

The Vitamin Shoppe does not collect or process sensitive personal information for purposes of inferring characteristics about Job Applicants.

To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Retention of Personal Information

We retain personal information for the time period reasonably necessary to achieve the purposes described in this Notice, or any other notice provided at the time of collection, unless a longer retention period is required or permitted by applicable law, taking into account relevant statutes of limitations and our records retention requirements and policies.

Sources of Personal Information

During the 12-month period prior to the effective date of this Notice, The Vitamin Shoppe may have obtained personal information about you from the following categories of sources:

• Directly from you;
• Your devices;
• Your employment references;
• Our affiliates (if you have applied to job postings with our affiliates);
• Vendors who provide services on our behalf;
• Government entities;
• Social networks; and
• Background check services.

Disclosure of Personal Information

During the 12-month period prior to the effective date of this Notice, The Vitamin Shoppe may have disclosed the following categories of personal information about you for a business purpose to the following categories of third parties:

Category of Personal Information	Category of Third Party
Identifiers	Our affiliates Vendors who provide services on our behalf Professional services organizations, such as auditors and law firms Data brokers, such as background check services
Additional Data Subject to Cal. Civ. Code § 1798.80	Our affiliates Vendors who provide services on our behalf Professional services organizations, such as auditors and law firms Data brokers, such as background check services
Protected Classifications	Our affiliates Vendors who provide services on our behalf Professional services organizations, such as auditors and law firms Data brokers, such as background check services
Online Activity	Our affiliates Vendors who provide services on our behalf
Employment Information	Our affiliates Vendors who provide services on our behalf Professional services organizations, such as auditors and law firms Data brokers, such as background check services
Education Information	Our affiliates Vendors who provide services on our behalf Professional services organizations, such as auditors and law firms Data brokers, such as background check services
Inferences	Our affiliates Vendors who provide services on our behalf Data brokers, such as background check services

In addition to the categories of third parties identified above, during the 12-month period prior to the effective date of this Notice, we may have disclosed personal information about you to government entities.

The Vitamin Shoppe does not sell or share for cross-context behavioral advertising purposes the personal information of Job Applicants. The Vitamin Shoppe does not have actual knowledge that The Vitamin Shoppe sells or shares the personal information of minors under 16 years of age.

Privacy Rights

If you are a Job Applicant, you have certain choices regarding your personal information, as described below.

• Access: You have the right to request, twice in a 12-month period, that we disclose to you the categories of personal information we have collected about you, the categories of sources from which the information was collected, the business or commercial purposes for collecting the information, the categories of third parties to whom we disclosed your personal information, and the specific pieces of personal information we have collected about you, if that information is inaccurate.
• Correction: You have the right to request that we correct the personal information we maintain about you, if that information is inaccurate.
• Deletion: You have the right to request that we delete certain personal information we have collected from you.

How to Submit a Request. To submit an access, correction or deletion request, or to submit a request as an authorized agent on behalf of a Job Applicant, please send us an email at recruiting@vitaminshoppe.com or call us at 844-468-0470.

Verifying Requests.To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal information or complying with your request. We may verify your identity by requiring you to provide any of the following information: permanent address, email address, mobile and/or home phone number. In addition, if you ask us to provide you with specific pieces of personal information, we may require you to sign a declaration under penalty of perjury that you are the individual whose personal information is the subject of the request. If you designate an authorized agent to make an access, correction, or deletion request on your behalf, (a) we may require you to provide the authorized agent written permission to do so, and (b) for access, correction and deletion requests, we may require you to verify your own identity directly with us (as described above).

Additional Information. If you choose to exercise any of your rights under the CCPA/CPRA, you have the right to not receive discriminatory treatment by us. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.

How To Contact Us
If you have any questions regarding this California Careers Privacy Notice or our privacy practices, please contact us at recruiting@vitaminshoppe.com.