California Consumer Privacy Act Notice

20230302_rev01 · COMPARED WITH 20221202_rev01 · ARCHIVE SNAPSHOT, DATE APPROXIMATE

Full text changes — 20221202_rev01 to 20230302_rev01

1[En Español](https://corporate.walmart.com/privacy-security/derechos-de-privacidad-en-california)
1## Walmart California Consumer Privacy Act Notice Summary
22
3This California Consumer Privacy Act Notice ("California Notice") describes how we handle your personal information, the reasons we do so, and the rights you have as a California resident regarding your information. This Notice supplements the **[Walmart Privacy Notice](https://corporate.walmart.com/privacy-security/walmart-privacy-notice)**.
4
5This California Notice uses certain terms that have the meaning given to them in the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and its implementing regulations.
6
7## What Are the Categories of Personal Information Collected?
8
9We may collect or receive (and may have collected or received during the 12-month period prior to the Last Updated date of this California Notice) the categories of personal information listed below. Not all categories will be collected or received for every individual.
10
11- **Identifiers:** Personal identifiers, such as name, telephone number, physical address, email address, national identification numbers, driver's license numbers, and signatures
12- **Device Information and Online Activity:** Device and online identifiers, keystroke patterns indicative of human or bot website/app usage, mobile and web network activity and related information (such as Mac address, IP address, cookie IDs, browser activity, and other information associated with your browsing history), and social media information
13- **Commercial Information:** Purchase and transaction history information (such as products or services you have purchased, rented, or returned), health and safety-related information, product testimonials, travel and vacation information, and competition entries
14- **Communications:** Communication details (such as the content of emails, text messages, or other communications), call logs, and calendar information where Walmart is a party to the exchange
15- **Demographic Information:** Demographic information, such as age (including information about children under the age of 13 with respect to certain purchases and services (e.g., tobacco purchases), gender, citizenship, ethnicity, date of birth, family or marital status, household income, education, professional and employment information, family health, number of children, number of cars owned, and software or virtual assets owned
16- **Financial Information:** Financial information, such as credit or debit card numbers, financial account numbers, and claims information
17- **Biometric Information:** Biometric information, such as voice prints, imagery of the iris or retina, face geometry, and palm prints or fingerprints
18- **Geolocation:** Location information, such as geolocation information
19- **Sensory Information:** Audio, visual information, and other sensory information such as photographs and audio and video recordings
20- **Background Information:** Background and criminal information, such as background checks and criminal convictions
21- **Inferences:** Individual preferences and characteristics, such as inferences related to shopping patterns and behaviors, intelligence, and aptitudes
22- **Sensitive Personal Information:** Government-issued identifiers (such as social security, driver's license, state identification card, or passport number), account log-in and financial information (such as payment card details), and precise geolocation
23
24## What Are the Categories of Sources from Which We Collect Your Personal Information?
25
26We may obtain and combine personal information from different sources, as described in _the How Do We Collect Information_ section of the Walmart Privacy Notice and provided below:
27
28- Provided directly by you or a member of your household
29- Collected from a device associated with you or your household
30- Collected through in-store technology
31- Collected from another company within our family of companies
32- Collected from an external third-party source
33- Collected from another solution or asset
34- Collected from other sources, when it is appropriate, to help us correct or supplement our records, improve the quality or personalization of our services, increase the appeal and relevance of advertising, and to prevent or detect fraud
35
36## What Are the Purposes for Collecting Personal Information?
37
38We may use your personal information for the purposes described in the _How Do We Use Your Personal Information_ section of the Walmart Privacy Notice and as provided below:
39
40- Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytics services, providing storage, or providing similar services
41- Providing advertising and marketing services, including targeted advertising
42- To conduct auditing and monitoring of transactions and engagement, including auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance
43- Short-term, transient use, such as non-personalized advertising shown as part of your current interaction with us
44- Helping to ensure security and integrity and prevent fraud
45- Undertaking activities to verify or maintain the quality or safety of our services or devices and to improve, upgrade, or enhance them
46- Debugging to identify and repair errors
47- To conduct business analysis, such as analytics, projections, identifying areas for operational improvement
48- To conduct research and development, including undertaking internal research for technological development and demonstration
49- To fulfill our legal function or obligations
50
51We use sensitive personal information for each of the purposes described above and to make inferences about customers, which we may use to promote certain products or services.
52
53To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.
54
55## Sale and Sharing of Personal Information
56
57We may sell or share personal information with third parties for various purposes including cross-context behavioral advertising or sharing among Walmart-affiliated entities. These kinds of disclosures may be deemed selling or sharing personal information under California law and you have the right to opt out of these disclosures. We may sell or share for cross-context behavioral advertising purposes (and may have sold or shared during the 12-month period prior to the Last Updated date of this California Notice) the following categories of personal information to the following categories of third parties:
58
59<table><tbody><tr><td colspan="1" rowspan="1"><b>Category of Personal Information Sold or Shared</b></td><td colspan="1" rowspan="1"><b>Category of Third-Party Recipient</b></td></tr><tr><td colspan="1" rowspan="1">Identifiers</td><td colspan="1" rowspan="1">Service providers (such as advertising networks, marketplace sellers, analytics providers, etc.)</td></tr><tr><td colspan="1" rowspan="1">Device Information and Online Activity</td><td colspan="1" rowspan="1">Business partners that receive data for their own independent use and not to provide services to a Walmart entity</td></tr><tr><td colspan="1" rowspan="1">Demographic Information</td><td colspan="1" rowspan="1">Business partners that receive data for their own independent use and not to provide services to a Walmart entity; Service providers that receive data to provide services to a Walmart entity (e.g., analytics providers, advertising networks, cloud storage providers, etc.); Business partners</td></tr><tr><td colspan="1" rowspan="1">Geolocation</td><td colspan="1" rowspan="1">Business partners that receive data for their own independent use and not to provide services to a Walmart entity</td></tr><tr><td colspan="1" rowspan="1">Inferences</td><td colspan="1" rowspan="1">Business partners that receive data for their own independent use and not to provide services to a Walmart entity; Service providers that receive data to provide services to a Walmart entity (e.g., analytics providers, cloud storage providers, etc.); Business partners</td></tr></tbody></table>
60
61## Sale or Share of Personal Information of Consumers under 16 Years of Age
62
63Walmart does not knowingly sell or share (for cross-context behavioral advertising) the personal information of consumers under 16 years of age. For more information about treatment of children's personal information, see the Walmart Privacy Notice.
64
65## Disclosing Personal Information for Business Purposes
66
67During the 12-month period prior to the Last Updated date of this California Notice, we may have disclosed your personal information with certain categories of third parties as described in the _Categories of Personal Information We Disclose to Each Type of Third-Party_ section of the Walmart Privacy Notice and disclosed below:
68
69- Demographic information
70- Device and online identifiers
71- Financial information
72- Individual preferences and characteristics
73- Location information
74- Personal identifiers
75- Purchase history information
76- Audio, visual and other sensory information
77- Background and criminal information
78- Biometric information
79- Characteristics of protected classifications under California or federal law
80- Education information
81- Employment information
82- Government identifiers
83- Health and health insurance information
84- Internet, application, and network activity
85
86## How Long Do We Retain Your Personal Information?
87
88We will keep the personal information we collect about you for as long as necessary to carry out the purposes set forth in this Privacy Notice or any other notice provided at the time of data collection, but no longer than as required or permitted under applicable law or internal Walmart policy. We dispose of the information we collect in accordance with Walmart's retention policies and procedures.
89
390## What Are Your California Privacy Rights?
491
5Last Updated: May 11, 2022
92If you are a California resident, you can make certain requests regarding your personal information, and we will fulfill each request to the extent required by law. If we are unable to comply with your request in whole or in part, we will notify you with reasons for the denial.
693
7**California Consumer Privacy Act**
8If you are a California resident, you can make certain requests regarding your personal information. We will fulfill each of these requests per the requirements of California law.
94As stated in more detail below, you can request that we:
995
101\. You can request access to a copy of the personal information we have about you, including a list of categories of your personal information that we have sold and a list of categories of your personal information that we have shared with another company for a business purpose.
112\. You can request that we delete your personal information.
123\. You can request that we stop selling your personal information.
961. Provide you with access to a copy of and certain details regarding the personal information we have about you.
972. Delete your personal information.
983. Stop selling your personal information or sharing your personal information for cross-context behavioral advertising.
994. Correct your inaccurate personal information.
1005. Limit the use or disclosure of your sensitive personal information (SPI).
13101
14More information on each of these requests is below.
102To exercise any of these privacy rights, call 1-800-Walmart (1-800-925-6278), press one, and say, "I'd like to exercise my privacy rights." Or follow the instructions below specific to the type of request.
15103
161\. Request my Personal Information: If you make this request, which we also refer to as a Request to Access Information, we will return to you (to the extent required by law):
1041\. **Request to Access My Personal Information:** You have the right to request access to the personal information we may have collected about you. To access your personal information, click "Request My Personal Information."
17105
106Requests to access your personal information may be submitted up to two times in a rolling twelve-month period. In response, we will return to you the following categories of information, to the extent required by law:
107
18108- The categories of personal information we have collected about you.
19109- The categories of sources from which we collect your personal information.
20- The business or commercial purpose for collecting or selling your personal information.
21- The categories of third parties with whom we share personal information.
110- The business or commercial purpose for collecting, selling, or sharing your personal information.
111- The categories of third parties to whom we disclose personal information.
22112- The specific pieces of personal information we have collected about you.
23- A list of categories of personal information that we have sold, along with the category of any other company we sold it to. Any of the categories of personal information that we collect could be included in a sale to other companies, including those within our corporate family. If we have not sold your personal information, we will inform you of that fact.
24- A list of categories of personal information that we have disclosed for a business purpose, along with the category of any other company we shared it with.
113- A list of categories of personal information that we have sold or shared for cross-context behavioral advertising, along with the categories of third parties we sold it to or shared it with for cross-context behavioral advertising.
114- A list of categories of personal information that we have disclosed for a business purpose, along with the categories of third parties we disclosed it to.
25115
26You can ask us to provide you with this information up to two times in a rolling twelve-month period. When you make this request, the information provided may be limited to personal information we collected about you in the previous 12 months.
1162\. **Delete My Personal Information:** You have the right to ask that we delete your personal information. Once we receive a request, we will delete the personal information (to the extent required by law) we hold about you as of the date of your request from our records and direct our service providers to do the same. Choosing to delete your personal information may impact your ability to use our websites and online features, including closure of your online account, and limit your use of in-store functions that require your personal information. To delete your personal information, click "Request My Personal Information."
27117
282\. Delete My Personal Information: You have the right to ask that we delete your personal information. Once we receive a request, we will delete the personal information (to the extent required by law) we hold about you as of the date of your request from our records and direct any service providers to do the same. In some cases, deletion may be accomplished through de-identification of the information. Choosing to delete your personal information may impact your ability to use our websites and online features, including closure of your online account, and limit your use of in-store functions that require your personal information.
1183\. **Stop Selling or Sharing My Personal Information:** You have the right to opt-out of the sale of your personal information or sharing of your personal information for cross-context behavioral advertising and can request that we stop by clicking "My Privacy Choices" or by using the Global Privacy Control as described below.
29119
303\. Stop Selling My Personal Information: We share personal information within our Walmart family of companies and with certain third parties, which may be considered a "sale" under California law. For purposes of California law, we may share with these parties all categories of personal information, except for background and criminal information, biometric information, and government identifiers. We do not knowingly sell the personal information of minors under 16 years of age. If you are a California resident, you have a right to opt-out of the sale of your personal information. To do so, click "[Do Not Sell My Personal Information](https://cpa-ui.walmart.com/affirmation)."
120Your opt-out request may be processed differently depending on whether you are logged into your account. If you are logged in, your preference will be associated with your account, and the device on which you exercised your choice. When you log in from another device or browser, it too will be automatically opted out. If you are not logged into your account, your request will only be associated with that one browser. We also support your use of the Global Privacy Control (GPC). If you notify us of your privacy preferences through GPC, we will honor your request with respect to the browser or device that sends us the GPC signal, and when you login to your account from that device, the opt-out will extend to your account, as well.
31121
32Below is a chart showing the types of personal identifiers that we may have sold in the previous 12 months.
122If you change your preference from opt-in to opt-out, you may be asked to confirm your preference prior to it taking effect. After opting out of the sale of your personal information or sharing of your personal information for cross-context behavioral advertising, you may still receive ads from Walmart, however they will not be tailored to you.
33123
34<table><tbody><tr><td colspan="1" rowspan="1"><b>Categories of Third Parties to Whom the Personal Information May Be Sold</b></td><td colspan="1" rowspan="1"><b>Categories of Personal Information Sold</b></td></tr><tr><td colspan="1" rowspan="1">Advertising companies (like ad servers, advertising agencies, technology vendors, providers of sponsored content, and others)</td><td colspan="1" rowspan="1">Characteristics of protected classifications under California or federal law</td></tr><tr><td colspan="1" rowspan="1"></td><td colspan="1" rowspan="1">Demographic information</td></tr><tr><td colspan="1" rowspan="1"></td><td colspan="1" rowspan="1">Device and online identifiers</td></tr><tr><td colspan="1" rowspan="1"></td><td colspan="1" rowspan="1">Education information</td></tr><tr><td colspan="1" rowspan="1"></td><td colspan="1" rowspan="1">Employment information</td></tr><tr><td colspan="1" rowspan="1"></td><td colspan="1" rowspan="1">Financial information</td></tr><tr><td colspan="1" rowspan="1"></td><td colspan="1" rowspan="1">Individual preferences and characteristics</td></tr><tr><td colspan="1" rowspan="1"></td><td colspan="1" rowspan="1">Internet, application, and network activity</td></tr><tr><td colspan="1" rowspan="1"></td><td colspan="1" rowspan="1">Location information</td></tr><tr><td colspan="1" rowspan="1"></td><td colspan="1" rowspan="1">Personal identifiers</td></tr><tr><td colspan="1" rowspan="1"></td><td colspan="1" rowspan="1">Purchase history information</td></tr><tr><td colspan="1" rowspan="1">Other entity in the Walmart family of companies</td><td colspan="1" rowspan="1">Characteristics of protected classifications under California or federal law</td></tr><tr><td colspan="1" rowspan="1"></td><td colspan="1" rowspan="1">Demographic information</td></tr><tr><td colspan="1" rowspan="1"></td><td colspan="1" rowspan="1">Device and online identifiers</td></tr><tr><td colspan="1" rowspan="1"></td><td colspan="1" rowspan="1">Education information</td></tr><tr><td colspan="1" rowspan="1"></td><td colspan="1" rowspan="1">Employment information</td></tr><tr><td colspan="1" rowspan="1"></td><td colspan="1" rowspan="1">Financial information</td></tr><tr><td colspan="1" rowspan="1"></td><td colspan="1" rowspan="1">Individual preferences and characteristics</td></tr><tr><td colspan="1" rowspan="1"></td><td colspan="1" rowspan="1">Internet, application, and network activity</td></tr><tr><td colspan="1" rowspan="1"></td><td colspan="1" rowspan="1">Location information</td></tr><tr><td colspan="1" rowspan="1"></td><td colspan="1" rowspan="1">Personal identifiers</td></tr><tr><td colspan="1" rowspan="1"></td><td colspan="1" rowspan="1">Purchase history information</td></tr></tbody></table>
1244\. **Correct My Personal Information:** You have the right to ask that we correct the personal information we may have collected about you if that information is inaccurate. We reserve the right to request identifying documentation from you in certain circumstances, as permitted by law. To correct your personal information, click "Request My Personal Information."
35125
36We will not discriminate against you for exercising your rights. This generally means we will not deny you goods or services, charge different prices or rates, provide a different level of service or quality of goods, or suggest that you might receive a different price or level of quality for goods. Please know, if you ask us to delete or stop selling your data, it may impact your experience with us, and you may not be able to participate in certain programs or membership services which require usage of your personal information to function.
1265\. **Limit the Use and Disclosure of SPI:** You have the right to ask that we limit our use and disclosure of your SPI to certain purposes permitted by law and can do so by clicking "My Privacy Choices."
37127
38To exercise the California privacy rights described above, please click "[Request My Personal Information](https://cpa-ui.walmart.com/affirmation)". Or call 1-800-Walmart (1-800-925-6278), press one, and say, "I'd like to exercise my privacy rights."
128We will not discriminate against you for exercising your rights. We will not deny you goods or services, charge different prices or rates, provide a different level of service or quality of goods, or suggest that you might receive a different price or level of quality for goods. Some programs or membership services require usage of personal information to function, so compliance with your request may impact those experiences.
39129
40To opt-out of the sale of your personal information, please click "[Do Not Sell My Personal Information](https://cpa-ui.walmart.com/affirmation)."
130**How Do We Verify Your Identity to Complete Your Access, Correction and Deletion Requests:**
131If you request access to, or the correction or deletion of, your personal information we will verify your identity before disclosing the requested information. To do so, we may ask that you log into your account or provide us with your:
41132
42**Verifying Your Identity for Requests to Access or Delete Personal Information**
43We take the privacy of your personal information seriously and want to ensure that we provide only you or your authorized agent with your personal information. The CCPA also requires that we verify the identity of each person who makes a request to know what personal information we have about you or to delete the personal information we have about you.
133- First name\*, Middle initial, Last name\*
134- Address\*
135- Email address
136- Phone number
44137
45**What Personal Information Do I Provide to Verify My Identity?**
46To verify your identity, we ask you to provide your:
138_\*Required field_
47139
48First name\*
49Last name\*
50Middle initial
51Email address
52Phone number
53Address\*
54_\*required field_
140When you make a request, you will be asked to answer a few questions about yourself to help us verify your identity. Third-party identification services may help us with verification to prevent disclosure of your personal information resulting from fraudulent requests. You may be asked to log into your online account and complete a one-time passcode validation. In the event more documentation is necessary to verify your identity, we will notify you directly.
55141
56**How Do You Verify My Identity?**
57We may verify your identity in a few different ways. We've partnered with a third-party identification service to help us verify your identity and prevent fraudulent requests. When you make your request, you will be asked to answer a few questions about yourself to help us validate your identity. If you have an online account, we may ask you to log into your account and complete a one-time passcode validation.
58
59In some instances, we may ask you to provide other documentation to verify your identity. If this happens, we will reach out to you directly with this request.
60
61142**What If You Can't Verify My Identity?**
62If we can't verify your identity, we will not be able to process your request to know what personal information we have about you or to delete the personal information we have about you. If we are unable to verify your identity with a high degree of certainty, we will only be able to provide a report with category-level information and we may not be able to delete some of your information.
143If we can't verify your identity, we will notify you, and your request(s) to access, request, or delete your personal information may not be processed. Any requests may be denied if we have reason to believe they are fraudulent.
63144
64**How to Submit a Request Using an Authorized Agent**
65An authorized agent is a person or business who has authorization to request to know what personal information we have about you, to delete the personal information we have about you, or to opt out of the sale of personal information on behalf of a California resident. Authorized agents use the same links described above to submit requests.
145**How Do I Submit a Request Using an Authorized Agent?**
146If you'd like an authorized agent to exercise your rights for you, they may use the same links described above to submit requests. We require documentation demonstrating your agent's authority to submit requests on your behalf. For example, a valid power of attorney or other documentation, including a letter, signed by you (the California resident) authorizing the agent to submit your requests. You can download a sample letter from the request form. Documentation may be uploaded at the time you submit your request on our website or provided to us up to 10 business days after. If you submit your request by calling, you can email your forms to [consumerprivacy@wal-mart.com](mailto:consumerprivacy@wal-mart.com).
66147
67If you are submitting a request on behalf of another person, we require a valid power of attorney or other documentation demonstrating your authority to submit this request. This can be a letter or other documentation signed by the California resident authorizing you to submit this request. You can download a sample letter from the request form.
148**Number of Requests Received in 2022**
149To view metrics about our privacy requests, click [How Many California Consumer Privacy Act Requests Did We Fulfill Last Year?](https://corporate.walmart.com/privacy-security/california-privacy-rights/metrics).
68150
69**How Do I Send You My Documentation?**
70If you submit a request on our website, you will be asked to upload this documentation when you submit your request. If you submit your request over the phone, you will be asked to email your forms to [consumerprivacy@wal-mart.com](mailto:consumerprivacy@wal-mart.com). Please note, you will have 10 business days to provide all required documentation.
151**Shine the Light**
152California residents also have the right to request that we provide you with (a) a list of certain categories of personal information we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year and (b) the identity of those third parties. To exercise this right, contact us at the address below.
71153
72**Number of Requests Received in 2021**
73To view metrics about how many requests we received last year, please click [here](https://corporate.walmart.com/privacy-security/california-privacy-rights/metrics).
154**Notice of Financial Incentive**
155If we provide a financial incentive, we will provide you with the details, including how the incentive is related to your data before you participate so that you may make an informed decision about whether and how to participate. In the event you decide to take advantage of a financial incentive, you will always have the right to withdraw from participation and we will provide you with directions on how to do so.
74156
75**Your California Privacy Rights - Shine the Light**
76The following rights apply to California residents.
157Contact our [Customer Service Team](https://corporate.walmart.com/about/contact/store-corporate-feedback) or write the Walmart Privacy Office with any questions or comments about this Notice or about how we handle your personal information. The Privacy Office's address is:
77158
78- We share personal information with others outside of Walmart for direct marketing of their products only if we have your affirmative consent (opt in). See _"How Do We Share Your Personal Information Outside Walmart?"_
79- We share personal information with other businesses within our corporate family, such as Sam's Club or Moosejaw.com. You may ask us for more information about this sharing and whether it affects you by contacting us at the address below. _See "How Do We Use Your Personal Information?"_
80
81Contact our [Customer Service Team](https://corporate.walmart.com/about/contact/store-corporate-feedback) or write the Walmart Privacy Office with any questions or comments about this Policy or about how we handle your personal information. The Privacy Office's address is:
82
83159Walmart Corporate
84160Privacy Office, MS #0160
85161702 SW 8th Street
86162Bentonville, AR 72716-0160
87163
88View the full [Walmart Privacy Policy](https://corporate.walmart.com/privacy-security/walmart-privacy-policy)
164View the full **[Walmart Privacy Notice](https://corporate.walmart.com/privacy-security/walmart-privacy-notice)**.