Walmart California Consumer Privacy Act Notice changes — 20240701_rev01

126

You have the right to ask that we delete your personal information. Once we receive a request, we will delete the personal information (to the extent required by law) we hold about you as of the date of your request from our records and direct our service providers to do the same. Choosing to delete your personal information may impact your ability to use our websites and online features, including closure of your online account, and limit your use of in-store functions that require your personal information. To delete your personal information, click "Request My Personal Information."

127

128

### Stop Selling or Sharing My Personal Information

129

130

You have the right to opt-out of the sale of your personal information or sharing of your personal information for cross-context behavioral advertising and can request that we stop by clicking "My Privacy Choices" or by using the Global Privacy Control as described below.

131

132

Your opt-out request may be processed differently depending on whether you are logged into your account. If you are logged in, your preference will be associated with your account, and the device on which you exercised your choice. When you log in from another device or browser, it too will be automatically opted out. If you are not logged into your account, your request will only be associated with that one browser. We also support your use of the Global Privacy Control (GPC). If you notify us of your privacy preferences through GPC, we will honor your request with respect to the browser or device that sends us the GPC signal, and when you login to your account from that device, the opt-out will extend to your account, as well.

132

Your opt-out request may be processed differently depending on whether you are logged into your account. If you are logged in, your preference will be associated with your account, and the device on which you exercised your choice. When you log in from another device or browser, it too will be automatically opted out. If you are not logged into your account, your request will only be associated with that one browser. We also support your use of the Global Privacy Control (GPC). If you notify us of your privacy preferences through GPC, we will honor your request with respect to the browser or device that sends us the GPC signal, and when you log in to your account from that device, the opt-out will extend to your account, as well.

133

134

If you change your preference from opt-in to opt-out, you may be asked to confirm your preference prior to it taking effect. After opting out of the sale of your personal information or sharing of your personal information for cross-context behavioral advertising, you may still receive ads from Walmart, however they will not be tailored to you.

134

If you change your preference from opt-in to opt-out, you may be asked to confirm your preference prior to it taking effect. After opting out of the sale or sharing of your personal information for cross-context behavioral advertising, you may still receive ads from Walmart; however they will not be tailored to you.

135

136

### Correct My Personal Information

137

138

You have the right to ask that we correct the personal information we may have collected about you if that information is inaccurate. We reserve the right to request identifying documentation from you in certain circumstances, as permitted by law. To correct your personal information, click "Request My Personal Information."

139

140

### Limit the Use and Disclosure of SPI

141

142

You have the right to ask that we limit our use and disclosure of your SPI to certain purposes permitted by law and can do so by clicking "My Privacy Choices."

143

144

We will not discriminate against you for exercising your rights. We will not deny you goods or services, charge different prices or rates, provide a different level of service or quality of goods, or suggest that you might receive a different price or level of quality for goods. Some programs or membership services require usage of personal information to function, so compliance with your request may impact those experiences.

145

146

### How Do We Verify Your Identity to Complete Your Access, Correction and Deletion Requests

146

### How Do We Verify Your Identity to Complete Your Access, Correction, and Deletion Requests

147

148

If you request access to, or the correction or deletion of, your personal information we will verify your identity before disclosing the requested information. To do so, we may ask that you log into your account or provide us with your:

149

150

- First name\*, middle initial, last name\*

151

- Address\*

152

- Email address

153

- Phone number

154

155

_\*Required field_

156

157

When you make a request, you will be asked to answer a few questions about yourself to help us verify your identity. Third-party identification services may help us with verification to prevent disclosure of your personal information resulting from fraudulent requests. You may be asked to log into your online account and complete a one-time passcode validation. In the event more documentation is necessary to verify your identity, we will notify you directly.

158

159

### What If You Can't Verify My Identity?

159

### What If You Cannot Verify My Identity?

160

161

If we can't verify your identity, we will notify you, and your request(s) to access, request, or delete your personal information may not be processed. Any requests may be denied if we have reason to believe they are fraudulent.

161

If we cannot verify your identity, we will notify you, and your request(s) to access, request, or delete your personal information may not be processed. Any requests may be denied if we have reason to believe they are fraudulent.

162

163

### How Do I Submit a Request Using an Authorized Agent?

164

165

If you'd like an authorized agent to exercise your rights for you, they may use the same links described above to submit requests. We require documentation demonstrating your agent's authority to submit requests on your behalf. For example, a valid power of attorney or other documentation, including a letter, signed by you (the California resident) authorizing the agent to submit your requests. You can download a sample letter from the request form. Documentation may be uploaded at the time you submit your request on our website or provided to us up to 10 business days after. If you submit your request by calling, you can email your forms to [consumerprivacy@wal-mart.com](mailto:consumerprivacy@wal-mart.com).

165

If you would like an authorized agent to exercise your rights for you, they may use the same links described above to submit requests. We require documentation demonstrating your agent's authority to submit requests on your behalf. For example, a valid power of attorney or other documentation, including a letter, signed by you (the California resident) authorizing the agent to submit your requests. You can download a sample letter from the request form. Documentation may be uploaded at the time you submit your request on our website or provided to us up to 10 business days after. If you submit your request by calling, you can email your forms to [consumerprivacy@wal-mart.com](mailto:consumerprivacy@wal-mart.com).

166

167

### Number of Requests Received in 2022

167

### Number of Requests Received in 2023

168

169

To view metrics about our privacy requests, click [How Many California Consumer Privacy Act Requests Did We Fulfill Last Year?](https://corporate.walmart.com/content/corporate/en_us/privacy-security/california-privacy-rights/metrics.html).

169

To view metrics about our privacy requests, click [How Many California Consumer Privacy Act Requests Did We Fulfill Last Year?](https://corporate.walmart.com/content/corporate/en_us/privacy-security/california-privacy-rights/metrics.html)

170

171

### Shine the Light

172

173

California residents also have the right to request that we provide you with (a) a list of certain categories of personal information we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year and (b) the identity of those third parties. To exercise this right, contact us at the address below.

174

175

### Notice of Financial Incentive

176

177

If we provide a financial incentive, we will provide you with the details, including how the incentive is related to your data before you participate so that you may make an informed decision about whether and how to participate. In the event you decide to take advantage of a financial incentive, you will always have the right to withdraw from participation and we will provide you with directions on how to do so.

178

179

Contact our [Customer Service Team](https://www.walmart.com/help/store-feedback) or write the Walmart Privacy Office with any questions or comments about this notice or about how we handle your personal information. The Privacy Office's address is:

179

Contact our [Customer Service Team](https://www.walmart.com/help/store-feedback) or write the Walmart Privacy Office with any questions or comments about this Notice or about how we handle your personal information. The Privacy Office's address is:

180

181

Walmart Corporate

182

Privacy Office, MS #0160

183

702 SW 8th Street

184

Bentonville, AR 72716-0160

185

186

_View the full [Walmart Privacy Notice](https://corporate.walmart.com/content/corporate/en_us/privacy-security/walmart-privacy-notice.html)._

186

View the full [Walmart Privacy Notice](https://corporate.walmart.com/content/corporate/en_us/privacy-security/walmart-privacy-notice.html).

 ## We Recently Updated Our Privacy Notice
 Updates include:
+- Updated instructions about how to exercise data privacy rights by calling Walmart
+- Updated Metrics for Consumer Requests under the California Consumer Privacy Act
 ## Walmart California Consumer Privacy Act Notice Summary
 This California Consumer Privacy Act Notice ("California Notice") describes how we handle your personal information, the reasons we do so, and the rights you have as a California resident regarding your information. This Notice supplements the [Walmart Privacy Notice](https://corporate.walmart.com/content/corporate/en_us/privacy-security/walmart-privacy-notice.html).
 This California Notice uses certain terms that have the meaning given to them in the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and its implementing regulations.
 ## What Are the Categories of Personal Information Collected?
 We may collect or receive (and may have collected or received during the 12-month period prior to the Last Updated date of this California Notice) the categories of personal information listed below. Not all categories will be collected or received for every individual.
 - **Identifiers:** Personal identifiers, such as name, telephone number, physical address, email address, national identification numbers, driver's license numbers, and signatures
 - **Device Information and Online Activity:** Device and online identifiers, keystroke patterns indicative of human or bot website/app usage, mobile and web network activity and related information (such as Mac address, IP address, cookie IDs, browser activity, and other information associated with your browsing history), and social media information
+- **Commercial Information:** Purchase and transaction history information (such as products or services you have purchased, rented, or returned), health and safety-related information, product testimonials, travel and vacation information, and competition entries
+- **Commercial Information:** Purchase and transaction history information (such as products or services you have purchased, rented, or returned), health- and safety-related information, product testimonials, travel and vacation information, and competition entries
 - **Communications:** Communication details (such as the content of emails, text messages, or other communications), call logs, and calendar information where Walmart is a party to the exchange
 - **Demographic Information:** Demographic information, such as age (including information about children under the age of 13 with respect to certain purchases and services (e.g., tobacco purchases), gender, citizenship, ethnicity, date of birth, family or marital status, household income, education, professional and employment information, family health, number of children, number of cars owned, and software or virtual assets owned
 - **Financial Information:** Financial information, such as credit or debit card numbers, financial account numbers, and claims information
 - **Biometric Information:** Biometric information, such as voice prints, imagery of the iris or retina, face geometry, and palm prints or fingerprints
 - **Geolocation:** Location information, such as geolocation information
 - **Sensory Information:** Audio, visual information, and other sensory information such as photographs and audio and video recordings
 - **Background Information:** Background and criminal information, such as background checks and criminal convictions
 - **Inferences:** Individual preferences and characteristics, such as inferences related to shopping patterns and behaviors, intelligence, and aptitudes
 - **Sensitive Personal Information:** Government-issued identifiers (such as social security, driver's license, state identification card, or passport number), account log-in and financial information (such as payment card details), and precise geolocation
 ## What Are the Categories of Sources from Which We Collect Your Personal Information?
+We may obtain and combine personal information from different sources, as described in _the How Do We Collect Information_ section of the Walmart Privacy Notice and provided below:
+We may obtain and combine personal information from different sources, as described in the _How Do We Collect Information_ section of the Walmart Privacy Notice and provided below:
 - Provided directly by you or a member of your household
 - Collected from a device associated with you or your household
 - Collected through in-store technology
 - Collected from another company within our family of companies
 - Collected from an external third-party source
 To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.
 ## Sale and Sharing of Personal Information
 We may sell or share personal information with third parties for various purposes including cross-context behavioral advertising or sharing among Walmart-affiliated entities. These kinds of disclosures may be deemed selling or sharing personal information under California law and you have the right to opt out of these disclosures. We may sell or share for cross-context behavioral advertising purposes (and may have sold or shared during the 12-month period prior to the Last Updated date of this California Notice) the following categories of personal information to the following categories of third parties:
+<table><tbody><tr><td colspan="1" rowspan="1"><b>Category of Personal Information Sold or Shared</b></td><td colspan="1" rowspan="1"><b>Category of Third-Party Recipient</b></td></tr><tr><td colspan="1" rowspan="1">Identifiers</td><td colspan="1" rowspan="1">Service providers (such as advertising networks, marketplace sellers, analytics providers, etc.)</td></tr><tr><td colspan="1" rowspan="1">Device Information and Online Activity</td><td colspan="1" rowspan="1">Business partners that receive data for their own independent use and not to provide services to a Walmart entity</td></tr><tr><td colspan="1" rowspan="1">Demographic Information</td><td colspan="1" rowspan="1">Business partners that receive data for their own independent use and not to provide services to a Walmart entity; Service providers that receive data to provide services to a Walmart entity (e.g., analytics providers, advertising networks, cloud storage providers, etc.); Business partners</td></tr><tr><td colspan="1" rowspan="1">Geolocation</td><td colspan="1" rowspan="1">Business partners that receive data for their own independent use and not to provide services to a Walmart entity</td></tr><tr><td colspan="1" rowspan="1">Inferences</td><td colspan="1" rowspan="1">Business partners that receive data for their own independent use and not to provide services to a Walmart entity; Service providers that receive data to provide services to a Walmart entity (e.g., analytics providers, cloud storage providers, etc.); Business partners</td></tr></tbody></table>
+<table><tbody><tr><td colspan="1" rowspan="1"><b>Category of Personal Information Sold or Shared</b></td><td colspan="1" rowspan="1"><b>Category of Third-Party Recipient</b></td></tr><tr><td colspan="1" rowspan="1">Identifiers</td><td colspan="1" rowspan="1">Service providers (such as advertising networks, marketplace sellers, analytics providers, etc.)</td></tr><tr><td colspan="1" rowspan="1">Device Information and Online Activity</td><td colspan="1" rowspan="1">Business partners that receive data for their own independent use and not to provide services to a Walmart entity</td></tr><tr><td colspan="1" rowspan="1">Demographic Information</td><td colspan="1" rowspan="1">Business partners that receive data for their own independent use and not to provide services to a Walmart entity; Service providers that receive data to provide services to a Walmart entity (e.g., analytics providers, advertising networks, cloud storage providers, etc.)</td></tr><tr><td colspan="1" rowspan="1">Geolocation</td><td colspan="1" rowspan="1">Business partners that receive data for their own independent use and not to provide services to a Walmart entity</td></tr><tr><td colspan="1" rowspan="1">Inferences</td><td colspan="1" rowspan="1">Business partners that receive data for their own independent use and not to provide services to a Walmart entity; Service providers that receive data to provide services to a Walmart entity (e.g., analytics providers, cloud storage providers, etc.)</td></tr></tbody></table>
 ## Sale or Share of Personal Information of Consumers under 16 Years of Age
 Walmart does not knowingly sell or share (for cross-context behavioral advertising) the personal information of consumers under 16 years of age. For more information about treatment of children's personal information, see the Walmart Privacy Notice.
 ## Disclosing Personal Information for Business Purposes
 - Device and online identifiers
 - Financial information
 - Individual preferences and characteristics
 - Location information
 - Personal identifiers
 - Purchase history information
+- Audio, visual and other sensory information
+- Audio, visual, and other sensory information
 - Background and criminal information
 - Biometric information
 - Characteristics of protected classifications under California or federal law
 - Education information
 - Employment information
 - Government identifiers
 - Provide you with access to a copy of and certain details regarding the personal information we have about you.
 - Delete your personal information.
 - Stop selling your personal information or sharing your personal information for cross-context behavioral advertising.
 - Correct your inaccurate personal information.
 - Limit the use or disclosure of your sensitive personal information (SPI).
+To exercise any of these privacy rights, call 1-800-Walmart (1-800-925-6278), press one, and say, "Privacy" when prompted. Or follow the instructions below specific to the type of request.
+To exercise any of these privacy rights, call 1-800-Walmart (1-800-925-6278), press one, and say "Privacy" when prompted. Or follow the instructions below specific to the type of request.
 ### Request to Access My Personal Information
 You have the right to request access to the personal information we may have collected about you. To access your personal information, click "Request My Personal Information."
+Requests to access your personal information may be submitted up to two times in a rolling twelve-month period. In response, we will return to you the following categories of information, to the extent required by law:
+Requests to access your personal information may be submitted up to two times in a rolling 12-month period. In response, we will return to you the following categories of information, to the extent required by law:
 - The categories of personal information we have collected about you.
 - The categories of sources from which we collect your personal information.
 - The business or commercial purpose for collecting, selling, or sharing your personal information.
 - The categories of third parties to whom we disclose personal information.
 - The specific pieces of personal information we have collected about you.
 You have the right to ask that we delete your personal information. Once we receive a request, we will delete the personal information (to the extent required by law) we hold about you as of the date of your request from our records and direct our service providers to do the same. Choosing to delete your personal information may impact your ability to use our websites and online features, including closure of your online account, and limit your use of in-store functions that require your personal information. To delete your personal information, click "Request My Personal Information."
 ### Stop Selling or Sharing My Personal Information
 You have the right to opt-out of the sale of your personal information or sharing of your personal information for cross-context behavioral advertising and can request that we stop by clicking "My Privacy Choices" or by using the Global Privacy Control as described below.
+Your opt-out request may be processed differently depending on whether you are logged into your account. If you are logged in, your preference will be associated with your account, and the device on which you exercised your choice. When you log in from another device or browser, it too will be automatically opted out. If you are not logged into your account, your request will only be associated with that one browser. We also support your use of the Global Privacy Control (GPC). If you notify us of your privacy preferences through GPC, we will honor your request with respect to the browser or device that sends us the GPC signal, and when you login to your account from that device, the opt-out will extend to your account, as well.
+Your opt-out request may be processed differently depending on whether you are logged into your account. If you are logged in, your preference will be associated with your account, and the device on which you exercised your choice. When you log in from another device or browser, it too will be automatically opted out. If you are not logged into your account, your request will only be associated with that one browser. We also support your use of the Global Privacy Control (GPC). If you notify us of your privacy preferences through GPC, we will honor your request with respect to the browser or device that sends us the GPC signal, and when you log in to your account from that device, the opt-out will extend to your account, as well.
+If you change your preference from opt-in to opt-out, you may be asked to confirm your preference prior to it taking effect. After opting out of the sale of your personal information or sharing of your personal information for cross-context behavioral advertising, you may still receive ads from Walmart, however they will not be tailored to you.
+If you change your preference from opt-in to opt-out, you may be asked to confirm your preference prior to it taking effect. After opting out of the sale or sharing of your personal information for cross-context behavioral advertising, you may still receive ads from Walmart; however they will not be tailored to you.
 ### Correct My Personal Information
 You have the right to ask that we correct the personal information we may have collected about you if that information is inaccurate. We reserve the right to request identifying documentation from you in certain circumstances, as permitted by law. To correct your personal information, click "Request My Personal Information."
 ### Limit the Use and Disclosure of SPI
 You have the right to ask that we limit our use and disclosure of your SPI to certain purposes permitted by law and can do so by clicking "My Privacy Choices."
 We will not discriminate against you for exercising your rights. We will not deny you goods or services, charge different prices or rates, provide a different level of service or quality of goods, or suggest that you might receive a different price or level of quality for goods. Some programs or membership services require usage of personal information to function, so compliance with your request may impact those experiences.
+### How Do We Verify Your Identity to Complete Your Access, Correction and Deletion Requests
+### How Do We Verify Your Identity to Complete Your Access, Correction, and Deletion Requests
 If you request access to, or the correction or deletion of, your personal information we will verify your identity before disclosing the requested information. To do so, we may ask that you log into your account or provide us with your:
 - First name\*, middle initial, last name\*
 - Address\*
 - Email address
 - Phone number
 _\*Required field_
 When you make a request, you will be asked to answer a few questions about yourself to help us verify your identity. Third-party identification services may help us with verification to prevent disclosure of your personal information resulting from fraudulent requests. You may be asked to log into your online account and complete a one-time passcode validation. In the event more documentation is necessary to verify your identity, we will notify you directly.
+### What If You Can't Verify My Identity?
+### What If You Cannot Verify My Identity?
+If we can't verify your identity, we will notify you, and your request(s) to access, request, or delete your personal information may not be processed. Any requests may be denied if we have reason to believe they are fraudulent.
+If we cannot verify your identity, we will notify you, and your request(s) to access, request, or delete your personal information may not be processed. Any requests may be denied if we have reason to believe they are fraudulent.
 ### How Do I Submit a Request Using an Authorized Agent?
+If you'd like an authorized agent to exercise your rights for you, they may use the same links described above to submit requests. We require documentation demonstrating your agent's authority to submit requests on your behalf. For example, a valid power of attorney or other documentation, including a letter, signed by you (the California resident) authorizing the agent to submit your requests. You can download a sample letter from the request form. Documentation may be uploaded at the time you submit your request on our website or provided to us up to 10 business days after. If you submit your request by calling, you can email your forms to [consumerprivacy@wal-mart.com](mailto:consumerprivacy@wal-mart.com).
+If you would like an authorized agent to exercise your rights for you, they may use the same links described above to submit requests. We require documentation demonstrating your agent's authority to submit requests on your behalf. For example, a valid power of attorney or other documentation, including a letter, signed by you (the California resident) authorizing the agent to submit your requests. You can download a sample letter from the request form. Documentation may be uploaded at the time you submit your request on our website or provided to us up to 10 business days after. If you submit your request by calling, you can email your forms to [consumerprivacy@wal-mart.com](mailto:consumerprivacy@wal-mart.com).
+### Number of Requests Received in 2022
+### Number of Requests Received in 2023
+To view metrics about our privacy requests, click [How Many California Consumer Privacy Act Requests Did We Fulfill Last Year?](https://corporate.walmart.com/content/corporate/en_us/privacy-security/california-privacy-rights/metrics.html).
+To view metrics about our privacy requests, click [How Many California Consumer Privacy Act Requests Did We Fulfill Last Year?](https://corporate.walmart.com/content/corporate/en_us/privacy-security/california-privacy-rights/metrics.html)
 ### Shine the Light
 California residents also have the right to request that we provide you with (a) a list of certain categories of personal information we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year and (b) the identity of those third parties. To exercise this right, contact us at the address below.
 ### Notice of Financial Incentive
 If we provide a financial incentive, we will provide you with the details, including how the incentive is related to your data before you participate so that you may make an informed decision about whether and how to participate. In the event you decide to take advantage of a financial incentive, you will always have the right to withdraw from participation and we will provide you with directions on how to do so.
+Contact our [Customer Service Team](https://www.walmart.com/help/store-feedback) or write the Walmart Privacy Office with any questions or comments about this notice or about how we handle your personal information. The Privacy Office's address is:
+Contact our [Customer Service Team](https://www.walmart.com/help/store-feedback) or write the Walmart Privacy Office with any questions or comments about this Notice or about how we handle your personal information. The Privacy Office's address is:
 Walmart Corporate
 Privacy Office, MS #0160
 SW 8th Street
 Bentonville, AR 72716-0160
+_View the full [Walmart Privacy Notice](https://corporate.walmart.com/content/corporate/en_us/privacy-security/walmart-privacy-notice.html)._
+View the full [Walmart Privacy Notice](https://corporate.walmart.com/content/corporate/en_us/privacy-security/walmart-privacy-notice.html).

California Consumer Privacy Act Notice

Full text changes — 20240501_rev01 to 20240701_rev01