California Consumer Privacy Act Notice

20251001_rev01 · COMPARED WITH 20250901_rev01 · ARCHIVE SNAPSHOT, DATE APPROXIMATE

Full text changes — 20250901_rev01 to 20251001_rev01

11## We Recently Updated Our Privacy Notice
22
33Updates include:
44
5- Updated directions to submit a privacy request.
5- Provided additional clarification in the chart under the _Sale and Sharing of Personal Information_ section.
66
77## Walmart California Consumer Privacy Act Notice Summary
88
99This California Consumer Privacy Act Notice ("California Notice") describes how we handle your personal information, the reasons we do so, and the rights you have as a California resident regarding your information. This Notice supplements the [Walmart Privacy Notice](https://corporate.walmart.com/privacy-security/walmart-privacy-notice).
1010
1111This California Notice uses certain terms that have the meaning given to them in the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and its implementing regulations.
1212
1313## What Are the Categories of Personal Information Collected?
1414
1515We may collect or receive (and may have collected or received during the 12-month period prior to the Last Updated date of this California Notice) the categories of personal information listed below. Not all categories will be collected or received for every individual.
1616
17- **Identifiers:** Personal identifiers, such as name, telephone number, physical address, email address, national identification numbers, driver's license numbers, and signatures
18- **Device Information and Online Activity:** Device and online identifiers, keystroke patterns indicative of human or bot website/app usage, mobile and web network activity and related information (such as Mac address, IP address, cookie IDs, browser activity, and other information associated with your browsing history), and social media information
19- **Commercial Information:** Purchase and transaction history information (such as products or services you have purchased, rented, or returned), health- and safety-related information, product testimonials, travel and vacation information, and competition entries
20- **Communications:** Communication details (such as the content of emails, text messages, or other communications), call logs, and calendar information where Walmart is a party to the exchange
21- **Demographic Information:** Demographic information, such as age (including information about children under the age of 13 with respect to certain purchases and services (e.g., tobacco purchases), gender, citizenship, ethnicity, date of birth, family or marital status, household income, education, professional and employment information, family health, number of children, number of cars owned, and software or virtual assets owned
22- **Financial Information:** Financial information, such as credit or debit card numbers, financial account numbers, and claims information
23- **Biometric Information:** Biometric information, such as voice prints, imagery of the iris or retina, face geometry, and palm prints or fingerprints
24- **Geolocation:** Location information, such as geolocation information
25- **Sensory Information:** Audio, visual information, and other sensory information such as photographs and audio and video recordings
26- **Background Information:** Background and criminal information, such as background checks and criminal convictions
27- **Inferences:** Individual preferences and characteristics, such as inferences related to shopping patterns and behaviors, intelligence, and aptitudes
28- **Sensitive Personal Information:** Government-issued identifiers (such as social security, driver's license, state identification card, or passport number), account log-in and financial information (such as payment card details), and precise geolocation
17- **Basic Personal Identifiers,** such as name, telephone number, physical address, email address, national identification numbers, driver's license numbers, and signatures.
18- **Device Information and Online Identifiers**, such as account login information, MAC address, IP address, cookie IDs, mobile ad IDs, and social media information.
19- **Internet and Other Network Activity Information**, such as information about your browsing or search activity as well as your interactions with our websites, mobile applications, emails, or advertisements (for example keystroke patterns which help us determine if it is you or a bot who is interacting with us).
20- **Commercial Information**, such as purchase and transaction history information (products or services you have purchased, rented, or returned), details about products associated with services you receive from or through us (e.g., car make, model, year, odometer reading, and Vehicle Identification Number when you visit our Auto Care Center), product reviews, travel and vacation information, and sweepstakes and contest entries.
21- **Communications**, such as the content of emails, text messages, interactions with our bot (AI assistant chatbots) or other communications, call logs, and calendar information where Walmart is a party to the exchange.
22- **Demographic Information**, such as age (including information about children under the age of 13 with respect to certain purchases and services (e.g., tobacco purchases), gender, citizenship, ethnicity, date of birth, family or marital status, household income, education, professional and employment information, family health, number of children, number of cars owned, and software or virtual assets owned.
23- **Financial Information**, such as credit or debit card numbers, financial account numbers, and claims information.
24- **Biometric Information**, such as voice prints, imagery of the iris or retina, face geometry, and palm prints or fingerprints.
25- **Geolocation**, such as data about the location of your device, which may be imprecise (i.e., inferred from your device's IP address). If you provide your consent, this data may be precise. For more information about precise geolocation, see the _How Do We Collect Personal Information? > Collected Through Automated Means_ section of our [Customer Privacy Notice](https://corporate.walmart.com/privacy-security/walmart-privacy-notice).
26- **Sensory Information**, such as audio, visual information, and other sensory information such as photographs and audio and video recordings.
27- **Background Information**, such as background checks and criminal convictions.
28- **Inferences**, such as individual preferences and characteristics. This may include inferences drawn from and related to shopping patterns and behaviors, intelligence, and aptitudes.
29- **Sensitive Personal Information:** Government-issued identifiers (such as social security, driver's license, state identification card, or passport number), account log-in and financial information (such as payment card details), and precise geolocation.
2930
3031## What Are the Categories of Sources from Which We Collect Your Personal Information?
3132
32We may obtain and combine personal information from different sources, as described in the _How Do We Collect Information_ section of the Walmart Privacy Notice and provided below:
33We may obtain and combine personal information from different sources, as described in the _How Do We Collect Personal Information_ section of the Walmart Privacy Notice and provided below:
3334
3435- Provided directly by you or a member of your household
35- Collected from a device associated with you or your household
36- Collected through in-store technology
37- Collected from another company within our family of companies
38- Collected from an external third-party source
36- Collected through automated means
37- Obtained from other companies within our corporate family
38- Obtained from external third-party sources
3939- Collected from another solution or asset
4040- Collected from other sources, when it is appropriate, to help us correct or supplement our records, improve the quality or personalization of our services, increase the appeal and relevance of advertising, and to prevent or detect fraud
4141
4242## What Are the Purposes for Collecting Personal Information?
4343
4444We may use your personal information for the purposes described in the _How Do We Use Your Personal Information_ section of the Walmart Privacy Notice and as provided below:
4545
46- Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytics services, providing storage, or providing similar services
47- Providing advertising and marketing services, including targeted advertising
48- To conduct auditing and monitoring of transactions and engagement, including auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance
49- Short-term, transient use, such as non-personalized advertising shown as part of your current interaction with us
50- Helping to ensure security and integrity and prevent fraud
51- Undertaking activities to verify or maintain the quality or safety of our services or devices and to improve, upgrade, or enhance them
52- Debugging to identify and repair errors
53- To conduct business analysis, such as analytics, projections, identifying areas for operational improvement
54- To conduct research and development, including undertaking internal research for technological development and demonstration
55- To fulfill our legal function or obligations
46- Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing and conducting analytics services, providing storage, or providing similar services.
47- Performing and providing advertising and marketing services, including targeted advertising.
48- Conducting auditing and monitoring of transactions and engagement, including auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance.
49- Short-term, transient use, such as non-personalized advertising shown as part of your current interaction with us.
50- Helping to ensure security and integrity and prevent fraud.
51- Undertaking activities to verify or maintain the quality or safety of our services or devices and to improve, upgrade, or enhance them, such as training our AI.
52- Debugging to identify and repair errors.
53- Conducting business analysis, such as analytics, projections, identifying areas for operational improvement.
54- Conducting research and development, including undertaking internal research for technological development and demonstration.
55- Fulfilling our legal function or obligations.
5656
5757We use sensitive personal information for each of the purposes described above and to make inferences about customers, which we may use to promote certain products or services.
5858
5959To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.
6060
6161## Sale and Sharing of Personal Information
6262
63We may sell or share personal information with third parties for various purposes including cross-context behavioral advertising or sharing among Walmart-affiliated entities. These kinds of disclosures may be deemed selling or sharing personal information under California law and you have the right to opt out of these disclosures. We may sell or share for cross-context behavioral advertising purposes (and may have sold or shared during the 12-month period prior to the Last Updated date of this California Notice) the following categories of personal information to the following categories of third parties:
63We may sell or share personal information with third parties for various purposes including cross-context behavioral advertising or sharing among Walmart-affiliated entities. These kinds of disclosures may be deemed selling or sharing personal information under California law and you have the right to opt out of these disclosures.
6464
65<table><tbody><tr><td><b>Category of Personal Information Sold or Shared</b></td><td><b>Category of Third-Party Recipient</b></td></tr><tr><td>Identifiers</td><td>Service providers (such as advertising networks, marketplace sellers, analytics providers, etc.)</td></tr><tr><td>Device Information and Online Activity</td><td>Business partners that receive data for their own independent use and not to provide services to a Walmart entity</td></tr><tr><td>Demographic Information</td><td>Business partners that receive data for their own independent use and not to provide services to a Walmart entity; Service providers that receive data to provide services to a Walmart entity (e.g., analytics providers, advertising networks, cloud storage providers, etc.)</td></tr><tr><td>Geolocation</td><td>Business partners that receive data for their own independent use and not to provide services to a Walmart entity</td></tr><tr><td>Inferences</td><td>Business partners that receive data for their own independent use and not to provide services to a Walmart entity; Service providers that receive data to provide services to a Walmart entity (e.g., analytics providers, cloud storage providers, etc.)</td></tr></tbody></table>
65We may sell or share for cross-context behavioral advertising purposes (and may have sold or shared during the 12-month period prior to the Last Updated date of this California Notice) the following categories of personal information to the following categories of third parties:
6666
67<table><tbody><tr><td><p><strong>Category of Personal Information Sold or Shared </strong>(As defined under the "What Are the Categories of Personal Information Collected?" section)</p></td><td><p><strong>Category of Third-Party Recipient</strong></p></td></tr><tr><td><p>Basic Personal Identifiers</p></td><td><ul><li>Vendors for Business Operations that receive data to provide services to a Walmart entity (such as advertising networks, marketplace sellers, analytics providers, etc.).</li><li>Business partners, including those that receive data for their own independent use and not to provide services to a Walmart entity.</li></ul></td></tr><tr><td><p>Device and Online Identifiers</p></td><td><ul><li>Vendors for Business Operations that receive data to provide services to a Walmart entity (such as advertising networks, marketplace sellers, analytics providers, etc.).</li><li>Business partners, including those that receive data for their own independent use and not to provide services to a Walmart entity.</li></ul></td></tr><tr><td><p>Internet and Other Network Activity Information</p></td><td><ul><li>Vendors for Business Operations that receive data to provide services to a Walmart entity (such as advertising networks, marketplace sellers, analytics providers, etc.).</li><li>Business partners, including those that receive data for their own independent use and not to provide services to a Walmart entity.</li></ul></td></tr><tr><td><p>Commercial Information</p></td><td><ul><li>Vendors for Business Operations that receive data to provide services to a Walmart entity (e.g., analytics providers, advertising networks, cloud storage providers, etc.).</li><li>Business partners, including those that receive data for their own independent use and not to provide services to a Walmart entity.</li></ul></td></tr><tr><td><p>Communications</p></td><td><ul><li>Vendors for Business Operations that receive data to provide services to a Walmart entity (such as advertising networks, marketplace sellers, analytics providers, etc.).</li><li>Business partners, including those that receive data for their own independent use and not to provide services to a Walmart entity.</li></ul></td></tr><tr><td><p>Demographic Information</p><p>(If you provide your consent to process your sensitive personal information, in accordance with applicable privacy laws, your sensitive personal information may be processed for the purposes disclosed at the time of collection, but it will not be used for the purpose of targeted advertising).</p></td><td><ul><li>Vendors for Business Operations that receive data to provide services to a Walmart entity (e.g., analytics providers, advertising networks, cloud storage providers, etc.).</li><li>Business partners, including those that receive data for their own independent use and not to provide services to a Walmart entity.</li></ul></td></tr><tr><td><p>Financial Information</p></td><td><ul><li>Vendors for Business Operations that receive data to provide services to a Walmart entity (such as advertising networks, marketplace sellers, analytics providers, etc.).</li><li>Business partners, including those that receive data for their own independent use and not to provide services to a Walmart entity.</li></ul></td></tr><tr><td><p>Biometric Information</p></td><td><ul><li>Vendors for Business Operations that receive data to provide services to a Walmart entity (such as advertising networks, marketplace sellers, analytics providers, etc.).</li></ul></td></tr><tr><td><p>Geolocation</p></td><td><ul><li>Vendors for Business Operations that receive data to provide services to a Walmart entity (such as advertising networks, marketplace sellers, analytics providers, etc.).</li><li>Business partners, including those that receive data for their own independent use and not to provide services to a Walmart entity.</li></ul></td></tr><tr><td><p>Sensory Information</p></td><td><ul><li>Vendors for Business Operations that receive data to provide services to a Walmart entity (such as advertising networks, marketplace sellers, analytics providers, etc.).</li><li>Business partners, including those that receive data for their own independent use and not to provide services to a Walmart entity.</li></ul></td></tr><tr><td><p>Background Information</p></td><td><ul><li>Vendors for Business Operations that receive data to provide services to a Walmart entity (such as advertising networks, marketplace sellers, analytics providers, etc.)</li><li>Business partners, including those that receive data for their own independent use and not to provide services to a Walmart entity.</li></ul></td></tr><tr><td><p>Inferences</p></td><td><ul><li>Vendors for Business Operations that receive data to provide services to a Walmart entity (e.g., analytics providers, cloud storage providers, etc.).</li><li>Business partners, including those that receive data for their own independent use and not to provide services to a Walmart entity.</li></ul></td></tr></tbody></table>
68
6769## Sale or Share of Personal Information of Consumers under 16 Years of Age
6870
6971Walmart does not knowingly sell or share (for cross-context behavioral advertising) the personal information of consumers under 16 years of age. For more information about treatment of children's personal information, see the Walmart Privacy Notice.
7072
7173## Disclosing Personal Information for Business Purposes
7274
7375During the 12-month period prior to the Last Updated date of this California Notice, we may have disclosed your personal information with certain categories of third parties as described in the _Categories of Personal Information We Disclose to Each Type of Third-Party_ section of the Walmart Privacy Notice and disclosed below:
7476
7577- Demographic information
7678- Device and online identifiers
7779- Financial information
78- Individual preferences and characteristics
80- Inferences
7981- Location information
80- Personal identifiers
81- Purchase history information
82- Basic personal identifiers
83- Commercial Information
8284- Audio, visual, and other sensory information
8385- Background and criminal information
8486- Biometric information
8587- Characteristics of protected classifications under California or federal law
8688- Education information
8789- Employment information