Walmart California Consumer Privacy Act Notice changes — 20260101_rev01

118

123

- The categories of personal information we have collected about you.

119

124

- The categories of sources from which we collect your personal information.

120

125

- The business or commercial purpose for collecting, selling, or sharing your personal information.

121

126

- The categories of third parties to whom we disclose personal information.

122

127

- The specific pieces of personal information we have collected about you.

123

128

- A list of categories of personal information that we have sold or shared for cross-context behavioral advertising, along with the categories of third parties we sold it to or shared it with for cross-context behavioral advertising.

124

- A list of categories of personal information that we have disclosed for a business purpose, along with the categories of third parties we disclosed it to.

129

- A list of categories of personal information that we have disclosed for a business purpose, along with the categories of vendors for business operations or contractors we disclosed it to.

125

130

126

131

### Delete My Personal Information

127

132

128

You have the right to ask that we delete your personal information. Once we receive a request, we will delete the personal information (to the extent required by law) we hold about you as of the date of your request from our records and direct our service providers to do the same. Choosing to delete your personal information may impact your ability to use our websites and online features, including closure of your online account, and limit your use of in-store functions that require your personal information.

133

You have the right to ask that we delete your personal information. Once we receive a request, we will delete the personal information (to the extent required by law) we hold about you as of the date of your request from our records and direct our vendors for business operations to do the same. Choosing to delete your personal information may impact your ability to use our websites and online features, including closure of your online account, and limit your use of in-store functions that require your personal information.

129

134

130

135

### Stop Selling or Sharing My Personal Information

131

136

132

137

You have the right to opt-out of the sale of your personal information or sharing of your personal information for cross-context behavioral advertising and can request that we stop by clicking "Your Privacy Choices" or by using the Global Privacy Control as described below.

133

138

134

139

Your opt-out request may be processed differently depending on whether you are logged into your account. If you are logged in, your preference will be associated with your account, and the device on which you exercised your choice. When you log in from another device or browser, it too will be automatically opted out. If you are not logged into your account, your request will only be associated with that one browser. We also support your use of the Global Privacy Control (GPC). If you notify us of your privacy preferences through GPC, we will honor your request with respect to the browser or device that sends us the GPC signal, and when you log in to your account from that device, the opt-out will extend to your account, as well.

135

140

136

If you change your preference from opt-in to opt-out, you may be asked to confirm your preference prior to it taking effect. After opting out of the sale or sharing of your personal information for cross-context behavioral advertising, you may still receive ads from Walmart; however they will not be tailored to you.

141

When we receive a GPC signal or an opt-out of sale/share request, we will display a notification in the footer to indicate to you that your opt-out request is honored. This opt-out will be immediately effective on data collected during that interaction. For other data that we hold in our system, it may take up to 15 days from receipt of your request to process the opt-out. If you change your preference from opt-in to opt-out, you may be asked to confirm your preference prior to it taking effect. After opting out of the sale or sharing of your personal information for cross-context behavioral advertising, you may still receive ads from Walmart; however they will not be tailored to you.

137

142

138

143

### Correct My Personal Information

139

144

140

145

You have the right to ask that we correct the personal information we may have collected about you if that information is inaccurate. We reserve the right to request identifying documentation from you in certain circumstances, as permitted by law.

141

146

142

147

### Limit the Use and Disclosure of SPI

143

148

144

You have the right to ask that we limit our use and disclosure of your SPI to certain purposes permitted by law.

149

You have the right to ask that we limit our use and disclosure of your SPI to certain purposes permitted by law. If we have processed your request to limit the use and disclosure of your SPI, you can confirm your preference on the same page on which you made the request by selecting "[Your Privacy Choices](https://cpa-ui.walmart.com/dc/privacy/en-US/affirmation)".

145

150

146

We will not discriminate against you for exercising your rights. We will not deny you goods or services, charge different prices or rates, provide a different level of service or quality of goods, or suggest that you might receive a different price or level of quality for goods. Some programs or membership services require usage of personal information to function, so compliance with your request may impact those experiences.

151

### Opt-Out of Automated Decision Making

147

152

153

You have the right to ask that we not make significant decisions about you using Automated Decision-Making Technologies. When we use these technologies, you can opt out at any time by selecting "[Your Privacy Choices](https://cpa-ui.walmart.com/dc/privacy/default/affirmation)" and following the prompts provided.

154

155

We will not retaliate against you for exercising your rights. We will not deny you goods or services, charge different prices or rates, provide a different level of service or quality of goods, or suggest that you might receive a different price or level of quality for goods. Some programs or membership services require usage of personal information to function, so compliance with your request may impact those experiences.

156

148

157

### How Do We Verify Your Identity to Complete Your Access, Correction, and Deletion Requests

149

158

150

If you request access to, or the correction or deletion of, your personal information we will verify your identity before disclosing the requested information. To do so, we may ask that you log into your account or provide us with your:

159

If you request access to your personal information, including significant decisions we may have made about you using Automated Decision-Making Technologies, or the correction or deletion of your personal information we will verify your identity before disclosing the requested information. To do so, we may ask that you log into your account or provide us with your:

151

160

152

161

- First name\*, middle initial, last name\*

153

162

- Address\*

154

163

- Email address

155

164

- Phone number

156

165

157

166

_\*Required field_

158

167

159

168

When you make a request, you will be asked to answer a few questions about yourself to help us verify your identity. Third-party identification services may help us with verification to prevent disclosure of your personal information resulting from fraudulent requests. You may be asked to log into your online account and complete a one-time passcode validation. In the event more documentation is necessary to verify your identity, we will notify you directly.

160

169

161

170

### What If You Cannot Verify My Identity?

162

171

163

If we cannot verify your identity, we will notify you, and your request(s) to access, request, or delete your personal information may not be processed. Any requests may be denied if we have reason to believe they are fraudulent.

172

If we cannot verify your identity, we will notify you, and your request(s) to access, correct, or delete your personal information may not be processed. Any requests may be denied if we have reason to believe they are fraudulent.

164

173

165

174

### How Do I Submit a Request Using an Authorized Agent?

166

175

167

176

If you would like an authorized agent to exercise your rights for you, they may use the same links described above to submit requests. We require documentation demonstrating your agent's authority to submit requests on your behalf. For example, a valid power of attorney or other documentation, including a letter, signed by you (the California resident) authorizing the agent to submit your requests. You can download a sample letter from the request form. Documentation may be uploaded at the time you submit your request on our website or provided to us up to 10 business days after. If you submit your request by calling, you can email your forms to [consumerprivacy@wal-mart.com](mailto:consumerprivacy@wal-mart.com).

168

177

169

178

### Number of Requests Fulfilled Last Year

 ## We Recently Updated Our Privacy Notice
 Updates include:
+- Provided additional clarification in the chart under the _Sale and Sharing of Personal Information_ section.
+- Added California specific information about our potential use of Automated Decision-Making Technologies (ADMT).
+- Added details to inform customers on how they can confirm we are honoring certain requests related to their personal information.
 ## Walmart California Consumer Privacy Act Notice Summary
 This California Consumer Privacy Act Notice ("California Notice") describes how we handle your personal information, the reasons we do so, and the rights you have as a California resident regarding your information. This Notice supplements the [Walmart Privacy Notice](https://corporate.walmart.com/privacy-security/walmart-privacy-notice).
 This California Notice uses certain terms that have the meaning given to them in the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and its implementing regulations.
 - Fulfilling our legal function or obligations.
 We use sensitive personal information for each of the purposes described above and to make inferences about customers, which we may use to promote certain products or services.
 To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.
+**Automated Decision-Making Technologies Pre-Use Notice:** We may use Automated Decision-Making Technologies to help us make decisions that could have a significant impact on you. If we implement those technologies, we will provide you with notice and you will be able to exercise any rights available to you as described in the "What Are Your California Privacy Rights?" section and accessible through "[Your Privacy Choices](https://cpa-ui.walmart.com/dc/privacy/default/affirmation)".
 ## Sale and Sharing of Personal Information
 We may sell or share personal information with third parties for various purposes including cross-context behavioral advertising or sharing among Walmart-affiliated entities. These kinds of disclosures may be deemed selling or sharing personal information under California law and you have the right to opt out of these disclosures.
 We may sell or share for cross-context behavioral advertising purposes (and may have sold or shared during the 12-month period prior to the Last Updated date of this California Notice) the following categories of personal information to the following categories of third parties:
 ## Sale or Share of Personal Information of Consumers under 16 Years of Age
 Walmart does not knowingly sell or share (for cross-context behavioral advertising) the personal information of consumers under 16 years of age. For more information about treatment of children's personal information, see the Walmart Privacy Notice.
 ## Disclosing Personal Information for Business Purposes
+During the 12-month period prior to the Last Updated date of this California Notice, we may have disclosed your personal information with certain categories of third parties as described in the _Categories of Personal Information We Disclose to Each Type of Third-Party_ section of the Walmart Privacy Notice and disclosed below:
+During the 12-month period prior to the Last Updated date of this California Notice, we may have disclosed your personal information with vendors for business operations or contractors as described in the _Categories of Personal Information We Disclose to Each Type of Third-Party_ section of the Walmart Privacy Notice and disclosed below:
 - Demographic information
 - Device and online identifiers
 - Financial information
 - Inferences
 - Location information
 ## What Are Your California Privacy Rights?
 If you are a California resident, you can make certain requests regarding your personal information, and we will fulfill each request to the extent required by law. If we are unable to comply with your request in whole or in part, we will notify you with reasons for the denial.
 As stated in more detail below, you can request that we:
+- Provide you with access to a copy of and certain details regarding the personal information we have about you.
+- Provide you with access to a copy of and certain details regarding the personal information we have about you,
+- Provide you with access to Automated Decision-Making Technologies, when applicable.
+- Opt-out of Automated Decision Making-Technologies, when applicable.
 - Delete your personal information.
 - Stop selling your personal information or sharing your personal information for cross-context behavioral advertising.
 - Correct your inaccurate personal information.
 - Limit the use or disclosure of your sensitive personal information (SPI).
 You may exercise any of these privacy rights by going to the footer of our website or settings section of our app and selecting the "[Your Privacy Choices](https://www.walmart.com/account/api/ccpa-intake)" link, or call 1-800-Walmart (1-800-925-6278), press one, and say "Privacy".
 - The categories of personal information we have collected about you.
 - The categories of sources from which we collect your personal information.
 - The business or commercial purpose for collecting, selling, or sharing your personal information.
 - The categories of third parties to whom we disclose personal information.
 - The specific pieces of personal information we have collected about you.
 - A list of categories of personal information that we have sold or shared for cross-context behavioral advertising, along with the categories of third parties we sold it to or shared it with for cross-context behavioral advertising.
+- A list of categories of personal information that we have disclosed for a business purpose, along with the categories of third parties we disclosed it to.
+- A list of categories of personal information that we have disclosed for a business purpose, along with the categories of vendors for business operations or contractors we disclosed it to.
 ### Delete My Personal Information
+You have the right to ask that we delete your personal information. Once we receive a request, we will delete the personal information (to the extent required by law) we hold about you as of the date of your request from our records and direct our service providers to do the same. Choosing to delete your personal information may impact your ability to use our websites and online features, including closure of your online account, and limit your use of in-store functions that require your personal information.
+You have the right to ask that we delete your personal information. Once we receive a request, we will delete the personal information (to the extent required by law) we hold about you as of the date of your request from our records and direct our vendors for business operations to do the same. Choosing to delete your personal information may impact your ability to use our websites and online features, including closure of your online account, and limit your use of in-store functions that require your personal information.
 ### Stop Selling or Sharing My Personal Information
 You have the right to opt-out of the sale of your personal information or sharing of your personal information for cross-context behavioral advertising and can request that we stop by clicking "Your Privacy Choices" or by using the Global Privacy Control as described below.
 Your opt-out request may be processed differently depending on whether you are logged into your account. If you are logged in, your preference will be associated with your account, and the device on which you exercised your choice. When you log in from another device or browser, it too will be automatically opted out. If you are not logged into your account, your request will only be associated with that one browser. We also support your use of the Global Privacy Control (GPC). If you notify us of your privacy preferences through GPC, we will honor your request with respect to the browser or device that sends us the GPC signal, and when you log in to your account from that device, the opt-out will extend to your account, as well.
+If you change your preference from opt-in to opt-out, you may be asked to confirm your preference prior to it taking effect. After opting out of the sale or sharing of your personal information for cross-context behavioral advertising, you may still receive ads from Walmart; however they will not be tailored to you.
+When we receive a GPC signal or an opt-out of sale/share request, we will display a notification in the footer to indicate to you that your opt-out request is honored. This opt-out will be immediately effective on data collected during that interaction. For other data that we hold in our system, it may take up to 15 days from receipt of your request to process the opt-out. If you change your preference from opt-in to opt-out, you may be asked to confirm your preference prior to it taking effect. After opting out of the sale or sharing of your personal information for cross-context behavioral advertising, you may still receive ads from Walmart; however they will not be tailored to you.
 ### Correct My Personal Information
 You have the right to ask that we correct the personal information we may have collected about you if that information is inaccurate. We reserve the right to request identifying documentation from you in certain circumstances, as permitted by law.
 ### Limit the Use and Disclosure of SPI
+You have the right to ask that we limit our use and disclosure of your SPI to certain purposes permitted by law.
+You have the right to ask that we limit our use and disclosure of your SPI to certain purposes permitted by law. If we have processed your request to limit the use and disclosure of your SPI, you can confirm your preference on the same page on which you made the request by selecting "[Your Privacy Choices](https://cpa-ui.walmart.com/dc/privacy/en-US/affirmation)".
+We will not discriminate against you for exercising your rights. We will not deny you goods or services, charge different prices or rates, provide a different level of service or quality of goods, or suggest that you might receive a different price or level of quality for goods. Some programs or membership services require usage of personal information to function, so compliance with your request may impact those experiences.
+### Opt-Out of Automated Decision Making
+You have the right to ask that we not make significant decisions about you using Automated Decision-Making Technologies. When we use these technologies, you can opt out at any time by selecting "[Your Privacy Choices](https://cpa-ui.walmart.com/dc/privacy/default/affirmation)" and following the prompts provided.
+We will not retaliate against you for exercising your rights. We will not deny you goods or services, charge different prices or rates, provide a different level of service or quality of goods, or suggest that you might receive a different price or level of quality for goods. Some programs or membership services require usage of personal information to function, so compliance with your request may impact those experiences.
 ### How Do We Verify Your Identity to Complete Your Access, Correction, and Deletion Requests
+If you request access to, or the correction or deletion of, your personal information we will verify your identity before disclosing the requested information. To do so, we may ask that you log into your account or provide us with your:
+If you request access to your personal information, including significant decisions we may have made about you using Automated Decision-Making Technologies, or the correction or deletion of your personal information we will verify your identity before disclosing the requested information. To do so, we may ask that you log into your account or provide us with your:
 - First name\*, middle initial, last name\*
 - Address\*
 - Email address
 - Phone number
 _\*Required field_
 When you make a request, you will be asked to answer a few questions about yourself to help us verify your identity. Third-party identification services may help us with verification to prevent disclosure of your personal information resulting from fraudulent requests. You may be asked to log into your online account and complete a one-time passcode validation. In the event more documentation is necessary to verify your identity, we will notify you directly.
 ### What If You Cannot Verify My Identity?
+If we cannot verify your identity, we will notify you, and your request(s) to access, request, or delete your personal information may not be processed. Any requests may be denied if we have reason to believe they are fraudulent.
+If we cannot verify your identity, we will notify you, and your request(s) to access, correct, or delete your personal information may not be processed. Any requests may be denied if we have reason to believe they are fraudulent.
 ### How Do I Submit a Request Using an Authorized Agent?
 If you would like an authorized agent to exercise your rights for you, they may use the same links described above to submit requests. We require documentation demonstrating your agent's authority to submit requests on your behalf. For example, a valid power of attorney or other documentation, including a letter, signed by you (the California resident) authorizing the agent to submit your requests. You can download a sample letter from the request form. Documentation may be uploaded at the time you submit your request on our website or provided to us up to 10 business days after. If you submit your request by calling, you can email your forms to [consumerprivacy@wal-mart.com](mailto:consumerprivacy@wal-mart.com).
 ### Number of Requests Fulfilled Last Year

California Consumer Privacy Act Notice

Full text changes — 20251001_rev01 to 20260101_rev01