This provision explicitly acknowledges that data sharing for cross-context behavioral advertising constitutes a 'sale' or 'sharing' under California law, providing clarity on regulatory classification that was previously indirect.

This new provision specifically discloses data collection practices through the loyalty program, which represents a significant touchpoint for customer data collection that was not explicitly addressed in the previous version.

This standalone provision was consolidated into the more detailed 'Data Sharing with Advertising and Analytics Partners' provision in the current version.

The removal of explicit language permitting unlimited use of de-identified data may reflect increased privacy protection, as the current version does not explicitly carve out de-identified data from privacy restrictions.

The removal of this provision eliminates explicit disclosure that personal data may be transferred in business transactions, which may reflect either a decision to streamline the policy or address privacy concerns about asset transfers.

The policy now explicitly includes over-the-counter product purchases and health-related browsing activity, while removing mention of immunizations and health and wellness programs.

The policy now emphasizes California residents' right to limit sensitive personal information use to necessary and proportionate purposes, and removes the mention of racial or ethnic origin data.

The policy adds explicit mention of the right to non-discrimination for exercising privacy rights and removes reference to limiting use and disclosure of sensitive personal information.

The policy expands to include analytics and social media partners, and refocuses tracking from 'online activities over time and across different websites' to 'interactions with our services.'

The severity was downgraded from medium to low, and the language was slightly softened from 'will delete it' to 'will take steps to delete that information.'

The policy simplified the retention rationale from 'satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for fraud prevention purposes' to 'comply with legal obligations, resolve disputes, and enforce our agreements.'