8 Total
2 High severity
5 Medium severity
1 Low severity
Summary

This document establishes Home Depot's policies for collection, use, and disclosure of personal information obtained through online and in-store transactions. The policy authorizes collection of purchase history, precise geolocation, browsing behavior, and biometric information, with authorization to share such data with advertising and analytics partners for targeted marketing purposes. The policy provides for opt-out mechanisms available to California residents and users in certain other states through a designated link on Home Depot's website.

Technical / Legal Breakdown

This document is Home Depot's consumer-facing privacy policy governing the collection, use, sharing, and protection of personal information across its websites, mobile applications, stores, and related services. The policy states that Home Depot collects a broad range of personal data including identifiers, commercial information, geolocation data, biometric information, internet activity, audio and visual data, and inferences drawn from these categories, and asserts rights to use this data for advertising, analytics, personalization, and sharing with third-party partners and service providers. Notably, the policy discloses collection of biometric data and precise geolocation, and asserts the right to share personal information with advertising partners for cross-context behavioral advertising, though it also describes opt-out mechanisms for sale and sharing of personal data; the breadth of data categories collected and the scope of third-party sharing may warrant evaluation under applicable state privacy laws. The policy engages the California Consumer Privacy Act (CCPA) as amended by CPRA, as well as other U.S. state privacy frameworks, and references specific consumer rights including access, deletion, correction, and opt-out of sale or sharing; applicability of additional state frameworks depends on user jurisdiction. Material compliance considerations include the disclosure of biometric data collection, the adequacy of consent mechanisms for sensitive data categories, and the robustness of opt-out pathways for targeted advertising and data sale.

Institutional Analysis

Institutional analysis available with Compliance

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Compliance.

Start Compliance free trial

1 important change detected

2 versions captured · Last updated: June 2026

What changed Home Depot updated its privacy policy on June 5, 2026 to add explicit language stating: 'We will not disclose text messaging opt-in consent to third parties for their own marketing purposes.' This clarifies that when customers consent to receive text messages from Home Depot, that consent information itself will not be shared with third parties for those third parties' own marketing campaigns. The updated terms establish a boundary on consent data sharing that was not previously stated in the policy.
Why this matters The updated policy now explicitly states that Home Depot will not share your text message opt-in consent with third parties for their marketing purposes. This clarifies a boundary on how consent data is treated. You can review Home Depot's full privacy policy to understand other data collection and sharing practices.
View full change record →

Recent Provision Changes Jun 5, 2026

8 provisions unchanged.

View full change record →
High — 2 provisions
Medium — 5 provisions
Low — 1 provision

Monitoring

Home Depot has updated this document before.

Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →

Compliance Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Compliance includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Compliance free trial

Cross-platform context

See how other platforms handle Biometric Information Collection and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured June 5, 2026 01:12 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000621
Version ID CA-V-003452
SHA-256 bb23a374fb3a69e98dea271a117195b1221e1c6c005942cb2777b6be98fbdaf6
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans