Home Depot states its services are not intended for children under 13 and that it does not knowingly collect their personal data, and will delete any such data if discovered.
This analysis describes what Home Depot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The Children's Online Privacy Protection Act (COPPA) imposes strict requirements on the collection of personal information from children under 13, and a company's compliance with these standards directly affects child safety online.
Parents whose children may have interacted with Home Depot's digital services can request deletion of any collected data by contacting Home Depot directly, and the policy states such data will be deleted promptly.
How other platforms handle this
Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children under the age of 13 without parental consent. If we become aware that we have collected personal information from a child under the age of 13 without parental consent, we wil...
Our online services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information as quickly as possible.
Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without parental consent, we will take steps to delete such information. In some juris...
Monitoring
Home Depot has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Our websites and mobile applications are not directed to children under the age of 13, and we do not knowingly collect personal information from children under the age of 13. If we learn that we have collected personal information from a child under age 13, we will delete that information as quickly as possible. If you believe that a child under the age of 13 may have provided us with personal information, please contact us.— Excerpt from Home Depot's Home Depot Privacy Policy
REGULATORY LANDSCAPE: The Children's Online Privacy Protection Act (COPPA), enforced by the FTC, prohibits collecting personal information from children under 13 without verifiable parental consent. The policy's 'do not knowingly collect' standard is the baseline COPPA compliance formulation, but the FTC has taken enforcement actions against companies that relied on this standard without implementing adequate age verification or screening mechanisms. California's Age-Appropriate Design Code Act (AADC) imposes additional obligations for services likely to be accessed by children under 18, beyond the federal COPPA threshold. GOVERNANCE EXPOSURE: Low to Medium. The policy's children's privacy provision is standard industry boilerplate, but the adequacy of the underlying compliance program (including age verification, parental consent mechanisms, and data deletion workflows) is not described in the policy and would require operational assessment. Given that Home Depot operates in contexts (home improvement, DIY projects) where minors may interact with digital services, some regulatory scrutiny is plausible. JURISDICTION FLAGS: Federal (COPPA, FTC enforcement) and California (AADC, which applies to services likely accessed by minors under 18) create the primary exposure. The AADC imposes privacy-by-default requirements, data minimization obligations, and prohibitions on profiling children, which go beyond COPPA's requirements and may affect how Home Depot's digital services are designed. CONTRACT AND VENDOR IMPLICATIONS: Third-party advertising and analytics partners must be contractually restricted from collecting or using data from children's sessions. Cookie consent management platforms should be configured to block behavioral tracking cookies for sessions involving minors. Vendor contracts should include COPPA-compliant data processing terms. COMPLIANCE CONSIDERATIONS: Legal teams should assess whether Home Depot's digital services are 'likely to be accessed' by children under the California AADC standard, which would trigger obligations beyond COPPA. The deletion workflow for children's data should be documented and tested. The policy should clarify the contact mechanism for parents to report suspected collection of children's data and the expected response timeframe.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The Children's Online Privacy Protection Act (COPPA) imposes strict requirements on the collection of personal information from children under 13, and a company's compliance with these standards directly affects child safety online.
Parents whose children may have interacted with Home Depot's digital services can request deletion of any collected data by contacting Home Depot directly, and the policy states such data will be deleted promptly.
ConductAtlas has identified this type of provision across 20 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Home Depot.