Home Depot collects sensitive personal data categories including precise location, racial or ethnic origin, the contents of your messages, and biometric information, and states it uses this data only for permitted purposes.
This analysis describes what Home Depot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Sensitive personal information is subject to the strongest legal protections under state privacy laws, and its collection by a retail company is noteworthy given the breadth of categories disclosed.
Interpretive note: The policy does not specify the purpose or mechanism for collecting racial or ethnic origin data or contents of communications in a retail context, leaving the necessity and lawfulness of these specific collection activities unclear.
Home Depot's collection of sensitive personal information categories means that data about your physical identity, location, and communications may be held and used by a large retail company, and California residents have a right to limit the use of this data beyond what is necessary to provide the service.
How other platforms handle this
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
You can contact us in order to (1) update or correct your personally identifiable information, (2) change your preferences with respect to communications and other information you receive from us, or (3) delete the personally identifiable information maintained about you...
Access information about you consistent with legal requirements. In addition, you may have the right in some cases to receive or have your electronic information transferred to another party.
"We collect certain categories of sensitive personal information, including precise geolocation, racial or ethnic origin, contents of communications, and biometric information. We use sensitive personal information only for purposes permitted by applicable law, including to provide the services you request, to ensure the security and integrity of our systems, and as otherwise disclosed in this policy.Excerpt from Home Depot's Privacy Policy
REGULATORY LANDSCAPE: CPRA establishes a distinct category of sensitive personal information with heightened protections, including the consumer's right to limit use and disclosure to what is necessary to perform the services requested.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Sensitive personal information is subject to the strongest legal protections under state privacy laws, and its collection by a retail company is noteworthy given the breadth of categories disclosed.
Home Depot's collection of sensitive personal information categories means that data about your physical identity, location, and communications may be held and used by a large retail company, and California residents have a right to limit the use of this data beyond what is necessary to provide the service.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Home Depot.