This is Target's Privacy Policy, explaining how the company collects and uses your personal data including your purchase history, location, browsing behavior, device identifiers, and even inferences about your lifestyle when you shop in-store, online, or use the Target app or Target Circle loyalty program. The most important thing to know is that Target shares your personal information — including purchase history and behavioral inferences — with advertising partners through its Roundel retail media network, and you must actively opt out to limit this data sharing. California, Virginia, Colorado, and Connecticut residents can submit a privacy rights request at Target's privacy portal to access, delete, or opt out of the sale or sharing of their personal data.
This document is Target Corporation's consumer-facing Privacy Policy governing the collection, use, and sharing of personal information across Target's retail, digital, and loyalty program touchpoints, with legal basis rooted in U.S. consumer protection and state privacy statutes rather than any single federal omnibus framework. The policy creates obligations for Target to provide transparency about data practices and grants consumers rights including access, deletion, correction, and opt-out of data sale/sharing, while obligating users to provide accurate information and accept Target's data practices as a condition of service use. Notably, Target explicitly describes sharing consumer data with advertising partners, data brokers functioning as 'service providers,' and retail media network participants (Roundel), and retains inferences derived from purchase history and browsing behavior — practices that create heightened CCPA/CPRA exposure and reputational risk around behavioral profiling at mass-market scale. The policy engages CCPA/CPRA (Cal. Civ. Code §1798.100 et seq.), the Virginia CDPA, Colorado CPA, Connecticut CTDPA, and other emerging state comprehensive privacy laws, as well as COPPA (children's data), the FTC Act Section 5 (unfair/deceptive practices), and CAN-SPAM/TCPA for marketing communications; material compliance considerations include the adequacy of Target's opt-out mechanisms for cross-context behavioral advertising, its data retention practices, and the scope of its retail media data sharing with third-party advertisers through Roundel.
REGULATORY EXPOSURE: This policy engages CCPA/CPRA (Cal. Civ. Code §§1798.100–1798.199.100) enforced by the California Privacy Protection Agency (CPPA) and California AG, requiring opt-out rights for…
REGULATORY EXPOSURE: This policy engages CCPA/CPRA (Cal. Civ. Code §§1798.100–1798.199.100) enforced by the California Privacy Protection Agency (CPPA) and California AG, requiring opt-out rights for sale and sharing of personal information and sensitive data use limitations; Virginia CDPA (Va. Cod…
Compliance intelligence locked
Regulatory exposure, material risk, and due diligence action items.
2 changes analyzed since monitoring began.