Target Privacy Policy

This document is Target's consumer-facing privacy policy governing the collection, use, sharing, and retention of personal information across Target's digital and physical retail touchpoints, including target.com, the Target app, physical stores, and affiliated programs such as Target Circle, RedCard, and Shipt. The policy states that Target collects a broad range of personal data including identifiers, purchase history, financial data, precise geolocation, biometric data in certain states, health and wellness information, inferences drawn from consumer behavior, and data obtained from third-party sources including data brokers; the terms authorize sharing this data with service providers, advertising partners, data analytics companies, and affiliated brands for targeted advertising and operational purposes. Notably, the policy asserts rights to use consumer data for a Target-operated advertising network (Roundel), to share data with third-party advertising platforms, and to draw behavioral inferences for marketing, which represents a broad but not unusual scope for a major omnichannel retailer; the policy also discloses that precise geolocation and biometric information are collected in some contexts, which creates heightened obligations under state biometric privacy laws and consumer protection frameworks. The policy engages the California Consumer Privacy Act (as amended by CPRA), state biometric privacy statutes including the Illinois Biometric Information Privacy Act, and the FTC Act; California residents, Illinois residents, and residents of other states with comprehensive privacy laws (Virginia, Colorado, Texas, Connecticut) have specific rights documented in the policy, including opt-out of sale or sharing of personal data for cross-context behavioral advertising. Material compliance considerations include Target's operation of an in-house retail media network using consumer purchase and behavioral data, its data sharing practices with advertising technology partners, and its collection of biometric and precise geolocation data, each of which may require jurisdiction-specific review.