Target · Target Privacy Policy

Data Retention Policy

Medium severity
Share 𝕏 Share in Share

What it is

Target retains your personal information for as long as necessary to fulfill the purposes described in the policy, comply with legal obligations, resolve disputes, and enforce agreements.

Why it matters

There is no specific fixed retention period stated for most data categories, meaning Target may hold your personal information for an extended and somewhat indefinite period.

Institutional analysis (Compliance & legal intelligence)

The absence of specific retention periods for most data categories may create compliance exposure under CPRA, which requires retention periods to be disclosed, and under GDPR's storage limitation principle if Target processes data of EU-connected individuals. Legal teams should assess whether the policy's retention disclosures satisfy applicable statutory specificity requirements.

πŸ”’

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Consumer impact

Target collects extensive personal data β€” including purchase history, location, browsing behavior, and inferences about your preferences β€” and shares it with advertising partners and third parties for targeted marketing purposes. This means your shopping habits may be used to build a detailed profile of you that is shared beyond Target itself. You can opt out of the sale and sharing of your personal information by visiting Target's privacy preferences page at https://www.target.com/c/target-privacy-policy/-/N-4sr7p or by using the 'Do Not Sell or Share My Personal Information' link on Target's website.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Submit a data deletion request through Target's privacy rights portal to request that Target delete personal information they hold about you.

Applicable agencies

  • State AG
    State privacy laws including CPRA require disclosure of data retention periods and give consumers the right to request deletion, enforceable by state attorneys general.
    File a complaint →

Provision details

Document information
Document
Target Privacy Policy
Entity
Target
Document last updated
March 24, 2026
Tracking information
First tracked
March 24, 2026
Last verified
March 24, 2026
Record ID
CA-P-00260005
Document ID
CA-D-00260
Evidence Provenance
Source URL
Wayback Machine
SHA-256
f370f2b7bfe1531a7cebecc753c3e4d0940e9b6b36104765ee9f68f78c199fe9
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Target | Document: Target Privacy Policy | Record: CA-P-00260005
Captured: 2026-03-24 07:14:57 UTC | SHA-256: f370f2b7bfe1531a…
URL: https://conductatlas.com/platform/target/target-privacy-policy/data-retention-policy/
Accessed: April 4, 2026
Classification
Severity
Medium
Categories

Other provisions in this document