103 Total
23 High severity
69 Medium severity
11 Low severity

Key Facts

When does Walgreens permanently destroy your biometric information?
Walgreens permanently destroys your biometric information when either the initial purpose for collecting it has been satisfied or within three years of your last interaction with Walgreens, whichever occurs first.
Does Walgreens permanently destroy your biometric information when either the initial purpose for collecting it has been satisfied or within three years of your last interaction with Walgreens?
Walgreens permanently destroys your biometric information when either the initial purpose for collecting it has been satisfied or within three years of your last interaction with Walgreens, whichever occurs first.
What sensitive personal information does Walgreens collect from California residents?
Walgreens collects sensitive personal information from California residents including driver's license, state ID, or passport numbers, precise geolocation within a radius of 1,850 feet, racial or ethnic origin information, and usernames and passwords.
How may California residents stop disclosure of their California personal information to third parties for secondary purposes?
Walgreens permits California residents to stop disclosure of their California personal information to third parties for secondary purposes by opting out of the sale or sharing of that information.
Can California residents opt out of the sale or sharing of their California personal information?
Walgreens permits California residents to stop disclosure of their California personal information to third parties for secondary purposes by opting out of the sale or sharing of that information.
To whom does Walgreens disclose California personal information?
Walgreens discloses California personal information to third parties who use it for secondary purposes, and that disclosure may constitute a 'sale' or 'sharing' as defined under California law.
Does disclosure of California personal information to third parties by Walgreens constitute a 'sale' or 'sharing' as defined under California law?
Walgreens discloses California personal information to third parties who use it for secondary purposes, and that disclosure may constitute a 'sale' or 'sharing' as defined under California law.
What biometric information does Walgreens collect?
Walgreens collects biometric information, including facial scans, for safety, security, and product feature purposes.
Does Walgreens collect biometric information, including facial scans, for safety, security, and product feature purposes?
Walgreens collects biometric information, including facial scans, for safety, security, and product feature purposes.
How may Walgreens collect precise location information about you?
Walgreens may collect precise location information about you through satellite, cell phone tower, WiFi signal, beacons, Bluetooth, and near field communication protocols.
Stay ahead of the changes
Track Walgreens and get the diff the day its terms change.
Summary

This document describes what personal information Walgreens collects about you — including your location, facial scans, and browsing behavior — how it uses and shares that information, and what rights you have over it. By simply shopping in a Walgreens store, using its website, or using its app, you are treated as having consented to the data practices described here. California residents have the right to opt out of Walgreens sharing or selling their personal information to third parties for secondary purposes, though requesting deletion of your data may result in losing your myWalgreens loyalty rewards.

Analysis

This Privacy Policy establishes Walgreens' practices for collecting, using, retaining, and sharing personal information across its stores, websites, mobile applications, and services. Walgreens collects a broad range of data including biometric information (facial scans), precise geolocation via multiple technologies, sensitive personal information from California residents such as government ID numbers and racial or ethnic origin, and behavioral data through third-party advertising networks. Consent is established broadly through any interaction across any Walgreens channel rather than through affirmative opt-in. Biometric information is subject to a binding retention limit — permanent destruction upon fulfillment of the collection purpose or within three years of last interaction, whichever is first — and pharmacy account information submitted in connection with a prescription is governed by HIPAA and a separate Notice of Privacy Practices, not this Policy.

What this means for you

Walgreens collects sensitive data about users including facial scans, precise physical location through multiple simultaneous technologies, government ID numbers, and racial or ethnic origin information, and uses this data for purposes including interest-based advertising and behavioral profiling through third-party advertising networks. If your personal information is ever transferred in an acquisition, it will likely move to the acquiring party without requiring your separate consent. Pharmacy-related information you submit through your pharmacy account falls under HIPAA and a separate Notice of Privacy Practices — not this Policy — so the rights described here do not apply to that information. If you are a California resident, you can opt out of the sale or sharing of your personal information with third parties for secondary purposes by using the opt-out mechanism Walgreens provides.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

1 important change detected

6 versions captured · Last updated: June 2026

What changed Walgreens updated the metrics reporting period in its Privacy Policy from January 1 - December 31, 2024 to January 1 - December 31, 2025. The change reflects updated data on consumer privacy requests received and processed during the new calendar year. The specific numbers for access requests, corrections, deletions, opt-out requests, and request-to-limit submissions have been updated to reflect 2025 activity, along with corresponding completion and rejection counts.
Why this matters This change updates the reporting period and metrics data in Walgreens' Privacy Policy to reflect calendar year 2025 privacy request activity. The updated policy now discloses how many access, correction, deletion, opt-out, and request-to-limit submissions were received and processed during 2025, along with median processing times. No change has been made to consumers' rights or Walgreens' obligations regarding privacy requests.
View full change record →
Featured, High severity
Featured, Medium severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

103 provisions
12 featured
12 clause types
23 high severity
Privacy Rights 35 4 high
Show all 35 privacy rights provisions
Stay ahead of the changes

Monitoring

Walgreens has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Biometric data destruction schedule obligation and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured June 28, 2026 01:00 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000607
Version ID CA-V-004296
SHA-256 0f6950919c3da86eab3e4508cb5f4a2245adf341abd12140770ea06252d7325e
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Start monitoring → Compare plans