Captured before automated identity checks (Oct 14, 2026): accurate as of its capture on Sep 11, 2026; our capture on Oct 17, 2026 found the same text, but its identity was not checked by them.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“We permanently destroy your biometric information when the first of the following occurs: (i) the initial purpose for collecting or obtaining such biometric information has been satisfied; or (ii) within three (3) years of your last interaction with us.”
“Sensitive Personal Information: such as driver's license, state identification card, or passport number, precise geolocation (within a radius of 1,850 feet), information on racial or ethnic origin, username and password...”
“You may stop our disclosure of your CA Personal Information to these entities for their use for secondary purposes by opting-out of the sale or sharing of your CA Personal Information.”
“Our disclosure of CA Personal Information to the third parties who use the information for secondary purposes may constitute a "sale" or "sharing" of CA Personal Information as defined under California law.”
“Biometric Information: such as facial scans for safety, security, and product feature purposes.”
“we may collect information about your physical location through satellite, cell phone tower, WiFi signal, beacons, Bluetooth and near field communication protocols ("precise location information").”
This document describes what personal information Walgreens collects about you — including your location, facial scans, and browsing behavior — how it uses and shares that information, and what rights you have over it. By simply shopping in a Walgreens store, using its website, or using its app, you are treated as having consented to the data practices described here. California residents have the right to opt out of Walgreens sharing or selling their personal information to third parties for secondary purposes, though requesting deletion of your data may result in losing your myWalgreens loyalty rewards.
This Privacy Policy establishes Walgreens' practices for collecting, using, retaining, and sharing personal information across its stores, websites, mobile applications, and services. Walgreens collects a broad range of data including biometric information (facial scans), precise geolocation via multiple technologies, sensitive personal information from California residents such as government ID numbers and racial or ethnic origin, and behavioral data through third-party advertising networks. Consent is established broadly through any interaction across any Walgreens channel rather than through affirmative opt-in. Biometric information is subject to a binding retention limit — permanent destruction upon fulfillment of the collection purpose or within three years of last interaction, whichever is first — and pharmacy account information submitted in connection with a prescription is governed by HIPAA and a separate Notice of Privacy Practices, not this Policy.
Walgreens collects sensitive data about users including facial scans, precise physical location through multiple simultaneous technologies, government ID numbers, and racial or ethnic origin information, and uses this data for purposes including interest-based advertising and behavioral profiling through third-party advertising networks. If your personal information is ever transferred in an acquisition, it will likely move to the acquiring party without requiring your separate consent. Pharmacy-related information you submit through your pharmacy account falls under HIPAA and a separate Notice of Privacy Practices — not this Policy — so the rights described here do not apply to that information. If you are a California resident, you can opt out of the sale or sharing of your personal information with third parties for secondary purposes by using the opt-out mechanism Walgreens provides.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
“We permanently destroy your biometric information when the first of the following occurs: (i) the initial purpose for collecting or obtaining such biometric information has been satisfied; or (ii) within three (3) years of your last interaction with us.”
“Sensitive Personal Information: such as driver's license, state identification card, or passport number, precise geolocation (within a radius of 1,850 feet), information on racial or ethnic origin, username and password...”
“You may stop our disclosure of your CA Personal Information to these entities for their use for secondary purposes by opting-out of the sale or sharing of your CA Personal Information.”
“Our disclosure of CA Personal Information to the third parties who use the information for secondary purposes may constitute a "sale" or "sharing" of CA Personal Information as defined under California law.”
“Biometric Information: such as facial scans for safety, security, and product feature purposes.”
“we may collect information about your physical location through satellite, cell phone tower, WiFi signal, beacons, Bluetooth and near field communication protocols ("precise location information").”
“By interacting with Walgreens through our stores, websites (including affiliate websites), mobile application(s), products, services, or otherwise, you consent to the use of information that is collected or submitted as described in this Privacy Policy.”
“in the event that Walgreens or substantially all of its assets are acquired, customer information will likely be one of the transferred assets as is permissible under law.”
“if you log in to your pharmacy account and submit information regarding a prescription order, that information is subject to HIPAA's requirements. In those circumstances, the Walgreens Notice of Privacy Practices and not this Privacy Policy will apply.”
“If you request deletion of your Personal Data and are a myWalgreens loyalty member, your loyalty profile may be deleted...Without a loyalty profile, you would lose myWalgreens Cash rewards and other benefits...”
“We may also use third-party advertising networks to serve advertisements on our behalf. The cookies received with the banner advertisements served by these networks may be used to collect and build behavioral profiles...”
“We use your information to enable Online Tracking and Interest Based Advertising as further described in this Privacy Policy.”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
We have not recorded a change to this document since we began capturing it. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Biometric data destruction schedule obligation and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 343 platforms.