Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that Walgreens collects precise location information through satellite, cell phone tower, WiFi, beacons, Bluetooth, and near field communication protocols when location services are enabled on a user's device, and may use Bluetooth signals from the mobile application to determine a user's location within a Walgreens store.
This analysis describes what Walgreens's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes collection of precise geolocation data through multiple technical mechanisms including in-store Bluetooth positioning, which the policy separately categorizes as Sensitive Personal Information under California law subject to opt-out and heightened handling requirements.
Under this provision, enabling location services or Bluetooth on a device while using the Walgreens mobile application permits the collection of precise geolocation data including the user's physical location within a store. Users can stop this collection by adjusting location and Bluetooth permissions in their mobile device settings or within the Walgreens mobile application.
Cross-platform context
See how other platforms handle Precise Geolocation Collection via Bluetooth and Satellite and similar clauses.
Compare across platforms →Monitoring
Walgreens has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"When you use our services on your mobile phone or device and enable location services on your mobile phone or device browser, we may collect information about your physical location through satellite, cell phone tower, WiFi signal, beacons, Bluetooth and near field communication protocols ('precise location information'). If you use our mobile application, your device may share precise location information when you enable location services for our application. [...] When you use our mobile application, we may also request access to your Bluetooth signal from your device. If you enable our mobile application to use your Bluetooth signal, we may be able to determine your device's in-store location.Excerpt from Walgreens's Privacy Policy
1. REGULATORY LANDSCAPE: This provision engages CPRA's Sensitive Personal Information provisions, which categorize precise geolocation within a radius of 1,850 feet as sensitive data subject to opt-out rights and purpose-limitation requirements. The FTC Act applies to collection and use of precise location data in ways that may be unfair or deceptive. State privacy laws in Colorado, Connecticut, Virginia, and other listed states may independently classify precise geolocation as sensitive data requiring heightened protections. Washington's My Health MY Data Act may intersect with precise geolocation collection in or near healthcare-adjacent retail locations. 2. GOVERNANCE EXPOSURE: High. The combination of satellite and Bluetooth-based in-store positioning enables location tracking at a granularity that California law explicitly classifies as sensitive, requiring that Walgreens honor opt-out requests and limit use to disclosed purposes. The use of Bluetooth signals for in-store positioning is an operationally distinct collection mechanism that should be assessed separately from standard GPS-based location collection under applicable state law frameworks. 3. JURISDICTION FLAGS: California creates explicit statutory exposure through CPRA's 1,850-foot radius definition of precise geolocation as Sensitive Personal Information. States listed in the policy's multi-state section including Colorado, Virginia, and Connecticut may impose analogous sensitive geolocation requirements. Illinois BIPA does not directly govern geolocation but the combination of biometric and geolocation data collection in stores may create compounded disclosure obligations. 4. CONTRACT AND VENDOR IMPLICATIONS: Third-party beacon or Bluetooth service providers operating in Walgreens stores should be assessed under data processing agreements that restrict use of in-store location data to stated purposes. If precise location data is shared with advertising partners, those disclosures should be evaluated under CPRA's opt-out requirements for Sensitive Personal Information and under applicable state sensitive data frameworks. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that opt-out mechanisms for precise location data are operationally linked to each technical collection method including Bluetooth, beacon, and satellite-based systems, and not limited to GPS alone. Data flows from in-store Bluetooth positioning systems to analytics, advertising, or loyalty platforms should be mapped and assessed against the policy's stated purposes and applicable state law limitations on sensitive geolocation use.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision authorizes collection of precise geolocation data through multiple technical mechanisms including in-store Bluetooth positioning, which the policy separately categorizes as Sensitive Personal Information under California law subject to opt-out and heightened handling requirements.
Under this provision, enabling location services or Bluetooth on a device while using the Walgreens mobile application permits the collection of precise geolocation data including the user's physical location within a store. Users can stop this collection by adjusting location and Bluetooth permissions in their mobile device settings or within the Walgreens mobile application.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Walgreens.