Walmart Privacy Notice

This document is Walmart's Customer Privacy Notice governing the collection, use, sharing, and retention of personal information from customers interacting with Walmart's online and in-store services, published with an effective date of August 1, 2025, and asserting applicability to U.S. customers across Walmart's retail ecosystem. The notice states that Walmart collects identifiers, commercial information, geolocation data, internet and network activity, inferences, and sensitive personal information including financial account details and government-issued identifiers, and the terms authorize use of this data for operational purposes, marketing, analytics, and sharing with service providers, advertising partners, data brokers, and affiliates. The notice discloses participation in advertising ecosystems including targeted advertising and the sale or sharing of personal information as defined under state privacy laws, and grants consumers opt-out rights for targeted advertising and data sale or sharing, which are operationally distinct from default data minimization frameworks that some jurisdictions require. The notice engages the California Consumer Privacy Act as amended by the California Privacy Rights Act, along with similar state privacy statutes in Virginia, Colorado, Connecticut, Texas, and other states that have enacted comprehensive consumer privacy laws, and Walmart's status as a large-scale retail data collector creates heightened regulatory exposure under FTC unfair or deceptive practices authority. Material compliance considerations include the adequacy of consent mechanisms for sensitive personal information processing, the scope of third-party data sharing for advertising purposes, and the operationalization of consumer rights requests across both online and in-store touchpoints.