This analysis describes what Walmart's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Walmart is bound by a specific destruction obligation tied to purpose completion or a fixed time limit, giving biometric data a defined maximum retention period.
Interpretive note: The excerpt is truncated after condition (ii), indicated by '...'; there may be additional listed conditions (e.g., condition iii or beyond) not captured. The canonical claim reflects only the two conditions visible in the excerpt.
Walmart is required to permanently destroy your biometric data no later than 3 years after collection, and potentially sooner if the collection purpose is satisfied earlier.
How other platforms handle this
We may retain your Personal Data for a period of time consistent with the original purpose of collection...or as long as required to fulfill our legal and/or regulatory obligations.
Mistral AI shall retain the Customer Exportable Data and Assets for a period of thirty (30) days from the earlier between (a) the expiration of the Transitional Period or (b) Customer's notification under Section 2.2.2 (b) of these Additional Terms.
Starbucks stores information as reasonably necessary and proportionate to accomplish the purposes identified in this Notice based on criteria such as the length of time we need to provide the services to you, and to meet legal requirements...
"Walmart will permanently destroy your biometric identifiers and biometric information when the first of the following occurs: (i) the initial purpose for collecting or obtaining such biometric data has been satisfied; (ii) within 3 years...Excerpt from Walmart's Privacy Notice
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Walmart is bound by a specific destruction obligation tied to purpose completion or a fixed time limit, giving biometric data a defined maximum retention period.
Walmart is required to permanently destroy your biometric data no later than 3 years after collection, and potentially sooner if the collection purpose is satisfied earlier.
ConductAtlas has identified this type of provision across 275 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Walmart.