Walmart · Walmart Privacy Notice

Third-Party Marketplace Seller Data Access

Medium severity
Share 𝕏 Share in Share 🔒 PDF

What it is

When you buy from a third-party seller on Walmart's online marketplace, your name, address, and purchase details are shared with that seller, who then follows their own separate privacy rules — not Walmart's.

Consumer impact (what this means for users)

Your personal information including shipping address and order details is shared with individual Walmart Marketplace sellers when you purchase from them, and those sellers are not bound by Walmart's privacy policy — this creates a data sharing chain that consumers may not be aware of.

Cross-platform context

See how other platforms handle Third-Party Marketplace Seller Data Access and similar clauses.

Compare across platforms →
Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

Walmart Marketplace hosts thousands of third-party sellers, many of whom are small businesses or international companies with limited privacy compliance infrastructure — once your data is shared with these sellers, Walmart's privacy protections no longer apply and you may have limited recourse.

View original clause language
When you make a purchase from a third-party seller on Walmart Marketplace, we may share your personal information with that seller to fulfill your order, including your name, shipping address, and purchase details. Third-party sellers on Walmart Marketplace have their own privacy policies and practices, and we encourage you to review their privacy policies before making a purchase.

Institutional analysis (Compliance & legal intelligence)

(1) REGULATORY FRAMEWORK: CCPA/CPRA third-party disclosure requirements (Cal. Civ. Code §1798.115) require businesses to disclose categories of third parties with whom personal information is shared; marketplace sellers receiving consumer data must be classified as either service providers, contractors, or third parties under CPRA, with different obligations for each classification. FTC Act Section 5 prohibits deceptive practices regarding data sharing representations. EU GDPR Art. 28 requires data processing agreements with all processors — the classification of marketplace sellers as independent controllers (not processors) under GDPR would require joint controller agreements under Art. 26. (2)

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

  • FTC
    The FTC has jurisdiction over deceptive data sharing practices under Section 5 of the FTC Act, including inadequate disclosure of personal information sharing with third-party marketplace sellers.
    File a complaint →

Provision details

Document information
Document
Walmart Privacy Notice
Entity
Walmart
Document last updated
April 29, 2026
Tracking information
First tracked
April 18, 2026
Last verified
April 18, 2026
Record ID
CA-P-002999
Document ID
CA-D-00258
Evidence Provenance
Source URL
Wayback Machine
SHA-256
a9ee3ba6f2187e683c4d4b255cd07aee0927a05d027accfcfac4dbe289054722
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Walmart | Document: Walmart Privacy Notice | Record: CA-P-002999
Captured: 2026-04-18 11:34:25 UTC | SHA-256: a9ee3ba6f2187e68…
URL: https://conductatlas.com/platform/walmart/walmart-privacy-notice/third-party-marketplace-seller-data-access/
Accessed: May 2, 2026
Classification
Severity
Medium
Categories

Other provisions in this document