Walmart Privacy Policy

Walmart collects a wide range of personal information — including biometrics, precise location, and device identifiers — and may combine it from across its stores, websites, and affiliated companies to serve you targeted ads, improve its services, and train its AI. Walmart shares your personal information with outside publishers, social media platforms, and business partners who may use it for their own purposes. You can opt out of the sale and sharing of your personal information, including for targeted advertising, simply by enabling a Global Privacy Control signal in your browser, and Walmart cannot penalize you for exercising any privacy right.

Walmart's Privacy Policy establishes the categories of personal information Walmart may collect — including basic identifiers, device and online identifiers, biometric information, and geolocation — and authorizes their combination across online, in-store, and Walmart corporate family sources into unified consumer profiles. The policy permits use of that information for targeted advertising, AI training, and service improvement, and authorizes sharing with publishers, social media platforms, and business partners who receive data for their own independent purposes. Walmart commits to a binding biometric data destruction schedule tied to the earlier of purpose fulfillment or three years after a consumer's last interaction, and affirms it will honor Global Privacy Control signals as browser-scoped opt-outs of sale and sharing. The policy also discloses continuous microphone access while the Walmart app is open, passive license plate reader collection on Walmart properties, and a non-discrimination commitment protecting consumers who exercise privacy rights.

When you visit a Walmart property, shop in-store or online, or use the Walmart app, personal information including your location, device identifiers, and biometrics may be collected — and if the Walmart app is open, your microphone is continuously accessed. Walmart combines this information across channels and corporate family entities and uses it for targeted advertising and AI training, and shares it with publishers, social media platforms, and independent business partners. Your biometric data will be permanently destroyed when its collection purpose is met or within three years of your last interaction, whichever comes first. One concrete action available to you: enable a Global Privacy Control signal in your browser, which Walmart will treat as an opt-out of the sale and sharing of your personal information, including for targeted advertising, for that browser.