Whatnot · Whatnot Privacy Policy · View original document ↗

Sensitive Personal Information Collection and Use

High severity Rare · 3 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Whatnot recorded 5 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Whatnot Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.

This analysis describes what Whatnot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision establishes the operational framework for handling sensitive personal information categories that receive heightened regulatory treatment under data protection laws. The clause conditions collection and use practices on legal requirements and contemplates consent or limitation mechanisms where mandated by jurisdiction.

Recent Activity

This document changed recently

Medium May 14, 2026

The updated terms establish a new Creator Program for UK users that allows them to submit content (videos, shopping hauls, seller spotlights) and potentially receive program benefits including cash payments, shopping credit, or promotional support. The terms grant Whatnot a one-year non-exclusive license to use submitted content across all marketing channels worldwide for promotion, advertising, and derivative works without additional compensation beyond the stated program benefit. Creators must be at least 18 years old, maintain a valid Whatnot account, and complete identity verification and tax documentation before receiving any payment. The terms state explicitly that submission does not guarantee content will be selected, used, featured, or rewarded, and Whatnot retains discretion to reject, remove, or stop using content at any time.

View change record →

Consumer impact (what this means for users)

Users should understand that Whatnot collects payment card information, identity verification data, and geolocation information as part of service operations. The terms specify that consent requests or limitation options will be provided where required by applicable law, meaning the scope of available user controls depends on the legal requirements of the user's jurisdiction.

Cross-platform context

See how other platforms handle Sensitive Personal Information Collection and Use and similar clauses.

Compare across platforms →

Monitoring

Whatnot has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We may collect certain information that may be considered sensitive personal information under applicable law, including payment card information, government-issued identification numbers (where required for identity verification), and precise geolocation data. Where required by applicable law, we will obtain your consent before collecting such information or will provide you with the right to limit the use and disclosure of such sensitive personal information.

— Excerpt from Whatnot's Whatnot Privacy Policy

Provision details

Document information
Document
Whatnot Privacy Policy
Entity
Whatnot
Document last updated
May 5, 2026
Tracking information
First tracked
May 11, 2026
Last verified
May 11, 2026
Record ID
CA-P-007067
Document ID
CA-D-00732
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
b004999cb5790fcea852f2c7a74f97dc701c834bd53dc7719ae5d0ff36889183
Analysis generated
May 11, 2026 06:35 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Whatnot
Document: Whatnot Privacy Policy
Record ID: CA-P-007067
Captured: 2026-05-11 06:35:36 UTC
SHA-256: b004999cb5790fce…
URL: https://conductatlas.com/platform/whatnot/whatnot-privacy-policy/sensitive-personal-information-collection-and-use/
Accessed: May 20, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Whatnot's Sensitive Personal Information Collection and Use clause do?

This provision establishes the operational framework for handling sensitive personal information categories that receive heightened regulatory treatment under data protection laws. The clause conditions collection and use practices on legal requirements and contemplates consent or limitation mechanisms where mandated by jurisdiction.

How does this clause affect you?

Users should understand that Whatnot collects payment card information, identity verification data, and geolocation information as part of service operations. The terms specify that consent requests or limitation options will be provided where required by applicable law, meaning the scope of available user controls depends on the legal requirements of the user's jurisdiction.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 3 platforms. See the full comparison.

Is ConductAtlas affiliated with Whatnot?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Whatnot.