Last updated: 12/15/2021
We believe that privacy is more than an issue of compliance and endeavour to manage personal information in accordance with our core value of respect for the individual. Our privacy program is built on a strong foundation of internationally accepted privacy principles and reflects our company values in action:
Our privacy practices are based on the following key principles:
Principle 1 – Accountability
Walmart is responsible for personal information under its control and designates associates who are accountable for our compliance with the following principles. Other individuals within Walmart may be delegated to act on behalf of the designated person(s) or to take responsibility for the day-to-day processing of personal information. We also ensure that your personal information is protected when it is processed by one of our service providers, affiliates or partners.
Principle 2 – Identifying purposes for collection of personal information
Walmart identifies the purposes for which we collect personal information at or before the time the information is collected.
Unless required or permitted by law, Walmart will not use or share personal information for a new purpose without first identifying the new purpose and obtaining appropriate consent.
Principle 3 – Obtaining consent for collection, use or disclosure of personal information
Walmart requires your knowledge and consent to collect, use or share your personal information, except in certain circumstances where not required by applicable privacy legislation.
In determining the appropriate form of consent, Walmart takes into account the sensitivity of the personal information and what a reasonable person would expect. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice to us.
Principle 4 – Limiting collection of personal information
Walmart collects personal information by fair and lawful means and limits the collection of personal information to the purposes we identify to you in our relevant privacy notices or otherwise.
Principle 5 – Limiting use, disclosure, and retention of personal information
Walmart will not use or share your personal information for purposes other than the identified purposes, except with your consent, for exceptions set out in applicable privacy legislation, or as required by law. Only Walmart’s team members with a business need to know, or whose duties reasonably so require, are granted access to personal information. Walmart will keep personal information for as long as it remains reasonably necessary or relevant for the identified purposes, or as required by law.
Walmart has guidelines, procedures and controls for the retention and destruction of records containing personal information. Once personal information is no longer reasonably necessary or relevant for the identified purposes, nor required by law to be retained, it will be destroyed, erased or made anonymous.
Principle 6 – Accuracy of personal information
Personal information must be as accurate, complete, and up to date as is necessary for the purposes for which it is to be used. When notified by you, Walmart will update personal information about you as and when reasonably necessary to fulfill the identified purposes.
Principle 7 – Security safeguards
Walmart protects your personal information with security safeguards appropriate to the sensitivity of the information. All of Walmart’s team members with access to your personal information are required to appropriately respect the confidentiality and privacy of that information. Walmart protects personal information shared with service providers by a variety of means, including by contractual agreements stipulating the confidentiality, privacy and security of the information and the purposes for which it is to be used.
Walmart will store and process personal information in Canada or other countries as permitted by law. In either case, your personal information is protected with appropriate security safeguards, but may be available to foreign government agencies under applicable law.
Principle 8 – Openness concerning policies and practices
Walmart makes readily available specific information about our policies and practices relating to the management of personal information.
Principle 9 – Customer and team member access to personal information
Walmart informs you of the existence, use, and disclosure of your personal information upon request and gives you access to that information as required by applicable privacy laws. You may challenge the accuracy and completeness of the information and have it amended as appropriate.
Upon written request, Walmart provides you a reasonable opportunity to review your personal information that we hold about you. Your personal information will be made accessible to you in understandable form, within a reasonable time, and at minimal or no cost. In order to safeguard your personal information, you may be required to provide sufficient identification information to permit Walmart to account for the existence, use and disclosure of your personal information and to authorize access to your personal information.
Principle 10 – Challenging compliance
You may address a challenge concerning compliance with the above principles to the CECO of Wal-Mart Canada Corp. at CAPrivacy@wal-mart.com . Walmart maintains procedures for addressing and responding to all inquiries or complaints from individuals about Walmart’s management of personal information and investigates all privacy-related complaints. If a complaint is found to be justified, Walmart will take appropriate measures to resolve the complaint including, if necessary, by amending its policies and procedures.
You may seek advice from the Office of the Privacy Commissioner of Canada or the provincial Privacy Commissioner having jurisdiction, and, if appropriate, file a written complaint with the Commissioner's office. However, you are encouraged to use Walmart’s complaint procedures first.