Last updated: 12/15/2021
Our privacy program is built on a strong foundation of internationally accepted privacy principles and reflects our company values in action:
Principle 1 – Accountability
Walmart is responsible for personal information under its control and designates associates who are accountable for our compliance with the following principles. Other individuals within Walmart may be delegated to act on behalf of the designated person(s) or to take responsibility for the day-to-day processing of personal information. We also ensure that your personal information is protected when it is processed by one of our service providers or partners.
Principle 2 – Identifying purposes for collection of personal information
Walmart identifies the purposes for which we collect personal information at or before the time the information is collected.
Unless required or permitted by law, Walmart will not use or share personal information for a new purpose without first identifying the new purpose and obtaining appropriate consent.
Principle 3 – Obtaining consent for collection, use or disclosure of personal information
Walmart requires your knowledge and consent to collect, use or share your personal information, except in certain circumstances where not required by applicable privacy legislation.
In determining the appropriate form of consent, Walmart takes into account the sensitivity of the personal information and what a reasonable person would expect. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice to us.
Principle 4 – Limiting collection of personal information
Walmart collects personal information by fair and lawful means and limits the collection of personal information to the purposes we identify to you in our relevant privacy notices or otherwise.
Principle 5 – Limiting use, disclosure, and retention of personal information
Walmart will not use or share personal information for purposes other than the identified purposes, except with the consent of the individual, for exceptions set out in applicable privacy legislation, or as required by law. Only Walmart’s team members with a business need to know, or whose duties reasonably so require, are granted access to personal information. Walmart will keep personal information for as long as it remains reasonably necessary or relevant for the identified purposes, or as required by law.
Walmart has guidelines, procedures and controls for the retention and destruction of records containing personal information. Once personal information is no longer reasonably necessary or relevant for the identified purposes, nor required by law to be retained, it shall be destroyed, erased or made anonymous.
Principle 6 – Accuracy of personal information
Personal information must be as accurate, complete, and up to date as is necessary for the purposes for which it is to be used. Walmart will update personal information about individuals as and when reasonably necessary to fulfill the identified purposes or upon notification by the individual.
Principle 7 – Security safeguards
Walmart protects personal information by security safeguards appropriate to the sensitivity of the information. All of Walmart’s team members with access to personal information are required to appropriately respect the confidentiality and privacy of that information. Walmart also protects personal information shared with service providers by a variety of means, including by contractual agreements stipulating the confidentiality, privacy and security of the information and the purposes for which it is to be used.
Walmart will store and process personal information in Canada or other countries as permitted by law. In either case, the personal information is protected with appropriate security safeguards, but may be available to foreign government agencies under applicable law.
Principle 8 – Openness concerning policies and practices
Walmart makes readily available specific information about its policies and practices relating to the management of personal information.
Principle 9 – Customer and team member access to personal information
Walmart informs individuals of the existence, use, and disclosure of their personal information upon request and gives the individual access to that information as required by applicable privacy legislation. Individuals may challenge the accuracy and completeness of the information and have it amended as appropriate.
Upon written request, Walmart provides individuals a reasonable opportunity to review the personal information Walmart holds about them. Personal information will be made accessible to the individuals in understandable form, within a reasonable time, and at minimal or no cost. In order to safeguard personal information, the inquiring individual may be required to provide sufficient identification information to permit Walmart to account for the existence, use and disclosure of personal information and to authorize access to the individual's personal information.
Principle 10 – Challenging compliance
Individuals may address a challenge concerning compliance with the above principles to the Privacy Officer of Walmart Canada Corp. at CAPrivacy@wal-mart.com . Walmart maintains procedures for addressing and responding to all inquiries or complaints from individuals about Walmart’s management of personal information and investigates all privacy-related complaints. If a complaint is found to be justified, Walmart will take appropriate measures to resolve the complaint including, if necessary, by amending its policies and procedures.
Individuals may seek advice from the Office of the Privacy Commissioner of Canada or the provincial Privacy Commissioner having jurisdiction, and, if appropriate, file a written complaint with the Commissioner's office. However, the individuals are encouraged to use Walmart’s complaint procedures first.