Walmart Washington Consumer Health Data Privacy Notice

This Washington Consumer Health Data Privacy Notice supplements the information in the Walmart Privacy Notice. It applies solely to Washington consumers who interact with us in an individual or household capacity and applies only to personal information defined as “consumer health data” subject to the Washington My Health My Data Act.

This Notice describes what consumer health data we collect, how we collect and use it, who we disclose it to and why, and the choices you may have regarding our use or disclosure of your consumer health data. This Notice only applies to consumer health data, which is a subset of personal information that identifies your past, present, or future physical or mental health status. Examples of consumer health data are provided below.

This Notice does not apply to any personal information other than consumer health data subject to the Washington My Health My Data Act. Consumer health data does not include information generated by your interactions with us, such as browsing or purchasing, that does not identify your health status. For example, browsing products of interest to the general population will not generate consumer health data. Products that are used for general hygiene (such as toothpaste or toilet paper), home-preparedness (such as first aid products), fitness (such as weights), and that are not used to measure a specific health condition (such as pedometers) will not give rise to consumer health data when you browse or shop them.

Consumer health data also does not include publicly available information, protected health information subject to HIPAA (such as the data generated when you visit Walmart Health Centers, Walmart Vision Centers, or Walmart Pharmacies), or personal information that has been deidentified data is not consumer health data. To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

We may collect or receive the categories of consumer health data listed below. Not all categories will be collected or received for every individual.

• Information identifying a health condition, treatment, disease, or diagnosis, such as purchases of hearing aids or medication used to treat an identifiable, sensitive health condition
• Information identifying a health-related surgery or procedure, such as purchase of a post-surgical compression garment
• Information identifying the purchase of prescribed medication, unless that information constitutes protected health information subject to HIPAA
• Information identifying bodily functions, vital signs, or symptoms, such as purchase of products used to address a specific, identifiable function or symptom
• Measurements of the information listed above
• Information identifying diagnoses or diagnostic testing, treatment, or medication, such as purchase of blood glucose test strips
• Reproductive or sexual health information, such as purchase of breastfeeding aids
• Biometric data
• Information identifying precise location, if that information could reasonably indicate an attempt to acquire or receive health services or supplies
• Information that identifies an individual’s intention to seek health care services
• Information that we derive or extrapolate from data that is not consumer health data, and then use to associate an individual to the information listed above

We may obtain consumer health data from different sources, as described in the How Do We Collect Information section of the Walmart Privacy Notice and provided below:  

• Provided directly by you or a member of your household
• Collected from a device associated with you or your household
• Collected through in-store technology
• Collected from another company within our family of companies
• Collected from another solution or asset

We may collect and use consumer health data and as provided below:

• To provide you with products and services you request, such as displaying the products you place in your online cart, completing your purchase, serving responses to your online searches, suggesting products that may be of interest to you based on your browsing, searching, or shopping, and displaying your past purchase history for your reference. Depending on your communication preference settings, we also may send communications regarding your requests, such as a reminder to complete your transaction with respect to items in your cart or notifying you that a product you browsed is back in stock.
• To fulfill your requests, such as providing you with a list of products available for reorder, participating in subscription services, or performing customer service activities.
• To fulfill our legal functions or obligations, such as maintaining and auditing compliance.
• Helping to ensure security and integrity of our systems, including detection and prevention of security incidents.
• To detect or prevent harmful behavior such as identity theft, fraud, harassment, or deceptive activities, or activities that are illegal under applicable law.
• For other purposes with your consent

We may share each of the categories of consumer health data described above. In particular, we may share personal data, including consumer health data, with your consent, to complete transactions or provide products or services you have requested, and for the purposes described herein.

We may share consumer health data with business partners such as those providing advertising and technology services, Walmart Marketplace partners, governmental agencies and legal bodies, and purchasers of or successors to our business or assets.

We may share consumer health data within our family of companies, including among these affiliates:

Walmart Inc.

Wal-Mart Stores East, LP

Wal-Mart Stores Arkansas, LLC

Wal-Mart Stores Louisiana, LLC

Wal-Mart Stores Texas, LLC

Sam’s West, Inc.

Sam’s East, Inc.

Wal-Mart Associates, Inc.

Walmart Claims Services, Inc.

MC Health MSO, LLC

Wal-Mart.com USA, LLC

Wal-Mart Stores East, LLC

If you are a resident of Washington, you may have the right to (1) request access to your consumer health data; (2) confirm whether we have disclosed or sold your consumer health data; (3) delete your consumer health data; or (4) withdraw your consent or authorization relating to such data. You can make these requests by going to the footer of our website or settings section of our app and selecting the “Request My Personal Information” link.

You may appeal our decision with respect to a request you have submitted by going to our privacy request page.

Contact our Customer Service Team or write the Walmart Privacy Office with any questions or comments about this Notice or about how we handle your personal information. The Privacy Office’s address is:

Walmart Corporate Privacy

Privacy Office, MS #0160

702 SW 8th Street

Bentonville, AR 72716-0160