Circle K

"Geolocation information may be collected when you use our websites and apps, although this information may not always identify you as an individual. In certain selected and clearly identified stores where we conduct research projects, we may use video cameras and sensors (using Wi-Fi tracking, Bluetooth, RFID and similar technologies) to map individuals' movements in the store and identify what items they take."

Circle K collects geolocation data from apps and websites, and in select stores uses WiFi, Bluetooth, and RFID sensors to physically track customer movements, going well beyond what's needed for basic convenience store transactions.

"We may share your personal information within Circle K and companies within our corporate group or with our third party business partners (companies with which we provide programs, products or services) and service providers (companies operating on our behalf) for the purposes described in this Privacy Policy. In the course of providing our programs, products, services, promotions, contests and events we may share all categories of personal information detailed in the section What Personal Information do we Collect? with third party service providers who perform services on our behalf."

Circle K shares all categories of personal information with a broad range of third parties including business partners, service providers, affiliates, and their sub-processors, covering identifiers, purchase history, location data, internet usage, and inferred profiles.

"With respect to our mobile applications, we use Identifier for Advertising for iOS and Google Advertising ID for Android. We may combine this information with other information collected in-store or online such as your transaction history. We do this to support our customer understanding using website and mobile analytics and to provide you with more tailored advertising and marketing campaigns."

Circle K uses mobile advertising IDs, cookies, and analytics engines to track users across devices and combines online browsing data with in-store transaction history to build profiles for targeted advertising.

"Tools that help protect against inappropriate uses, such as Google Invisible reCAPTCHA, which collects hardware and software information, such as device and application data and the results of integrity checks, as well as unique online identifications such as IP address, and sends that data to Google for analysis. We collect personal information including Internet Protocol (IP) address, device identifier or account information."

Circle K collects device identifiers, hardware and software information, and application data through tools like reCAPTCHA, which sends this data to Google for analysis beyond what's needed for a convenience store app.

"We may make changes to this Privacy Policy from time to time. Any changes we make will become effective when we post a modified version of the policy on our websites and apps. By continuing to participate in our programs, and/or use our services or purchase our products after the modified version of the Privacy Policy has been posted or you have been informed of such update, you are accepting the changes to the Privacy Policy."

Circle K can modify its privacy policy at any time and treats continued use of their services as acceptance of the new terms, placing the burden on users to monitor for changes.

"We will store your personal information in accordance with our retention policies or as otherwise required or permitted by law, after which your personal information will be securely destroyed or anonymized (so the information no longer identifies you)."

Circle K provides no specific retention timelines and references internal policies that are not disclosed, giving them broad discretion to retain personal information indefinitely as long as they claim it's 'permitted by law.'