The Home Depot

"We use cameras and other technologies in our stores, in parking lots and at other facilities to learn about customer traffic. The signals emitted by your mobile devices when you travel through our stores. We may use ALPR Systems where not prohibited by law. We may collect and use ALPR Information for fraud prevention, security, and asset protection purposes."

Home Depot collects location data from mobile device signals as you move through stores, uses IP-based geolocation online, and deploys automated license plate recognition systems in parking lots to track vehicles.

"Identifiers, Commercial Information, Business Information, and Property Information Disclosed to: Service providers; Product Manufacturers and Extended Warranty Providers; Joint Marketing Partners; Financial Service Companies; Advisors and Consultants; Law Enforcement, Public and Government Authorities, and Others; Affiliates and Subsidiaries; Advertising Partners and Marketing Companies; and Successors to All or Part of Our Business."

Home Depot shares a broad range of personal information — including identifiers, purchase history, demographics, location, and inferences — with a long list of third parties including advertising partners, marketing companies, joint marketing partners, and financial service companies.

"To provide you with ads and other communications that align with your interests, we may use information collected across different online services and collected from the various devices you use. As part of this customization, we may observe your behaviors on our device applications, our websites, or on other websites and applications. We may also get information about your browsing history and online activities from our trusted business partners and vendors."

Home Depot builds cross-device and cross-site behavioral profiles by combining data from their own properties, third-party websites, social media platforms, and marketing partners to target advertising.

"We retain the personal information we collect for as long as reasonably necessary to fulfill the purposes described above or when the information was collected, unless a shorter retention period is required by law. We may retain personal information after our relationship with you ends. The length of retention may vary depending upon factors such as: Recordkeeping or legal compliance requirements; The need to resolve inquiries or complaints; Operating, expanding, and improving our business."

Home Depot retains personal data indefinitely with no clear deletion timeline, explicitly stating they may keep data after the customer relationship ends based on broad justifications like "improving our business."

"Biometric Information: Facial recognition. Where Do We Collect It From? Via cameras at select stores, in parking lots, and at other facilities as permitted under applicable laws. Session replay software may be used to record and replay your interaction."

Home Depot collects facial recognition biometric data via in-store cameras and uses session replay software to record and replay users' entire website interactions, which goes beyond basic functionality needs.

"From time to time we may change our privacy policies. We will notify you of any material changes to our Privacy and Security Statement by posting an updated copy on our website. Please check our website periodically for updates."

Home Depot can modify the privacy policy at any time with no direct notice to users — only posting changes on their website, placing the burden on users to periodically check for updates.