Walgreens

"When you use our services on your mobile phone or device and enable location services, we may collect information about your physical location through satellite, cell phone tower, WiFi signal, beacons, Bluetooth and near field communication protocols ("precise location information"). If you enable our mobile application to use your Bluetooth signal, we may be able to determine your device's in-store location."

Walgreens collects precise geolocation (within 1,850 feet) using multiple tracking technologies including GPS, cell towers, WiFi, Bluetooth beacons, and NFC — both outdoors and to track your position inside their stores.

"Biometric Information: such as facial scans for safety, security, and product feature purposes. We may collect device-specific information when you visit our websites or use our mobile applications or services. This includes information such as Internet Protocol (IP) address, hardware model, operating system, unique device identifiers, mobile network information, location data such as zip code, the address of referring websites, the path you take through our websites."

Walgreens collects biometric data (facial scans), device fingerprinting information, and detailed browsing behavior across their properties, going beyond what's needed for basic pharmacy and retail services.

"We may also use third-party advertising networks to serve advertisements on our behalf. The cookies received with the banner advertisements served by these networks may be used to collect and build behavioral profiles by these companies to deliver targeted advertisements on our website and unaffiliated websites. When you visit our services, the operators of the available social media plugins can place a cookie on your device enabling such operators to recognize individuals who have previously visited our services."

Walgreens allows third-party advertising networks and social media plugins (Facebook, Twitter, Instagram) to place cookies directly on users' devices and build behavioral profiles, enabling extensive data collection by these third parties.

"We may also associate the information we collect from your different devices, which helps us provide consistent services across your devices. We use your information to enable Online Tracking and Interest Based Advertising as further described in this Privacy Policy. Inferences drawn from the above categories of CA Personal Information: such as consumer preferences, characteristics, predispositions, and behavior."

Walgreens cross-links user activity across multiple devices, in-store visits, websites, and mobile apps to build unified behavioral profiles and inference-based consumer profiles used for targeted advertising.

"We retain your information for the business and commercial purposes described in the "How We Use Your Information" section. Retention of your information may also be required to provide products and services you requested, to maintain our business relationship with you, or for us to fulfill a legal obligation. Once no longer needed for these purposes, we will not retain your information in our systems."

Walgreens provides no specific data retention timelines, using vague criteria like 'business purposes' and 'legal obligation' that could justify indefinite retention. Only biometric data has a concrete destruction schedule (3 years).

"We may change or add to this Privacy Policy, so we encourage you to review it periodically. When we post changes to this Privacy Policy, we will revise the "Last Updated" date at the top and bottom of the Privacy Policy. If we make material changes to the Privacy Policy, we will provide appropriate notice to you as required by applicable privacy laws."

Walgreens reserves the right to change the privacy policy at any time, with notice limited to updating a date on the page. For non-material changes, users are simply expected to check periodically, and continued use constitutes acceptance.

"If you are matched to a reasonable degree of certainty, your request will be processed as follows: Deletion request: Certain limited data we associate to you will be deleted. If you fail email confirmation, your Deletion or Appeal request will be cancelled, and you will be notified. If you request deletion of your Personal Data and are a myWalgreens loyalty member, your loyalty profile may be deleted."

Deletion requests that don't pass the highest verification tier only result in 'certain limited data' being deleted, not full deletion. The multi-step LexisNexis verification process and warning about losing loyalty benefits create friction that discourages deletion.