Capital One Shopping

"We and our third-party providers may collect information about your activities on our Services and across different websites, mobile apps, and devices over time for behavioral advertising purposes. For example, when you visit the Capital One Shopping website, our advertising providers may use that information to determine whether to show you a Capital One Shopping ad when you go to other, non-Capital One Shopping websites. Similarly, when you view a Capital One Shopping ad on your computer, our advertising providers may use that information when deciding whether to show you a subsequent ad on your laptop or mobile device."

Capital One Shopping and its ad partners track user activity across multiple websites, apps, and devices over time, linking behavior on one platform to ad targeting on another.

"If you download and use our browser extensions, we may collect product pages viewed, pricing information, general location data such as city, state, or country, purchase history on various merchant websites and services, the price you paid for items, whether a purchase was made, online advertisements detected and blocked, and the coupons that you used including information regarding whether or not a coupon or coupon code is valid or effective."

The browser extension collects broad browsing and purchase activity across merchant websites, going beyond what's needed for coupon functionality to include purchase history, pricing, and ad interaction data.

"Technical data, such as the device you are using to access our Services, your unique device ID, your internet protocol (IP) address, browser type and version, time zone and general location, display settings, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access the Services, data about how you use our website and how you interact with our website and mobile advertisements, data about your mobile device, and advertising identifiers (e.g., Apple's IDFA or Google's Advertising ID)."

Capital One Shopping collects general location data via IP address and device information, and references mobile device location tracking settings, indicating location data is collected and potentially shared with advertising partners.

"We may provide your personal information to trusted third parties to process it for us so that we may provide Services to you. We also share your personal information with partner merchants, e-commerce websites, and related service providers in order to confirm that you have made an online purchase that is covered by our Services. We may provide your personal information to Capital One affiliates for them to use in ways that are consistent with this Privacy Policy. For instance, we exchange lists of user email addresses with other Capital One affiliates."

Personal information is shared broadly with service providers, merchant partners, Capital One affiliates (including email address lists), and advertising partners, creating a wide data-sharing ecosystem.

"The personal information we collect will be retained for as long as reasonably necessary for the purposes for which it was collected as set out in this Privacy Policy and consistent with our retention policies, in accordance with applicable laws. When determining these retention policies, we take into account the length of time personal information is required to be retained to provide the services; satisfy legal and compliance obligations and for audit purposes; address any complaints regarding the services; and defend or bring potential legal claims."

No specific retention periods are stated. The policy uses vague language like 'reasonably necessary' and lists broad justifications including potential legal claims, which could justify indefinite retention.

"We may change this Policy in the future. When we do, we will post the revised Policy on our website. This Policy was last updated and became effective on the date posted in the header of this page."

Capital One Shopping can change the privacy policy at any time with no obligation to notify users directly — only posting on the website — and continued use implicitly constitutes acceptance.