Effective April 26, 2018
This Privacy Notice describes the types of personal and business information Walmart Inc. (“Walmart”) collects from suppliers of our Walmart family of companies via Project Gigaton, THESIS (The Sustainability Index), Packaging, and Forests initiatives (“Projects”), how we may use the information, and with whom we may share it. This Privacy Notice also describes the measures we take to protect the security of the personal information you provide. Additionally, we tell you how you can reach us to update your contact information, exercise your rights, or answer any questions you may have about our online privacy practices.
Information We Collect and How We Use It
Personal and Business Information
The Projects aim to inspire suppliers to prevent upstream and downstream (beyond-the-shelf) greenhouse gas (GHG) emissions from the global value chain, optimize their packaging, and source deforestation-free and recycled pulp, paper, and palm oil. Walmart encourages every supplier to join the Projects in order to showcase the impact of each supplier’s efforts. Walmart uses the information suppliers submit for legitimate interests to recognize suppliers’ goals and status relevant to each Project.
When suppliers sign up to participate in the Project, Walmart collects the following information:
- Business Information (such as company name, contact information, supplier details (e.g. market and sourcing vendor information), and details on sustainability goals and/or information that determines the relevance of Packaging and Forests initiatives; and
- Personal Information (contact information of an individual(s) for each supplier participating in the Projects). Walmart uses this information for communication and collaboration purposes to manage the Projects.
The Projects will run through 2030 with final year of reporting in 2031. Walmart will keep the information provided by suppliers for the duration of the program. Supplier users are free to delete their contact information and withdraw from the program at any time.
On an annual basis, Walmart collects additional non-personal business information from suppliers via a survey. The survey enables Project participants and Walmart to track supplier progress against Project-specific goals. Walmart uses the survey information to recognize those suppliers who are doing good work by sharing their stories and case studies within Walmart, the supplier community, and publicly through various recognition opportunities.
Whom Do We Share This Information With?
We do not sell or otherwise disclose personal information of Project participants except as otherwise described below. We share the business information provided to us with non-governmental organization (“NGOs”) and other consultants (“Others”) to receive expertise for purposes of furthering the success of the Projects. The NGOs and Others do not use or retain this information for any purpose other than to provide consulting services to Walmart. We also share your personal and business information with our Walmart family of companies. We may disclose your information in other special circumstances. These include situations when the sharing is necessary to protect the safety, property, or other rights of Walmart, our customers, our associates, or any other person, or where otherwise required by law. For example, we may be required to disclose your information as is required by law pursuant to lawful requests such as subpoenas, court orders, or when we believe disclosure is necessary or appropriate in connection with an investigation of reasonably suspected or actual criminal activity.
We may transfer any information we have about you in connection with a merger or sale (including transfers made as part of insolvency or bankruptcy proceedings) involving all or part of Walmart or as part of a corporate reorganization or stock sale or other change of corporate control.
Where Do We Store or Transfer Information To?
The personal and business information we collect via the Projects may be transferred to our service providers who host our data and provide other technical services. We require our service providers to keep your personal information secure. We do not allow our service providers to use or share your personal information for any purpose other than providing services on our behalf. The Project website is hosted by a third-party cloud provider in the U.S., which may not have the same data protection laws as the country in which you reside. We have taken steps to implement technical and organizational security measures to protect personal information as further indicated below.
How We Protect Personal Information
We use reasonable security measures, including physical, administrative, and technical safeguards to protect your personal information.
Your Personal Information Rights
We provide suppliers with various ways to access, correct, and delete personal information they submit to us, and to object or prevent processing of personal information.
You can access or update your personal information in the following ways:
- If you have created an account on our website, log into your account. Once you do, you will be able to enter and update your own contact information and company goal information.
- Contact us by emailing firstname.lastname@example.org. Please include your current contact information, the information you are interested in accessing, and your requested changes. We will provide you the personal information requested if it is reasonably available, unless it infringes on the privacy of other individuals, and subject to reasonable limitations provided by law and internal procedures. Otherwise we will describe the types of information we typically collect. We will provide access and make the changes you request, or will provide an explanation of what actions we will be able to take with regard to the request.
Links to Other Sites
We may provide links to other websites for your convenience and information. These sites may have their own privacy statements in place that we strongly suggest you review. To the extent these sites are unrelated to Walmart; we are not responsible for them.
Updates to Our Privacy Notice
Please check this Privacy Notice periodically for changes. We will post the date it was last updated at the top of the policy.
How to Contact Us
If you have questions or comments about this Privacy Notice, please contact the Privacy Office:
By email: Privacy@wal-mart.com
Privacy Office (Mailstop #160)
702 SW 8th Street
Bentonville, AR 72716-0160
If you have questions or comments about the Project, please contact the Walmart Sustainability team at email@example.com.