State Specific Disclosures (California & Nevada)
California Residents
If you’re a resident of California, there are a few more things that we need to explain regarding Personal Data as outlined in several California laws (including the California Consumer Privacy Act (CCPA) as amended from time to time). Any capitalized term (yes, our capitalization efforts are intentional) that we haven’t otherwise defined in this privacy policy have the same definition as in the CCPA, California Civil Code § 1798.100, et seq. (together with the regulations thereunder, the “CCPA”), as applicable.
This section doesn’t apply to Personal Data we capture from job applicants, current and former associates and independent contractors, and business-to-business activities. With one exception, sections 1 and 2 below apply to Albertsons associates, candidates, and independent contractors. De-identified, aggregated, and some publicly available data are not considered Personal Data under California law and does not apply to this section, or the rights outlined below.
This Notice applies to the Personal Data we collected from you during the 12 months prior to the effective date of this Notice. The information we have collected and process depends on what services and interactions you have had with us (e.g., if you haven’t signed up for a FreshPass, we won’t have FreshPass information).
- Collection and Use of Personal Data
(a) Categories of Personal Data We Collected About California Consumers:
- Identifiers such as name, alias, physical address, unique personal identifier (see our cookies and trackers section for more details), social security number, IP address, email address, phone number, passport number, customer number, account name, ID card information, or other similar identifiers;
- Personal records such as physical characteristics or descriptions, signature, education, employment history, bank account information, medical information, financial information, or health insurance information;
- Characteristics such as age, race and ethnicity (through the use of our video) ancestry, national origin, marital status, religion, sex, veteran or military status, medical condition, and mental or physical disability, and other demographic data;
- Customer Accounts/Commercial information such as records or personal property, products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies;
- Online usage information such as Internet and other electronic network activity information including, but not limited to, browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement;
- Geolocation data such as physical location;
- Sensory information such as audio recordings of customer service calls, visual recordings of consumers in stores; and
- Inferences Derived From Personal Data/Profiling such as your purchase preferences, interests, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
There may be additional information that we collected that meets the CCPA’s definition of PI but is not reflected by a category, in which case we will treat it as PI as required by the CCPA but will not include it when we are required to describe our practices by category of Personal Data.
As permitted by applicable law, we do not treat De-identified data or Aggregate Consumer Information as PI and we reserve the right to convert or permit others to convert your PI into De-identified or Aggregate Consumer Information. We have no obligation to re-identify such information or keep it longer than we need it for our own purposes.
(b) Categories of Sources of Personal Data that We Collect:
- Directly from you. For example, when you create an account, make a purchase, browse our website, use our app(s), interact with our third-party social media pages or services, or apply for or accept an employment position with us.
- Albertsons Customers - Your friends, family, or associations, including through their use of the Services.
- Directly and indirectly from activity on our Services, and Third Party social media pages and other services. For example, see the types of collection in the “Automatically Collected Information” section above.
- Social Networks.
- Advertising Companies.
- Service Providers who provide services on our behalf such as those used to fulfill orders, process your payments and requests, verify your information, monitor activity on our Services, provide analysis and analytics, maintain databases, administer and monitor emails and marketing, administer and send mobile messages, serve ads on this and other services, and provide consulting services.
- Third Party data providers Operating systems and platforms
- Credit agencies or bureaus
- Government entities and other public sources
- Albertsons family of brands Creation by us.
(c) Business or Commercial Purposes:
- Providing customer service, including responding to your requests or inquiries.
- Processing and completing your transactions including, as applicable, order confirmation, billing, enrollment in our loyalty or other programs, and delivering products or Services.
- Personalizing your experience with our Services with content and offers that are tailored to you, including special offers from other companies.
- Providing you with newsletters, articles, product or service alerts, new product or service announcements, savings awards, event invitations, and other information.
- Including you in market research, surveys, promotions, sweepstakes, and contests.
- Improving our Services such as the way offers are made for our Services based on the purchasing decisions of our customers and improving the interactions visitors have with our Services.
- Evaluating your shopping experience or existing products and Services or to create new items.
- Alerting you about a product safety announcement or recall or correction of an offer, promotion, or advertisement.
- Keeping a record of our interactions with you if you place an order or otherwise deal with our representatives over the telephone or online.
- Verifying and validating your identity or otherwise preventing, investigating, or providing notice of fraud, unlawful or criminal activity, or unauthorized access to or use of Personal Data, and our website or data systems.
- Complying with our legal obligations including complying with law enforcement or governmental authority requests, participating in judicial proceedings, responding to requests from third parties based on their statutory rights against us (IP infringement, piracy, other unlawful activity) and investigating fraudulent activity.
- Processing and evaluating your application and related materials you submit as a job applicant.
- Interacting with you when you contact us as a vendor or on behalf of another business.
- Enabling you to interact with content service providers, whether by linking to their sites, viewing their content within our online environment, or by viewing our content within their online environment.
- Creating aggregated, pseudonymized, or anonymized information for analytical and statistical purposes.
- As permitted by applicable laws including for enforcing our Terms of Use, other agreements, and policies.
Additional Business Purposes for which we Collect, and may disclose, PI include sharing PI with Third Parties for other than a Sale or one of the foregoing Business Purposes as required or permitted by applicable law, such as to our vendors that perform services for us, to the government or private parties to comply with law or legal process, to the Consumer or other parties at the Consumer’s request or direction, for the additional purposes explained in our online Privacy Policy or at the point of collection, and to assignees as part of a merger or asset sale (“Other Business Purposes”). Subject to restrictions and obligations of the CCPA, our vendors may also use your PI for some or all of the above listed Business Purposes and engage subcontractors to help them perform services for us. In addition, we may Collect, retain, use, and disclose your PI as required or permitted by applicable law. We treat all of these purposes as Other Business Purposes.
(d) Retaining Your Personal Data
Except as otherwise permitted, required by applicable law or regulation, to satisfy any legal or regulatory obligations, or to resolve disputes, we will retain your Personal Data (including the categories of Personal Data discussed in the sections above) for as long as necessary to fulfil the purposes for which we collected it. In determining what constitutes an appropriate retention period for Personal Data, we consider applicable legal requirements, the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we process your Personal Data, and whether those purposes can be achieved through other means.
- Categories of Personal Data Disclosed
2.1 We may disclose the following categories of PI to Service Providers for a Business Purpose, or, at your direction, with Third Parties such as sponsors of promotions, sweepstakes, or contests. We disclosed the following
| Category of Personal Information Disclosed for a Business Purpose |
Categories of Recipients |
- Identifiers
- Personal Records
- Characteristics
- Internet/Network Activity
- Customer Records/Commercial Information
- Geolocation Data
- Sensory Information
- Inferences
|
- Service Providers
- Marketing/Advertising Agencies
- Analytics & Retail Merchandising Vendors
- Marketing Mix Measurement Providers, Compliance, Tech Performance Measurement, and other Service
Providers
- Social Networks
- Albertsons’ Affiliates
- Governmental Authorities and Agencies
|
2.2 Categories of Personal Data Sold for a Business Purpose
We share your Personal Data with companies such as advertisers, marketing partners and platforms, data analytics providers, social media networks, and others to provide services that include, but is not limited to, product recommendations, delivering marketing messages, and sending you relevant offers. The types of PI shared may include unique identifiers (e.g., cookies and similar technologies), device information, geolocation data, commercial data, behavioral data, and inferences. We do not knowingly sell the PI of consumers under 16 years of age.
- Deidentified Patient Information
We collect and deidentify certain health care patient information in our capacity as a pharmacy health care provider. In some instances, we disclose, license, and/or sell the deidentified information derived from this health care patient information. To deidentify this health care patient information, we use either the deidentification methodology (1) described in Section 164.514(b)(2) of Title 45 of the Code of Federal Regulations, commonly known as the HIPAA safe harbor method or (2) described in Section 164.514(b)(1) of Title 45 of the Code of Federal Regulations, commonly known as the HIPAA expert determination method. As such, this deidentified information is not PI.
- California Consumer Privacy Rights
(a) Right to Know:
You have the right to request that we disclose to you the following information about Personal Data we Collect from you:
- categories of Personal Data collected;
- categories of sources of Personal Data collected;
- the business or commercial purpose for collecting or selling Personal Data;
- the categories of third parties with whom we share Personal Data; and
- the specific pieces of Personal Data we have collected about you over the past 12 months.
You also have a right to know if we have sold or disclosed your Personal Data for a business purpose over the past 12 months and, if so, the categories of Personal Data sold or disclosed and the categories of third parties to whom the Personal Data was sold or disclosed, along with the business or commercial purpose for which the Personal Data was sold or disclosed.
Once we receive your Request to Know, we are required to verify that you are the person that is the subject of the request (the “Verification Process”). The Verification Process consists of matching identifying information provided by you with the information we have about you in our records. Upon making a request, you will be asked to provide your name, email address, phone number, and request details. A confirmation email will be sent to the email address you provide to begin the process to verify your identity. If we cannot verify your identity, we will not be able to respond to your request.
California resident candidates, current and former employees, and independent contractors click here.
California resident business to business click here.
(b) Right to Request Deletion of Personal Data
You have the right to request the deletion of your Personal Data collected or maintained by us ("Request to Delete"), subject to certain exceptions permitted by law. Examples of such exceptions include: to complete transactions and provide services you have requested from us or that are reasonably anticipated, for security purposes, for legitimate internal business purposes, including maintaining business records, to comply with law, to exercise or defend legal claims, and to cooperate with law enforcement. If we deny your request, we will explain the reasons in our response and, if applicable, will provide guidance to cure deficiencies in your request.
To make a request to delete, please submit a verifiable consumer request pursuant to the instructions below. We will acknowledge your request within 10 business day and will attempt to respond substantively within 45 days. If we need additional time, we will let you know
- You may make a request via our online webform: click here.
- You may also make a request by phone by calling us at (877) 251-6559 (toll free).
Once we receive your request to delete, we are required to verify that you are the person that is the subject of the request (the “Verification Process”). The Verification Process consists of matching identifying information provided by you with the information we have about you in our records. Upon making a request, you will be asked to provide your name, email address, phone numbers and request details. A confirmation will be sent to the email address you provide to begin the process to verify your identity and to confirm that you want to delete your information. If we cannot verify your identity, we will not be able to respond to your request.
If you make a CCPA deletion request, your Personal Data will be maintained for loyalty program operations, unless you also terminate your applicable loyalty accounts using the online contact form: here or by calling customer service at 877-723-3929. You also have the option of requesting the deletion of your shopping history only.
California resident candidates, current and former employees, and independent contractors click here.
California resident business to business click here.
(c) Right to Correct Inaccurate Personal Data
You have the right to request that we correct inaccurate Personal Data that we maintain about you. We will take into account the nature of the Personal Data and the purposes for which we process it. We may require documentation from you in order to process your request, including your name, email address, phone number, and request details.
(d) Right to Opt-Out of Sale of Personal Data
You have the right to opt out of the sale of your Personal Data to third parties by clicking here and opting out. You may also request to opt-out by calling us at (877) 251-6559 (toll free). If you decide to opt-out, we will stop sharing your information with third parties. But please note that your use of our website may still be tracked by us and our service providers to perform functions that are necessary for our business such as hosting our website, ensuring there is no fraud, etc. These entities are contractually obligated to keep this information confidential and will not use it for any purpose other than for the services they provide to our business.
We also honor Global Privacy Control (GPC) signals from your browser. You can learn more about GPCs here. If you choose to use the GPC signal, you will need to download and turn it on for each supported browser or browser extension you use.
We will retain correspondence, documents and information related to any Request to Know, Request to Delete, Request to Correct, Request to Opt-Out, or Request to Limit for 24 months as required by law.
(e) Right to Limit the Use of Your Sensitive Personal Data
At this time, we do not process information that is subject to this limitation. At a future point when we do so, you can direct us to limit the use of your Sensitive Personal Data to uses that are reasonably necessary to provide our goods and services, or as needed:
- To ensure security and integrity
- For short-term, transient use, including for non-personalized advertising
- To maintain or service accounts, provide customer service, process or fulfill orders and transactions, verify customer information, process payments, provide financing, provide analytic services, provide storage, or other similar services
- To verify or maintain the quality or safety of a service or device owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance such services or devices
(f) Right to Non-Discrimination and Notice of Financial Incentives
You have the right to not receive discriminatory treatment for exercising your CCPA privacy rights. We do not use the fact that you have exercised or requested to exercise any CCPA rights for any purpose other than facilitating a response to your request.
- Notice of Financial Incentive
Our loyalty program, Albertsons Companies “[Banner] for U™” (i.e., “Albertsons for U™,” “Safeway for U™,” “Randalls for U™,” etc.) provides you with Rewards (i.e., Gas Rewards and Grocery Rewards) for your eligible in-store and online purchases. This Program is subject to termination at any time at our sole discretion.
|
Program
|
Incentive Offered
|
Material Terms
|
How to Opt-In
|
|
“[Banner] for U™”
(i.e., “Albertsons for U™,” “Safeway for U™”, “Randalls for U™,” etc.)
|
Provides consumers with customized discount coupons, complimentary in-store Wi-Fi, and birthday treat (optional). Your Albertsons Companies “[Banner] for U™” account earns points for every dollar spent on eligible purchases. Points are accumulated to earn Rewards that may be redeemed on future gas or grocery purchases.
|
- Available at participating stores.
- Categories of Personal Data collected:
- Identifiers such as name, email address, telephone number, zip code, month and date of birth (optional).
- Customer Accounts /Commercial Information such as shopping history, coupons/points redeemed, points earned, preferred Market Store.
- Internet/Network Activity such as IP address, activity logs, browsing history.
- Geolocation Data.
- Inferences drawn from one or more of the above, including a consumer’s shopping history, that reflects a consumer’s shopping preferences.
- Additional information available at https://www.albertsons.com/justforu-guest.html
|
- Register for an account online or on the mobile app.
|
NOTE: As of August 3, 2021, we will begin phasing out the Club Card program. However, consumers who have active Club Card memberships will not be affected and will continue to receive the incentive offered under the Club Card loyalty program.
The notices of financial incentive for Albertsons previously offered loyalty programs “just for U and Gas Reward/Grocery Reward/Club Cards are as follows:
|
Program
|
Incentive Offered
|
Material Terms
|
How to Opt-In
|
|
“just for U” (including Gas Rewards and Grocery Rewards)
|
Provided consumers with customized discount coupons.
Your “just for U” account earned points for every dollar spent on eligible purchases. Points were accumulated to earn Rewards that were redeemed for future gas or grocery purchases.
|
- Available at participating stores.
- Categories of Personal Data collected:
- Identifiers such as name, email address, telephone number, zip code.
- Customer Accounts /Commercial Information such as shopping history, coupons/points redeemed, points earned, preferred Market Store.
- Internet/Network Activity such as IP address, activity logs, browsing history.
- Geolocation Data.
- Inferences drawn from one or more of the above, including a consumer's shopping history, that reflects a consumer’s shopping preferences.
- Additional information available at https://www.safeway.com/justforu-guest.html
|
- Register for an account online or on the mobile app.
|
|
Club Card (including Gas Rewards and Grocery Rewards)
|
Provides customers with instant advertised discounts on in-store purchases at participating locations.
Club Card also earns points for every dollar spent on eligible purchases. Points are accumulated to earn Rewards that may be redeemed on future gas or grocery purchases
|
- Categories of Personal Data collected:
- Identifiers such as telephone number.
- Customer Accounts /Commercial Information such as shopping history, coupons/points redeemed, points earned.
- Inferences drawn from one or more of the above, including a consumer’s shopping history, that reflects a consumer’s shopping preferences.
|
- Requesting a physical card in-store; providing a 10-digit number (e.g., phone number).
|
Value of the Consumer’s Data
We estimate the value of consumers’ data to be, on average, approximately $1.33 per consumer in 2022. Albertsons has made the following good faith estimate of the value of consumers’ data based on expenses related to the collection, retention, and offering of Albertsons loyalty programs as permitted by Reg. §999.337(a)(5) and (a)(6). The expenses related to the collection and retention of consumer PI as well as expenses related to the total program operating expenses is calculated by measuring the people costs and IT costs incurred by Albertsons in the fiscal year 2022.
Withdrawing From Loyalty Programs
You have the right to withdraw from the above programs at any time. You may do so by:
- Using the online contact form: Here or by calling customer service at 877-723-3929
- Authorized Agent
You may designate an authorized agent to exercise any of the above California privacy rights on your behalf, subject to the agent request requirements of the CCPA. Authorized Agents may make requests under the CCPA on behalf of California Consumers by contacting us here.
Please note, for your safety and security, we will require authorized agents to provide proof of the consumer's consent and designation of the authorized agent for the purpose of making the request and will require authorized agents to provide information necessary to verify the identity of the consumer who is the subject of the request. We may also require that a consumer verify his/her own identity directly with us before we respond to an authorized agent's request.
We reserve the right to deny requests in certain circumstances, such as where we have a reasonable belief that the request is fraudulent.
- CCPA Metrics
You can view the details of Albertsons’ CCPA metrics report here
OTHER CALIFORNIA DISCLOSURE INFORMATION
California Do Not Track Notice
California law requires us to let you know how we respond to web browser Do Not Track (DNT) signals. Because there currently isn't an industry or legal standard for recognizing or honoring DNT signals, we don't respond to them at this time.
California’s Shine the Light law
If you are a California resident, you are entitled once a year, free of charge, to request and obtain certain information regarding our disclosure, if any, of certain categories of Personal Data to third parties for their direct marketing purposes in the preceding calendar year. To request the above information, please e-mail us at: privacyoffice@albertsons.com. or write to us at Albertsons Companies, Inc. Attn: Albertsons Privacy Office, 250 Parkcenter Blvd. Boise, ID 83706 with a reference to CA Disclosure Information.
- Changes
We reserve the right to change this California Privacy Notice from time to time. Changes shall become effective on the date they are posted.
Nevada
Use our online form to submit a privacy request.