Privacy Policy Update: The Privacy Policy below goes into effect on January 1, 2023.

Last Updated: January 1, 2023

Prior Version | PDF Copy


Welcome

Thank you for shopping at an Albertsons Companies Store! You clicked to get to this page, so we know that you are interested in our privacy practices and want to learn more. That is great, and we want to explain it to you. While we would love you to read this entire privacy policy (please do, we spent a lot of time drafting this), we know that you may not have time today. To make it easier for you to find how this policy impacts you and your information, we have broken it down into how you interact with our company and our banners. Hopefully, this helps you find your answer quickly.

We are Albertsons Companies, Inc.

We are Albertsons Companies, Inc. (“Company,” “we,” “us,” and “our”). Our banners serve customers, guests, and patients across the United States. 

This Privacy Policy outlines how we collect, use, process, and share the Personal Data that you entrust to us (including health data covered by the Health Insurance Portability and Accountability Act (HIPAA)). At this time, this Privacy Policy does not include our United banner. The United privacy policy is available here.

State Specific Disclosures (California & Nevada)

California Residents

If you’re a resident of California, there are a few more things that we need to explain regarding Personal Data as outlined in several California laws (including the California Consumer Privacy Act (CCPA) as amended from time to time). Any capitalized term (yes, our capitalization efforts are intentional) that we haven’t otherwise defined in this privacy policy have the same definition as in the CCPA, California Civil Code § 1798.100, et seq. (together with the regulations thereunder, the “CCPA”), as applicable.

This section doesn’t apply to Personal Data we capture from job applicants, current and former associates and independent contractors, and business-to-business activities. With one exception, sections 1 and 2 below apply to Albertsons associates, candidates, and independent contractors. De-identified, aggregated, and some publicly available data are not considered Personal Data under California law and does not apply to this section, or the rights outlined below.

This Notice applies to the Personal Data we collected from you during the 12 months prior to the effective date of this Notice. The information we have collected and process depends on what services and interactions you have had with us (e.g., if you haven’t signed up for a FreshPass, we won’t have FreshPass information).

  1. Collection and Use of Personal Data

(a) Categories of Personal Data We Collected About California Consumers:

There may be additional information that we collected that meets the CCPA’s definition of PI but is not reflected by a category, in which case we will treat it as PI as required by the CCPA but will not include it when we are required to describe our practices by category of Personal Data.

As permitted by applicable law, we do not treat De-identified data or Aggregate Consumer Information as PI and we reserve the right to convert or permit others to convert your PI into De-identified or Aggregate Consumer Information. We have no obligation to re-identify such information or keep it longer than we need it for our own purposes.

(b) Categories of Sources of Personal Data that We Collect:

(c) Business or Commercial Purposes:

Additional Business Purposes for which we Collect, and may disclose, PI include sharing PI with Third Parties for other than a Sale or one of the foregoing Business Purposes as required or permitted by applicable law, such as to our vendors that perform services for us, to the government or private parties to comply with law or legal process, to the Consumer or other parties at the Consumer’s request or direction, for the additional purposes explained in our online Privacy Policy or at the point of collection, and to assignees as part of a merger or asset sale (“Other Business Purposes”). Subject to restrictions and obligations of the CCPA, our vendors may also use your PI for some or all of the above listed Business Purposes and engage subcontractors to help them perform services for us. In addition, we may Collect, retain, use, and disclose your PI as required or permitted by applicable law. We treat all of these purposes as Other Business Purposes.

(d) Retaining Your Personal Data

Except as otherwise permitted, required by applicable law or regulation, to satisfy any legal or regulatory obligations, or to resolve disputes, we will retain your Personal Data (including the categories of Personal Data discussed in the sections above) for as long as necessary to fulfil the purposes for which we collected it. In determining what constitutes an appropriate retention period for Personal Data, we consider applicable legal requirements, the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we process your Personal Data, and whether those purposes can be achieved through other means.

  1. Categories of Personal Data Disclosed

2.1 We may disclose the following categories of PI to Service Providers for a Business Purpose, or, at your direction, with Third Parties such as sponsors of promotions, sweepstakes, or contests. We disclosed the following

Category of Personal Information Disclosed for a Business Purpose Categories of Recipients
  1. Identifiers
  2. Personal Records
  3. Characteristics
  4. Internet/Network Activity
  5. Customer Records/Commercial Information
  6. Geolocation Data
  7. Sensory Information
  8. Inferences
  • Service Providers
  • Marketing/Advertising Agencies
  • Analytics & Retail Merchandising Vendors
  • Marketing Mix Measurement Providers, Compliance, Tech Performance Measurement, and other Service Providers
  • Social Networks
  • Albertsons’ Affiliates
  • Governmental Authorities and Agencies

2.2 Categories of Personal Data Sold for a Business Purpose

We share your Personal Data with companies such as advertisers, marketing partners and platforms, data analytics providers, social media networks, and others to provide services that include, but is not limited to, product recommendations, delivering marketing messages, and sending you relevant offers. The types of PI shared may include unique identifiers (e.g., cookies and similar technologies), device information, geolocation data, commercial data, behavioral data, and inferences. We do not knowingly sell the PI of consumers under 16 years of age. 

  1. Deidentified Patient Information

We collect and deidentify certain health care patient information in our capacity as a pharmacy health care provider. In some instances, we disclose, license, and/or sell the deidentified information derived from this health care patient information. To deidentify this health care patient information, we use either the deidentification methodology (1) described in Section 164.514(b)(2) of Title 45 of the Code of Federal Regulations, commonly known as the HIPAA safe harbor method or (2) described in Section 164.514(b)(1) of Title 45 of the Code of Federal Regulations, commonly known as the HIPAA expert determination method. As such, this deidentified information is not PI.

  1. California Consumer Privacy Rights

(a) Right to Know:

You have the right to request that we disclose to you the following information about Personal Data we Collect from you:

You also have a right to know if we have sold or disclosed your Personal Data for a business purpose over the past 12 months and, if so, the categories of Personal Data sold or disclosed and the categories of third parties to whom the Personal Data was sold or disclosed, along with the business or commercial purpose for which the Personal Data was sold or disclosed.

Once we receive your Request to Know, we are required to verify that you are the person that is the subject of the request (the “Verification Process”). The Verification Process consists of matching identifying information provided by you with the information we have about you in our records. Upon making a request, you will be asked to provide your name, email address, phone number, and request details. A confirmation email will be sent to the email address you provide to begin the process to verify your identity. If we cannot verify your identity, we will not be able to respond to your request.

California resident candidates, current and former employees, and independent contractors click here.

California resident business to business click here.

(b) Right to Request Deletion of Personal Data

You have the right to request the deletion of your Personal Data collected or maintained by us ("Request to Delete"), subject to certain exceptions permitted by law. Examples of such exceptions include: to complete transactions and provide services you have requested from us or that are reasonably anticipated, for security purposes, for legitimate internal business purposes, including maintaining business records, to comply with law, to exercise or defend legal claims, and to cooperate with law enforcement. If we deny your request, we will explain the reasons in our response and, if applicable, will provide guidance to cure deficiencies in your request.

To make a request to delete, please submit a verifiable consumer request pursuant to the instructions below. We will acknowledge your request within 10 business day and will attempt to respond substantively within 45 days. If we need additional time, we will let you know

Once we receive your request to delete, we are required to verify that you are the person that is the subject of the request (the “Verification Process”). The Verification Process consists of matching identifying information provided by you with the information we have about you in our records. Upon making a request, you will be asked to provide your name, email address, phone numbers and request details. A confirmation will be sent to the email address you provide to begin the process to verify your identity and to confirm that you want to delete your information. If we cannot verify your identity, we will not be able to respond to your request.

If you make a CCPA deletion request, your Personal Data will be maintained for loyalty program operations, unless you also terminate your applicable loyalty accounts using the online contact form: here or by calling customer service at 877-723-3929. You also have the option of requesting the deletion of your shopping history only.

California resident candidates, current and former employees, and independent contractors click here.

California resident business to business click here.

(c) Right to Correct Inaccurate Personal Data

You have the right to request that we correct inaccurate Personal Data that we maintain about you. We will take into account the nature of the Personal Data and the purposes for which we process it. We may require documentation from you in order to process your request, including your name, email address, phone number, and request details.

(d) Right to Opt-Out of Sale of Personal Data

You have the right to opt out of the sale of your Personal Data to third parties by clicking here and opting out. You may also request to opt-out by calling us at (877) 251-6559 (toll free). If you decide to opt-out, we will stop sharing your information with third parties. But please note that your use of our website may still be tracked by us and our service providers to perform functions that are necessary for our business such as hosting our website, ensuring there is no fraud, etc. These entities are contractually obligated to keep this information confidential and will not use it for any purpose other than for the services they provide to our business.

We also honor Global Privacy Control (GPC) signals from your browser. You can learn more about GPCs here. If you choose to use the GPC signal, you will need to download and turn it on for each supported browser or browser extension you use.

 We will retain correspondence, documents and information related to any Request to Know, Request to Delete, Request to Correct, Request to Opt-Out, or Request to Limit for 24 months as required by law.

(e) Right to Limit the Use of Your Sensitive Personal Data

At this time, we do not process information that is subject to this limitation. At a future point when we do so, you can direct us to limit the use of your Sensitive Personal Data to uses that are reasonably necessary to provide our goods and services, or as needed: 

(f) Right to Non-Discrimination and Notice of Financial Incentives

You have the right to not receive discriminatory treatment for exercising your CCPA privacy rights. We do not use the fact that you have exercised or requested to exercise any CCPA rights for any purpose other than facilitating a response to your request.

  1. Notice of Financial Incentive

Our loyalty program, Albertsons Companies “[Banner] for U™” (i.e., “Albertsons for U™,” “Safeway for U™,” “Randalls for U™,” etc.) provides you with Rewards (i.e., Gas Rewards and Grocery Rewards) for your eligible in-store and online purchases. This Program is subject to termination at any time at our sole discretion.

Program

Incentive Offered

Material Terms

How to Opt-In

“[Banner] for U™”
(i.e., “Albertsons for U™,” “Safeway for U™”, “Randalls for U™,” etc.)

Provides consumers with customized discount coupons, complimentary in-store Wi-Fi, and birthday treat (optional). Your Albertsons Companies “[Banner] for U™” account earns points for every dollar spent on eligible purchases. Points are accumulated to earn Rewards that may be redeemed on future gas or grocery purchases.
  • Available at participating stores.
  • Categories of Personal Data collected:
    • Identifiers such as name, email address, telephone number, zip code, month and date of birth (optional).
    • Customer Accounts /Commercial Information such as shopping history, coupons/points redeemed, points earned, preferred Market Store.
    • Internet/Network Activity such as IP address, activity logs, browsing history.
    • Geolocation Data.
    • Inferences drawn from one or more of the above, including a consumer’s shopping history, that reflects a consumer’s shopping preferences.
  • Additional information available at https://www.albertsons.com/justforu-guest.html
  • Register for an account online or on the mobile app.

NOTE: As of August 3, 2021, we will begin phasing out the Club Card program. However, consumers who have active Club Card memberships will not be affected and will continue to receive the incentive offered under the Club Card loyalty program. 

The notices of financial incentive for Albertsons previously offered loyalty programs “just for U and Gas Reward/Grocery Reward/Club Cards are as follows:

Program

Incentive Offered

Material Terms

How to Opt-In

“just for U” (including Gas Rewards and Grocery Rewards)

Provided consumers with customized discount coupons.

Your “just for U” account earned points for every dollar spent on eligible purchases. Points were accumulated to earn Rewards that were redeemed for future gas or grocery purchases.
  • Available at participating stores.
  • Categories of Personal Data collected:
    • Identifiers such as name, email address, telephone number, zip code.
    • Customer Accounts /Commercial Information such as shopping history, coupons/points redeemed, points earned, preferred Market Store.
    • Internet/Network Activity such as IP address, activity logs, browsing history.
    • Geolocation Data.
    • Inferences drawn from one or more of the above, including a consumer's shopping history, that reflects a consumer’s shopping preferences.
  • Additional information available at https://www.safeway.com/justforu-guest.html
  • Register for an account online or on the mobile app.

Club Card (including Gas Rewards and Grocery Rewards)

Provides customers with instant advertised discounts on in-store purchases at participating locations.

Club Card also earns points for every dollar spent on eligible purchases. Points are accumulated to earn Rewards that may be redeemed on future gas or grocery purchases
  • Categories of Personal Data collected:
    • Identifiers such as telephone number.
    • Customer Accounts /Commercial Information such as shopping history, coupons/points redeemed, points earned.
    • Inferences drawn from one or more of the above, including a consumer’s shopping history, that reflects a consumer’s shopping preferences.
  • Requesting a physical card in-store; providing a 10-digit number (e.g., phone number).

Value of the Consumer’s Data

We estimate the value of consumers’ data to be, on average, approximately $1.33 per consumer in 2022. Albertsons has made the following good faith estimate of the value of consumers’ data based on expenses related to the collection, retention, and offering of Albertsons loyalty programs as permitted by Reg. §999.337(a)(5) and (a)(6). The expenses related to the collection and retention of consumer PI as well as expenses related to the total program operating expenses is calculated by measuring the people costs and IT costs incurred by Albertsons in the fiscal year 2022.

Withdrawing From Loyalty Programs

You have the right to withdraw from the above programs at any time. You may do so by:

  1. Authorized Agent

You may designate an authorized agent to exercise any of the above California privacy rights on your behalf, subject to the agent request requirements of the CCPA. Authorized Agents may make requests under the CCPA on behalf of California Consumers by contacting us here.

Please note, for your safety and security, we will require authorized agents to provide proof of the consumer's consent and designation of the authorized agent for the purpose of making the request and will require authorized agents to provide information necessary to verify the identity of the consumer who is the subject of the request. We may also require that a consumer verify his/her own identity directly with us before we respond to an authorized agent's request.

We reserve the right to deny requests in certain circumstances, such as where we have a reasonable belief that the request is fraudulent.

  1. CCPA Metrics

You can view the details of Albertsons’ CCPA metrics report here

OTHER CALIFORNIA DISCLOSURE INFORMATION

California Do Not Track Notice

California law requires us to let you know how we respond to web browser Do Not Track (DNT) signals. Because there currently isn't an industry or legal standard for recognizing or honoring DNT signals, we don't respond to them at this time.

California’s Shine the Light law

If you are a California resident, you are entitled once a year, free of charge, to request and obtain certain information regarding our disclosure, if any, of certain categories of Personal Data to third parties for their direct marketing purposes in the preceding calendar year. To request the above information, please e-mail us at: [email protected]. or write to us at Albertsons Companies, Inc. Attn: Albertsons Privacy Office, 250 Parkcenter Blvd. Boise, ID 83706 with a reference to CA Disclosure Information.

  1. Changes

We reserve the right to change this California Privacy Notice from time to time. Changes shall become effective on the date they are posted.

Nevada

Use our online form to submit a privacy request.