California Business Privacy Notice

This California Business Privacy Notice applies to California residents and tells you how Target collects, uses, shares, discloses, and retains (collectively “processes”) your personal information. We are committed to processing your personal information responsibly and in accordance with applicable laws and internal policies. For the purpose of this California specific Privacy Notice, residents include individuals whose personal information is processed within a business context (“Business Contacts”). Examples of Business Contacts include:

• Individuals acting on behalf of a current, former, or prospective service provider, vendor, or other business partner
• Individuals participating in Target’s affiliate marketing or supplier programs
• Individuals participating in Target’s scholarship programs or other community outreach programs in partnership with community organizations
• Media contacts, investors, government officials, social media influencers, and other third parties interacting with Target

Certain terms used in this Notice have the meanings given to them in the California Consumer Privacy Act.

Notice of Collection and Use of Personal Information

As a part of business-related activities, we may need to collect and use your personal information for normal business management functions, internal administration, and compliance with legal and regulatory obligations.  Details below apply to current processing as well as the 12-month period prior to the date this Privacy Notice was last updated.

Categories of Personal Information Collected

Target may collect the following categories of personal information about Business Contacts.

• Identifiers (e.g., email address, name, mailing address, phone number, state identification)
• Characteristics of protected classifications (e.g., age, disability, gender, military status, race)
• Commercial information (e.g., products or services purchased)
• Biometric information (e.g., fingerprint)
• Internet or other electronic network activity (e.g., activity while on our company network)
• Geolocation data (e.g., truck location)
• Audio, electronic, or visual information (e.g., phone calls, photos, video)
• Professional or employment-related information (e.g., resume information, occupation details, education details, certifications and professional associations, social media profile, previous employment details)
• Education information (i.e., education information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99))
• Inferences (e.g., preferences, characteristics, behavior)

Under California law, some information within the categories above may be considered sensitive personal information, including government identifiers, biometrics, precise geolocation data. If required, consent will be obtained before collecting sensitive personal information. Target does not use or disclose sensitive personal information for business purposes other than those permitted by California law. 

Purposes for Collecting Personal Information

Target may use personal information of Business Contacts for the purposes described below.

• Establish, manage, terminate or otherwise administer the business relationship
• Establish a business point of contact to facilitate communications
• Marketing our products and services
• Comply with legal requirements
• Ensure compliance with Target’s requirements, policies, and procedures
• Detect or prevent theft or fraud, including the security of company-held information
• Conduct investigations
• Assist law enforcement and respond to legal/regulatory inquiries
• Fulfill such other business purposes as reasonably determined by Target

Target does not process sensitive personal information with the purpose of inferring characteristics about Business Contacts.

To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Retention of Personal Information 

We retain your personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy or for the period legally permitted or required. Target’s retention criteria take into consideration legal obligations, business needs, potential risks of harm and information type. At the end of the retention period, personal information will be deleted, destroyed or deidentified.

Sources of Personal Information

Target may obtain personal information about Business Contacts from the following categories of sources:

• Directly from you
• Your employer
• Your device(s)
• Internet service providers
• Advertising networks
• Business contacts who provide information about you
• Our affiliates and subsidiaries
• Vendors who provide services on our behalf
• Government entities
• Social networks
• Background check services

Disclosure of Personal Information

Target discloses personal information about Business Contacts to service providers and contractors for business purposes related to managing the business relationship. The categories of personal information include: 

• Identifiers 
• Characteristics of protected classifications 
• Commercial information 
• Internet or other electronic network activity 
• Geolocation data 
• Audio, electronic or visual information 
• Professional or employment-related information 
• Education information 

We may disclose the information we collect with Target Corporation’s affiliates and subsidiaries and with third parties, including business partners (e.g., benefit administrators and training providers), government entities (e.g., regulators or courts), and professional services organizations (e.g., auditors or law firms). We may also disclose the information to third parties in connection with corporate transactions. 

Sell or Share (for Cross Context Behavior Advertising) of Personal Information

Target does not share for cross-context behavioral advertising purposes or sell personal information about Business Contacts, except in relation to its Roundel business.

To assist with Roundel’s business development, Target may share (for cross context behavioral advertising) personal information with third parties. Target does not sell personal information about Business Contacts for money, but the sharing may also be considered a sale (as defined by California law). Roundel does not have actual knowledge that it sells or shares (for cross-context behavioral advertising) the personal information of minors under the age of 16. The following categories of personal information about Business Contacts are shared with or sold to the following categories of third parties.

California Privacy Rights

If you are a Business Contact, you have the following rights:

• Access: You have the right to request, twice in a 12-month period, that we disclose to you the personal information or categories of personal information we have collected, used, disclosed, and sold or shared about you.
• Correction: You have the right to request that we correct the personal information we maintain about you, if that information is inaccurate. 
• Deletion: You have the right to request that we delete certain personal information we have collected from you.
• Opt out of sale or share for cross-context behavioral advertising (Roundel.com only): You have the right to request that we do not sell or share your personal information for cross-context behavior advertising.

How to Submit a Request. To submit an access, correction, or deletion request for yourself or as an authorized agent, please email privacy.request@target.com or call us at 1-800-831-6880.

For Roundel.com, to opt out of sale or share for cross-context behavioral advertising, click this link or call 1-800-831-6880. Roundel also recognizes an opt-out preference signal on your device or browser (e.g., Global Privacy Control). We process these opt-out preference signals in a frictionless manner, allowing individuals to opt out of the sale and sharing of their personal information without having to make an individualized request or provide information beyond what is necessary to process the signal. Depending on which opt-out preference signal you use, our processing of the signal may be limited to the specific browser or device that you use.

Verifying Requests. To help protect your privacy and maintain security, we will take steps to verify your identity before granting your access, correction or deletion request. You will be required to submit specific pieces of information in order for us to search our systems and determine if we have information about you.  If we can locate information about you, then we will fulfill your request as required by law.

If you are an authorized agent, you will be required to submit your information as well as specific pieces of information about the individual for whom you are making a request.   You will also be asked to fill out a certification form confirming your information and certifying you have the right to make a request on behalf of the individual. 

Non-Discrimination: Target will not discriminate against you because you exercise your rights. For example, Target will not deny you business if you make an access request. 

How To Contact Us

If you have any questions regarding this Privacy Notice or our privacy practices, please contact privacy.request@target.com.

Last Update: January 1, 2026