Privacy Notice for Colorado, Connecticut, Utah and Virginia Residents

Last Updated April 26, 2024

This Privacy Notice applies to information that is linked or reasonably linkable to an identified or identifiable natural person (“Personal Data”) of Colorado residents to the extent the information is subject to the Colorado Privacy Act (CPA), of Connecticut residents to the extent the information is subject to the Connecticut Data Privacy Act (CTDPA), of Utah residents to the extent the information is subject to the Utah Consumer Privacy Act (UTCPA), and of Virginia residents to the extent the information is subject to the Virginia Consumer Data ‎Protection Act (VCDPA)‎. This Privacy Notice does not apply to Personal Data collected pursuant to various exemptions including for (i) information collected subject to the federal Gramm-Leach-Bliley Act and its implementing regulations, (ii) medical and health information covered by HIPAA, (iii) information related to an individual acting in a commercial or employment context, and (iv) de-identified or publicly available information.

How we process Personal Data

Please review the below chart for information about the categories of Personal Data we process; the purpose for processing Personal Data; the categories of Personal Data that we share with third parties, if any; and the categories of third parties, if any, with whom we share Personal Data.

Category of Personal Data Processed	Examples of Personal Data Processed	Purpose(s) for Which Personal Data is Processed	Categories of Third Parties to Which Personal Data is Disclosed
Identifiers	A real name, alias, postal address, unique personal identifier, social security number, online identifier, Internet Protocol address, email address, account name, driver’s license number, or other similar identifiers.	To provide products, services and access to our websites, mobile applications, and other communication systems and to communicate with you about our products and services.	To cities, municipalities, state and other governmental entities and agencies (“Government Entities”) to which WM provides services. To affiliates and subsidiaries of WM and their employees (“Affiliates”); To companies that support our business, such as waste vendors, business vendors, payment processors, information technology vendors, etc. (“Service Providers”).
Characteristics of protected classifications	Race, color, age, ethnicity, national origin, citizenship, religion or creed, marital status, medical condition, gender, veteran, military status or other similar information.	To improve service, and provide targeted customer experiences and service offerings.	Affiliates and Service Providers. Government Entities to which WM provides services.
Commercial Information	Products or services purchased, obtained, or considered, or other purchasing histories or tendencies.	To improve service, and provide targeted customer experiences and service offerings.	Affiliates and Service Providers. Government Entities to which WM provides services.
Biometric Information	We do not process this category of Personal Data.
Internet or other electronic network activity information	Browsing history, search history, and interaction with websites, apps & ads, and other similar information.	To provide targeted customer experience and service offerings. For security and operations purposes related to the safety and functionality of our information systems.	Affiliates and Service Providers. Government Entities to which WM provides services.
Geolocation data	Physical location and/or movements.	For purposes of service verification.	Affiliates and Service Providers. Government Entities to which WM provides services.
Sensory Data	Includes audio, electronic, visual, thermal, olfactory, or similar information such as photographs and images (e.g., that you provide us) and call recordings (e.g., of customer support calls). Also includes recordings from WM locations, devices, or vehicles related to safety and work at or with WM in addition to photos or videos of containers at a customers’ location, and electronic, visual, or similar information, photographic and videographic images captured at WM sites.	Quality control; compliance, To provide and improve services, for service verification, safety, quality control and compliance; and images and videos captured at WM sites for security purposes.	Affiliates and Service Providers. Government Entities to which WM provides services.
Sensitive Personal Data	Government identifiers.	For payment and other authentication purposes.	Affiliates and Service Providers. Government Entities to which WM provides services.

Sale of Personal Data and Use for Targeted Advertising

We do not sell your Personal Data for monetary consideration or as that term is traditionally defined. However, we do engage in certain activities related to marketing, advertising and data analytics that could be a “sale” of personal information under the CPA or CTDPA or engaging in “targeted advertising” under the CPA, CTDPA, UTCPA, VCDPA. We engage in such activities in order to provide you with certain communications and marketing about our products and services. We also use these tools to collect analytics and other data about your interactions with our Site and other services.

To learn more about our online collection of information, or to modify your cookies settings, please review our online privacy policy: ‎www.wm.com/privacy.‎ If you wish to opt-out of the processing of Personal Data for targeted advertising or the sale of Personal Data, please click on the “Your Privacy Choices” link on the footer of the page. In the preceding 12 months, we have sold or shared the following categories of personal information (as described in more detail above) to the following categories of third parties:

Category of Personal Information Sold or Shared	Categories of Third Parties to Which Personal Information is Sold or Shared
Identifiers	Online advertising services and networks Social networks Data analytics providers Business and joint marketing providers
Personal Information Categories Listed in the California Customer Records statue (Cal. Civ. Code 1798.80(e))
Commercial Information
Internet or other electronic network activity information

Your Privacy Rights

Depending on where you are a resident, you have certain rights to your personal information under state privacy laws. Please note that the CPA, CTDPA, UTCPA and VCDPA do not restrict our ability to do certain things like comply with other laws or comply with regulatory investigations. We also reserve the right to retain, and not to delete, certain personal information after receipt of a request to delete information from a Covered Resident where permitted by the CPA, CTDPA, UTCPA and VCDPA or another law or regulation.

Right to Know and Access

You have the right to request that we confirm whether or not we are processing your Personal Data and to request access to that Personal Data. To submit a request, please review the below section, “Submitting Consumer Requests.”

Right to Obtain a Copy of Personal Data

You have the right to obtain a copy of your Personal Data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller, where the processing is carried out by automated means. To submit a request please review the below section, “Submitting Consumer Requests.”

Right to Request Deletion

You have the right to request that we delete Personal Data about you that we process. To submit a request, please review the below section, “Submitting Consumer Requests.”

You should be aware, however, that we are allowed to retain your Personal Data under certain conditions, even if you have asked us to delete it, such as when retaining your Personal Data is necessary for us to complete a transaction with you or provide you with a good or service you have requested. We will notify you of any denial of your deletion request and the reason for such denial.

Right to Request Correction

You may have the right to request that we correct inaccuracies in your Personal Data, taking into account the nature of the Personal Data and the purposes of the processing of your Personal Data. To submit a request, please review the section below, “Submitting Consumer Requests.”

Right to Opt Out of Certain Processing of Personal Data

Consumers have the right to opt out of certain categories of processing of Personal Data. These include the right to opt out for purposes of (i) targeted advertising, (ii) the sale of Personal Data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.

We do not process Personal Data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects and therefore these opt out rights do not apply.

Right to Appeal

You may have the right to appeal our responses to your consumer rights requests. If you believe you have a basis for such an appeal, please contact us here: you can visit our privacy portal here, or call ‎ 855-782-6445‎ to make an appeal request and provide any required information to submit your appeal.

Submitting Consumer Requests

Consumer Rights Requests

You can submit a request for access, deletion, or correction (“Consumer Rights Request”) through our portal here, or by calling ‎ 855-782-6445‎.

We are only required to respond to verifiable Consumer Rights Requests made by you , or someone legally authorized to act on your behalf, may make a Consumer Rights Request related to your Personal Data. You may also make a Consumer Rights Request on behalf of your minor child.

Making a Consumer Rights Request does not require you to create an account with us.

When you submit a Consumer Rights Request, we will take steps to verify your request ‎by email or telephone call. In some cases, we may request additional information in order to verify ‎your request or where necessary to process your request. If we are unable to adequately verify a ‎request, we will notify the requestor. Authorized agents will be required to provide proof of their ‎authorization and we may also require that the relevant consumer directly verify their identity and ‎the authority of the authorized agent.‎

We will only use Personal Data provided in a consumer request to verify the requestor's identity or authority to make the request.

We cannot respond to your request or provide you with Personal Data if we cannot verify your identity or authority to make the request and confirm the Personal Data relates to you.

Opt-Out of Sale and Targeted Advertising

You can exercise your right to opt-out of the sale or processing of Personal Data for targeted advertising by clicking the “Your Privacy Choices” link on the footer of the page. If you choose to exercise this right through an opt-out preference signal and we detect such a signal, it will be honored.

Changes to this State Privacy Notice

From time to time, we may update or revise this State Privacy Notice. If there are changes to the terms of this State Privacy Notice, documents containing the revised policy on the relevant website will be updated.

Contact for Additional Information

If you have questions about this policy, please contact us at:

Email: [email protected]

Address: WM 800 Capitol St. Houston, TX 77002

Attn: WM Privacy Team