This Privacy Notice for Colorado, Connecticut, Delaware, Iowa, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia residents (“State-Specific Privacy Notice”) applies to information that is linked or reasonably linkable to an identified or identifiable natural person (“Personal Data”) who is a resident of the state and subject to applicable state privacy laws (collectively “Covered Resident”). If you are a Covered Resident, please review the information below about how and why we collect, use and disclose your Personal Data and your potential rights with regard to your Personal Data under applicable state privacy laws. Terms used herein have the meaning ascribed to them under the appliable state privacy law. The rights described herein are subject to exemptions and other limitations under applicable law. If you are not a Covered Resident, please see our Privacy Policy.
State-Specific Privacy Notice
Last Updated November 6, 2025
How We Process Personal Data
Categories of Personal Data we process, our purposes for processing it, and the categories of third parties to which we disclose Personal Data
Please review the below chart for information about the categories of Personal Data we process; the purpose for processing Personal Data; the categories of Personal Data that we share with third parties, if any; and the categories of third parties, if any, with whom we share Personal Data.
Category of Personal Data Processed | Examples of Personal Data Processed | Purpose(s) for Which Personal Data is Processed | Categories of Third Parties to Which Personal Data is Disclosed |
Identifiers | A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers. | To provide products, services and access to our websites, mobile applications, and other communication systems and to communicate with you about our products and services. | To cities, municipalities, state and other governmental entities and agencies (“Government Entities”) to which WM provides services. To affiliates and subsidiaries of WM and their employees (“Affiliates”); To companies that support our business, such as waste vendors, business vendors, payment processors, information technology vendors, etc. (“Service Providers”). |
Commercial Information | Products or services purchased, obtained, or considered, or other purchasing histories or tendencies. | To improve service and provide targeted customer experiences and service offerings. | Affiliates and Service Providers. Government Entities to which WM provides services. |
Biometric Information | We do not process this category of Personal Data. | ||
Internet or other electronic network activity information | Browsing history, search history, and interaction with websites, apps & ads, and other similar information. | To provide targeted customer experience and service offerings. For security and operations purposes related to the safety and functionality of our information systems. | Affiliates and Service Providers. Government Entities to which WM provides services. |
Geolocation data | Physical location and/or movements. | For purposes of service verification. | Affiliates and Service Providers. Government Entities to which WM provides services. |
Sensory Data | Includes audio, electronic, visual, thermal, olfactory, or similar information such as photographs and images (e.g., that you provide us) and call recordings (e.g., of customer support calls). Also includes recordings from WM locations, including CCTV, devices, or vehicles related to safety and work at or with WM in addition to photos or videos of containers at a customers’ location, and electronic, visual, or similar information, photographic and videographic images captured at WM and customer sites. | Quality control; compliance, To provide and improve services, for service verification, safety, quality control and compliance; and images and videos captured at WM sites for security purposes. | Affiliates and Service Providers. Government Entities to which WM provides services. |
Sensitive Personal Data | Government identifiers. | For payment and other authentication purposes. | Affiliates and Service Providers. Government Entities to which WM provides services. |
Sale of Personal Data and Use for Targeted Advertising
We do not sell your Personal Data for monetary consideration or as that term is traditionally defined. However, we do engage in certain activities related to marketing, advertising and data analytics that could be a “sale” of Personal Data or engaging in “targeted advertising” under the applicable state privacy laws. We engage in such activities in order to provide you with certain communications and marketing about our products and services. We also use these tools to collect analytics and other data about your interactions with our Site and other services.
To learn more about our online collection of information, or to modify your cookies settings, please review our online Privacy Policy: www.wm.com/privacy. If you wish to opt-out of the processing of Personal Data for targeted advertising or the sale of Personal Data, please click on the “Your Privacy Choices” link on the footer of the page. In the preceding 12 months, we have sold or processed for targeted advertising the following categories of Personal Data (as described in more detail above) to the following categories of third parties:
Category of Personal Data Sold or Processed for Targeted Advertising | Categories of Third Parties to Which Personal Data is Sold or Processed for Targeted Advertising |
Identifiers |
|
Commercial Information | |
Internet or other electronic network activity information |
How Long Do We Keep Your Personal Data
We keep Personal Data for as long as reasonably necessary for the purposes described in this State-Specific Privacy Notice, while we have a business need to do so, or as required by law (e.g. for tax, legal, accounting or other purposes), whichever is the longer.
Your Privacy Rights
Depending on where you are a resident, you have certain rights to your Personal Data under state privacy laws. Please note that the applicable state privacy laws do not restrict our ability to do certain things like comply with other laws or comply with regulatory investigations. We also reserve the right to retain, and not to delete, certain Personal Data after receipt of a request to delete information from a Covered Resident where permitted by the applicable state privacy laws or another law or regulation.
Right to Know and Access
You have the right to request that we confirm whether or not we are processing your Personal Data and to request access to that Personal Data. To submit a request, please review the below section, “Submitting Consumer Requests.”
Right to Obtain a Copy of Personal Data
You have the right to obtain a copy of your Personal Data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller, where the processing is carried out by automated means. To submit a request, please review the below section, “Submitting Consumer Requests.”
Right to Request Deletion
You have the right to request that we delete Personal Data about you that we process. To submit a request, please review the below section, “Submitting Consumer Requests.”
You should be aware, however, that we are allowed to retain your Personal Data under certain conditions, even if you have asked us to delete it, such as when retaining your Personal Data is necessary for us to complete a transaction with you or provide you with a good or service you have requested. We will notify you of any denial of your deletion request and the reason for such denial.
Right to Request Correction
You may have the right to request that we correct inaccuracies in your Personal Data, taking into account the nature of the Personal Data and the purposes of the processing of your Personal Data. To submit a request, please review the section below, “Submitting Consumer Requests.”
Right to Opt Out of Certain Processing of Personal Data
Consumers have the right to opt out of certain categories of processing of Personal Data. These include the right to opt out of (i) processing for targeted advertising, (ii) the sale of Personal Data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. To submit a request and to learn how we respond to opt-out preference signals, please review the section below, “Submitting Consumer Requests.”
We do not process Personal Data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects and therefore these opt out rights do not apply.
Right to Appeal
You may have the right to appeal our responses to your consumer rights requests. If you believe you have a basis for such an appeal, please contact us here: you can visit our privacy portal here, or call 855-782-6445 to make an appeal request and provide any required information to submit your appeal.
Submitting Consumer Requests
Consumer Rights Requests
You can submit a request for access, deletion, or correction (“Consumer Rights Request”) through our portal here, or by calling 855-782-6445.
We are only required to respond to verifiable Consumer Rights Requests made by you, or someone legally authorized to act on your behalf, who may make a Consumer Rights Request related to your Personal Data. You may also make a Consumer Rights Request on behalf of your minor child.
Making a Consumer Rights Request does not require you to create an account with us.
When you submit a Consumer Rights Request, we will take steps to verify your request by email or telephone call. In some cases, we may request additional information in order to verify your request or where necessary to process your request. If we are unable to adequately verify a request, we will notify the requestor. Authorized agents will be required to provide proof of their authorization, and we may also require that the relevant consumer directly verify their identity and the authority of the authorized agent.
We will only use Personal Data provided in a consumer request to verify the requestor’s identity or authority to make the request.
We cannot respond to your request or provide you with Personal Data if we cannot verify your identity or authority to make the request and confirm the Personal Data relates to you.
Opt-Out of Sale and Targeted Advertising
You have the right to opt-out of certain advertising and marketing activities including online tracking and email marketing that could be considered a sale or processing of your Personal Data for targeted advertising. You can exercise your right to opt-out of the sale or processing of Personal Data for targeted advertising in the following ways:
- Opt-Out of Online Tracking: You can exercise your right to opt-out of certain online tracking activities that could be considered a sale or processing of your Personal Data for targeted advertising by clicking the “Your Privacy Choices” link on the footer of the page, through an opt-out preference signal, or by calling 855-782-6445. If you choose to exercise this right through an opt-out preference signal and we detect such a signal, it will be honored. If you submit a request to opt-out, including through an opt-out preference signal, after you have consented to our sale or processing of Personal Data for targeted advertising, we will opt you out of any further selling sale or processing of Personal Data for targeted advertising.
- Opt-Out of Other Sales/Targeted Advertising: You can exercise your right to opt-out of certain email marketing activities that could be considered a sale or processing of your Personal Data for targeted advertising through the Privacy Web Form or by calling 855-782-6445.
- Global Privacy Opt-Out Preference Signal: We process opt-out requests submitted using an opt-out preference signal as required by applicable law. For example, when we detect the Global Privacy Control (“GPC”) signal from a browser, we treat the signal as a request to opt out of sale and sharing of personal information associated with that browser. If we receive the GPC signal from a user who we identify as a customer with an account, we treat the signal as a request to opt out of sale and sharing applicable to that account. If you click “accept” on the cookies banner subsequent to your submission of a GPC signal, this may override your GPC signal.
Additional Information for Oregon Residents
The following entities are a controller and are registered with the Secretary of State in Oregon:
- Waste Management of Oregon, Inc.
- WM Bagco, LLC
- WM LampTracker, Inc.
We are also registered to do business in Oregon with the following entity names:
- Sandy Transfer Station
- Troutdale Transfer Station
- Waste Management of Columbia County
- wastebyrail
- wastebyrail.com
Changes to this State-Specific Privacy Notice
From time to time, we may update or revise this State-Specific Privacy Notice. Please see the Last Updated Date for the most recent effective policy date. If there are changes to the terms of this State-Specific Privacy Notice, any documents (e.g., Terms of Use) or website pages referencing this State-Specific Privacy Notice will link to the most recent version of the notice.
Contact for Additional Information
If you have questions about this policy, please contact us at:
Email: [email protected]
Address: WM 800 Capitol St. Houston, TX 77002
Attn: WM Privacy Team