AutoZone
Consumer Discretionary
61
out of 100. Number 109 of 512, counting from the worst.
Where AutoZone does well
- Renewals 3 of 20. Few problems found.
- The CCPA table explicitly marks Financial/Payment Information, Geolocation, Audio/Electronic/Visual data, and Demographic/Sensitive PI as NOT sold or shared — and says payment card data is collected directly by processors: 'AutoZone does not automatically store your payment card information in our system.'
- AutoZone honors the Global Privacy Control (GPC) browser signal to opt out of sale/sharing, and offers a Data Subject Request portal, toll-free line
- 246-5230, and email (Privacy@AutoZone.com) plus a right to appeal denied requests.
- Unusually, the autozone.com cookie banner discloses the arbitration clause and class action waiver up front instead of burying them.
- Maine residents are exempted from Rewards credit/reward expiration periods, and the policy offers California direct-marketing disclosure rights.
Simply browsing autozone.com binds you to terms that force you into binding arbitration and strip your right to join a class action — and AutoZone states this outright in the cookie banner rather than hiding it in fine print.
The fine print
6 clauses and findings from the draft archive, dated 1 October 2026. The plain English comes first; the small print is the company's own words. None of these has been checked yet.
-
Simply browsing autozone.com binds you to terms that force you into binding arbitration and strip your right to join a class action — and AutoZone states this outright in the cookie banner rather than hiding it in fine print.
By using our website, you consent and agree to our Privacy Policy and Terms and Conditions (includes an arbitration clause and class action waiver).
-
AutoZone openly admits it 'sells' or 'shares' your identifiers, purchase history, browsing data, and even inferences about your preferences with third parties for targeted advertising.
The following table provides a summary of the types of Personal Information we collect and have collected within the last twelve (12) months ... and whether we sell or share it with third parties for targeted advertising. ... Identifiers: YES ... Commercial Information: YES ... Professional or Employment-related Information: YES ... Internet, Device & Online Activity Data ... : YES ... Inferences Drawn from Other Personal Information: YES
AutoZone Privacy Policy (Effective Date: November 7, 2025), Notice at Collection
-
Your activity on autozone.com is piped via web beacons and third-party cookies to Google, Meta, YouTube, Snapchat, Bing, and the data broker Epsilon for cross-device ad targeting — you can be followed across your phone and computer.
These third parties include analytics and marketing providers, such as Google Analytics, Bing Ads and Epsilon, and social media partners such as Facebook/Meta, YouTube and SnapChat. ... AutoZone also transmits certain device and Website interaction information about Website users to third parties for analyzing cross-device engagement and delivering targeted advertisements... AutoZone uses web beacons in conjunction with cookie data.
-
AutoZone records and replays your browsing sessions. Pennsylvania shoppers sued, alleging this happened without proper consent under the state wiretapping law, and AutoZone settled for $1.23 million ($20 per affected shopper) — while explicitly denying wrongdoing.
We use technology that captures and reconstructs user interactions with our Websites—such as clicks, navigation paths, and page elements viewed—by storing portions of the website's code. This helps us analyze how the site is used, identify areas for improvement, and enhance the overall user experience.
-
Earned Rewards credits last a year, but the $20 Rewards themselves vanish after just 90 days if you don't spend them — earned value you forfeit by sitting still. (Maine residents are exempt by law.)
Each credit will expire 1 year (365 days) from the date of issuance. Rewards expire 3 months (90 days) after issuance, except Bonus Rewards that expire in accordance with the terms of a specific promotion. ... Please note, the State of Maine is not subject to these expiration periods.
-
AutoZone can rewrite its privacy policy by merely posting a new version — no email, no opt-in — and can kill the entire Rewards program at its 'sole discretion,' taking your unredeemed credits with it.
From time to time, AutoZone may modify this Privacy Policy. AutoZone will notify you of any material changes to this Policy by posting the updated Policy. ... The Program is subject to termination at any time at our sole discretion.
How these were found
Document versions relied on: Privacy Policy effective November 7, 2025, applying to AutoZone, Inc. and subsidiaries (incl. AutoZone Pro, Duralast Parts; not ALLDATA/international). Direct fetch of https://autozone.com/privacypolicy was blocked (HTTP 403), so the policy text was read from the official mirror of the same company-wide policy at autozonepro.com's terms-and-conditions page (url_id 1243160124808896708). The main-site Terms & Conditions page (https://www.autozone.com/lp/termsAndConditions) rendered only a Delmar repair-guide copyright block to automated fetching; the arbitration finding rests on AutoZone's own site-wide cookie banner disclosure (crawled from autozone.com pages). Current AutoZone Rewards program rules (anchor #Rewards-Program-Rules on the T&C page) did not render; rewards terms were taken from the official https://www.autozone.com/rewards FAQ (crawled by the search engine) and a Feb 28, 2013 program-terms PDF referenced by rewards.show. The PA session-replay settlement details are from a Jalopnik report of the class action, not an AutoZone document. Research date: October 1, 2026.
These notes come from the original draft and are not independent verification.