Pfizer
Health Care
43
out of 100. Number 273 of 512, counting from the worst.
Where Pfizer does well
- Arbitration 2 of 20. Few problems found.
- Renewals 1 of 20. Few problems found.
- No forced arbitration anywhere in the public website Terms of Use — disputes go to New York courts, which is better than most large consumer companies.
- Pfizer explicitly states it does not 'sell' or 'share' personal data for cross-contextual behavioral advertising.
- The policy grants free Copy/Correct/Delete/Know rights with a toll-free number (833-991-1933), an appeals process, and anti-discrimination protection — meaningful for a company holding health data.
- De-identified data is promised to stay de-identified with no reidentification attempts, and 'significant' privacy-policy changes require notice and/or consent before applying to previously collected data.
Pfizer admits your health-related browsing can be collected — not just by Pfizer, but by its advertising partners, across multiple websites over time.
The fine print
6 clauses and findings from the draft archive, dated 1 October 2026. The plain English comes first; the small print is the company's own words. None of these has been checked yet.
-
Pfizer admits your health-related browsing can be collected — not just by Pfizer, but by its advertising partners, across multiple websites over time. For a pharma company whose pages cover specific drugs and conditions, this is especially sensitive data.
Where you direct us to do so, we and certain third-party business partners, such as our advertising partners, may collect health data ... using cookies and other Tools ... when you visit or interact with our Site. These partners also may use cookies and other Tools to collect your health data over time across different websites depending on the associated permissions you set.
-
Pfizer's analytics partners aren't limited to working for Pfizer — they can track you around the web and use your data for their own purposes too.
Our third party business partners, such as our analytics partners, may also use your personal data to analyze and track your interactions and movements around the Site and elsewhere on the internet for our and their own purposes.
-
Even if you never tell Pfizer anything medical, it can still infer your health conditions, symptoms, or treatments from non-health data it collects about you.
Any inferences of the above categories of health data that we may infer or derive from non-health related information.
-
Pfizer buys or pulls in outside data — public databases, social media — and attaches it to your profile to understand your interests, without you providing it directly.
From time to time, we may use or augment the personal data we have about you with information obtained from other sources, such as public databases, social media platforms and other third parties... to better understand your interests by associating demographic information with the information you have provided.
-
There's no fixed retention limit — Pfizer can keep your data indefinitely whenever it decides that keeping it is 'advisable' for its own legal position. You can ask for deletion, but submitting a request requires handing over more personal data (name, address, phone) and possibly your date of birth or government identifier.
We will retain your personal data for as long as needed or permitted in light of the purpose(s) for which it was obtained... (iii) whether retention is advisable in light of our legal position (such as in regard to the enforcement of the Site Terms of Use, applicable statutes of limitations, litigation or regulatory investigations).
-
Policy changes take effect the moment they're posted; Pfizer alone decides which changes count as 'minor' and can happen without telling you. The saving grace: significant changes do require notice and/or consent before applying to old data.
Any changes will be effective when we post the revised Privacy Policy... Minor changes to the policy may occur that will not significantly affect our use of personal data without notice or consent. We encourage you to periodically review this page for the latest information on our privacy practices.
How these were found
All documents read directly from pfizer.com via browser_open on 2026-10-01 — no mirrors used. Relied primarily on the current U.S. Privacy Policy (effective March 10, 2025, https://www.pfizer.com/privacy) and the Terms of Use (https://www.pfizer.com/general/terms, no version/effective date shown; copyright line reads 2002–). Also read the older U.S. Privacy Policy PDF (effective April 27, 2023, http://webfiles.pfizer.com/pfizer_privacy_policy) to confirm continuity; clauses there are substantially the same. Did not read the Washington Health Data Privacy Policy (linked for WA residents' health data) or app-specific privacy notices, which may contain stricter or additional terms. Pfizer's well-known employee arbitration policy is employment-related and outside the scope of the public website terms. No auto-renewal or subscription traps were found in the public site terms, and the site is informational rather than transactional.
These notes come from the original draft and are not independent verification.