Smurfit Westrock
Materials
29
out of 100. Number 408 of 512, counting from the worst.
Where Smurfit Westrock does well
- Arbitration 0 of 20. Nothing found.
- Renewals 0 of 20. Nothing found.
- No forced arbitration clause and no class-action waiver anywhere in the site's terms - unusually visitor-friendly compared to consumer tech companies.
- The company explicitly states it does not sell personal information for monetary consideration.
- It honors Global Privacy Control (GPC) opt-out signals 'in a frictionless manner' via its cookie banner.
- If personal data will be used in a manner 'significantly different' from the privacy notice, they commit to notify you by email or post first.
- They also promise not to discriminate or retaliate against you for exercising privacy rights, and they do not use sensitive personal information to infer characteristics about people.
The site terms can change silently at any time.
The fine print
6 clauses and findings from the draft archive, dated 1 October 2026. The plain English comes first; the small print is the company's own words. None of these has been checked yet.
-
The site terms can change silently at any time. Just by continuing to use the website, you are deemed to have accepted whatever new terms they post - you get no notice and no chance to object first.
Smurfit Westrock reserves the right to change these terms and conditions at any time, without prior written notice.
-
Smurfit Westrock admits its site lets advertisers, marketing partners, analytics firms, and social networks collect your name, contact info, and browsing activity so they can target you with ads on and off the site. That's legal 'sharing' of personal data under California privacy law.
our use of cookies and other tracking technologies, as well as the collection of personal information on our sites and applications by third parties, may be considered "sharing" under California law and "targeted advertising" in other states. ... Categories ... "shared" in the last twelve months: 1. Name, contact information and other identifiers — Category of Third-Party Recipients: Advertisers and marketing partners, providers of data analytics, and social media networks — Business Purpose for Sharing: Make the online advertisements you see more relevant to your interests.
-
Data collected from your cookie-tracking on their site can be merged with information about you from other sources, and your identity can be synced ('cookie matched') with unnamed partner companies - widening the circle of who can profile you.
We may combine information from these types of cookies and technologies with information about you from any other source. ... In some instances, we may allow for cookie matching with select partners.
-
There are no stated maximum retention periods - your data is kept as long as they deem 'necessary' for products or open-ended 'marketing purposes,' and longer whenever legal or business reasons arise.
We retain Personal Data about you for as long as necessary to provide you with our products or marketing purposes. In some cases, we retain Personal Data for longer, if doing so is necessary to comply with our legal obligations, to defend a legal claim or is otherwise required by applicable law.
-
For users in Mexico, your personal data can be sent to affiliates and other parties in and outside the country unless you proactively object - silence counts as consent for international data transfers.
In the event that you do not express your objection for your personal information to be transferred in this way, it will be understood that you have given your consent for this.
-
If the site harms you - even lost data or business interruption - Smurfit Westrock disclaims all liability, including situations where they were warned the damage could happen.
IN NO EVENT WILL SMURFIT WESTROCK, ITS SUPPLIERS, OR OTHER THIRD PARTIES MENTIONED AT THIS SITE BE LIABLE FOR ANY DAMAGES WHATSOEVER (INCLUDING, WITHOUT LIMITATION, SPECIAL, INCIDENTAL, INDIRECT, PUNITIVE, CONSEQUENTIAL, OR THOSE RESULTING FROM LOST PROFITS, LOST DATA OR BUSINESS INTERRUPTION)
How these were found
Researched live on 2026-10-01 via browser_open against the official domain; no mirrors or cached copies were needed. Privacy Notice and Cookie Notice are both marked 'Last Updated: July 1, 2024' (about 2 years old - not stale by much but worth noting). The Legal Notice page displays no visible last-updated date (search metadata for it was garbled/unreliable). The Cookie Notice lives on the EU regional subdomain eu.smurfitwestrock.com but applies globally per its text. Smurfit Westrock is a B2B paper/packaging company - the public site is informational with no consumer accounts, subscriptions, or checkout flows, so auto-renew/cancellation traps are not applicable; its North America General Terms and Conditions of Sale PDF (Feb 2025) governs B2B transactions only and was not scored as site-visitor terms. Low score reflects a genuinely quiet legal footprint, not a lack of diligence.
These notes come from the original draft and are not independent verification.