Deleting PC Optimum May Not Delete Your Shopping Data

Matthew Leo · Published August 3, 2026 · Business & Policy

Deleting a loyalty account should mean more than removing your name from the screen.

A federal privacy investigation found that Loblaw kept detailed information from closed PC Optimum accounts, including shopping history, loyalty activity and some app-use data. The company removed direct identifiers such as names and phone numbers, but Canada’s privacy commissioner said Loblaw had not shown that the remaining information was truly anonymous.

That finding matters to more than former PC Optimum members. It exposes a common weakness in digital privacy: a company can say an account is deleted while keeping much of the behaviour that made the account valuable.

What Loblaw kept after an account closed

The Office of the Privacy Commissioner of Canada began investigating after people complained that they could not delete PC Optimum accounts or get useful answers about their requests.

The regulator’s March 2026 report says Loblaw normally removed contact details from a closed account. It still retained several categories of information:

products purchased, quantities and amounts;
the store, date, transaction and checkout-lane details;
points earned, redeemed and offers used;
pages viewed and links clicked in the app or website;
login frequency, device details and some network information; and
a hashed email address and public IP address in some records.

Loblaw said this information was no longer linked to an identifiable person and was useful for analytics and improving the program. The commissioner disagreed that the company had proved the data was safely anonymized.

The report did not say that keeping all anonymous statistics is forbidden. It said the company must show there is no serious possibility that the retained information can be linked back to a person.

A shopping history can identify someone

Removing a name is not the same as removing identity.

A long grocery history can reveal where someone shops, when they leave home, which pharmacy they visit, what products they buy and how their habits change. A rare purchase at a small-town store can make one person stand out. Combine that record with an IP address, browsing behaviour or information from another database and the risk becomes larger.

The commissioner found other warning signs. In one case, an employee placed a customer’s name into the replacement email field instead of a random string. Loblaw also did not demonstrate that identifiers were removed from backup systems.

This is why “de-identified” data requires more than deleting a few columns. The remaining dataset, access controls, outside information and new re-identification tools all matter. A dataset that appears anonymous today can become identifiable later.

Loblaw disagreed but accepted a review

Loblaw maintained that the retained information was not associated with identifiable people. It agreed to hire an independent third party to assess its anonymization process and to implement necessary risk reductions within 12 months of the report.

The commissioner found the retention complaint well-founded and conditionally resolved. That wording means the final outcome depends on the promised review and follow-through.

Loblaw’s privacy pages were updated effective July 1, 2026. They explain that PC Optimum collects transaction information and provide ways to make access, correction and deletion requests. The updated policy does not erase the broader lesson from the investigation: closing one service and deleting every related identifier may be different requests.

The timing makes the issue more serious

In March, Loblaw also disclosed that an unauthorized third party had accessed basic customer details, including some names, phone numbers and email addresses. The company said passwords, health information and credit-card data were not affected, and it forced users to sign in again.

There is no evidence that the information discussed in the deletion investigation was exposed in that incident. The two events should not be combined into one claim.

They do, however, show why data retention deserves attention. Every stored record creates some cost, responsibility and risk. The safest personal information is often the information a company no longer keeps.

How to make a stronger deletion request

If you want to leave PC Optimum, do not rely only on the button that closes the loyalty account.

Use or document your points first. Record your balance and any open support issues. Closing the account may remove access to rewards.
Ask for the loyalty account to be closed. Use PC Optimum customer support or the account tools provided by Loblaw.
Mention your PCid separately. PCid can also connect to other Loblaw services. Ask whether it remains active and request deletion when you do not need it for another account.
Request deletion of personal information. Say that you want personal information removed unless Loblaw must retain it for a specific legal or security reason.
Ask what will remain. Request a plain-language list of retained transaction, loyalty, device and support records, how they are protected and when they will be deleted.
Keep the response. Save confirmation numbers, emails and dates in case the request is incomplete.

A company may have legitimate reasons to keep limited records, such as fraud prevention, tax rules or an unresolved dispute. It should explain those reasons and the retention period instead of treating “account deleted” as the end of the conversation.

What to do when the answer is unclear

Start with Loblaw’s privacy office and make the request in writing. Be specific about the account, PCid, transaction history and other personal information.

If the company does not answer or the response does not address the request, Canadians can use the complaint information published by the Office of the Privacy Commissioner. Provincial privacy laws may also apply in some situations.

This is not a reason to panic or abandon every rewards program. It is a reason to treat points as an exchange. The company gives discounts and rewards. The customer gives purchase data and attention.

Mapletechie raised a related concern in its analysis of Canada’s proposed social-media age checks: privacy depends on what a system collects, what it keeps and how easily the information can be connected to a person.

Deletion should have a clear meaning

Most people do not read a privacy policy before scanning a loyalty card at the grocery store. They reasonably expect that deleting an account ends the relationship and removes information that is no longer needed.

Companies should not make customers learn the difference between closing a loyalty account, deleting a shared login and anonymizing a behavioural profile.

If information must remain, say exactly what it is and why. If it is called anonymous, prove that it cannot reasonably be reconnected. If neither can be done, delete it.

Sources and further reading

Tags: PC Optimum data deletion, Loblaw privacy, loyalty program data, Canada privacy

Read on Mapletechie