Privacy Policy - US - English - Dx (Part 3)
4. Security.
DoorDash has implemented administrative, organizational, technical, and physical security controls that are designed to safeguard personal information. However, no online activity is ever fully secure or error-free. While we strive to protect your information, we cannot guarantee that your Personal Information is absolutely secure. Please keep this in mind when disclosing any information to DoorDash.
Please recognize that protecting your Personal Information is also your responsibility. We urge you to take every precaution to protect your information when you are on the Internet, or when you communicate with us and with others through the Internet. Change your passwords often, use a combination of letters and numbers, and make sure you use a secure browser. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of your account might have been compromised), or if you suspect someone else is using your account, please let us know immediately by contacting us as indicated in Section 13 (Contact Us) of this Policy.
5. Data Retention.
Our retention of your personal information may vary based upon the nature of our relationship with you (e.g., Dasher, Non-Dasher, etc.) and based upon several factors, including without limitation, the following:
(a) The length of time necessary to fulfill the purpose(s) for which we collected the personal information;
(b) When your relationship with us ceases or terminates;
(c) The length of time it is reasonable to keep records to demonstrate that we have fulfilled our business and legal duties and obligations and contractual commitments (as applicable);
(d) Any limitation periods within which claims can be made;
(e) Any retention periods prescribed by law or recommended by regulators, professional bodies, or associations; and
(f) The existence of any relevant legal proceedings.
6. Third-Party Sites.
Some of the functionality may be provided by third parties and the Dasher Services may link to other third-party websites that are not controlled by DoorDash. These third parties are not under our control and we are not responsible for their privacy policies or practices. If you provide any personal information to any third party or through any such third-party website, we recommend that you familiarize yourself with the privacy policies and practices of that third party.
7. Children’s Information.
The Dasher Services are not intended for children under 18 years of age and we do not knowingly collect personal information from children under the age of 16 through the Dasher Services. If you are a parent or guardian of a child under the age of 16 and believe he or she has disclosed personally identifiable information to us, please contact us at [email protected]. A parent or guardian of a child under age 16 may review and request deletion of the child’s personal information.
8. Your Rights and Choices.
A. Your Rights.
You may have rights under certain data protection and privacy laws pertaining to our processing of your personal information. These rights are not absolute, meaning that, as permitted under applicable data protection and privacy laws, we may not be obligated to comply with your request and we can limit the frequency of your requests. For all requests, we will need to verify the identity of the data subject and, if applicable, the identity and authority of the person submitting the request on behalf of the data subject. If we are unable to confirm or validate the identity of the data subject and, if applicable, the identity and authority of the requestor if different than the data subject, then we may reject or deny the request. Subject to applicable data protection and privacy laws, you can exercise your rights free of charge.
Subject to applicable data protection and privacy laws, the following rights may be available:
Type of Right | Description | Exercising Right |
Right of Access/Right to Know/Right to Data Portability | This right provides an individual with the opportunity to know what personal information has been collected about them, including the specific pieces of personal information and the right to receive a copy of the personal information in a portable and, to the extent technically feasible, a readily usable format. | Dasher: Please log-in to your account through the Dasher application and go to the Manage Account section of the Account Settings. Non-Dasher: Contact us at [email protected] and provide (i) your first and last name, email address and address of residency; (ii) identify the right(s) being exercised; (iii) identify your connection to or with DoorDash (e.g., Non-Dasher, etc.) and (iv) in the subject line include “Non-Dasher DSR Request” |
Right of Deletion | This right provides an individual with the opportunity to request deletion of personal information. Notwithstanding the fact that a data subject may exercise a right to delete personal information, please note that we will keep a record of all rights requests and we may retain personal information even after receiving and processing a right of deletion request if such retention is permitted or required under applicable data protection and privacy laws. | Dasher: Please log-in to your account through the Dasher application and go to the Manage Account section of the Account Settings. Non-Dasher: Contact us at [email protected] and provide (i) your first and last name, email address and address of residency; (ii) identify the right(s) being exercised; (iii) identify your connection to or with DoorDash (e.g., Non-Dasher, etc.) and (iv) in the subject line include “Non-Dasher DSR Request” |
Right to Opt-Out of Sale or Sharing of Personal Information Right to Opt-out of Targeted Advertising Right to Opt-In | This right provides an individual with the opportunity to opt-out of having their information sold, shared, or used for purposes of cross-context behavioral advertising, or targeted advertising. State laws have specific definitions of selling, sharing, and targeted advertising. For example, the California Privacy Rights Act of 2020 (“CPRA”) broadly defines “sale” as any sharing of personal information with third parties in exchange for monetary or other valuable consideration. The CPRA defines “sharing” as sharing personal information with a third party for cross context behavioral advertising. This includes sharing personal information in a way that allows third parties to receive certain information such as cookie identifiers, IP addresses and/or browsing behavior to add to a profile about your device, browser or you. Such profiles may enable delivery of interest-based advertising or cross-context behavioral advertising by such third parties within their platform or on other sites. You also have the right to opt-in if you change your mind. This right provides individuals who have chosen to exercise their right to opt-out the opportunity to opt-in for the sale and sharing of their personal information. | Dasher: To opt-out of the sale or sharing of personal information and targeted advertising, please log-in to your account through the Dasher application and access the Marketing Choices section and toggling off ad personalization. A Dasher can access the Marketing Choices through the following path: Account > Account Settings> Manage Account > Marketing Choices If you change your mind, you can opt-in using the same path. Non-Dasher: We do not believe that the right to opt-out or the right to opt-in will apply to Non-Dashers because we do not share or sell Non-Dasher data with or to third parties or use such data for purposes of targeted advertising. |
Right to Correct or Rectify Personal Information | Taking into account the nature of the personal information and the purposes of the processing, this right provides an individual with the ability to correct or update inaccurate personal information that we hold about the individual. | Dasher: Please login to your account and correct or update your information. Non-Dasher: Contact us at [email protected] and provide (i) your first and last name, email address and address of residency; (ii) identify the right(s) being exercised; (iii) identify your status (e.g., Non-Dasher, etc.) and (iv) in the subject line include “Non-Dasher DSR Request” |
Right to Appeal | This right provides an individual with the opportunity to appeal a decision made by us in connection with a rights request. | All categories of individuals covered by this Policy: contact us at [email protected] and provide (i) your first and last name, email address, and address of residency; (ii) the date that you initially submitted the request; (iii) an overview of the decision you are appealing; (iv) your status (e.g., Dasher, Non-Dasher, etc.); and (v) include the following in the subject line “DSR - Appeal”. |
Right of Non-Discrimination and Non Retaliation | This right provides an individual with the right to not be discriminated against as a result of exercising a right provided under applicable data protection and privacy laws. Generally, this right prohibits a Controller from (a) denying an individual access to or use of goods and services, (b) charging different prices or rates for goods and services, or (c) providing a different level or quality of goods or services, as a result of the individual exercising a right under data protection and privacy laws. | All categories of individuals covered by this Policy: DoorDash does not discriminate or retaliate against individuals for exercising applicable privacy rights. If you feel that you have been subject to discrimination as a result of exercising a right provided under data protection and privacy laws, please contact us at [email protected] and provide (i) your first and last name, email address and address of residency; (ii) an explanation of the right(s) exercised and the alleged discriminatory treatment; (iii) your status (e.g., Dasher, Non-Dasher, etc.); and (iv) in the subject line include “Discriminatory Treatment - DSR”. |
Right to Limit the Use and Disclosure of Sensitive Personal Information | Under the CPRA, this right provides an individual with the opportunity to direct a business that collects sensitive personal information about the individual to limit its use of the individual’s sensitive personal information to only the use necessary to perform the services or provide the goods reasonably expected by the average individual who requests those services or goods or as otherwise permitted under applicable data protection and privacy laws. This right is limited to sensitive personal information used for the purpose of inferring characteristics about an individual. | All categories of individuals covered by this Policy: DoorDash does not use sensitive personal information for the purpose of inferring characteristics about an individual, therefore we do not offer a path to exercise this right. However, all other rights applicable to personal information are available for sensitive personal information as well. You may exercise any of the other rights available to you, such as the Right of Deletion or the Right to Opt-Out. |
Right to Withdraw Consent | This right provides individuals with the opportunity to withdraw their consent where DoorDash has collected their personal information on the basis of such consent. | All categories of individuals covered by this Policy: To withdraw consent where you have previously given your consent to DoorDash, please contact us at [email protected] and provide (i) your first and last name, business email address, and address of residency; (ii) an explanation of where you provided your consent to DoorDash; (iii) your status (e.g., Dasher, Non-Dasher, etc.); and (iv) in the subject line include “Withdraw Consent - DSR”. |
Right to Opt-out of Profiling | This right provides individuals with the opportunity to opt out of profiling. The term profiling has specific definitions under state laws and typically means automated processing to analyze an individual’s economic situation, health, personal preferences, interests, reliability, behavior, location or movements in a way that would produce a legal or similarly significant effect. | All categories of individuals covered by this Policy: DoorDash does not engage in this type of profiling of individuals. |
Authorized Agent Requests. For authorized agents submitting a request on behalf of a data subject, please contact us at [email protected] and provide (i) the first and last names and email address for the data subject, (ii) the first and last names and business contact information for the agent, (iii) evidence of authority (e.g., power of attorney, etc.), (iv) the status of the data subject (e.g., Dasher, Non-Dasher, etc.), (v) the right(s) being exercised, and (vi) in the subject line include “Authorized Agent Request”.
Contact DoorDash by Phone: If you do not have access to email or based on your preference, you may exercise any of the rights available to you by calling us at (855) 973-1040.
Contact DoorDash by E-Mail: You may contact us via e-mail ([email protected]) to exercise the following rights: (i) right to correct/rectify personal information, (ii) the right of access/right to know, and (iii) the right to deletion. In your email, please provide (a) your first and last name, email address and address of residency; (b) identify the right(s) being exercised; and (c) in the subject line include “DSR Request”.
B. Your Additional Choices.
i. Commercial Email Messages & Text Messages. You can unsubscribe from our marketing or promotional emails and text messages by using the unsubscribe mechanism in the communication. We will still send you transactional, information, and relationship communications about the use of our Dasher Services, platforms and/or the relationship between us and you. This opt-out option does not apply to DoorDash credit card offerings because these are provided through associated financial institutions. However, you can choose to stop receiving certain prescreened offers of credit that originate from participating nationwide credit reporting agencies, including our prescreened offers, by calling the official Consumer Credit Reporting Industry organization at 1-888-567-8688 or by going to www.optoutprescreen.com.
ii. Push Notifications. In the notifications section of the account page on our mobile platforms/apps, you can adjust your promotional push notifications settings by toggling to disable or enable promotional push notifications.
iii. Location Access. You cannot turn off location access in the DoorDash application. You can disable location tracking through your device settings; however, this will prevent you from participating in the Dasher Services.
iv. Cookie Tracking. Please see Section 3 (Cookies and Similar Technologies) of this Policy.
v. Ad Personalization. To adjust your preferences on our ad personalization activities on third party platforms (e.g., websites and apps), please go to account > Manage Account > Marketing Choices and you can toggle to enable or disable personalization.
9. Notice of Financial Incentives.
Under the CPRA, we are required to provide certain disclosures regarding “financial incentives” offered in exchange for your disclosure of personal information to us. We provide several opportunities or programs where individuals can provide personal information to us in exchange for financial incentives, including in connection with participation in survey research, sweepstakes programs, Referral programs, and product and partnership opportunities. In addition, for Referral programs, the referred party or person can also receive incentives for participation. These programs are entirely voluntary and allow us to grow, enhance, and improve our Dasher Services and business activities and provide benefits to those who participate. For the various financial incentives that we offer, we have not assigned a monetary value to the data we collect through or in connection with our financial incentive programs; however, based upon our good faith reasonable estimate, the value we receive from your personal information is reasonably equal to the value of the financial incentive we provide to individuals who participate in these programs. The material terms for the financial incentives are available with the applicable offer that you may receive prior to you voluntarily deciding to participate. If you want to opt-out of participating in an incentive program, please either stop participating or email us at [email protected] and include your first and last names, email address, identify the incentive program(s) that you want to opt-out from, and in the subject line, please include “Incentive Program Opt-Out”.
10. California Shine the Light Law.
The “Shine the Light” requirements under California Civil Code §1798.83 do not apply to the individuals covered under this Policy because we do not engage in the activities covered by this law.
11. Nevada.
Under Nevada Revised Statutes Chapter 603A (Security and Privacy of Personal Information) (“Nevada Privacy Law”), companies that qualify as an Operator under Nevada Privacy Law must satisfy certain requirements pertaining to Covered Information (as defined under Nevada Privacy Law). Under Nevada Privacy Law, certain Nevada consumers may opt-out of the sale (as defined under Nevada Privacy Law) of Covered Information. The individuals covered under this Policy are not covered under the Nevada Privacy Law.
12. International Data Subjects.
DoorDash is based in the United States and, regardless of where you use the Dasher Services, the information collected as part of that use will be transferred to and maintained on servers located in the United States. By using the Dasher Services, you consent to this collection, transfer, storage, and processing of information to and in the United States.
13. Contact Us.
If you have any questions or concerns relating to this Policy or our privacy practices, please contact us at: [email protected] or:
DoorDash, Inc.
Attn: Legal
303 2nd St, Suite 800
San Francisco, CA 94107
Telephone Number: +1 (855) 973-1040
14. Updates to this Policy.
This Policy may be subject to updates from time to time with or without notice. We recommend that you periodically review this Policy. In the event of any changes to this Policy, we will determine whether or not notice is required and, if notice is required, we will provide appropriate notice taking into account the nature of the changes. Your continued use of our Dasher Services after any updates to this Policy constitutes your agreement and acceptance of this Policy as updated. In the event that you disagree with the changes, your only remedy is to cease using the Dasher Services.
