DoorDash Merchant and Customer Privacy Policy
Last updated September 25, 2026
I. Introduction
II. Personal Information Collected and Processed
III. Sources of Personal Information
IV. Our Use of Personal Information
V. Our Disclosure of Personal Information
VI. Your Privacy Rights and Choices
VII. Additional Jurisdiction Specific Disclosures
VIII. Security and Retention
IX. Cross-Border Transfers of Personal Information
X. Personal Information from Children
XI. Third-Party Sites
XII. Identity Verification
XIII. How to Contact Us
XIV. Changes to this Privacy Policy
I. Introduction.
We strive to provide transparency regarding our processing of Personal Information and this Privacy Policy (this “Policy”) describes how DoorDash, Inc. and its affiliates and subsidiaries, including, without limitation, DoorDash Technologies Canada, Inc., DoorDash Technologies Australia Pty Ltd., and DoorDash Technologies New Zealand, (“DoorDash”, “we”, “our”, or “us”) collect, process, retain and disclose Personal Information about or from actual and prospective Business Personnel of Business Partners in connection with our Business Services. This Policy applies to Business Personnel who are acting in their professional or business capacity and does not apply to Business Personnel when using our consumer web and/or app platforms (individually a “Consumer” and collectively “Consumers”) or who are acting as delivery contractors (or other similar roles) in connection with our delivery contractor web and app platforms (individually a “Delivery Contractor” and collectively “Delivery Contractors”).
The term “Business Partners” includes potential and actual merchants (i.e., merchants for our Marketplace, Storefront and/or Drive products) and potential and actual customers (i.e., companies for our DoorDash for Business product).
The term “Business Services” includes (a) our web and app platforms, portals, services and technology for Business Partners and Business Personnel, (b) any web and app platforms, portals, and communications that contain links to this Policy, and (c) the channels, platforms, tools, and methods of communications in connection with your relationship with us.
The terms “Business Personnel,” “you,” and “your” refer to the personnel (such as owners, executives, employees, contractors, and/or other individuals in similar or related roles and positions) of Business Partners.
II. Personal Information Collected and Processed.
The term “Personal Information” includes any data that identifies, relates to or that could reasonably be associated with an individual person, directly or indirectly. Anonymous information and information that has been de-identified, such that it cannot reasonably be linked to or used to infer information about an individual, is not Personal Information. When we process de-identified information, we maintain and use the information in de-identified form, and do not attempt to re-identify the information, except as permitted by applicable law.
Depending upon the Business Services, we (and/or our service providers on our behalf) may process the following categories of Personal Information:
Account and Business Contact Information, such as name, address, email address(es), phone number(s), nickname(s), preferred name(s), username and access credentials, and social media handle(s) or identifier(s). Contact information includes information for you, for other Business Partner Business Personnel, and referrals.
Identity Verification Information, such as a government issued identification document (for example, a drivers’ license, passport, or other national, provincial, state or Federal government issued document) and the information contained therein (such as photos, identification and document numbers, date of birth, issued date, expiration date, address, gender/sex, and signature), photos or videos that you submit for identity verification purposes (e.g., selfie-style photos), and the information, reports, and other output returned in connection with performing verification activities, including biometric matching and verification to confirm your identity that are processed by our service provider. For more information on identity verification activities (including biometric information processed by our service provider), please see Section XII of this Policy.
Communications, such as date and time of communication, method or channel of communication, people involved in the communication, communications content, call recordings (if applicable), chat transcripts (if applicable) and any outcomes, actions, and/or investigations resulting from (1) communications with our teams including security, support, sales, and operations teams, (2) communications you have with Consumers and Delivery Contractors facilitated through our systems and platforms, and (3) any and all other communications with us.
Business Services Usage and Settings Information, such as device information (for example operating system and version, settings, IP address and other unique identifiers), how and when you interact with our Business Services (including through the use of session replay or other similar technology), and your use of Business Services (for example, how you use the Business Services on behalf of a Business Partner, data and reports accessed and downloaded from the Business Services, your participation in programs and offers (both internal and external programs and offers, including grant and other award programs and referral programs), surveys and market research activities, sweepstakes and contests, and pictures, language preferences and other information and content).
Geolocation Information, such as geolocation information for merchant Business Personnel performing delivery services when a merchant is providing self-delivery services for Consumer orders. The processing of geolocation information is subject to the notices, permissions, consents, and approvals obtained from such merchants.
Payment and Financial Account Information, such as bank and/or financial account information to process payments and transactions related to the Business Services.
Tax Information, such as tax documentation and tax identification numbers for a Business Partner (for example, an employer identification number/tax identification number).
Information About or From Investigations, Claims, Complaints and Disputes, such as information obtained from our and/or third party investigations into accidents, fraud, security, and other trust and safety matters or issues, performance or other disputes related to the Business Services and contract issues and disputes in connection with the Business Services.
Some of the information identified above may be considered to be or classified as “Sensitive Personal Information” under certain privacy laws. This information is used for the specific, limited purposes for which it was collected (for example, identify verification, compliance with laws and regulations, and for fraud, safety, and security purposes). Where legally required, we will collect and process Sensitive Personal Information only with the individual’s consent.
III. Sources of Personal Information
Depending on the Business Services, we may collect or receive Personal Information from the following sources:
From You, when you use or interact with our Business Services and related activities and through communications with us and with others through our platforms and systems. If you provide Personal Information for or about others you represent that you have all necessary rights and consents to provide their Personal Information to us and that the Personal Information relates to the individual’s business or professional role.
From Our Business Services, when using our Business Services certain Personal Information is collected from your device, computer or other equipment and your use of the Business services, including through permissions enabled on your device, cookies and similar technologies and other technologies.
From Program Partners, such as when you participate in offers and programs from or through our program partners (subject to the terms of the offers and programs).
From Service Providers, when we engage them to perform and provide services on our behalf.
From Other Persons and Parties, such as from Consumers and Delivery Contractors you may interact with, from individuals involved in insurance claims, from law enforcement agencies, government agencies or authorities, other Business Personnel, from the websites of Business Partners, from third parties providing business and professional information, and individuals involved in litigation, arbitration, or other disputes.
IV. Our Use of Personal Information
Depending on which Business Services you use and how you interact with us, we may use your Personal Information (as described in Section II above):
To Provide and Enable Our Business Services, such as to enable you to complete our onboarding process, to allow you to establish and use a Business Services account, to enable your use of the Business Services on behalf of a Business Partner (for example, to enable Business Partners to receive and access information from our products and services and to manage the DoorDash products and services used for or on behalf of a Business Partner), to create Business Services accounts for other Business Personnel, to respond to our questionnaires, to participate in survey and market research activities, to participate in the programs and offers from us and our program partners (including our referral program), to create, submit, and upload content (such as photos, videos, and reviews), and to customize your experience and use of the Business Services.
To Provide Support, such as exchanging communications, investigating, analyzing, and remediating Delivery Contractor, Consumer, Business Personnel and Business Partner support issues, evaluating our support activities and making improvements, and ensuring that support issues are handled in accordance with our internal standards, processes, and requirements and according to applicable law. The communications include those via email, push-notification, SMS/text message, chat, post, phone calls, and other forms of communications.
To Develop, Analyze, and Improve Our Services and Platforms, such as debugging or troubleshooting, understanding product, platform, and service usage and user preferences, conducting research and development, improving our products, platforms, and services including the Business Services and our Consumer and Delivery Contractor platforms and services, training our personnel, training machine learning models (including large language models), and developing new services and initiatives.
To Advertise and Promote DoorDash and our Business Services, such as displaying or targeting advertising and marketing within the Business Services and on third-party platforms that relate to the Business Services (including available programs and offers), analyzing, developing, optimizing and implementing marketing and advertising campaigns, and sending and initiating direct marketing communications and campaigns (for example, via email, newsletter, push-notifications, SMS/text message, post, phone calls, chat, and other channels) for promoting or advertising the Business Services, our products and services, and the programs and offers for us and our program partners. For marketing SMS/text messages, the following terms apply: (1) messages may be sent via an automatic telephone dialing system to advertise and promote our Business Services, (2) message frequency may vary, (3) message and data rates may apply and (4) reply “STOP” to opt-out of these messages. We do not use any Sensitive Personal Information for advertising or marketing purposes.
To Allow and/or Facilitate Communications, such as communicating with merchants about their stores and products (for example, menus, pricing, hours, holiday schedule, refunds or re-charges, and product and quality issues) and communicating with customers about functionality, features and usage of DoorDash for Business, and generally communicating about our Business Services (for example, changes or updates to legal agreements, billing/accounting matters, payouts and payments, referrals, terms and policies, safety and security messages, support issues, and account changes). In addition, we, whether directly or indirectly through our service providers and/or industry groups on our behalf, may send or initiate communications (such as emails and phone calls) to you regarding elections, ballots, referenda, and other political processes that relate to our services and business activities relating to Business Partners. The communications include those sent or transmitted via email, SMS/text message, chat, post or mail, push notifications, phone calls, and other forms of communications. Communications using or through our platforms, services, and systems may utilize the services, infrastructure, and technology of service providers who may receive, store and access your communications to provide services to or for us.
For Authentication, Integrity, Security, Quality, Safety and Legal and Compliance Reasons, including:
a. Verifying your account and identity as applicable and from time to time.
b. Helping to ensure appropriate, lawful and safe use of the Business Services, including by using support information, communication data, and information collected from your use of and interaction with the Business Services.
c. Helping to ensure the security and protection of the interests and property of you, us (including our personnel) and other persons and parties.
d. Detecting, investigating, preventing and/or remediating malicious, prohibited, illicit, or illegal conduct, bugs, malware, and fraudulent activity, including the training and use of machine learning models to detect and prevent such activity.
e. Complying with our obligations under applicable law and responding to valid legal process (such as requests or orders from law enforcement, courts, regulators and other government agencies), investigating or participating in civil discovery, litigation, or other adversarial legal proceedings, managing insurance claims, to comply with, to enforce, and/or investigate potential or actual violations of, our terms, policies, processes, licenses, insurance policies, or other legal agreements exercising our rights, investigating, monitoring, mitigating, remediating, preventing, or reporting any actual or alleged illegal or prohibited activities in connection with the Business Services, complying with any tax obligations, performing audits and assessments, enabling you or your authorized representatives to exercise your rights as we may be legally required, and handling complaints and enquiries.
To Comply with Contractual Obligations, to fulfill and enforce our contractual obligations.
V.Our Disclosure of Personal Information.
Depending on the Business Services you use or interact with, we may provide Personal Information (as described in Section II above) as follows:
To Service Providers, to perform or provide services to us and on our behalf in accordance with contractual terms. Our service providers include, but are not limited to, providers of communication services, payment processing, insurance, identity verification and background services, providers of KYC, AML, and other similar checks or services, location and navigation services (such as those providing maps and directions), market research services, marketing and advertising services, sweepstakes and contest services, data management and storage services, infrastructure and technology related products and services, analytics services (for example, those that help us understand the usage of the Business Services), security services and fraud services. Our service providers also include our professional advisors (such as accountants, auditors, lawyers) and our personnel, contractors, consultants.
To Consumers, as necessary to facilitate the delivery of orders or transactions. For example, if Business Personnel are providing delivery services for its merchant (i.e., Business Partner) in connection with a Consumer order, we may share the Personal Information (such as full or partial name, contact information and/or location information) that we receive from the Merchant with the Consumer through our Consumer platforms and services.
To Delivery Contractors, as necessary to facilitate the pick-up of orders for delivery by our Delivery Contractors.
To Marketing and Advertising Partners, to deliver and perform marketing and/or advertising to you on our behalf.
To Parties and Persons In Connection with Actual or Potential Corporate Transactions, in connection with strategic transactions including any sale, merger, acquisition, joint venture, assignment, transfer, reorganization, bankruptcy or receivership. The Personal Information may be transferred or disclosed during the diligence process to counterparties and others assisting with the transaction and we may transfer your Personal Information to a successor or affiliate as part of that transaction along with other assets.
To Government Authorities or where Legally Required or Permitted, we and our service providers (including domestic and foreign service providers) may disclose your Personal Information, including information about your interaction with the Business Services, with third parties such as government authorities, or other third parties if legally required or permitted, or as necessary to enforce our agreements, prevent fraud and other illegal activity, or protect the rights, property, or safety of our business, our employees and other persons or parties (such as Consumers and Delivery Contractors). These disclosures may include lawful access by U.S. or foreign courts, law enforcement, or other government authorities.
To Our Group of Companies, in connection with the Business Services and our business activities for use in connection with the purposes and uses described in this Policy.
To Other Third Parties or Persons, with your consent or at your direction, to individuals in connection with your referrals, and for insurance claims.
VI.Your Privacy Rights and Choices.
a. Your Privacy Rights. Depending on your jurisdiction, and subject to certain exceptions, exemptions, and restrictions, you or your authorized agent may exercise the following rights:
Access/Portability: You may have the right to request access to your Personal Information and receive it in a portable and machine-readable format.
Deletion: You may have the right to ask us to delete your Personal Information, including your DoorDash account, although this may impact your ability to use the Business Services. Following a deletion request, we will keep a record of all rights requests and may retain limited Personal Information in accordance with Section VIII below.
Correction: You may have the right to correct, rectify, or update inaccurate Personal Information that we hold about you. We do not track updates or corrections that users make on their own.
Opt-Out of Sale or Sharing (Targeted Advertising or Ads Personalization): In connection with the Business Services, advertising partners may collect and process Personal Information about you via cookies and similar technologies for targeted advertising or ad personalization on third-party platforms. This may constitute a “sale” or “share” of your Personal Information and you may have the right to opt-out of these processing activities.
Right to Appeal: You may have the right to appeal decisions that we make with regards to a rights request.
Right to Withdraw Consent: You have the right to withdraw consent when consent is legally required (subject to our legal or contractual restrictions and reasonable notice). If you withdraw consent, we may not be able to provide certain services to you.
We will not discriminate against you for exercising any applicable right(s). We reserve the right to deny your request if we cannot verify your identity (or if a request is submitted by an authorized agent, we cannot verify the authority of the agent and/or your identity) or if an exemption or exception applies.
b. Exercising Rights:
Submitting Rights Requests Generally.To exercise your rights, please contact us at merchant-privacy@doordash.com. We will provide a timely response in accordance with applicable law. You also may contact us via support at the number listed in Section XIII of this Policy. Subject to access permissions, you may be able to add or remove Business Personnel for a Business Partner through functionality available within the Business Services; however, the deletion or removal of Business Personnel from being authorized account users for a Business Partner will not trigger a request to delete Personal Information for the removed Business Personnel. When contacting us, please provide your first and last names, email address, address of residency, identify the right(s) that you wish to exercise, identify your relationship with us (for example, you are a Business Personnel for either a merchant or a customer) and specify the legal name of the company you are associated with. For rights requests from an authorized agent, in addition to the information requested in the immediately foregoing sentence, the requestor should include the first and last names and email addresses for the authorized agent and evidence of the authority granted to the agent (such as a power of attorney). If contacting us via the email address above, please clarify in the subject-line of the email that you are either an “Authorized Agent” or “Business Personnel”.
Right of Correction or Rectification. Please log-in to your account to update your information or if you need support to update your information, contact our support teams using the contact information in Section XIII of this Policy or otherwise contact us as described in the exercising rights section below.
Opt-Out of Sale or Share.To opt-out of the “sale” or “sharing” of Personal Information through cookies and similar technologies in connection with our Business Services, you can access our browser-level opt-out option here. You may also opt-out of selling or sharing in connection with our websites by visiting them with a legally recognized preference signal enable, such as the Global Privacy Control. If you previously opted-out and wish to opt-in, you can use the option identified above to change your preference.
c. Additional Choices.
i. Communication Preferences: In addition to any other disclosures contained in this Policy regarding your ability to manage communication preferences, please see the following:
Unless otherwise set forth in the applicable consent disclosure, all consents obtained by DoorDash for sending text messages (e.g., SMS, MMS, RCS) shall be specific for text messages sent by or on behalf of DoorDash and the relevant services. Carriers are not liable for delayed or undelivered messages.
To opt-out of marketing and promotional emails, please click on the unsubscribe or other opt-out mechanism in the email. After clicking the unsubscribe or other opt-out option, you can follow the options and instructions for completing your unsubscribe request.
To opt-out of phone calls, you can contact support via the contact information in Section XIII of this Policy or follow the options disclosed during the call.
To opt-out of Business Services commercial or marketing text messages, reply “STOP” to the message.
To opt-out of Business Services transactional or informational text messages, reply “STOP” to the message.
VII.Additional Jurisdiction Specific Disclosures.
1. California.
a. Reporting Metrics
Applicable Period January 1, 2025 - December 31, 2026
Scope: We have not received any data subject rights requests from Business Personnel.
b. Notice at Collection.
For information on the categories of Personal Information collected, see Section II of this Policy.
For information on the sources from which we collect Personal Information, see Section III of this Policy.
For information on the purpose(s) for which Personal Information is collected or used, see Section IV of this Policy.
For information on the categories of third parties to whom we may disclose your Personal Information, see Section V of this Policy.
For information about our Selling or Sharing Personal Information, see Section VI of this Policy.
2. Canada.
a. Privacy Governance Policies and Practices.
We are committed to protecting your Personal Information and have implemented policies and practices that govern our treatment of Personal Information, including:
Designated roles and responsibilities in connection with handling Personal Information in our custody and control;
Policies and procedures regarding the protection of Personal Information, including safeguards designed to protect Personal Information against loss or theft and unauthorized access, disclosure, copying, use, and modification;
Processes for responding to data subject requests and complaints;
A framework for the retention and disposition of information designed to ensure compliance with our legal obligations.
In addition, we have designated our Canadian Privacy Officer as being responsible for overseeing our compliance with applicable privacy laws, and we provide our employees with privacy training and awareness.
b. Canadian Privacy Officer.
If you have any questions or concerns relating to this Policy or our privacy and security practices, including the manner in which we and/or our service providers (including service providers outside of Canada and if you are living in the Province of Quebec, outside of Quebec) collect, treat, process and disclose your personal information, or the scope of any consents requested by us, please contact our Canadian Privacy Officer using the contact information in Section XIII of this Policy.
c. Canadian Privacy Commissioners.
If you are not satisfied with how we have attempted to resolve your questions, concerns or complaints, please consult the applicable federal or provincial privacy commissioner in your jurisdiction whose information can be found online at the below sites.
3. Australia. If you make a complaint, we will endeavor to respond to it as soon as possible. If you are dissatisfied with our response, you may have the right to make a complaint to the Office of the Australian Information Commissioner by phoning 1300 363 992 or by email at enquiries@oaic.gov.au.
4. New Zealand. If you make a complaint, we will endeavor to respond to it as soon as possible. If you are dissatisfied with our response, you may have the right to make a complaint to the Office of the Privacy Commissioner by visiting https://www.privacy.org.nz/your-rights/making-a-complaint/.
VIII. Security and Retention.
We use commercially reasonable administrative, organizational, technical and physical security controls to protect your Personal Information from unauthorized access, modification, disclosure, or destruction. Protecting your Personal Information is also your responsibility and we urge you to take precautions to protect your Personal Information, including by not sharing your account password or two-factor authentication codes with anyone. If you have reason to believe that your account or any interaction with us is no longer secure please let us know immediately by contacting our support or as indicated below in Section XIII of this Policy.
We retain your Personal Information for only as long as required to engage in the uses described in this Policy, unless a different retention period is required by applicable law, and as permitted or required in accordance with applicable data protection and privacy laws.
The criteria used to determine our retention periods include the type of Personal Information being processed, along with:
The time necessary to fulfill the purposes for which we collected the information;
The duration and status of your relationship with or connection to us, including whether your account is active;
Any retention period required for our compliance with legal, regulatory, or government requirements (including applicable data protection and privacy laws), including the period during which civil claims or regulatory actions may be filed or otherwise commenced and the period needed to resolve ongoing legal proceedings; and
Our internal obligations, contractual commitments, and other requirements.
IX. Cross-Border Transfers of Personal Information.
The Personal Information processed in connection with this Policy, including by us and/or our third-party service providers, may be stored and processed on systems and servers and accessed by persons and parties, located outside of the jurisdiction where you live (including outside of Australia, Canada (including outside of the province in which you live), New Zealand, and the United States), including storing, accessing, and processing the Personal Information in the United States and other global locations whose data protection laws may differ from those where you live.
X. Personal Information from Minors.
Our Business Services are intended for individuals who are acting in a commercial, professional or business capacity. As a result, our Business Services are not intended for individuals under the age of majority in the applicable jurisdictions, which means that our Business Services are not intended for individuals under the age of 18. Therefore, we do not knowingly process Personal Information from or about individuals under 18 years of age. If a parent or legal guardian of a child under the applicable legal age believes that we have collected Personal Information from or about such an individual, please contact us at privacy@doordash.com. For clarification, the terms of this Section are not setting the minimum age for signing-up for an account with the Business Services and/or for providing or performing activities in connection with the Business Services, which minimum age may require an individual to be older than 18 years old.
XI. Third-Party Sites.
The Business Services may link to other third-party websites that are not controlled by us. These third parties are not under our control and we are not responsible for their privacy policies or practices. If you provide any Personal Information to any third party or through any such third-party websites, it will be subject to the privacy policies and practices of that third party.
XII. Identity Verification.
As part of verifying the identity of those Business Personnel eligible to access and use Business Services (for example, at or during creating an account for the Business Services and/or during the term of a Business Partner’s relationship with us), we may ask you to upload a selfie and a photo of an approved and current (non-expired) government identification document (“ID”). Those images go directly to Persona Identities, Inc. (“Persona”), one of our service providers. In addition, pursuant to the disclosures made at the point of collection, we will also receive the selfie that you submit and will use and process the selfie separate from Persona’s activities described below. We will use the selfie for the purposes and uses described in Section IV of this Policy.
Persona processes these images, including by generating data about your facial geometry (as applicable), which may be considered to be biometric data in some jurisdictions, for the purposes of verifying your identity and preventing fraud. This may involve comparing the biometric data generated from your selfie to the biometric data generated from your ID, as well as comparing the biometric data generated from your images to the biometric data generated from other images. Persona stores the biometric data and uses it to perform ongoing identity-verification and fraud-prevention screenings and permanently deletes the data when it is no longer needed to fulfill those purposes, or within two years, whichever is sooner. Persona relies on service providers to process the biometric data and other information for these purposes. For more information on Persona’s policies, please visit Persona’s Privacy Policy (https://withpersona.com/legal/privacy-policy).
Persona sends us the results of this screening but not the biometric data used to perform it. We do not collect or have access to the biometric data generated by Persona to perform these services.
XIII. How to Contact Us.
For questions or concerns related to this Policy, please contact us at privacy@doordash.com or:
DoorDash, Inc.
Attn: Legal
303 2nd St, Suite 800
San Francisco, CA 94107
For support, please contact our support teams at:
Tel: (855) 222-8111
Email: Support@doordash.com
XIV. Changes to this Privacy Policy.
We may update this Policy periodically to account for changes in how we collect and process your Personal Information. To the extent any of these changes are material, we will provide additional notice and/or obtain consent where required by law. Any updates to this Policy will apply to the collection and processing of Personal Information after the “Last Updated” date at the top.