Candidate Privacy Notice
This Candidate Privacy Notice (“Privacy Notice”) applies to DoorDash applicants who apply or have applied for a position with DoorDash, as well as candidates who were referred to DoorDash by others or proactively sourced by our recruitment team. It also applies to former employees, former members of the Board of Directors, and the emergency contacts and beneficiaries of current and former employees (collectively “Data Subjects”). Certain limited portions of this Privacy Notice also apply to non-dasher independent contractor candidates (“Contractor Candidates”) and former non-dasher independent contractors (“Former Contractors”).
Effective Date: December 15, 2023
DoorDash, Inc., and its operating groups, subsidiaries and affiliates (collectively, “DoorDash,” “we,” “us,” or “our”) is committed to protecting the privacy and security of your personal information. Personal information is any information that can be associated with an identified or identifiable individual or as such information is defined under applicable data protection and privacy laws. DoorDash is a technology company that connects people with the best of their neighborhoods by enabling local businesses to meet consumers’ needs of ease and convenience, and, in turn, generate new ways for people to earn, work, and live.
APPLICABILITY OF THIS PRIVACY NOTICE
This Privacy Notice explains how we process (e.g., collect, use, disclose, and protect) personal information of Data Subjects.
Certain limited portions of this Privacy Notice also apply to Contractor Candidates and Former Contractors. Nothing in this Privacy Notice is intended to create or be construed as creating an employment relationship between DoorDash and Contractor Candidates or Former Contractors.
This Privacy Notice does not apply to current employees of DoorDash. If you are a current employee of DoorDash, please view our internal employee resources for additional information on how we process your personal information and your rights and choices regarding such processing.
This Privacy Notice does not apply to how DoorDash processes personal information of users of our services. For more information on such processing, please review our General Privacy Policy.
This Privacy Notice does not apply to Dashers. If you are a Dasher, please view our Dasher Privacy Policy.
PERSONAL INFORMATION COLLECTED AND PURPOSES OF COLLECTION
We collect the following categories of personal information for the purposes described below, subject to applicable law. We may also collect and retain such personal information:
To comply with legal and contractual requirements
To establish, exercise and defend legal and contractual rights and claims
To cooperate with law enforcement
For the health and safety of you and others
To investigate and prevent activities related to fraud, harassment, malicious or deceptive activities or any other illegal activities
For similar purposes
If you do not provide us with certain personal information, we may not be able to process your job application, assess your suitability for a particular role, comply with our legal obligations, or manage our business.
Category of Personal Information | Personal Information Collected | Purpose |
Personal identifiers | Full name and preferred name Telephone number Postal address Email address Unique personal or online identifier Internet Protocol (IP) address Social Security number Passport Number, driver’s license or state identification card number and photograph Age or date of birth Other similar identifiers | DoorDash collects personal identifiers to process job applications; evaluate your qualifications; communicate with you and your emergency contacts and beneficiaries; inform you of potential employment opportunities at DoorDash; prepare employment offers; perform employment checks; provide former employees with access to relevant information and benefits; comply with our legal obligations; and as permitted by law. DoorDash collects some of these personal identifiers on Contractor Candidates to evaluate whether we would like to enter into an independent contractor relationship. |
Records identified by state law (including the California Customer Records statute (Cal. Civ. Code § 1798.80(e))) | Name Signature Social Security number Address Telephone number Passport number, driver's license or state identification card number Insurance policy number Education Employment history Bank account number and other financial information Medical information for provision of insurance benefits | DoorDash collects this information to process applications of job applicants and former employees, administer health and insurance benefits and perform background checks as permitted by law. DoorDash collects financial information such as payment card or banking information to reimburse applicants for travel expenses for in-person interviews and to pay out benefits, reimbursements and the like to former employees. |
Protected Classification Characteristics under Applicable Law | Race Religious creed National origin Ancestry Physical or mental disability Marital status Sex, gender, gender identity, or gender expression Age Sexual orientation and sex life Military and veteran status Health data (including medical conditions and disability status) Citizenship or immigration status Criminal and motor vehicle report background check information including drivers license number, passport number and government issued ID | DoorDash collects such information through voluntary self-disclosure and other means to implement our equity, diversity and inclusion programs and to comply with applicable laws. This data is aggregated with other candidates and applicants and used for statistical purposes. DoorDash also collects information about your health to assess your working capacity and any requested accommodations, and to comply with applicable laws. DoorDash collects information on beneficiary and emergency contact relationships which could include information on sexual orientation and sex life. DoorDash collects information about your citizenship or immigration status to assess your eligibility to work in the jurisdiction where you apply. DoorDash collects background check information to perform employment checks as permitted by law. |
Commercial information | DoorDash does not typically collect such information on Data Subjects. | DoorDash does not typically collect such information on Data Subjects. |
Biometric Information | DoorDash does not typically collect such information on Data Subjects. | DoorDash does not typically collect this type of information on Data Subjects. |
Internet or other similar network activity information | IP address and log-in information Browsing history, search history such as information regarding your interaction with DoorDash owned websites, email behavior | DoorDash collects this information to process applications of job applicants. We may also collect such information to protect ourselves, our customers, our people and their property, equipment, and confidential information. Our collection of such information on candidates, applicants and former employees is limited to your interaction with DoorDash websites and DoorDash emails. For information on how we collect online activity information on users of DoorDash websites, please review the General Privacy Policy. |
Geolocation data | Physical location or movements | DoorDash may retain geolocation information of our former employees to the extent such information was collected during the course of their employment. To the limited extent we may have collected geolocation data on Former Contractors it may also be retained. Our Employee and Contractor Privacy Notice sets out the purposes for collection of geolocation data on current employees and non-dasher independent contractors. |
Sensory data | Audio and visual information, including computer microphone recordings and on site workplace monitoring on DoorDash premises | Where legally permitted, DoorDash may collect audio and video recordings during the interview process (during remote and on site interviews). We may use this information for quality, training, and compliance purposes and retain it as required by applicable law. We may collect and retain such information on Data Subjects, Contractor Candidates, and Former Contractors. |
Professional or Employment Related Information | Education records such as grades, transcripts, and class lists Employment history Resume or curriculum vitae Information related to desired salary | DoorDash may collect education and employment information to process job applications to evaluate your qualifications and for the purpose of making a decision about your current and future employment opportunities with DoorDash. We may collect such information on Contractor Candidates to evaluate whether we would like to enter into an independent contractor relationship. We may retain such information relating to former employees and Former Contractors. |
Education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)) | Education records such as grades, transcripts, and class list | DoorDash may collect such information to process job applications and to evaluate whether we would like to enter into an independent contractor relationship. We may retain such information on former employees and Former Contractors. |
Inferences Drawn From Other Personal Information | Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities and aptitudes | DoorDash may collect inferences drawn from other personal information to evaluate candidates and to manage our relationship with Data Subjects. However, we do not make inferences based on sensitive personal information. |
Personal Information about children under the age of 16 | Personal information about former employees’ dependents under the age of 16. | DoorDash collects information about employees’ dependents under the age of 16 and may retain such information on former employees. DoorDash collects such information if employees voluntarily provide such information in connection with the enrollment and administration of benefits and other human resource purposes that involve such dependents. |
We may also collect any personal information not listed above that is publicly available, or that you or the sources below voluntarily provide.
DoorDash does not sell personal information of Data Subjects, Contractor Candidates, or Former Contractors to third parties for monetary or other consideration, nor do we share such personal information with third parties for purposes of cross-context behavioral and targeted advertising.
DoorDash may collect sensitive personal information on Data Subjects. For an overview of personal information which may be considered sensitive personal information collected and processed by DoorDash, please review the following categories in the chart above: “Protected Classification Characteristics Under Applicable Law”, “Biometric Information”, “Geolocation Data”, and “Personal Information about children under the age of 16”. DoorDash does not use such personal information for the purpose of making inferences about you.
SOURCES OF PERSONAL INFORMATION
Subject to applicable law, we collect personal information directly from you. To the extent you are providing DoorDash with personal information of others, such as your emergency contacts and beneficiaries, you are responsible for providing all legally necessary notices and collecting all legally necessary consents for the collection and use of such personal information. Additionally, we may collect your personal information from other third party sources, including:
Recruiters
Prior employers (e.g., for references)
Professional references
Educational institutions
Pre-employment screening services
Credentialing and licensing organizations
Publicly available sources such as your social media profile (e.g., LinkedIn, Twitter and Facebook)
Other sources as directed or authorized by you
We may combine personal information collected from other sources with the personal information you provide to us.
We typically collect Contractor Candidate personal information from third party service providers.
DISCLOSURE OF PERSONAL INFORMATION
Subject to applicable law, we may disclose your personal information with other employees, contractors, and consultants for the purposes described in this Privacy Notice. These individuals may include hiring managers and personnel in HR, IT, Cybersecurity, Legal, Finance, Accounting and Internal Audit and other departments as may be necessary.
In addition, we may share your personal information with the following parties:
Affiliates: We may share your Personal Information with DoorDash subsidiaries and affiliates.
Service Providers (including data processors and third parties): We use service providers to operate, host and facilitate our operations and business (including human resources operations). These may include hosting, technology and communication providers; security and fraud prevention consultants; analytics providers; background and reference check screening services to conduct our recruitment processes; and hiring process tools. Our service providers may be located in the United States or other locations, globally.
Your Representatives: We may need to share personal information with your relatives, selected emergency contacts, legal representatives and other individuals based upon your directions.
Government authorities and law enforcement: We may provide personal information to governmental bodies (such as regulatory bodies, courts and court-appointed persons) in certain situations. For example, we may share your information in response to lawful requests by public authorities (such as subpoenas and court orders).
Actual or Potential Corporate Transactions: If we are involved in strategic transactions including any sale, merger, acquisition, joint venture, assignment, transfer, reorganization, bankruptcy or receivership, we may disclose your Personal Information and other information in the diligence process with counterparties and others assisting with the transaction and transferred to a successor or affiliate as part of that transaction along with other assets.
Professional advisors: We may share your personal information with our professional advisors such as auditors, lawyers, and insurers.
Other: We may also share your personal information with other third parties for purposes of fulfilling our legal obligations under applicable law, regulation, court order or other legal process, such as preventing, detecting and investigating security incidents and potentially illegal or prohibited activities; protecting the rights, property or safety of you, us or another party; enforcing any agreements with you; responding to claims; and resolving disputes.
CROSS BORDER DATA TRANSFERS
DoorDash and / or our service providers may process personal information in the United States and globally and your information may be processed outside of your country of residence. We contractually require any third party service providers to provide safeguards of personal information that are substantially similar or equivalent to requirements under applicable local law and the protections set out in this Privacy Notice.
DATA SECURITY
We have implemented appropriate physical, technical, and organizational security measures designed to secure your personal information against accidental loss and unauthorized access, use, alteration, or disclosure.
Please recognize that protecting your personal information is also your responsibility. We urge you to take every precaution to protect your information when you are on the Internet, or when you communicate with us and with others through the Internet. Change your passwords as appropriate, use a combination of letters and numbers, and make sure you use a secure browser. If you have reason to believe that your interaction with us is no longer secure or have other data security concerns or complaints (for example, if you feel that the security of your account might have been compromised), please let us know immediately by contacting [email protected] or [email protected].
LEGAL BASIS FOR DATA PROCESSING
The appropriate legal basis for processing personal information varies by jurisdiction. Typically, we rely on notice, implied and express consent, furtherance of a legal contract, and/or legitimate interests as the legal basis for collecting and processing your personal information.
DATA RETENTION
We will retain candidate and applicant personal information for as long as reasonably necessary during our consideration of your candidacy. We will retain Contractor Candidate personal information for as long as reasonably necessary to evaluate whether we would like to enter into an independent contractor relationship. We will further retain all personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Additionally, we will set applicable data retention schedules in consideration of, without limitation, the following:
The length of time necessary to fulfill the purpose(s) for which we collected the personal information;
When your relationship with us ceases or terminates;
The length of time it is reasonable to keep records to demonstrate that we have fulfilled our business and legal duties and obligations and contractual commitments (as applicable);
Any limitation periods within which claims can be made;
Any retention periods prescribed by law or recommended by regulators, professional bodies, or associations; and
The existence of any relevant legal proceedings.
PRIVACY GOVERNANCE POLICIES AND PRACTICES
We are committed to protecting your personal information and have implemented policies and
practices that govern our treatment of personal information, including:
Designated roles and responsibilities in connection with handling personal information in our custody and control
Policies and procedures regarding the protection of personal information, including safeguards designed to protect personal information against loss or theft and unauthorized access, disclosure, copying, use, and modification
Processes for responding to data subject requests and complaints
A framework for the retention and deletion of information designed to ensure compliance with our legal obligations
A designated Data Protection Officer responsible for overseeing the company’s compliance with applicable privacy laws where required
Providing employees with privacy training and awareness
DATA SUBJECT RIGHTS
Residents of certain jurisdictions have rights pertaining to our processing of personal information. These rights are not absolute, meaning that we may not be obligated to comply with your request. Contractor Candidates and Former Contractors residing in certain jurisdictions may also exercise their data subject rights via the process described below, if they additionally specify that they are a Contractor Candidate and/or Former Contractor in their initial email. For all requests, we will need to verify the identity of the Data Subject, Contractor Candidate, or Former Contractor and, if applicable, the identity and authority of the person submitting the request on their behalf. If we are unable to confirm or validate identity, we may reject or deny the request.
Type of Right | Description |
Right of Deletion | This right provides an individual with the opportunity to request deletion of personal information collected from the individual. Notwithstanding the fact that a data subject may exercise a right to delete personal information, please note that we will keep a record of all rights requests and we may retain personal information even after receiving and processing a right of deletion request if such retention is permitted or required under applicable data protection and privacy laws. |
Right to Correct or Rectify Personal Information | Taking into account the nature of the personal information and the purposes of the processing, this right provides individuals with the ability to correct or update inaccurate personal information that we hold about the individual. |
Right of Access / Right to Know / Right to Data Portability / Right to Confirmation of Processing of Personal Information | This right provides an individual with the opportunity to know what personal information has been collected about them, including the specific pieces of personal information, the right to know what personal information has been sold or shared and with whom, and the right to receive a copy of the personal information in a portable and, to the extent technically feasible, a readily usable format. |
Right to Opt-Out of Sale or Sharing of Personal Information Right to Opt-In | This right provides an individual with the opportunity to opt-out of having their information sold, shared, or used for targeted advertising. State laws have specific definitions of selling, sharing, and targeted advertising. For example, the California Privacy Rights (“CPRA”) broadly defines “sale” as any sharing of personal information with third parties in exchange for monetary or other valuable consideration. The CPRA defines “sharing” as sharing personal information with a third party for cross context behavioral advertising. This includes sharing personal information in a way that allows third parties to receive certain information such as cookie identifiers, IP addresses and/or browsing behavior to add to a profile about your device, browser or you. Such profiles may enable delivery of interest-based advertising or cross-context behavioral advertising by such third parties within their platform or on other sites. You also have the right to Opt-In if you change your mind. This right provides individuals who have chosen to exercise their right to opt-out the opportunity to opt-in for the sale and sharing of their personal information. |
Right to Limit the Use and Disclosure of Sensitive Personal Information | Under the California Privacy Rights Act of 2020 (“CPRA”), this right provides an individual with the right to direct a business that collects sensitive personal information about the individual to limit its use of the individual’s sensitive personal information to only the use necessary to perform the services or provide the goods reasonably expected by the average individual who requests those services or goods or as otherwise permitted under applicable data protection and privacy laws. |
Right of Non-Discrimination and Non Retaliation | This right provides an individual with the right to not be discriminated against as a result of exercising a right provided under applicable data protection and privacy laws. Generally, this right prohibits a Controller from (a) denying an individual access to or use of goods and services, (b) charging different prices or rates for goods and services, or (c) providing a different level or quality of goods or services, as a result of the individual exercising a right under data protection and privacy laws. |
Right to Withdraw Consent | This right provides individuals with the opportunity to withdraw their consent where DoorDash has collected their personal information on the basis of such consent. |
Right to Appeal / Right to Petition local data protection authorities | If you believe your data subject rights request was incorrectly denied or that your personal information was collected, processed or shared in a way that contradicts applicable privacy or security laws, in certain jurisdictions, you have the right to appeal to DoorDash and/or your local data protection authorities. |
Exercising your Data Subject Rights
To exercise any of the Data Subject Rights listed above, contact us at [email protected] and include the following information in the email:
In the subject line specify the type of request you are making.
Ex: “Right of Access Request”
In the body of the email please provide your first and last name and address and describe the nature of your relationship with DoorDash (applicant, applicant contractor, employee beneficiary, etc.) and provide any other facts you believe may be relevant.
For example, if you are exercising your right to make a data security complaint, you may want to explain what personal information you believe was subject to unauthorized access and why.
Unsubscribing from DoorDash Recruiting Email Messages & Text Messages. If you are receiving recruitment related messages from DoorDash and would like to unsubscribe from future messages, you can do so by replying “STOP” to an email or text, and/or follow the opt out instructions included in the message. You may opt out of text messages and continue on with the recruitment process. However, if you wish to withdraw from email messages, we may not be able to continue with the recruitment process. Please note that opting-out of messages for one channel will only apply to that channel (e.g., if you opt-out of SMS/text messages, it will only apply to messages sent via SMS/text and will not apply to messages sent via email). If you are also a DoorDash customer or Dasher, this will not opt you out of messages related to these services.
Authorized Agent Requests. For authorized agents submitting a request on behalf of a Data Subject, Contractor Candidate or Former Contractor, please contact us at [email protected] and provide (i) the first and last names and email address for the data subject, (ii) the first and last names and business contact information for the agent, (iii) evidence of authority (e.g., power of attorney, etc.), (iv) the nature of your relationship with DoorDash (applicant, applicant contractor, employee beneficiary, etc.), (v) the right(s) being exercised, and (vi) in the subject line “Authorized Agent Request”.
Contact DoorDash by Phone: If you do not have access to email or based on your personal preference, you may exercise any of the rights available to you by calling us at (855) 973-1040
CALIFORNIA SHINE THE LIGHT LAW
The “Shine the Light” requirements under California Civil Code §1798.83 do not apply to the individuals covered under this Privacy Notice because we do not engage in activities covered by this law.
CHANGES TO THIS PRIVACY NOTICE
This Privacy Notice may be subject to updates from time to time with or without notice. We recommend that you periodically review this Privacy Notice. In the event of any changes to this Privacy Notice, we will determine whether or not notice is required and, if notice is required, we will provide appropriate notice taking into account the nature of the changes.
CONTACT FOR QUESTIONS
If you have any questions or concerns regarding this Privacy Notice, the collection of your personal information, or our privacy and security practices, including the manner in which we collect, process, and share your personal information, or the scope of any consents requested by DoorDash please contact us at [email protected] or at the address below:
Privacy Officer / Data Protection Officer
DoorDash, Inc.
303 2nd St, Suite 800
San Francisco, CA 94107
Telephone Number: +1 (855) 973-1040