California Privacy Notice
California Residents. For California residents that are individuals covered by the DoorDash General Privacy Policy, this California Privacy Notice (“Notice”) provides supplementary and important disclosures. Please note that certain sections of this Notice reference back to the General Privacy Policy (such as detailed information on how to exercise privacy rights). For California residents covered by the Dasher Privacy Policy, all disclosures required under California law can be found within the Dasher Privacy Policy. Capitalized terms used in this Notice but not defined herein, shall have the meaning ascribed to such terms in the General Privacy Policy. All references to a “consumer” in this Notice shall include the categories of data subjects covered by this Notice who are residents of the State of California. For clarification, all references to “business” shall mean DoorDash.
A. California Privacy Rights Act (“CPRA”) Disclosures.
i. USERS:
a. Notice at Collection.
1. In addition to the other categories of personal information that are identified as being collected from or about Users in Section 2.A. of the General Privacy Policy, we collect the following categories of personal information about or about you:
-Identifiers: Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, phone number, account name, social security number, driver’s license number, passport number, or other similar identifiers.
-Any personal information described in subdivision (e) of Section 1798.80 of the California Civil Code: information such as signature, physical characteristics or description, state identification card number, insurance policy number, education, bank account number, credit card number, debit card number, and other financial information, medical information, and health insurance information.
-Protected Classifications: Characteristics of protected classifications under California or federal law, such as race, color, national origin, religion, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, disability, citizenship status, and military and veteran status.
-Commercial Information: Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
-Online Activity: Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding an individual’s interaction with an internet website application, or advertisement.
-Geolocation Data: data that is derived from a device and is used or intended to locate an individual within a geographic area.
-Sensory Information: Audio, electronic, visual, thermal, olfactory, or similar information.
-Employment Information: Professional or employment-related information.
-Inferences Information: Inferences drawn from any of the information identified collected from or about you to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
-Sensitive Personal Information: as this term is defined under the CPRA, including, as applicable, precise geolocation; a social security, driver’s license, state identification card, or passport number; racial or ethnic origin; religious beliefs; mental or physical health diagnosis; sex life or sexual orientation; or citizenship; etc. We do not use or disclose your sensitive personal information for purposes other than to perform the services reasonably expected by an average consumer, for security and legal reasons, with your consent, and/or for other purposes permitted by applicable law.
-Communications Data: such as the nature and content of communications, date and time sent, etc.
-Survey Response Data: such as demographic information and survey responses that you provide when you voluntarily participate in a survey for us.
2.We may use the categories of personal information listed above for the purposes described in Section 2.A. of the General Privacy Policy. In addition, for CPRA compliance purposes, we use the personal information for purposes (business and commercial) as described below.
Purposes | Categories of Personal Information |
Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards | -Identifiers -Online activity |
Helping to ensure security and integrity to the extent the use of the consumer’s personal information is reasonably necessary and proportionate for these purposes | -Identifiers -Any personal information described in subdivision (a) of Section 1798.80 of the California Civil Code -Commercial Information -Online Activity -Geolocation Data -Sensory Information -Employment Information -Sensitive Personal Information -Communications Data -Survey Response Data |
Debugging to identify and repair errors that impair existing intended functionality | -Identifiers Any personal information described in subdivision (a) of Section 1798.80 of the California Civil Code -Commercial Information -Online Activity -Sensory Information -Geolocation Data -Communications Data |
Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of a consumer’s current interaction with the business, provided that the consumer’s personal information is not disclosed to another third party and is not used to build a profile about the consumer or otherwise alter the consumer’s experience outside the current interaction with the business | -Identifiers -Commercial Information -Online Activity -Geolocation data |
-Performing services on behalf of the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of the business -Undertaking internal research for technological development and demonstration | -Identifiers -Any personal information described in subdivision (a) of Section 1798.80 of the California Civil Code -Protected Classifications -Commercial Information -Online Activity -Geolocation Data -Sensory Information -Employment Information -Inference Information -Sensitive Personal Information -Communications Data -Survey Response Data |
Providing advertising and marketing services, except for cross-context behavioral advertising, to the consumer provided that, for the purpose of advertising and marketing, a service provider or contractor shall not combine the personal information of opted-out consumers that the service provider or contractor receives from, or on behalf of, the business with personal information that the service provider or contractor receives from, or on behalf of, another person or persons or collects from its own interaction with consumers | -Identifiers -Commercial Information -Online Activity -Geolocation Data -Inference Information -Survey Response Data |
Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. | -Identifiers -Any personal information described in subdivision (a) of Section 1798.80 of the California Civil Code -Protected Classifications -Commercial Information -Online Activity -Geolocation Data -Sensory Information -Employment Information -Sensitive Personal Information -Communications Data -Survey Response Data |
3.For the categories of personal information collected, the personal information is retained in accordance with Section 5 (Data Retention) of the General Privacy Policy.
4.For this group or category of consumer, DoorDash sells or shares, as those terms have meaning under California law, the following categories of personal information:
-Identifiers
-Protected Classifications
-Commercial Information
-Online Activity
b. Prior Collection, Use and Disclosure of Personal Information.
We may have collected and used your personal information, as described in Section A.i.a. of this Notice, during the preceding 12 months. For the personal information collected during this period, we describe below: (1) the categories of sources from which we have collected the personal information, (2) the categories of third parties with whom we have disclosed your personal information for our business or commercial purposes, (3) the categories of personal information we have disclosed for a business purpose, and (4) the categories of third parties to whom we have sold or shared personal information and purpose(s) for which the personal information was sold or shared.
(1)Categories of sources from which we have collected the personal information:
Categories of Sources | Categories of Personal Information |
Information you provide directly to us, when you complete a form, complete a survey, place an order, etc. | -Identifiers -Any personal information described in subdivision (a) of Section 1798.80 of the California Civil Code -Protected Classifications -Commercial Information -Sensory Information -Employment Information -Sensitive Personal Information -Communications Data -Survey Response Data |
Information received from you as part of communications with us | -Identifiers -Any personal information described in subdivision (a) of Section 1798.80 of the California Civil Code -Protected Classifications -Commercial Information -Employment Information -Communications Data |
Your device, systems, browsers, and equipment when you access our platforms or Services | -Identifiers -Online Activity -Geolocation Data -Sensitive Personal Information |
Information collected from another User when making a Gift to you or sending you a Referral (if applicable) | -Identifiers |
Collected from Social Networks | -Identifiers |
Collected from market enrichment partners | -Identifiers -Protected Classifications -Commercial Information -Inference information |
Collected from advertising partners | -Identifiers -Protected Classifications -Commercial Information -Online Activity -Inference Information |
Collected from payment providers | -Identifiers -Any personal information described in subdivision (a) of Section 1798.80 of the California Civil Code |
Collected from business partners | -Identifiers -Commercial Information -Protected Classifications |
(2)Categories of third parties with whom we have disclosed the information for our business or commercial purposes:
Categories of Third Parties | Categories of Personal Information |
-Our affiliate -Vendors providing services to us or on our behalf -Professional services organizations (e.g., law firms, accountants, auditors, etc.). -Any entity, agency, department, authority or other body that we have an obligation, duty, or are otherwise permitted or required to disclose your personal information to (e.g., regulators, government authorities, law enforcement, courts, etc.) -Third parties in order to participate in, or be the subject of, any sale, merger, acquisition, restructure, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock or other similar transaction(s), in which case we may disclose your personal information to prospective buyers, sellers, advisers or partners and your data may be a transferred asset in a business sale -Third parties as required or permitted to comply with legal and/or regulatory requirements and obligations -Persons or parties that you instruct or direct us, or provide consent for us, to disclose your personal information to | -Identifiers -Any personal information described in subdivision (a) of Section 1798.80 of the California Civil Code -Protected Classifications -Commercial Information -Online Activity -Geolocation Data -Sensory Information -Employment Information -Inference Information -Sensitive Personal Information -Communications Data -Survey Response Data |
-Merchants (e.g., to process and prepare an order, etc.) -Dashers (e.g., to deliver an order, etc.) | -Identifiers -Commercial Information -Communications Data |
Social Networks (e.g., when you sign-in or connect your User account with a Social Network account, etc.) | -Identifiers -Online Activity |
-Business partners who help us deliver co-branded products (e.g., providing co-branded credit card opportunities, etc.) -Loyalty Programs | -Identifiers -Any personal information described in subdivision (a) of Section 1798.80 of the California Civil Code -Protected Classifications -Commercial Information -Online Activity -Geolocation Data -Employment Information -Inference Information |
A User or Non-User who you send a Gift or Referral to in connection with your use of our Services | -Identifiers |
(3)Categories of personal information that we have disclosed for a business purpose:
-See the categories of personal information described in Section A.i.a.1. of this Notice.
(4)Categories of third parties to whom personal information has been sold or shared and the purpose(s) for which the personal information was sold or shared.
Categories of Third Parties to Whom Personal Information May Have Been Sold or Shared | Categories of Personal Information | Purpose(s) |
-Advertising Partners -Analytics Providers -Media companies performing cross-context behavioral advertising on behalf of DoorDash | -Identifiers -Protected classifications -Commercial Information -Online Activity | -Providing marketing and advertising services for the benefit of DoorDash and the Services -Engaging in cross-context behavioral advertising on behalf of and for DoorDash |
ii.NON-USERS:
a.Notice at Collection.
1.In addition to the other categories of personal information that are identified as being collected from or about Non-Users in Section 2.B. (Non-Users) of the General Privacy Policy, we collect the following categories of personal information about you:
-Identifiers
-Commercial Information
-Online Activity
-Communications Data
2.We may use the categories of personal information listed above for the purposes described in Section 2.B. (Non-Users) of General Privacy Policy. In addition, for CPRA compliance purposes, we use the personal information for purposes (business and commercial) as described below.
Purposes | Categories of Personal Information |
Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of a consumer’s current interaction with the business, provided that the consumer’s personal information is not disclosed to another third party and is not used to build a profile about the consumer or otherwise alter the consumer’s experience outside the current interaction with the business | -Identifiers -Online Activity |
-Helping to ensure security and integrity to the extent the use of the consumer’s personal information is reasonably necessary and proportionate for these purposes -Debugging to identify and repair errors that impair existing intended functionality -Performing services on behalf of the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of the business -Providing advertising and marketing services, except for cross-context behavioral advertising, to the consumer provided that, for the purpose of advertising and marketing, a service provider or contractor shall not combine the personal information of opted-out consumers that the service provider or contractor receives from, or on behalf of, the business with personal information that the service provider or contractor receives from, or on behalf of, another person or persons or collects from its own interaction with consumers -Undertaking internal research for technological development and demonstration -Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business | -Identifiers -Commercial Information -Online Activity -Communication Data |
3.For the categories of personal information collected, the personal information is retained in accordance with Section 5 (Data Retention) of the General Privacy Policy.
4.We do not sell or share any of the categories of personal information collected from or about this group or category of consumer.
b.Prior Collection, Use and Disclosure of Personal Information.
We may have collected and used your personal information, as described in Section A.ii.a. of this Notice, during the preceding 12 months. For the personal information collected during this period, we describe below: (1) the categories of sources from which we have collected the personal information, (2) the categories of third parties with whom we have disclosed personal information for our business or commercial purposes, and (3) the categories of personal information we have disclosed for a business purpose.
(1)Categories of sources from which we have collected personal information:
Categories of Sources | Categories of Personal Information |
A User when they are setting up a Gift or Referral | -Identifiers -Commercial Information -Communications Data |
You, when you communicate with us (e.g., Contact us about a Gift or communication, etc.) | -Identifiers -Communications Data |
Your device, systems, browsers, and equipment when you access our platforms or Services, which deploy or use cookies and similar technologies as described in Section 3 (Cookies and Similar Technologies) of the General Privacy Policy | -Identifiers -Online Activity |
(2)Categories of Third Parties with whom we disclosed personal information for our business and commercial purposes:
Categories of Third Parties | Categories of Personal Information |
DoorDash’s group of companies Vendors providing services to us or on our behalf Professional service organizations (e.g., law firms, accountants, auditors, etc.) Any entity, agency, department, authority or other body that we have an obligation, duty, or are otherwise permitted or required to disclose your personal information to (e.g., regulators, government authorities, law enforcement, courts, etc.) Third parties in order to participate in, or be the subject of, any sale, merger, acquisition, restructure, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock or other similar transaction(s), in which case we may disclose your personal information to prospective buyers, sellers, advisers or partners and your data may be a transferred asset in a business sale Persons or parties that you instruct or direct us, or provide consent for us, to disclose your personal information to Third parties as required or permitted to comply with legal and/or regulatory requirements and obligations | -Identifiers -Commercial Information -Online Activity -Communications Data |
Dashers (e.g., to deliver an order, etc.) Merchants (e.g., to process and prepare an order, etc.) The User who set up the Gift or Referral (if applicable) | -Identifiers -Commercial Information -Communications Data |
(3)Categories of personal information we have disclosed for a business purpose:
See the categories of personal information described in Section A.ii.a.1 of this Notice.
iii.MERCHANT PERSONNEL.
a. Notice at Collection.
1. We collect the following categories of personal information from or about you:
-Identifiers
-Any personal information described in subdivision (a) of Section 1798.80 of the California Civil Code
-Protected Classifications
-Online Activity
-Employment Information
-Survey Response Data
-Communications Data
-Payment Information: such as amounts paid by DoorDash to you (e.g., fees, referral payments, etc.).
-Sensitive Personal Information
2.We use the personal information for the following business and commercial purposes:
Purposes | Categories of Personal Information |
Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards | -Identifiers -Online Activity |
-Helping to ensure security and integrity to the extent the use of the consumer’s personal information is reasonably necessary and proportionate for these purposes -Performing services on behalf of the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of the business -Providing advertising and marketing services, except for cross-context behavioral advertising, to the consumer provided that, for the purpose of advertising and marketing, a service provider or contractor shall not combine the personal information of opted-out consumers that the service provider or contractor receives from, or on behalf of, the business with personal information that the service provider or contractor receives from, or on behalf of, another person or persons or collects from its own interaction with consumers -Undertaking internal research for technological development and demonstration -Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business -Enforcing the terms and conditions and agreements between DoorDash and the applicable Merchant -Handling enquiries, complaints and requests -Exercising our rights and defending ourselves from claims -Protecting the interests and property of us and our personnel, you, the applicable Merchant and other people and parties -Complying with applicable laws, codes and regulations that pertain to our business activities -Contacting you for participation in, and conducting, survey research activities. -Onboarding, establishing and administering a business relationship between DoorDash and the applicable Merchant including communicating with you and the applicable Merchant. -Ensuring compliance with our internal policies and programs and meeting our internal and external audit requirements, including, our security obligations -To monitor, investigate, prevent, mitigate, remediate, and report any alleged or actual prohibited, illicit, or illegal activities | -Identifiers -Any personal information described in subdivision (a) of Section 1798.80 of the California Civil Code -Protected Classifications -Online Activity -Employment Information -Survey Response Data -Communications Data -Payment Information -Sensitive Personal Information |
Debugging to identify and repair errors that impair existing intended functionality | -Identifiers -Any personal information described in subdivision (a) of Section 1798.80 of the California Civil Code -Protected Classifications -Online Activity -Employment Information -Communications Data |
Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of a consumer’s current interaction with the business, provided that the consumer’s personal information is not disclosed to another third party and is not used to build a profile about the consumer or otherwise alter the consumer’s experience outside the current interaction with the business | -Identifiers -Online Activity |
Administering your participation in the DoorDash Merchant Referral Program | -Identifiers -Any personal information described in subdivision (a) of Section 1798.80 of the California Civil Code -Employment Information -Communications Data -Payment Information |
3.For the categories of personal information collected, the categories are retained in accordance with Section 5 (Data Retention) of the General Privacy Policy.
4.We do not sell or share any of the categories of personal information collected from or about this group or category of consumer.
b.Prior Collection, Use and Disclosure of Personal Information.
We have collected and used your personal information, as described in Section A.iii.a. of this Notice (see above), during the preceding 12 months. For the personal information collected during this period, we describe below: (1) the categories of sources from which we have collected the personal information, (2) the categories of third parties with whom we have disclosed personal information for our business or commercial purposes and (3) the categories of personal information we have disclosed for a business purpose.
(1)Categories of sources from which we have collected the personal information.
Categories of Sources of Personal Information | Categories of Personal Information |
An existing DoorDash merchant who is participating in our Merchant referral program Other personnel members of the Merchant, such as when such personnel members are communicating with us in connection with or in furtherance of the relationship between DoorDash and the Merchant | -Identifiers -Employment Information |
You, when you are engaging (e.g., registering to be a merchant, signing up for an offer, completing a survey, etc.) or communicating with us | -Identifiers -Any personal information described in subdivision (a) of Section 1798.80 of the California Civil Code -Protected Classifications -Employment Information -Survey Response Data -Communications Data |
Your device, systems, browsers, and equipment when you access our platforms or Services, which deploy or use cookies and similar technologies as described in Section 3 (Cookies and Similar Technologies) of the General Privacy Policy | -Identifiers --Online Activity -Sensitive Personal Information |
DoorDash, when determining the fees or amounts payable | -Payment Information |
(2)Categories of third parties with whom we have disclosed the personal information for our business and commercial purposes.
Categories of Third Parties | Categories of Personal Information |
Our affiliates Vendors providing services to us or on our behalf Professional services organizations (e.g., law firms, accountants, auditors, etc.). Business partners Any entity, agency, department, authority or other body that we have an obligation, duty, or are otherwise permitted or required to disclose your personal information to (e.g., regulators, government authorities, law enforcement, courts, etc.) The Merchant that you are a personnel member of or otherwise associated with Third parties in order to participate in, or be the subject of, any sale, merger, acquisition, restructure, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock or other similar transaction(s), in which case we may disclose your personal information to prospective buyers, sellers, advisers or partners and your data may be a transferred asset in a business sale Persons or parties that you instruct or direct us, or provide consent for us, to disclose your personal information to Third parties as required or permitted to comply with legal and/or regulatory requirements and obligations | -Identifiers -Any personal information described in subdivision (a) of Section 1798.80 of the California Civil Code -Protected Classifications -Online Activity -Employment Information -Survey Response Data -Communications Data -Payment Information -Sensitive Personal Information |
The Merchant who referred you to DoorDash in connection with our referral program | -Identifiers -Employment Information |
(3)Categories of personal information we have disclosed for a business purpose.
See the categories of personal information described in Section A.iii.a.1. of this Notice.
iv.SERVICE PROVIDER PERSONNEL.
a.Notice at Collection.
1. We may collect the following categories of personal information about you:
-Identifiers
-Employment Information
-Communications Data
2. We may use the personal information for the following business and commercial purposes:
Purposes | Categories of Personal Information |
Helping to ensure security and integrity to the extent the use of the consumer’s personal information is reasonably necessary and proportionate for these purposes Debugging to identify and repair errors that impair existing intended functionality Performing services on behalf of the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of the business Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business Enforcing the terms and conditions and agreements between DoorDash and the applicable Service Provider Handling enquiries, complaints and requests Exercising our rights and defending ourselves from claims Protecting the interests and property of us and our personnel, you, the applicable Service Provider and other people and parties Communicating with you and communicating with the applicable Service Provider Complying with applicable laws, codes and regulations that pertain to our business activities Onboarding, establishing and administering a business relationship between DoorDash and the applicable Service Provider Ensuring compliance with our internal policies and programs and meeting our internal and external audit requirements, including, our security obligations To monitor, investigate, prevent, mitigate, remediate, and report any alleged or actual prohibited, illicit, or illegal activities | -Identifiers -Employment Information -Communications Data |
3.For the categories of personal information collected, the categories are retained in accordance with Section 5 (Data Retention) of the General Privacy Policy.
4.We do not sell or share any of the categories of personal information collected from or about this group or category of consumer.
b.Prior Collection, Use and Disclosure of Personal Information.
We may have collected and used your personal information, as described in Section A.iv.a. of this Notice, during the preceding 12 months. For the personal information collected during this period, we describe below: (1) the categories of sources from which we have collected the personal information, (2) the categories of third parties with whom we have disclosed personal information for our business or commercial purposes, and (3) the categories of personal information we have disclosed for a business purpose.
(1)Categories of sources from which we have collected the personal information.
Categories of Sources of Personal Information | Categories of Personal Information |
You, such as when you communicate or interact with us | -Identifiers -Employment Information -Communications Data |
Other personnel members of the Service Provider, such as when such personnel are communicating with us in connection with or in further of the relationship between DoorDash and the Service Provider | -Identifiers -Employment Information |
(2) Categories of third parties with whom we have disclosed the personal information for our business or commercial purposes.
Categories of Third Parties | Categories of Personal Information |
-Our affiliates -Vendors providing services to us or on our behalf -Professional services organizations (e.g., law firms, accountants, auditors, etc.) -Any entity, agency, department, authority or other body that we have an obligation, duty, or are otherwise permitted or required to disclose your personal information to (e.g., regulators, government authorities, law enforcement, courts, etc.) -The Service Provider that you are a personnel member of or otherwise associated with -Third parties in order to participate in, or be the subject of, any sale, merger, acquisition, restructure, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock or other similar transaction(s), in which case we may disclose your personal information to prospective buyers, sellers, advisers or partners and your data may be a transferred asset in a business sale -Persons or parties that you instruct or direct us, or provide consent for us, to disclose your personal information to -Third parties as required or permitted to comply with legal and/or regulatory requirements and obligations | -Identifiers -Employment Information -Communications Data |
(3)Categories of personal information we have disclosed for a business purpose.
See the categories of personal information described in Section A.iv.a.1. of this Notice.
v.NON-DASHER INDEPENDENT CONTRACTORS.
a.Notice at Collection.
We may collect the following categories of personal information about you:
-Identifiers
-Any personal information described in subdivision (e) of Section 1798.80 of the California Civil Code
-Protected Classifications
-Online Activity
-Geolocation Data
-Sensory Information
-Employment Information
-Education Information
-Inference Information
-Survey Response Data
-Communications Data
-Payment information
-Sensitive Personal Information
2.We may use the personal information for the following business and commercial purposes:
Purposes | Categories of Personal Information |
-Helping to ensure security and integrity to the extent the use of the consumer’s personal information is reasonably necessary and proportionate for these purposes -Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business | -Identifiers -Any personal information described in subdivision (a) of Section 1798.80 of the California Civil Code -Protected Classifications -Online Activity -Geolocation Data -Sensory Information -Employment Information -Education Information -Survey Response Data -Communications Data -Sensitive Personal Information |
Debugging to identify and repair errors that impair existing intended functionality | -Identifiers -Any personal information described in subdivision (a) of Section 1798.80 of the California Civil Code -Online Activity -Geolocation Data -Sensory Information -Employment Information -Communications Data |
Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of a consumer’s current interaction with the business, provided that the consumer’s personal information is not disclosed to another third party and is not used to build a profile about the consumer or otherwise alter the consumer’s experience outside the current interaction with the business | -Identifiers -Online Activity -Geolocation Data |
-Performing services on behalf of the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of the business -The onboarding, establishment and administration of a relationship between DoorDash and you and/or the company or agency that you are affiliated with -To comply with applicable laws, codes and regulations -To enforce the terms and conditions and/or other agreements between you and DoorDash and/or between DoorDash and the company or agency that you are affiliated with -To ensure compliance with our internal policies and processes and to meet our internal and external audit requirements -To handle enquiries, complaints, and requests -Exercising our rights and defending ourselves from claims -Protecting the interests and property of us and our personnel, you, the company or agency that you are associated with, and other people and parties -To monitor, investigate, prevent, mitigate, remediate, and report any alleged or actual prohibited, illicit, or illegal activities -Undertaking internal research for technological development and demonstration -To qualify you for, to contact you to participate in, and to conduct, survey research activities | -Identifiers -Any personal information described in subdivision (a) of Section 1798.80 of the California Civil Code -Protected Classifications -Online Activity -Geolocation Data -Sensory Information -Employment Information -Education Information -Inference Information -Survey Response Data -Communications Data -Payment information -Sensitive Personal Information |
3.For the categories of personal information collected, the categories are retained in accordance with Section 5 (Data Retention) of the General Privacy Policy.
4.We do not sell or share any of the categories of personal information collected from or about this group or category of consumer.
b.Prior Collection, Use and Disclosure of Personal Information.
We may have collected and used your personal information, as described in Section A.v.a. of this Notice, during the preceding 12 months. For the personal information collected during this period, we describe below: (1) the categories of sources from which we have collected the personal information, (2) the categories of third parties with whom we have disclosed personal information for our business or commercial purposes, and (3) the categories of personal information we have disclosed for a business purpose.
(1) Categories of sources from which we have collected the personal information.
Categories of Sources | Categories of Personal Information |
You, such as when you apply for an engagement with, and/or perform or provide services to, DoorDash | -Identifiers -Any personal information described in subdivision (a) of Section 1798.80 of the California Civil Code -Protected Classifications -Sensory Information -Employment Information -Education Information -Survey Response Data -Communications Data -Sensitive Personal Information |
Third persons or parties who provide references or recommendations on your behalf | -Employment Information -Inference Information |
Companies performing or providing background checks on or about you | -Identifiers -Any personal information described in -subdivision (a) of Section 1798.80 of the -California Civil Code -Protected Classifications -Employment Information -Education Information -Inference Information |
Your bank and/or financial institution in connection with processing payment to you for your services to DoorDash | -Identifiers -Any personal information described in subdivision (a) of Section 1798.80 of the California Civil Code |
DoorDash and its personnel when they are providing an assessment or evaluation of the performance or provision of your services to DoorDash or interacting with you | -Identifiers -Any personal information described in -subdivision (a) of Section 1798.80 of the -California Civil Code -Employment Information -Inference Information -Communication Data |
Your device, systems, browsers, and equipment through our use of cookies and similar technologies as described in Section 3 (Cookies and Similar Technologies) of the General Privacy Policy | -Identifiers -Online Activity -Geolocation |
(2)Categories of third parties with whom we have disclosed the personal information for our business or commercial purposes.
Categories of Third Parties | Categories of Personal Information |
-Our affiliates -Vendors providing services to us or on our behalf -Professional services organizations (e.g., law firms, accountants, auditors, etc.) -Any entity, agency, department, authority or other body that we have an obligation, duty, or are otherwise permitted or required to disclose your personal information to (e.g., regulators, government authorities, law enforcement, courts, etc.) -The company that you are a personnel member of or otherwise associated with (if applicable) -Third parties in order to participate in, or be the subject of, any sale, merger, acquisition, restructure, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock or other similar transaction(s), in which case we may disclose your personal information to prospective buyers, sellers, advisers or partners and your data may be a transferred asset in a business sale -Persons or parties that you instruct or direct us, or provide consent for us, to disclose your personal information to -Third parties as required or permitted to comply with legal and/or regulatory requirements and obligations | -Identifiers -Any personal information described in subdivision (a) of Section 1798.80 of the California Civil Code -Protected Classifications -Online Activity -Geolocation Data -Sensory Information -Employment Information -Education Information -Inference Information -Survey Response Data -Communications Data -Payment Information -Sensitive Personal Information |
(3) Categories of personal information we have disclosed for a business purpose.
See the categories of personal information described in Section A.v.a.1. of this Notice.
B.Metrics:
Applicable Period: January 1, 2022 - December 31, 2022
Scope: The below metrics apply to all requests received from all California residents during the Applicable Period.
Request Type | Total Requests Received | Completed | Denied - | Denied on Other Grounds (i.e., revoked by submitter) | Median Number of Days for Response |
Request to Know | 54,427 | 54,427 | 0 | 0 | 0 |
Request to Delete * | 59,588 | 57,646 | 861 | 1,081 | 21 |
* The number of deletion requests is inclusive of (i) requests to delete personal information as a privacy right and (ii) requests to delete information and/or DoorDash accounts as an account management function (e.g., this reporting is not solely limited to the privacy right to delete personal information).
C.Notice of Financial Incentives:
Under the CPRA, we are required to provide certain disclosures regarding “financial incentives” offered in exchange for your disclosure of personal information to us. We provide several opportunities or programs where individuals can provide personal information to us in exchange for financial incentives, including in connection with participation in survey research, sweepstakes programs, referral programs, credit card offers and DoorDash DashPass. In addition, for referral programs, the referred party or person can also receive incentives for participation. These programs are entirely voluntary and allow us to grow, enhance, and improve our Services and business activities and provide benefits to those who participate. For the various financial incentives that we offer, we have not assigned a monetary value to the data we collect through or in connection with our financial incentive programs; however, based upon our good faith reasonable estimate, the value we receive from your personal information is reasonably equal to the value of the financial incentive we provide to individuals who participate in these programs. The material terms for the financial incentives are available with the applicable offer that you may receive prior to you voluntarily deciding to participate. Except for DashPass, if you want to opt-out of participating in an incentive program, please either stop participating or email us at [email protected] and include your first and last names, email address, identify the incentive program(s) that you want to opt-out from, and in the subject line, please include “Incentive Program Opt-Out”. For DashPass, you can cancel your membership through your User account settings when logged in or by contacting customer support.
D.California Shine the Light Law. The “Shine the Light” requirements under California Civil Code §1798.83 do not apply to the individuals covered under the General Privacy Policy and this Notice because we do not engage in activities covered by this law.
E. CPRA Rights.Under the CPRA, you have certain rights, including:
-The Right to Delete
-The Right to Correct
-The Right to Know and Access
-The Right to Opt out of Sale or Sharing and the right to opt-in after having opted-out
-The Right to Limit Use and Disclosure of Sensitive Personal Information
-The Right of Non Retaliation if you choose to exercise any of these rights
You may exercise these rights by going to Section 8 (Your Rights and Choices) of the General Privacy Policy.
00