Orders are requested to be submitted by Wednesday of each week to receive an order by Friday/Saturday.

We at Lovely’s use a 3rd party delivery partner to deliver local delivers.

DoorDash Consumer Privacy Policy

Last updated August 19, 2024

I. Introduction

II. What Personal Information does DoorDash collect or process?

III. How does DoorDash collect or receive Personal Information?

IV. How does DoorDash use Personal Information?

V. DoorDash’s disclosure of Personal Information

VI. Your Privacy Rights and Choices

VII. Additional Jurisdiction Specific Disclosures

California (Notice at collection and CCPA metrics),
Nevada
Consumer Health Data Privacy Disclosures
Canada
Australia
New Zealand

VIII. Security and Retention

IX. Cross-Border Transfers of Personal Information

X. Personal Information from Children

XI. Third-Party Sites

XII. How to Contact Us

XIII. Changes to this Privacy Policy

Introduction.

At DoorDash, we connect people with the best of their neighborhoods by enabling businesses to meet consumers’ needs of ease and convenience, and, in turn, generate new ways for people to earn, work, and live.

This Privacy Policy (“Policy”) describes how DoorDash, Inc. and its affiliates (“DoorDash”, “we”, “our”, or “us”) collect, process, retain, and disclose your Personal Information when providing its services, including, but not limited to, its consumer platforms, websites, and mobile applications, any website, platform or application that contains or includes a link to this Policy, and channels of communication (collectively the “Services”).

This Policy does not apply to Dashers or other contractors, or to the personnel of Merchants and Vendors, which are subject to separate privacy policies.

What Personal Information does DoorDash collect or process?

Personal Information is any information that DoorDash can reasonably use to identify you, whether that information identifies you on its own or when combined with other information. Anonymous information and information that has been de-identified such that it cannot identify you is not Personal Information.

We may process the following categories of Personal Information in connection with our Services:

Contact Information, including name, address (such as home address, work address, or other delivery address), email address(es), phone number(s), and other contact information provided to us.
Account and Profile Information, including username and credentials, privacy settings and notification preferences, pictures, and other information you add to your DoorDash profile, employer name if you are using our Services through our DoorDash for Business (formerly DoorDash for Work) product, any subscription information such as DashPass membership, and identifiers that we may link to an account and information received from third-party platforms or authentication services that are linked to our Services.
Identification Documentation and Signature for Age-Restricted Products, including driver’s license or other government issued identification documents, which we may process in limited circumstances such as an order for an age-restricted product (such as alcohol) or other products that require age and/or identity verification and for legal and regulatory compliance.
Communications with DoorDash, Dashers and Merchants, including the content of in-app messages with Dashers, communications with Merchants through or in-connection with our Services (including, without limitation, through our and third-party platforms), SMS/text messages, chats, phone calls, and emails with us related to our Services, customer support inquiries and outreach, the date and time of communications, method or channel used, call recordings (if applicable), the outcomes, actions, and/or resolutions from the communications, and other information.
Content you create or share, including reviews about experiences on our platform, such as ratings of a Dasher who delivers an order or about Merchants you order from, or photos you upload.
Payment Information, including credit card or debit card information and information about the payment methods and services (such as PayPal or Venmo) used to make purchases on or through our Services. Payment information is primarily stored and processed by our third-party service providers, including our payment processors; however, we may store and process limited payment-related information such as the last four digits of a payment card, name of the financial institution, and payment service.
Activity and Transactions on or with our Services, including information about the items and products ordered, order history, items placed in the cart, special instructions included in an order (e.g., dietary preferences, delivery preferences), transaction amounts, promotional codes and discounts used and received, the Merchants ordered from, gift cards ordered, the features and functionality used or interacted with, searches and actions on our Services (including through using session replay technology), loyalty account information for Merchants, responses to our surveys or other market research activities, participation in sweepstakes, promotions, or contests, photos and/or videos that you may send or provide to us related to your activity and transactions on or with our Services, and use of DashPass, gifts, our referral program or other special programs (including information about those you have sent or received gifts to or from or referred).
Geolocation Information, if you have consented by enabling location access, we may receive and store your precise location information, including when our apps are running in the foreground (our app is open and on screen) or background (our app is open, not on screen) of your device. You may use our Services without enabling the collection of precise location information from your device; however, this may impact your experience including the accuracy of deliveries and/or the availability of certain content, features and functionality (e.g., you may have to manually enter your delivery address). If you have not allowed us to receive your precise location, we can only determine your approximate location. To opt-out of location sharing after turning it on, follow the steps below:

a. Open the DoorDash consumer mobile app.

b. Tap the account icon at the top right of the screen.

c. Under “Account Settings”, click “Privacy”.

d. Under “Location Access”, click the arrow “>” next to the current choice.

e. You will be taken to the app settings screen for DoorDash. Here, click the “Location” button.

f. Select the option to allow location access as desired. You will also have the choice to turn off precise location sharing.

Device Information, including information about the computers, phones, and other devices you use to interact with DoorDash or our Services, internet-protocol address, device-based identifiers, operating system and version, preferred language, hardware model identifiers, browser information including type and settings, and other device information.
Information from Co-Branded or Third Party Offers, we may collect information that you use to register for, and your activity with, third parties, in connection with co-branded or third party offers from us and our partners, such as when you enroll for co-branded credit card opportunities with our credit card partners.

Some of the information identified above that you choose to provide us (specifically, government issued identification and your signature, which we receive when we verify age and identity and the authenticity of a submitted government issued ID for certain orders (such as alcohol orders) to prevent fraud and demonstrate legal and regulatory compliance and precise location information, which we receive to facilitate deliveries and certain content, features and functionality within our Services), may be considered sensitive Personal Information under the laws of some jurisdictions. You can turn off DoorDash’s ability to collect and use precise location at any time in your app settings. We do not use any sensitive Personal Information for purposes other than as reasonably expected by an average consumer to provide our Services, for legal, security and safety purposes, and without the purpose of inferring characteristics about an individual. For more information on our processing of government issued IDs and data to verify age and identity and the authenticity of a submitted government issued ID, please see the FAQs available at How is my age verified for alcohol orders?

When we process de-identified information, we maintain and use the information in de-identified form, and do not attempt to re-identify the information, except as permitted by applicable law.

III. How does DoorDash collect or receive Personal Information?

From Users of our Services: We receive information from users of our Services, such as during account or profile creation and updating, placing an order, participation in surveys, participation in sweepstakes, promotions or contests, creating or posting content such as photos or reviews, contacting us, uploading or syncing your contacts, or signing up for additional Services or programs (e.g., DashPass or our referral or gift programs). If a user provides Personal Information for or about others, such as in connection with our referral or gift programs, the user represents that they have all necessary rights and consents to provide the other person’s Personal Information to us.
Automatically Through Our Services: When you use our Services, certain Personal Information is collected automatically from your device and browser.
Through Cookies and Similar Technologies: Cookies are small text files that are placed on your device, commonly through your browser, and that are used to record information such as settings. Depending on your settings, certain of our Services, including our website, may receive information about you from or through cookies or similar technologies (such as pixels or software development kits).
From our Service Providers: We may receive Personal Information from service providers whom we engage to perform services on our behalf, including communication services providers (e.g., email, SMS/text message, etc.), payment providers and processors (such as PayPal and Venmo), market research services providers, providers of services for promotions, sweepstakes and contests, gift card program providers/vendors, and those that provide us with marketing, advertising, analytics, security, fraud, identity, and age verification services.
From Partners: We may receive Personal Information from our business partners, such as in connection with co-branded or third party offers you participate in with partnership opportunities available from DoorDash and its business partners (such as co-branded credit cards).
From Employers: If an employer has signed up for certain programs or Services, such as DoorDash for Business (formerly DoorDash for Work), we may receive certain Personal Information from them to facilitate your use of our Services.
From Merchants: If a Merchant has integrated its loyalty program with our Services, we may receive Personal Information from the Merchant in connection with such integration, such as to identify users of our Services who are also members of the Merchant’s loyalty program to better target or direct communications about the integration to such users or after a user consents to create a link between the user’s account with our Services and the Merchant’s loyalty program, the Merchant may provide certain Personal Information to enable the user to receive loyalty program benefits and discounts for purchases made through our Services.
From Legal Claims, Disputes, Requests, and Orders: we may collect Personal Information from third parties or persons, such as law enforcement agencies, government agencies or authorities, users and non-users of our Services, and any other person or party who may be involved in the matter.

IV. How does DoorDash use Personal Information?

Depending on which Services you use and how you interact with us, DoorDash may use your Personal Information (as described in Section II above):

To Provide and Customize DoorDash Services, including allowing you to place and pay for orders, facilitating the orders you place on or through our Services, recommending and ranking Merchants based on your searches, location, reviews and order history and, if you have uploaded or synched your contacts, based upon where your contacts have ordered (however, we will not provide you with information on where a specific contact(s) ordered or what a specific contact(s) ordered), facilitating participation in promotions, sweepstakes and contests, making promotions, special offers and opportunities available to you, allowing or enabling you to purchase/order our gift cards, displaying reviews, photos and other content you post publicly, and customizing your experience (including, but not limited to, customization based on your preferences, location, and past use of our Services).
To Provide Customer Support, including by exchanging communications, investigating, analyzing, and remediating support issues including as it relates to delivery of orders, evaluating our customer support and making improvements, and ensuring that support issues are handled in accordance with our internal standards, processes, and requirements and according to applicable law.
To Develop, Analyze, and Improve our Services, including debugging or troubleshooting our Services, understanding how you and other customers use our Services and your preferences, improving the Services, and developing new Services or initiatives to provide our users with the best experience possible.
To Advertise and Promote DoorDash and our Services, including displaying advertising related to our Services or Merchants on our Services and on third-party websites and platforms, improving, developing and implementing marketing campaigns, analyzing whether our advertising is effective, and showing you ads that are most relevant to you about DoorDash and our Merchants. To opt-out of ad personalization on third-party platforms, please see information on the right to opt-out of the sale or sharing below.
To Allow and/or Facilitate Communications with DoorDash, Dashers and Merchants, including communications about our Services, Service updates, orders and account, changes to our terms and policies, and to allow or facilitate communications with DoorDash, Dashers, and Merchants.
For Authentication, Integrity, Security, Quality and Safety, including verifying your account and identity as applicable to our Services, providing a secure payment and shopping experience, to detect, investigate, and prevent malicious or illegal conduct, bugs, malware, fraudulent activity, illegal or unsafe experiences (such as ensuring age-restricted orders are delivered to the intended recipient), and any other actions we deem necessary to protect your safety and security as well as that of other people, property, and businesses, and to secure our Services.
For Legal Reasons and Policy Compliance, including to comply with our obligations under applicable law and to respond to valid legal process (e.g., requests or orders from law enforcement, courts, regulators and other government agencies), to investigate or participate in civil discovery, litigation, or other adversarial legal proceedings, to enforce or investigate potential or actual violations of our terms, policies or other legal agreements, to investigate, monitor or mitigate any actual or alleged illegal activities in connection with our Services, to comply with any tax obligations, to perform audits and assessments, and to enable you to exercise your rights as legally required.

V. DoorDash’s disclosure of Personal Information.

Depending on which DoorDash Services you use or interact with, DoorDash may provide or disclose Personal Information (as described in Section II above) as follows:

To Service Providers: To enable us to meet our business operations needs and to perform our Services, we may provide Personal Information to our service providers and vendors, including, but not limited to, providers of identification and verification services, cloud services, payment services, gift card program services, auditing services, security services, marketing and advertising services, promotions, sweepstakes and contest services, market research services, communication services, analytics services that help us understand usage of our Services, market enrichment services, location and mapping services, and customer support functions. These service providers may access, store and process your personal information outside of the jurisdiction in which you reside, including, without limitation, outside of Australia, Canada (and if you reside in the Province of Quebec, outside of Quebec), New Zealand and the United States.
To Dashers: To facilitate the delivery of your orders, we disclose some information to Dashers who deliver orders, such as recipient’s name (such as first name and last initial), delivery address, location information through the Dasher app (if location sharing is turned on), masked telephone number, order information (which may include information on products purchased), and user instructions (e.g., special and/or delivery instructions). For verification purposes, we may ask that an order recipient disclose a PIN to a Dasher that is provided in the order receipt or confirmation to verify the delivery of the order.
To Merchants: We disclose Personal Information to Merchants in connection with the Services including, without limitation, disclosing Personal Information for the preparation of the order (such as making the food item, selecting and preparing the product or good), facilitating the delivery (whether by a Dasher or by a Merchant’s delivery service), for fraud, trust, and safety concerns or matters (such as in connection with orders of age-restricted products or items), and in connection with a Merchant’s loyalty program if you choose to link your account with our Services to a Merchant’s loyalty program. By placing an order, you acknowledge and agree that, if the Merchant is responsible for the delivery of an order, the Merchant may use your Personal Information to facilitate the delivery of the order to you (including using your contact information to communicate with you via phone calls, emails and/or SMS/text messages about the order and delivery). The Merchant is solely liable and responsible for all communications initiated or sent by the Merchant to you. If you are picking up an order from a Merchant who is using a DoorDash provided tablet or device and you have enabled the collection and processing of location information, we may use your location information to let the merchant know that you have arrived or are close to arriving to pick-up your order.
Publicly: We display content and information that you share publicly or permit or authorize us to share publicly, such as reviews about Merchants or photos of things you have ordered, so that others can read and learn about your experiences with Merchants on our platform and our Services.
To Marketing and Advertising Partners: We may use third-party marketing and advertising partners to deliver advertising to you on behalf of DoorDash and/or our Merchants, including advertising that may be personalized based on your interactions with our Services as well as your activity on third-party services.
For Actual or Potential Corporate Transactions: If we are involved in strategic transactions including any sale, merger, acquisition, joint venture, assignment, transfer, reorganization, bankruptcy or receivership, we may disclose your Personal Information and other information in the diligence process with counterparties and others assisting with the transaction and transferred to a successor or affiliate as part of that transaction along with other assets.
To Government Authorities or where Legally Required or Permitted: We and our service providers (including domestic and foreign service providers) may share your Personal Information, including information about your interaction with our Services, with third parties such as government authorities, industry peers, or other third parties if legally required or permitted, or as necessary to enforce our agreements, prevent fraud, or protect the rights, property, or safety of our business, employees, merchants, Dashers, customers, or other persons or parties. These disclosures may include lawful access by US or foreign courts, law enforcement, or other government authorities.
DoorDash’s Group of Companies: We may disclose your Personal Information to our corporate subsidiaries and affiliates in connection with our Services and business activities for use in connection with the purposes and uses described in this Policy.
Other Third Parties or Persons: We may disclose or provide your Personal Information to other third parties or persons, such as with your consent or at your direction, including to individuals to whom you send a gift through our gift program or to whom you refer DoorDash or the Services, in connection with co-branded opportunities, in connection with you linking accounts with third parties to your account with us or signing into your account with us through third-parties, or to your employer if you are using our Services through your employer’s use of our DoorDash for Business service (formerly DoorDash for Work).

VI. Your Privacy Rights and Choices.

Your Privacy Rights.

We offer you tools and processes to manage and make choices regarding your Personal Information. Depending on your jurisdiction, and subject to certain exceptions, exemptions, and restrictions, you or your authorized agent may exercise the following rights:

Access/Portability: You may have the right to request access to your Personal Information and receive it in a portable and machine-readable format.
Deletion: You may have the right to ask us to delete your Personal Information, including your DoorDash account, although this may impact your ability to use the Services. Please note that we will keep a record of all rights requests and therefore will retain limited Personal Information in connection with such record.
Correction: You may have the right to correct, rectify, or update inaccurate Personal Information that we hold about you.
Opt-Out of Sale or Sharing (Targeted Advertising or Ads Personalization): We may disclose Personal Information (e.g., identifiers and service and platform usage) to advertising partners to provide you with personalized ads on third-party platforms, which may constitute a “sale” or “sharing” of your Personal Information. You have the right to opt-out of our selling or sharing (for purposes of targeted advertising) of your Personal Information. To opt-out of the sale or sharing of Personal Information, use the “Do Not Sell or Share My Personal Information” link on doordash.com or go to www.doordash.com/consumer/personalize. Note: If you are not a logged-in registered user, you can opt-out of having information about your activity on DoorDash disclosed to partners for personalized advertising on third party platforms by disabling Ad Personalization when you use a specific browser. To access our browser-level opt-out option, please click here. For your opt-out choice to be associated with your registered account, you’ll need to log in to your account and turn off personalization. If you previously opted-out and wish to opt-in, you can use the options identified above to change your preferences.
You may choose to enable with your browser, where available, global privacy controls (“GPC”) to automatically communicate your opt-out preferences to us when you use said browser. If you have enabled GPC on your browser, we will treat this the same as if you have opted-out through the browser-level opt-out option available above.
Right to Appeal: You may have the right to appeal decisions that we make with regards to a rights request.
Right to Withdraw Consent: You have the right to withdraw consent when consent is legally required (subject to our legal or contractual restrictions and reasonable notice). If you withdraw consent, we may not be able to provide certain services to you.

DoorDash will not discriminate against you for exercising any of your applicable rights. We reserve the right to deny your request if we cannot verify your identity or if an exemption or exception applies.

Exercising Rights:

Unless otherwise stated above, if you have a DoorDash or Caviar account, you can exercise certain of your rights directly through your account. We provide you with the ability to update and correct your account information through your account. To exercise either the right to access or delete your Personal Information through your account, please see:

For DoorDash, you can exercise these rights by clicking here.
For Caviar you can exercise these rights by clicking here.

If you have questions on how to exercise your rights, or if you do not have an account or are unable to exercise an applicable right through your account, please contact us at privacy@doordash.com. We will provide a timely response in accordance with applicable law. You also may contact us at our toll-free number (855) 973-1040 to exercise an applicable right. When contacting us, please provide your first and last names, email address, and address of residency, identify the right(s) that you wish to exercise and identify whether your are a user, a non-user, or in another category or grouping.

For rights requests from authorized agents, the requests should be submitted to privacy@doordash.com and include the following: (i) first and last names and email addresses for the data subject and the authorized agent, (ii) evidence of the authority granted to the agent (such as a power of attorney), (iii) information on the data subject’s relationship with DoorDash (e.g., registered user, a non-user), (iv) the specific right(s) being exercised, and (v) “Authorized Agent Request” in the subject-line.

Additional Choices.

Communication Preferences:

To opt-out of promotional and marketing notifications and emails, follow the steps below.

Notification Preferences for Mobile app users:

Select Account and scroll down to Account Settings
Select Notifications
Select the notifications you would like to turn off and slide the toggle to turn off (e.g., Store Offers, DoorDash Offers and Recommendations, etc.).

Email Preferences Through Email Unsubscribe Functionality:

Promotional emails include an opt-out option at the bottom of the email, select Unsubscribe.
After selecting Unsubscribe, select to turn off your preferred choices (e.g., DoorDash Offers, Store Offers, Recommendations, etc).

To opt-out of receiving marketing SMS for your consumer platforms/services, you can either reply STOP to any consumer marketing SMS or text STOP to 63758.
To opt-out of all Consumer transactional SMS, reply STOP to a Consumer transactional SMS.
If you want to stop receiving all communications from us, you must delete your account.
If you want to stop seeing in-app messages, you must delete your account.

For co-branded credit card opportunities, to stop receiving certain pre-screened offers of credit originating from participating nationwide credit reporting agencies, including our pre-screened offers, you can call the official Consumer Credit Reporting Industry organization at 1-888-567-8688 or by going to www.optoutprescreen.com.

You can learn more about interest-based advertising generally and how to opt-out of receiving tailored advertising more broadly than the options available in this Policy by visiting (i) the Network Advertising Initiative’s Consumer Opt-Out link or (ii) the opt-out options available through the Digital Advertising Alliances opt-out options available through https://digitaladvertisingalliance.org/. These links are provided for convenience purposes only; DoorDash is not responsible or liable for the compliance practices and programs of the companies, associations, or organizations managing the opt-out processes available through the immediately above links.

VII. Additional Jurisdiction Specific Disclosures.

1. United States:

a. California:

i. Notice at Collection:

For information on the categories of Personal Information collected, see Section II of this Policy.
For information on the sources from which we collect Personal Information, see Section III of this Policy.
For information on the purpose(s) for which Personal Information is collected or used, see Section IV of this Policy.
For information on the categories of third parties to whom we may disclose your Personal Information, see Section V of this Policy.
For information about DoorDash’s Selling or Sharing Personal Information, see Section VI of this Policy.

ii. Reporting Metrics:

Applicable Period: January 1, 2023 – December 31, 2023
Scope: The below metrics apply to all requests received from all California residents during the Applicable Period.

Request Type	Total Requests Received	Completed	Denied	Unfulfilled on Other Grounds (i.e., revoked by submitter)	Median Number of Days for Response
Request to Know	16,447	All	0	0	0
Request to Delete *	97,203	95,175	288	1,740	21
Request to opt-out of the sale or share of personal information	17,868	All	0	0	0

* The number of deletion requests is inclusive of (i) requests to delete Personal Information as a privacy right and (ii) requests to delete information and/or DoorDash accounts as an account management function (e.g., this reporting is not solely limited to the privacy right to delete Personal Information).

Individuals can correct or update their Personal Information directly through their account.

b. Nevada: For Nevada residents, under Nevada Revised Statutes Chapter 603A (Security and Privacy of Personal Information) (“Nevada Privacy Law”), companies that qualify as an Operator under Nevada Privacy Law must satisfy certain requirements pertaining to “Covered Information.” The term “Covered Information” is defined to include the following items of personally identifiable information: (1) first and last name, (2) home or other physical address, (3) email address, (4) phone number, (5) social security number, (6) an identifier that allows a specific person to be contacted either physically or online, and (7) any other information concerning a person collected from the person through the Internet website or online service of the operator and maintained by the operator or data broker in combination with an identifier in a form that makes the information personally identifiable. Under Nevada Privacy Law, certain Nevada consumers may opt-out of the sale of Covered Information, with “sale” being defined as the exchange of Covered Information for monetary consideration. We do not believe that we sell Covered Information under Nevada Privacy Law; however, we do offer an opt-out of the sale or sharing of Personal Information to satisfy requirements under other data protection laws and this right is available to Nevada residents as well.

c. Consumer Health Data Privacy Disclosures (Connecticut, Nevada and Washington):

These Consumer Health Data Privacy Disclosures supplement this Policy and describe our collection, use, and disclosure of Personal Information that may identify your past, present, or future physical or mental health status (“Consumer Health Data“).

1. Our Collection of Consumer Health Data.

We collect Personal Information as described in Section II (What Personal Information does DoorDash collect or process) of this Policy, which may include the following Consumer Health Data about you or those you are purchasing on behalf of:

Allergies or other conditions: When using our Services to place orders for certain items (e.g., food, etc.), you may be able to use free-text fields to provide special instructions. In the free-text fields, you may disclose information that may indicate health status (e.g., allergies or other conditions).
Product Purchase Information: Your purchase history of health-related products ordered through our Services may indicate information regarding your health status, including, but not limited to, contraceptives, at-home diagnostic tests, and diabetic testing supplies.
Activity on or with our Services: When using or interacting with our Services we may collect information that may indicate health status such as when you place health-related products in to your cart, conduct searches for, browse, or take other actions related to health-related products, when you interact with content, features, functionality or programs related to health-related products, and/or when you submit photos or videos of health-related products to us or through our Services.

When we process de-identified information, we maintain and use the information in de-identified form, and do not attempt to re-identify the information.

2. Sources of Consumer Health Data.

We collect Personal Information from the sources described in Section III (How does DoorDash collect or receive Personal Information) of this Policy, which may include collecting Consumer Health Data from the following sources:

From your use of our Services: We may receive Consumer Health Data about you or someone you are purchasing for when you place an order through our Services (e.g., consumer platform(s)) that identifies Consumer Health Data and in connection with your interactions with our Services.
From a DoorDash Account Holder acting on your behalf: We may receive Consumer Health Data about you when a DoorDash account holder uses our Services to place an order on your behalf, although we may not know that this information is associated with you.
From you when you communicate with us: We may receive Consumer Health Data about you when you submit it to us or communicate with us, such as when you submit or make a customer support inquiry, request, or communication.

3. Purposes for the Collection and Use of Consumer Health Data.

We use your Personal Information as described in Section IV (How does DoorDash use Personal Information) of this Policy and Consumer Health Data may be used:

To Provide DoorDash Services, including, without limitation, allowing you to place and pay for orders, facilitating the orders you place on or through our Services (which includes communicating Consumer Health Data to Merchants and Dashers), and making recommendations or offers to you on our Services.
To Provide Customer Support, including by or in connection with exchanging communications, investigating, analyzing, and remediating support issues, evaluating our customer support and making improvements, and ensuring that support issues are handled in accordance with our internal standards, processes, and requirements and according to applicable law.
To Develop, Analyze, and Improve our Services, including debugging or troubleshooting our Services, understanding how you and other customers use our Services and your preferences, improving the Services, and developing new Services or initiatives to provide our users with the best experience possible.
For Integrity, Security, Quality and Safety, including to detect, investigate, and prevent malicious or illegal conduct, bugs, malware, fraudulent activity, illegal or unsafe experiences, and any other actions we deem necessary to protect your safety and security as well as that of other people, property, and businesses, and to secure our Services.
For Legal Reasons and Policy Compliance, including to comply with our obligations under applicable law and to respond to valid legal process (e.g., requests or orders from law enforcement, courts, regulators and other government agencies), to investigate or participate in civil discovery, litigation, or other adversarial legal proceedings, to enforce or investigate potential or actual violations of our terms, policies or other legal agreements, to investigate, monitor or mitigate any actual or alleged illegal activities in connection with our Services, to perform audits and assessments, and to enable you to exercise your rights as legally required.

4. Our Sharing of Consumer Health Data.

We may share your Personal Information as described in Section V (DoorDash’s disclosure of Personal Information) of this Policy and we may share your Consumer Health Data as follows:

To Dashers: We may disclose Consumer Health Data to Dashers in connection with facilitating the delivery of orders, which may include your name (such as first name and last initial), delivery address, order information (which may include information on products purchased) and user instructions (e.g., special and/or delivery instructions).
To Merchants: We may disclose Consumer Health Data to Merchants in connection with your order from or in connection with the Services, such as your name (such as first name and last initial or first and last names), delivery address (depending upon whether the Merchant is providing the delivery) and order information (including, but not limited to, products purchased, allergies, special instructions and/or other delivery instructions).
To Service Providers: We may disclose Consumer Health Data to our service providers for business needs and to perform our Services, which includes, without limitation, disclosing data to providers of cloud and IT services, payment-related services, communication services, customer support services, safety, fraud and security services, and auditing services.
To DoorDash’s Group of Companies: We may disclose Consumer Health Data to our corporate subsidiaries and affiliates in connection with our Services and business activities.
To Government Authorities or where Legally Required or Permitted: We and our service providers (including domestic and foreign service providers) may share your Consumer Health Data, including products purchased through our consumer platform(s), with third parties such as government authorities, industry peers, or other third parties if legally required or permitted, or as necessary to enforce our agreements, prevent fraud, or protect the rights, property, or safety of our business, employees, merchants, Dashers, customers, or other persons or parties. These disclosures may include lawful access by US or foreign courts, law enforcement, or other government authorities.
For Actual or Potential Corporate Transactions: If we are involved in strategic transactions including any sale, merger, acquisition, joint venture, assignment, transfer, reorganization, bankruptcy or receivership, we may disclose your Consumer Health Data and other information in the diligence process with counterparties and others assisting with the transaction and transferred to a successor or affiliate as part of that transaction along with other assets.
Other Third Parties or Persons: We may disclose or provide your Consumer Health Data to other third parties or persons, such as with your consent or at your direction, including, without limitation, in connection with you linking accounts with third parties to your account with us.

5. Your Privacy Rights

Rights:

DoorDash will not discriminate against you for exercising any of your applicable rights. Subject to certain exceptions, exemptions and restrictions, you may have the privacy rights provided in Section VI (Your Privacy Rights and Choices) of this Policy. Those rights include, without limitation, the following:

Access: You may have the right to request access to your Consumer Health Data and receive it in a portable and machine-readable format.
Deletion: You may have the right to ask us to delete your Consumer Health Data.
Right to Withdraw Consent: You have the right to withdraw consent to any collection or sharing of Consumer Health Data.

Exercising Rights:

If you have a DoorDash account, you can exercise certain of your rights directly through your account (e.g., access, deletion, and correction).

If you have questions on how to exercise your rights, or if you do not have an account or are unable to exercise an applicable right through your account, please contact us at privacy@doordash.com. We will provide a timely response in accordance with applicable law. You also may contact us at our toll-free number (855) 973-1040 to exercise an applicable right. When contacting us, please provide your first and last names, email address, and address of residency, identify the right(s) that you wish to exercise and identify whether you are a consumer, non-user or in another category or grouping.

If your rights request is denied, you may appeal that decision by contacting us as described above. If the appeal is unsuccessful, and you are a resident of the State of Washington, you can raise a concern or lodge a complaint with the Washington State Attorney General at https://www.atg.wa.gov/file-complaint.

2. Canada.

a. Privacy Governance Policies and Practices.

We are committed to protecting your Personal Information and have implemented policies and practices that govern our treatment of Personal Information, including:

Designated roles and responsibilities in connection with handling Personal Information in our custody and control;
Policies and procedures regarding the protection of Personal Information, including safeguards designed to protect Personal Information against loss or theft and unauthorized access, disclosure, copying, use, and modification;
Processes for responding to data subject requests and complaints;
A framework for the retention and disposition of information designed to ensure compliance with our legal obligations.

In addition, we have designated our Canadian Privacy Officer as being responsible for overseeing our compliance with applicable privacy laws, and we provide our employees with privacy training and awareness.

b. Canadian Privacy Officer.

If you have any questions or concerns relating to this Policy or our privacy and security practices, including the manner in which we and/or our service providers (including service providers outside of Canada and if you are living in the Province of Quebec, outside of Quebec) collect, treat, process and disclose your personal information, or the scope of any consents requested by DoorDash, please contact our Canadian Privacy Officer using the contact information in Section XII of this Policy.

3. Australia. If you make a complaint, we will endeavor to respond to it as soon as possible. If you are dissatisfied with our response, you may have the right to make a complaint to the Office of the Australian Information Commissioner by phoning 1300 363 992 or by email at enquiries@oaic.gov.au.

4. New Zealand. If you make a complaint, we will endeavor to respond to it as soon as possible. If you are dissatisfied with our response, you may have the right to make a complaint to the Office of the Privacy Commissioner by visiting https://www.privacy.org.nz/your-rights/making-a-complaint/.

VIII. Security and Retention.

We use commercially reasonable administrative, organizational, technical and physical security controls to protect your Personal Information from unauthorized access, modification, disclosure, or destruction. However, we are not able to guarantee that your Personal Information is absolutely secure, since no Internet or email transmission is ever fully secure or error free. You should take special care in deciding what information you send to us via our Services or when you communicate with us through email, SMS/texts, chat, or other modes of communication. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on our Services or those on third-party websites. Please recognize that protecting your Personal Information is also your responsibility and we urge you to take precautions to protect your Personal Information. If you have reason to believe that your DoorDash account or any interaction with us is no longer secure please let us know immediately by contacting DoorDash support or as indicated below in Section XII (How to Contact Us) of this Policy.

We retain your Personal Information for only as long as required to provide our Services to you and engage in the uses described in this Policy, unless a different retention period is required by applicable law.

The criteria used to determine our retention periods include the type of Personal Information being processed, along with:

The time necessary to fulfill the purposes for which we collected the information;
The duration and status of your relationship or connection with us, including whether your account is active;
Any retention period required for our compliance with legal, regulatory, or government requirements, including the period during which civil claims or regulatory actions may be filed or otherwise commenced and the period needed to resolve ongoing legal proceedings; and
Our internal obligations, contractual commitments, including with Merchants, and other requirements.

IX. Cross-Border Transfers of Personal Information.

The Personal Information processed in connection with this Policy, including, without limitation, by us and/or our third-party service providers, may be stored and processed on systems and servers and accessed by persons and parties, located outside of the jurisdiction where you live (including, without limitation, outside of Australia, Canada (including outside of the province in which you live), New Zealand and the United States), including storing, accessing, and processing the Personal Information in the United States and other global locations whose data protection laws may differ from those where you live.

X. Personal Information from Children.

Our Services are not intended for individuals under the age of majority in the applicable jurisdictions, which includes for clarification, that our Services are not intended for individuals under the age of 18. Therefore, we do not knowingly process Personal Information from individuals under 18 years old. For clarification, for compliance with the California Consumer Privacy Act of 2018 (as amended), DoorDash also does not have knowledge that it sells or shares the Personal Information of consumers under 16 years of age. For clarification, we do not knowingly collect Personal Information of or about individuals living in the Province of Quebec, Canada who are under the age of 14. If a parent or legal guardian of a child under the applicable legal age believes that we have collected Personal Information from or about such an individual, please contact us at privacy@doordash.com.

XI. Third-Party Sites.

Our Services may link to other third-party websites that are not controlled by DoorDash, such as when you sign up for a loyalty card on a Merchant’s website. These third parties are not under our control and we are not responsible for their privacy policies or practices. If you provide any Personal Information to any third party or through any such third-party websites, it will be subject to the privacy policies and practices of that third party.

XII. How to Contact Us.

For questions or concerns related to this Policy, please contact us at privacy@doordash.com or:

DoorDash, Inc.

Attn: Legal

303 2nd St, Suite 800

San Francisco, CA 94107

Help Form: https://help.doordash.com/consumers/s/contactsupport

XIII. Changes to this Privacy Policy.

We may update this Policy periodically to account for changes in how we collect and process your Personal Information. Any updates to this Policy will be posted on our website with a revised “Last Updated” date at the top, and we will provide additional notice in the event of any significant changes in how we use your Personal Information. Your continued use of our Services after any updates to this Policy constitutes your agreement and acceptance of this Policy as updated.

We at Lovely’s use a 3rd party delivery service for order for 50 or more miles.

Overview

We at United Parcel Service, Inc., along with our subsidiaries and affiliates (collectively, “UPS”), respect your concerns about privacy.

This Privacy Notice describes the types of personal information we collect about consumers, how we may use the information and with whom we may share it. The notice also describes the measures we take to safeguard the personal information. In addition, we tell you how you can ask us to (i) access or change the personal information we maintain about you, (ii) withdraw consent you previously provided to us, (iii) refrain from sending you certain communications, and (iv) answer questions you may have about our privacy practices.

This Privacy Notice is not a contract and does not create any contractual rights or obligations.

This notice does not apply to The UPS Store or any other retail location. This Notice does not apply to any subsidiary or affiliate of United Parcel Service, Inc. that maintains its own privacy notice, including The UPS Store or any other retail location.

Our privacy practices may vary among the countries or territories in which we operate to reflect local practices and legal requirements.

You can view certain country-specific information by selecting the Addendum link below.

Privacy Notice Addendum

Information We Obtain

We may obtain consumer personal information (such as name, contact details and payment information) in connection with various activities such as (i) use of the UPS websites and applications, (ii) shipping activities, including delivery and pick-up of shipments, (iii) requests to track shipments or answer questions, (iv) events in which we participate, (v) promotions and other offers, and (vi) calls placed or web-based chats with customer service and accounting centers which may be recorded.

The types of personal information we may obtain include:

Individual and business contact information (such as name, company name, physical address, email address and telephone or fax number)
Shipping information (such as (i) shipping-related contact details like the sender’s, and consignee’s and/or neighbor’s (for UPS My Choice’s “leave with neighbor” feature) name, physical address, email address and telephone number, (ii) signature for proof of delivery, (iii) UPS account number, and (iv) information given to us that helps us access locations to which we provide service) and information provided to us regarding the content of certain shipments, but only to the extent an identifiable person can be linked to such content.
Information that enables us to verify an individual’s identity
Names, email addresses and telephone numbers of others to whom we are asked to send information
Information provided in response to surveys
Username, password and other credentials used to access UPS products and services
Social media handles, content and other data posted on our official social media pages or elsewhere on the Internet (such as other public locations), and information (such as email address and other information you allow to be shared) we obtain through UPS-related social media apps, tools, widgets and plug-ins (including third-party login services such as “Login with Facebook”)
The geographic location of your mobile device if you use certain features of our apps
Payment information (including payment card details or online payment services number and invoicing address) and financial information (such as bank account numbers)
Tax identification number in circumstances in which you request products or services for which this information is required, or in connection with certain promotions or prize draws
Other personal information that may be provided to us to obtain a UPS product or service

We also receive consumer personal information from our customers in order to perform services. We may receive personal information from third parties, including public databases, social media platforms, or third party partners such as analytics or marketing providers.

When we pick up or deliver a shipment or provide other services, we may obtain physical location data. This includes, for example, data identifying the actual location of a physical address using information such as GPS data, geocodes, latitude and longitude information, and images of the various locations.

In addition, when you visit our websites, use our chatbot, use our apps, or interact with UPS-related tools, widgets or plug-ins, we may collect certain information by automated means, such as cookies and web beacons. The information we collect in this manner includes IP address, unique device identifier, browser characteristics, device characteristics, operating system, language preferences, referring URLs, information on actions taken, and dates and times of activity. A “cookie” is a text file that websites send to a visitor’s computer or other Internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser. A “web beacon” also known as an Internet tag, pixel tag or clear GIF, links web pages or apps to web servers and may be used to transmit information back to a web server. Through these automated collection methods, we obtain and store “clickstream” data to tell us usage patterns. We may link certain data elements we have collected through automated means, such as your browser information, with other information we have obtained about you to let us know, for example, whether you have opened an email we sent to you. We also use third-party analytics tools that collect information about visitor traffic on our websites or apps. Your browser may tell you how to be notified when you receive certain types of cookies or how to restrict or disable certain types of cookies. Please note, however, that without cookies you may not be able to use all the features of our websites or apps. Both we and others (such as our advertising networks) may collect personal information about our visitors’ online activities, over time and across third-party websites, when using our websites and apps.

We collect session analytics information, including browsing behavior, click patterns, keystrokes, and pages visited, when you visit our websites and applications. We and our third-party service provider may also collect, record, and analyze interactions with the chat feature of our website and application. This information helps us understand our customers’ online activities, determine usage patterns, provide customer service and support, and improve and impair website functionality. This information is also helpful to our experience teams so they can design better experiences for you.

The providers of third-party apps, tools, widgets and plug-ins on our websites and apps, such as Facebook “Like” button, also may use automated means to collect information regarding your interactions with these features. This information is subject to the privacy policies or notices of these providers.

How We Use The Information We Obtain

We may use the information we obtain to:

Pick up, deliver and track shipments
Provide products and services you request (such as logistics, supply chain management, customs clearance and brokerage services, and financial services)
Process and collect payments
Provide customer support and respond to and communicate with you about your requests, questions and comments
Send you tracking updates (from UPS and/or our business partners) and help you select convenient delivery options
Establish and manage your UPS account (including your online account on UPS.com and its various features, such as the address book and the UPS Billing Center)
Offer you products and services we believe may interest you
Communicate about, and administer your participation in, special events, programmers, surveys, contests, prize draws and other offers or promotions
Enable you to post on our blogs and interact with UPS through social media
Send information to your contacts if you ask us to do so
Process claims we receive in connection with our services
Operate, evaluate and improve our business (including developing new products and services; managing our communications; determining the effectiveness of our sales, marketing and advertising; analyzing and enhancing our products, services, websites and apps; ensuring the security of our networks and information systems; performing accounting, auditing, invoicing, reconciliation and collection activities; and improving and maintaining the quality of our customer services)
Perform data analyses (including market and consumer search and analytics, trend analysis and profiling, financial analysis and anonymization of personal information)
Protect against, identify and prevent fraud and other prohibited or illegal activity, claims and other liabilities
Comply with applicable legal requirements and our policies
Establish, exercise and defend legal claims
Monitor and report compliance issues

In addition, we use information collected online through cookies, web beacons and other automated means for purposes such as (i) customizing our users’ visits to our websites and apps, (ii) delivering content (including advertising) tailored to our users’ interests and the manner in which our users browse our websites and apps, (iii) improving website functionality and user experience, (iv) debugging, identifying, and repairing errors that impair the intended functionality of our websites, (v) providing customer service and support, and (vi) managing our business. We may supplement data we collect through automated means with information about your location (such as your postcode) to provide you with content that may be of interest to you. We also use this information to help diagnose technical and service problems, administer our websites and apps, identify users of our websites and apps, and gather demographic information about our users. We use clickstream data to determine usage patterns and how we may tailor our websites and apps to better meet the needs of our users. Our websites and apps are not designed to respond to “do not track” requests from browsers.

Interest-Based Advertising

On our websites and apps, we may collect information about your online activities for use in providing you with advertising about products and services tailored to your individual interests. This section of our Privacy Notice provides details and explains how to exercise your choices.

You may see certain ads on other websites because we participate in advertising networks. Ad networks allow us to target our messaging to users through demographic, interest-based and contextual means. These networks track your online activities over time by collecting information through automated means, including through the use of cookies, web server logs and web beacons. The networks use this information to show you advertisements that may be tailored to your individual interests. The information our ad networks may collect includes information about your visits to websites that participate in the relevant advertising networks, such as the pages or advertisements you view and the actions you take on the websites. This data collection takes place both on our websites and on third-party websites that participate in the ad networks. This process also helps us track the effectiveness of our marketing efforts. To learn how to opt out of this ad network interest-based advertising, select here.

Information We Share

We do not sell or otherwise share personal information about you, except as described in this Privacy Notice. To perform our pick-up and delivery services, we share shipping information with third parties such as shippers, consignees, third party payers and recipients. We also share personal information with third parties who perform services on our behalf based on our instructions, including third-party software providers that support our web-based chats. These third parties are not authorized by us to use or disclose the information except as necessary to perform services on our behalf or comply with legal requirements.

We also may share the personal information we obtain with our affiliates, franchisees, resellers and joint marketing partners. These entities, which collectively are referred to here as the “UPS Business Partners”, may use the information for the purposes described in this Privacy Notice. We may share physical location data with our UPS Business Partners and other third parties to, for example, enhance location-based services and develop accurate and up-to-date maps. In addition, except as described below, unless you object, we may share other personal information with third parties who are not UPS Business Partners for those parties’ own purposes, such as to offer products or services that may interest you.

Information collected through third-party apps, tools, widgets and plug-ins (such as information obtained through third-party login services or relating to your use of a Facebook “Like” button) is collected directly by the providers of these features. This information is subject to the privacy policies of the providers of the features, and UPS is not responsible for those providers’ information practices.

Many of our customers outsource all or a part of their supply chains to us. Through our forwarding and logistics business units, we manage these supply chains, focusing on supply chain optimization, freight forwarding and international trade and brokerage services for our customers worldwide (including a broad range of transportation solutions such as air, ocean and ground freight). We also provide information technology systems and distribution facilities adapted to the unique supply chains of specific industries such as health care, technology and consumer/retail businesses. In the course of providing forwarding and logistics services, we may obtain, use and disclose personal information about our customers’ customers. In these circumstances, we process the information based on the agreement with our customer.

We also may disclose information about you (i) if we are required to do so by law, regulation or legal process (such as a court order or subpoena), (ii) in response to requests by government agencies, such as law enforcement authorities, or (iii) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss or in connection with an investigation of suspected or actual illegal activity. We reserve the right to transfer any information we have about you in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganization, dissolution or liquidation).

Access and Correction

Subject to applicable law, (i) you may obtain a copy of certain personal information we maintain about you or update or correct inaccuracies in that information through your ups.com account on UPS.com or (ii) you may have the right to obtain access to personal information we maintain about you by contacting us as indicated in the “How To Contact Us” section of this Privacy Notice. To help protect your privacy and maintain security, we will take steps to verify your identity and/or may ask you to provide other details before granting you access to the information. In addition, if you believe that personal information we maintain about you is inaccurate, subject to applicable law, you may have the right to request that we correct or amend the information by contacting us as indicated below.

Data Transfers

We may transfer the personal information we collect about you to countries other than the country in which the information originally was collected. Those countries may not have the same data protection laws as the country in which you initially provided the information.

When we transfer your personal information to other countries, we will protect that information as described in this Privacy Notice and in accordance with applicable law. We use contractual protections for the transfer of personal information among various jurisdictions (including, for example, the European Commission’s standard contractual clauses).

Children’s Privacy

We do not knowingly collect personal information through our websites or apps from persons under the age of 13. If you believe anyone under age 13 has provided personal information to us, please contact us as indicated in the “How to Contact Us” section of this Privacy Notice and we will work to delete it.

How We Protect Personal Information

We maintain administrative, technical and physical safeguards designed to protect the personal information you provide against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. Although we take steps to limit access to our facilities and vehicles to authorized individuals, information that is located on the outside of a package or letter may be visible to others.

Additional Notice of U.S. State-Specific Privacy Information and Rights

This Addendum applies to consumers who resided in U.S. States that have enacted comprehensive consumer data privacy laws.

Personal Information We Collect about Consumers

We describe the personal information we have collected about consumers in the twelve (12) months preceding the effective date of the UPS Privacy Notice in the part titled, “Information We Obtain.” The information we have obtained includes the following:

Identifiers such as name, physical address, email address, username, password and other credentials used to access UPS products and services, social media handles, and, when you visit our websites, use our apps or interact with UPS-related tools, widgets or plug-ins, Internet Protocol address and unique device identifier.
The following personal information described in California Civil Code § 1798.80(e): (1) the personal information listed in the preceding bullet point as “identifiers,” (2) signature, (3) telephone number, (4) payment information (including payment card details or online payment services number and invoicing address) and financial information (such as bank account numbers), and (5) the other information that identifies, relates to, describes, or is capable of being associated with, a particular individual that we describe in “Information We Obtain.”
Commercial information, including (1) records of services purchased or received from UPS, (2) information provided to us regarding the content of certain shipments, but only to the extent an identifiable person can be linked to such content, (3) information on actions taken on UPS websites or mobile apps, which may include information about UPS services considered, and (4) information about consumer preferences and behavior that we collect on our websites and mobile apps or purchase from third parties in order to target consumers for digital advertisements or to personalize content we deliver on our websites and mobile apps.
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with UPS websites and mobile apps, and UPS advertisements that we display on UPS websites or mobile apps or on third party sites and apps.
Geolocation data.
Audio information from calls placed with customer service and accounting centers which may be recorded, and electronic information in the form of Internet or other electronic network activity information as described above.
Professional or employment-related information in the form of business contact information such as name, company name, physical address and email address and telephone or fax number.
Inferences drawn from (1) the information we collect when you visit our websites, use our apps, or interact with UPS-related tools, widgets or plug-ins or our official social media pages, (2) information we collect, including through third-party suppliers, regarding content and other data posted on the Internet (such as public locations on the Internet), and (3) information about consumer preferences and behavior that we collect on our websites and mobile apps or purchase from third parties in order to create a profile about a consumer reflecting the consumer’s preferences, characteristics, predispositions, behavior, and attitudes.
Sensitive personal information such as account login information allowing access to an account, and precise geolocation data, in each case as further described above in the relevant categories.

We collect this personal information from sources including yourself directly and others (e.g., ecommerce retailers) whom you instruct to interact with us on your behalf, shippers, consignees and other customers, including customers of our forwarding and logistics services, public databases, social networks, and third party partners such as analytics or marketing providers. For more information, please see “Information We Obtain” in the UPS Privacy Notice.

Disclosures of Personal Information for Monetary or Other Valuable Consideration or for Business Purposes

We have disclosed email addresses of certain customers of UPS for monetary or other valuable consideration within the twelve (12) months preceding the effective date of the UPS Privacy Notice to customers who purchase shipping services from UPS and business partners who support UPS transportation operations, such as business partners at which UPS has located Access Point^® lockers. As is common practice among businesses that operate Internet Web sites, we may also have disclosed certain identifiers, information about the use of our websites and apps, and inferences drawn about you to our social media, advertising, and analytics partners for monetary or other valuable consideration. These disclosures may qualify as “sales” of personal information for consideration, sharing of personal information for cross-context behavioral advertising, or processing of personal information for targeted advertising under U.S. state comprehensive data privacy laws.

We have disclosed personal information in all or substantially all of the categories identified in this Addendum for various business purposes. For more information about the categories of personal information we have disclosed, the categories of entities with which we have disclosed this information and the purposes for which we have disclosed the information, please see “Information We Share” in the UPS Privacy Notice.

We do not disclose personal information of individuals we know to be under the age of 16 to businesses or third parties for monetary or other valuable consideration as a “sale” of personal information, for cross-context behavioral advertising, or as the “sharing” of personal information as defined under U.S. state comprehensive data privacy laws.

Use of Personal Information about Consumers

We use the personal information we collect about consumers for the business purposes disclosed within the UPS Privacy Notice. For more information, please see “How We Use the Information We Obtain” in the UPS Privacy Notice.

The business purposes for which we may use personal information about consumers include:

Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards;
Helping to ensure security and integrity to the extent the use of a consumer’s personal information is reasonably necessary and proportionate for these purposes;
Debugging to identify and repair errors in our systems and on our websites and apps;
Short-term, transient use including non-personalized advertising shown as part of a consumer’s current interaction with us;
Providing services on our behalf or on behalf of another, including maintaining or servicing accounts, providing customer service, fulfilling transactions, verifying identity information, processing payments, and other services. This includes:
- Conducting internal research to develop and demonstrate technology; and
- Conducting activity to verify, enhance, and maintain the quality or safety of services or devices which we may own, control, or provide.

We may also use the information we collect for our own or our service providers’ other operational purposes, purposes for which we provide you additional notice, purposes disclosed elsewhere in this Addendum or the UPS Privacy Notice, or for purposes compatible with the context in which the personal information was collected.

UPS does not use sensitive personal information for purposes that would give rise to a right to limit the use or disclosure of sensitive personal information for residents of California. We only use sensitive personal information as described above to perform services reasonably expected by an average consumer who requests those services; to prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted personal information; to resist malicious, deceptive, fraudulent, or illegal actions directed at us and to prosecute those responsible for those actions; for short-term, transient use; to perform services on our behalf; or to conduct activity to verify, enhance, and maintain the quality or safety of services or devices which we may own, control, or provide.

Your Privacy Rights

If you reside in a U.S. state that has enacted a comprehensive consumer data privacy law, you may have one or more of the following rights. We will honor requests received to the extent required by applicable law and within the time provided by law.

Right to Know. You have the right to request that we disclose to you the categories and specific pieces of personal information we have collected about you. Specifically, you have the right to request that we disclose what personal information we have collected, used, disclosed, including:
- Whether we are processing personal information about you;
- Specific pieces of information that we have collected about you;
- Categories of personal information we have collected about you;
- Categories of sources from which the personal information is collected;
- Categories of third parties to whom we disclose personal information;
- The business or commercial purpose for collecting, selling, or sharing personal information
- Categories of personal information about you, if any, that we have sold or shared and the categories of third parties to whom we have sold or shared the information, by category or categories of personal information for each category of third party to whom we sold or shared the personal information; and
- Categories of personal information about you that we disclosed for a business purpose and the categories of recipients to whom we disclosed the information for a business purpose.

As used above, “sale,” “sold,” “selling,” “shared,” and “sharing” have the meanings provided in U.S. state comprehensive consumer data privacy laws.

Right to Correct. You have the right to request that we correct inaccurate personal information that we have collected about you.
Right to Delete. You have the right to request that we delete personal information that we have collected about you. Please note if you have requested a service that requires the use of your personal information, we may not be able to provide that service if you choose to delete your personal information.
Right to Opt Out. You have the right to opt out of the disclosure of personal information about you for monetary or other valuable consideration, the sharing of personal information about you for cross-context behavioral advertising, and targeted advertising. To opt-out, click here or as provided below under “Requests to Exercise Your Rights.”

If we receive and are able to process a signal from your device indicating your preference to opt out from sales or sharing of personal information, as defined by law, then we will apply that preference to personal information we collect from that device, provided that we may not be able to associate the signal to the same device if:

you use a different web browser or other tool to interact with us,
you make changes to your browser (e.g., uninstall and reinstall or certain types of upgrades) that impact our ability to associate the device with the signal your device originally sent, or
you clear cookies or browsing data from your browser or device in a way that impacts our ability to associate the device with the signal your device originally sent.

You can learn how to set up and use an opt-out preference signal by visiting the California Attorney General’s “California Consumer Privacy Act (CCPA)” page or the California Privacy Protection Agency’s “Frequently Asked Questions (FAQs)” page.

Please note that a signal sent from one device may not apply to other devices you use or to data that we collect from you through other sources.

We do not process your personal information for profiling in furtherance of “decisions that produce legal or similarly significant effects” as such term is defined under applicable law.

Right to Appeal. If we decline to take action on a request that you make in accordance with the foregoing to exercise the foregoing privacy rights, then you may appeal our decision by submitting an appeals request through the Privacy Webform.

Verification Process

For requests made in connection with the Right to Know, Right to Correct, and/or Right to Delete, please note:

as required or permitted under applicable law, we may take steps to verify your request before we can provide personal information to you, correct or delete personal information, or otherwise process your request. To verify your request, we may require you to provide your name, physical address, email address, contact information, and information about your account or previous transactions with us. If we believe we need further information to verify your request as required by law, we may ask you to provide additional information to us.
We will process your request in the manner required by law within 45 days after receipt of a request, unless we notify you that we require additional time to respond, in which case we will respond within such additional period of time required by law. We may deliver the personal information to you through your account, if you maintain an account with UPS, or electronically or by mail at your option. If electronically, then we will deliver the information to you or, at your request, to another entity, in a portable and, to the extent technically feasible, in a structured, commonly used, machine-readable format that allows you to transmit the information from one entity to another without hindrance.

Nondiscrimination

We may not discriminate against you because of your exercise of any of the foregoing privacy rights, or any other rights under your U.S. state’s comprehensive consumer data privacy law, including by:

Denying you goods or services;
Charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;
Providing you a different level or quality of goods or services; or
Suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

We may, however, charge different prices or rates, or provide a different level or quality of goods or services, if that difference is reasonably related to the value provided to UPS by your personal information. We may limit our response to your exercise of rights as permitted by law.

Requests to Exercise Your Rights

You may request to exercise the foregoing rights by:

-Submitting a request through the UPS Privacy Webform.

-Calling us toll-free at 888-912-9055.

Agent Authorization

You may designate an authorized agent to request any of the above rights on your behalf. You may make such a designation by providing the agent with written permission, signed by you, to act on your behalf. Your agent may contact us via the information provided in the “How to Contact Us” section below to make a request on your behalf. Even if you choose to use an agent, we may, as permitted by law, require:

The authorized agent to provide proof that you provided signed permission to the authorized agent to submit the request
You to verify your identity directly with us; or
You to directly confirm with us that you provided the authorized agent permission to submit the request.

Data Sharing for Direct Marketing Purposes (California)

California Civil Code Section § 1798.83 permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. If you are a California resident, you may ask us to refrain from sharing your personal information with certain of our affiliates and other third parties for their marketing purposes. Please tell us your preference by contacting us as specified below. To make such a request, please tell us your preference by contacting us as specified in the “How to Contact Us” section below.

Metrics Regarding Privacy Requests (California)

Please see the chart below for metrics relating to our handling of California rights requests in the period from January 1, 2023, to December 31, 2023.

Type of Request	Number of Requests Received	Number of Requests Complied With (in whole or in part)	Number of Requests Denied	Mean Days to Substantive Response
Requests to Know	16	2	14	15
Requests to Delete	80	66	14	16
Requests to Correct	16	2	14	15
Requests to Opt-Out	1579	1579	0	1

Data Retention

Your personal information will not be stored for longer than necessary for the purposes for which they were collected or as required under applicable retention policies and/or in accordance with applicable law. Our retention policies reflect local statute of limitation periods and national statutory obligations of UPS.

Updates To Our Privacy Notice

This Privacy Notice may be updated periodically and without prior notice to you to reflect changes in our personal information practices. We will post a prominent notice on our websites to notify you of any significant changes to our Privacy Notice and indicate at the top of the notice when it was most recently updated.

How To Contact Us

If you have any questions or comments about this Addendum, please contact us by email using the UPS Privacy Webform.

You also may write to us at:

UPS Corporate Headquarters
Attention: Global Privacy Manager
55 Glenlake Parkway, NE
Atlanta, GA 30328
United States

UPS: Privacy Notice – EEA Addendum

If you are a resident of the European Economic Area (“EEA”), the following additional EEA-specific provisions apply to our processing of your personal information. For EEA residents, the provisions of this EEA Addendum prevail over conflicting provisions in the Privacy Notice.

Relevant Data Controller
In addition to United Parcel Service, Inc., our subsidiaries and affiliates located in the EEA collect personal information.

The relevant data controller for your personal information is the UPS entity listed for the country you reside in according to the following list:

UPS Data Controllers

Information We Obtain
We process names, email addresses and telephone numbers of others to whom we are asked to send information on the assumption that the person who provided the information obtained it in accordance with applicable law. If this assumption is incorrect, please do not ask us to send information to third parties on your behalf.

We may need certain of your information in order to provide services, such as street addresses to deliver packages, or to use our website or our apps, such as your IP address. In addition, we may be required by law to collect certain information, such as whether a package contains hazardous materials. Where such information is so required, we may be unable to provide you with our services unless you provide us with this information.

In accordance with applicable law, we may obtain your consent separately before collecting information by automated means using cookies or similar devices. To learn more about the cookies and similar devices we use, please see our Cookies Policy.

How We Use The Information We Obtain
The legal bases for which we collect, use, transfer or disclose your personal information include (i) the performance of the contract we have with you, (ii) marketing, improvement of our services and other legitimate business interests, (iii) compliance with a legal obligation, and (iv) the protection of yours and others vital interests. The corresponding purposes for which we process your personal information are systematically included in the “How We Use the Information We Obtain” section in the Privacy Notice above.

We may process your personal information based on your consent, where required by law. If we request your consent, we will inform you of the intended purposes for which your information will be processed. Please note that if you choose to withdraw your consent, you may not be able to participate in or benefit from our programs, services and initiatives for which you provided consent. We also may use the information we obtain about you in other ways for which we provide specific notice at the time of collection.

Data Retention
Your personal information will not be stored for longer than necessary for the purposes for which they were collected or as required under applicable retention policies and/or in accordance with applicable law. Our retention policies reflect local statute of limitation periods and national statutory obligations of UPS.

International Data Transfers
If you are a resident of the European Economic Area, we may transfer your personal information to countries that have not been found by the European Commission to provide adequate protection, including the United States. For any such transfers, UPS takes necessary contractual measures to ensure that your personal information receives an adequate level of protection (including, for example, standard contractual clauses). For further information about UPS’s international data transfer practices, and to consult the said contractual measures, please contact us using the contact details in the “How to Contact Us” section above.

Your Personal Information Rights
In addition to the right to access and correction, as specified above (under “Access and Correction” in the main body of this Notice), you have (i) the right to request the transmission of the personal information you have provided to us to you or another company, (ii) the right to object to any uses or disclosures of your personal information, (iii) the right to withdraw your consent in relation to our processing of your personal information based on your consent, (iv) the right to request deletion of your personal information and (iv) the right to request that we restrict processing of your personal information.

You may exercise these rights free of charge unless the request is unfounded, excessive, or otherwise unreasonable, for instance because it is repetitive. In some situations, we may refuse to act or may impose limitations on your rights, as permitted by law. Before UPS is able to provide you with any information or correct any inaccuracies, we may ask you to verify your identity and/or provide other details to help us respond to your request. For the exercise of your rights, please contact us using the contact information provided above in the “How to Contact Us” section. In all cases, you have a right to file a complaint with a Data Protection Authority.

Shipping Policy