DoorDash Privacy Policy

This document is DoorDash's Consumer Privacy Policy, last updated July 1, 2025, governing the collection, processing, retention, and disclosure of personal information in connection with DoorDash's consumer-facing platforms, websites, mobile applications, and communication channels. The policy states that DoorDash collects contact information, account and profile data, government-issued identification, payment information, geolocation data, device identifiers, transaction and activity history, and communications content; the terms authorize disclosure of this information to service providers, Dashers, merchants, business partners, advertising networks, and government or law enforcement authorities. The policy asserts the authority to share personal information with advertising, analytics, and marketing partners for ad personalization on third-party platforms, and discloses use of session replay technology to capture user interactions; the policy also states that personal information may be processed outside the user's jurisdiction, including outside Australia, Canada, New Zealand, and the United States, without specifying transfer safeguard mechanisms in detail. The policy engages the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), Virginia Consumer Data Protection Act (CDPA), Colorado Privacy Act, Connecticut Data Privacy Act, and analogous state privacy frameworks, as well as Canadian privacy law (including Quebec Law 25), Australian Privacy Act, and New Zealand Privacy Act; where applicability depends on jurisdiction, specific consumer rights such as opt-out of data sale or sharing, deletion, and correction are conditioned on residency and the operative state or national law.